Data auditing method, device and equipment and computer readable storage medium

Abstract

The invention discloses a data auditing method, device and equipment and a computer readable storage medium, and is applied to the technical field of data storage. Wherein the file authenticator is an authenticator determined based on a semantic rule; obtaining file information corresponding to the file authenticator, generating challenge information based on the file information, and sending the challenge information to the cloud; obtaining proof information generated by the cloud based on the challenge information; and verifying the integrity and semantic correctness of the current file based on the proof information to obtain a data auditing result. Compared with the prior art that data integrity and semantic correctness verification cannot be carried out at the same time, the verification information based on the semantic rule is generated by embedding the semantic rule into the file authenticator, the integrity and semantic correctness of the data can be verified at the same time based on the verification information, and the accuracy of data verification is improved.

Description

Technical Field

[0001] The present invention relates to the field of data storage technology, and in particular to a data auditing method, device, equipment and computer-readable storage medium. Background Art

[0002] Data auditing is a core component of cloud computing security. By monitoring and recording whether the data content is complete and whether the semantic information meets the requirements of the system, it helps users identify potential security threats and ensure compliance. By timely detecting and discovering abnormal data behavior, greater economic losses can be prevented. The existing PDP (Provable data possession algorithm) solution can only verify the integrity of the data, but cannot verify the semantic correctness of the data. In addition, most of the existing PDP algorithms have low execution efficiency.

[0003] Therefore, how to verify the semantic correctness of data while verifying its integrity is a technical problem that technicians in this field need to solve urgently. Summary of the invention

[0004] In view of this, an object of the present invention is to provide a data auditing method, apparatus, device and computer-readable storage medium, which solve the technical problem of low accuracy of data auditing in the prior art.

[0005] In order to solve the above technical problems, the present invention provides a data audit method, comprising:

[0006] Obtaining a file authentication code; wherein the file authentication code is an authentication code determined based on semantic rules;

[0007] Acquire file information corresponding to the file authenticator, generate challenge information based on the file information, and send the challenge information to the cloud;

[0008] Obtaining proof information generated by the cloud based on the challenge information;

[0009] The integrity and semantic correctness of the current file are verified based on the certification information to obtain a data audit result.

[0010] Optionally, obtaining file information corresponding to the file authenticator, generating challenge information based on the file information, and sending the challenge information to the cloud includes:

[0011] Obtaining a unique file identifier corresponding to the file authentication identifier;

[0012] Determine the challenge information corresponding to the unique identifier of the file; wherein the challenge information CHAL = {i, v i} I＝{1,...,c},i∈I , represents an integer between 1 and q, and c is an integer less than or equal to the total number of file blocks.

[0013] Optionally, before determining the challenge information corresponding to the file unique identifier, the method further includes:

[0014] Get the file random variable corresponding to the unique identifier of the file and file tag tag; where tag = ID i ||A i ||B i ||name||n||Z i ||δ,ID i Indicates the current user identity, A i , B i represents the user's public key, name represents the unique identifier of the file, n represents the number of blocks in the file, δ and Z i Indicates the elements that make up a file tag;

[0015] Verify the first equation s d =ID i t f(t,tag) Is it true? s, t are random variables The constituent elements of , f is a one-way function;

[0016] When the first equation is established, the second equation δ=H2(ID i ||A i ||B i ||name||n||Z i ) is established;

[0017] When the second equation is established, the step of determining the challenge information corresponding to the file unique identifier is performed.

[0018] Optionally, the proof information is proof, proof = <ρ, σ>, Among them, m i v i is the parameter in the challenge message, T i Indicates the current file authenticator.

[0019] Optionally, the integrity and semantic correctness of the current file are verified based on the certification information to obtain a data audit result, including:

[0020] Verify whether the third equation is true based on the proof information; wherein the third equation is an inequality consisting of elements of the proof information, the system private key, the cryptographic generator, the variable parameters corresponding to the challenge information, and the file tag;

[0021] When the third equation holds true, the data audit result is determined to be data integrity and data semantics correctness.

[0022] Optionally, obtain the file authenticator, including:

[0023] Obtaining a generator determined based on a bilinear mapping and a private key of a user; wherein the private key of the user is a private key determined based on a semantic rule;

[0024] Obtain a file authenticator determined by the cloud based on the generator and the private key of the user.

[0025] Optionally, after verifying the integrity and semantic correctness of the current file based on the certification information and obtaining the data audit result, the method further includes:

[0026] Acquire the latest file authenticator corresponding to the latest semantic rule of the current user; wherein the latest semantic rule includes the updated semantic rule and the latest generated semantic rule.

[0027] The present invention also provides a data auditing device, comprising:

[0028] A file authentication code acquisition module, used to acquire a file authentication code; wherein the file authentication code is an authentication code determined based on semantic rules;

[0029] A challenge information generation module, used to obtain file information corresponding to the file authentication code, generate challenge information based on the file information, and send the challenge information to the cloud;

[0030] A certification information generation module, used to obtain certification information generated by the cloud based on the challenge information;

[0031] The audit result determination module is used to verify the integrity and semantic correctness of the current file based on the certification information to obtain the data audit result.

[0032] The present invention also provides a data auditing device, comprising:

[0033] Memory for storing computer programs;

[0034] A processor is used to execute the computer program to implement the steps of the data audit method as described above.

[0035] The present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the data audit method described above are implemented.

[0036] The present invention also provides a computer program product, comprising a computer program / instruction, which implements the steps of the above-mentioned data auditing method when executed by a processor.

[0037] It can be seen that the present invention obtains a file authenticator; wherein the file authenticator is an authenticator determined based on semantic rules; obtains file information corresponding to the file authenticator, generates challenge information based on the file information, and sends the challenge information to the cloud; obtains proof information generated by the cloud based on the challenge information; verifies the integrity and semantic correctness of the current file based on the proof information, and obtains a data audit result. The beneficial effect of the present invention is that by embedding semantic rules into the file authenticator, thereby generating proof information based on semantic rules, the integrity and semantic correctness of the data can be verified simultaneously based on the proof information, thereby improving the accuracy of data verification.

[0038] In addition, the present invention also provides a data auditing device, equipment and computer-readable storage medium, which also have the above-mentioned beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0040] Figure 1 A flowchart of a data audit method provided by an embodiment of the present invention;

[0041] Figure 2 A specific flow chart of a data audit method provided by an embodiment of the present invention;

[0042] Figure 3 A schematic diagram of a system framework provided by an embodiment of the present invention;

[0043] Figure 4 A schematic diagram of the structure of a data auditing device provided by an embodiment of the present invention;

[0044] Figure 5 A schematic diagram of the structure of a data auditing device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0045] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0046] Some of the terms that appear in the description of the embodiments of the present application may be interpreted as follows:

[0047] KGC (Key Generation Center): The key management center is used to generate user key information.

[0048] PDP (Provable data possession): A remote data possession algorithm that implements data integrity and semantic correctness auditing functions.

[0049] TPA (Third party auditor): A third-party data auditor who performs data audit operations.

[0050] The definitions of some symbols used in this patent are shown in Table 1 below:

[0051] Table 1 Symbol definition table

[0052]

[0053]

[0054] Please refer to Figure 1 , Figure 1 A flowchart of a data audit method provided by an embodiment of the present invention. The method may include:

[0055] S101, obtaining a file authenticator; wherein the file authenticator is an authenticator determined based on a semantic rule.

[0056] The execution subject of this embodiment is a device for TPA to perform data audit operations. For example, TPA can be a dedicated audit terminal, receiving audit instructions from the user terminal, and auditing the specified data in the cloud according to the audit instructions; or it can also be a user terminal, that is, the user terminal directly audits the cloud data according to the audit requirements. The file authenticator in this embodiment is an authenticator generated based on information related to the semantic rules, so that the subsequent information related to the semantic rules can be based on the file authenticator.

[0057] It should be further explained that, in order to improve the accuracy of determining the file authentication code, the above-mentioned obtaining of the file authentication code may include:

[0058] S1011, obtaining a generator determined based on a bilinear mapping and a private key of the user; wherein the private key of the user is a private key determined based on a semantic rule.

[0059] S1012, obtaining a file authenticator determined by the cloud based on the generator and the user's private key.

[0060] In this embodiment, semantic rules are used when determining the user's private key, so a file authenticator based on semantic rules can be obtained. The bilinear mapping in this embodiment is e:G1×G1→G2, where G1 and G2 are two multiplicative cyclic groups of prime order q, and g is the generator of G1. The random number in is used as the system private key. Assume that the unique identifier of file F is name. The user should divide file F into n blocks and calculate the file authentication identifier For each data block m j . Then, the user can obtain the file authentication code set Λ = {T j} 1≤j≤n .a i , b i is the user's private key. The process of determining the user's private key can be: Assuming that the current user's identity is ID i The user selects a random number And calculate The user will then <ID i ,A i >Send to KGC. KGC selects a random number And calculate RH=H3(rule),b i =r i +σH1(ID i , A i +B i ,RH) where rule is the user ID i The corresponding semantic rules.

[0061] S102, obtaining file information corresponding to the file authenticator, generating challenge information based on the file information, and sending the challenge information to the cloud.

[0062] This embodiment does not limit specific file information. For example, the file information may be a file unique identifier; or the file information in this embodiment may also be file-related information corresponding to the file unique identifier, such as the user's public key, the number of blocks in the file, the elements that make up the file tag, etc. The challenge information in this embodiment generally refers to information generated during the data audit process and used to verify data integrity and security. For example, TPA generates the challenge information CHAL for the file name = {i,v i}I＝{1,...,c},i∈I TPA random selection And calculate C = g υ .

[0063] It should be further explained that, in order to improve the accuracy of generating the challenge information, the above-mentioned obtaining the file information corresponding to the file authenticator, generating the challenge information based on the file information, and sending the challenge information to the cloud may include:

[0064] S1021, obtaining a file unique identifier corresponding to the file authentication identifier;

[0065] S1022, determine the challenge information corresponding to the file unique identifier; wherein the challenge information CHAL = {i, v i} I = {1,...,c},i∈I , represents an integer between 1 and q, and c is an integer less than or equal to the total number of file blocks.

[0066] In this embodiment, the file information is a file unique identifier. In this embodiment, determining the challenge information corresponding to the file unique identifier means determining the relevant information corresponding to the file data based on the file unique identifier, thereby generating the information required for the challenge information based on the relevant information. i The random number representing the i-th data block of the file corresponding to the file unique identifier. c is an integer less than the total number of file blocks of the level. i is the partial file block to be audited. It can be understood that since the challenge information is only a partial data block, the scheme does not need to audit each file block one by one during the data audit process, thereby significantly improving the audit efficiency, and the bandwidth consumption is independent of the data volume of the audited file.

[0067] It should be further explained that, in order to improve the security of file data, before determining the challenge information corresponding to the file unique identifier, the following may also be included:

[0068] S1, obtain the file random variable corresponding to the file unique identifier and file tag tag; where tag = ID i ||A i ||B i ||name||n||Z i ||δ. ID i Indicates the current user identity, A i , B i represents the user's public key, name represents the unique identifier of the file, n represents the number of blocks in the file, δ and Z i Indicates the elements that make up a file tag;

[0069] S2, verify the first equation s d =IDi t f(t,tag) Is it true? s, t are random variables The constituent elements of , f is a one-way function;

[0070] S3, when the first equation is established, verify the second equation δ=H2(ID i ||A i ||B i ||name||n||Z i ) is established;

[0071] S4, when the second equation is established, determine to execute the step of determining the challenge information corresponding to the file unique identifier.

[0072] This embodiment verifies the file-related information before generating the corresponding challenge information, thereby improving the security of the file and generating the challenge information safely. In addition, if data problems (such as label errors, file damage, etc.) are found in the data processing flow, timely termination of the algorithm can avoid subsequent unnecessary calculations and waste of resources, thereby improving the overall data processing efficiency.

[0073] S103, obtaining proof information generated by the cloud based on the challenge information.

[0074] This embodiment will obtain the proof information corresponding to the user data generated in the cloud, and the proof information is proof, proof=<ρ,σ., Among them, m i v i It is the parameter in the challenge information.

[0075] S104, verify the integrity and semantic correctness of the current file based on the proof information to obtain the data audit result.

[0076] When verifying the integrity and semantic correctness of the current file based on the proof information, this embodiment makes a judgment based on an equation related to the semantic rules and the proof information of data integrity. If the equation holds, it indicates that the data in the file is complete and semantically correct. Otherwise, it indicates that the data is complete but the semantics are wrong; or the data content is incomplete and the semantics are incorrect.

[0077] It should be further explained that, in order to improve the accuracy of the audit result, the above-mentioned verification of the integrity and semantic correctness of the current file based on the proof information to obtain the data audit result may include: verifying whether the third equation is established based on the proof information; wherein the third equation is an inequality composed of the variable parameters corresponding to the proof information, the system private key, the cryptographic generator, the challenge information, and the file label component elements; when the third equation is established, the data audit result is determined to be data integrity and data semantic correctness. The third equation in this embodiment can be e(συ ,g)=e(Z i ,C ρ ), where σ and ρ are the proof information, g represents the cryptographic generator, Z i is a label component, and C is a random variable. This embodiment provides a specific third equation, which improves the accuracy of audit result determination.

[0078] It should be further explained that in order to improve the user experience, after verifying the integrity and semantic correctness of the current file based on the proof information and obtaining the data audit results, it can also include: obtaining the latest file authenticator corresponding to the latest semantic rule of the current user; wherein the latest semantic rule includes the updated semantic rule and the latest generated semantic rule. The latest semantic rule in this embodiment can be a rule that updates the historical semantic rule, or the latest semantic rule in this embodiment can also be a regenerated semantic rule. In the process of file auditing, this embodiment can update the file authenticator corresponding to the semantic rule according to user needs, thereby meeting the different needs of users.

[0079] A data audit method provided by an embodiment of the present invention may include: S101, obtaining a file authenticator; wherein the file authenticator is an authenticator determined based on semantic rules; S102, obtaining file information corresponding to the file authenticator, generating challenge information based on the file information, and sending the challenge information to the cloud; S103, obtaining proof information generated by the cloud based on the challenge information; S104, verifying the integrity and semantic correctness of the current file based on the proof information to obtain a data audit result. Compared with the current inability to verify data integrity and semantic correctness at the same time, the present application generates proof information based on semantic rules by embedding semantic rules into text authenticators, and can verify the integrity and semantic correctness of data based on the proof information, thereby improving the accuracy of data verification.

[0080] The present invention proposes a cloud storage auditing scheme based on identity signatures, which can ensure the integrity and semantic correctness of cloud data. In addition, during the data auditing process, the scheme does not need to audit each file block one by one, thereby significantly improving the auditing efficiency, and the bandwidth consumption is independent of the data volume of the audited file. The scheme also supports users to customize semantic verification rules and has high execution efficiency, making it adaptable to a wider range of application scenarios.

[0081] In order to make the present invention easier to understand, please refer to Figure 2 , Figure 2A specific flow chart of a data audit method provided by an embodiment of the present invention mainly includes seven processes: Setup, GenKey, StorF, Chal, Resp, Verf, and UptRule. Setup represents the setup or initialization phase; GenKey represents the process of generating keys; StorF represents the process of storing files, file authenticators, file tags, and other data in the cloud or on a blockchain; Chal represents the process of generating challenge information; Resp represents the process of responding; Verf represents the process of proving; and UptRule represents the process of updating rule information. Figure 3 FIG. 1 is a schematic diagram of a system framework corresponding to an embodiment of the present invention. Figure 3 As can be seen, users: are used to delete and modify files; users perform file operations; data verification engine: users upload data to the cloud, verify semantic correctness, and cannot upload if verification fails. Cloud: verify semantic correctness and save files to the cloud; TPA: data verification party, conducts audits, a virtual role played by users or institutions, or third-party central institutions. TPA verifies data integrity and semantic correctness. Rules: issue required semantic rules.

[0082] Step 1: Setup: The KGC key management center calculates the system private key, system public key and public parameters; the system private key is determined based on the cryptography of bilinear mapping, the system public key is determined based on the system private key, and the public parameters are multiple parameter values ​​determined based on the cryptography of bilinear mapping and hash functions.

[0083] (1) KGC selects the cryptographic method of bilinear mapping. e:G1×G1→G2 (mapping to G2), where G1 and G2 are two multiplicative cyclic groups of prime order q, and g is the generator of G1.

[0084] (2) KGC selects three hash functions H3:{0,1} * →G1. {0,1} * , {0,1} * Represents a value of 01, Represents a random number between 1-q, H1, H2, H3 are function names, {0,1} * Represents a positive string consisting of 0s and 1s.

[0085] (3) KGC selection The random number in is used as the system private key, and the public key P = g is calculated σ .

[0086] KGC obtains and publishes the following public parameters: {e, G1, G2, q, g, H1, H2, H3, P}.

[0087] Step 2: GenKey: The user cooperates with KGC (Key Management Center) to generate his own public key and private key. Use the system private key, public parameters g, H1, H3, and system public key P to get the private key (a i ,b i ) and the public key (A i ,B i ), system parameters {d,n1,f} and child private key g1.

[0088] (1) Assume that the current user's identity is ID i The user selects a random number And calculate The user will then <ID i ,A i >Send to KGC.

[0089] (2) KGC selects a random number And calculate RH=H3(rule),b i =r i +σH1(ID i , A i +B i ,RH) where rule is the user ID i Corresponding semantic rules. KGC sends B i , b i and RH are sent to the user.

[0090] (3) User receives B i , b i After RH, the user verifies the equation If it is true, it means the verification is successful and the user can obtain his own private key (a i ,b i ) and the public key (A i ,B i ), otherwise the verification fails and KGC needs to retransmit the corresponding data.

[0091] (4) KGC selects two large prime numbers p1 and q1, calculates their product n1, and selects one that matches Coprime integers d, where is the Euler function of n1. Then, KGC selects a one-way function f. Finally, KGC outputs the system parameters {d,n1,f} and saves the master key n1.

[0092] (5) KGC uses the user's identity ID i Calculate the user's sub-private key The sub-private key g1 is then transmitted to the user through a secure channel.

[0093] Step 3: StorF: The user stores files, file authenticators, file tags, and other data in the cloud. Using public parameters g, system public key P, H2, RH, private key (a i ,b i ), public key (A i ,B i ), user's ID i , system parameter d, master key n1, sub-private key g1, and obtain the file authenticator.

[0094] (1) Assume that the unique identifier of file F is name. The user should divide file F into n blocks and calculate the file authentication identifier For each data block mj, the user can then obtain the file authenticator set Λ = {T j} 1≤j≤n .

[0095] (2) User-calculated file tag components and δ=H2(ID i ||A i ||B i ||name||n||Z i ). Among them, || is a connector.

[0096] (3) User calculates file tag tag = ID i ||A i ||B i ||name||n||Z i ||δ. Then, the user selects a random integer r1 and calculates t=r1 d (modn1); mod represents the modular operation. Then, the user calculates s = g1r1f (t,tag) (modn1). Finally, the user will Transfer to the cloud.

[0097] (4) When receiving When the cloud verifies the user's permissions, it will then verify the d =ID i t f(t,tag) Whether it is true, these values ​​are stored in the cloud after permission verification and validation.

[0098] Step 4: Chal: TPA generates a challenge message and sends it to the cloud.

[0099] (1)TPA obtains the file name corresponding to the cloud and file tag, and verify s d =ID i t f(t,tag)If the verification fails, the algorithm terminates.

[0100] (2) After receiving the tag, TPA checks whether δ is equal to H2 (ID i ||A i ||B i ||name||n||Z i )(Purpose: This data may be tampered with when transmitted over the network, to prevent tampering, || represents a connector). If the verification fails, the algorithm exits.

[0101] (3) TPA generates the challenge information CHAL of file name = {i,v i} I＝{1,...,c},i∈I TPA random selection And calculate C = g υ This formula represents a set CHAL, which consists of a series of pairs of elements, each of which contains an index i and a value v associated with the index. i , I It is an index set that can take any integer value from 1 to c, where c is a positive integer less than or equal to the total number of file blocks.

[0102] (4)TPA sends CHAL and C to the cloud.

[0103] Step 5: Resp: After receiving CHAL and C, the cloud generates proof information corresponding to the user data and sends it back to TPA.

[0104] (1) After the cloud receives CHAL and C, it calculates m i v i is part of the challenge message, T i Indicates the file authentication character, m i is the i-th file block, v i is the random number generated in the previous step, v i Part of the challenge information.

[0105] (2) The cloud sends the proof information proof = <ρ, σ> to TPA.

[0106] Step 6: Verf: TPA verifies the attestation information from the cloud and determines whether the cloud data is complete.

[0107] After receiving proof=<ρ,σ>, TPA verifies the equation e(σ υ ,g)=e(Z i ,C ρ ) is true. If the verification fails, the cloud data is incomplete and semantically correct.

[0108] Step 7: UptRule: The user cooperates with KGC to update the rule information corresponding to the user. This algorithm will not modify the cloud data, and the execution efficiency is not affected by the amount of data in the audited file.

[0109] (1) Assume user ID i The new rule is rule'. The user calculates RH'=H3(rule') and sends <ID i ,A i ,B i ,RH′,RH,b i >Sent to KGC via secure channel.

[0110] (2) Receive <ID i ,A i ,B i ,RH′,RH,b i >, KGC confirms the user ID i Is the UptRule algorithm allowed to execute? If not, the program exits. KGC calculates b i ′=b i -σH1(ID i ,A i +B i ,RH)+σH1(ID i ,A i +B i ,RH′), and then b is transmitted through a secure channel i 'Send to user ID i .

[0111] (3) Receive b i ′, the user uses the equation to verify the information. If the verification fails, the program exits. Afterwards, the user can obtain his own private key (a i ,b i ′) and the public key (A i ,B i ). The user then calculates δ′=H2(ID i ||A i ||B i ||name||n||Z i ′),tag′=ID i ||A i ||B i ||name||n||Z i ′||δ′. After that, the user retrieves the user's stored data from the cloud and calculates the file authentication code corresponding to each file block Then we get the file authentication symbol set Λ'={T′j} 1≤j≤n .

[0112] (4) The user then re-signs tag′ to obtain And tag′, Λ' and Securely stored in the cloud for future reference and verification.

[0113] The present invention proposes a cloud storage auditing scheme based on identity signature, which can verify data integrity and semantic correctness at the same time. This scheme allows any entity to audit the integrity and semantic correctness of cloud data without having to possess the private key of the data owner. This scheme also allows users to customize their own semantic auditing rules to verify the semantic correctness of files. At the same time, this scheme has high execution efficiency.

[0114] The data auditing device provided by an embodiment of the present invention is introduced below. The data auditing device described below and the data auditing method described above can be referred to each other.

[0115] Please refer to Figure 4 , Figure 4 A schematic diagram of the structure of a data auditing device provided by an embodiment of the present invention may include:

[0116] The file authentication code acquisition module 100 is used to acquire a file authentication code; wherein the file authentication code is an authentication code determined based on a semantic rule;

[0117] A challenge information generation module 200, configured to obtain file information corresponding to the file authenticator, generate challenge information based on the file information, and send the challenge information to the cloud;

[0118] A certification information generation module 300, used to obtain certification information generated by the cloud based on the challenge information;

[0119] The audit result determination module 400 is used to verify the integrity and semantic correctness of the current file based on the certification information to obtain a data audit result.

[0120] Further, based on the above embodiment, the challenge information generating module 200 may include:

[0121] A file unique identifier obtaining unit, used to obtain a file unique identifier corresponding to the file authentication identifier;

[0122] A challenge information determination unit is used to determine the challenge information corresponding to the unique identifier of the file; wherein the challenge information CHAL = {i, v i} I＝{1,...,c},i∈I , represents an integer between 1 and q, and c is an integer less than or equal to the total number of file blocks.

[0123] Further, based on the above embodiment, the above data auditing device may further include:

[0124] A file information acquisition unit is used to acquire the file random variable corresponding to the file unique identifier and file tag tag; where tag = ID i ||A i ||B i ||name||n||Z i ||δ,ID i Indicates the current user identity, A i , B i represents the user's public key, name represents the unique identifier of the file, n represents the number of blocks in the file, δ and Z i Indicates the elements that make up a file tag;

[0125] The first equation verification unit is used to verify the first equation s d =ID i t f(t,tag) Is it true? s, t are random variables The constituent elements of , f is a one-way function;

[0126] The second equation verification unit is used to verify the second equation δ=H2(ID i ||A i ||B i ||name||n||Z i ) is established;

[0127] The challenge information generates a ternary, which is used to determine the step of executing the step of determining the challenge information corresponding to the file unique identifier when the second equation is established.

[0128] Further, based on any of the above embodiments, the proof information is proof, proof = <ρ, σ>, Among them, m i v i is the parameter in the challenge message, T i Indicates the current file authenticator.

[0129] Further, based on any of the above embodiments, the audit result determination module 400 may include:

[0130] A third equation verification unit, used to verify whether the third equation is established based on the proof information; wherein the third equation is an inequality consisting of elements of the proof information, the system private key, the cryptographic generator, the variable parameters corresponding to the challenge information, and the file tag;

[0131] The data integrity and data semantics correctness determination unit is used to determine that the data audit result is data integrity and data semantics correctness when the third equation is established.

[0132] Further, based on any of the above embodiments, the file authentication code acquisition module 100 may include:

[0133] A private key determination unit, used to obtain a generator determined based on a bilinear mapping and a private key of a user; wherein the private key of the user is a private key determined based on a semantic rule;

[0134] A file authentication code determination unit is used to obtain a file authentication code determined by the cloud based on the generator and the private key of the user.

[0135] Further, based on any of the above embodiments, the above data auditing device may further include:

[0136] The semantic rule updating unit is used to obtain the latest file authentication symbol corresponding to the latest semantic rule of the current user; wherein the latest semantic rule includes the updated semantic rule and the latest generated semantic rule.

[0137] It should be noted that the order of the modules and units in the above data auditing device can be changed without affecting the logic.

[0138] The data auditing device provided by the embodiment of the present invention may include: a file authenticator acquisition module 100, used to obtain a file authenticator; wherein the file authenticator is an authenticator determined based on semantic rules; a challenge information generation module 200, used to obtain file information corresponding to the file authenticator, generate challenge information based on the file information, and send the challenge information to the cloud; a proof information generation module 300, used to obtain proof information generated by the cloud based on the challenge information; an audit result determination module 400, used to verify the integrity and semantic correctness of the current file based on the proof information, and obtain a data audit result. Compared with the current inability to verify data integrity and semantic correctness at the same time, the present application generates proof information based on semantic rules by embedding semantic rules into text authenticators, and can verify the integrity and semantic correctness of data based on the proof information at the same time, thereby improving the accuracy of data verification.

[0139] A data auditing device provided by an embodiment of the present invention is introduced below. The data auditing device described below and the data auditing method described above can be referenced to each other.

[0140] Please refer to Figure 5 , Figure 5 A schematic diagram of the structure of a data audit device provided by an embodiment of the present invention may include:

[0141] A memory 10, used for storing computer programs;

[0142] The processor 20 is used to execute a computer program to implement the above-mentioned data auditing method.

[0143] The memory 10 , the processor 20 , and the communication interface 30 all communicate with each other via a communication bus 40 .

[0144] In the embodiment of the present invention, the memory 10 is used to store one or more programs, and the program may include program code, and the program code includes computer operation instructions. In the embodiment of the present invention, the memory 10 may store programs for implementing the following functions:

[0145] Obtaining a file authentication code; wherein the file authentication code is an authentication code determined based on semantic rules;

[0146] S102, obtaining file information corresponding to the file authentication token, generating challenge information based on the file information, and sending the challenge information to the cloud;

[0147] S103, obtaining proof information generated by the cloud based on the challenge information;

[0148] S104, verify the integrity and semantic correctness of the current file based on the proof information to obtain the data audit result.

[0149] In a possible implementation, the memory 10 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function, etc.; the data storage area may store data created during use.

[0150] In addition, the memory 10 may include a read-only memory and a random access memory, and provide instructions and data to the processor. A portion of the memory may also include an NVRAM. The memory stores an operating system and operating instructions, executable modules or data structures, or a subset thereof, or an extended set thereof, wherein the operating instructions may include various operating instructions for implementing various operations. The operating system may include various system programs for implementing various basic tasks and processing hardware-based tasks.

[0151] The processor 20 may be a central processing unit (CPU), an application specific integrated circuit, a digital signal processor, a field programmable gate array or other programmable logic device, a microprocessor or any conventional processor, etc. The processor 20 may call a program stored in the memory 10 .

[0152] The communication interface 30 may be an interface of a communication module, and is used to connect to other devices or systems.

[0153] Of course, it should be noted that Figure 5 The structure shown does not constitute a limitation on the data audit device in the embodiment of the present invention. In actual applications, the data audit device may include Figure 5 More or fewer components than shown, or combinations of certain components.

[0154] The computer-readable storage medium provided in an embodiment of the present invention is introduced below. The computer-readable storage medium described below and the data auditing method described above can be referenced to each other.

[0155] The present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the above-mentioned data auditing method are implemented.

[0156] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0157] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0158] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0159] Finally, it should be noted that, in this article, relationships such as first and second, etc. are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprises" or any other variations are intended to cover non-exclusive inclusion, so that a process, method, article or device that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0160] The above is a detailed introduction to a data audit method, device, equipment and computer-readable storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for general technical personnel in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A data audit method, characterized in that: include: Obtaining a file authentication code; wherein the file authentication code is an authentication code determined based on semantic rules; Acquire file information corresponding to the file authenticator, generate challenge information based on the file information, and send the challenge information to the cloud; Obtaining proof information generated by the cloud based on the challenge information; The integrity and semantic correctness of the current file are verified based on the certification information to obtain a data audit result.

2. The data audit method according to claim 1, characterized in that: Acquiring file information corresponding to the file authenticator, generating challenge information based on the file information, and sending the challenge information to the cloud, including: Obtaining a unique file identifier corresponding to the file authentication identifier; Determine the challenge information corresponding to the unique identifier of the file; wherein the challenge information CHAL = {i, v i } I＝ { 1,...,c } ,i∈I , represents an integer between 1 and q, and c is an integer less than or equal to the total number of file blocks.

3. The data audit method according to claim 2, characterized in that: Before determining the challenge information corresponding to the file unique identifier, the method further includes: Get the file random variable corresponding to the unique identifier of the file and file tag tag; where tag = ID i ||A i ||B i ||name||n||Z i ||δ,ID i Indicates the current user identity, A i , B i represents the user's public key, name represents the unique identifier of the file, n represents the number of blocks in the file, δ and Z i Indicates the elements that make up a file tag; Verify the first equation s d =ID i t f(t,tag) Is it true? s, t are random variables The constituent elements of , f is a one-way function; When the first equation is true, the second equation is verified based on the file label δ=H2(ID i ||A i ||B i ||name||n||Z i ) is established; When the second equation is established, the step of determining the challenge information corresponding to the file unique identifier is performed.

4. The data audit method according to claim 1, characterized in that: The proof information is proof, proof= < ρ,σ ＞ , Among them, m i v i is the parameter in the challenge message, T i Indicates the current file authenticator.

5. The data audit method according to any one of claims 1 to 4, characterized in that: Based on the proof information, the integrity and semantic correctness of the current file are verified to obtain data audit results, including: Verify whether the third equation is true based on the proof information; wherein the third equation is an inequality consisting of elements of the proof information, the system private key, the cryptographic generator, the variable parameters corresponding to the challenge information, and the file tag; When the third equation holds true, the data audit result is determined to be data integrity and data semantics correctness.

6. The data audit method according to claim 1, characterized in that: Get the file authentication token, including: Obtaining a generator determined based on a bilinear mapping and a private key of a user; wherein the private key of the user is a private key determined based on a semantic rule; Obtain a file authenticator determined by the cloud based on the generator and the private key of the user.

7. The data audit method according to claim 1, characterized in that: After verifying the integrity and semantic correctness of the current file based on the certification information and obtaining the data audit result, the method further includes: Acquire the latest file authenticator corresponding to the latest semantic rule of the current user; wherein the latest semantic rule includes the updated semantic rule and the latest generated semantic rule.

8. A data auditing device, characterized in that: include: A file authentication code acquisition module, used to acquire a file authentication code; wherein the file authentication code is an authentication code determined based on semantic rules; A challenge information generation module, used to obtain file information corresponding to the file authentication code, generate challenge information based on the file information, and send the challenge information to the cloud; A certification information generation module, used to obtain certification information generated by the cloud based on the challenge information; The audit result determination module is used to verify the integrity and semantic correctness of the current file based on the certification information to obtain the data audit result.

9. A data auditing device, characterized in that: include: Memory for storing computer programs; A processor, configured to execute the computer program to implement the steps of the data auditing method as claimed in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the data audit method according to any one of claims 1 to 7 are implemented.

Images