Identity-Based Public Auditing Scheme for Cloud Storage with Strong Key-Exposure Resilience

Abstract

Secured storage system is a critical component in cloud computing. Cloud clients use cloud auditing schemes to verify the integrity of data stored in the cloud. But with the exposure of the auditing secret key to the Cloud Service Provider, cloud auditing becomes unsuccessful, however strong the auditing schemes may be. Therefore, it is essential to prevent the exposure of auditing secret keys, and even if it happens, it is necessary to minimize the damage caused. The existing cloud auditing schemes that are strongly resilient to key exposure are based on Public Key Infrastructure and so have challenges of certificate management/verification. These schemes also incur high computation time during integrity verification of the data blocks. The Identity-based schemes eliminate the usage of certificates but limit the damage due to key exposure, only in time periods earlier to the time period of the exposed key. Some of the key exposure resilient schemes do not provide support for batch auditing. In this paper, an Identity-based Provable Data Possession scheme is proposed. It protects the security of Identity-based cloud storage auditing in time periods both earlier and later to the time period of the exposed key. It also provides support for batch auditing. Analysis shows that the proposed scheme is resistant to the replace attack of the Cloud Service Provider, preserves the data privacy against the Third Party Auditor, and can efficiently verify the correctness of data.

Dynamic Security Exchange Scheduling Model for Business Workflow Based on Queuing Theory in Cloud Computing

“…select the example of this priority to process (6) update l and y i ; ( 7) else (8) for u ⟶ 1 in queue do (9) if u in l then (10) u is selected to process (11) update l and y i ; (12) break; (13 Based on our model M/G/k/l-P, we can see that the waiting time is relatively small when applying a suitable number of servers, which influences the performance of the queuing model. Meanwhile, it can monitor the waiting time under different number of servers to dynamically adjust the number for queuing model.…”

“…en, the mean waiting time of M/M/k model can be predicted so we can obtain the mean waiting time for all tasks of W M/M/k in formula (11). ρ M/M/k � λ/kμ; M means Markov that tasks arrive according to Poisson process.…”

“…By utilizing the novel infrastructure of cloud and edge computing, instance-intensive processes can be solved easily to apply enough virtual machines for the elastic property of cloud environment [10,11]. All the users can access those services for running their software applications in pay-as-you-go fashion to avoid huge capital investment, energy consumption, and system maintenance [12].…”

Identity-based Provable Data Possession for Multicloud Storage with Parallel Key-Insulation

“…The audit key exposure issue is handled in some of the PDP schemes (Public Key Infrastructure (PKI-) based schemes and Identity-based schemes) for single cloud storage. In these schemes, the audit key evolves over time i.e., the lifetime of the data file is partitioned into time periods and the audit key is updated at the beginning of time periods [8][9][10][11][12][13][14][15]. Some of these schemes are secure in the preceding time periods of the exposed key (forward security).…”

“…These schemes still face the key-management problem. The Identity-based key-insulated scheme [15] is both forward and backward secure. In this scheme, the audit key is updated together by both the key updating server and the client.…”