Authentication and Key Agreement Based on Anonymous Identity for Peer-to-Peer Cloud

Abstract

Cross-cloud data migration is one of the prevailing challenges faced by mobile users, which is an essential process when users change their mobile phones to a different provider. However, due to the insufficient local storage and computational capabilities of the smart phones, it is often very difficult for users to backup all data from the original cloud servers to their mobile phones in order to further upload the downloaded data to the new cloud provider. To solve this problem, we propose an efficient data migration model between cloud providers and construct a mutual authentication and key agreement scheme based on elliptic curve certificate-free cryptography for peer-topeer cloud. The proposed scheme helps to develop trust between different cloud providers and lays a foundation for the realization of cross-cloud data migration. Mathematical verification and security correctness of our scheme is evaluated against notable existing schemes of data migration, which demonstrate that our proposed scheme exhibits a better performance than other stateof-the-art scheme in terms of the achieved reduction in both the computational and communication cost.

Cloud Data Encryption and Authentication Based on Enhanced Merkle Hash Tree Method

“…Generally, the communication overhead and information leakage risk increase with a greater number of delegation decryption keys. In existing key assignment schemes (symmetric-key encryption, key-aggregate encryption [26], etc. ), the decryption key generation depends on previous classification files.…”

“…Zhong et al [26] developed a mutual authentication and key agreement scheme based on elliptic curve cryptography for the peer-to-peer cloud. The elliptic curve certificate-free cryptography method was used for key generation.…”

“…Blockchain technology [23] provides higher security in data transmission and this is not suitable for cloud-stored data. Attribute-based methods [24][25][26] was suitable for cloud storage and lower efficiency in large dataset. Commonly, existing methods have limitations of doesn't support data integrity or lower efficiency in large datasets.…”

“…7. The AAT [25] requires more computational time than the enhanced Merkle hash tree with a multi-owner authentication method due to the generation of tags in the method, and the elliptic curve cryptography method [26] requires a greater computational time. The proposed method requires less computation due to the tiger hash method.…”

“…8. The AAT [25] requires greater computational time on the server-side to analyze the tags, and the elliptic curve cryptography method [26] requires more time for the decryption process. The tiger hash tree in the Merkle method reduces the decryption process on the server-side.…”