• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Future generation computer systems >Pipeline-integrity: Scaling the use of authenticated data structures up to the cloud
【24h】

Pipeline-integrity: Scaling the use of authenticated data structures up to the cloud

机译：管道完整性：将经过身份验证的数据结构的使用扩展到云端

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Public cloud storage services are widely adopted for their scalability and low cost. However, delegating the management of the storage has serious implications from the security point of view. We focus on integrity verification of query results based on the use of Authenticated Data Structures (ADS). An ADS enables efficient updates of a cryptographic digest, when data changes, and efficient query verification against this digest. Since, the digest can be updated (and usually signed) exclusively with the intervention of a trusted party, the adoption of this approach is source of a serious performance degradation, in particular when the trusted party is far from the server that stores the ADS.In this paper, we show a protocol for a key-value storage service that provides ADS-enabled integrity-protected queries and updates without impairing scalability, even in the presence of large network latencies between trusted clients and an untrusted server. Our solution complies with the principle of the cloud paradigm in which services should be able to arbitrarily scale with respect to number of clients, requests rates, and data size keeping response time limited. We formally prove that our approach is able to detect server misbehaviour in a setting whose consistency rules are only slightly weaker than those guaranteed by previous results. We provide experimental evidence for the feasibility and scalability of our approach. (C) 2019 Elsevier B.V. All rights reserved.
机译：公共云存储服务因其可扩展性和低成本而被广泛采用。但是，从安全角度来看，委派存储管理具有严重的意义。我们专注于基于身份验证数据结构（ADS）的查询结果的完整性验证。当数据更改时，ADS可以高效地更新密码摘要，并针对该摘要进行有效的查询验证。由于摘要只能在受信任方的干预下进行更新（通常是签名），因此采用此方法会严重降低性能，尤其是在受信任方远离存储ADS的服务器时。在本文中，我们展示了一种用于键值存储服务的协议，该协议可提供启用ADS的完整性受保护的查询和更新，而不会损害可伸缩性，即使在受信任的客户端和不受信任的服务器之间存在较大的网络延迟的情况下。我们的解决方案符合云范式的原则，在该范式中，服务应能够根据客户端数量，请求速率和数据大小任意扩展，从而使响应时间受到限制。我们正式证明了我们的方法能够在一致性规则仅比先前结果所保证的弱一些的情况下检测服务器的不良行为。我们为该方法的可行性和可扩展性提供实验证据。 （C）2019 Elsevier B.V.保留所有权利。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号