Abstract:With the surge in cloud storage popularity, more individuals are choosing to store large amounts of data on remote cloud service providers (CSPs) to save local storage resources. However, users' primary worries revolve around maintaining data integrity and authenticity. Consequently, several cloud auditing methods have emerged to address these concerns. Many of these approaches rely on traditional public-key cryptography systems or are grounded in identity-based cryptography systems or certificateless cryptography systems. However, they are vulnerable to the increased costs linked with certificate management, key escrow, or the significant expenses of establishing a secure channel, respectively. To counter these limitations, Li et al. introduced a certificate-based cloud auditing protocol (LZ22), notable for its minimal tag generation overhead. Nonetheless, this protocol exhibits certain security vulnerabilities. In this paper, we devise a counterfeiting technique that allows the CSP to produce a counterfeit data block with an identical tag to the original one. Our counterfeiting method boasts a 100% success rate ∀ data block and operates with exceptional efficiency. The counterfeiting process for a single block of 10 kB, 50 kB, and 100 kB takes a maximum of 0.08 s, 0.51 s, and 1.04 s, respectively. By substituting the exponential component of homomorphic verifiable tags (HVTs) with non-public random elements, we formulate a secure certificate-based cloud auditing protocol. In comparison to the LZ22 protocol, the average tag generation overhead of our proposed protocol is reduced by 6.80%, 13.78%, and 8.66% for data sizes of 10 kB, 50 kB, and 100 kB, respectively. However, the auditing overhead of our proposed protocol shows an increase. The average overhead rises by 3.05%, 0.17%, and 0.45% over the LZ22 protocol's overhead for data sizes of 10 kB, 50 kB, and 100 kB, correspondingly.

Certificateless integrity auditing scheme for sensitive information protection in cloud storage

A Compressive Integrity Auditing Protocol for Secure Cloud Storage

Improved Efficient Privacy-Preserving Certificateless Provable Data Possession Scheme for Cloud Storage

Identity-based Cloud Storage Auditing for Data Sharing with Access Control of Sensitive Information

Blockchain‐based transparent and certificateless data integrity auditing for cloud storage

An efficient certificateless public auditing scheme in cloud storage

Privacy-Preserving Protocol for Data Stored in the Cloud

Efficient Privacy-Preserving Certificateless Public Auditing of Data in Cloud Storage

IPAPS: An improved public auditing protocol for secure data storage in cloud‐based medical storage system

ID-based sanitizable signature data integrity auditing scheme with privacy-preserving

Certificateless public auditing scheme with designated verifier and privacy-preserving property in cloud storage

Identity-Based Auditing for Shared Cloud Data with Efficient and Secure Sensitive Information Hiding

Certificateless Cloud Storage Auditing Supporting Data Ownership Transfer

Identity-based controlled delegated outsourcing data integrity auditing scheme

An Improved Privacy Preserving Construction for Data Integrity Verification in Cloud Storage

Lightweight certificateless privacy-preserving integrity verification with conditional anonymity for cloud-assisted medical cyber-physical systems

An improved identity-based public audit protocol for cloud storage

Privacy-Preserving Public Auditing Scheme for Data Confidentiality and Accountability in Cloud Storage

Only you can check my data: certificateless and designed-verifier auditing of multi-cloud storage with faults localization

A New Public Remote Integrity Checking Scheme with User Privacy

A Secure Certificate-Based Data Integrity Auditing Protocol with Cloud Service Providers