On the Security of a Data Integrity Auditing Scheme in Mobile Multi-cloud Environment

Abstract

Public auditing protocol is very important and efficient security service for ensuring the outsourced data since it can be used to audit the integrity of the stored data in cloud with a lower cost. Recently, Cao et al. presented a data integrity verification protocol in mobile Multi-cloud computing environment using the bilinear pairing. Unfortunately, in this paper, we show that their protocol is insecure against malicious cloud server's forgery attack and replacing attack. After deleting all the outsourced data, the malicious cloud server can pass the verification of data integrity without being found by the auditor. Then the corresponding detail attack is given and we also analyze the reason to produce such attack.