支持隐私保护的云存储框架设计

黄汝维 1; 3; 桂小林 1; 余思 1; 张进 2; 卿杜政 2

您当前的位置：

首页 >

文章列表页 >

支持隐私保护的云存储框架设计

更新时间：2025-07-09

- 支持隐私保护的云存储框架设计
- Design of Cloud Storage Framework with Privacy-Preserving
- 西安交通大学学报 2011年45卷第10期页码：1-6+12
- 作者机构：
  
  1. 西安交通大学电子与信息工程学院,西安,710049
  2. 广西大学计算机与电子信息学院,南宁,530004
- 作者简介：
- 基金信息：
  
  : 2011-03-01. 作者简介: 黄汝维(1978-),女,博士生;桂小林(联系人),男,教授,博士生导师.基金项目: 国家自然科学基金资助项目(60873071);国家高技术研究发展计划资助项目(2008AA01Z410);IBM共享高校研究计划资助项目
- DOI：
  中图分类号： TP393
- 网络首发：2011-10-10，
  
  纸质出版：2011
- 稿件说明：
移动端阅览
黄汝维 1, 3, 桂小林 1, 等. 支持隐私保护的云存储框架设计[J]. 西安交通大学学报, 2011,45(10):1-6+12.

Design of Cloud Storage Framework with Privacy-Preserving[J]. 2011, 45(10): 1-6+12.
黄汝维 1, 3, 桂小林 1, 等. 支持隐私保护的云存储框架设计[J]. 西安交通大学学报, 2011,45(10):1-6+12. DOI：

Design of Cloud Storage Framework with Privacy-Preserving[J]. 2011, 45(10): 1-6+12. DOI：

摘要

针对云存储中的隐私安全问题

设计了一个支持隐私保护的、高效且安全的云存储框架.该框架采用多叉树结构构建数据索引

设计密钥推导算法EKDA(Extirpation-Based Key Derivation Alogrithm)实现密钥的管理和分发

构建关键字检索算法DLSEK(Discrete Logarithm-Based Search on Encrypted Keyword)实现对数据共享和密文检索的支持

并结合延迟更新技术解决用户访问权限变更和数据更新问题.从EKDA的有效性、DLSEK的性能和隐私安全方面进行实验评估和安全分析

结果表明:EKDA能有效地减少通信和存储负载

DLSEK是一种具有单向性安全的支持检索的加密技术

整个框架的设计能有效地保护用户的隐私

同时支持高效的数据访问.

Abstract

An efficient and secure framework of cloud storage is proposed to support privacy security in cloud storage. The framework adopts a multi-tree structure for indexing

designs an extirpation-based key derivation algorithm(EKDA)for key management

and constructs a discrete logarithm-based search on encrypted keyword(DLSEK)for data sharing and ciphertext retrieval. The lazy revocation is combined into the framework to deal with the changes of users' access right and dynamic operations of data. Analyzing results for the effectiveness of EKDA

the performance of DLSEK and the privacy security of the framework show that EKDA can efficiently reduce the communication and storage overheads and that DLSEK is an encryption technique which supports ciphertext retrieval and is one-way security. The proposed framework is privacy-preserving while supporting data access efficiently.

关键词

Keywords

references

BENALOH J, CHASE M, HORVITZ E, et al. Patient controlled encryption: ensuring privacy of electronic medical records [C]∥Proceedings of the 2009 ACM workshop on Cloud computing security. New York,USA: ACM, 2009: 103-114.

THOMPSON B, HABER S, HORNE W G, et al. Privacy-preserving computation and verification of aggregate queries on outsourced databases [C]∥Proceedings of the 9th International Symposium on Privacy Enhancing Technologies. New York, USA: ACM, 2009: 185-201.

WANG Weichao, LI Zhiwei, OWENS R, et al. Secure and efficient access to outsourced data [C]∥Proceedings of the 2009 ACM Workshop on Cloud Computing Security. New York, USA: ACM, 2009:55-66.

LIU Qin, WANG Guojun, WU Jie. An efficient privacy preserving keyword search scheme in cloud computing[C]∥Proceedings of the 2009 International Conference on Computational Science and Engineering. New York, USA: ACM, 2009: 715-720.

BONECH D, CRESCENZO D G, OSTROVSKY R, et al. Public-key encryption with keyword search [C]∥Proceedings of Eurocrypt 2004. Berlin, Germany: Springer, 2004: 506-522.

CHANG Yancheng, MITZENMACHER M. Privacy preserving keyword searches on remote encrypted data[EB/OL]. [2011-07-06]. http:∥eprint.iacr.org/2004/051.pdf

OHTAKI Y. Partial disclosure of searchable encrypted data with support for Boolean queries [C]∥Proceedings of the 2008 Third International Conference on Availability, Reliability and Security. New York,USA: ACM, 2008: 1083-1090.

BELLOVIN S, CHESWICK W. Privacy-enhanced searches using encrypted bloom filters [EB/OL]. [2011-07-06]. http:∥citeseerx.ist.psu.edu/viewdoc/download; jsessionid=FDCF3E4971210E7BF4E2BA-AD9939371C?doi=10.1.1.58.6899rep=rep1type=pdf

WONG W K, CHEUNG D W, KAO Ben, et al. Secure kNN computation on encrypted databases[C]∥Proceedings of the 35th SIGMOD International Conference on Management of Data. New York, USA:ACM, 2009: 139-152.

AGRAWAL R, KIEMAN J, SRIKANT R, et al. Order preserving encryption for numeric data [C]∥Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data. New York,USA: ACM, 2004: 563-574.

宋伟, 彭智勇,程芳权,等. 可信数据库环境下面向服务的自适应密文数据查询方法[J]. 计算机学报, 2010, 10(8): 1324-1338.

SONG Wei, PENG Zhiyong, CHENG Fangquan, et al. Service-oriented adaptive search method over encrypted data in trusted database [J]. Journal of Computers, 2010, 10(8): 1324-1338.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向分散式存储的云存储安全架构

云环境下应用感知的动态重复数据删除机制

离子液体改性燃料的电流体动力学效应研究

采用试验设计方法的第三代CO2气体箔轴承箔片几何参数敏感性分析

融合物理信息与深度算子网络的变压器绕组热-流场快速计算方法