Certificateless Provable Group Shared Data Possession with Comprehensive Privacy Preservation for Cloud Storage

Abstract

Provable Data Possession (PDP) protocol makes it possible for cloud users to check whether the cloud servers possess their original data without downloading all the data. However, most of the existing PDP schemes are based on either public key infrastructure (PKI) or identity-based cryptography, which will suffer from issues of expensive certificate management or key escrow. In this paper, we propose a new construction of certificateless provable group shared data possession (CL-PGSDP) protocol by making use of certificateless cryptography, which will eliminate the above issues. Meanwhile, by taking advantage of zero-knowledge protocol and randomization method, the proposed CL-PGSDP protocol leaks no information of the stored data and the group user's identity to the verifiers during the verifying process, which is of the property of comprehensive privacy preservation. In addition, our protocol also supports efficient user revocation from the group. Security analysis and experimental evaluation indicate that our CL-PGSDP protocol provides strong security with desirable efficiency.

Efficient Identity-Based Public Integrity Auditing of Shared Data in Cloud Storage With User Privacy Preserving

“…However, the scheme lost the user privacy preservation feature. Similarly, Yang et al [35] presented a scheme of shared data based on certificateless cryptography too. Although the scheme claimed that it was able to guarantee user identity, unfortunately, TPA can get the relationship of data and the public keys in the verification phase.…”

“…It resorts to group signature technique to keep user privacy private from the TPA. Following, several schemes [23][24][25][26][27][28][29][30][31][32][33][34][35][36][37] with user privacy preserving are proposed. However, most of these PDP schemes [23][24][25][26][27][28][29][30][31][32] are constructed on the PKI technique which suffers from certificate management problems such as certificate generation, distribution, revocation, re-new, update and verification.…”

“…To address this problem, some researchers utilize identity-based cryptography [38] and certificateless cryptography [39] to design PDP schemes [33][34][35][36][37] with user privacy preserving. Nevertheless, these schemes are not computationally efficient to apply in practical application.…”

Efficient Privacy-Preserving Certificateless Public Auditing of Data in Cloud Storage

“…To improve verification efficiency, Kim and Jeong [34] proposed a CLC-based PDP scheme with constant verification time. Similarly, Yang et al [35] presented a PDP scheme for shared data integrity audition based on certificateless cryptography. e scheme claimed that it was able to guarantee user identity, but in the verification phase, TPA got the relationship between data and the public keys.…”

“…erefore, CLC overcomes the drawbacks of PKI and IBC simultaneously. Because of these advantages, some researchers utilize CLC to construct PDP schemes [31][32][33][34][35][36][37][38][39]. Nevertheless, these schemes also have other shortcomings such as no user privacy preserving, heavy computationally cost, or existing security flaws which reduce the practicability of the schemes.…”