分布式存储网络中的数据完整性校验与修复

发布时间：2019-05-19 12:33

【摘要】：在分布式存储网络中,客户端在远程不可信服务器上存储了大容量文件并想通过某种方式验证存储的文件没有被篡改,数据完整性校验可以达到这一目的。我们考虑利用BLS签名,通过可信第三方实施数据完整性校验;我们同样考虑在服务器失效或者崩溃的时候,系统如何修复出错的存储数据。本文首先分析了已有的使用网络编码的分布式存储网络以及数据存储的可证明安全性PDP、PoR以及DPDP模型,然后针对分布式存储网络中大容量数据存储的情况,提出一种新的、有效的数据完整性校验与修复(Data IntegrityCheck and Repair,DICR)机制。本文的主要贡献在于: 1.用户数据经过用户私钥加密之后再上传到网络存储服务器进行存储,提供数据保密性保证; 2.使用网络编码实现数据分布式存储在不可信的网络存储服务器上,当有限数量的网络存储服务器失效时,系统可以恢复失效的数据,提供高可用性保证; 3.引入可信第三方,使用公开审计的方法,由可信第三方代替用户验证存储数据的完整性,因此用户不用保持在线状态,增强了系统的灵活性; 4.使用基于BLS的汇聚签名,减少了数据完整性校验时的计算量以及网络通信带宽; 5.使用改进的Merkel Hash Tree,通过分布式算法,提供存储数据的有限动态更新操作。
[Abstract]:In the distributed storage network, the client stores the large capacity file on the remote untrusted server and wants to verify that the stored file has not been tampered with in some way, and the data integrity check can achieve this purpose. We consider using BLS signature to implement data integrity verification through trusted third parties, and we also consider how to fix the wrong storage data when the server fails or crashes. This paper first analyzes the proven security PDP,PoR and DPDP model of distributed storage network and data storage using network coding, and then proposes a new model for large capacity data storage in distributed storage network. Effective data integrity verification and repair (Data IntegrityCheck and Repair,DICR) mechanism. The main contributions of this paper are as follows: 1. The user data is encrypted by the user's private key and then uploaded to the network storage server for storage, which provides the guarantee of data confidentiality; 2. Network coding is used to realize the distributed storage of data on untrusted network storage server. when a limited number of network storage servers fail, the system can recover the failed data and provide high availability guarantee. The trusted third party is introduced and the public audit method is used to verify the integrity of the stored data instead of the user, so the user does not need to maintain the online state, which enhances the flexibility of the system. The aggregation signature based on BLS is used to reduce the computation of data integrity verification and the bandwidth of network communication. The improved Merkel Hash Tree, is used to provide limited dynamic update operation of stored data through distributed algorithm.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP333

【相似文献】