Abstract:In big data age, flexible and affordable cloud storage service greatly enhances productivity for enterprises and individuals, but spontaneously has their outsourced data susceptible to integrity breaches. Provable Data Possession (PDP) as a critical technology, could enable data owners to efficiently verify cloud data integrity, without downloading entire copy. To address challenging integrity problem on multiple clouds for multiple owners, an identity-based batch PDP scheme was presented in ProvSec 2016, which attempted to eliminate public key certificate management issue and reduce computation overheads in a secure and batch method. In this paper, we firstly demonstrate this scheme is insecure so that any clouds who have outsourced data deleted or modified, could efficiently pass integrity verification, simply by utilizing two arbitrary block-tag pairs of one data owner. Specifically, malicious clouds are able to fabricate integrity proofs by 1) universally forging valid tags and 2) recovering data owners' private keys. Secondly, to enhance the security, we propose an improved scheme to withstand these attacks, and prove its security with CDH assumption under random oracle model. Finally, based on simulations and overheads analysis, our batch scheme demonstrates better efficiency compared to an identity based multi-cloud PDP with single owner effort.

Improved Provable Data Transfer from Provable Data Possession and Deletion in Cloud Storage

Provable Data Possession Supporting Secure Data Transfer for Cloud Storage

Privacy-Preserving Protocol for Data Stored in the Cloud

Improved Outsourced Provable Data Possession for Secure Cloud Storage

Improved Security of a Dynamic Remote Data Possession Checking Protocol for Cloud Storage.

Mutual Verifiable Provable Data Auditing in Public Cloud Storage

Remote Data Possession Checking with Enhanced Security for Cloud Storage

Improved Efficient Privacy-Preserving Certificateless Provable Data Possession Scheme for Cloud Storage

Provable Data Possession with Outsourced Data Transfer

P3DP: Privacy Preserving Provable Data Possession with Multi-Copy and Data Dynamics in a Cloud Storage

Provable Cloud Data Possession Scheme via Third-Party Proxy Dynamic Operations

An Efficient Provable Secure Public Auditing Scheme for Cloud Storage.

Certificateless Provable Data Possession Scheme for Cloud-Based Electronic Health Records System

A Secure Cloud Storage System Based on Discrete Logarithm Problem.

Improved Proofs of Retrievability and Replication for Data Availability in Cloud Storage

A Security-Enhanced Identity-Based Batch Provable Data Possession Scheme for Big Data Storage.

De-duplication of Encrypted Data with Proof of Ownership in Cloud Storage

An Improved Dynamic Provable Data Possession Model

Insecurity of an Efficient Privacy-preserving Public Auditing Scheme for Cloud Data Storage.

Efficient Privacy-Preserving Certificateless Public Auditing of Data in Cloud Storage

A Revocable Authorization Provable Data Possession Scheme in Clouds