在云计算环境中,客户将数据存储在不可信的云存储服务器上.如何在本地没有数据副本的情况下,高效地对客户存储的远程数据进行完整性验证是一个亟待解决的问题,针对此问题已相继提出一系列解决方案.提出已知证据伪造攻击的概念,即拥有一定数量证据的敌手可以伪造新的合法证据.指出已有的一些数据完整性验证方案无法抵抗已知证据伪造攻击.利用基于等级的认证跳表提出一个改进方案,该方案支持完全数据更新和公开审计.
In cloud computing,clients put the large data files on the untrusted cloud storage server.As clients no longer physicaUy possess the storage of their data,how to efficiently verify the correctness of outsourced cloud data becomes a big challenge for data storage security in cloud computing. In order to solve the problem of data integrity checking, many schemes are proposed. We first propose the notion of the known-proofs forgery attack,i.e. ,the adversary who has a certain number of proofs can forge a new legal proof. We point out that some known schemes cannot resist the known-proofs forgery attack. After that we propose an improved data integrity checking protocol with full data dynamics and public verifiability for cloud storage by manipulating rank-based authenticated skip list.