基于路径映射加密的云租户数据安全存储方案
Secure data storage scheme for cloud tenants based on encrypted data storage path mapping

云计算中数据的存储安全是租户最为关注的问题，也是云计算能否获得广泛应用的关键。文中提出了一种基于存储路径映射加密的云租户数据存储访问方案。方案中，云租户数据被划分为具有逻辑关系的若干存储块，这些逻辑块将提交到云索引服务平台并以多备份的方式存储到不同的云存储服务提供者的存储介质上；基于此，云租户对其私密数据的存储路径映射进行加密。所提出的方案在存储租户数据时，在不同的云存储提供者之间采用了冗余备份的机制，保证了租户数据存储的可靠性；同时，方案仅对租户数据的存储路径进行加密，从而避免了对数据整体的加、解密操作；分析和测试结果验证了方案的安全性、有效性和可行性。
Currently, the conventional security network schemes cannot be used to protect the cloud tenants' big data efficiently. For some threats, especially the security threat of abusing private information and data is always fatal to the tenants. In this paper, tenants' big data will be separated into many logical sequenced parts before being stored, in order to make the data secure.It only needs to encrypt some data parts rather than the whole data, and then all the data parts will be stored on different storage media. At least one can understand the big data only when he/she obtains all the sequenced data parts. Furthermore, in order to make the data more secure and robust, the proposed scheme will store more than one copy of data on cloud storage media. The analysis and simulation results show that the proposed scheme can be efficient to protect the storage data for cloud tenants