Browsing by Author "Lin, Hsiao-Ying"

Now showing 1 - 9 of 9

A Decentralized Repair Mechanism for Decentralized Erasure Code based Storage Systems
(2011-01-01)
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
Lin, Bao-Shuh
;
資訊工程學系
;
Department of Computer Science
Erasure code based distributed storage systems provide data robustness by storing encoded-fragments over servers. To maintain data robustness, a repair mechanism recovers a storage system from server failures by repairing encoded-fragments. For decentralized erasure code based storage systems, we propose a decentralized repair mechanism. Our mechanism has the following features. Firstly, an encoded-fragment is replenished by a combination of a number u of encoded-fragments that are randomly chosen. Secondly, the number u depends on the number of the available encoded-fragments and is independent of the pattern of missing encoded-fragments. Thirdly, multiple encoded-fragments are simultaneously replenished in parallel. We measure the communication cost in terms of the number u of required network connections for replenishing an encoded-fragment. We then conducted a numerical analysis by using traces of real systems. We find that our requirement on u is smaller than that from existing methods. Both theoretical and numerical results show that our decentralized repair mechanism outperforms existing ones in terms of the communication cost under the same consideration of efficiency cost for storage.
A Secure Decentralized Erasure Code for Distributed Networked Storage
(2010-11-01)
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
資訊工程學系
;
Department of Computer Science
Distributed networked storage systems provide the storage service on the Internet. We address the privacy issue of the distributed networked storage system. It is desired that data stored in the system remain private even if all storage servers in the system are compromised. The major challenge of designing these distributed networked storage systems is to provide a better privacy guarantee while maintaining the distributed structure. To achieve this goal, we introduce secure decentralized erasure code, which combines a threshold public key encryption scheme and a variant of the decentralized erasure code. Our secure distributed networked storage system constructed by the secure decentralized erasure code is decentralized, robust, private, and with low storage cost.
A Secure Decentralized Erasure Code for Distributed Networked Storage
(2010-11-01)
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
資訊工程學系
;
Department of Computer Science
Distributed networked storage systems provide the storage service on the Internet. We address the privacy issue of the distributed networked storage system. It is desired that data stored in the system remain private even if all storage servers in the system are compromised. The major challenge of designing these distributed networked storage systems is to provide a better privacy guarantee while maintaining the distributed structure. To achieve this goal, we introduce secure decentralized erasure code, which combines a threshold public key encryption scheme and a variant of the decentralized erasure code. Our secure distributed networked storage system constructed by the secure decentralized erasure code is decentralized, robust, private, and with low storage cost.
A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding
(2012-06-01)
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
資訊工程學系
;
Department of Computer Science
A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party's cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness.
An Effective Integrity Check Scheme for Secure Erasure Code-Based Storage Systems
(2015-09-01)
Shen, Shiuan-Tzuo
;
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
資訊工程學系
;
Department of Computer Science
In the application of cloud storage, a user no longer possesses his files in his local depository. Thus, he is concerned about the security of the stored files. Data confidentiality and data robustness are the main security issues. For data confidentiality, the user can first encrypt files and then store the encrypted files in a cloud storage. For data robustness, there are two concerns: service failure, and service corruption. We are concerned about data robustness in cloud storage services. Lin and Tzeng proposed a secure erasure code-based storage system with multiple key servers recently. Their system supports a repair mechanism, where a new storage server can compute a new ciphertext from the ciphertexts obtained from the remaining storage servers. Their system considers data confidentiality in the cloud, and data robustness against storage server failure. In this paper, we propose an integrity check scheme for their system to enhance data robustness against storage server corruption, which returns tampered ciphertexts. With our integrity check scheme, their storage system can deal with not only the problem of storage server failure, but also the problem of storage server corruption. The challenging part of our work is to have homomorphic integrity tags. New integrity tags can be computed from old integrity tags by storage servers without involvement of the user\'s secret key or backup servers. We prove the security of our integrity check scheme formally, and establish the parameters for achieving an overwhelming probability of a successful data retrieval.
An Empirical Study on Data Retrievability in Decentralized Erasure Code Based Distributed Storage Systems
(2013)
Lin, Hsiao-Ying
;
Tung, Li-Ping
;
Lin, Bao-Shuh P.
;
資訊工程學系
;
Department of Computer Science
Erasure codes are applied in distributed storage systems to provide data robustness against server failures by storing data redundancy among many storage servers. A (n, k) erasure code encodes a data object, which is represented as k elements, into a codeword of n elements such that any k out of these n codeword elements can recover the data object back. Decentralized erasure codes are proposed for distributed storage systems without a central authority. The characteristic of decentralization makes resulting storage systems more scalable and suitable for loosely-organized networking environments. However, different from conventional erasure codes, decentralized erasure codes trade some probability of a successful data retrieval for decentralization. Although theoretical lower bounds on the probability are overwhelming from a theoretical aspect, it is essential to know what the data retrievability is in real applications from a practical aspect. We focus on decentralized erasure code based storage systems and investigate data retrievability from both theoretical and practical aspects. We conduct simulation for random processes of storage systems to evaluate data retrievability. Then we compare simulation results and analytical values from theoretical bounds. By our comparison, we find that data retrievability is underestimated by those bounds. Data retrievability is over 99% in most cases in our simulations, where the order of the used finite field is an 8-bit prime. Data retrievability can be enlarged by using a larger finite field. We believe that data retrievability of decentralized erasure code based storage systems is acceptable for real applications.
Anonymous Password Based Authenticated Key Exchange with Sub-Linear Communication
(2009-05-01)
Lin, Hsiao-Ying
;
Tzeng, Wen-Guey
;
資訊工程學系
;
Department of Computer Science
In this paper we propose a new anonymous password-based authenticated key exchange protocol. The communication cost of our protocol is sub-linear O(root N), which improves a previous one of O(N) cost, where N is the number Of users in the system. We show that the session key is secure against an active adversary in the random oracle model and identity anonymity is secure against a semi-honest adversary in the standard model.
Reliable Repair Mechanisms with Low Connection Cost for Code Based Distributed Storage Systems
(2014-01-01)
Lin, Hsiao-Ying
;
Tung, Li-Ping
;
Lin, Bao-Shuh P.
;
資訊工程學系
;
Department of Computer Science
Erasure codes are applied in distributed storage systems for fault-tolerance with lower storage overhead than replications. Later, decentralized erasure codes are proposed for decentralized or loosely-organized storage systems. Repair mechanisms aim at maintaining redundancy over time such that stored data are still retrievable. Two recent repair mechanisms, NOOP and COOP, are designed for decentralized erasure code based distributed storage system to minimize connection cost in theoretical manner. We propose a generalized repair framework, which includes NOOP and COOP as two extreme cases. We then investigate trade-off between connection cost and data retrievability from an experimental aspect in our repair framework. Our results show that a reasonable data retrievability is achievable with constant connection cost, which is less than previously analytical values. These results are valuable references for a system manager to build a reliable storage system with low connection cost.
Toward Data Confidentiality via Integrating Hybrid Encryption Schemes and Hadoop Distributed File System
(2012-01-01)
Lin, Hsiao-Ying
;
Shen, Shiuan-Tzuo
;
Tzeng, Wen-Guey
;
Lin, Bao-Shuh P.
;
資訊工程學系
With the increasing popularity of cloud computing, Hadoop has become a widely used open source cloud computing framework for large scale data processing. However, few studies have been done to enhance data confidentiality of Hadoop against storage servers. In this paper, we address the data confidentiality issue by integrating hybrid encryption schemes and the Hadoop distributed file system (HDFS). We propose and implement two integrations, HDFS-RSA and HDFS-Pairing, as extensions of HDFS. Experiments are conducted to demonstrate the performance overhead of HDFS-RSA and HDFS-Pairing. Our integrations provide alternatives toward achieving data confidentiality for Hadoop.