Abstract:Cloud storage provides an efficient way for users to work together as a group by sharing data with each other. However, since shared data can be accessed and modified by multiple users and group membership may be changed frequently, this new paradigm poses many challenges for keeping integrity of shared data. Recently, Yuan et al. proposed an efficient integrity checking scheme (IEEE INFOCOM 2014, doi: 10.1109/INFOCOM.2014.6848154) for cloud data sharing with multi-user modification, which had many appealing features. They claimed that the scheme is secure and efficient, and they also provided the formal security proof and the performance evaluation. Regretfully, existing two security flaws in Yuan et al.'s scheme are pointed out in this letter. Specifically, by fooling the third-party auditor (TPA) into trusting that the data is well maintained by the cloud server, an adversary can process the following two deceiving methods. Firstly, the adversary can modify the shared data and tamper with the interaction messages between the cloud server and the TPA, thus invalidating shared data integrity checking. Secondly, an adversary, who records a fraction of the cloud-stored data, can overwrite the vast majority of the shared data by using the recorded data and passing shared data integrity verification. Furthermore, we suggest a solution to the two security flaws while retaining all the desirable features of the original scheme.

Yet Another Attack on the Chinese Remainder Theorem-Based Hierarchical Access Control Scheme

Multi-level Access Control for Collaborative CAD

An Efficient Solution for Hierarchical Access Control Problem in Cloud Environment

A secure solution on hierarchical access control

Achieving Simple, Secure and Efficient Hierarchical Access Control in Cloud Computing.

Reusable multi-attributes hierarchical threshold scheme

A Hierarchical Access Control Encryption Scheme Based on Partially Ordered Set.

Cryptanalysis of an Integrity Checking Scheme for Cloud Data Sharing

A Hierarchical Access Control Technology for Cloud Storage

An Efficient Privacy-Aware Authentication Scheme with Hierarchical Access Control for Mobile Cloud Computing Services

Further Analysis of a Practical Hierarchical Identity-Based Encryption Scheme.

An Efficient Time-Bound Hierarchical Key Management Scheme Without Tamper-Resistant Devices

A Note on the Security of KHL Scheme

Efficient key assignment for hierarchical access control using one-way hash function

Hash-function based efficient key assignment for hierarchical access control

Comments on “Attribute-Based Data Sharing Scheme Revisited in Cloud Computing”

Tightly Coupled Multi-Group Threshold Secret Sharing Based on Chinese Remainder Theorem

A collaborative secret sharing scheme based on the Chinese Remainder Theorem.

Secure Anonymous Threshold Subliminal Channel for Ad Hoc Environments

Comments on “DAC-MACS: Effective Data Access Control for Multiauthority Cloud Storage Systems”/Security Analysis of Attribute Revocation in Multiauthority Data Access Control for Cloud Storage Systems

A New Threshold Signature Scheme to Withstand the Conspiracy Attack.