Provable data transfer from provable data possession and deletion in cloud storage

Xue, Liang; Ni, Jianbing; Li, Yannan; Shen, Jian

doi:10.1016/j.csi.2016.08.006

Cited by 51 publications

(44 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The Proposed Scheme. To verify the integrity for shared data efficiently [15,[25][26][27][28][29][30], our scheme is designed to achieve the following goals.…”

Section: System Architecturementioning

confidence: 99%

Integrity Audit of Shared Cloud Data with Identity Tracking

Yun

et al. 2019

Security and Communication Networks

View full text Add to dashboard Cite

More and more users are uploading their data to the cloud without storing any copies locally. Under the premise that cloud users cannot fully trust cloud service providers, how to ensure the integrity of users’ shared data in the cloud storage environment is one of the current research hotspots. In this paper, we propose a secure and effective data sharing scheme for dynamic user groups. (1) In order to realize the user identity tracking and the addition and deletion of dynamic group users, we add a new role called Rights Distribution Center (RDC) in our scheme. (2) To protect the privacy of user identity, when performing third party audit to verify data integrity, it is not possible to determine which user is a specific user. Therefore, the fairness of the audit can be promoted. (3) Define a new integrity audit model for shared cloud data. In this scheme, the user sends the encrypted data to the cloud and the data tag to the Rights Distribution Center (RDC) by using data blindness technology. Finally, we prove the security of the scheme through provable security theory. In addition, the experimental data shows that our proposed scheme is more efficient and scalable than the state-of-the-art solution.

show abstract

“…The Proposed Scheme. To verify the integrity for shared data efficiently [15,[25][26][27][28][29][30], our scheme is designed to achieve the following goals.…”

Section: System Architecturementioning

confidence: 99%

Integrity Audit of Shared Cloud Data with Identity Tracking

Yun

et al. 2019

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

“…If the cloud does not delete the data as required, the generated proof will not pass the verification of users. Xue et al 19 combine these three protocols together for the first time and propose a new type of data tracking auditing scheme, which guarantees the security of outsourced data in the whole life cycle and fosters the development of secure cloud storage.…”

Section: Introductionmentioning

confidence: 99%

“…In this article, the flaw is pointed out. As learning the work of Chen et al, 20 we propose another data integrity auditing protocol that is more efficient and secure compared to existing approaches, and we integrate their protocol and replace the integrity checking module of Xue et al 19 with it.…”

Section: Introductionmentioning

confidence: 99%

New provable data transfer from provable data possession and deletion for secure cloud storage

Liu

Xiao

Wang

et al. 2019

International Journal of Distributed Sensor Networks

View full text Add to dashboard Cite

With the continuous and rapid development of cloud computing, it becomes more popular for users to outsource largescale data files to cloud servers for storage and computation. However, data outsourcing brings convenience to users while it also causes certain security problems. The integrity of outsourced data needs to be periodically checked by users to protect their data. Also, the secure transfer of cloud data can avoid data losses to users. Aiming at solving these problems in the data outsourcing process, a provable data transfer scheme based on provable data possession and deletion is recently proposed by Xue et al. However, we found a security flaw in Xue et al.'s scheme. Concretely, the block tags can be forged in their scheme. In this article, we first give a brief review of Xue et al.'s scheme and then a detailed attack is shown. To remove the security flaw, an improved scheme is proposed. Furthermore, we replace the integrity checking protocol of their proposal with a more efficient protocol to improve the efficiency of data integrity auditing.

show abstract

“…After Ateniese et al 's first work [2], people proposed many public auditing schemes [3][4][5][6][7][8][9][10][11][12][13][14][15][16] for data integrity check. In a typical public auditing scheme, there are three characters, one data user, one cloud server, and one auditor.…”

Section: Introductionmentioning

confidence: 99%

Attack on Privacy‐Preserving Public Auditing Schemes for Cloud Storage

Kang

Wang

Shao

2017

Mathematical Problems in Engineering

View full text Add to dashboard Cite

With the development of Internet, cloud computing has emerged to provide service to data users. But, it is necessary for an auditor on behalf of users to check the integrity of the data stored in the cloud. The cloud server also must ensure the privacy of the data. In a usual public integrity check scheme, the linear combination of data blocks is needed for verification. But, after times of auditing on the same data blocks, based on collected linear combinations, the auditor might derive these blocks. Recently, a number of public auditing schemes with privacy-preserving are proposed. With blinded linear combinations of data blocks, the authors of these schemes believed that the auditor cannot derive any information about the data blocks and claimed that their schemes are provably secure in the random oracle model. In this paper, with detailed security analysis of these schemes, we show that these schemes are vulnerable to an attack from the malicious cloud server who modifies the data blocks and succeeds in forging proof information for data integrity check.

show abstract

Provable data transfer from provable data possession and deletion in cloud storage

Cited by 51 publications

References 19 publications

Integrity Audit of Shared Cloud Data with Identity Tracking

Integrity Audit of Shared Cloud Data with Identity Tracking

New provable data transfer from provable data possession and deletion for secure cloud storage

Attack on Privacy‐Preserving Public Auditing Schemes for Cloud Storage

Contact Info

Product

Resources

About