Meta-data Driven Data Chunk Based Secure Data Storage for SaaS
Yuliang Shi, Kun Zhang, Qingzhong Li · International Journal of Digital Content Technology and its Applications · 2011
Software-as-a-Service, i.e. SaaS, is an emergin g model that allows t enants t o out source computation a nd sto rage of their sensitive data to ext ernal service provid ers. Although Saa S mo del provides many b enefits, it introduce s new security conce rns in dat a s torage. Untrustworthy service providers might violate tenants’ da ta priva cy or maliciously delete, mod ify and falsify tenants’ data due to some reason, which hinders wider adoption of SaaS model. With regard to data storage security issue of S aaS model, this paper gives the c oncept of data combination privacy and data integrity for SaaS, and th en presents a novel data storage protection mechanism which combines the data privacy protection issue and secure data possession issues based on a meta-data driven data chunk based data storage model. For data privacy issue in SaaS, this paper uses the data fragmentation technology to hidden t he ass ociation between data att ributes based on dat a co mbination privacy c oncept, wh ich protects the privacy of data. For secure d ata possession issue in SaaS, this paper gives the concept of data i ntegrity, considers secure data poss ession in term s of du rable i ntegrity, corre ct int egrity and provenance in tegrity, proposes a nove l secure dat a stora ge verifica tion mecha nism based on da ta chunk for Saa S model . B ased on a met a-data d riven da ta chun k based dat a-sharing stora ge mod el, data privacy and data integrity issues could be solved together well. We demonstrate the correctness and effectiveness of this mechanism through the experiments in this paper.