CN102710661B - Cloud storage and aggregation architecture and data storage and aggregation method by using same - Google Patents

Abstract

A cloud storage and aggregation architecture and a data storage and aggregation method thereof, comprising: a user for dividing data or encrypting data through an aggregation server, a mutually independent storage cloud for storing and locally aggregating data, A third-party trusted server for key distribution to storage clouds, a data aggregation server for total aggregation of received data and decryption results, and a data storage and aggregation method thereof. The present invention guarantees the security of the data stored in the cloud while ensuring that the user cannot know the data situation stored in the cloud when the aggregation server aggregates the data.

Description

Cloud storage and aggregation architecture and its data storage and aggregation method

technical field

The invention belongs to the field of computers and relates to network data storage technology, in particular to a cloud storage and aggregation architecture and a data storage and aggregation method thereof.

Background technique

At present, data cloud storage and data aggregation technologies are becoming more and more important in scientific research and practical applications. In data cloud storage applications, it is inevitable to encounter the challenge of privacy leakage. Traditionally, when an individual user stores sensitive information on a local server, the individual user must trust that the server's hardware and software are safe and reliable. In terms of data security protection, there are already many mature technologies, such as access control, intrusion detection and data access policy and so on. However, none of these existing technologies can guarantee the absolute security and intrusion immunity of the database. For example, the problem of unauthorized access to documents exposed by Google Docs.

Contents of the invention

In order to solve the above-mentioned deficiencies in data security protection and data aggregation technology, the present invention provides a cloud storage and aggregation architecture and its data storage and aggregation method, which can not only ensure data security and user privacy, but also allow data The aggregation server can perform data aggregation through the storage cloud.

Technical solution of the present invention is as follows:

A cloud storage and aggregation architecture, characterized by including: users, multiple independent storage clouds, third-party trusted servers, and data aggregation servers, wherein:

The user is used to divide the data or encrypt the data through the aggregation server;

The storage cloud is used for storing and locally aggregating data;

The third-party trusted server is used for key distribution to the storage cloud; and

The aggregation server is configured to aggregate the received data and/or encrypt the data.

A data storage and aggregation method using cloud storage and aggregation architecture, characterized in that the method includes the following steps:

The third-party trusted server distributes the key to the storage cloud, and each storage cloud obtains a key, and the sum of all the keys is zero;

When storing data, the user divides the data into multiple data blocks and stores the data blocks on different storage clouds; each storage cloud obtains one data block for each user; each storage cloud is independent of each other and does not allow each other The communication colludes to detect the user's data information, so each cloud cannot know the complete user data.

When aggregating data, the aggregation server sends a request to each storage cloud, and at the same time, the aggregation server generates a full-rank matrix and sends it to each storage cloud;

The storage cloud aggregates all the data blocks that need to be aggregated locally, and then performs data transformation on the local aggregation result through a full-rank matrix, and then sends it to the aggregation server;

The total aggregation of the data received by the aggregation server.

A data storage and aggregation method using cloud storage and aggregation architecture, characterized in that the method includes the following steps:

The third-party trusted server distributes the key to the storage cloud, and each storage cloud obtains a key, and the sum of all the keys is zero;

When storing data, the user performs homomorphic encryption on the data through the public key of the aggregation server, and then stores it on any storage cloud; the storage cloud cannot know the private key of the aggregation server, so it cannot know the user's plaintext data.

When aggregating data, the aggregation server sends a request to each storage cloud;

The storage cloud performs local multiplication operations on all data blocks that need to be aggregated, and sends the local multiplication operation results to the aggregation server;

The aggregation server performs multiplication and aggregation on the received data, and then decrypts the multiplication and aggregation results.

Compared with the prior art, the beneficial effect of the present invention is that while ensuring the security of the data stored in the cloud, the user can also ensure that the aggregation server cannot know the status of the data stored in the cloud when the aggregation server aggregates the data.

Description of drawings

FIG. 1 is a schematic structural diagram of the cloud storage and aggregation architecture of the present invention.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and embodiments, but the protection scope of the present invention should not be limited thereby.

The first solution: In Figure 1, the user on the left stores the user's data in multiple different storage clouds (the middle part) after being divided by the user. Each storage cloud gets a user's data block. Each storage cloud is independent of each other, and it is not allowed to communicate with each other to conspire to detect user data information, so each cloud cannot know the complete user data.

In terms of data aggregation: In this architecture, there is an independent and trusted third-party server (right part) that distributes keys (r ₁ , r ₂ , ..., r _n ) for each storage cloud. Each storage cloud obtains a key, and the sum of all keys is zero, and c _im is used to represent each private key.

${\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; r</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 0</span>}$ ${\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 0</span>}$

Where n represents the number of storage clouds.

Step 1: When the aggregation server needs to aggregate, it sends a request to each storage cloud, and the data aggregation server generates a full-rank matrix with dimension m, and x _ij is the element of the matrix.

$\left(\begin{array}{c}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 11</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 12</span>}}<span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ {\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; one</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; two</span>}}<span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>\\ {\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; mm</span>}}\end{array}\right)$

Then it is sent to each storage cloud, and the storage cloud first aggregates all user data blocks participating in the aggregation locally.

${\mathrm{<span\; class="notranslate">\; R</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; k</span>}}{\mathrm{<span\; class="notranslate">\; u</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}$

Among them, k is the number of local users participating in the aggregation, and u _i is the user's data.

Then the storage cloud decomposes the locally aggregated data result R _i into m+1 points.

c _i0 +c _i1 +c _i2 +…+c _im ←R _i

Then the local aggregation results are transformed through the full-rank matrix to the data.

$\left\{\begin{array}{c}{\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 11</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 12</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ {\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; one</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; two</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ <span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span>\\ {\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; mm</span>}}\end{array}\right.$

Then send the transformed data y _i1 , y _i2 , ..., y _im to the data aggregation server, and finally the data aggregation server adds up all the transformed data:

$\left\{\begin{array}{c}{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 11</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 12</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ {\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; one</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; twenty\; two</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}\mathrm{<span\; class="notranslate">\; m</span>}}\\ {\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; the\; y</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 0</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; m</span>}\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; c</span>}}_{\mathrm{<span\; class="notranslate">\; im</span>}}{\mathrm{<span\; class="notranslate">\; x</span>}}_{\mathrm{<span\; class="notranslate">\; mm</span>}}\end{array}\right.$

because Therefore, the last term of the above formula can be eliminated, exactly m equations and m unknowns.

Obtained by solving the system of equations Adding up all the solutions to get the final aggregated result is The data aggregation server cannot detect personal data during this process.

The second solution: In Figure 1, the user's data is not divided, but encrypted with the public key of the aggregation server, and the encryption algorithm is Paillier homomorphic encryption. After encryption, it is stored in any storage cloud. The storage cloud cannot know the private key of the aggregation server, so it cannot know the user's plaintext data. The user's encrypted data is denoted as P(u _i ). Where u _i is the plaintext data of each user.

In terms of data aggregation: In this architecture, there is an independent and trusted third-party server (right part) that distributes keys (sk ₁ , sk ₂ , ..., sk _n ) for each storage cloud. Each storage cloud gets a key, and the sum of all keys is zero.

${\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}^{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; sk</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 0</span>}$

Where n is the number of storage clouds.

When the aggregation server performs aggregation, it sends a request to all storage clouds. After each storage cloud receives the request sent by the aggregation server, it first performs a local multiplication operation for the users participating in the aggregation operation. The result of the operation is recorded as A _I

${\mathrm{<span\; class="notranslate">\; R</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; k</span>}}{\mathrm{<span\; class="notranslate">\; \&Pi;</span>}}}\mathrm{<span\; class="notranslate">\; P</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; u</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>$

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; R</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; t</span>}<span\; class="notranslate">\; )</span>}^{{\mathrm{<span\; class="notranslate">\; sk</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}$

Where k is the number of local users participating in the operation, H is the hash function, t is the current timestamp, R _i is the multiplication result, and A _i is the storage cloud encryption result after adding the timestamp.

Then the storage cloud sends A _i to the aggregation server. After the aggregation server receives A _i from all the storage clouds, the aggregation server performs the following multiplication and aggregation:

${\mathrm{<span\; class="notranslate">\; Res</span>}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; \&Pi;</span>}}}{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; \&Pi;</span>}}}{\mathrm{<span\; class="notranslate">\; R</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; t</span>}<span\; class="notranslate">\; )</span>}^{{\mathrm{<span\; class="notranslate">\; sk</span>}}_{\mathrm{<span\; class="notranslate">\; 1</span>}}<span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; sk</span>}}_{\mathrm{<span\; class="notranslate">\; 2</span>}}<span\; class="notranslate">\; +</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; .</span><span\; class="notranslate">\; +</span>{\mathrm{<span\; class="notranslate">\; sk</span>}}_{\mathrm{<span\; class="notranslate">\; no</span>}}}$

Since sk ₁ +sk ₂ +…+sk _n = 0, the intermediate result

Because the operation process is Paillier homomorphic encryption, the aggregation server directly decrypts Res' to get the final result:

$\mathrm{<span\; class="notranslate">\; Res</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; D.</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; Res</span>}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; D.</span>}<span\; class="notranslate">\; (</span>\underset{\mathrm{<span\; class="notranslate">\; i</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; no</span>}}{\mathrm{<span\; class="notranslate">\; \&Pi;</span>}}}{\mathrm{<span\; class="notranslate">\; R</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; =</span>\underset{\mathrm{<span\; class="notranslate">\; j</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; 1</span>}}{\overset{\mathrm{<span\; class="notranslate">\; m</span>}}{\mathrm{<span\; class="notranslate">\; \&Sigma;</span>}}}{\mathrm{<span\; class="notranslate">\; u</span>}}_{\mathrm{<span\; class="notranslate">\; j</span>}}$

Among them, m is the number of users participating in the aggregation operation, and Res is the final aggregation result.

Claims (2)

1. one kind is utilized cloud storage and the data of polymerization framework to store and polymerization, this cloud storage comprises with polymerization framework: user, a plurality of cloud, third party's trusted servers and aggregate server of independently storing mutually, wherein: described user, for data being cut apart or by aggregate server, data being encrypted; Described storage cloud, for storing data and local polymerization; Described third party's trusted servers, for carrying out encryption key distribution to storage cloud; Described aggregate server, for carrying out total polymerization and result being decrypted to the data that receive; It is characterized in that, the method comprises the steps:

Third party's trusted servers is carried out encryption key distribution to storage cloud, and each storage cloud obtains a key, and all keys are added up and are zero;

When storage data, user becomes a plurality of data blocks by Data Segmentation, and data block is stored in respectively on different storage clouds;

Each stores the data block that cloud obtains each user;

When aggregated data, aggregate server sends request to each storage cloud, and aggregate server produces non-singular matrix simultaneously, and sends to each storage cloud;

Storage cloud, in all data blocks that need syndication users of local polymerization, is then undertaken, after data transformation, sending to aggregate server by non-singular matrix to local polymerization result;

The total polymerization that aggregate server is carried out the data that receive.

2. one kind is utilized cloud storage and the data of polymerization framework to store and polymerization, this cloud storage comprises with polymerization framework: user, a plurality of cloud, third party's trusted servers and aggregate server of independently storing mutually, wherein: described user, for data being cut apart or by aggregate server, data being encrypted; Described storage cloud, for storing data and local polymerization; Described third party's trusted servers, for carrying out encryption key distribution to storage cloud; Described aggregate server, for carrying out total polymerization and result being decrypted to the data that receive; It is characterized in that, the method comprises the steps:

Third party's trusted servers is carried out encryption key distribution to storage cloud, and each storage cloud obtains a key, and all keys are added up and are zero;

When storage data, user carries out homomorphic cryptography by the PKI of aggregate server to data, is then stored on any one storage cloud;

When aggregated data, aggregate server sends request to each storage cloud;

Storage cloud carries out this locality to all data blocks that need syndication users and connects and take advantage of operation, and takes advantage of operating result to send to aggregate server this locality company;

Aggregate server connects and takes advantage of polymerization the data that receive, and then just to connecting, takes advantage of polymerization result deciphering.