Anti-key exposure cloud data integrity verification method supporting fair payment

Abstract

The invention discloses an anti-key exposure cloud data integrity verification method supporting fair payment. The method comprises the following steps: a data owner selects a security parameter and generates a public and private key pair and a public parameter; the data owner generates an audit key; the data owner uploads the data block and the authentication code to the cloud server; the cloud service provider and the data owner deploy an intelligent auditing contract together; and the cloud service provider generates a random challenge by using the current block head and the public parameter, writes the proof and the auxiliary information into an activation contract and deploys the activation contract to the block chain, and after the intelligent audit contract is activated, verifies the proof and executes a preset transaction according to a verification result. And the data owner randomly selects the secret information in the current time period to update the auditing key and the authentication code. According to the invention, fair transaction under the condition that a data owner and a cloud service provider do not trust each other is realized, the forward and backward security problems of outsourcing data under key exposure attack are solved, and audit key updating and authentication code updating are supported.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a cloud data integrity check method that supports fair payment and is resistant to key exposure. Background technique [0002] Cloud storage is a cloud computing system that can provide infinitely scalable data storage space and management services. Cloud storage is favored by businesses, organizations, and individuals due to its low latency, high scalability, and high flexibility. However, when users upload data remotely to a server provided by a cloud service provider, they lose physical control of the data. Once the cloud server has problems, its data will face serious security threats. Data integrity is one of the core elements of data security, and cloud storage is the focus of users and cloud service providers. [0003] In the process of implementing the present invention, the inventor of the present application found that the method of the prior art has at least t...

AI Technical Summary

Problems solved by technology

The message authentication tag is consistent with the corresponding data block, and no one can change the message authentication tag without knowing the key

The exposure of the key will destroy the immutability of the message authentication label, and the integrity verification certificate is more likely to be forged by a malicious adversary, which in turn affects the authenticity of the data integrity verification result

[0006] It can be seen that the existing technical methods cannot resist the key exposure attack while ensuring the fairness of the transaction, and the security of the data cannot be guaranteed

Images