...
首页> 外文期刊>Parallel and Distributed Systems, IEEE Transactions on >Authorized Public Auditing of Dynamic Big Data Storage on Cloud with Efficient Verifiable Fine-Grained Updates
【24h】

Authorized Public Auditing of Dynamic Big Data Storage on Cloud with Efficient Verifiable Fine-Grained Updates

机译:经授权的公共审计,可以对云上的动态大数据进行有效审计,并进行有效的细粒度更新

获取原文
获取原文并翻译 | 示例
           

摘要

Cloud computing opens a new era in IT as it can provide various elastic and scalable IT services in a pay-as-you-go fashion, where its users can reduce the huge capital investments in their own IT infrastructure. In this philosophy, users of cloud storage services no longer physically maintain direct control over their data, which makes data security one of the major concerns of using cloud. Existing research work already allows data integrity to be verified without possession of the actual data file. When the verification is done by a trusted third party, this verification process is also called data auditing, and this third party is called an auditor. However, such schemes in existence suffer from several common drawbacks. First, a necessary authorization/authentication process is missing between the auditor and cloud service provider, i.e., anyone can challenge the cloud service provider for a proof of integrity of certain file, which potentially puts the quality of the so-called ‘auditing-as-a-service’ at risk; Second, although some of the recent work based on BLS signature can already support fully dynamic data updates over fixed-size data blocks, they only support updates with fixed-sized blocks as basic unit, which we call coarse-grained updates. As a result, every small update will cause re-computation and updating of the authenticator for an entire file block, which in turn causes higher storage and communication overheads. In this paper, we provide a formal analysis for possible types of fine-grained data updates and propose a scheme that can fully support authorized auditing and fine-grained update requests. Based on our scheme, we also propose an enhancement that can dramatically reduce communication overheads for verifying small updates. Theoretical analysis and experimental results demonstrate that our scheme can offer not only enhanced security and flexibility, but also significantly lower overhead for big data applications with a lar- e number of frequent small updates, such as applications in social media and business transactions.
机译:云计算开启了IT的新纪元,因为它可以按需付费的方式提供各种弹性和可扩展的IT服务,用户可以减少对自己的IT基础架构的巨额资本投资。按照这种理念,云存储服务的用户不再物理上保持对数据的直接控制,这使得数据安全性成为使用云的主要问题之一。现有研究工作已经可以在不拥有实际数据文件的情况下验证数据完整性。当验证由受信任的第三方完成时,此验证过程也称为数据审核,而该第三方称为审核员。但是,现有的这种方案存在几个共同的缺点。首先,审核员和云服务提供商之间缺少必要的授权/认证过程,即,任何人都可以向云服务提供商提出质疑以证明某些文件的完整性,这可能会导致所谓的“审核-审核”的质量下降。 -“服务”有风险;其次,尽管最近一些基于BLS签名的工作已经可以支持在固定大小的数据块上进行完全动态的数据更新,但是它们仅支持以固定大小的块为基本单位的更新,我们称之为粗粒度更新。结果,每次小的更新都将导致重新计算和更新整个文件块的身份验证器,从而导致更高的存储和通信开销。在本文中,我们对可能的细粒度数据更新类型进行了形式分析,并提出了一种可以完全支持授权审计和细粒度更新请求的方案。基于我们的方案,我们还提出了一项增强功能,可以大大减少用于验证小更新的通信开销。理论分析和实验结果表明,该方案不仅可以提供增强的安全性和灵活性,而且可以显着降低具有大量频繁的小更新的大数据应用程序的开销,例如社交媒体和业务交易中的应用程序。 >

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号