Abstract:Key-exposure resistance has always been an important issue for in-depth cyber defence in many security applications. Recently, how to deal with the key exposure problem in the settings of cloud storage auditing has been proposed and studied. To address the challenge, existing solutions all require the client to update his secret keys in every time period, which may inevitably bring in new local burdens to the client, especially those with limited computation resources, such as mobile phones. In this paper, we focus on how to make the key updates as transparent as possible for the client and propose a new paradigm called cloud storage auditing with verifiable outsourcing of key updates. In this paradigm, key updates can be safely outsourced to some authorized party, and thus the key-update burden on the client will be kept minimal. In particular, we leverage the third party auditor (TPA) in many existing public auditing designs, let it play the role of authorized party in our case, and make it in charge of both the storage auditing and the secure key updates for key-exposure resistance. In our design, TPA only needs to hold an encrypted version of the client’s secret key while doing all these burdensome tasks on behalf of the client. The client only needs to download the encrypted secret key from the TPA when uploading new files to cloud. Besides, our design also equips the client with capability to further verify the validity of the encrypted secret keys provided by the TPA. All these salient features are carefully designed to make the whole auditing procedure with key exposure resistance as transparent as possible for the client. We formalize the definition and the security model of this paradigm. The security proof and the performance simulation show that our detailed design instantiations are secure and efficient.

Identity-based Key-Exposure Resilient Cloud Storage Public Auditing Scheme from Lattices.

Efficient Identity-Based Public Auditing Scheme for Cloud Storage from Lattice Assumption

Enabling Identity-Based Cloud Storage Public Auditing with Quantum Computers Resistance

Insecurity of a Public Proof of Cloud Storage from Lattice Assumption

A Compressive Integrity Auditing Protocol for Secure Cloud Storage

Enabling Cloud Storage Auditing With Key-Exposure Resistance

Identity-based remote data integrity auditing from lattices for secure cloud storage

PSCPAC: Post-quantum secure certificateless public auditing scheme in cloud storage

Identity-Based Remote Data Integrity Checking of Cloud Storage From Lattices

Lattice-Based Secure Authentication Scheme for Cloud Storage.

Enabling Cloud Storage Auditing with Key-Exposure Resilience under Continual Key-Leakage.

A Secure Cloud Storage System Based on Discrete Logarithm Problem.

An Efficient Provable Secure Public Auditing Scheme for Cloud Storage.

Enabling Cloud Storage Auditing with Verifiable Outsourcing of Key Updates

Cloud Data Integrity Checking Protocol from Lattice.

Identity-based Cloud Storage Auditing for Data Sharing with Access Control of Sensitive Information

Mutual Verifiable Provable Data Auditing in Public Cloud Storage

Certificateless public auditing scheme with designated verifier and privacy-preserving property in cloud storage

An improved identity-based public audit protocol for cloud storage

Improved Efficient Privacy-Preserving Certificateless Provable Data Possession Scheme for Cloud Storage

LAMA: A secure lattice-based authentication scheme for cloud storage against misbehaved private key generator