Abstract:Cyber-physical-social system (CPSS) allows individuals to share personal information collected from not only cyberspace but also physical space. This has resulted in generating numerous data at a user's local storage. However, it is very expensive for users to store large data sets, and it also causes problems in data management. Therefore, it is of critical importance to outsource the data to cloud servers, which provides users an easy, cost-effective, and flexible way to manage data, whereas users lose control on their data once outsourcing their data to cloud servers, which poses challenges on integrity of outsourced data. Many schemes have been proposed to allow a third-party auditor to verify data integrity using the public keys of users. Most of these schemes bear a strong assumption: the auditors are honest and reliable, and thereby are vulnerability in the case that auditors are malicious. Moreover, in most of these schemes, an auditor needs to manage users certificates to choose the correct public keys for verification. In this paper, we propose a secure certificateless public integrity verification scheme (SCLPV). The SCLPV is the first work that simultaneously supports certificateless public verification and resistance against malicious auditors to verify the integrity of outsourced data in CPSS. A formal security proof proves the correctness and security of our scheme. In addition, an elaborate performance analysis demonstrates that the SCLPV is efficient and practical. Compared with the only existing certificateless public verification scheme (CLPV), the SCLPV provides stronger security guarantees in terms of remedying the security vulnerability of the CLPV and resistance against malicious auditors. In comparison with the best of integrity verification scheme achieving resistance against malicious auditors, the communication cost between the auditor and the cloud server of the SCLPV is independent of the size of the processed data, meanwhile, the auditor in the SCLPV does not need to manage certificates.

Backdoor-resistant certificateless-based message-locked integrity auditing for computing power network

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

SCLPV: Secure Certificateless Public Verification for Cloud-Based Cyber-Physical-Social Systems Against Malicious Auditors.

Lightweight certificateless privacy-preserving integrity verification with conditional anonymity for cloud-assisted medical cyber-physical systems

Certificateless public auditing with data privacy preserving for cloud-based smart grid data

Efficient Privacy-Preserving Certificateless Public Auditing of Data in Cloud Storage

Certificateless Public Key Encryption with Cryptographic Reverse Firewalls

Cryptanalysis of an Integrity Checking Scheme for Cloud Data Sharing

Security Clouds to Improve Privacy and Conduct Continuous Audits in 6G Networked Environments Smart Cities

Certificateless Public Auditing with Privacy Preserving for Cloud-Assisted Wireless Body Area Networks

A Secure Certificate-Based Data Integrity Auditing Protocol with Cloud Service Providers

Conditional Anonymous Certificateless Public Auditing Scheme Supporting Data Dynamics for Cloud Storage Systems

Certificateless privacy preserving public auditing for dynamic shared data with group user revocation in cloud storage

A Blockchain-Based Privacy-Preserving Auditable Authentication Scheme with Hierarchical Access Control for Mobile Cloud Computing

An efficient certificateless public auditing scheme in cloud storage

Security Analysis and Improvements on a Remote Integrity Checking Scheme for Regenerating-Coding-Based Distributed Storage

Public Auditing with Privacy Protection in a Multi-User Model of Cloud-Assisted Body Sensor Networks

A Novel Security Scheme Supported by Certificateless Digital Signature and Blockchain in Named Data Networking

Certificateless Public Auditing for Cloud-Based Medical Data in Healthcare Industry 4.0

Efficient and Security-Enhanced Certificateless Aggregate Signature-Based Authentication Scheme With Conditional Privacy Preservation for VANETs

A Novel Revocable Lightweight Authentication Scheme for Resource-Constrained Devices in Cyber–Physical Power Systems