Towards Immutability: A Secure and Efficient Auditing Framework for Cloud Supporting Data Integrity and File Version Control

Faisal Haque Bappy,Saklain Zaman,Tariqul Islam,Redwan Ahmed Rizvee,Joon S. Park,Kamrul Hasan
2023-08-05
Abstract:Although wide-scale integration of cloud services with myriad applications increases quality of services (QoS) for enterprise users, verifying the existence and manipulation of stored cloud information remains an open research problem. Decentralized blockchain-based solutions are becoming more appealing for cloud auditing environments because of the immutable nature of blockchain. However, the decentralized structure of blockchain results in considerable synchronization and communication overhead, which increases maintenance costs for cloud service providers (CSP). This paper proposes a Merkle Hash Tree based architecture named Entangled Merkle Forest to support version control and dynamic auditing of information in centralized cloud environments. We utilized a semi-trusted third-party auditor to conduct the auditing tasks with minimal privacy-preserving file metadata. To the best of our knowledge, we are the first to design a node sharing Merkle Forest to offer a cost-effective auditing framework for centralized cloud infrastructures while achieving the immutable feature of blockchain, mitigating the synchronization and performance challenges of the decentralized architectures. Our proposed scheme outperforms it's equivalent Blockchain-based schemes by ensuring time and storage efficiency with minimum overhead as evidenced by performance analysis.
Cryptography and Security
What problem does this paper attempt to address?
### Problems the Paper Attempts to Solve This paper aims to address the issues of data integrity and file version control auditing in cloud storage environments. Specifically, the paper focuses on the following points: 1. **Data Integrity Verification**: Ensuring that the data uploaded by users in cloud storage has not been unauthorizedly modified or deleted. This involves verifying the existence and integrity of the data to prevent malicious behavior by cloud service providers (CSPs), such as discarding infrequently accessed user data to reduce storage maintenance costs. 2. **File Version Control**: Supporting the management of multiple versions of files in the cloud environment, allowing users to trace and restore historical versions. This requires an efficient and secure mechanism to manage and audit different versions of files. 3. **Audit Efficiency**: Traditional blockchain solutions, although tamper-proof, have high synchronization and communication overhead due to their decentralized structure, increasing the maintenance costs for cloud service providers. The paper proposes a new architecture aimed at reducing these overheads and improving audit efficiency. 4. **Privacy Protection**: Ensuring that users' sensitive information is not disclosed to third-party auditors (TPAs) during the audit process. By providing only minimal file metadata, the method designed in the paper can protect the privacy of user data. ### Main Contributions 1. **Achieving Tamper-Proofness in Centralized Cloud Architecture**: By introducing a persistent Merkle tree structure, the paper proposes a new architecture called "Entangled Merkle Forest" that can achieve blockchain-like tamper-proofness in a centralized cloud environment. 2. **Node-Sharing Merkle Trees**: Through node-sharing technology, the proposed architecture can efficiently support file version control and dynamic auditing, reducing storage and computational overhead. 3. **Efficient Batch Auditing**: A semi-trusted third-party auditor (TPA) can perform batch auditing in a secure and efficient manner. Since the file metadata is first encrypted and then hashed, this scheme can protect both the confidentiality and integrity of the data. 4. **Performance Optimization**: Through prototype implementation and performance evaluation, the paper demonstrates that the proposed scheme is superior to existing blockchain-based auditing schemes in terms of time efficiency and storage efficiency. ### Summary The paper proposes a new architecture called "Entangled Merkle Forest" aimed at solving the issues of data integrity and file version control auditing in cloud storage environments. By introducing a persistent Merkle tree structure and node-sharing technology, the scheme not only achieves tamper-proofness but also significantly improves audit efficiency and storage efficiency while protecting the privacy of user data.