云存储系统中数据完整性验证方案的研究与设计

发布时间：2018-06-19 23:23

本文选题：云存储 + 数据完整性　；参考：《西南科技大学》2017年硕士论文

【摘要】：云存储技术的快速发展,大大降低了存储数据的成本,使得更多的用户选择在云端存储数据,与此同时用户无法掌握对数据的绝对控制权限,无法确定存储在云端的数据是否完整;云存储提供商(Cloud Storage Provider,CSP)需要使用一种有效的协议来向用户证明存储在云端的数据的完整性。在实际场景中,用户往往在云端存储大量数据,并且根据需要随时远程对数据进行更新操作。所以,存储在云端的数据的完整性验证,既包括验证静态数据的完整性,也包括验证云服务商是否按照用户的指令将数据进行了正确更新。目前的验证方案,大都采用数字签名算法来实现公开的验证,并且利用动态数据结构来完成数据的动态更新。遗憾的是仍然存在通信和计算的开销较大,验证效率较低等问题。针对这些问题,本文综合分析数字签名算法、数据完整性验证模型和动态数据结构等关键技术,提出基于改进哈希树(RMHT)的动态数据完整性验证方案,并对该方案进行系统原型的设计与实现。论文的主要工作如下:(1)为了减少数据完整性验证过程中的通信和计算开销,解决验证效率低的问题,本文将文件的使用频率作为权值,引入默克尔哈希树(MHT)数据结构中,形成改进哈希树结构,提出基于RMHT的动态数据完整性验证方案。相较于MHT,RMHT在验证过程中,能够减少计算开销,并且在文件更新时,随着权值的改变可以提升验证的效率。(2)本文按照软件工程项目的标准流程对系统原型进行设计与开发,包括完整的软件需求,对模块的明确划分和接口的清晰定义,以及高效实用的代码。经过理论分析与实验对比,本文提出的数据完整性验证方案能够支持数据的动态更新,并可以提升数据完整性验证的效率。
[Abstract]:With the rapid development of cloud storage technology, the cost of storing data is greatly reduced, and more users choose to store data in the cloud. It is not certain whether the data stored in the cloud is complete; cloud storage provider Cloud Storage provider CSP needs to use a valid protocol to prove the integrity of the data stored in the cloud. In practical scenarios, users often store large amounts of data in the cloud, and remotely update the data at any time according to their needs. Therefore, the integrity verification of data stored in the cloud includes both verifying the integrity of static data and verifying that the cloud service provider updates the data correctly according to the user's instructions. Most of the current verification schemes use digital signature algorithms to implement public verification, and dynamic data structure is used to complete the dynamic updating of data. Unfortunately, there are still some problems in communication and computing, such as low efficiency of verification and so on. Aiming at these problems, this paper synthetically analyzes the key technologies of digital signature algorithm, data integrity verification model and dynamic data structure, and proposes a dynamic data integrity verification scheme based on improved hash tree (RMHT). The system prototype is designed and implemented. The main work of this paper is as follows: (1) in order to reduce the communication and computing overhead in the process of data integrity verification and to solve the problem of low verification efficiency, this paper introduces the frequency of the file as the weight value and introduces it into the MHT data structure of Merkel Hash Tree. An improved hash tree structure is formed and a dynamic data integrity verification scheme based on RMHT is proposed. Compared with MHT-RMHT in the verification process, it can reduce the computation cost, and can improve the efficiency of verification with the change of weight when the file is updated.) this paper designs and develops the prototype of the system according to the standard flow of software engineering project. Including complete software requirements, the clear division of modules and interface clear definition, as well as efficient and practical code. Through theoretical analysis and experimental comparison, the data integrity verification scheme proposed in this paper can support the dynamic updating of data and improve the efficiency of data integrity verification.
【学位授予单位】：西南科技大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP333

【相似文献】