Provable Multicopy Dynamic Data Possession in Cloud Computing Systems
Provable Multicopy Dynamic Data Possession in Cloud Computing Systems
复制标题
DOI：
10.1109/tifs.2014.2384391
复制
发表时间：
2015-03-01
影响因子：
6.8
通讯作者：
Hasan, M. Anwar
中科院分区：
文献类型：
--
作者：
Barsoum, Ayad F.;Hasan, M. Anwar
越来越多的组织选择将数据外包给远程云服务提供商（CSP）。客户可以租用CSP存储基础设施，通过支付以GB/月为单位的费用来存储和检索几乎无限数量的数据。为了提高可扩展性、可用性和持久性，一些客户可能希望将其数据复制到多个数据中心的多个服务器上。要求CSP存储的副本越多，向客户收取的费用就越多。因此，客户需要有一个强有力的保证，即CSP正在存储服务合同中约定的所有数据副本，并且所有这些副本都与客户发布的最新修改一致。在本文中，我们提出了一个基于映射的可证明多副本动态数据占有（MB-PMDDP）方案，该方案具有以下特点：1）它向客户提供证据，证明CSP没有通过存储更少的副本进行欺骗; 2）它支持动态数据的外包，即，它支持块级操作，如块修改、插入、删除和追加;以及3）它允许授权用户无缝访问CSP存储的文件副本。我们提出的MB-PMDDP计划与通过扩展现有的可证明拥有的动态单副本计划的参考模型进行了比较分析。通过商业云平台上的实验结果验证了理论分析。此外，我们还证明了该方案的安全性，并讨论了如何通过修改方案来识别被破坏的副本.
Increasingly more and more organizations are opting for outsourcing data to remote cloud service providers (CSPs). Customers can rent the CSPs storage infrastructure to store and retrieve almost unlimited amount of data by paying fees metered in gigabyte/month. For an increased level of scalability, availability, and durability, some customers may want their data to be replicated on multiple servers across multiple data centers. The more copies the CSP is asked to store, the more fees the customers are charged. Therefore, customers need to have a strong guarantee that the CSP is storing all data copies that are agreed upon in the service contract, and all these copies are consistent with the most recent modifications issued by the customers. In this paper, we propose a map-based provable multicopy dynamic data possession (MB-PMDDP) scheme that has the following features: 1) it provides an evidence to the customers that the CSP is not cheating by storing fewer copies; 2) it supports outsourcing of dynamic data, i.e., it supports block-level operations, such as block modification, insertion, deletion, and append; and 3) it allows authorized users to seamlessly access the file copies stored by the CSP. We give a comparative analysis of the proposed MB-PMDDP scheme with a reference model obtained by extending existing provable possession of dynamic single-copy schemes. The theoretical analysis is validated through experimental results on a commercial cloud platform. In addition, we show the security against colluding servers, and discuss how to identify corrupted copies by slightly modifying the proposed scheme.