A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding

被引：109

作者：

Lin, Hsiao-Ying ^{[1
]}

Tzeng, Wen-Guey ^{[1
]}

机构：

[1] Natl Chiao Tung Univ, Intelligent Informat & Commun Res Ctr, Dept Comp Sci, Hsinchu 30010, Taiwan

来源：

IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS | 2012年 / 23卷 / 06期

关键词：

Decentralized erasure code; proxy re-encryption; threshold cryptography; secure storage system;

D O I：

10.1109/TPDS.2011.252

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party's cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness.

引用

页码：995 / 1003

页数：9

共 29 条

[1]

Adya A, 2002, USENIX ASSOCIATION PROCEEDINGS OF THE FIFTH SYMPOSIUM ON OPERATING SYSTEMS DESIGN AND IMPLEMENTATION, P1

[2]

Ateniese G., 2006, ACM Transactions on Information and Systems Security, V9, P1, DOI 10.1145/1127345.1127346

[3]

Ateniese G., 2008, P 4 EAI SECURECOMM, P1, DOI 10.1145/1460877.1460889

[4]

Ateniese G, 2007, CCS'07: PROCEEDINGS OF THE 14TH ACM CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, P598

[5]

Ateniese G, 2009, LECT NOTES COMPUT SC, V5912, P319, DOI 10.1007/978-3-642-10366-7_19

[6]

Ateniese G, 2009, LECT NOTES COMPUT SC, V5473, P279, DOI 10.1007/978-3-642-00862-7_19

[7]

Bhagwan R, 2004, USENIX ASSOCIATION PROCEEDINGS OF THE FIRST SYMPOSIUM ON NETWORKED SYSTEMS DESIGN AND IMPLEMENTATION (NSDI'04), P337

[8]

Blaze M, 1998, LECT NOTES COMPUT SC, V1403, P127, DOI 10.1007/BFb0054122

[9]

Bowers KD, 2009, CCS'09: PROCEEDINGS OF THE 16TH ACM CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY, P187

[10] THE NEWCASTLE CONNECTION OR UNIXES OF THE WORLD UNITE [J].

BROWNBRIDGE, DR ;

MARSHALL, LF ;

RANDELL, B .

SOFTWARE-PRACTICE & EXPERIENCE, 1982, 12 (12) :1147-1162

← 1 2 3 →