A fast audit method for cloud storage data

Abstract

The invention discloses a fast audit method for cloud storage data, including: Step S1. The key generation center selects system public parameters, and generates the user's signature public-private key pair and the enclave's signature public-private key pair; Step S2. The user pairs The original data is preprocessed to generate an outsourced data set, and auxiliary information is calculated, and the outsourced data set and auxiliary information are sent to the cloud server, and two-way identity authentication is completed with the enclave; step S3. Based on the Ethereum blockchain network, the smart contract is based on The preset audit cycle generates challenge information and sends the challenge information to the cloud server; Step S4. After receiving the challenge information, the cloud server runs the self-audit program in the enclave to output the audit certificate; Step S5. Smart contract verification audit Prove and output the verification result. The invention can resist the replacement attack and forgery attack of the malicious cloud server without introducing a trusted third party.

Description

technical field [0001] The invention belongs to the fields of information security and network space security, in particular to a fast audit method for cloud storage data. Background technique [0002] With the rapid development of network technology and the explosive growth of data, data owners are willing to use cloud storage systems to store and manage their own data to reduce local maintenance costs. In cloud storage, data owners (that is, users of cloud storage services) only need to store personal data on cloud servers, and then enjoy on-demand remote retrieval services. Despite these advantages, cloud storage systems also expose some security issues, the most important of which is the integrity of outsourced data. Simply put, once users outsource their data to cloud servers, they lose physical control over their personal data. Therefore, users need to consider whether the outsourced data is always completely stored on the cloud server. In fact, there are real secur...

AI Technical Summary

Problems solved by technology

[0005] (1) Malicious cloud servers may deceive users by forging audit results, such as cloud servers always send good integrity reports to users without checking data integrity

[0006] (2) Another thorny issue is that malicious cloud servers may destroy the randomness of the sampled data set, and use pre-generated challenge messages to complete the audit

However, most of the existing schemes support dynamic data updates with large computational costs.

Specifically, performing an update operation on a single target data block requires a lot of calculations on the entire data block, causing delays in dynamic file integrity checks

In this case, even inserting a small-sized data somewhere in the data block will cause the whole data block label to be recalculated

Images