当前位置: X-MOL 学术Comput. Secur. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
A Secure and Scalable Data Integrity Auditing Scheme Based on Hyperledger Fabric
Computers & Security ( IF 4.8 ) Pub Date : 2020-05-01 , DOI: 10.1016/j.cose.2020.101741
Ning Lu , Yongxin Zhang , Wenbo Shi , Saru Kumari , Kim-Kwang Raymond Choo

Abstract As our society becomes smarter and more interconnected, more data such as those generated by Internet of Things (IoT) devices are stored remotely. These devices and services are generally externally owned and operated (e.g., commercial cloud servers). Hence, there has been interest in verifying the integrity of outsourced data, such as those stored in the remote cloud server, for example using schemes involving a third-party auditor (TPA). However, existing solutions involving TPA do not generally consider credibility and centralization, and such solutions may not be easily scalable. Thus, in this paper, we propose an efficient decentralized data integrity auditing scheme based on Hyperledger Fabric (HF-Audit), a popular consortium blockchain. Specifically, we use Hyperledger Fabric as a communication platform, where TPA can be dynamically selected for each auditing task. In order to improve the scalability of TPA, we design an efficient auditing protocol for data integrity based on bilinear pairing and commitments. Also, to improve auditing efficiency, we design two TPA selection algorithms under complete and incomplete information. Finally, we prove the security of the proposed approach, and evaluate its performance to demonstrate the utility of our proposed approach.

中文翻译:

基于 Hyperledger Fabric 的安全可扩展数据完整性审计方案

摘要 随着我们的社会变得更加智能和互联,越来越多的数据(例如物联网 (IoT) 设备生成的数据)被远程存储。这些设备和服务通常由外部拥有和运营(例如,商业云服务器)。因此,人们对验证外包数据的完整性很感兴趣,例如存储在远程云服务器中的数据,例如使用涉及第三方审计员 (TPA) 的方案。然而,现有的涉及TPA的解决方案一般没有考虑可信性和中心化,并且这样的解决方案可能不容易扩展。因此,在本文中,我们提出了一种基于 Hyperledger Fabric(HF-Audit)(一种流行的联盟区块链)的高效去中心化数据完整性审计方案。具体来说,我们使用 Hyperledger Fabric 作为通信平台,其中可以为每个审计任务动态选择 TPA。为了提高 TPA 的可扩展性,我们设计了一种基于双线性对和承诺的数据完整性审计协议。此外,为了提高审计效率,我们设计了两种完全信息和不完全信息下的 TPA 选择算法。最后,我们证明了所提出方法的安全性,并评估其性能以证明我们所提出方法的实用性。
更新日期:2020-05-01
down
wechat
bug