适用于再生编码分布式存储的轻量型隐私保护审计方案

doi:10.11959/j.issn.1000-436x.2021116

Abstract

Abstract:

To reduce the security implementation cost of the outsourcing data audit mechanism for the regenerating-coding-based distributed storage systems, an orthogonal algebraic coding method was put forward to construct a lightweight privacy-preserving audit scheme based on linear homomorphic authentication.The homomorphic authentication tags were generated with the orthogonalization between the file encoded data and the private secret key vector, and the privacy protection of the auditing response message was achieved by using the random masking that was constructed by randomizing the orthogonal basis vectors of the specific sub-vector of the user’s secret key.The work realized the effective integration of algebraic coding, privacy protection, and security auditing.Theoretical analysis shows that the proposed scheme can realize the information-theoretic security in the regenerating-coding-based storage applications.Compared with the existing works, the proposed scheme is of low computational complexity and communication overhead, and better performance advantages.

Key words: data auditing, privacy protection, regenerating code, network coding, distributed storage

CLC Number:

TP309

Guangjun LIU, Wangmei GUO, Jinbo XIONG, Ximeng LIU, Changyu DONG. Lightweight privacy protection data auditing scheme for regenerating-coding-based distributed storage[J]. Journal on Communications, 2021, 42(7): 220-230.

Figures/Tables 7

参数	含义
m	用户文件数据向量的个数
n	用户文件数据向量的长度
$\tilde{n}$	系统中存储节点的个数
σ	用户文件在每个存储节点存储的消息向量个数
k	成功恢复文件时需要协作的存储节点最少个数
$y_{s j}$	$ℕ_{s}$ 中存储的第j个消息向量
$g_{y_{s j}}$	$y_{s j}$ 的随机编码向量
$κ_{e}$	用户与CSP的共享临时密钥
id, wid	外包存储文件和当前审计任务的唯一标识符
$\tilde{r}$	存储节点持有的密钥向量（长度为m+n+1）
$\bar{r}$	$\tilde{r}$ 的前n个元素组成的向量
$r$	$\tilde{r}$ 的前n+m个元素组成的向量
${\bar{p}}_{i}$	存储节点持有的第i个掩码向量（长度为n）

References 28

[1]	NACHIAPPAN R , JAVADI B , CALHEIROS R N ,et al. Cloud storage reliability for big data applications:a state of the art survey[J]. Journal of Network and Computer Applications, 2017,97: 35-47.
[2]	BALAJI S B , KRISHNAN M N , VAJHA M ,et al. Erasure coding for distributed storage:an overview[J]. Science China Information Sciences, 2018,61(10): 1-45.
[3]	THAKUR N , SINGH A , SANGAL A L . Data integrity authentication techniques in cloud computing:a survey[C]// Soft Computing:Theories and Applications. Berlin:Springer, 2020: 1255-1267.
[4]	王意洁, 许方亮, 裴晓强 . 分布式存储中的纠删码容错技术研究[J]. 计算机学报, 2017(1): 236-255.
	WANG Y J , XU F L , PEI X Q . Research on error code-based fault-tolerant technology for distributed storage[J]. Chinese Journal of Computers, 2017(1): 236-255.
[5]	ZHOU L , FU A M , YU S ,et al. Data integrity verification of the outsourced big data in the cloud environment:a survey[J]. Journal of Network and Computer Applications, 2018,122: 1-15.
[6]	ARMKNECHT F , BOHLI J M , KARAME G ,et al. Outsourcing proofs of retrievability[J]. IEEE Transactions on Cloud Computing, 2021,9(1): 286-301.
[7]	WANG H Q , HE D B , FU A M ,et al. Provable data possession with outsourced data transfer[J]. IEEE Transactions on Services Computing, 2019,PP(99): 1.
[8]	TAN C B , HIJAZI M H A , LIM Y ,et al. A survey on proof of retrievability for cloud data integrity and availability:cloud storage state-of-the-art,issues,solutions and future trends[J]. Journal of Network and Computer Applications, 2018,110: 75-86.
[9]	HAHN C , KWON H , KIM D ,et al. Enabling fast public auditing and data dynamics in cloud services[J]. IEEE Transactions on Services Computing, 2020,PP(99): 1.
[10]	WANG C , CHOW S S M , WANG Q ,et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers, 2013,62(2): 362-375.
[11]	CHEN B , CURTMOLA R , ATENIESE G ,et al. Remote data checking for network coding-based distributed storage systems[C]// Proceedings of the 2010 ACM Workshop on Cloud computing Security Workshop. New York:ACM Press, 2010: 31-42.
[12]	CHEN H C H , LEE P P C . Enabling data integrity protection in regenerating-coding-based cloud storage:theory and implementation[J]. IEEE Transactions on Parallel and Distributed Systems, 2014,25(2): 407-416.
[13]	BOWERS K D , JUELS A , OPREA A . HAIL:a high-availability and integrity layer for cloud storage[C]// Proceedings of the 16th ACM Conference on Computer and Communications Security. New York:ACM Press, 2009: 187-198.
[14]	CHEN H C H , HU Y C , LEE P P C ,et al. NCCloud:a network-coding-based storage system in a cloud-of-clouds[J]. IEEE Transactions on Computers, 2014,63(1): 31-44.
[15]	HE K , HUANG C H , SHI J L ,et al. Public integrity auditing for dynamic regenerating code based cloud storage[C]// 2016 IEEE Symposium on Computers and Communication. Piscataway:IEEE Press, 2016: 581-588.
[16]	REN Z W , WANG L N , WANG Q ,et al. Dynamic proofs of retrievability for coded cloud storage systems[J]. IEEE Transactions on Services Computing, 2018,11(4): 685-698.
[17]	LIU J , HUANG K , RONG H ,et al. Privacy-preserving public auditing for regenerating-code-based cloud storage[J]. IEEE Transactions on Information Forensics and Security, 2015,10(7): 1513-1528.
[18]	LE A , MARKOPOULOU A , DIMAKIS A G . Auditing for distributed storage systems[J]. IEEE/ACM Transactions on Networking, 2016,24(4): 2182-2195.
[19]	VS L , PP D . A secure regenerating code-based cloud storage with efficient integrity verification[J]. International Journal of Communication Systems, 2019,32(9): e3948.
[20]	PAILLIER P , . Public-key cryptosystems based on composite degree residuosity classes[C]// International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 1999: 223-238.
[21]	CHILLOTTI I , GAMA N , GEORGIEVA M ,et al. TFHE:fast fully homomorphic encryption over the torus[J]. Journal of Cryptology, 2020,33(1): 34-91.
[22]	LIU M P , JIANG R , KONG H F . Cryptanalysis and countermeasures on privacy-preserving public auditing for regenerating-code-based cloud storage[C]// International Conference on Communication and Electronic Information Engineering. Dordrecht:Atlantis Press, 2016: 275-283.
[23]	陈越, 王龙江, 严新成 ,等. 基于再生码的拟态数据存储方案[J]. 通信学报, 2018,39(4): 21-34.
	CHEN Y , WANG L J , YAN X C ,et al. Mimic storage scheme based on regenerated code[J]. Journal on Communications, 2018,39(4): 21-34.
[24]	KRAWCZYK H , . New hash functions for message authentication[C]// International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 1995: 301-310.
[25]	LIANG W , FAN Y K , LI K C ,et al. Secure data storage and recovery in industrial blockchain network environments[J]. IEEE Transactions on Industrial Informatics, 2020,16(10): 6543-6552.
[26]	LIU G J , GUO W M , LIU X M ,et al. Security analysis and improvements on a remote integrity checking scheme for regenerating-coding-based distributed storage[J]. Security and Communication Networks, 2021,2021: 1-8.
[27]	COHEN A , D’OLIVEIRA R G L ,, SALAMATIAN S ,et al. Network coding-based post-quantum cryptography[J]. IEEE Journal on Selected Areas in Information Theory, 2021,2(1): 49-64.
[28]	KADHE S , SPRINTSON A . Weakly secure regenerating codes for distributed storage[C]// 2014 International Symposium on Network Coding. Piscataway:IEEE Press, 2014: 1-6.

Metrics

Recommended 0

No Suggested Reading articles found!

方案名称	实现机制	审计安全	数据修复	隐私保护	审计通信量	TPA存储量	TPA计算量	CSP计算量
文献[10]方案	Public Key	Yes	No	Yes	m+n+2ξ+1	O(1)	Heavy	Heavy
文献[11]方案	Private Key	Yes	Yes	No	m+3ξ+mσ	O(1)	O(ξσ)	O(σ(ξ+m))
文献[17]方案	Public Key	Yes	Yes	No	m+3ξ	O(1)	Heavy	Heavy
文献[18]方案	Private Key	No	Yes	Yes	m+n+3ξ+3	O(mσ)	O(ξσ)	O(ξn+n²)
文献[19]方案	Private Key	Yes	Yes	Yes	m+n+3ξ+1	O(mσ)	O(nσ)	O(ξn)
本文方案	Private Key	Yes	Yes	Yes	m+n+3ξ+1	O(mσ)	O(ξσ)	O(ξn)

方案	ξ=250		ξ=350
方案	TPA/ms	CSP/ms	TPA/ms	CSP/ms
文献[11]方案	23.35	2.029	23.557	2.243
文献[17]方案	125.78	46.5	187.23	69.01
文献[18]方案	9.634	3.325	9.74	4.011
文献[19]方案	13.32	3.045	16.512	3.595
本文方案	9.631	2.99	9.735	3.107

方案	实现机制	安全编码时间开销/ms
文献[17]方案	Public Key	302.116
文献[18]方案	Private Key	19.209
文献[19]方案	Private Key	26.157
本文方案	Private Key	13.828

Lightweight privacy protection data auditing scheme for regenerating-coding-based distributed storage

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 28

Related Articles 15

Metrics

Recommended 0

[1]	Xindi MA, Qinghua LI, Qi JIANG, Zhuo MA, Sheng GAO, Youliang TIAN, Jianfeng MA. Byzantine-robust federated learning over Non-IID data [J]. Journal on Communications, 2023, 44(6): 138-153.
[2]	Tao FENG, Liqiu CHEN, Junli FANG, Jianming SHI. Blockchain data sharing scheme based on localized difference privacy and attribute-based searchable encryption [J]. Journal on Communications, 2023, 44(5): 224-233.
[3]	Baiji HU, Xiaojuan ZHANG, Yuancheng LI, Rongxin LAI. Multi-function supported privacy protection data aggregation scheme for V2G network [J]. Journal on Communications, 2023, 44(4): 187-200.
[4]	Ming XU, Baojun ZHANG, Yiming WU, Chenduo YING, Ning ZHENG. Cyber attacks and privacy protection distributed consensus algorithm for multi-agent systems [J]. Journal on Communications, 2023, 44(3): 117-127.
[5]	Junfeng TIAN, Qianyu YANG, Xiao Jitian. Distributed audit causal consistency model based on biased stability [J]. Journal on Communications, 2023, 44(3): 164-177.
[6]	Ke LAI, Jing LEI, Wei LIU, Lei WEN. HARQ scheme for sparse code multiple access based on network coding [J]. Journal on Communications, 2022, 43(9): 57-69.
[7]	Xuewang ZHANG, Zhihong LI, Jinzhao LIN. Privacy protection scheme based on fair blind signature and hierarchical encryption for consortium blockchain [J]. Journal on Communications, 2022, 43(8): 131-141.
[8]	Jifeng WANG, Guofeng WANG. Research on ciphertext search and sharing technology in edge computing mode [J]. Journal on Communications, 2022, 43(4): 227-238.
[9]	Huamin FENG, Rui SHI, Feng YUAN, Yanjun LI, Yang YANG. Efficient strong privacy protection and transferable attribute-based ticket scheme [J]. Journal on Communications, 2022, 43(3): 63-75.
[10]	Yan YAN, Yiming CONG, Mahmood Adnan, Quanzheng SHENG. Statistics release and privacy protection method of location big data based on deep learning [J]. Journal on Communications, 2022, 43(1): 203-216.
[11]	Junyi YANG, Bo LI, Qinyu ZHANG. Resource optimization for UAV relay networks based on physical-layer network coding [J]. Journal on Communications, 2021, 42(9): 12-20.
[12]	Hui LIU, Xinyan LIU, Yan XU, Hong ZHONG, Meng WANG. Privacy protection of warning message publishing protocol in VANET [J]. Journal on Communications, 2021, 42(8): 120-129.
[13]	Hongtao LI, Xiaoyu REN, Jie WANG, Jianfeng MA. Continuous location privacy protection mechanism based on differential privacy [J]. Journal on Communications, 2021, 42(8): 164-175.
[14]	Wenbo ZHANG, Wenhua HUANG, Jingyu FENG. Secure communication mechanism for VSN based on certificateless signcryption [J]. Journal on Communications, 2021, 42(7): 128-136.
[15]	Jie CUI, Xuefeng CHEN, Jing ZHANG, Lu WEI, Hong ZHONG. Bus cache-based location privacy protection scheme in the Internet of vehicles [J]. Journal on Communications, 2021, 42(7): 150-161.