基于封闭环境加密的云存储方案
Cloud storage scheme based on closed-box encryption
- 通信学报 2017年38卷第7期 页码：1-10
- 作者机构：
1. 河北大学计算机科学与技术学院，河北 保定 071002
2. 河北省高可信信息系统重点实验室，河北 保定 071002
- 作者简介：
[ "杜瑞忠（1975-），男，河北献县人，博士，河北大学教授、硕士生导师，主要研究方向为可信计算与信息安全等。" ]
[ "王少泫（1990-），男，河北涉县人，河北大学硕士生，主要研究方向为可信计算与信息安全等。" ]
[ "田俊峰（1975-），男，河北蠡县人，博士，河北大学教授、博士生导师，主要研究方向为分布计算、可信计算与信息安全。" ]
- 基金信息：国家自然科学基金资助项目(61170254);国家自然科学基金资助项目(60873203);河北省自然科学基金资助项目(F2014201098);河北省高等学校科学技术研究基金资助项目(ZD2016043);河北省物联网数据采集与处理工程技术研究中心基金资助项目(Hebei 065201)
DOI：10.11959/j.issn.1000-436x.2017138
中图分类号： TP393.08-
网络首发：2017-07，
纸质出版：2017-07-25
- 稿件说明：
移动端阅览
杜瑞忠, 王少泫, 田俊峰. 基于封闭环境加密的云存储方案[J]. 通信学报, 2017,38(7):1-10.
Rui-zhong DU, Shao-xuan WANG, Jun-feng TIAN. Cloud storage scheme based on closed-box encryption[J]. Journal on Communications, 2017, 38(7): 1-10.
杜瑞忠, 王少泫, 田俊峰. 基于封闭环境加密的云存储方案[J]. 通信学报, 2017,38(7):1-10. DOI： 10.11959/j.issn.1000-436x.2017138.
Rui-zhong DU, Shao-xuan WANG, Jun-feng TIAN. Cloud storage scheme based on closed-box encryption[J]. Journal on Communications, 2017, 38(7): 1-10. DOI： 10.11959/j.issn.1000-436x.2017138.
摘要
针对保护云存储中用户数据机密性的问题，提出了一种在云服务提供商处加密数据的云存储方案。通过虚拟机隔离技术来构造封闭计算环境，改进 RSA 公钥加密算法使其不需要重新产生大素数就能实现密钥变化，并通过SSL安全链接传输数据以及密钥，将数据在封闭计算环境中安全加密后再存储至分布式文件系统。封闭计算环境能阻止操作系统中不良应用以及云管理员的攻击，有效防范数据泄露。实验结果表明，用户数据的机密性得到了提升，并且相较于其他在云端加密的云存储方案，所提方案所带来的性能损耗降低了许多。
Abstract
Aiming at protecting the confidentiality of data for cloud storage users
a scheme that encrypt data in cloud service providers was presented.The scheme constructed a closed-box computing environment by virtual machine isolation technique
improved algorithm of RSA to change keys without having to produce large prime numbers
transfer data and keys through SSL and encrypted data in the closed computing environment before storing to the distributed file system.Closed-box computing environment can prevent attacks from cloud administrators and malicious applications in the operating system.It also can guard against data leakage effectively.The result of experiment shows that the confidentiality of data improved and the performance loss is decreased considering to other cloud storage scheme that encrypt data in cloud.
关键词
Keywords
references
MELL P , GRANCE T . The NIST definition of cloud computing [R ] . National Institute of Standards and Technology(NIST),Washington,USA:Technical Report Special Publication , 2011 : 800 - 145 .
李晖 , 孙文海 , 李凤华 , 等 . 公共云存储服务数据安全及隐私保护技术综述 [J ] . 计算机研究与发展 , 2014 , 51 ( 7 ): 1397 - 1409 .
LI H , SUN W H , LI F H , et al . Secure and privacy-preserving data storage storage service in public cloud [J ] . Journal of Computer Re-search and Development , 2014 , 51 ( 7 ): 1397 - 1409 .
傅颖勋 , 罗圣美 , 舒继武 . 安全云存储系统与关键技术综述 [J ] . 计算机研究与发展 , 2013 , 50 ( 1 ): 136 - 145 .
FU Y X , LUO S M , SHU J W . Survey of Secure Cloud Storage System and Key Technologies [J ] . Journal of Computer Research and Devel-opment , 2013 , 50 ( 1 ): 136 - 145 .
张宇 . Verizon报告称两成数据泄露皆因“杂项错误” [J ] . 计算机与网络 , 2016 , 42 ( 8 ): 52 .
ZHANG Y . Verizon report shows fifth of breaches caused by “miscellaneous errors” [J ] . Computer and Network Journal , 2016 , 42 ( 8 ): 52 .
TAKABI H , JOSHI J B D , AHN G . Security and privacy challenges in cloud computing environments [J ] . IEEE Security ＆ Privacy , 2010 , 8 ( 6 ): 24 - 31 .
吕志泉 , 张敏 , 冯登国 . 云存储密文访问控制方案 [J ] . 计算机科学与探索 , 2011 , 5 ( 9 ): 835 - 844 .
LV Z Q , ZHANG M , FENG D G . Cryptographic access control scheme for cloud storage [J ] . Journal of Frontiers of Computer Science and Technology , 2011 , 5 ( 9 ): 835 - 844 .
洪澄 , 张敏 , 冯登国 . 面向云存储的高效动态密文访问控制方法 [J ] . 通信学报 , 2011 , 32 ( 7 ): 123 - 132 .
HONG C , ZHANG M , FENG D G . Achieving efficient dynamic cryp-tographic access control in cloud storage [J ] . Journal on Communica-tions , 2011 , 32 ( 7 ): 123 - 132 .
洪澄 , 张敏 , 冯登国 . AB-ACCS:一种云存储密文访问控制方法 [J ] . 计算机研究与发展 , 2010 , 47 ( z1 ): 259 - 365 .
HONG C , ZHANG M , FENG D G . AB-ACCS:A cryptographic access control scheme for cloud storage [J ] . Journal of Computer Research and Development , 2010 , 47 ( z1 ): 259 - 365 .
侯清铧 , 武永卫 , 郑纬民 . 一种保护云存储平台上用户数据私密性的方法 [J ] . 计算机研究与发展 , 2011 , 48 ( 7 ): 1146 - 1154 .
HOU Q H , WU Y W , ZHEN W M . A method on protection of user da-ta privacy in cloud storage platform [J ] . Journal of Computer Research and Development , 2011 , 48 ( 7 ): 1146 - 1154 .
EKASIT K . Improving the communication performance of distributed animation rendering using BitTorrent file system [J ] . Journal of Systems ＆ Software , 2014 , 97 : 178 - 191 .
GHEMAWAT S , GOBIOFF H , LEUNG S T . The google file system [C ] // Proc of the 19th ACM Symp on Operating Systems Principles . New York :ACM , 2003 : 29 - 43 .
何高峰 . 基于 HDFS 的多租户小文件存储系统的研究与设计 [D ] . 杭州:浙江大学 , 2016 .
HE G F . Research and design of multi-tenant small file storage system based on HDFS [D ] . Hangzhou:Zhejiang University , 2016 .
TAL G , MENDAL R , DAN B . A broader vision for trusted computing [C ] // 9th Workshop on Hot Topics in Operating System , 2003 .
EMMETT W , JUNGHWAN R , KRSTE A . Mondrix:memory isolation for linux using mondriaan memory protection [C ] // The 20th ACM Symposium on OS Principles . Brighton,UK , 2005 .
TAL G , BEN P , JIM C , et al . Terra:a virtual machine-based platform for trusted computing [J ] . ACM Sigops Operating Systems Review , 2003 , 37 ( 5 ): 193 - 206 .
CHEN X X , TAL G , LEWIS E C , et al . Overshadow:a virtualization-based approach to retrofitting protection in commodity operating systems [J ] . ACM Sigplan Notices , 2008 , 43 ( 3 ): 2 - 13 .
毛文波 . 可信云安全的原理与应用 [C ] // 第三届中国云计算大会 , 2011 .
MAO W B , . Trusted and secure cloud principle and practice [C ] // 3rd China Cloud Computing Conference , 2011 .
DUA R , RAJA A R , KAKADIA D . Virtualization vs containerization to support PaaS [J ] . IEEE International Conference on Cloud Engineering , 2014 , 41 : 610 - 614 .
佘冉君 . SSL安全研究及实现 [D ] . 西安:西安电子科技大学 , 2015 .
SHE R J . The SSL security research and implementation [D ] . Xi’an:Xidian University , 2015 .
王彬 . 基于 OpenStack 的云平台管理系统的设计与实现 [D ] . 北京:北京交通大学 , 2016 .
WANG B . Design and implementation of cloud platform management system based on OpenStack [D ] . Beijing Jiaotong University , 2016 .
BLAZE M , . A cryptographic file system for UNIX [C ] // The 1st ACM Conf on Communications and Computing Security . 1993 : 9 - 16 .
RIVEST R L , SMITH A C , FU K E . Group sharing and random access in cryptographic storage file systems [M ] . Massachusetts Institute of Technology . 1999 .
KALLAHALLA M , RIEDEL E , SWAMINATHAN R , et al . Plutus:scalable secure file sharing on untrusted storage [C ] // The 2nd Conf on File and Storage Technologies . Berkley:USENIX Association , 2003 .
薛矛 , 薛巍 , 舒继武 , 等 . 一种云存储环境下的安全存储系统 [J ] . 计算机学报 , 2015 , 38 ( 5 ): 987 - 998 .
XUE M , XUE W , SHU J W , et al . A secure storage system over cloud storage environment [J ] . Chinese Journal of Computers , 2015 , 38 ( 5 ): 987 - 998 .
张逢喆 , 陈进 , 陈海波 . 云计算中的数据隐私性保护与自我销毁 [J ] . 计算机研究与发展 , 2011 , 48 ( 7 ): 1155 - 1167 .
ZHANG F Z , CHEN J , CHEN H B , et al . Lifetime privacy and self-destruction of data in the cloud [J ] . Journal of Computer Research and Development , 2011 , 48 ( 7 ): 1155 - 1167 .
LI J , WANG Q , WANG C , et al . Fuzzy keyword search over encrypted data in cloud computing [C ] // The INFOCOM 2010 Mini-Conference.San Diego . 2010 : 1 - 5 .
WANG Q , CAO N , LI J , et al . Secure ranked keyword search over encrypted cloud data [C ] // The 30th International Conference on Distributed Computing Systems . Genoa,Italy , 2010 : 253 - 262 .
WANG C , CAO N , REN K , et al . Enabling secure and efficient ranked keyword search over outsourced cloud data [J ] . IEEE Transactions on Parallel and Distributed Systems , 2012 , 23 ( 8 ): 1467 - 1479 .
0
浏览量
1680
下载量
0
CSCD
- 网络PDF下载
- XML下载
- Meta-XML下载
- BibTeX下载
- Endnote下载
- RefMan 下载
- NoteExpress下载
- NoteFirst下载
关联资源
相关文章
相关作者
相关机构
AI问答- 技术支持由北京北大方正电子有限公司提供 京ICP备09064830号-19
京公网安备11010802024621 - 本系统建议在Chrome、 IE9+ 以上版本浏览器阅读本站内容，360浏览器请切换至极速模式
- Cookies帮助我们提供服务并提供个性化体验。使用本网站，即表示您同意我们使用Cookies
- 总访问量：582505 今日访问量：321