计算机科学与探索 ›› 2010, Vol. 4 ›› Issue (5): 426-435.DOI: 10.3778/j.issn.1673-9418.2010.05.005

• 学术研究 • 上一篇    下一篇

DAS模式下基于密文分组索引的完整性验证*

杨平平1,2, 杜小勇1,2+, 王洁萍1,2

  

  1. 1. 中国人民大学 教育部数据工程与知识工程重点实验室, 北京 100872
    2. 中国人民大学 信息学院, 北京 100872
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2010-05-11 发布日期:2010-05-11
  • 通讯作者: 杜小勇

Integrity Verification Based on Bucket Index in DAS Model

YANG Pingping1,2, DU Xiaoyong1,2+, WANG Jieping1,2   

  1. 1. Key Laboratory of Data Engineering and Knowledge Engineering, Ministry of Education, Renmin University of China, Beijing 100872, China
    2. School of Information, Renmin University of China, Beijing 100872, China
  • Received:1900-01-01 Revised:1900-01-01 Online:2010-05-11 Published:2010-05-11
  • Contact: DU Xiaoyong

摘要: 目前关于DAS模式下的全概率完整性验证方法主要是建立在明文数据上, 并没有建立在密文数据上的完整性验证方法。提出一种建立在密文数据上的适用于动态数据库的完整性验证方法。分组索引是在DAS模式下的一种高效的密文索引, 在密文数据分组索引的基础上, 提出利用无碰撞增量式哈希生成完整性验证信息的方法。这是一种验证速度快(可并行计算)、维护代价小(对于增删改操作可增量式维护)的全概率验证方法, 适用于动态数据库中完整性的验证。

关键词: 数据外包, 完整性验证, 分组索引, 无碰撞增量式哈希

Abstract: Bucket index is an efficient query mechanism on encrypted data in database as a service (DAS) model. However, there is no efficient mechanism to ensure integrity of query replies which is obtained through using bucket index. This paper investigates the problem of ensuring data integrity and suggests secure and practical schemes that help verification of query replies executed through using bucket index. It explores the applicability of collision-free in-cremental hash which incurs minimal computation and bandwidth overhead.

Key words: database as a service (DAS), integrity verification, bucket index, collision-free incremental hash

中图分类号: