Traceable effective open auditing method and system in cloud storage data sharing

Abstract

The invention discloses a traceable effective open auditing method in cloud storage data sharing, and a cloud computing application system. The method comprises the following steps: initializing the system, generating a main private key and open parameters by using an attribute mechanism, allocating an attribute private key to each user, and embedding the user identity in the attribute private key; formulating a signature strategy by a data owner, generating a label for a data block, and uploading the label to a cloud server; modifying the data by a user satisfying the signature strategy; verifying the label of the modified data by the cloud server; sending challenge to the cloud server by a verifier; calculating auditing evidence by the cloud server, and returning the auditing evidence to the verifier; verifying the correctness of the evidence by the verifier; and tracing the malicious user. According to the traceable effective open auditing method disclosed by the invention, the privacy of the user identity is protected in a multi-user data sharing environment, the traceability of the malicious user is realized at the same time, and the storage overhead for tracing is a constant.

Description

technical field [0001] The invention relates to cloud computing security technology, in particular to an effective public audit method and a cloud computing application system that can be traced in a multi-user data sharing environment in cloud storage. Background technique [0002] Cloud storage is a very important and common service form in cloud computing (for example: Dropbox, Amazon S3, iCloud), and it is a service that puts storage resources on cloud service providers for people to access. Users can connect to the cloud through any network-connected device to access data conveniently at any time and anywhere. In order to reduce the maintenance and computing burden on data locally, users store their data on cloud servers. Since the cloud server is untrustworthy, it may lose some data that users rarely access or hardly access in order to save storage space, and may hide data loss in order to maintain its own reputation, so we need to check the data on the cloud before u...

AI Technical Summary

Problems solved by technology

[0005] Therefore, in the case of multi-user data sharing, it is necessary to protect the user's identity privacy and achieve user anonymity, but unlimited anonymity will bring a new problem. Users in the group may be dishonest, and users may Benefits maliciously modify data, so a user may maliciously modify shared data. Due to the realization of user anonymity, malicious users will not worry about being discovered. This uncontrolled malicious modification may destroy the usability of shared data. , so we need to track this malicious user and reveal the identity of the malicious user

[0006] The traditional method is to use the ring signature to protect the user's identity privacy, but the size of the data label will increase linearly with the increase of the number of members in the group. When the number of members in the group is large, it will cause a lot of overhead and cannot be traced sex

Using group signatures to protect user identity privacy, although the data label will not increase linearly with the increase of members in the group, and can achieve traceability, but the communication overhead of this scheme is relatively large and does not support public verification

Images