CAJ | 학술논문

纠删码和再生码是保证云存储可靠性的有效机制，但是它们并不能提供节点被窃听情况下存储数据的机密性。该文设计了两类抗窃听攻击的弱安全再生码方案，方案结合All-or-Nothing变换与精确修复再生码策略，保证了攻击者在窃听能力有限的情况下无法获取关于原始数据符号的任何有意义信息，同时具有较小的数据修复带宽。该文给出了通用编码构造方法，证明了其安全性，并通过实验进行了对比分析，结果表明与其它安全再生码相比该方案的编解码时间更短，且具有更好的秘密数据存储能力。
규산마화재생마시보증운존저가고성적유효궤제，단시타문병불능제공절점피절은정황하존저수거적궤밀성。해문설계료량류항절은공격적약안전재생마방안，방안결합All-or-Nothing변환여정학수복재생마책략，보증료공격자재절은능력유한적정황하무법획취관우원시수거부호적임하유의의신식，동시구유교소적수거수복대관。해문급출료통용편마구조방법，증명료기안전성，병통과실험진행료대비분석，결과표명여기타안전재생마상비해방안적편해마시간경단，차구유경호적비밀수거존저능력。
Erasure codes and regenerating codes can guarantee data reliability, but fail to provide data confidential when some nodes are observed by eavesdropper. Thus, two regenerating code schemes satisfying the security property against the eavesdropper are proposed in this paper. Combining the All-or-Nothing transform and exact repair regenerating codes, the proposed schemes not only ensure that an intruder eavesdropping limited number of nodes are unable to obtain any meaningful information about the original data symbols, but also provide data reliability with low repair bandwidth. Furthermore, a general construction method is presented, and the security is proved, and the performance of the proposed scheme is evaluated by a serial of experiments. The result shows that the proposed schemes achieve faster encode/decode procedures and better secrecy capacity compared with other secure regenerating coding schemes or threshold storage schemes.