面向云端数据保护的混合云存储系统设计与实现

发布时间：2018-06-17 06:11

本文选题：数据访问隐私 + 混合云　；参考：《华东理工大学》2014年硕士论文

【摘要】：将开放提供云平台服务的公有云和企业自行构建的私有云结合所构成的云计算模型称为混合云模型。企业可以合理地利用公有云的低成本和私有云的高可用性及安全性来完成企业的云计算需求。混合云存储指的是混合云模型所提供的文件、数据存储服务,即具有私有云存储对于数据安全性的较高保障特性,又可以利用公有云存储服务来提供私有云存储所不具备的低成本大容量存储空间。但混合云存储模型中公有云存储服务存储空间内的数据安全性和隐私性无法由数据的所有者来确保,因此并不能让用户完全信任。而随着机器学习、数据挖掘等技术的兴起,服务提供商可以通过这些技术学习企业用户对外部数据的访问记录信息记录,从而总结出企业用户并不愿意被外部人员所获取的私密信息,这些信息称为数据访问隐私。本文首先针对现有混合云存储方案的相关技术进行了研究和介绍,其中包括外部数据的安全性、数据访问的隐私性、面临的问题和可能遭受到的攻击手段等。其次,本文在现有的数据安全性和访问隐私性保护方案的基础上,提出并实现了一种新的混合云存储方案,其主要思想是在企业私有云环境中根据用户的需求对需要存放在公有云存储空间内的数据进行加密、合并、分割等处理,将数据文件元数据存放于组织内部的数据库中,将处理后的数据存放于公共云存储空间,实现数据内容和元数据的分离。最后,根据先前的工作基础,本文对于新的混合云存储系统进行了实现,并对其相应的安全性、数据访问隐私性进行了测试。
[Abstract]:The cloud computing model is called hybrid cloud model which combines the public cloud which provides the services of cloud platform with the private cloud built by the enterprise itself. Enterprises can reasonably utilize the low cost of public cloud and the high availability and security of private cloud to fulfill the cloud computing requirements. Hybrid cloud storage refers to the files provided by the hybrid cloud model. The data storage service, that is, private cloud storage, has a high security characteristic for data. Public cloud storage services can also be used to provide low-cost, large-capacity storage space that private cloud storage does not have. However, the data security and privacy in the public cloud storage space in the hybrid cloud storage model cannot be ensured by the data owner, so it cannot be trusted completely by the user. With the rise of machine learning, data mining and other technologies, service providers can learn from these technologies enterprise users to access external data records, Thus, the private information that enterprise users do not want to be acquired by external personnel is summarized, which is called data access privacy. In this paper, the related technologies of the existing hybrid cloud storage schemes are studied and introduced, including the security of external data, the privacy of data access, the problems faced and the possible attack methods. Secondly, based on the existing data security and privacy protection schemes, a new hybrid cloud storage scheme is proposed and implemented. The main idea is to encrypt, merge and partition the data stored in the public cloud storage space according to the needs of the users in the private cloud environment of the enterprise, and store the metadata of the data files in the database inside the organization. The processed data is stored in the public cloud storage space to separate the data content from the metadata. Finally, according to the previous work basis, we implement the new hybrid cloud storage system, and test its security and data access privacy.
【学位授予单位】：华东理工大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP333

【参考文献】