Cooperative Query Answer Authentication Scheme Over Anonymous Sensing Data
Cooperative Query Answer Authentication Scheme Over Anonymous Sensing Data
复制标题
匿名传感数据的协作查询应答认证方案
DOI：
10.1109/access.2017.2676008
复制
发表时间：
2017-03
期刊：
影响因子：
3.9
通讯作者：
Zhong Hong
中科院分区：
文献类型：
--
作者：
Wang Liangmin;Xie Qingqing;Zhong Hong
在群体感知数据的云服务中，数据所有者（data owner， DO）通过云服务器发布感知数据，用户可以根据需要获取感兴趣的信息。但云服务提供商（CSP）往往不值得信任。由于查询答案的真实性和DO身份的泄漏，出现了隐私和安全问题。为了解决这些问题，许多研究者研究了云服务系统的查询应答认证方案。传统的技术是为发布的数据提供DO签名。但是签名总是会暴露DO的身份。针对这一缺点，本文提出了一种基于环签名、Merkle哈希树（MHT）和不可抵赖服务协议的协作查询应答认证方案。该方案通过云服务系统中实体之间的协作，既能验证查询答案，又能保护DO的身份。首先，它选取要签名的MHT内部节点以及根节点。因此，在最好的情况下，验证计算复杂度可以从$O({log}_{2}N)$显著降低到$O({log}_{2}N^{0.5})$。然后，它改进现有的环签名以对所选节点进行签名。此外，该方案在查询答案和验证对象的传输过程中采用了不可否认协议，以保护CSP与用户之间的交易行为。安全性和性能分析证明了该方案的安全性和可行性。大量的实验结果证明了该方法在验证效率和通信开销方面的优越性。
In cloud service over crowd-sensing data, the data owner (DO) publishes the sensing data through the cloud server, so that the user can obtain the information of interest on demand. But the cloud service providers (CSP) are often untrustworthy. The privacy and security concerns emerge over the authenticity of the query answer and the leakage of the DO identity. To solve these issues, many researchers study the query answer authentication scheme for cloud service system. The traditional technique is providing DO’s signature for the published data. But the signature would always reveal DO’s identity. To deal with this disadvantage, this paper proposes a cooperative query answer authentication scheme, based on the ring signature, the Merkle hash tree (MHT) and the non-repudiable service protocol. Through the cooperation among the entities in cloud service system, the proposed scheme could not only verify the query answer, but also protect the DO’s identity. First, it picks up the internal nodes of MHT to sign, as well as the root node. Thus, the verification computation complexity could be significantly reduced from $O({log}_{2}N)$ to $O({log}_{2}N^{0.5})$ in the best case. Then, it improves an existing ring signature to sign the selected nodes. Furthermore, the proposed scheme employs the non-repudiation protocol during the transmission of query answer and verification object to protect trading behavior between the CSP and users. The security and performance analysis prove the security and feasibility of the proposed scheme. Extensive experimental results demonstrate its superiority of verification efficiency and communication overhead.
登录
查看更多内容
DOI：
10.1007/3-540-39568-7_34
发表时间：
1984-08
期刊：
--
影响因子：
--
作者：
Tom Tedrick
通讯作者：
Tom Tedrick
影响因子：
3.9
作者：
Daehan Kwak;Ruilin Liu;Daeyoung Kim;B. R. Badrinath;L. Iftode
通讯作者：
Daehan Kwak;Ruilin Liu;Daeyoung Kim;B. R. Badrinath;L. Iftode
DOI：
10.1007/978-3-540-24676-3_36
发表时间：
2004-05
期刊：
--
影响因子：
--
作者：
Y. Dodis;A. Kiayias;Antonio Nicolosi;V. Shoup
通讯作者：
Y. Dodis;A. Kiayias;Antonio Nicolosi;V. Shoup
DOI：
10.1109/icdcs.2016.78
发表时间：
2016-06
期刊：
2016 IEEE 36th International Conference on Distributed Computing Systems (ICDCS)
影响因子：
--
作者：
Shixin Tian;Ying Cai;Zhenbi Hu
通讯作者：
Shixin Tian;Ying Cai;Zhenbi Hu
影响因子：
4.8
作者：
Huseyin Ugur Yildiz;K. Bicakci;B. Tavlı;Hakan Gultekin;Davut Incebacak
通讯作者：
Huseyin Ugur Yildiz;K. Bicakci;B. Tavlı;Hakan Gultekin;Davut Incebacak