具有私钥可恢复能力的云存储完整性检测方案

共享数据云存储完整性检测用来验证一个群体共享在云端数据的完整性,是最常见的云存储完整性检测方式之一.在云存储完整性检测中,用户用于生成数据签名的私钥可能会因为存储介质的损坏、故障等原因而无法使用.然而,目前已有的共享数据云存储完整性检测方案均没有考虑到这个现实问题.本文首次探索了如何解决共享数据云存储完整性检测中私钥不可用的问题,提出了第一个具有私钥可恢复能力的共享数据云存储完整性检测方案.在方案中,当一个群用户的私钥不可用时,可以通过群里的t个或者t个以上的用户帮助他恢复私钥.同时,设计了一个随机遮掩技术,用于确保参与成员私钥的安全性.用户也可验证被恢复私钥的正确性.最后,给出安全性和实验结果的分析,结果显示提出方案是安全高效的.

Cloud Storage Integrity Checking Scheme with Private Key Recovery Capability

Cloud storage integrity checking for shared data is used to verify the integrity of cloud data shared by a group, which is one of the most common ways of cloud storage integrity checking. In cloud storage integrity checking, the private key which is used to generate data signatures by user may be unavailable because of the damage or the fault of storage medium. However, currently existing cloud storage integrity checking schemes for shared data do not consider this realistic problem. In this paper, we firstly explore how to deal with the problem of the private key unavailability in cloud storage integrity checking for shared data. We propose the first scheme that enables cloud storage integrity checking for shared data with private key-recovery ability. In our scheme, when a group user's private key is unavailable, we can recover this user's private key with the help of or more users in the group. At the same time, we design a random masking technology to guarantee the security of participating members' private keys. The user can also verify the correctness of the recovered private key. At last, we give the analysis of security and experimental results, which show that our proposed scheme is secure and efficient.