Abstract:In big data age, flexible cloud service greatly enhances productivity for enterprises and individuals in different applications. When cloud access is restricted, data owner could authorize a proxy to process the data, and upload them to enjoy the powerful cloud storage service. Meanwhile, outsourced data integrity breach becomes a serious security issue for cloud storage. Identity Based Provable Data Possession (PDP) as a critical technology, could enable each data owner to efficiently verify cloud data integrity, without downloading entire copy and complicated public key certificate management issue. But it remains a great challenge for multiple data owners to efficiently and securely perform batch data integrity checking on huge data on different storage clouds, with proxy processing. Yu et al. recently proposed an Identity-Based Public Auditing for Dynamic Outsourced Data with Proxy Processing ( https://doi.org/10.3837/tiis.2017.10.019 ), which tried to address this problem. In this article, we first demonstrate that this scheme is insecure since malicious clouds could pass integrity auditing without original data. Additionally, malicious clouds are able to recover the proxys private key and thus impersonate proxy to arbitrarily forge tags for any modified data. Secondly, in order to repair these security flaws, we propose an improved scheme to enable secure identity based batch public auditing with proxy processing. Thirdly, the security of our improved scheme is proved under CDH hard problem in the random oracle model. The complexity analysis of its performance shows better efficiency over identity-based proxy-oriented data uploading and remote data integrity checking in public cloud on single owner effort on a single cloud, which will benefit big data storage if it is extrapolated in real application.

Identity-based proxy-oriented outsourcing with public auditing in cloud-based medical cyber–physical systems

A Novel Proxy-Oriented Public Auditing Scheme for Cloud-Based Medical Cyber Physical Systems

Lightweight certificateless privacy-preserving integrity verification with conditional anonymity for cloud-assisted medical cyber-physical systems

Lightweight Integrity Verification Scheme for Outsourced Medical Data in Cloud Storage Supporting Conditional Identity Anonymity

Certificateless Public Auditing for Cloud-Based Medical Data in Healthcare Industry 4.0

An Efficient Privacy-Preserving Public Auditing Protocol for Cloud-Based Medical Storage System

Genuine and Secure Identity-Based Public Audit for the Stored Data in Healthcare Cloud

Detailed Analysis and Improvement of an Efficient and Secure Identity-Based Public Auditing for Dynamic Outsourced Data with Proxy

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

PSMPA: Patient Self-Controllable and Multi-Level Privacy-Preserving Cooperative Authentication in Distributedm-Healthcare Cloud Computing System

CAMPS: Efficient and Privacy-Preserving Medical Primary Diagnosis over Outsourced Cloud.

IPAPS: An improved public auditing protocol for secure data storage in cloud‐based medical storage system

An Anonymous Authentication Protocol Based on Cloud for Telemedical Systems

Outsourcing High-Dimensional Healthcare Data to Cloud with Personalized Privacy Preservation.

Efficient and Unconditionally Anonymous Certificateless Provable Data Possession Scheme with Trusted KGC for Cloud-Based EMRs

Identity-based controlled delegated outsourcing data integrity auditing scheme

Public auditing for secure data storage in cloud through a third party auditor using modern ciphertext

Secure and Efficient Privacy-Preserving Identity-Based Batch Public Auditing with Proxy Processing.

Privacy-Preserving Medical Information Systems Using Multi-Authority Content-Based Encryption In Cloud

Certificateless Provable Data Possession Scheme for Cloud-Based Electronic Health Records System

Identity-Based Proxy-Oriented Data Uploading And Remote Data Integrity Checking In Public Cloud