新型高效的可验证流模型及其关键技术研究

Verifiable data streaming (VDS) is one of the main theoretical research areas of data protection under the big data environment. This project is motivated by the need of integrity verification for outsourced data streams under the environments of mobile Internet, cloud computing, big data and Internet of things. We develop new VDS models and constructions in order to achieve flexible and adaptable theoretical and technical systems. We propose a new solution that combines authenticated data structures (ADS) and VDS to solve the integrity verification problem for outsourced data streams. Under the goal of better expressiveness for search queries, more search models and better search efficiencies on the premise of good security level, we explore new solutions for the integrity verification of outsourced data streams. By combing ADS and VDS, we propose a new VDS model called streaming authenticated data structures (SADS). By focusing on the research of key technologies for the SADS model, including lattice-based hash function (LBH), generalized hash tree, chameleon vector commitments, homomorphic encryption arithmetic Markel tree and outsourced computation, we make every effort to achieve the innovation and breakthrough for the problems of complex queries, search over encrypted data and light-weight verification for search queries By conducting experiments on the prototype systems of integrity verification of outsourced data streams, we verify the availability and practicability of the research of this project. The result of this project will provide novel ideas and the theoretical basis for the researches of data security under the big data environment.

可验证流(VDS)模型是大数据环境中数据保护理论研究的重点内容之一。课题围绕移动互联、云计算、大数据以及物联网环境下的外包流数据完整性验证的多元化需求，开展新型的VDS模型及构建方法研究，形成弹性适应的理论和技术体系。将从认证数据结构(ADS)与VDS相融合的新视角来审视外包流数据完整性验证问题。探索一种“在保证安全性前提下，查询语句表达性更强，查询类型更丰富，执行效率更高”的外包流数据完整性验证新思想；建立ADS与VDS模型相融合的新型VDS模型-流式认证数据结构(SADS)模型；研究支持SADS模型的格哈希函数、泛化哈希树、变色龙向量承诺、同态加密算术哈希树以及外包计算等关技术，力求在支持复杂查询、密态数据查询、轻量级查询验证等方面所有创新和突破。研制面向实际应用需求的外包流数据完整性验证原型系统，以验证课题方法的有效性和实用性，为大数据环境下的数据安全研究提供新思路和理论依据。

课题围绕移动互联、云计算、大数据以及物联网环境下的外包流数据完整性验证的多元化需求，重点研究新型的可验证流(VDS)模型及构建方法，构建了弹性适应的理论和技术体系。将从认证数据结构(ADS)与VDS相融合的新视角来审视外包流数据完整性验证问题。提出了一种“在保证安全性前提下，查询语句表达性更强，查询类型更丰富，执行效率更高”的外包流数据完整性验证新思想；建立了ADS与VDS模型相融合的新型VDS模型-流式认证数据结构(SADS)模型；通过研究支持SADS模型的格哈希函数、泛化哈希树、变色龙向量承诺、同态加密算术哈希树以及外包计算等关技术，在支持复杂查询、密态数据查询、轻量级查询验证等方面取得了一定创新和突破。研制面向实际应用需求的外包流数据完整性验证原型系统，验证了课题方法的有效性和实用性。目前项目组已经完成了相应的研究工作，达到了研究目标要求。研究成果体现在：发表学术论文17篇，申请专利6项（4项获得授权），培养博士研究生4名，培养硕士研究生10名。开展的研究对推动大数据环境下的数据安全技术的普及和方法应用具有重要意义。