Method and system for data file encryption and integrity verification in untrusted server environment

Abstract

The method and system for data file encryption and integrity verification in an untrusted server environment provided by the present invention relate to the technical field of data privacy protection, and the method includes: 1) system initialization; 2) generating public and private keys of BGN homomorphic encryption algorithm; 3) ) Construct public and private keys for data signature; 4) Use BGN homomorphic encryption algorithm public key to encrypt data files; 5) Construct tags for all file blocks in the data file according to the private key of data signature; 6) Upload encrypted files and tags Gather to the cloud server; 7) Send the file integrity challenge to the cloud server to return the label sum and the file block sum; 8) Use the file block sum and the public key of the data signature to verify the label sum to judge the ciphertext stored in the cloud server File integrity: the present invention combines the BGN homomorphic encryption algorithm and the PDP data possession proof protocol to construct a data signature to realize the integrity check of the encrypted file, and improve the privacy protection and usability of the data file in an untrusted server environment.

Description

technical field [0001] The invention relates to the technical field of data privacy protection, in particular to a method and system for data file encryption and integrity verification in an untrustworthy server environment. Background technique [0002] With the advent of the big data era, cloud computing has been widely used, and then cloud storage is derived. This important storage mode can provide enterprises and individuals with a large-capacity storage platform, and has the characteristics of easy management, high scalability, and low cost. With the emergence of the cloud storage model, storage users no longer need to purchase expensive equipment, and only need to pay a small fee to store their data on the cloud server, which is more convenient and faster. Data outsourcing actually means that the user gives up the ultimate control over the data, and the security and integrity of the data become the main influencing factors for the user to choose cloud storage. For ex...

AI Technical Summary

Problems solved by technology

[0004] In recent years, a protection method that combines PDP integrity protocol and homomorphic encryption technology to protect the integrity and confidentiality of data files on the server has emerged, but the integrity verification of ciphertext files based on the BGN homomorphic encryption algorithm has not been mentioned yet.

Images