边缘环境下基于无证书公钥密码的数据完整性审计方案

doi:10.11959/j.issn.1000-436x.2022130

Abstract

Abstract:

In the edge environment, data transmission to the cloud needs to pass through a new entity, the edge node, which makes the data security problem more complicated, the confidentiality and integrity of data are difficult to be guaranteed, and the traditional provable data possession scheme is not suitable for the edge environment with a large number of devices.Based on this, a certificateless public key cryptography based provable data possession scheme was proposed for the edge environment, combining the online/offline signature idea, where the user device only needed to perform light computation when uploading data in the case of semi-trusted edge nodes, leaving the rest of the computation to be performed in the offline phase.The scheme used edge nodes for auditing work while supporting auditing in different storage states, as well as privacy protection and other features.The security analysis shows that the proposed scheme is proven to be secure by being able to effectively combat three types of adversary attacks under a stochastic prediction model.Experimental comparisons with other schemes show that the proposed scheme has lowest time overhead.

Key words: edge computing, provable data possession, online/offline signature, certificateless public key cryptography

CLC Number:

TP309

Ziyuan WANG, Ruizhong DU. Certificateless public key cryptography based provable data possession scheme in edge environment[J]. Journal on Communications, 2022, 43(7): 62-72.

Figures/Tables 11

方案	用户层	边缘层	边缘节点
CLPDP	$n H + 2 n {Mul}_{Z_{p}}$	—	—
tHKWWC	$n H + 2 n {Mul}_{Z_{p}}$	—	—
CL-PAS	$2 n H + 2 n {Mul}_{Z_{p}}$	—	—
文献[19]	$n H + n {Mul}_{Z_{p}} + 2 n Exp$	—	可信
文献[20]	$n H + n {Mul}_{Z_{p}} + 2 n Exp$	—	半可信
本文	$n H + n {Mul}_{Z_{p}}$	—	半可信

References 22

[1]	ATENIESE G , BURNS R , CURTMOLA R ,et al. Provable data possession at untrusted stores[C]// Proceedings of the 14th ACM Conference on Computer and Communications Security. New York:ACM Press, 2007: 598-609.
[2]	谭霜, 贾焰, 韩伟红 . 云存储中的数据完整性证明研究及进展[J]. 计算机学报, 2015,38(1): 164-177.
	TAN S , JIA Y , HAN W H . Research and development of provable data integrity in cloud storage[J]. Chinese Journal of Computers, 2015,38(1): 164-177.
[3]	SHI W S , PALLIS G , XU Z W . Edge computing scanning the issue[J]. Proceedings of the IEEE, 2019,107(8): 1474-1481.
[4]	施巍松, 张星洲, 王一帆 ,等. 边缘计算:现状与展望[J]. 计算机研究与发展, 2019,56(1): 69-89.
	SHI W S , ZHANG X Z , WANG Y F ,et al. Edge computing:state-of-the-art and future directions[J]. Journal of Computer Research and Development, 2019,56(1): 69-89.
[5]	张佳乐, 赵彦超, 陈兵 ,等. 边缘计算数据安全与隐私保护研究综述[J]. 通信学报, 2018,39(3): 1-21.
	ZHANG J L , ZHAO Y C , CHEN B ,et al. Survey on data security and privacy-preserving for the research of edge computing[J]. Journal on Communications, 2018,39(3): 1-21.
[6]	OQAILY M , JARRAYA Y , MOHAMMADY M ,et al. SegGuard:segmentation-based anonymization of network data in clouds for privacy-preserving security auditing[J]. IEEE Transactions on Dependable and Secure Computing, 2021,18(5): 2486-2505.
[7]	YANG Y , CHEN Y J , CHEN F . A compressive integrity auditing protocol for secure cloud storage[J]. IEEE/ACM Transactions on Networking,2021:doi.org/10.1109/TNET.2021.3058130.
[8]	CHEN X Y , SHANG T , ZHANG F ,et al. Dynamic data auditing scheme for big data storage[J]. Frontiers of Computer Science, 2020,14(1): 219-229.
[9]	KONSTA A , MYTILINIS I , DOKA K ,et al. Clouseau:blockchain-based data integrity for HDFS clusters[C]// Proceedings of 2021 IEEE 37th International Conference on Data Engineering. Piscataway:IEEE Press, 2021: 2725-2728.
[10]	TIAN M , YE S , ZHONG H ,et al. Identity-based proofs of storage with enhanced privacy[C]// Proceedings of International Conference on Algorithms and Architectures for Parallel Processing.[S.l.:s.n.], 2018: 461-480.
[11]	SHEN W T , QIN J , YU J ,et al. Enabling identity-based integrity auditing and data sharing with sensitive information hiding for secure cloud storage[J]. IEEE Transactions on Information Forensics and Security, 2019,14(2): 331-346.
[12]	LI Y N , YU Y , MIN G Y ,et al. Fuzzy identity-based data integrity auditing for reliable cloud storage systems[J]. IEEE Transactions on Dependable and Secure Computing, 2019,16(1): 72-83.
[13]	WANG H Q . Identity-based distributed provable data possession in multicloud storage[J]. IEEE Transactions on Services Compu ting, 2015,8(2): 328-340.
[14]	YU H Y , CAI Y Q , SINNOTT R O ,et al. ID-based dynamic replicated data auditing for the cloud[J]. Concurrency and Computation:Practice and Experience, 2019,31(11): 1-12.
[15]	WANG F , XU L , WANG H Q ,et al. Identity-based non-repudiable dynamic provable data possession in cloud storage[J]. Computers ＆Electrical Engineering, 2018,69: 521-533.
[16]	HE D B , KUMAR N , WANG H Q ,et al. Privacy-preserving certificateless provable data possession scheme for big data storage on cloud[J]. Applied Mathematics and Computation, 2017,314: 31-43.
[17]	JI Y Y , SHAO B L , CHANG J Y ,et al. Privacy-preserving certificateless provable data possession scheme for big data storage on cloud,revisited[J]. Applied Mathematics and Computation, 2020,386:125478.
[18]	GAO G M , FEI H X , QIN Z F . An efficient certificateless public auditing scheme in cloud storage[J]. Concurrency and Computation:Practice and Experience, 2020,32(24): e5924.
[19]	WANG T , MEI Y X , LIU X X ,et al. Edge-based auditing method for data security in resource-constrained Internet of things[J]. Journal of Systems Architecture, 2021,114:101971.
[20]	LIU D Z , SHEN J , VIJAYAKUMAR P ,et al. Efficient data integrity auditing with corrupted data recovery for edge computing in enterprise multimedia security[J]. Multimedia Tools and Applications, 2020,79(15/16): 10851-10870.
[21]	LI B , HE Q , CHEN F F ,et al. Auditing cache data integrity in the edge computing environment[J]. IEEE Transactions on Parallel and Distributed Systems, 2021,32(5): 1210-1223.
[22]	边缘计算产业联盟(ECC)与工业互联网产业联盟(AII)联合发布. 边缘计算安全白皮书[R]. 2019.
	Edge Compting Consortium (ECC) and Alliance of Industrial Internet (AII) Jointly Publish. Edge compting security white paper[R]. 2019.

Metrics

Recommended 0

No Suggested Reading articles found!

参数	含义
H ₁,H₂	安全的哈希函数
z	KGC主密钥
P_pub=zP	KGC系统公钥
ID_u	设备u的身份信息
D _u =zQ_u	设备u的部分私钥
PK_u,SK_u	设备u的完整公私钥对
SK_EdgeS/CS	存储节点的私钥
m_i	数据块
δ_i	数据块签名
θ	用户选择的数据F存储状态

角色	系统参数/ms	部分私钥/ms	完全密钥/ms
KGC	2.341	0.859	—
用户	—	—	2.652

取样数/个	CLPDP方案/ms	tHKWWC方案/ms	CL-PAS/ms	文献[19]方案/ms	文献[20]方案/ms	本文方案/ms
300	7.92	7.84	11.46	14.32	13.10	10.98
460	12.23	11.98	16.84	17.33	16.87	16.45

取样数/个	CLPDP方案/ms	tHKWWC方案/ms	CL-PAS/ms	文献[19]方案/ms	文献[20]方案/ms	本文方案/ms
300	17.43	16.93	25.42	36.45	37.58	24.37
460	26.68	26.33	38.96	52.39	53.18	37.21

Certificateless public key cryptography based provable data possession scheme in edge environment

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 22

Related Articles 15

Metrics

Recommended 0

[1]	Weifeng LU, Ning LI, Jia XU, Lijie XU, Jian XU. Joint scheduling algorithm for correlative tasks in multi-access edge computing [J]. Journal on Communications, 2023, 44(4): 87-98.
[2]	Xin SUN, Guifu ZHANG, Hongyan XING, Wang Zenghui. Research on intrusion detection for maritime meteorological sensor network based on balancing generative adversarial network [J]. Journal on Communications, 2023, 44(4): 124-136.
[3]	Renchao XIE, Wen WEN, Qinqin TANG, Yunlong LIU, Gaochang XIE, Tao HUANG. Survey on rail transit mobile edge computing network security [J]. Journal on Communications, 2023, 44(4): 201-215.
[4]	Xueyong YU, Lixiang QIU, Jianing SONG, Hongbo ZHU. Security communication and energy efficiency optimization strategy in UAV-aided edge computing [J]. Journal on Communications, 2023, 44(3): 45-54.
[5]	Wei FAN, Cheng PENG, Dali ZHU, Yuqing WANG. Research on intrusion response strategy based on static Bayesian game in mobile edge computing network [J]. Journal on Communications, 2023, 44(2): 70-81.
[6]	Shuxu ZHAO, Ping WEI, Xiaolong WANG. Optimal coalition structure generation strategy in multi-task concurrent edge computing environment [J]. Journal on Communications, 2023, 44(2): 172-184.
[7]	Long LONG, Zichen LIU, Zaiwang LU, Yucheng ZHANG, Lei LI. Joint optimization strategy of service cache and resource allocation in mobile edge network [J]. Journal on Communications, 2023, 44(1): 64-74.
[8]	Yu ZHANG, Min CHENG. Joint optimization of edge computing and caching in NDN [J]. Journal on Communications, 2022, 43(8): 164-175.
[9]	Zhu WANG, Siqi YANG, Fenghua LI, Kui GENG, Tingting PENG, Mengyao SHI. Efficient and provably-secure certificateless sequential aggregate signature scheme [J]. Journal on Communications, 2022, 43(5): 58-67.
[10]	Zijia MO, Zhipeng GAO, Yang YANG, Yijing LIN, Shan SUN, Chen ZHAO. Efficient distributed model sharing strategy for data privacy protection in Internet of vehicles [J]. Journal on Communications, 2022, 43(4): 83-94.
[11]	Jifeng WANG, Guofeng WANG. Research on ciphertext search and sharing technology in edge computing mode [J]. Journal on Communications, 2022, 43(4): 227-238.
[12]	Dun CAO, Yingbao ZHANG, Dian ZOU, Jin WANG, Qiang TANG, Baofeng JI. Multi-node cooperative distributed offloading strategy in V2X scenario [J]. Journal on Communications, 2022, 43(2): 185-195.
[13]	Yan SUN, Ao XIONG, Chengling JIANG, Wei WANG, Dongxiao YU, Shaoyong GUO. Blockchain-based computing and wireless communication resource joint management double auction model [J]. Journal on Communications, 2022, 43(11): 14-25.
[14]	Xin SU, Leilei MENG, Yiqing ZHOU, Wu CELIMUGE. Maritime mobile edge computing offloading method based on deep reinforcement learning [J]. Journal on Communications, 2022, 43(10): 133-145.
[15]	Bin LI, Wenshuai LIU, Wancheng XIE, Zesong FEI. Computation offloading scheme for RIS-empowered UAV edge network [J]. Journal on Communications, 2022, 43(10): 223-233.