Identity-Based Remote Data Integrity Checking With Perfect Data Privacy Preserving for Cloud Storage

Abstract

Remote data integrity checking (RDIC) enables a data storage server, say a cloud server, to prove to a verifier that it is actually storing a data owner's data honestly. To date, a number of RDIC protocols have been proposed in the literature. However, most of the constructions suffer from the issue of requiring complex key management. That is, they rely on the expensive public key infrastructure (PKI), which might hinder the deployment of RDIC in practice. In this paper, we propose a new construction of identity-based (ID-based) RDIC protocol by making use of key-homomorphic cryptographic primitive to reduce the system complexity and the cost for establishing and managing the public key authentication framework in PKI based RDIC schemes. We formalize ID-based RDIC and its security model including security against a malicious cloud server and zero knowledge privacy against a third party verifier. The proposed ID-based RDIC protocol leaks no information of the stored data to the verifier during the RDIC process. The new construction is proven secure against the malicious server in the generic group model and achieves zero knowledge privacy against a verifier. Extensive security analysis and implementation results demonstrate that the proposed protocol is provably secure and practical in the real-world applications. Abstract-Remote data integrity checking (RDIC) enables a data storage server, say a cloud server, to prove to a verifier that it is actually storing a data owner's data honestly. To date, a number of RDIC protocols have been proposed in the literature. However, most of the constructions suffer from the issue of requiring complex key management. That is, they rely on the expensive public key infrastructure (PKI), which might hinder the deployment of RDIC in practice. In this paper, we propose a new construction of identity-based (ID-based) RDIC protocol by making use of key-homomorphic cryptographic primitive to reduce the system complexity and the cost for establishing and managing the public key authentication framework in PKI based RDIC schemes. We formalize ID-based RDIC and its security model including security against a malicious cloud server and zero knowledge privacy against a third party verifier. The proposed ID-based RDIC protocol leaks no information of the stored data to the verifier during the RDIC process. The new construction is proven secure against the malicious server in the generic group model and achieves zero knowledge privacy against a verifier. Extensive security analysis and implementation results demonstrate that the proposed protocol is provably secure and practical in the real-world applications.

Improved group‐oriented proofs of cloud storage in IoT setting

“…In some settings, the data owner does not want to leak the identity to the cloud or does not want the partial information on the data is leaking to the third auditing party. In such cases, privacy preserving schemes can be used, such as, Wang et al proposed a privacy preserving cloud auditing scheme, 19 and later, Yu et al 23 proposed a privacy preserving cloud auditing scheme by using the zero knowledge technique, etc.…”

An efficient RSA cryptosystem by applying cuckoo search optimization algorithm

“…This was found to increase the transparency of the data stored and assess the trust among the providers. 9 However, an increase in the volume of data has increased the complexity of the system for monitoring the integrity and security of the data that is stored in the cloud environment. 14 However, the cloud computing was seen to be interfaced with numerous challenges such as on-demand provisioning, entangled supply chains, system vulnerabilities, legal and regulatory landscape Besides, and third part assessment was found to be inefficient considering the static characteristics and validity periods.…”

“…Further, cloud computing service providers were found to provide the storage services in consort with service-oriented applications such as service (IaaS), platform as a service (PaaS), and software as a service (SaaS) infrastructure. 9 The data on cloud being accessible from any location leads to the threat in privacy concerns of the users. 6 However, there are various security issues concerning the cloud computing in the reliability of the data stored on cloud.…”

“…8 Consequently, the data outsourced using the cloud computing was found to be economical and reduced the complexity of storage for a long period while it lacks the assertion of data integrity. 9 The data on cloud being accessible from any location leads to the threat in privacy concerns of the users. 10 The recent developments in the cloud servers were centred on the assumption that the user will trust the service provider with the data which are administrated by a Service Level Agreement (SLA).…”

A Credible Food Traceability System Based on Domain Name System Security Extensions

“…TPA is generally used for the data integrity verification in remote or cloud storage [14][15]. The file is separated into blocks, and whether it has been manipulated is verified by PDP (Provable Data Possession) and POR (Provable Data Possession) methods.…”