Analysis and Optimization on FlexDPDP: A Practical Solution for Dynamic Provable Data Possession

Esiner, Ertem; Küpçü, Alptekin; Özkasap, Öznur

doi:10.1007/978-3-319-19848-4_5

Cited by 12 publications

(10 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To evaluate our SSE scheme, we implemented a prototype with the two-level efficient HADS construction [36] with Flexlist [41] at both levels of the indices, in C++ using Cashlib library. All experiments were performed on a 2.50 GHz machine with 24 cores (but using a single core), with 16 GB RAM and Ubuntu 12.04 LTS operating system.…”

Section: Discussionmentioning

confidence: 99%

Verifiable dynamic searchable encryption

Etemad¹,

Küpçü²

2019

Turk J Elec Eng & Comp Sci

Self Cite

View full text Add to dashboard Cite

Using regular encryption schemes to protect the privacy of the outsourced data implies that the client should sacrifice functionality for security. Searchable symmetric encryption (SSE) schemes encrypt the data in a way that the client can later search and selectively retrieve the required data. Many SSE schemes have been proposed, starting with static constructions, and then dynamic and adaptively secure constructions but usually in the honest-but-curious model.We propose a verifiable dynamic SSE scheme that is adaptively secure against malicious adversaries. Our scheme supports file modification, which is essential for efficiently working with large files, in addition to the ability to add/delete files. While our main construction is proven secure in the random oracle model (ROM), we also present a solution secure in the standard model with full security proof. Our experiments show that our scheme in the ROM performs a search within a few milliseconds, verifies the result in another few milliseconds, and has a proof overhead of 0.01% only. Our standard model solution, while being asymptotically slower, is still practical, requiring only a small client memory (e.g., ≃ 488 KB) even for a large file collection (e.g., ≃ 10 GB), and necessitates small tokens (e.g., ≃ 156 KB for search and ≃ 362 KB for file operations).the token or the files), and the search pattern, which indicates whether two or more of the tokens were for the same query [1]. A secure SSE scheme leaks nothing more.Previous studies on cloud storage mainly considered efficient integrity verification [11][12][13][14][15][16][17][18]. Our goal in this paper is to achieve integrity and confidentiality simultaneously, while preserving the efficient search functionality in outsourced storage scenarios. We propose a verifiable dynamic SSE scheme that is secure against malicious servers, with the ability to efficiently add/delete/modify (parts of) encrypted files, and with security fully proven via simulation in both the random oracle model and the standard model. Related workThe oblivious RAM (ORAM) [19] supports search on the outsourced data while hiding the access pattern.However, as the usage of ORAM (one block per access) differs from that of the SSE (many blocks per access), it cannot fully prevent access or search pattern leakage in SSE [20]. Early works and definitionsGoh [21] introduced the secure index as an efficient data structure for keyword search. The scheme is secure against chosen-keyword attacks (CKA1). Chang and Mitzenmacher [22] proposed the simulation-based notion of security. Curtmola et al. [1] stated that both CKA1 [21] and simulation-based [22] definitions are not adequate, and gave a stronger definition (CKA2). Dynamic dataThe problem in the dynamic setting is that once an update operation is performed, the server gains extra information related to previous queries. The server can learn whether or not the newly added files contain the keywords that have already been queried for (even though the keyword is encrypted and the server d...

show abstract

Section: Discussionmentioning

confidence: 99%

Verifiable dynamic searchable encryption

Etemad¹,

Küpçü²

2019

Turk J Elec Eng & Comp Sci

Self Cite

View full text Add to dashboard Cite

show abstract

“…We show that efficient DPDP schemes can be constructed given black-box access to an implicitly-ordered ADS and a homomorphic verifiable tag scheme. The existing schemes [18,45,47,20] are all specific cases of our general model.…”

Section: Our Contributionsmentioning

confidence: 99%

“…The main problem with the general framework of Ateniese et al [5] is that it does not support dynamic operations on the outsourced data. Starting with Erway et al DPDP scheme [18], many dynamic data outsourcing schemes have been proposed [45,47,20]. Almost all these schemes use a similar architecture: homomorphic verifiable tags combined with authenticated data structures (ADSs).…”

Section: Introductionmentioning

confidence: 99%

Generic Dynamic Data Outsourcing Framework for Integrity Verification

Etemad

Küpçü

2020

ACM Comput. Surv.

Self Cite

View full text Add to dashboard Cite

Ateniese et al. proposed the Provable Data Possession (PDP) model in 2007. Following that, Erway et al. adapted the model for dynamically updatable data and called it the Dynamic Provable Data Possession (DPDP) model. The idea is that a client outsources her files to a cloud server and later challenges the server to obtain a proof of the integrity of her data. Many schemes have later been proposed for this purpose, all following a similar framework. We analyze dynamic data outsourcing schemes for the cloud regarding security and efficiency and show a general framework for constructing such schemes that encompasses existing DPDP-like schemes as different instantiations. This generalization shows that a dynamic outsourced data integrity verification scheme can be constructed given black-box access to an implicitly-ordered authenticated data structure. Moreover, for blockless verification efficiency, a homomorphic verifiable tag scheme is also needed. We investigate the requirements and conditions these building blocks should satisfy, using which one may easily check the applicability of a given building block for dynamic data outsourcing. Our framework serves as a guideline/tutorial/survey and enables us to provide a comparison among different building blocks that existing schemes employ.

show abstract

“…An extension of DPDP includes version control [10,5] where all data changes are recorded into a repository and any version of the data can be retrieved at any time. DPDP protocols with multi-update capability were suggested in [8,9]. More recently, data privacy-preserving and publicly verifiable PDP schemes were presented in [21,20,23,11,22,12].…”

Section: Related Workmentioning

confidence: 99%

Dynamic Provable Data Possession Protocols with Public Verifiability and Data Privacy

Gritti

Chen

Susilo

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Cloud storage services have become accessible and used by everyone. Nevertheless, stored data are dependable on the behavior of the cloud servers, and losses and damages often occur. One solution is to regularly audit the cloud servers in order to check the integrity of the stored data. The Dynamic Provable Data Possession scheme with Public Verifiability and Data Privacy presented in ACISP'15 is a straightforward design of such solution. However, this scheme is threatened by several attacks. In this paper, we carefully recall the definition of this scheme as well as explain how its security is dramatically menaced. Moreover, we proposed two new constructions for Dynamic Provable Data Possession scheme with Public Verifiability and Data Privacy based on the scheme presented in ACISP'15, one using Index Hash Tables and one based on Merkle Hash Trees. We show that the two schemes are secure and privacy-preserving in the random oracle model.Correctness. We require that a DPDP with PV and DP is correct if for (pk, sk) ← KeyGen(λ), T m ← TagGen(pk, sk, m), (F ′ , E ′ , ν ′ ) ← PerfOp (pk, F, E, inf o), ν ← GenProof(pk, F, chal, Σ), then 1 ← CheckOp(pk, ν ′ ) and 1 ← CheckProof (pk, chal, ν). N.B. The set of ranks is [1, n] at the first upload; it then becomes (0, n + 1) ∩ Q after operations as in the construction in [12]. Security and Privacy ModelsSecurity Model against the Server This model against the server is given in [12], and follows the one proposed in [1,7].We consider a DPDP with PV and DP as defined above. Let a data possession game between a challenger B and an adversary A (acting as the server) be as follows: ⋄ Setup. B runs (pk, sk) ← KeyGen(λ) such that pk is given to A while sk is kept secret. ⋄ Adaptive Queries. First, A is given access to a tag generation oracle O T G . A chooses blocks m i and gives them to B, for i ∈ [1, n]. B runs TagGen(pk, sk, m i ) → T m i and gives them to

show abstract

Analysis and Optimization on FlexDPDP: A Practical Solution for Dynamic Provable Data Possession

Cited by 12 publications

References 32 publications

Verifiable dynamic searchable encryption

Verifiable dynamic searchable encryption

Generic Dynamic Data Outsourcing Framework for Integrity Verification

Dynamic Provable Data Possession Protocols with Public Verifiability and Data Privacy

Contact Info

Product

Resources

About