Integrity verification method based on active attack resistance in cloud storage

Abstract

The invention discloses an integrity verification method with an active attack resistance, wherein the integrity verification method mainly settles a problem of incapability of resisting active attacks in prior art. The integrity verification method comprises the steps of 1, uniformly blocking a file by a user, generating a main label and an auxiliary label, selecting a cryptographic Hash function, a pseudo random function and a pseudo random substitution function; 2, transmitting file sub-blocks to a cloud service provider by the user, deleting a local file, generating inquiry information by the user and transmitting the inquiry information to the cloud service provider; 3, generating proving information by the cloud service provider, and resisting the active attack by the user through the proving information and unidirectionality of the Hash function; and 4, verifying the proving information by the user through locally generating verification information, wherein the proving information is transmitted by the cloud service provider, if verification passes, determining a fact that the user data are complete, and otherwise, determining a fact that the data are damaged. The integrity verification method has advantages of reducing communication traffic and improving active attack resistance. The integrity verification method can be used for data integrity verification under a precondition that a client which is supported in cloud storage loses a data ownership.

Description

technical field [0001] The invention belongs to the field of communication security, and in particular relates to a data integrity verification method, which can be used in cloud storage to support a client to complete data integrity verification under the premise of losing data ownership. Background technique [0002] As a new type of storage model, cloud storage has the ability to store data remotely and has been widely used. More and more companies are outsourcing their data to the cloud to reduce the pressure on local data storage. With the emergence of these advantages, the security of cloud storage has also become a focus of attention, especially in cloud storage, when users lose ownership of data, attackers and unsafe cloud service providers will not be able to control user data. The resulting data corruption becomes a major security concern. Therefore, data integrity verification has become a hot topic. [0003] In the paper "Enabling public verifiability and avai...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to propose a data integrity verification method that resists active attacks in view of the security problems existing in the above-mentioned prior art that cannot resist active attacks, so as to avoid data integrity verification in the process of completing data integrity verification and dynamically updating data. Malicious tampering of data, improving the ability to resist active attacks

Images