Cloud storage system data integrity verification method and system based on edge computing

Abstract

The invention provides a data integrity detection method for an edge computing and cloud computing collaborative environment by taking practical application as a background, and belongs to the technical field of cloud computing security. In the scheme, an edge server is close to a client, assists a client in generating a data verification tag, and stores and manages frequently used data. The cloud client generates a'partial label 'for the data, and a complete label is generated by the edge server. And when the verifier challenges the data integrity, the edge server is responsible for generating integrity evidence of the stored data, and the cloud server is responsible for generating complete evidence and is responsible for the overall integrity of the data. Through the introduction of the edge server, the calculation cost of the cloud client is reduced, the data access efficiency of the client is improved, the data storage and access pressure of the cloud server is shared, the cloud server is assisted to safely and efficiently complete data integrity detection, and the operation efficiency of the system is improved on the whole.

Description

Technical Field

[0001] The present invention relates to the field of computer security, and in particular to a method and system for verifying data integrity of a cloud storage system based on edge computing. Background Art

[0002] With the rapid development of edge computing, more and more applications are using the operating environment of edge computing and cloud computing. The introduction of edge servers has greatly enhanced the computing power and storage capacity of traditional cloud computing platforms, greatly expanding the functions of cloud computing services, and thus attracting more and more users to choose the system operating environment of cloud computing and edge computing. In the new operating environment, users' data storage and security bring new challenges. On the one hand, it is necessary to make full use of edge servers to store and manage frequently used data to improve data access efficiency. On the other hand, the capacity of edge servers is limited, and most of the data still needs to be outsourced to cloud storage. Therefore, in this more complex situation than before, how to check the integrity of data is a more difficult but very important thing. Summary of the invention

[0003] In view of the above problems, the inventors propose an efficient cloud data integrity verification method for the collaborative environment of cloud computing and edge computing. The present invention makes full use of the storage capacity of the edge server, outsources the storage and management functions of part of the customer data to the edge server, and improves the efficiency of data access and use while reducing the burden on the cloud server. On the other hand, the edge server is used to complete the generation of partial verification tags of data blocks and the generation of integrity evidence of cached data, so as to share the computing pressure of cloud clients and cloud servers, and assist the cloud server in verifying data integrity.

[0004] The present invention adopts the following technical solutions to solve the above technical problems:

[0005] The present invention provides a method for verifying data integrity of a cloud storage system based on edge computing. The cloud storage system based on edge computing includes a data owner, an edge server, a cloud storage server, and a verifier. The edge server and the cloud storage server store the data of the data owner and accept the data integrity check of the verifier. The method includes the following steps:

[0006] S1: The data owner generates a private key , and common parameters , where the data owner will Save it locally and public;

[0007] in,

[0008] The specific process is:

[0009] According to the user's demand for security level, randomly select a prime number corresponding to the security level ;

[0010] Randomly select an integer as ,satisfy ;

[0011] Choose two stages as The multiplicative cyclic group of , ;in The generator of ;

[0012] Calculate the public key :

[0013]

[0014] About and The bilinear mapping function satisfies the bilinear mapping relationship: ;

[0015] Choose three different hash functions satisfy:

[0016]

[0017]

[0018]

[0019] S2: Data that the data owner will need to store Split into data blocks, represented as:

[0020]

[0021] in Indicates data blocks, and satisfy ;

[0022] The data owner uses a symmetric encryption algorithm to encrypt each data block and obtain a ciphertext data block:

[0023]

[0024] in Indicates Data blocks The encrypted data obtained using the symmetric encryption algorithm Ciphertext data blocks;

[0025] The data owner calculates a partial label for each ciphertext data block:

[0026]

[0027] in, Represents the partial label of the i-th ciphertext data block;

[0028] Indicates the edge server identity;

[0029] The data owner will Upload to edge server;

[0030] in It is the identity of the data owner;

[0031] S3: The edge server computes the complete label for each ciphertext data block:

[0032]

[0033] in, Represents the complete label of the i-th ciphertext data block;

[0034] The edge server sends the ciphertext data blocks that meet the preset conditions and the corresponding complete tags to the cloud storage server for storage;

[0035] S4: The verifier sends a challenge message to the cloud storage server based on the encrypted data block that needs to be verified:

[0036]

[0037] in, For challenge information;

[0038] is the number of encrypted data blocks that need to be verified;

[0039] The index number of the encrypted data block that needs to be verified;

[0040] For the A random parameter for encrypting a block of data;

[0041] The cloud storage server will store the encrypted data blocks according to their actual storage locations. Divided into two parts, namely , :

[0042]

[0043]

[0044] The cloud storage server will Sent to the edge server, which generates the first part of the evidence :

[0045]

[0046] in,

[0047]

[0048]

[0049]

[0050] The edge server will Send to cloud storage server;

[0051] Cloud storage server based Generate the second part of evidence :

[0052]

[0053] in,

[0054]

[0055]

[0056]

[0057] Cloud storage server based and Get complete evidence :

[0058]

[0059] in,

[0060]

[0061]

[0062]

[0063] The cloud storage server will Send to the validator;

[0064] S4: The verifier receives Then verify whether the following formula is true:

[0065]

[0066] If the formula is true, it means the data is complete, otherwise it means the data is incomplete.

[0067] Preferably, the security level uses Indicates that when The binary digits are When The safety level is .

[0068] Preferably, the symmetric encryption algorithm is DES.

[0069] Preferably, the cloud storage server verifies the received ciphertext data block and the corresponding complete label, and saves it if the verification passes, and refuses to receive it if the verification fails. The verification method is to check whether the ciphertext data block and its corresponding complete label satisfy the following formula:

[0070]

[0071] If the conditions are met, the verification passes; otherwise, the verification fails.

[0072] The present invention also provides a cloud storage system based on edge computing, which uses the above method to verify data integrity.

[0073] Beneficial effects: The present invention realizes data integrity detection in a collaborative environment of edge computing and cloud computing. The edge server assists the client in generating data verification tags, and stores and manages some frequently used data. When verifying data integrity, the edge server is responsible for generating evidence of partial integrity verification of the data it stores, and then the cloud server generates complete evidence. The introduction of edge servers reduces the computing cost of cloud clients, improves the efficiency of customer access to data, shares the burden of data storage and access on cloud servers, and also assists cloud servers in completing data integrity detection safely and efficiently. Overall, it improves the operating efficiency of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0074] Figure 1 1 is a system structure diagram in an embodiment of the present invention. DETAILED DESCRIPTION

[0075] In order to make the purpose, features and advantages of the present invention more obvious and easy to understand, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described below are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0076] A method for verifying data integrity of a cloud storage system based on edge computing, wherein the cloud storage system based on edge computing comprises a data owner, an edge server, a cloud storage server, and a verifier, wherein the edge server and the cloud storage server store the data of the data owner and accept the data integrity check of the verifier; Figure 1 As shown in the figure, it is a possible implementation of a cloud storage system based on edge computing. The Data Owner in the figure is the data owner, the Edge Node is the edge server, the CSP is the cloud storage server, and the TPA is the verifier;

[0077] The method comprises the following steps:

[0078] S1: The data owner generates a private key , and common parameters , where the data owner will Save it locally and public;

[0079] in,

[0080] The specific process is:

[0081] According to the user's demand for security level, randomly select a prime number corresponding to the security level ;

[0082] Among them, the security level uses Indicates that when The binary digits are When The safety level is ;

[0083] Randomly select an integer as ,satisfy ;

[0084] Choose two stages as The multiplicative cyclic group of , ;in The generator of ;

[0085] Calculate the public key :

[0086]

[0087] About and The bilinear mapping function satisfies the bilinear mapping relationship: ;

[0088] Choose three different hash functions satisfy:

[0089]

[0090]

[0091]

[0092] S2: Data that the data owner will need to store Split into data blocks, represented as:

[0093]

[0094] in Indicates data blocks, and satisfy ;

[0095] The data owner uses a symmetric encryption algorithm to encrypt each data block and obtain a ciphertext data block:

[0096]

[0097] in Indicates Data blocks The encrypted data obtained using the symmetric encryption algorithm ciphertext data blocks; in this embodiment, the symmetric encryption algorithm is DES;

[0098] The data owner calculates a partial label for each ciphertext data block:

[0099]

[0100] in, Represents the partial label of the i-th ciphertext data block;

[0101] Indicates the edge server identity;

[0102] The data owner will Upload to edge server;

[0103] in It is the identity of the data owner;

[0104] S3: The edge server computes the complete label for each ciphertext data block:

[0105]

[0106] in, Represents the complete label of the i-th ciphertext data block;

[0107] The edge server sends the ciphertext data blocks that meet the preset conditions and the corresponding complete tags to the cloud storage server for storage;

[0108] In some possible embodiments, the preset condition is that the usage frequency is lower than a threshold;

[0109] The cloud storage server verifies the received ciphertext data block and the corresponding complete label. If the verification passes, it will be saved. If the verification fails, it will be rejected. The verification method is to check whether the ciphertext data block and its corresponding complete label satisfy the following formula:

[0110]

[0111] If the conditions are met, the verification is successful, otherwise the verification fails.

[0112] S4: The verifier sends a challenge message to the cloud storage server based on the encrypted data block that needs to be verified:

[0113]

[0114] in, For challenge information;

[0115] is the number of encrypted data blocks that need to be verified;

[0116] The index number of the encrypted data block that needs to be verified;

[0117] For the A random parameter for encrypting a block of data;

[0118] The cloud storage server will store the encrypted data blocks according to their actual storage locations. Divided into two parts, namely , :

[0119]

[0120]

[0121] The cloud storage server will Sent to the edge server, which generates the first part of the evidence :

[0122]

[0123] in,

[0124]

[0125]

[0126]

[0127] The edge server will Send to cloud storage server;

[0128] Cloud storage server based Generate the second part of evidence :

[0129]

[0130] in,

[0131]

[0132]

[0133]

[0134] Cloud storage server based and Get complete evidence :

[0135]

[0136] in,

[0137]

[0138]

[0139]

[0140] The cloud storage server will Send to the validator;

[0141] S4: The verifier receives Then verify whether the following formula is true:

[0142]

[0143] If the formula is true, it means the data is complete, otherwise it means the data is incomplete.

[0144] The verifier will truthfully feedback the verification results to the customer, and the customer will handle subsequent claims or data recovery based on the verification results.

[0145] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A method for verifying data integrity of a cloud storage system based on edge computing, wherein the cloud storage system based on edge computing comprises a data owner, an edge server, a cloud storage server, and a verifier, wherein the edge server and the cloud storage server store the data of the data owner and accept the data integrity verification by the verifier; characterized in that: The method comprises the following steps: S1: The data owner generates a private key , and common parameters , where the data owner will Save it locally and public; in, The specific process is: According to the user's demand for security level, randomly select a prime number corresponding to the security level ; Randomly select an integer as ,satisfy ; Choose two stages as The multiplicative cyclic group of , ;in The generator of ; Calculate the public key : About and The bilinear mapping function satisfies the bilinear mapping relationship: ; Choose three different hash functions satisfy: S2: Data that the data owner will need to store Split into data blocks, represented as: in Indicates data blocks, and satisfy ; The data owner uses a symmetric encryption algorithm to encrypt each data block and obtain a ciphertext data block: in Indicates Data blocks The encrypted data obtained using the symmetric encryption algorithm Ciphertext data blocks; The data owner calculates a partial label for each ciphertext data block: in, Represents the partial label of the i-th ciphertext data block; Indicates the edge server identity; The data owner will Upload to edge server; in It is the identity of the data owner; S3: The edge server computes the complete label for each ciphertext data block: in, Represents the complete label of the i-th ciphertext data block; The edge server sends the ciphertext data blocks that meet the preset conditions and the corresponding complete tags to the cloud storage server for storage; S4: The verifier sends a challenge message to the cloud storage server based on the encrypted data block that needs to be verified: in, For challenge information; is the number of encrypted data blocks that need to be verified; The index number of the encrypted data block that needs to be verified; For the A random parameter for encrypting a block of data; The cloud storage server will store the encrypted data blocks according to their actual storage locations. Divided into two parts, namely , : The cloud storage server will Sent to the edge server, which generates the first part of the evidence : in, The edge server will Send to cloud storage server; Cloud storage server based Generate the second part of evidence : in, Cloud storage server based and Get complete evidence : in, The cloud storage server will Send to the validator; S4: The verifier receives Then verify whether the following formula is true: If the formula is true, it means the data is complete, otherwise it means the data is incomplete.

2. According to claim 1, a cloud storage system data integrity verification method based on edge computing is characterized in that: Safety level use Indicates that when The binary digits are When The safety level is .

3. According to a method for verifying data integrity of a cloud storage system based on edge computing according to claim 1, it is characterized in that: The symmetric encryption algorithm is DES.

4. According to a method for verifying data integrity of a cloud storage system based on edge computing according to claim 1, it is characterized in that: The cloud storage server verifies the received ciphertext data block and the corresponding complete label. If the verification passes, it will be saved. If the verification fails, it will be rejected. The verification method is to check whether the ciphertext data block and its corresponding complete label satisfy the following formula: If the conditions are met, the verification passes; otherwise, the verification fails.

5. A cloud storage system based on edge computing, characterized in that: Use the method described in any one of claims 1 to 4 to perform data integrity verification.

Images