CN111259454B - Non-interactive data integrity auditing method, fair payment method and system - Google Patents
Non-interactive data integrity auditing method, fair payment method and system Download PDFInfo
- Publication number
- CN111259454B CN111259454B CN202010028100.0A CN202010028100A CN111259454B CN 111259454 B CN111259454 B CN 111259454B CN 202010028100 A CN202010028100 A CN 202010028100A CN 111259454 B CN111259454 B CN 111259454B
- Authority
- CN
- China
- Prior art keywords
- contract
- data
- cloud storage
- terminal
- storage service
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/24—Credit schemes, i.e. "pay after"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G06Q40/04—Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Business, Economics & Management (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Accounting & Taxation (AREA)
- Computer Hardware Design (AREA)
- General Business, Economics & Management (AREA)
- Software Systems (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Health & Medical Sciences (AREA)
- Strategic Management (AREA)
- General Engineering & Computer Science (AREA)
- Finance (AREA)
- Development Economics (AREA)
- Economics (AREA)
- Marketing (AREA)
- Technology Law (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The disclosure provides a non-interactive data integrity auditing method, a fair payment method and a system, wherein a first terminal sends a data file, a key and a data tag to a cloud storage service terminal; the cloud storage service terminal outputs a data integrity certificate to the data verification terminal, and the data verification terminal verifies the data integrity; a first terminal submits a first contract to an intelligent contract platform; the cloud storage service terminal checks the integrity of the data file and submits a second contract to the intelligent contract platform; the cloud storage service terminal submits a third contract according to a time period; the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification; this is disclosed and is cooperated through first contract, second contract, third contract and data integrality, can effectually realize fair payment, has reduced the claim problem that data loss brought, and this kind of automatic mode of accomplishing, very big reduction the human cost.
Description
Technical Field
The disclosure relates to the technical field of block chains, in particular to a non-interactive data integrity auditing method, a fair payment method and a system.
Background
The statements in this section merely provide background information related to the present disclosure and may not necessarily constitute prior art.
At present, various public cloud storage services, such as Baidu cloud, nut cloud, dropbox, Onedrive, iCloud, etc., have been widely accepted and used by the public. By means of the cloud storage service, a data owner can use data on any equipment capable of accessing the network, and can share the data with other people more conveniently and more quickly. However, since the data is no longer stored locally in the user, how to ensure the integrity of the data (ensure that the data is not lost) becomes a big problem for users of cloud storage.
The inventor of the present disclosure found that the existing solution is to periodically check the integrity of data by using a data integrity auditing scheme. If the cloud storage server loses a portion of the data, then a (third party) reviewer will detect "data loss" with a high probability. However, the current public cloud storage service mostly adopts a prepaid mode, so that even if a user detects 'data loss' through the above method, it is very difficult to maintain rights and recover economic losses (higher proof and arbitration costs are required).
The current data integrity auditing scheme adopts a 'challenge-response' mode. The verifier sends a challenge to the cloud storage server, and the server responds. If the "answer" of the server is able to be verified, the verifier can confirm that the server stores the complete data with a high probability; if the verification fails, the verifier can confirm that the server has lost part of the data. This type of data integrity auditing scheme is also referred to as an interactive data integrity auditing scheme, since the verification process requires interaction between the verifier and the server.
However, when such interactive schemes are deployed on intelligent contracts based on blockchains, a problem is faced: when the consensus nodes of the blockchain execute the code of the intelligent contract, the consensus nodes play the role of verifiers, which means that the consensus nodes need to interact with the cloud storage server. However, the number of consensus nodes is huge, and it is difficult to realize that such number of consensus nodes all need to interact with the cloud server in a short time.
Disclosure of Invention
In order to solve the defects of the prior art, the non-interactive data integrity auditing method, the fair payment method and the non-interactive data integrity auditing system have the advantages that the integrity of stored data is hooked with the payment cloud storage service fee, the service fee can be obtained only after the cloud storage server completely stores the data for one period, the claim problem caused by data loss is prevented, meanwhile, the payment process can be automatically completed without the support of a third party, and the labor cost is greatly reduced.
In order to achieve the purpose, the following technical scheme is adopted in the disclosure:
a first aspect of the present disclosure provides a non-interactive data integrity auditing method.
A non-interactive data integrity auditing method comprises the steps that a first terminal executes a key generation algorithm and a label generation algorithm to generate a key and a data label corresponding to a data file, and the data file, the key and the data label are sent to a cloud storage service terminal;
the cloud storage service terminal executes a certification generation algorithm and outputs a data integrity certification to the data verification terminal, and the data verification terminal executes a verification algorithm and verifies the data integrity.
As some possible implementation manners, the key generation algorithm specifically includes:
(a-1) let G and GTFor a bilinear group of order p, p being the prime number and G being the generator of the group G, there is a bilinear map e G → GT;
(a-2) selecting two hash functions H (·): 0,1}*→G、h(·):GT→Zp;
(a-3) selecting a pseudo-random function F (·): 0,1}*→[1,n];
(a-4) calling a standard digital signature scheme to generate a public and private key pair (spk, ssk);
(a-5) randomly selecting a random number x in the set {1, 2.., p-1}, randomly selecting an element u in the group G, calculating v ← Gx;
(a-6) the public key pk is (spk, g, u, v, e, H (-), H (-), F (-),) and the private key sk is (ssk, x).
As some possible implementation manners, the tag generation algorithm specifically includes:
(b-1) encoding the data file f as f ═ mi}1≤i≤nWherein m isi∈Zp;
(b-2) the first terminal randomly selecting name ← ZpAs the number of file f;
(b-4) calling a standard digital signature algorithm Sig to sign the name to obtain Sigssk(name);
(b-5) let t be name Sigssk(name) as an identifier for file f;
and (b-6) uploading the data file f and the corresponding data tag phi ═ t to the cloud storage service terminal.
As some possible implementations, the proof generation algorithm specifically includes:
(c-1) determining a constant c according to the preset proving difficulty and the block number n of the data file;
(c-2) acquiring current state information tau of the system;
(c-3) calculating s for i ∈ {1,2i←F(τ||i);
(c-4) let I ═ s1,s2,…,scIs a multiple set of c elements, i.e. I allows for repeated elements;
(c-5) for all j ∈ I, calculate vj←h(τ||j);
(c-7) randomly selecting a random number s from {1,2, …, p-1}, and calculating T ═ e (u, v)sCalculating μ ═ s + γ μ', where γ ═ h (t) e Zp;
(c-8) sending the output ∑ ═ μ, σ, T, τ, c } to the verifier as a proof of data integrity.
As a further limitation, the verification algorithm specifically includes:
(d-1) verifying the authenticity of the state information tau, if the verification fails, terminating the algorithm, otherwise, calculating I ═ F (tau | | |1), F (tau | |2),. -, F (tau | | | c) };
(d-2) for all j ∈ I, { v ∈ I) is calculatedj=h(τ||j)}j∈I,{h(Nj)}j∈IAnd calculating γ ═ { h (t) };
The second aspect of the present disclosure provides a non-interactive data integrity auditing system, including at least one first terminal, at least one data verification terminal, and a cloud storage service terminal; the first terminal executes a key generation algorithm and a tag generation algorithm, generates a key and a data tag corresponding to the data file, and sends the data file, the key and the data tag to the cloud storage service terminal;
the cloud storage service terminal executes the certification generation algorithm and outputs the data integrity certification to the data verification end, and the data verification end executes the verification algorithm and verifies the data integrity.
A third aspect of the present disclosure provides a fair payment method for a public cloud storage service.
The first terminal calls a tag generation algorithm to obtain a data tag corresponding to the data file, the data file and the data tag are uploaded to the cloud storage service terminal together, and a first contract is submitted to the intelligent contract platform;
the cloud storage service terminal checks the integrity of the data file, submits a second contract to the intelligent contract platform, and submits a third contract according to a time period;
the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification;
if the integrity verification passes, activating a first contract, and the first terminal pays the cloud storage service terminal; otherwise, activating the second contract, and compensating the loss of the first terminal by the cloud storage service terminal.
As some possible implementations, the first contract includes a first contract description portion and a first code portion;
the first contract description part comprises a file name, a file size, a file hash value, uploading time, a storage period, service charge, a first terminal account, a cloud storage service terminal account, a first terminal public key and a first terminal signature;
the first code portion defines a payment behavior of the service fee, and if the verification algorithm outputs 1, the first contract transfers the service fee amount from the account address of the first terminal to the account of the cloud storage service terminal.
As some possible implementations, the second contract includes a second contract description portion and a second code portion;
the second contract description part comprises a file name, a file size, a file hash value, receiving time, a storage period, an indemnity, a first terminal account, a cloud storage service terminal public key and a cloud storage service terminal signature;
the second code portion defines an action of paying the penalty, and if the verification algorithm outputs 0, the second contract transfers the penalty from the account of the cloud storage service terminal to the account address of the first terminal.
As some possible implementations, the third contract includes a third contract description portion and a third code portion;
(e-1) the third contract description includes a payment contract, a payment indemnity contract, and a data integrity certification, wherein the payment contract employs the first contract and the payment indemnity contract employs the second contract;
(e-2) the third code portion defines how to pay fairly, and decides to activate the first contract or activate the second contract according to a result of the verification of the data integrity certification.
A fourth aspect of the present disclosure provides a fair payment system for public cloud storage services, including at least one first terminal and a cloud storage service terminal, wherein the cloud storage service terminal submits a third contract according to a time period; the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification;
if the integrity verification passes, activating a first contract, and the first terminal pays the cloud storage service terminal; otherwise, activating the second contract, and compensating the loss of the first terminal by the cloud storage service terminal.
Compared with the prior art, this disclosed beneficial effect is:
1. the content disclosed by the disclosure can be used for fair payment of public cloud storage service, and by using the scheme, the integrity of the stored data can be hooked with the payment cloud storage service fee, the service fee can be obtained only after the cloud storage server completely stores the data for one period, and if the data is lost, a data owner does not pay the fee, and can obtain the payment; due to the fact that the intelligent contract based on the block chain is used, the process can be automatically completed without support of a third party.
2. According to the content disclosed by the disclosure, the key generation algorithm and the label generation algorithm are adopted, so that the data security is greatly improved, and the accuracy of data integrity audit is improved by proving that the generation algorithm is matched with the verification algorithm.
3. According to the content disclosed by the disclosure, the first contract, the second contract and the third contract are matched with the data integrity, fair payment can be effectively realized, the claim problem caused by data loss is reduced, and the labor cost is greatly reduced by the automatic completion mode.
Drawings
Fig. 1 is a schematic flowchart of a non-interactive data integrity auditing method provided in embodiment 1 of the present disclosure.
Fig. 2 is a schematic flow chart of the contract signing phase provided in embodiment 3 of the present disclosure.
Fig. 3 is a schematic diagram of a first contract provided in embodiment 3 of the present disclosure.
Fig. 4 is a schematic diagram of a second contract provided in embodiment 3 of the present disclosure.
Fig. 5 is a schematic flow chart of the fair payment phase provided in embodiment 3 of the present disclosure.
Fig. 6 is a third contract schematic provided in embodiment 3 of the present disclosure.
Detailed Description
It should be noted that the following detailed description is exemplary and is intended to provide further explanation of the disclosure. Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.
It is noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of example embodiments according to the present disclosure. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, and it should be understood that when the terms "comprises" and/or "comprising" are used in this specification, they specify the presence of stated features, steps, operations, devices, components, and/or combinations thereof, unless the context clearly indicates otherwise.
The embodiments and features of the embodiments in the present disclosure may be combined with each other without conflict.
Example 1:
as shown in fig. 1, embodiment 1 of the present disclosure provides a non-interactive data integrity auditing method, where there are three types of entities, namely, a data owner U, a public cloud storage server C, and a verifier V. During the verification of data integrity, C and V do not need to interact. The scheme is divided into 2 stages, and the 4 stages comprise 4 algorithms, specifically as follows:
system establishing stage
At this stage, the data owner U generates a data tag Φ corresponding to the data file f and sends f to the cloud storage server C along with Φ. This phase contains the key generation algorithm KeyGen and the tag generation algorithm TagGen, both performed by the data owner U.
(1) Key generation algorithm KeyGen:
(1-1) let G and GTIs a bilinear group of order p, p is the prime number, G is the generator of the group G, there is a bilinear mapping e G → GT;
(1-2) selecting two hash functions H (·): 0,1}*→G、h(·):GT→Zp;
(1-3) selecting a pseudo-random function F (·): 0,1}*→[1,n]The function maps binary strings of arbitrary length uniformly and randomly as integers between 1 and n;
(1-4) calling a standard digital signature scheme to generate a public and private key pair (spk, ssk);
(1-5) follow in the set {1, 2.., p-1}Machine-selected random number x in the groupIn Chinese, randomly selecting element u, and calculating v ← gx;
(1-6) the public key pk is (spk, g, u, v, e, H (-), H (-), F (-),) and the private key sk is (ssk, x);
(2) the tag generation algorithm TagGen:
(2-1) encoding the data file f as f ═ mi}1≤i≤nWherein m isi∈Zp;
(2-2) data owner randomly selecting name ← ZpAs the number of file f;
(2-4) calling a standard digital signature algorithm Sig to sign the name to obtain Sigssk(name);
(2-5) let t be name Sigssk(name) as an identifier for file f;
and (2-6) uploading the data file f and the corresponding data tag phi ═ t (Ψ, t) to the cloud storage server C.
(II) data auditing stage
This phase contains the proof generation algorithm profofgen, which is executed by the cloud storage server C, and the verification algorithm Verify, which can be executed by any entity (acting as a verifier). The authentication process is non-interactive.
(3) Proof generation algorithm ProofGen:
(3-1) determining a constant c according to the predetermined proving difficulty and the block number n of the data file;
(3-2) acquiring current state information tau of the system, wherein the state information of the system cannot be controlled by a cloud storage server, and if the system time can be used as the state information;
(3-3) for i ∈ {1,2i←F(τI). From the definition of the pseudorandom function F (-), si∈[1,n];
(3-4) let I ═ s1,s2,...,scIs a multiple set of c elements, i.e. I allows for repeated elements;
(3-5) for all j ∈ I, calculate vj←h(τ||j);
(3-7) randomly selecting a random number s from {1,2, …, p-1}, and calculating T ═ e (u, v)sCalculating μ ═ s + γ μ', where γ ═ h (t) e Zp;
(3-8) sending the output ∑ ═ μ, σ, T, τ, c } to the verifier as a proof of data integrity;
(4) verification algorithm Verify:
(4-1) verifying the authenticity of the state information tau, if the verification fails, terminating the algorithm, otherwise, calculating I ═ F (tau | | |1), F (tau | |2),. -, F (tau | | c) };
(4-2) for all j ∈ I, { v ∈ I, is calculatedj=h(τ||j)}j∈I,{h(Nj)}j∈IAnd calculating γ ═ { h (t) };
Example 2:
the embodiment 2 of the present disclosure provides a non-interactive data integrity auditing system, which includes at least one first terminal, at least one data verification terminal, and a cloud storage service terminal; the first terminal executes a key generation algorithm and a tag generation algorithm, generates a key and a data tag corresponding to the data file, and sends the data file, the key and the data tag to the cloud storage service terminal;
the cloud storage service terminal executes a certification generation algorithm and outputs a data integrity certification to the data verification terminal, and the data verification terminal executes a verification algorithm and verifies the data integrity.
The specific key generation algorithm, tag generation algorithm, certificate generation algorithm, and verification algorithm are the same as those in embodiment 1, and are not described herein again.
Example 3:
the embodiment 3 of the present disclosure provides a fair payment method for public cloud storage service, and by using the non-interactive data integrity auditing method described in the embodiment 1 of the present disclosure, first contract signing is performed, as shown in fig. 2, specifically as follows:
(1) a data owner U calls a tag generation algorithm TagGen by using a non-interactive data integrity auditing scheme to obtain a data tag phi corresponding to a data file f;
(2) the data owner U uploads the data file f and the data label phi to the cloud storage server C;
(3) data owner submitting contract T0(as shown in fig. 3) to the intelligent contract platform P;
intelligent contract T0Is divided into a contract description part and a code part.
(3-1) the contract description section contains the following fields
File Name (File Name): recording the name FN of the uploaded file;
file Size (File Size): recording the size FS of the uploaded file;
file hash value (FileHash): recording a hash value FH of the uploaded file;
upload Time (Upload Time): recording the time UT of uploading files;
storage period (StoragePeriod): recording the period SP of the stored file;
service charge (ServiceCharges): recording the service fee amount SC;
data owner account (DataOwnerAccount): recording the account address DOA of the data owner;
cloud storage service provider account (CloudStorageAccount): recording an account address CSA of a cloud storage service provider;
data owner public key (pk)D): record the public key pk of the data ownerD;
Data owner signature (sig)D): the signature sig of the data owner on the contract is recordedD;
(3-2) the code portion defines the act of paying the service fee
If the verification algorithm Verify outputs 1, the contract transfers the service charge amount SC from the account address DOA of the data owner to the account CSA of the cloud storage service provider.
(4) The cloud storage server C checks the integrity of the data file f;
(5) cloud storage server C submits contract T1(as shown in fig. 4) to the intelligent contract platform P.
Intelligent contract T1The contract is divided into a contract description part and a code part;
(5-1) the contract description section contains the following fields
File Name (File Name): recording the name FN of the uploaded file;
file Size (File Size): recording the size FS of the uploaded file;
file hash value (FileHash): recording the hash value FH of the uploaded files;
reception Time (reception Time): recording the time RT for receiving the file;
storage period (StoragePeriod): recording the period SP of the stored file;
claims (Penalty): recording the repayment amount Pen;
data owner account (DataOwnerAccount): recording the account address DOA of the data owner;
cloud storage service provider account (CloudStorageAccount): recording CSA (cloud storage service provider) account address
Cloud storage service provider public key (pk)C): record the public key pkC of the cloud storage service provider;
cloud storage service provider signature (sigC): recording a signature sigC of the cloud storage service provider on the contract;
(5-2) the code section defines the action of paying the penalty
If the verification algorithm Verify outputs 0, the contract transfers the indemnity Pen from the account CSA of the cloud storage service provider to the account address DOA of the data owner.
The embodiment constructs a fair payment scheme for the public cloud storage service by using an intelligent contract system based on a block chain; the fair payment means that after the confirmation data is completely stored for a time period (the time period may be time units such as hours, days, weeks, months, years, and the like), the smart contract automatically transfers the cloud storage service fee of the time period from the account of the user to the account of the cloud storage service provider. If data loss is detected, service fee is not allocated any more, and simultaneously, compensation can be allocated reversely according to the prior agreement for compensating the loss of the user.
The method specifically comprises the following steps:
(A) to charge a service fee, the cloud storage server C submits a contract T on a time cycle2(as shown in FIG. 6), smart contract T2Is divided into a contract description part and a code part.
(A-1) the contract description section contains the following fields
Payment of a payment contract: t is0;
Paying the indemnity contract: t is1;
And (3) data integrity certification: e, sigma;
the (A-2) code portion defines how fair the payment is made, i.e. it is decided to activate T according to the result of verification of sigma0Or activating T1;
(B) The common identification node of the intelligent contract platform is used as a verifier to verify the correctness of the data integrity certification sigma;
(C) activating T if integrity verification passes0A contract, wherein the data owner pays a cloud storage service provider; otherwise T is activated1Contracts, cloud storage service providers compensate for the loss of data owners.
Example 4:
the embodiment 4 of the disclosure provides a fair payment system for public cloud storage service, which includes at least one first terminal and a cloud storage service terminal, wherein the cloud storage service terminal submits a third contract according to a time period; the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification;
if the integrity verification passes, activating a first contract, and the first terminal pays the cloud storage service terminal; otherwise, activating the second contract, and compensating the loss of the first terminal by the cloud storage service terminal.
The specific payment method is the same as that in embodiment 3, and is not described herein again.
The above description is only a preferred embodiment of the present disclosure and is not intended to limit the present disclosure, and various modifications and changes may be made to the present disclosure by those skilled in the art. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present disclosure should be included in the protection scope of the present disclosure.
Although the present disclosure has been described with reference to specific embodiments, it should be understood that the scope of the present disclosure is not limited thereto, and those skilled in the art will appreciate that various modifications and changes can be made without departing from the spirit and scope of the present disclosure.
Claims (9)
1. A non-interactive data integrity auditing method is characterized in that a first terminal executes a key generation algorithm and a label generation algorithm to generate a key and a data label corresponding to a data file, and sends the data file, the key and the data label to a cloud storage service terminal;
the cloud storage service terminal executes a certification generation algorithm and outputs a data integrity certification to the data verification end, and the data verification end executes a verification algorithm to verify the data integrity;
the key generation algorithm specifically comprises the following steps:
(a-1) let G and GTIs a p-order double lineFor a bilinear group, p is the prime number and G is the generator of the group G, there is a bilinear map e G → GT;
(a-2) selecting two hash functions H (·): 0,1}*→G、h(·):GT→ZpWherein H (& museum) and H (& museum) are the extracted hash function;
(a-3) selecting a pseudo-random function F (·): 0,1}*→[1,n];
(a-4) calling a standard digital signature scheme to generate a public and private key pair (spk, ssk);
(a-5) randomly selecting a random number x in the set {1, 2.., p-1}, randomly selecting an element u in the group G, calculating v ← Gx;
(a-6) the public key pk is (spk, g, u, v, e, H (-), H (-), F (-),) and the private key sk is (ssk, x);
the certification generation algorithm specifically comprises the following steps:
(c-1) determining a constant c according to the preset proving difficulty and the block number n of the data file;
(c-2) acquiring current state information tau of the system;
(c-3) calculating s for i ∈ {1,2i←F(τ||i);
(c-4) let I ═ s1,s2,...,scIs a multiple set of c elements, i.e. I allows for repeated elements;
(c-5) for all j ∈ I, calculate vj←h(τ||j);
(c-7) randomly selecting a random number s from {1,2, …, p-1}, and calculating T ═ e (u, v)sCalculating μ ═ s + γ μ', where γ ═ h (t) e Zp;
(c-8) sending the output ∑ ═ μ, σ, T, τ, c } to the verifier as a proof of data integrity.
2. The non-interactive data integrity auditing method of claim 1,
the label generation algorithm specifically comprises the following steps:
(b-1) encoding the data file f as f ═ mi}1≤i≤nWherein m isi∈Zp;
(b-2) the first terminal randomly selecting name ← ZpAs the number of data file f;
(b-4) calling a standard digital signature algorithm Sig to sign the name to obtain Sigssk(name);
(b-5) let t be name Sigssk(name) as an identifier of data file f;
and (b-6) uploading the data file f and the corresponding data label phi (psi, t) to a cloud storage service terminal.
3. The non-interactive data integrity auditing method of claim 1 where the verification algorithm is specifically:
(d-1) verifying the authenticity of the state information tau, if the verification fails, terminating the algorithm, otherwise, calculating I ═ F (tau | | |1), F (tau | |2),. -, F (tau | | | c) };
(d-2) for all j ∈ I, { v ∈ I, is calculatedj=h(τ||j)}j∈I,{h(Nj)}j∈IAnd calculating γ ═ { h (t) };
4. A non-interactive data integrity auditing system is characterized by comprising at least one first terminal, at least one data verification terminal and a cloud storage service terminal; the first terminal executes a key generation algorithm and a tag generation algorithm, generates a key and a data tag corresponding to the data file, and sends the data file, the key and the data tag to the cloud storage service terminal;
the cloud storage service terminal executes a certification generation algorithm and outputs a data integrity certification to the data verification end, and the data verification end executes a verification algorithm to verify the data integrity;
the key generation algorithm specifically comprises the following steps:
(a-1) let G and GTFor a bilinear group of order p, p being the prime number and G being the generator of the group G, there is a bilinear map e G → GT;
(a-2) selecting two hash functions H (·): 0,1}*→G、h(·):GT→ZpWherein, H (museum) and H (museum) are the extracted hash functions;
(a-3) selecting a pseudo-random function F (·): 0,1}*→[1,n];
(a-4) calling a standard digital signature scheme to generate a public and private key pair (spk, ssk);
(a-5) randomly selecting a random number x in the set {1, 2.., p-1}, randomly selecting an element u in the group G, calculating v ← Gx;
(a-6) the public key pk is (spk, g, u, v, e, H (-), H (-), F (-),) and the private key sk is (ssk, x);
the certification generation algorithm specifically comprises the following steps:
(c-1) determining a constant c according to the preset proving difficulty and the block number n of the data file;
(c-2) acquiring current state information tau of the system;
(c-3) calculating s for i e {1,2i←F(τ||i);
(c-4) let I ═ s1,s2,...,scIs a multiple set of c elements, i.e. I allows for repeated elements;
(c-5) for all j ∈ I, calculate vj←h(τ||j);
(c-7) randomly selecting a random number s from {1,2, …, p-1}, and calculating T ═ e (u, v)sCalculating μ ═ s + γ μ', where γ ═ h (t) e Zp;
(c-8) sending the output ∑ ═ μ, σ, T, τ, c } to the verifier as a proof of data integrity.
5. A fair payment method for a public cloud storage service, wherein the non-interactive data integrity auditing method according to any one of claims 1-3 is used, and the method comprises the following steps:
the first terminal calls a tag generation algorithm to obtain a data tag corresponding to the data file, the data file and the data tag are uploaded to the cloud storage service terminal together, and a first contract is submitted to the intelligent contract platform;
the cloud storage service terminal checks the integrity of the data file, submits a second contract to the intelligent contract platform, and submits a third contract according to a time period;
the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification;
if the integrity verification passes, activating a first contract, and the first terminal pays the cloud storage service terminal; otherwise, activating the second contract, and compensating the loss of the first terminal by the cloud storage service terminal.
6. A fair payment method for a public cloud storage service as defined in claim 5, wherein the first contract comprises a first contract description portion and a first code portion;
the first contract description part comprises a file name, a file size, a file hash value, uploading time, a storage period, a service fee, a first terminal account, a cloud storage service terminal account, a first terminal public key and a first terminal signature;
the first code portion defines a payment behavior of the service fee, and if the verification algorithm outputs 1, the first contract transfers the service fee amount from the account address of the first terminal to the account of the cloud storage service terminal.
7. A fair payment method for a public cloud storage service as defined in claim 5, wherein the second contract comprises a second contract description portion and a second code portion;
the second contract description part comprises a file name, a file size, a file hash value, receiving time, a storage period, an indemnity, a first terminal account, a cloud storage service terminal public key and a cloud storage service terminal signature;
the second code portion defines an action of paying the penalty, and if the verification algorithm outputs 0, the second contract transfers the penalty from the account of the cloud storage service terminal to the account address of the first terminal.
8. The fair payment method for a public cloud storage service of claim 5, wherein the third contract comprises a third contract description portion and a third code portion;
(e-1) the third contract description includes a payment contract, a payment indemnity contract, and a data integrity certification, wherein the payment contract employs the first contract and the payment indemnity contract employs the second contract;
(e-2) the third code portion defines how to pay fairly, and decides to activate the first contract or activate the second contract according to a result of the verification of the data integrity certification.
9. A fair payment system for a public cloud storage service, using the fair payment method of any one of claims 5 to 8, comprising at least one first terminal and a cloud storage service terminal, wherein the cloud storage service terminal submits a third contract according to a time period; the common identification node of the intelligent contract platform is used as a data verification end to verify the correctness of the data integrity certification;
if the integrity verification passes, activating a first contract, and the first terminal pays the cloud storage service terminal; otherwise, activating the second contract, and compensating the loss of the first terminal by the cloud storage service terminal.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010028100.0A CN111259454B (en) | 2020-01-10 | 2020-01-10 | Non-interactive data integrity auditing method, fair payment method and system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010028100.0A CN111259454B (en) | 2020-01-10 | 2020-01-10 | Non-interactive data integrity auditing method, fair payment method and system |
Publications (2)
Publication Number | Publication Date |
---|---|
CN111259454A CN111259454A (en) | 2020-06-09 |
CN111259454B true CN111259454B (en) | 2022-07-05 |
Family
ID=70953100
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010028100.0A Active CN111259454B (en) | 2020-01-10 | 2020-01-10 | Non-interactive data integrity auditing method, fair payment method and system |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN111259454B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114745120B (en) * | 2022-03-17 | 2023-08-22 | 郑州大学 | Anti-key exposure cloud data integrity verification method supporting fair payment |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103425941A (en) * | 2013-07-31 | 2013-12-04 | 广东数字证书认证中心有限公司 | Cloud storage data integrity verification method, equipment and server |
CN103699851A (en) * | 2013-11-22 | 2014-04-02 | 杭州师范大学 | Remote data completeness verification method facing cloud storage |
CN109245894A (en) * | 2018-07-18 | 2019-01-18 | 电子科技大学 | A kind of distributed cloud storage system based on intelligent contract |
CN109829326A (en) * | 2018-11-20 | 2019-05-31 | 西安电子科技大学 | Cross-domain certification and fair audit duplicate removal cloud storage system based on block chain |
CN109889497A (en) * | 2019-01-15 | 2019-06-14 | 南京邮电大学 | A kind of data integrity verification method for going to trust |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10810683B2 (en) * | 2017-11-21 | 2020-10-20 | General Electric Company | Hierarchical meta-ledger transaction recording |
-
2020
- 2020-01-10 CN CN202010028100.0A patent/CN111259454B/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103425941A (en) * | 2013-07-31 | 2013-12-04 | 广东数字证书认证中心有限公司 | Cloud storage data integrity verification method, equipment and server |
CN103699851A (en) * | 2013-11-22 | 2014-04-02 | 杭州师范大学 | Remote data completeness verification method facing cloud storage |
CN109245894A (en) * | 2018-07-18 | 2019-01-18 | 电子科技大学 | A kind of distributed cloud storage system based on intelligent contract |
CN109829326A (en) * | 2018-11-20 | 2019-05-31 | 西安电子科技大学 | Cross-domain certification and fair audit duplicate removal cloud storage system based on block chain |
CN109889497A (en) * | 2019-01-15 | 2019-06-14 | 南京邮电大学 | A kind of data integrity verification method for going to trust |
Also Published As
Publication number | Publication date |
---|---|
CN111259454A (en) | 2020-06-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN105871545B (en) | Credible electronic certificate trustship method and system | |
CN106295405B (en) | A kind of method and server for concluding electronic contract | |
CN114143080A (en) | Block chain data privacy protection and sharing method based on zero knowledge proof | |
RU2018142270A (en) | DISTRIBUTION AND VERIFICATION SYSTEM OF DISTRIBUTED TRANSACTIONS | |
CN110287732A (en) | One kind depositing card method based on block chain electronic contract | |
CN112054897B (en) | Outsourcing Internet of things data for protecting privacy based on block chain and integrity verification method for backup of outsourcing Internet of things data | |
CN108764872B (en) | Authorized payment method, system, equipment and storage medium | |
CN110958110A (en) | Block chain private data management method and system based on zero knowledge proof | |
CN109787987A (en) | Electric power internet-of-things terminal identity identifying method based on block chain | |
CN111726226B (en) | Signature system, signature method, first server and storage medium | |
CN104993937A (en) | Method for testing integrity of cloud storage data | |
WO2016134039A1 (en) | Verifying electronic transactions | |
JP2020500458A (en) | Information protection system and method | |
CN110930153B (en) | Block chain privacy data management method and system based on hidden third party account | |
CN111694895B (en) | Block chain remote data auditing method and system | |
CN106845275B (en) | A kind of the electronic bill management system and method for secret protection | |
CN105227317A (en) | A kind of cloud data integrity detection method and system supporting authenticator privacy | |
CN110868300A (en) | Block chain evidence storage method and system | |
CN108390894A (en) | A kind of personal information based on block chain really weighs method and block chain client | |
CN112801778A (en) | Federated bad asset blockchain | |
CN114003925A (en) | Signature combined online declaration method and system based on block chain | |
CN111259454B (en) | Non-interactive data integrity auditing method, fair payment method and system | |
CN111260348A (en) | Fair payment system based on intelligent contract in Internet of vehicles and working method thereof | |
CN108664814A (en) | A kind of group data integrity verification method based on agency | |
CN110990808B (en) | Notarization number shaking method based on block chain |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |