The data management and ownership separation in cloud storage systems lead to the difficulties of data security and privacy protection. The traditional cloud storage data privacy protection mechanism based on simple encryption technologies brings larger extra-overhead in the actual process of data manipulation. In order to achieve low overhead of the data privacy protection mechanism for cloud storage systems, this paper proposed a novel data privacy protection mechanism based on data partition and classification. The mechanism reasonably partitions the original data into two block:one is small,which is deployed locally,and the other one is large,which is deployed remotely,and then according to different security requirements of data, the data dyeing and data encryption technologies are adopted jointly in order to protect the cloud data privacy, improve flexibility and reduce overhead at the same time.%云存储系统数据管理权和所有权的分离导致数据安全和隐私保护难题.传统的基于单纯加密技术的云存储数据隐私保障机制在实际的数据操作过程中带来了较大的系统开销.为了以低开销实现云存储系统中异地托管数据的隐私保护机制,提出了一种基于数据分割与分级的云存储数据隐私保护机制.机制首先将数据合理分割为大小数据块；再分别将小块数据和大块数据部署在本地和异地；然后按数据不同的安全级别需求,联合采用数据染色和不同强度的数据加密技术进行数据染色或加密,以在保护云存储用户数据隐私的同时,提高灵活性,降低系统开销.
展开▼
