Cloud storage data common auditing method possessing secret key leakage resistance characteristic

Abstract

The invention belongs to the communication technology field and especially relates to a cloud storage data common auditing method possessing a secret key leakage resistance characteristic. The method mainly comprises the following steps of system initialization: blocking processing is performed on a data file so as to generate public and private key pairs of a cloud user and a cloud server; auditing identification generation: the cloud user sends the data file and a label, and a signature set of a data block to the cloud server; auditing challenge response: a third party auditor generates auditing challenge information and sends to the cloud server; the cloud server calculates combination information according to the auditing challenge information, gets signatures together and sends an auditing identification response information to the third party auditor; and the third party auditor verifies validity of the auditing identification response information. The method has advantages that a condition that digital signature forgery and auditing identification response information forgery caused by leakage of a user signature private key can be prevented; and a malicious cloud server is ensured not to generate the forged auditing identification response information to cheat a TPA and to pass through an auditing verification process.

Description

technical field [0001] The invention belongs to the technical field of communications, and in particular relates to a public audit method for cloud storage data with the characteristic of anti-key leakage. Background technique [0002] With the rapid development of cloud computing, more and more users will store data on the cloud. As a new generation of storage service model, cloud storage has become increasingly popular. This storage service brings many new conveniences to users, but at the same time, it also makes users worry about the security and privacy of data stored in cloud servers. Although cloud service providers can provide users with more secure data storage devices, once the massive data generated in cyberspace is stored in cloud servers, active attacks from various external opponents cannot be avoided. In fact, due to some economic interests, cloud service providers often delete some data that is rarely accessed by users to save storage space, and they will n...

AI Technical Summary

Problems solved by technology

Most of the current cloud storage data audit schemes do not consider the problem of signature forgery and forged audit certificate response information caused by the leakage of user signature private key

So far there is only one solution to this problem, but the solution requires a third-party auditor to calculate the expensive modular exponent and bilinear pairing operation

At the same time, in the key update process, the scheme uses binary tree technology to update the user's signature private key, the calculation efficiency and communication efficiency are relatively slow, and the scheme cannot resist the attack of quantum computers

In addition, most of the current cloud storage data audit schemes are based on certificates, which makes the management of user public key certificates a lot of complex problems

Images