An Identity-Based Authorized Third-Party Data Integrity Proof Method

Abstract

The invention discloses an identity-based authorized third party data integrity proving method. The method is designed based on double-line pair and identity encryption technologies. By embedding user authorization evidence into generation of a data block tag to be stored, the purpose that only the third party with user authorization can complete remote data integrity checking is achieved. The invention puts forward an identity-based authorized third party proving method beyond the existing remote data private verification and public verification, and meets the need for privacy protection while realizing user-entrusted verification. In addition, the method ensures the fairness between a data owning party and a data storing party. The data storing party inspects a data block-tag pair uploaded by the data owning party in order to prevent malicious users from uploading wrong data and unreasonable claim over the storing party caused thereby.

Description

technical field [0001] The present invention relates to information security technology. Background technique [0002] Cloud computing is an important direction for the development of information technology and a basic technology in the era of big data. It has become a hot spot in the development of the current information industry due to its powerful computing and storage capabilities and its ability to provide users with on-demand services, and it has been gradually applied in practice. [0003] As an important part of cloud computing, cloud storage has begun to be widely accepted and used. Users can store data on remote cloud servers according to their own needs, so as to reduce the burden of hardware purchase and maintenance, and at the same time gain the convenience of accessing at any time. However, precisely because users do not actually store data, this uncontrollability brings data security risks to users. [0004] The cloud service provider may not store user da...

AI Technical Summary

Problems solved by technology

However, when the user cannot complete the verification process by himself and does not want any third party to verify his own data, the above two types of solutions will not be able to meet the user's needs

[0006] In addition, most of the existing verification schemes are based on the traditional public key certificate architecture. When users or third parties perform data integrity verification, they need to query the public key certificate first, which brings additional communication overhead and implementation complexity to the verification.

At the same time, the management and maintenance of the certificate library is also costly

Images