Cloud storage scheme based on closed-box encryption

Rui-zhong DU; Shao-xuan WANG; Jun-feng TIAN

doi:10.11959/j.issn.1000-436x.2017138

您当前的位置：

首页 >

文章列表页 >

Cloud storage scheme based on closed-box encryption

Papers | 更新时间：2024-06-05

- Cloud storage scheme based on closed-box encryption
- Journal on Communications Vol. 38, Issue 7, Pages: 1-10(2017)
- 作者机构：
  
  1. 河北大学计算机科学与技术学院，河北保定 071002
  2. 河北省高可信信息系统重点实验室，河北保定 071002
- 作者简介：
- 基金信息：
  
  The National Natural Science Foundation of China(61170254);The National Natural Science Foundation of China(60873203);The Natural Science Foundation of Hebei Province(F2014201098);The Science and Technology Research Project in Colleges and Universities of Hebei Province(ZD2016043);Hebei Engineering Technology Research Center for IoT Data Acquisition ＆ Processing,North China Insitute of Science and Technology(Hebei 065201)
- DOI：10.11959/j.issn.1000-436x.2017138
  CLC： TP393.08
- Online First：2017-07，
  
  Published：25 July 2017
- 稿件说明：
移动端阅览
Rui-zhong DU, Shao-xuan WANG, Jun-feng TIAN. Cloud storage scheme based on closed-box encryption[J]. Journal on Communications, 2017, 38(7): 1-10.
DOI：

Rui-zhong DU, Shao-xuan WANG, Jun-feng TIAN. Cloud storage scheme based on closed-box encryption[J]. Journal on Communications, 2017, 38(7): 1-10. DOI： 10.11959/j.issn.1000-436x.2017138.

摘要

针对保护云存储中用户数据机密性的问题，提出了一种在云服务提供商处加密数据的云存储方案。通过虚拟机隔离技术来构造封闭计算环境，改进 RSA 公钥加密算法使其不需要重新产生大素数就能实现密钥变化，并通过SSL安全链接传输数据以及密钥，将数据在封闭计算环境中安全加密后再存储至分布式文件系统。封闭计算环境能阻止操作系统中不良应用以及云管理员的攻击，有效防范数据泄露。实验结果表明，用户数据的机密性得到了提升，并且相较于其他在云端加密的云存储方案，所提方案所带来的性能损耗降低了许多。

Abstract

Aiming at protecting the confidentiality of data for cloud storage users

a scheme that encrypt data in cloud service providers was presented.The scheme constructed a closed-box computing environment by virtual machine isolation technique

improved algorithm of RSA to change keys without having to produce large prime numbers

transfer data and keys through SSL and encrypted data in the closed computing environment before storing to the distributed file system.Closed-box computing environment can prevent attacks from cloud administrators and malicious applications in the operating system.It also can guard against data leakage effectively.The result of experiment shows that the confidentiality of data improved and the performance loss is decreased considering to other cloud storage scheme that encrypt data in cloud.

关键词

Keywords

references

MELL P , GRANCE T . The NIST definition of cloud computing [R ] . National Institute of Standards and Technology(NIST),Washington,USA:Technical Report Special Publication , 2011 : 800 - 145 .

李晖 , 孙文海 , 李凤华 , 等 . 公共云存储服务数据安全及隐私保护技术综述 [J ] . 计算机研究与发展 , 2014 , 51 ( 7 ): 1397 - 1409 .

LI H , SUN W H , LI F H , et al . Secure and privacy-preserving data storage storage service in public cloud [J ] . Journal of Computer Re-search and Development , 2014 , 51 ( 7 ): 1397 - 1409 .

傅颖勋 , 罗圣美 , 舒继武 . 安全云存储系统与关键技术综述 [J ] . 计算机研究与发展 , 2013 , 50 ( 1 ): 136 - 145 .

FU Y X , LUO S M , SHU J W . Survey of Secure Cloud Storage System and Key Technologies [J ] . Journal of Computer Research and Devel-opment , 2013 , 50 ( 1 ): 136 - 145 .

张宇 . Verizon报告称两成数据泄露皆因“杂项错误” [J ] . 计算机与网络 , 2016 , 42 ( 8 ): 52 .

ZHANG Y . Verizon report shows fifth of breaches caused by “miscellaneous errors” [J ] . Computer and Network Journal , 2016 , 42 ( 8 ): 52 .

TAKABI H , JOSHI J B D , AHN G . Security and privacy challenges in cloud computing environments [J ] . IEEE Security ＆ Privacy , 2010 , 8 ( 6 ): 24 - 31 .

吕志泉 , 张敏 , 冯登国 . 云存储密文访问控制方案 [J ] . 计算机科学与探索 , 2011 , 5 ( 9 ): 835 - 844 .

LV Z Q , ZHANG M , FENG D G . Cryptographic access control scheme for cloud storage [J ] . Journal of Frontiers of Computer Science and Technology , 2011 , 5 ( 9 ): 835 - 844 .

洪澄 , 张敏 , 冯登国 . 面向云存储的高效动态密文访问控制方法 [J ] . 通信学报 , 2011 , 32 ( 7 ): 123 - 132 .

HONG C , ZHANG M , FENG D G . Achieving efficient dynamic cryp-tographic access control in cloud storage [J ] . Journal on Communica-tions , 2011 , 32 ( 7 ): 123 - 132 .

洪澄 , 张敏 , 冯登国 . AB-ACCS:一种云存储密文访问控制方法 [J ] . 计算机研究与发展 , 2010 , 47 ( z1 ): 259 - 365 .

HONG C , ZHANG M , FENG D G . AB-ACCS:A cryptographic access control scheme for cloud storage [J ] . Journal of Computer Research and Development , 2010 , 47 ( z1 ): 259 - 365 .

侯清铧 , 武永卫 , 郑纬民 . 一种保护云存储平台上用户数据私密性的方法 [J ] . 计算机研究与发展 , 2011 , 48 ( 7 ): 1146 - 1154 .

HOU Q H , WU Y W , ZHEN W M . A method on protection of user da-ta privacy in cloud storage platform [J ] . Journal of Computer Research and Development , 2011 , 48 ( 7 ): 1146 - 1154 .

EKASIT K . Improving the communication performance of distributed animation rendering using BitTorrent file system [J ] . Journal of Systems ＆ Software , 2014 , 97 : 178 - 191 .

GHEMAWAT S , GOBIOFF H , LEUNG S T . The google file system [C ] // Proc of the 19th ACM Symp on Operating Systems Principles . New York :ACM , 2003 : 29 - 43 .

何高峰 . 基于 HDFS 的多租户小文件存储系统的研究与设计 [D ] . 杭州:浙江大学 , 2016 .

HE G F . Research and design of multi-tenant small file storage system based on HDFS [D ] . Hangzhou:Zhejiang University , 2016 .

TAL G , MENDAL R , DAN B . A broader vision for trusted computing [C ] // 9th Workshop on Hot Topics in Operating System , 2003 .

EMMETT W , JUNGHWAN R , KRSTE A . Mondrix:memory isolation for linux using mondriaan memory protection [C ] // The 20th ACM Symposium on OS Principles . Brighton,UK , 2005 .

TAL G , BEN P , JIM C , et al . Terra:a virtual machine-based platform for trusted computing [J ] . ACM Sigops Operating Systems Review , 2003 , 37 ( 5 ): 193 - 206 .

CHEN X X , TAL G , LEWIS E C , et al . Overshadow:a virtualization-based approach to retrofitting protection in commodity operating systems [J ] . ACM Sigplan Notices , 2008 , 43 ( 3 ): 2 - 13 .

毛文波 . 可信云安全的原理与应用 [C ] // 第三届中国云计算大会 , 2011 .

MAO W B , . Trusted and secure cloud principle and practice [C ] // 3rd China Cloud Computing Conference , 2011 .

DUA R , RAJA A R , KAKADIA D . Virtualization vs containerization to support PaaS [J ] . IEEE International Conference on Cloud Engineering , 2014 , 41 : 610 - 614 .

佘冉君 . SSL安全研究及实现 [D ] . 西安:西安电子科技大学 , 2015 .

SHE R J . The SSL security research and implementation [D ] . Xi’an:Xidian University , 2015 .

王彬 . 基于 OpenStack 的云平台管理系统的设计与实现 [D ] . 北京:北京交通大学 , 2016 .

WANG B . Design and implementation of cloud platform management system based on OpenStack [D ] . Beijing Jiaotong University , 2016 .

BLAZE M , . A cryptographic file system for UNIX [C ] // The 1st ACM Conf on Communications and Computing Security . 1993 : 9 - 16 .

RIVEST R L , SMITH A C , FU K E . Group sharing and random access in cryptographic storage file systems [M ] . Massachusetts Institute of Technology . 1999 .

KALLAHALLA M , RIEDEL E , SWAMINATHAN R , et al . Plutus:scalable secure file sharing on untrusted storage [C ] // The 2nd Conf on File and Storage Technologies . Berkley:USENIX Association , 2003 .

薛矛 , 薛巍 , 舒继武 , 等 . 一种云存储环境下的安全存储系统 [J ] . 计算机学报 , 2015 , 38 ( 5 ): 987 - 998 .

XUE M , XUE W , SHU J W , et al . A secure storage system over cloud storage environment [J ] . Chinese Journal of Computers , 2015 , 38 ( 5 ): 987 - 998 .

张逢喆 , 陈进 , 陈海波 . 云计算中的数据隐私性保护与自我销毁 [J ] . 计算机研究与发展 , 2011 , 48 ( 7 ): 1155 - 1167 .

ZHANG F Z , CHEN J , CHEN H B , et al . Lifetime privacy and self-destruction of data in the cloud [J ] . Journal of Computer Research and Development , 2011 , 48 ( 7 ): 1155 - 1167 .

LI J , WANG Q , WANG C , et al . Fuzzy keyword search over encrypted data in cloud computing [C ] // The INFOCOM 2010 Mini-Conference.San Diego . 2010 : 1 - 5 .

WANG Q , CAO N , LI J , et al . Secure ranked keyword search over encrypted cloud data [C ] // The 30th International Conference on Distributed Computing Systems . Genoa,Italy , 2010 : 253 - 262 .

WANG C , CAO N , REN K , et al . Enabling secure and efficient ranked keyword search over outsourced cloud data [J ] . IEEE Transactions on Parallel and Distributed Systems , 2012 , 23 ( 8 ): 1467 - 1479 .

Views

1711

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Scheme of node identify authentication in distributed file interaction system

Query recovery attacks against conjunctive keyword searchable encryption

Attribute-based bilateral access control scheme for cloud storage

Blockchain-based and verifiable multidimensional data aggregation and sharing scheme for smart grid

Volume-hiding encrypted multi-map scheme based on hierarchical structure

Related Author

Wen-cai HE

Min DU

Zhi-wei CHEN

Pei-he LIU

Yan-yan HAN

DU Ruiying

SHEN Bei

HE Kun

Related Institution

School of Telecommunications Engineering, Xidian University, Xi′an

Department of Telecommunications Engineering, Beijing Electronic Science ＆ Technology Institute

School of Cyber Science and Engineering, Wuhan University

Key Laboratory of Cryptography of Zhejiang Province, Hangzhou Normal University

School of Computer Science, Nanjing University of Posts and Telecommunications

AI问答

⁰