基于事件逻辑的云计算环境下数据完整性验证模型及协议研究

Data integrity verification issue is very critical on data security of information security fields in the cloud computing environment. Cloud service providers play roles of data controllers. The security and provacy of users maybe be attacked. The benefit of the research on data integrity verification is useful for strengthening the confidence relationship between the tenants and cloud service providers. The aim of this project is the necessity of data integrity verification for cloud computing environment under incredible hypothesis model. The flow is followed by “Demand analysis--Model building--Protocol design-Analysis verification”. Combined with the cloud of multilayer subcontract lease service mode, the project is to construct data integrity public verification model under the cloud computing mode to meet the conditions of the validation requirements on data updating. For demand of tenants on data dynamic characteristics of data insert and deletion and privacy protection requirement of public verification process on cloud computing environment are necessary. Based on the theory of logic of events, TBCPCC theory is proposed by the project which is the abbreviation of the theory on basic cryptographic protocol in cloud computing. The data integrity verification protocol is designed based on the TBCPCC, and the soundness and completeness of TBCPCC verification system must be proved. The project is aim to clarify the union framework principle among the different properties (freshness, secrecy and non-repudiation) on the data integrity verification protocol based on the TBCPCC. The study above all aims to solve data integrity verification issues under complex cloud computing environment, and to provide sicentific theory evidence and effective verification method.

云计算环境下数据完整性验证是信息安全领域在数据安全方面亟待解决的关键问题，云服务提供商扮演着数据掌控者的角色，用户的安全和隐私可能被侵犯，其研究有利于巩固租户和云服务提供商之间的信任关系。基于云计算环境不可信假设前提，本项目以“需求分析—模型构建—协议设计—分析验证”为流程，针对云计算环境多层转包的租赁服务模式，构建云计算模式下数据完整性公开验证模型，以满足数据更新条件下的验证要求；针对云计算环境下租户对数据插入、删除等动态性特点和公开验证过程中隐私保护需求，本项目基于事件逻辑理论，提出云计算基本密码协议理论TBCPCC，设计基于TBCPCC的数据完整性验证协议，并保证验证系统的可靠性及完备性；阐明基于TBCPCC的数据完整性验证协议不同性质（新鲜性、秘密性、非否认性）统一框架表示机理。上述研究旨在解决复杂云计算环境下数据完整性验证问题提供科学的理论依据和有效验证方法。

随着云计算的发展，层出不穷的云安全问题进入人们视野，本项目针对云计算环境不可信假设模型下大数据安全及防范问题，以“需求分析—模型构建—协议设计—分析验证”为流程，基于事件逻辑理论(Logic of Event Theory, 缩写为 LoET)，针对云计算所采用的多层转包服务模式的安全威胁类型进行分析，构建在数据不脱密假设模型下适应多租户对数据更新要求的数据完整性公开验证模型；提出基于云计算基本密码协议理论（Theory of Basic Cryptographic Protocols on Cloud Computing, 缩写为 TBCPCC）的数据完整性验证协议，TBCPCC 协议原语包括：新鲜性（Freshness）、完整性（Integrity）、原子性（Atoms）、独立性(Independence)、加密(Encrypt)、解密(Decrypt)、数据签名(Sign)、验证(Verify)、诚实主体(Honest)、Property R、多层转包服务原语等，满足云计算环境下多租户对数据更新和公开验证过程中隐私保护需求，解决已有数据静态或动态验证方法不能完全满足云计算环境下的数据完整性验证问题。上述理论，适用于对云环境下数据完整性进行验证和协议安全性进行分析。. 基于模型检测技术及事件逻辑理论，对云计算环境下的双向认证协议Nayak以及WMN客户端与LTCA间交互协议进行分析和验证。以验证结果为基础提出支持大数据安全及防范公开验证模型及协议，包括提出基于云PACS系统的统一身份认证框架以及云环境下基于时间戳私钥签名技术的双向认证协议Nayak-T，并对所构建模型的正确性与验证协议的安全性进行分析，旨在解决复杂云计算环境下大数据安全及验证问题提供科学的理论依据和有效验证方法。