CAJ | 학술논문

为解决云存储中的过期数据导致敏感信息泄漏的问题，提出了一种安全的数据确定性删除方法．该方法首先对文件F进行AON（All or Nothing）加密，将数据密文CF 存储到云中，而将数据密文的存根C0与AON密钥参数一起进行广播加密，并将广播密文通过秘密共享算法分布式存储到DHT（ Distributed Hash Ta-ble）网络中．DHT网络的动态更新将定期删除其中的广播密文，实现了AON密钥参数和存根C0的自动清除．在安全性方面，AON加密和广播加密使该方法能抵抗针对DHT网络中密钥信息的跳跃和嗅探攻击，以及针对数据密文CF 的暴力攻击．
위해결운존저중적과기수거도치민감신식설루적문제，제출료일충안전적수거학정성산제방법．해방법수선대문건F진행AON（All or Nothing）가밀，장수거밀문CF 존저도운중，이장수거밀문적존근C0여AON밀약삼수일기진행엄파가밀，병장엄파밀문통과비밀공향산법분포식존저도DHT（ Distributed Hash Ta-ble）망락중．DHT망락적동태경신장정기산제기중적엄파밀문，실현료AON밀약삼수화존근C0적자동청제．재안전성방면，AON가밀화엄파가밀사해방법능저항침대DHT망락중밀약신식적도약화후탐공격，이급침대수거밀문CF 적폭력공격．
To protect expired sensitive information from leaking in cloud storage , a secure data assured deletion ap-proach was proposed.In the approach, the file F was firstly encrypted by AON(All or Nothing)algorithm.Then, the ci-phertext CF was stored into storage servers , while the ciphertext stub C0 and key parameters of AON algorithm were broadcast encrypted .At last, the broadcast ciphertext was distributed into a DHT network by secret sharing algorithm . The broadcast ciphertext will be cleared periodically because of the periodical update of the DHT network .It implied that the AON key parameters and stub C0 will be cleared automatically and the file F will be inaccessible after its lifetime . The approach could resist to hopping and sniffing attacks aiming at the key parameters in the DHT network and brute -force attack aiming at the ciphertext CF , because of the adoption of AON and broadcast encryption algorithms .