Method and system for supporting dense data deduplication and integrity verification

Abstract

The invention belongs to a communication technology, and discloses a method and system for supporting dense data deduplication and integrity verification. In each time period, the user's signature private key is a product of two parts, the first part is an update message generated by an auditor according to his private key, and the second part is calculated by the user's private key and the current time period; the signature private key of any time period needs to be generated jointly by the user and the auditor; and in the data deduplication, the client deduplication of the file is implemented by using a Bloom filter. The invention utilizes the Bloom filter to implement the client deduplication of the file, and does not need to perform secondary uploading when the cloud server has alreadystored the same file, and prevents the malicious user from illegally obtaining the file through the fake certificate value while the malicious user does not possess the file. During the challenge andresponse process, the cloud server picks up a part of the message block of the file for verification, and the auditor cannot obtain the file through the response value sent by the cloud server.

Description

technical field [0001] The invention belongs to the communication technology, and in particular relates to a method and system supporting deduplication and integrity verification of encrypted state data. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: With the rapid development of cloud computing, various applications built on the cloud platform are gradually integrated into people's work and life. Through cloud computing technology, users and enterprises do not need to spend too much on the purchase and maintenance of hardware in the early stage. In addition, powerful computing and storage capabilities also make users more willing to rely on the cloud to handle various complex tasks. Users' computing resources and management capabilities are very limited, and they cannot undertake large-scale computing tasks; by storing data in cloud servers, users can be freed from heavy computing tasks. As a development t...

AI Technical Summary

Problems solved by technology

[0004] (1) Users do not have absolute control over personal data in the cloud, and data security cannot be guaranteed

[0005] (2) Mechanically combining data deduplication with integrity verification will inevitably lead to confusion of the identity of the uploader and the resulting data security issues

[0006] (3) The existing technology cannot achieve key update, so it cannot resist key leakage, so that the user's key may be stolen during the integrity audit process

[0008] Although the existing data integrity verification schemes have achieved data deduplication or anti-key leakage, there is still no scheme that can simultaneously achieve the three functions of anti-key leakage, data deduplication and integrity verification.

Furthermore, if the encryption key is simply updated in a verification audit scheme that supports deduplication, it may result in failure to successfully deduplicate due to different user private keys in different time periods.

Images