Key-updating-compatible bidirectional secure cloud storage data integrity detection method

Abstract

The present invention discloses a key-updating-compatible bidirectional secure cloud storage data integrity detection method. The method includes the following steps: initializing a system to generate parameters; obtaining by a data owner a key and a public parameter; updating the key of the data owner; checking by the data owner the validity of the updated key; using by the data owner the key of the current time period to calculate the authentication label for each data block and uploading the data blocks and the corresponding authentication labels to the cloud server; sending by a third-party audit (TPA ) a challenge to the cloud server; calculating by the cloud server the evidence to be returned to the third-party for auditing; and verifying the correctness of the evidence by the third-party audit. The invention reduces the security problem caused by the key leakage of the data owner through the key updating, divides the data owner key into two parts and saves them in different ways to realize the forward security and the backward security of the key leakage, and uses a random mask technology to protect the privacy of data.

Description

technical field [0001] The invention relates to cloud computing security technology, in particular to a two-way secure cloud storage data integrity detection method. Background technique [0002] In the cloud computing environment, cloud service providers integrate computing resources to provide cloud users with economical and fast infrastructure services, and users outsource data to cloud servers, so that they can be easily obtained at any time and place through any heterogeneous network facilities. Serve. [0003] Because the cloud service provider is untrustworthy, it may lose some data that users rarely access or hardly access in order to save storage space, and it may also hide data loss in order to maintain its reputation. Data integrity detection. So far, many current cloud storage integrity detection schemes have been proposed one after another. These schemes are based on an assumption-the data owner's key is always safe. [0004] In fact, the key of the data owner...

AI Technical Summary

Problems solved by technology

[0004] In fact, the key of the data owner in the cloud storage integrity detection scheme may be leaked

First, the key management of the data owner is a very complicated process

Data owners need to manage various keys to complete different security tasks, and some unintentional mistakes in management may lead to key disclosure

Second, for some ordinary customers, the security protection function is relatively weak, and the user may unintentionally download a malicious software from the Internet and neglect to download the security patch to their computer system in time, which may make it easy for attackers to access their computer systems. key

Third, there is no protection of data privacy

However, if the security device becomes insecure, the whole solution will not be secure, and the structure of the solution is complicated, and the efficiency is relatively low. Also, the privacy of data is not protected in this solution.

Images