A video data ownership proof method based on double data possession proof

Abstract

The present application relates to a kind of video data ownership proof method based on double data possession proof, comprising:1) cloud server discloses the public parameter involved in video cloud data ownership proof;2) the owner of first upload data calculates data ownership proof label based on double data possession proof, and label, security ownership proof coefficient and data are uploaded to cloud server;3) cloud server initiates challenge to subsequent owner;4) subsequent owner calculates ownership proof and sends to cloud server;5) cloud server verifies whether the response of subsequent owner is correct, and whether the user is received as the true data owner by this judgment.This application aims at the demand of managing streaming media cloud data ownership, based on the existing image cloud data ownership proof method, the space-time integrity of video cloud data is compressed to one dimension using double data possession proof, while considering the performance of cloud storage service, the proof of video cloud data ownership is solved.

Description

Technical Field

[0001] This invention belongs to the field of cloud service security attribute technology, and in particular relates to a method for proving video data ownership based on dual data possession proof. Background Technology

[0002] With the continuous development of cloud computing technology, efficient, convenient, and cost-effective cloud storage services have gradually become a key infrastructure of modern information systems, and an increasing amount of streaming media data, including video, is being hosted in the cloud. To continuously meet the growing storage demands, cloud service providers employ data deduplication technology in their cloud storage services, improving the utilization efficiency of cloud storage space by removing duplicate data. At this point, the relationship between cloud data and users changes from one-to-one to one-to-many. Therefore, how to accurately manage the ownership of cloud data becomes a core security issue in data deduplication.

[0003] Data deduplication generally falls into two modes: server-side deduplication and client-side deduplication. Cloud service providers tend to favor client-side deduplication, which is more bandwidth-efficient. In client-side deduplication, users gain ownership of cloud data by correctly answering challenges from the cloud server; this process is known as "proof of ownership of cloud data." While some research has been conducted on proof of ownership of cloud data, cloud data exhibits strong heterogeneity, with low-volume text and metadata coexisting with high-volume image, audio, and video data. Existing proof-of-ownership methods suffer significant performance degradation when directly applied to high-volume data, making it difficult to meet the requirements of confirming ownership of large volumes of data in the streaming media era.

[0004] To address this, researchers have proposed a digital watermarking-based ownership proof method (DEduplication watermarking, DEW) for image cloud data. Taking image cloud data as the starting point, this method balances the needs for ownership verification and usability. It combines message-locked encryption (MLE) and a random factor to design a digital watermark that can be asynchronously shared among multiple data owners. Ownership is first projected onto the digital watermark in the image cloud data, and then the digital watermark is organically integrated with the ownership proof process to achieve effective management of cloud data ownership. However, this method is only suitable for processing two-dimensional image cloud data and is not applicable to video cloud data, which also has a temporal dimension in addition to the spatial dimension. Currently, efficient ownership proof for video cloud data has not received sufficient attention or a satisfactory solution. Summary of the Invention

[0005] The purpose of this invention is to provide a video data ownership proof method based on dual data holding proof to address the need for ownership proof of video cloud data, thereby solving the problem of efficient ownership proof of video cloud data.

[0006] To achieve the above objectives, the technical solution of the present invention is: a method for proving video data ownership based on dual data possession proof, comprising the following steps:

[0007] (1) The publicly disclosed parameters involved in the process of proving ownership of video cloud data published by cloud server S, including q and Z. q Let q be a large prime number whose length satisfies the communication security requirements, and Z be a prime number whose length satisfies the communication security requirements. q It is a finite field containing q elements, with generator g, and l is the length of the digital watermark that meets security requirements; the cloud server S publicly selects a secure message digest function H(·) with a message digest length of l and a pseudo-random function H whose output is controlled by a user-generated random secret value v. v (·); Video cloud data f is associated with multiple owners, and cloud server S uses the owner list L. owner Manage ownership of video cloud data f by multiple users;

[0008] (2) User O divides the video data to be uploaded into z slices along the z-axis of the coordinate system x, y, z. Each data slice is further divided into n data blocks along the y-axis, and each data block is further divided into s data segments, i.e., standardized pixels, along the x-axis. In other words, a video cloud data is divided into N = z × n × s data segments, i.e., pixels. Each pixel is denoted as m. kij , and request the upload of video cloud data f; if the video cloud data f does not yet exist in the cloud server, then record the user who uploaded the file this time as O1, and continue to execute step (3); if the video cloud data f already exists in the cloud server, then record the user who uploaded the file this time as O t And jump to step (4) to continue execution;

[0009] (3) User O1 will generate a video cloud data ownership certificate tag, including the following steps:

[0010] (3-1)O1 from Z q Randomly select a set of private integrity proof coefficients {α} j ∈Z q |1≤j≤s}, and calculate the corresponding public integrity proof coefficient. Then, v is obtained by locking the encrypted MLE with a secure message, and the integrity proof tag of the i-th data block is calculated along the x-direction within the k-th slice. and σ ki All are Z q Elements on;

[0011] (3-2)O1 from Z q Randomly select a set of integrity proof coefficients {β} k ∈Z q |1≤k≤z}, aggregate intra-slice data block integrity labels into data slice integrity labels along the z-direction. {β k ∈Z q |1≤k≤z} and {δ i |1≤i≤n} are all Z q Elements on;

[0012] (3-3)O1 will use video cloud data f, {δ i |1≤i≤n}、 and {β k ∈Z q |1≤k≤z} is sent to the cloud server, and then the local video cloud data f is deleted; {δ i |1≤i≤n}、 and {β k ∈Z q |1≤k≤z} are all Z q Elements on;

[0013] (4) From cloud server S to the subsequent O t The challenge is initiated by cloud server S randomly selecting a set of data slices distributed along the y-axis, labeled {i|i∈n}, and then, for each sampled data slice, starting from Z... q Select a random value v on the group i The challenge set for this round is Q = <i,v i |i∈n>, and Q, Send to O t ;v i and All are Z q Elements on;

[0014] (5)O t The response to this round's challenge Q is as follows: obtain v by locking the encrypted MLE with a secure message; sequentially read the i-th row of data from all data slices along the z-direction in the y-direction; and traverse along the z-direction to calculate the integrity proof value μ on the j-th column along the x-direction within the k-th slice. kj =v i mk ij +x kj and auxiliary values and {μ kj |1≤k≤z,1≤j≤s} and {tail} k |1≤k≤z} is sent back to the cloud server S; {μ kj|1≤k≤z,1≤j≤s} and {tail} k |1≤k≤z} are all Z q Elements on;

[0015] (6) Cloud server S according to O t Response judgment O t Whether the complete video cloud data is possessed, i.e., calculating and determining the equation. Does the equation hold true? If it does, then cloud server S accepts O. t As the legal owner of the video cloud data f, and will O t Add to owner list L owner If the equation does not hold, then cloud server S will not accept O. t The rightful owner of the video cloud data f.

[0016] In one embodiment of the present invention, in step (2), the existence query method for the video cloud data is as follows: user O calculates the message digest checksum of the video cloud data f. f =H(f) and send it to cloud server S, cloud server S uses checksum f The corresponding video cloud data f is used as the basis for locating it.

[0017] In one embodiment of the present invention, in steps (3-1) and (5), the secure message locking encryption MLE selects to use existing proven secure message locking encryption methods such as inadvertent transmission encoding and secret sharing.

[0018] Compared with the prior art, the present invention has the following beneficial effects:

[0019] This invention solves the problem of efficient proof of ownership for video cloud data, complementing existing methods for proving ownership of image cloud data and providing technical support for cloud storage services to adapt to the storage needs of the streaming media era. In this invention, a dual-layer data ownership proof technique is used to compress the integrity characteristics of video cloud data from three dimensions to one dimension, significantly reducing the storage cost of video cloud data ownership management. Furthermore, this invention generalizes the direction of integrity compression, enabling cost balance in different application scenarios. Attached Figure Description

[0020] Figure 1 This is a schematic diagram of the video cloud data cutting method in the present invention.

[0021] Figure 2 This is a flowchart of the data ownership proof process in the method of this invention. Detailed Implementation

[0022] The technical solution of the present invention will now be described in detail with reference to the accompanying drawings.

[0023] like Figure 1-2 As shown, this invention provides a method for proving video data ownership based on dual data possession proof, comprising the following steps:

[0024] (1) The publicly disclosed parameters involved in the process of proving ownership of video cloud data published by cloud server S, including q and Z. q Let q be a large prime number whose length satisfies the communication security requirements, and Z be a prime number whose length satisfies the communication security requirements. q It is a finite field containing q elements, with generator g, and l is the length of the digital watermark that meets security requirements; the cloud server S publicly selects a secure message digest function H(·) with a message digest length of l and a pseudo-random function H whose output is controlled by a user-generated random secret value v. v (·); Video cloud data f is associated with multiple owners, and cloud server S uses the owner list L. owner Manage ownership of video cloud data f by multiple users;

[0025] (2) User O divides the video data to be uploaded into z slices along the z-axis of the coordinate system x, y, z. Each data slice is further divided into n data blocks along the y-axis, and each data block is further divided into s data segments, i.e., standardized pixels, along the x-axis. In other words, a video cloud data is divided into N = z × n × s data segments, i.e., pixels. Each pixel is denoted as m. kij , and request the upload of video cloud data f; if the video cloud data f does not yet exist in the cloud server, then record the user who uploaded the file this time as O1, and continue to execute step (3); if the video cloud data f already exists in the cloud server, then record the user who uploaded the file this time as O t And jump to step (4) to continue execution;

[0026] (3) User O1 will generate a video cloud data ownership certificate tag, including the following steps:

[0027] (3-1)O1 from Z q Randomly select a set of private integrity proof coefficients {α} j ∈Z q |1≤j≤s}, and calculate the corresponding public integrity proof coefficient. Then, v is obtained by locking the encrypted MLE with a secure message, and the integrity proof tag of the i-th data block is calculated along the x-direction within the k-th slice. This step involves {α} j ∈Z q |1≤j≤s}、 and σ ki All are Z q Elements on;

[0028] (3-2)O1 from Z q Randomly select a set of integrity proof coefficients {β} k ∈Z q |1≤k≤z}, aggregate intra-slice data block integrity labels into data slice integrity labels along the z-direction. This step involves {β} k ∈Z q |1≤k≤z} and {δ i |1≤i≤n} are all Z q Elements on;

[0029] (3-3)O1 will use video cloud data f, {δ i |1≤i≤n}、 and {β k ∈Z q The sequence |1≤k≤t} is sent to the cloud server, and then the local video cloud data f is deleted. This step involves {δ} i |1≤i≤n}、 and {β k ∈Z q |1≤k≤z} are all Z q Elements on;

[0030] (4) From cloud server S to the subsequent O t The challenge is initiated by cloud server S randomly selecting a set of data slices distributed along the y-axis, labeled {i|i∈n}, and then, for each sampled data slice, starting from Z... q Select a random value v on the group i The challenge set for this round is Q = <i,v i |i∈n>, and Q, Send to O t The v involved in this step i and All are Z q Elements on;

[0031] (5)O t The response to this round's challenge Q is as follows: obtain v by locking the encrypted MLE with a secure message; sequentially read the i-th row of data from all data slices along the z-direction in the y-direction; and traverse along the z-direction to calculate the integrity proof value μ on the j-th column along the x-direction within the k-th slice. kj =v i m kij +x kj and auxiliary values and {μ kj |1≤k≤z,1≤j≤s} and {tail} k |1≤k≤z} is sent back to the cloud server S. The {μ} involved in this step... kj|1≤k≤z,1≤j≤s} and {tail} k |1≤k≤z} are all Z q Elements on;

[0032] (6) Cloud server S according to O t Response judgment O t Whether the complete video cloud data is possessed, i.e., calculating and determining the equation. Does the equation hold true? If it does, then cloud server S accepts O. t As the legal owner of the video cloud data f, and will O t Add to owner list L owner If the equation does not hold, then cloud server S will not accept O. t The rightful owner of the video cloud data f.

[0033] In this embodiment, in steps (3-1) and (5), the secure message locking encryption MLE selects to use existing proven secure message locking encryption methods such as inadvertent transmission encoding and secret sharing.

[0034] The above are preferred embodiments of the present invention. Any changes made to the technical solution of the present invention that do not exceed the scope of the technical solution of the present invention shall fall within the protection scope of the present invention.

Claims

1. A method for proving video data ownership based on dual data possession proof, characterized in that, Includes the following steps: (1) Cloud server The publicly disclosed parameters involved in the process of publishing ownership certificates for video cloud data include... , , ,in It is a large prime number whose length meets the requirements for communication security. It includes A finite field of n elements whose generator is , It is the length of a digital watermark that meets security requirements; cloud server Publicly select a message digest length of Security message digest function and a user-generated random secret value Pseudo-random function for controlling output Video cloud data Cloud server with multiple owners Use owner list Managing multi-user video cloud data Ownership; (2) User The video data to be uploaded is arranged along the coordinate axis. , , of The axial direction is divided into Each data slice is along the edge. Axial direction divided into Data blocks, each data block along Axial direction divided into Each data segment, or standardized pixel, is a segment of a video cloud dataset. Each data segment is a pixel, and each pixel is denoted as _____. And request to upload video cloud data. If video cloud data If the file does not already exist on the cloud server, then the user who uploaded the file this time will be recorded as... Continue with step (3); if video cloud data If the file already exists on the cloud server, then the user who uploaded the file this time will be recorded as... And jump to step (4) to continue execution; (3) User The process of generating a video cloud data ownership certificate label includes the following steps: (3-1) from Randomly select a set of private integrity proof coefficients And calculate the corresponding public integrity proof coefficient. Then, obtain the encrypted MLE through a security message lock. Along the first The film Direction calculation Integrity proof label for each data block ; , }and All Elements on; (3-2) From another Randomly select a set of integrity proof coefficients ,along The direction aggregates intra-chip data block integrity tags into data slice integrity tags. ; and All Elements on; (3-3) Video cloud data , , }and Send to the cloud server, then delete the local video cloud data. ; , }and All Elements on; (4) By cloud server Towards the following Launch a challenge, namely cloud servers Randomly select a group along The data patches are oriented and distributed, and are labeled as follows: And for each sampled data piece from Select a random value on the group The challenges in this round are: and will , Send to ; and All of them are Elements on; (5) Based on this round of challenges In response, the encrypted MLE is locked via a secure message. ,along Read all directions in sequence The first data slice in the direction Line data, and along Directional traversal calculation Inner edge of the film Direction first Integrity proof value on the column and auxiliary values and will , and Send back to the cloud server ; , and All of them are Elements on; (6) Cloud server according to Response judgment Whether or not complete video cloud data is possessed, i.e., calculating and determining the equation. Does it hold true? If the equation holds true, then the cloud server... accept For video cloud data The rightful owner, and Add to owner list If the equation does not hold true, then the cloud server Not accepted For video cloud data The rightful owner.

2. The video data ownership proof method based on dual data possession proof according to claim 1, characterized in that, In step (2), the method for querying the existence of the video cloud data is as follows: by the user Computing video cloud data message summary And send to the cloud server cloud server by To find the corresponding video cloud data .

3. The video data ownership proof method based on dual data possession proof according to claim 1, characterized in that, In steps (3-1) and (5), the secure message lock encryption MLE selects to use either a message lock encryption method based on unintentional transmission encoding or based on secret sharing.

Images