Multi-Copy Storage Integrity Auditing via Dynamic Copy Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-copy data storage schemes in cloud computing face security issues and performance defects due to static data copy management, where the number of copies for data blocks is not dynamically adjusted based on importance, and existing public auditing schemes are either expensive or vulnerable to security threats.
Innovation Solution
A multi-copy public auditing scheme using certificateless signatures and an improved Merkle Hash Tree (MHT) for dynamic batch updates, allowing the number of copies to be determined by data block importance and enabling fair arbitration in case of conflicts, thus enhancing data integrity verification and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the number of data block copies is statically determined, then storage management is simple, but data security and reliability cannot be dynamically adjusted based on importance
Solution Approach 1:
The patent implements dynamic copy management where the number of replicas for each data block is adjusted based on its importance level. Critical data blocks receive more replicas for higher reliability, while less critical blocks have fewer replicas. This dynamic allocation allows the system to optimize both security and resource utilization without static constraints.
Solution Approach 2:
The patent applies different copy strategies to different data blocks based on their individual importance characteristics. Each data block can have a customized number of replicas assigned according to its specific security requirements, rather than applying a uniform copy policy across all data. This local differentiation resolves the contradiction by tailoring reliability to actual needs.
2Measurement precision
If existing public auditing schemes are used, then data integrity verification is provided, but they are either expensive or vulnerable to security threats
Solution Approach 1:
The patent uses cryptographic tags as lightweight copies of data integrity information. Instead of expensive full data verification, the system generates compact tags that can be efficiently verified to prove data integrity. These tags serve as simplified representations that maintain verification accuracy while dramatically reducing computational and energy costs.
Solution Approach 2:
The patent employs inexpensive cryptographic tags that can be rapidly generated and verified. These tags are computationally lightweight compared to traditional auditing mechanisms, providing the same integrity verification function at a fraction of the cost and energy consumption.
3Quantity of substance
If cloud storage servers delete unaccessed data to save space, then storage efficiency improves, but data availability and integrity cannot be guaranteed
Solution Approach 1:
The patent implements a feedback mechanism through integrity tags that continuously monitor data availability. The verification process provides feedback to the system about whether data blocks are properly stored and accessible. This feedback loop prevents servers from silently deleting data, as any deletion would be detected during verification, thus maintaining data availability while allowing efficient storage management.
4Volume of stationary object
If software or hardware errors cause data damage in the cloud, then storage capacity increases, but data integrity is compromised
Solution Approach 1:
The patent applies preliminary cryptographic protection by generating integrity tags for data blocks before they are stored in the cloud. These tags serve as pre-computed verification credentials that protect against future data corruption from software or hardware errors. The tags are created in advance and stored with the data, enabling later detection of any integrity violations.
Solution Approach 2:
The patent converts the potential harm of cloud storage vulnerabilities into a benefit by using cryptographic tags. The same cloud storage infrastructure that might be vulnerable to errors is now protected by the tag verification mechanism, which can detect and prevent corruption. The system turns the risky cloud environment into a secure storage solution through the tagging approach.
Data Source
AI summary
A method for integrity auditing is provided. The method comprises: generate a challenge message for verifying data integrity of a file stored at a storage server (510); send the challenge message to the storage server (520); receive, from the storage server, a proof on the data integrity of the file, the proof being generated based on the challenge message (530); verify the data integrity of the file by verifying validity of the proof (540). In this way, integrity auditing for multi-copy storage can be enabled, where the overhead in updating data is independent of the number of copies of the data.