摘要
The security of critical data is an important issue for distributed storage system design,especially for long-term storage.ESSA (An Efficient and Secure Splitting Algorithm for Distributed Storage Systems) is presented,which takes advantage of a two level information dispersal scheme to strengthen the security of data.In ESSA,the approach of knight’s tour problem,which is NP-Complete,is introduced to scramble data at the first level,and a split cube is used to split scrambled data at the second level.Thus,it is very difficult for the malicious user to get information because the task of reconstructing the original data needs more computation than they can tolerate.We prove that the security of ESSA is better than encryption algorithm and not inferior to erasure codes and secret sharing.Experimental results show that distributed storage systems exploiting ESSA has greater efficiency than that exploiting keyed encryption,erasure codes and secret sharing.
The security of critical data is an important issue for distributed storage system design, especially for long-term storage. ESSA （An Efficient and Secure Splitting Algorithm for Distributed Storage Systems） is presented, which takes advantage of a two level information dispersal scheme to strengthen the security of data. In ESSA, the approach of knight＇s tour problem, which is NP-Complete, is introduced to scramble data at the first level, and a split cube is used to split scrambled data at the second level. Thus, it is very difficult for the malicious user to get information because the task of reconstructing the original data needs more computation than they can tolerate. We prove that the security of ESSA is better than encryption algorithm and not inferior to erasure codes and secret sharing. Experimental results show that distributed storage systems exploiting ESSA has greater efficiency than that exploiting keyed encryption, erasure codes and secret sharing.
基金
This study is supported by National Natural Science Foundation of China （No.60973146）
National Natur al Science Foundation of Beijing （No.4092029）
The Fundamental Research Funds for the Central Universities （No.2009RC0217）. We also thank the anonymous reviewers for their constructive comments.
作者简介
CHEN Zhao： male, PhD Candidate, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests includes disaster recovery and safe storage.YAO Wenbin： male, PhD, Professor, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests includes disaster recovery, fault-tolerant computing, system reliability evaluation.XIAO Da： male, PhD, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests include disaster recovery, safe storage, cloud storage.WU Chunhua： female, PhD, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests includes disaster recovery, Intelligent Storage, cloud storage.L1U Jianyi： male, PhD, associate professor, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests includes disaster recovery, information content security.WANG tong： female, PhD, Professor, a member of National Engineering Laboratory for Disaster Backup and Recovery, research interests includes network and information security, content and system security, disaster recovery technology.
