Abstract:Key-exposure resistance has always been an important issue for in-depth cyber defence in many security applications. Recently, how to deal with the key exposure problem in the settings of cloud storage auditing has been proposed and studied. To address the challenge, existing solutions all require the client to update his secret keys in every time period, which may inevitably bring in new local burdens to the client, especially those with limited computation resources, such as mobile phones. In this paper, we focus on how to make the key updates as transparent as possible for the client and propose a new paradigm called cloud storage auditing with verifiable outsourcing of key updates. In this paradigm, key updates can be safely outsourced to some authorized party, and thus the key-update burden on the client will be kept minimal. In particular, we leverage the third party auditor (TPA) in many existing public auditing designs, let it play the role of authorized party in our case, and make it in charge of both the storage auditing and the secure key updates for key-exposure resistance. In our design, TPA only needs to hold an encrypted version of the client’s secret key while doing all these burdensome tasks on behalf of the client. The client only needs to download the encrypted secret key from the TPA when uploading new files to cloud. Besides, our design also equips the client with capability to further verify the validity of the encrypted secret keys provided by the TPA. All these salient features are carefully designed to make the whole auditing procedure with key exposure resistance as transparent as possible for the client. We formalize the definition and the security model of this paradigm. The security proof and the performance simulation show that our detailed design instantiations are secure and efficient.

Online/offline remote data auditing with strong key-exposure resilience for cloud storage

Enabling Cloud Storage Auditing with Verifiable Outsourcing of Key Updates

Enabling Cloud Storage Auditing With Key-Exposure Resistance

Remote Data Auditing and How it May Affect the Chain of Custody in a Cloud Environment

Outsourced Dynamic Provable Data Possession with Batch Update for Secure Cloud Storage

Remote Data Possession Checking with Enhanced Security for Cloud Storage

Enabling Cloud Storage Auditing with Key-Exposure Resilience under Continual Key-Leakage.

Detailed Analysis and Improvement of an Efficient and Secure Identity-Based Public Auditing for Dynamic Outsourced Data with Proxy

An Efficient Provable Secure Public Auditing Scheme for Cloud Storage.

Improved Dynamic Remote Data Auditing Protocol for Smart City Security

Efficient Dynamic Integrity Verification for Big Data Supporting Users Revocability

A Secure Cloud Storage System Based on Discrete Logarithm Problem.

Only you can check my data: certificateless and designed-verifier auditing of multi-cloud storage with faults localization

Achieving public verifiability and data dynamics for cloud data in the standard model

On the Security of Auditing Mechanisms for Secure Cloud Storage

Cloud Data Auditing with Designated Verifier

Attribute-Based Cloud Data Integrity Auditing for Secure Outsourced Storage

Analysis and Enhancement of a Lattice-Based Data Outsourcing Scheme With Public Integrity Verification

Efficient Data Possession Auditing For Real-World Cloud Storage Environments

SDABS: A Secure Cloud Data Auditing Scheme Based on Blockchain and SGX

Identity-based Key-Exposure Resilient Cloud Storage Public Auditing Scheme from Lattices.