Improved Auditing Schemes with Identity-preserving for the Integrity of Shared Data in the Cloud

doi:10.3969/j.issn.1671-1122.2018.10.012

Abstract

Abstract:

With the development of Internet and information technology, cloud computing has become one of the hottest topic of the day, cloud service is getting into people’s life day by day, and provides data storage and computing service to data users. But, it is necessary for an auditor on users’ behalf to check the integrity of the outsourced data in the cloud. Also the cloud server must ensure the identities of the users and privacy of the data blocks. In this paper, based on the existing work, we use digital signature technology and the properties of the bilinear pairing and propose improved public auditing schemes with identity-preserving for the integrity checking of the shared data in the cloud and prove the security of one improved scheme under the assumption that the discrete logarithm problem is hard. Through comparison of computation and security, it is shown that the improved scheme proposed in this paper has more rigorous security and relatively smaller computation cost.

Key words: cloud computing, data integrity checking, privacy-preserving, digital signature, security

CLC Number:

TP309

Hong JIANG, Baoyuan KANG, Chunqing LI. Improved Auditing Schemes with Identity-preserving for the Integrity of Shared Data in the Cloud[J]. Netinfo Security, 2018, 18(10): 85-91.

Figures/Tables 2

References 22

[1]	ATENIESE G, BURNS R, CURTMOLA R, et al.Provable Data Possession at Untrusted Stores[C]//ACM. 14th ACM Conference on Computer and Communications Security, October 28-31, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 598-609.
[2]	ATENIESE G, KAMARA S, KATZ J.Proofs of Storage from Homomorphic Identification Protocols[C]//ACM. 15th International Conference on Theory and Application of Cryptology and Information Security: Advances in Cryptology, December 6-10, 2009, Tokyo, Japan. New York: ACM, 2009: 319-333.
[3]	LU Rongxing, LIN Xiaodong, LUAN T H, et al.Pseudonym Changing at Social Spots: An Effective Strategy for Location Privacy in VANETs[J]. IEEE Transactions on Vehicular Technology, 2012, 61(1) : 86-96.
[4]	HOU Huiying, YU Jia, HAO Rong.Research on an Integrity Auditing Scheme Based on Algebraic Signature in Cloud Storage[J]. Netinfo Security, 2017, 17(10): 69-74.
	侯慧莹,于佳,郝蓉. 一种基于代数签名的云存储完整性审计方案研究[J]. 信息网络安全,2017,17(10):69-74.
[5]	WANG Qian, WANG Cong, REN Kui, et al.Enabling Public Auditability and Data Dynamics for Storage Security in Cloud Computing[J]. IEEE Transactions on Parallel and Distributed Systems, 2011, 22(5): 847-859.
[6]	YUAN Jiawei, YU Shucheng.Public Integrity Auditing for Dynamic Data Sharing with Multiuser Modification[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(8): 1717-1726.
[7]	ZENG Ke.Publicly Verifiable Remote Data Integrity[C]//Springer. 10th International Conference on Information and Communications Security, October 20-22, 2008, Birmingham, UK. Heidelberg: Springer, 2008: 419-434.
[8]	ZHU Yan, HU Hongxin, AHN G J, et al.Cooperative Provable Data Possession for Integrity Verification in Multi-cloud Storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2012, 23(12): 2231-2244.
[9]	BIAN Genqing, SHAO Bilin, CAI Wandong, et al.Research on Multiple-replica Integrity Auditing Method on Supporting Data Dynamic Updating in Cloud Environment[J]. Netinfo Security, 2017, 17(10): 22-28.
	边根庆,必林,蔡皖东,等. 云环境下支持数据动态更新的多副本数据完整性审计方法研究[J]. 信息网络安全,2017,17(10):22-28.
[10]	XUE Liang, NI Jianbing, LI Yannan, et al. Provable Data Transfer from Provable Data Possession and Deletion in Cloud Storage[EB/OL]. .
[11]	JIN Hao, ZHOU Ke, JIANG Hong, et al. Full Integrity and Freshness for Cloud Data[EB/OL]. .
[12]	WANG Huaqun, WU Qianhong, QIN Bo, et al.Identity-based Remote Data Possession Checking in Public Clouds[J]. IET Information Security, 2014, 8(2): 114-121.
[13]	ZHANG Jianhong, LI Pengyan.An Efficient Data Integrity Verification Scheme for Cloud Storage[J]. Netinfo Security, 2017, 17(3): 1-5.
	张键红,李鹏燕. 一种有效的云存储数据完整性验证方案[J]. 信息网络安全,2017,17(3):1-5.
[14]	YU Yong, XUE Liang, AU M H, et al.Cloud Data Integrity Checking with an Identity-based Auditing Mechanism from RSA[J]. Future Generation Computer Systems, 2016, 62(C): 85-91.
[15]	WEI Lifei, ZHU Haojin, CAO Zhenfu, et al. Security and Privacy for Storage and Computation in Cloud Computing[EB/OL]. .
[16]	WANG Cong, WANG Qian, REN Kui, et al.Privacy-preserving Public Auditing for Data Storage Security in Cloud Computing[C]//IEEE. 2010 IEEE INFOCOM, March 14-19, 2010, San Diego, CA, USA. New Jersey: IEEE, 2010: 525-533.
[17]	WORKU S, XU Chunxiang, ZHAO Jining, et al.Secure and Efficient Privacy-preserving Public Auditing Scheme[J]. Computer and Electrical Engineering, 2014, 40(5): 1703-1713.
[18]	WANG Cong, CHOW S, WANG Qian, et al.Privacy-preserving Public Auditing for Secure Cloud Storage[J]. IEEE Transactions on computers, 2013, 62(2): 1-12.
[19]	ZHANG Jianhong, ZHAO Xubing.Privacy-preserving Public Auditing Scheme for Shared Data with Supporting Multi-function[J]. Journal of Communication, 2015, 10(7): 535-542.
[20]	LI Yannan, YU Yong, YANG Bo, et al. Privacy Preserving Cloud Auditing with Efficient Key Update[EB/OL]. .
[21]	YANG Guangyang, YUA Jia, SHEN Wenting, et al.Enabling Public Auditing for Shared Data in Cloud Storage Supporting Identity Privacy and Traceability[J]. Journal of Systems and Software, 2016, 113(C): 130-139.
[22]	HE Kai, HUANG Chuanhe, YANG Kan, et al.Identity-preserving Public Auditing for Shared Cloud Data[C]//IEEE. 23rd International Symposium on Quality of Service, June 15-16, 2015, Portland, OR, USA. New Jersey: IEEE, 2015: 159-164.

	抵抗伪造攻击证明	保护文件内容证明	保护用户身份证明
HE^[22]等人方案	无	无	无
本文方案	有	有	有

	挑战算法	证明算法	验证算法
HE^[22]等人方案	(s+2)E	(s+\|I₁\|+2\|I₂\|)E+3B+1A	\|I\|E+1A+1B
本文方案	sE	(s+\|I₁\|+2\|I₂\|)E	(\|I\|+2)E+2A+2B