基于覆写验证的云数据确定性删除方案Clouddataassureddeletion.PDFVIP

第40 卷第1 期 通 信 学 报 Vol.40 No.1 2019 年1 月 Journal on Communications January 2019 基于覆写验证的云数据确定性删除方案 1,2 1,2 1,2 杜瑞忠 ，石朋亮 ，何欣枫 （1. 河北大学网络空间安全与计算机学院，河北 保定 071002 ；2. 河北省高可信信息系统重点实验室，河北 保定 071002 ） 摘 要：云存储中的数据在生命周期结束删除时，大多是采用删除密钥的逻辑删除方式进行处理，数据仍存在泄 露风险，为此提出了一种基于密文重加密与覆写验证结合的云数据确定性删除方案（WV-CP-ABE ）。当数据拥有 者想删除外包数据时，通过重新加密密文改变密文对应的访问控制策略来实现数据细粒度删除操作；其次构建基 于脏数据块覆写的可搜索路径散列二叉树（DSMHT ），对要删除的数据进行覆写后正确性验证；最终采用更改密 文访问控制策略和数据覆写双重机制保障数据确定性删除。实验分析证明，所提方案在数据确定性删除方面比以 前的逻辑删除方法细粒度控制更好，安全性更可靠。 关键词：云存储；密文属性加密；确定性删除；散列二叉树；覆写验证 中图分类号：TP393.08 文献标识码：A doi: 10.11959/j.issn.1000−436x.2019012 Cloud data assured deletion scheme based on overwrite verification DU Ruizhong1,2, SHI Pengliang1,2, HE Xinfeng1,2 1. Cyberspace Security and Computer College, Hebei University, Baoding 071002, China 2. Key Lab on High Trusted Information System in Hebei Province, Baoding 071002, China Abstract: At the end of data life cycle, there is still a risk of data leakage, because mostly data which was stored in cloud is removed by logical deletion of the key. Therefore, a cloud data assured deletion scheme (WV-CP-ABE) based on ciphertext re-encrypt and overwrite verification was proposed. When data owner wants to delete the outsourced data, the data fine-grained deletion operation was realized by re-encrypting the ciphertext to change the access control policy. Secondly, a searchable path hash binary tree (DSMHT) based on dirty data block overwrite was built to verify the cor- rectn