Abstract:Cloud Computing has been envisioned as the next-generation architecture of IT Enterprise. It moves the application software and databases to the centralized large data centers, where the management of the data and services may not be fully trustworthy. This unique paradigm brings about many new security challenges, which have not been well understood. This work studies the problem of ensuring the integrity of data storage in Cloud Computing. In particular, we consider the task of allowing a third party auditor (TPA), on behalf of the cloud client, to verify the integrity of the dynamic data stored in the cloud. The introduction of TPA eliminates the involvement of the client through the auditing of whether his data stored in the cloud are indeed intact, which can be important in achieving economies of scale for Cloud Computing. The support for data dynamics via the most general forms of data operation, such as block modification, insertion, and deletion, is also a significant step toward practicality, since services in Cloud Computing are not limited to archive or backup data only. While prior works on ensuring remote data integrity often lacks the support of either public auditability or dynamic data operations, this paper achieves both. We first identify the difficulties and potential security problems of direct extensions with fully dynamic data updates from prior works and then show how to construct an elegant verification scheme for the seamless integration of these two salient features in our protocol design. In particular, to achieve efficient data dynamics, we improve the existing proof of storage models by manipulating the classic Merkle Hash Tree construction for block tag authentication. To support efficient handling of multiple auditing tasks, we further explore the technique of bilinear aggregate signature to extend our main result into a multiuser setting, where TPA can perform multiple auditing tasks simultaneously. Extensive security and performance analysis show that the proposed schemes are highly efficient and provably secure.

Efficient Privacy-Preserving Certificateless Public Auditing of Data in Cloud Storage

A Compressive Integrity Auditing Protocol for Secure Cloud Storage

Improved Efficient Privacy-Preserving Certificateless Provable Data Possession Scheme for Cloud Storage

Certificateless public auditing scheme with designated verifier and privacy-preserving property in cloud storage

Privacy-Preserving Protocol for Data Stored in the Cloud

Privacy-Preserving Public Auditing for Data Storage Security in Cloud Computing

Privacy-Preserving Public Auditing Scheme for Data Confidentiality and Accountability in Cloud Storage

An efficient certificateless public auditing scheme in cloud storage

Certificateless privacy preserving public auditing for dynamic shared data with group user revocation in cloud storage

Certificateless Provable Group Shared Data Possession with Comprehensive Privacy Preservation for Cloud Storage

Only you can check my data: certificateless and designed-verifier auditing of multi-cloud storage with faults localization

Mutual Verifiable Provable Data Auditing in Public Cloud Storage

Enable data privacy, dynamics, and batch in public auditing scheme for cloud storage system

PSCPAC: Post-quantum secure certificateless public auditing scheme in cloud storage

Public Auditing for Shared Cloud Data with Efficient and Secure Group Management

Privacy-Preserving Public Auditing for Shared Data in Mobile Cloud Storage

Blockchain‐based transparent and certificateless data integrity auditing for cloud storage

Identity-based Cloud Storage Auditing for Data Sharing with Access Control of Sensitive Information

Flexible identity-based remote data integrity checking for cloud storage with privacy preserving property

A Secure Cloud Storage System Based on Discrete Logarithm Problem.

Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing