Data integrity verification method based on homomorphic encryption

Abstract

The invention discloses a data integrity verification method based on homomorphic encryption, and mainly solves the problems that the verification efficiency is reduced and replay attacks cannot be resisted after dynamic updating in the prior art. According to the implementation scheme, the method comprises the following steps of: 1) partitioning a file, encrypting the file blocks and uploading the encrypted file blocks to a cloud server; 2) generating a verification data block number and auxiliary verification information, and packaging and uploading the verification data block number and the auxiliary verification information to a cloud server; 3) enabling the cloud server to calculate a data integrity signature according to the verification data block number and the auxiliary verification information; 4) locally calculating a plaintext verification signature by the user; 5) enabling the user to compare the data integrity signature with the plaintext verification signature to carry out integrity judgment; and (6) dynamically updating the file stored in the cloud server by the user, and circularly executing the steps (2)-(5). According to the method, the problem of imbalance after frequent updating of the tree structure is avoided, the capability of resisting replay attacks is improved by introducing random information in each verification process, and the method can be used for a cloud storage service protocol.

Description

Technical field: [0001] The invention belongs to the technical field of computers, and in particular relates to a method for verifying data integrity, which can be used in cloud storage service protocols. Background technique: [0002] At present, the rapid development of cloud computing technology can effectively help users save computing resources and reduce costs. Therefore, a large number of data files are uploaded to the cloud by users, which means that users lose control over cloud data and store them in cloud servers. The data on the cloud server is easily lost or illegally tampered with due to various reasons, so it is very necessary to periodically verify the data integrity of the data stored on the cloud server. [0003] At the same time, during the entire life cycle of data files uploaded to the cloud, users may add, delete, modify, and check files stored on the cloud based on their own needs. The data integrity verification system needs to be able to still have u...

AI Technical Summary

Problems solved by technology

[0004] In the existing technology, most data integrity verification methods cannot effectively support various dynamic operations of cloud files. The document "Provable Data Possession at Untrusted Stores" first formally defines the data integrity verification scheme, and based on RSA Homomorphic signatures design two PDP schemes with different verification strategies, but this scheme does not consider the verification strategy after the cloud file is dynamically updated

The document "Dynamic Provable Data Possession" designed a dynamic PDP scheme that supports dynamic operations based on jump tables and RSA trees, but this scheme introduces a tree-shaped auxiliary data structure for management, and the storage cost and computing cost of the cloud server are relatively high

In addition, the disadvantage of the dynamic integrity verification method based on the tree structure is that after a series of update operations, the tree structure may become unbalanced, affecting the execution efficiency of the verification

Images