云存储中支持安全去重的数据完整性验证方法

摘要

针对云存储中的数据安全问题,提出一种支持安全去重与公开验证的数据完整性验证方法.该方法结合所有权证明和可恢复性证明的优点,利用数据分块、随机抽样和动态系数策略,实现用户端安全去重和数据完整性验证.通过引入双线性对和纠删编码,用户可以无限次检测数据是否完好无损,并对损坏的数据进行修复.引入随机掩码技术,能够有效隐藏用户数据信息,实现隐私保护.分析结果表明,该方法在保证云存储数据安全性和完整性的同时,可有效减少计算开销和通信开销.%For the secure issues of outsourced data in cloud storage,a new method of data integrity verification is proposed,which can support secure deduplication and public verification.The method combines the advantages of Proofs of Ownership(POW) and Proofs of Retrievability (POR),and achieves client-side secure deduplication and data integrity verification simultaneously,in which data block,random sampling and dynamic coefficient are used.By introducing bilinear pairings and erasure codes,users can infinitely verify whether the data is intact in cloud storage.If the data is damaged,users can repair it with erasure codes.To achieve privacy preserving,the technology of random masking is introduced,which can hide the information of users' data effectively.Analysis results show that the proposed method not only can assure the security and integrity of data stored in cloud storage,but also can efficiently reduce the computing cost and communication cost.