首页> 外文期刊>IEEE transactions on dependable and secure computing >Enabling Efficient User Revocation in Identity-Based Cloud Storage Auditing for Shared Big Data
【24h】

Enabling Efficient User Revocation in Identity-Based Cloud Storage Auditing for Shared Big Data

机译:为共享大数据提供基于身份的云存储审计中的高效用户撤销

获取原文
获取原文并翻译 | 示例
           

摘要

Cloud storage auditing schemes for shared data refer to checking the integrity of cloud data shared by a group of users. User revocation is commonly supported in such schemes, as users may be subject to group membership changes for various reasons. Previously, the computational overhead for user revocation in such schemes is linear with the total number of file blocks possessed by a revoked user. The overhead, however, may become a heavy burden because of the sheer amount of the shared cloud data. Thus, how to reduce the computational overhead caused by user revocations becomes a key research challenge for achieving practical cloud data auditing. In this paper, we propose a novel storage auditing scheme that achieves highly-efficient user revocation independent of the total number of file blocks possessed by the revoked user in the cloud. This is achieved by exploring a novel strategy for key generation and a new private key update technique. Using this strategy and the technique, we realize user revocation by just updating the non-revoked group users' private keys rather than authenticators of the revoked user. The integrity auditing of the revoked user's data can still be correctly performed when the authenticators are not updated. Meanwhile, the proposed scheme is based on identity-base cryptography, which eliminates the complicated certificate management in traditional Public Key Infrastructure (PKI) systems. The security and efficiency of the proposed scheme are validated via both analysis and experimental results.
机译:共享数据的云存储审计计划是指检查一组用户共享的云数据的完整性。用户撤销通常以这样的方案支持,因为用户可能受到组成员身份更改的各种原因。以前,这种方案中的用户撤销的计算开销是线性的,其中撤销用户拥有的文件块的总数。然而,由于共享云数据的庞大数量,因此可能成为一个沉重的负担。因此,如何降低由用户撤销引起的计算开销成为实现实际云数据审核的关键研究挑战。在本文中,我们提出了一种新颖的存储审计方案,可以实现高效的用户撤销,无论是云中撤销的用户所拥有的文件块总数是否无关。这是通过探索关键生成的新策略和新的私钥更新技术来实现的。使用此策略和技术,我们通过刚刚更新未撤销的组用户的私钥而不是撤销用户的身份验证器来实现用户撤销。当验证器未更新时,仍然可以正确执行撤销用户数据的完整性审计。同时,该方案基于身份基础密码学基于传统公钥基础设施(PKI)系统中的复杂证书管理。通过分析和实验结果验证了所提出的方案的安全性和效率。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号