自動化雲端加密儲存稽核系統

Abstract

雲端儲存近年來相當普及，從企業到個人皆可能使用雲端儲存服務，將大量的資料存入雲端服務提供者 (Cloud Service Provider)提供的雲端空間中。然而『資訊安全』議題如資料的機密性與完整性是使用者是否願意將資料儲存於雲端的重要考量。本篇論文利用『自動化雲端稽核系統』，使用公正的第三方(trusted third-party auditor)進行加密資料的驗證，如此一來可保障使用者資料的機密性、完整性，以及雲端系統的可用性。考量到多人驗證的效率問題，本篇論文亦設計批次驗證功能來一次驗證多使用者的多個檔案。同時，系統設計也提供錯誤檔案搜尋功能，協助使用者發覺雲端儲存上未經授權的檔案修改，達到更完善的檔案稽核。

Cloud storage service is one of the most popular applications due to its convenience, easy manipulation, and some free cloud storage volume. However, security issues such as data pri- vacy,data integrity and the system availability has been vital challenges on cloud storage service. In this paper, we propose a scheme with a trusted third-party auditor (TPA) doing both single user auditing and batch auditing for multiple users. Both auditing algorithms are designed un- der the structure with all files encrypted. Thus TPA cannot catch any confidential information during the process of verification. Moreover, our system can extract corrupted files if the veri- fication fails, which help user realize which file has been modified.