Abstract:With the rapid development of wireless communication and big data analysis technologies, the storage of massive amounts of data relies on third-party trusted storage, such as cloud storage. However, once data are stored on third-party servers, data owners lose physical control over their data, making it challenging to ensure data integrity and security. To address this issue, researchers have proposed integrity auditing mechanisms that allow for the auditing of data integrity on cloud servers without retrieving all the data. To further enhance the availability of data stored on cloud servers, multiple replicas of the original data are stored on the server. However, in existing multi-replica auditing schemes, there is a problem of server fraud, where the server does not actually store the corresponding data replicas. To tackle this issue, this paper presents a formal definition of authentic replicas along with a security model for the authentic-replica sampling mechanism. Based on time-lock puzzles, identity-based encryption (IBE) mechanisms, and succinct proof techniques, we design an authentic replica auditing mechanism. This mechanism ensures the authenticity of replicas and can resist outsourcing attacks and generation attacks. Additionally, our schemes replace the combination of random numbers and replica correspondence tables with Linear Feedback Shift Registers (LFSRs), optimizing the original client-side generation and uploading of replica parameters from being linearly related to the number of replicas to a constant level. Furthermore, our schemes allow for the public recovery of replica parameters, enabling any third party to verify the replicas through these parameters. As a result, the schemes achieve public verifiability and meet the efficiency requirements for authentic-replica sampling in multi-cloud environments. This makes our scheme more suitable for distributed storage environments. The experiments show that our scheme makes the time for generating copy parameters negligible while also greatly optimizing the time required for replica generation. As the amount of replica data increases, the time spent does not grow linearly. Due to the multi-party aggregation design, the verification time is also optimal. Compared to the latest schemes, the verification time is reduced by approximately 30%.

Practical State Machine Replication with Confidentiality

Privacy-Preserving Protocol for Data Stored in the Cloud

Provable Multiple Replication Data Possession with Full Dynamics for Secure Cloud Storage

Multicopy provable data possession scheme supporting data dynamics for cloud-based Electronic Medical Record system

Secure Multiparty Computation Using Secure Virtual Machines

Dynamic Proof of Data Possession and Replication with Tree Sharing and Batch Verification in the Cloud

An Efficient Provable Multi-copy Data Possession Scheme with Data Dynamics.

A secure distributed machine learning protocol against static semi-honest adversaries

Reconfigurable State Machine Replication from Non-Reconfigurable Building Blocks

Cryptanalysis of an Integrity Checking Scheme for Cloud Data Sharing

Design and Implementation of Secure Subnet Inside of Data Sensitive Network

Dual-Cloud Multi-Secret Sharing Architecture for Privacy Preserving Persistent Computation

Multi-replicas integrity checking scheme with supporting probability audit for cloud-based IoT

Comments on “provable Multicopy Dynamic Data Possession in Cloud Computing Systems”

A Succinct Provable Data Possession Mechanism for Lightweight Clients in Network Computing.

Securely Outsourcing ID3 Decision Tree in Cloud Computing

Liveness and latency of Byzantine state-machine replication

Public Authentic-Replica Sampling Mechanism in Distributed Storage Environments

Achieving Secure and Differentially Private Computations in Multiparty Settings

Improved Proofs of Retrievability and Replication for Data Availability in Cloud Storage

Confidential Computing—a brave new world