Data file encryption and integrity verification method and system for untrusted server environment

Abstract

The invention provides a data file encryption and integrity verification method and system for an untrusted server environment, and relates to the technical field of data privacy protection, and the method comprises the steps: 1) initializing a system; 2) generating public and private keys of a BGN homomorphic encryption algorithm; 3) constructing public and private keys of the data signature; 4)encrypting the data file by adopting a BGN homomorphic encryption algorithm public key; 5) respectively constructing labels for all file blocks in the data file according to the private key of the data signature; 6) uploading the set of encrypted files and labels to a cloud server; 7) sending a file integrity challenge to the cloud server to return a label and a file block sum; 8) verifying the label sum by using the file block sum and the public key of the data signature so as to judge the integrity of the ciphertext file stored in the cloud server. According to the method, a BGN homomorphicencryption algorithm and a PDP data holding proof protocol are combined, data signatures are constructed to achieve integrity check of the encrypted files, and privacy protection and availability of the data files in an untrusted server environment are improved.

Description

technical field [0001] The invention relates to the technical field of data privacy protection, in particular to a method and system for data file encryption and integrity verification in an untrustworthy server environment. Background technique [0002] With the advent of the big data era, cloud computing has been widely used, and then cloud storage is derived. This important storage mode can provide enterprises and individuals with a large-capacity storage platform, and has the characteristics of easy management, high scalability, and low cost. With the emergence of the cloud storage model, storage users no longer need to purchase expensive equipment, and only need to pay a small fee to store their data on the cloud server, which is more convenient and faster. Data outsourcing actually means that the user gives up the ultimate control over the data, and the security and integrity of the data become the main influencing factors for the user to choose cloud storage. For ex...

AI Technical Summary

Problems solved by technology

[0004] In recent years, a protection method that combines PDP integrity protocol and homomorphic encryption technology to protect the integrity and confidentiality of data files on the server has emerged, but the integrity verification of ciphertext files based on the BGN homomorphic encryption algorithm has not been mentioned yet.

Images