Cloud Storage Service Providers Research Articles

A Framework on Group Data Sharing Based Agreement Implementation in Cloud Computing

Abstract -- Cloud computing and cloud storage have become hot topics in recent decades. Both are changing the way we live and greatly improving production efficiency in some areas. At present, due to limited storage resources and the requirement for convenient access, we prefer to store all types of data in cloud servers, which is also a good option for companies and organizations to avoid the overhead of deploying and maintaining equipment when data are stored locally. The cloud server provides an open and convenient storage platform for individuals and organizations, but it also introduces security problems. Due to the particularity of some industries, some enterprises have extremely high requirements on the security of data. If the data is lost or destroyed, the enterprise will bear serious consequences. The second problem is reliability. Only by ensuring that the data records are accurate and reliable can the data transmission be more secure and the enterprise win a higher reputation. In addition, the issue of cloud computing regulation is also very important. Only through efficient and orderly regulation can enterprises operate healthily and normally. At present, many small and medium sized enterprises need to spend huge costs on data storage, which will continue to increase with the expansion of data volume. However, the emergence of cloud storage services has brought the dawn for these enterprises, they will need to store the data transmission to the cloud, through the cloud storage service provider to solve this problem, so that they can save the cost of their own data center, use low price to achieve the purpose of data storage.

Reliable Techniques for Providing Secure Access Control for Cloud Storage on Mobile Devices

This research focuses on the development of a credible access control method for mobile device cloud storage. The proposed method involves a six-step process, including user registration and login, key generation, data encryption and upload, authentication theory between mobile devices, and data download and decryption. The method incorporates the use of mobile TPM (Trusted Platform Module) chips to ensure trust chain transmission during key exchange. Additionally, encryption based on elliptic curve cryptography is employed to reduce the key length and facilitate secure key sharing among multiple mobile devices. The proposed method offers enhanced security and reliability compared to conventional data encryption methods provided by cloud storage service providers, with minimal interaction data and increased confidence level. It holds significant practical value and exhibits a wide range of potential applications in the field of cloud storage security technology.

A novel symmetric cryptographic method to design block complexity for data security

The growth and development of Cloud Computing from its inception till today has made a tremendous progress and the evident of the same is seen in every walk of life. However considering data security there is a big hiatus. It is consistently under threat besides many guards. This in turn has created a research gap to find out the secure guard for Data Security. Data security is primarily dependent on encryption algorithms to secure data in the CC environment. Thus the encryption algorithm plays a predominant role in Cloud Storage (CS) which is a place to store all the data of the users or data owners. Hence the usage of CS has become inevitable in almost all fields including education, industry, business and the usage of the same is grown in leaps and bounds particularly in the pandemic. The metamorphosis of the encryption algorithm (i.e. AES, Triple DES, and Blowfish) has a complex formation to secure the data. However complex the formation is; it fails to cope with the modern-day processer evaluation. The complexity level tends to be low considering the performance of the modern-day processer evaluation. Hence an alternate solution is demanded and this research paper has attempted to meet the demand by introducing the new multi-layered cryptographic algorithm named as UK to secure the CS data. This UK algorithm follows an entirely new transformation procedure to secure the data. It creates huge complexity in reasonable encryption time, even though brute force needs to be more complex ever. The key and Metadata are not stored in any place so that the CS service provider will not be able to do anything in this structure. In this case, the database service providers have the hold of the encrypted data of the user which cannot be accessed by any attacking techniques. Hence, the CS provider becomes the warehouse maintainer.

Private blockchain-based encryption framework using computational intelligence approach

Electronic Health monitoring system has performed an essential role in managing healthcare monitoring. E-health can provide effective and valuable facilities for the patients to monitor. Though, there are protection disputes in the current E-Health system. The current e-health system, on the other hand, has security issues. Malevolent doctors may work together with cloud Storage Service Providers (CSPs) to interfere with patients' electronic health records (EHRs) or promptly leak EHR matter to other enemies for income. (EHRs). The malevolent doctors may conspire with the Patient Healthcare Monitoring Service Provider (PHMSP) to manipulate with the patients'. For profit, EHRs or directly divulge the EHR content of EHRs to other opponents. Block-chain has recently appeared as one of the most powerful methods in the protection and secrecy fields. It is assumed to be the promised security approach that will eventually replace the security challenges in existing e-health monitoring systems. Encryption in blockchain refers to technical methods that make accessing encrypted data difficult for unauthorized resources. This research proposed a blockchain-based encryption framework to provide security-based solutions using a computational intelligence methodology. The proposed approach provides better results in terms of 0.93 in the training phase and 0.91 in the validation accuracy.

Studi Literatur Presentation Attack dan Set Data Anti-Spoof Wajah

Face anti-spoof systems are needed in facial recognition systems to ward off attacks that present fake faces in front of the camera or image capture sensor (presentation attack). To build the system, a data set is needed to build a classification model that distinguishes the authenticity of the face of the input image received by the system. In the past decade anti-face spoof research has produced many data sets that are public, but often researchers need time to build or use the right public data sets that are used to build facial anti-spoof models. This article conducts a literature study of public data sets using a systematic literature review method to find out the types of attacks that appear on the facial anti-spoof system, the development process, evolution, and availability of facial anti-spoof data sets. From the search and selection results based on the specified criteria, there were 42 primary research manuscripts in the period 2010 to 2021. The results of the literature study found that there were three trends in the development of anti-spoof facial data sets, namely, 1) data sets with a very large number, 2) datasets with different types of facial samples, and 3) datasets constructed with various devices and sensors. These various public data sets can be accessed freely but with special rules such as agreeing to an end user license agreement document from the researcher or the institution that owns the data set. However, there are also datasets that cannot be accessed due to invalid URLs or due to special rules from the cloud storage service provider where the datasets are stored.

IMPLEMENTASI PRIVATE CLOUD STORAGE MENGGUNAKAN RASPBERRY PI

<p class="senaabstractisi">Cloud storage is a cloud computing model that stores data on a server that is accessed via the internet. Cloud storage is an option for storing data. The existing cloud storage service providers provide services at a fairly high price and cannot be configured according to the wishes of the user. Therefore, the author plans to implement a private cloud that uses a raspberry pi as a server for file management and Nextcloud as an interface. Nextcloud is an application that is very suitable for running cloud storage services. Nextcloud can share files with other users and share via a link via the web. To run cloud storage, users can access the server address with an intermediary web browser.</p>The research method used in this research is Research and Development. Hardware test results obtained if used by more than 5 devices simultaneously will result in Requested Timed Out (RTO) on the Nextcloud page, in the future you can replace a better micro SD with fast data read/write access speed.

Blockchain-based privacy preserving e-health system for healthcare data in cloud

Cloud-assisted electronic health (e-health) system has played an important role in the management of healthcare data, which can provide efficient and convenient storage services for the patients to store their electronic health records (EHRs). However, there are the security challenges in the existing e-health system, where the malicious doctors may collude with cloud storage service provider (CSP) to tamper with the patients’ EHRs, or directly reveal the content of EHRs to other adversaries for profit. In this paper, we propose a blockchain-based privacy preserving e-health system to ensure the security and confidentiality of the patients’ EHRs. In the system, we introduce the pairing-based cryptography to generate the tamper-proof records of the EHRs and allow the patients to integrate them into the transactions deployed on the blockchain, which can make the patients’ EHRs verifiable and protect them from illegal modification. Moreover, we will design secure payment protocols by performing blockchain-based smart contracts, which can enable the patients and hospital to reliably pay for the diagnostic and storage service, respectively. Security analysis and the performance evaluation demonstrate that our proposed scheme is secure and efficient with a limited computation overhead.

Publicly verifiable outsourced data migration scheme supporting efficient integrity checking

With the rapid development of cloud storage, an increasing number of data owners prefer to store their large-scale data on the remote cloud for greatly reducing the burden of maintaining the data by themselves. Since different cloud storage service providers offer distinct quality of data storage services, secure outsourced data migration becomes a fundamental requirement for data owners to change their cloud storage service providers. As a result, how to guarantee the correctness and integrity of the outsourced data blocks when they are being migrated from one semi-trusted cloud host to another becomes a primary concern of data owners. To solve this problem, we propose a blockchain-based publicly verifiable data migration scheme supporting efficient data integrity checking for cloud storage in this paper. Specifically, the data owner can dynamically change the cloud storage service providers and securely migrate the outsourced data from one cloud host to another, without retrieving the transferred data from the original cloud host, and checking the transferred data integrity in the target cloud host. By making use of blockchain, our proposed scheme can simultaneously achieve data migration and integrity checking without interacting with a third party auditor, thus avoiding the problems of service interruption and privacy leakage caused by the single-point-of-failure of the third party auditor, which is much better than the previous schemes. Meanwhile, our proposed scheme is provable secure in the random oracle model. Finally, we also develop a prototype implementation of our proposed scheme and compare the efficiency with some existing schemes. The experimental result demonstrates that our proposed scheme is more efficient and practical.

Petri Net based modeling and analysis for improved resource utilization in cloud computing.

The cloud is a shared pool of systems that provides multiple resources through the Internet, users can access a lot of computing power using their computer. However, with the strong migration rate of multiple applications towards the cloud, more disks and servers are required to store huge data. Most of the cloud storage service providers are replicating full copies of data over multiple data centers to ensure data availability. Further, the replication is not only a costly process but also a wastage of energy resources. Furthermore, erasure codes reduce the storage cost by splitting data in n chunks and storing these chunks into n + k different data centers, to tolerate k failures. Moreover, it also needs extra computation cost to regenerate the data object. Cache-A Replica On Modification (CAROM) is a hybrid file system that gets combined benefits from both the replication and erasure codes to reduce access latency and bandwidth consumption. However, in the literature, no formal analysis of CAROM is available which can validate its performance. To address this issue, this research firstly presents a colored Petri net based formal model of CAROM. The research proceeds by presenting a formal analysis and simulation to validate the performance of the proposed system. This paper contributes towards the utilization of resources in clouds by presenting a comprehensive formal analysis of CAROM.

Privacy preserving file auditing schemes for cloud storage using verifiable random function

Users leverage the cloud storage to store data by uploading files to the cloud storage. They can use it to share files to work on collaborative projects. However, during administrative operations by cloud storage service provider (CSSP), there may be some inadvertent corruption of files during data migration and backup. Due to heavy demands, the cloud service provider may not update the desired files immediately when requested by the owner. As a result, a user of the file may receive an obsolete file. To ensure integrity and freshness of files, third party auditing (TPA) services should be supported by CSSP while maintaining the confidentiality of user files and preserving privacy of users. In this paper, three privacy preserving auditing schemes for files stored in cloud has been proposed. Verifiable random function, merkle hash tree and ciphertext-policy attribute-based encryption has been used to achieve the desired goals.

Scalable Hash From Triplet Loss Feature Aggregation For Video De-duplication

The producing, sharing and consuming life cycle of video content creates massive amount of duplicates in video segments due to variable bit rate representation and fragmentation in the playbacks. The inefficiency of this duplicates to storage and communication motivate researchers in both academia and industry to come up with computationally efficient video deduplication solutions for storage and CDN providers. Moreover, the increasing demands of high resolution and quality aggravate the status of heavy burden of cluster storage side and restricted bandwidth resources. Hence, video de-duplication in storage and transmission is becoming an important feature for video cloud storage and Content Delivery Network (CDN) service providers. Despite of the necessity of optimizing the multimedia data de-duplication approach, it is a challenging task because we should match as many as possible duplicated videos under not removing videos by mistake. The current video de-duplication schemes mostly relies on the URL based solution, which is not able to deal with non-cacheable content like video, which the same piece of content may have totally different URL identification and fragmentation and different quality representations further complicate the problem. In this paper, we propose a novel content based video segmentation identification scheme that is invariant to the underlying codec and operational bit rates, it computes robust features from a triplet loss deep learning network that captures the invariance of the same content under different coding tools and strategy, while a scalable hashing solution is developed based on Fisher Vector aggregation of the convolutional features from the Triplet loss network. Our simulation results demonstrate the great improvement in terms of large scale video repository de-duplication compared with state-of-the-art methods.

Fine-grained assured data deletion scheme based on attribute association

ABSTRACT With the rapid development of cloud computing technology, an increasing number of enterprises and users store their data in the cloud to achieve convenient storage and data sharing. However, once data is stored in a third-party cloud storage service provider, the privacy and integrity of the data can be compromised. This paper proposes a fine-grained assured data deletion scheme based on attribute association (ADAA), which aims to protect security and achieve assured deletion of outsourced data. The scheme uses standard encryption technology to ensure the privacy and integrity of the data and implements secure deletion based on attribute revocation. At the same time, it incorporates access policy graphs and policy combinations to achieve fine-grained access control and data sharing. In addition, it associates attributes to achieve access control by using a homomorphic hash function, and it establishes a deletion confirmation feedback mechanism to provide a reliable guarantee. By experimenting and comparing with related schemes, ADAA is proved to be safe and efficient, and it provides a practical method for the assured deletion of cloud storage data.

Privacy Preserving File Auditing Schemes for Cloud Storage using Verifiable Random Function

Users leverage the cloud storage to store data by uploading files to the cloud storage. They can use it to share files to work on collaborative projects. However, during administrative operations by cloud storage service provider (CSSP), there may be some inadvertent corruption of files during data migration and backup. Due to heavy demands, the cloud service provider may not update the desired files immediately when requested by the owner. As a result, a user of the file may receive an obsolete file. To ensure integrity and freshness of files, third party auditing (TPA) services should be supported by CSSP while maintaining the confidentiality of user files and preserving privacy of users. In this paper, three privacy preserving auditing schemes for files stored in cloud has been proposed. Verifiable random function, merkle hash tree and ciphertext-policy attribute-based encryption has been used to achieve the desired goals.

Cloud Data Storage using Attribute based Encryption with Verifiable Outsourcing Auditor Security Schemes

Cloud storage services turned out to be continuously elegant. Owing to the implication of security, a few cloud storage secret composing schemes are anticipated to monitor data from those that don't approach. Every single such plan accepted that cloud storage providers region unit safe and can't be hacked; at the same time, in pursue, a few experts may drive cloud storage providers to uncover client insider facts or confidential data on the cloud, hence by and large going around storage mystery composing schemes. Amid this paper, we tend to bless our style for a pristine cloud storage mystery composing subject that permits cloud storage providers to make persuading false client privileged insights to protect client security. Since coercers can't reveal whenever acquired insider facts zone unit genuine or not, the cloud storage providers ensure that client security keeps on being immovably secured. The vast majority of the anticipated schemes expect cloud storage service providers or dependable outsiders taking care of key administration square measure solid and can't be hacked; nonetheless, in pursue, a few substances would conceivably capture interchanges among clients and cloud storage providers at that point urge storage providers to unfasten client privileged insights by misuse government control or diverse proposes that. All through this case, scrambled information square measure thought to be known and storage provider's square measure asked for to unfasten client insider facts

Security and Privacy Cloud Storage as a Personal Digital Archive Storage Media

Increasing the utilization of internet technology gave birth to the new challenges in the protection of privacy and personal data, especially with the increasing collection practices, the utilization and dissemination of one's personal data. Regulatory instruments and failed to become one of the trigger mechanism of the weak protection of privacy and personal data in particular in the use of cloud storage technology. Cloud storage is a technology which uses the internet and a central server that much to keep or manage user data. Cloud storage allows users to use the application without the install so that personal files can be accessed anywhere and at any time through internet access. This technology enables efficiency by concentrating storage, data processing and memory. However, on the other hand, cloud storage has raised new legal issues, namely how the personal data of users of cloud storage are protected from a variety of disclosure and distribution by cloud storage service providers to third parties.

An Attribute-Based Assured Deletion Scheme in Cloud Computing

With the rapid development of cloud computing, it has been increasingly attractive for individuals and groups to store and share data via cloud storage. Once stored in the third-party cloud storage service providers, the privacy and integrity of outsourced data should be attached with more attention as a challenging task. This article presents the attribute-based assured deletion scheme (AADS) which aims to protect and assuredly delete outsourced data in cloud computing. It encrypts outsourced data files with standard cryptographic techniques to guarantee the privacy and integrity, and assuredly deletes data upon revocations of attributes. AADS could be applied to solve important security problems by supporting fine-grained attribute-based policies and their combinations. According to the comparison and analysis, AADS provides efficient data encryption and flexible attribute-based assured deletion for cloud-stored data with an acceptable concession in performance cost.

Decentralized Server-aided Encryption for Secure Deduplication in Cloud Storage

Cloud storage provides scalable and low cost resources featuring economies of scale based on multi-tenant architecture. As the amount of data outsourced grows explosively, data deduplication, a technique that eliminates data redundancy, becomes essential. However, deduplication leads to problems with data confidentiality, thereby necessitating secure deduplication solutions. Server-aided encryption schemes have been proposed to achieve the strongest confidentiality but with the cost of managing a key server (KS). Previous schemes, however, are based on a centralized KS that uses only a single secret key assuming a single KS in the system. In cloud storage where multi-tenancy and scalability are crucial, such schemes degrade not only the effectiveness of deduplication but also the scalability with increasing users. In this paper, we extend server-aided encryption to a decentralized setting that consists of multiple KSs. The key idea of our proposed scheme is to construct an inter-KS deduplication algorithm, by which a cloud storage service provider can perform deduplication over ciphertexts from different KSs within a tenant or across tenants. This way, our scheme simultaneously offers flexibility of KS management and cross-tenant deduplication over encrypted data. The novelty of the approach is using a decentralized architecture that does not require any centralized entities for the coordination or pre-sharing of secrets among KSs. Therefore, it allows cloud storage services to offer high deduplication efficiency and scalability while preserving strong data confidentiality. We show the result of performance analysis on the proposed scheme by conducting extensive experiments. In addition, our security analysis demonstrate that the proposed scheme satisfies all desired security properties.

A Symmetric Key Based Deduplicatable Proof of Storage for Encrypted Data in Cloud Storage Environments

Over the recent years, cloud storage services have become increasingly popular, where users can outsource data and access the outsourced data anywhere, anytime. Accordingly, the data in the cloud is growing explosively. Among the outsourced data, most of them are duplicated. Cloud storage service providers can save huge amounts of resources via client-side deduplication. On the other hand, for safe outsourcing, clients who use the cloud storage service desire data integrity and confidentiality of the outsourced data. However, ensuring confidentiality and integrity in the cloud storage environment can be difficult. Recently, in order to achieve integrity with deduplication, the notion of deduplicatable proof of storage has emerged, and various schemes have been proposed. However, previous schemes are still inefficient and insecure. In this paper, we propose a symmetric key based deduplicatable proof of storage scheme, which ensures confidentiality with dictionary attack resilience and supports integrity auditing based on symmetric key cryptography. In our proposal, we introduce a bit-level challenge in a deduplicatable proof of storage protocol to minimize data access. In addition, we prove the security of our proposal in the random oracle model with information theory. Implementation results show that our scheme has the best performance.

Practical, Provably Secure, and Black-Box Traceable CP-ABE for Cryptographic Cloud Storage

Cryptographic cloud storage (CCS) is a secure architecture built in the upper layer of a public cloud infrastructure. In the CCS system, a user can define and manage the access control of the data by himself without the help of cloud storage service provider. The ciphertext-policy attribute-based encryption (CP-ABE) is considered as the critical technology to implement such access control. However, there still exists a large security obstacle to the implementation of CP-ABE in CCS. That is, how to identify the malicious cloud user who illegally shares his private keys with others or applies his keys to construct a decryption device/black-box, and provides the decryption service. Although several CP-ABE schemes with black-box traceability have been proposed to address the problem, most of them are not practical in CCS systems, due to the absence of scalability and expensive computation cost, especially the cost of tracing. Thus, we present a new black-box traceable CP-ABE scheme that is scalable and high efficient. To achieve a much better performance, our work is designed on the prime order bilinear groups that results in a great improvement in the efficiency of group operations, and the cost of tracing is reduced greatly to O ( N ) or O ( 1 ) , where N is the number of users of a system. Furthermore, our scheme is proved secure in a selective standard model. To the best of our knowledge, this work is the first such practical and provably secure CP-ABE scheme for CCS, which is black-box traceable.

ICAuth: A secure and scalable owner delegated inter-cloud authorization

This paper proposes a secure inter-cloud authorization scheme using ciphertext-policy attribute-based encryption (CP-ABE). The proposed scheme enables data owners to access files which are stored in cloud storage servers, managed by a service provider, using web applications which may be registered with another service provider. To access the stored files using a web application, the data owner can issue one time access tokens. For issuing the access tokens, the data owner does not need collaboration with any other entities in the cloud environments. In addition, single access token can be used to access several files, which reduces the number of required access tokens. Moreover, ciphertext re-encryption is performed to prevent unauthorized access. The re-encryption is delegated to a cloud storage service provider to reduce overhead on the data owner side. The security analysis of the proposed scheme has been done under the Decisional Bilinear Diffie–Hellman assumption and it is proven to be secure against Chosen Plaintext Attack. Moreover, performance analysis of the proposed scheme shows that it incurs low overhead in terms of communication and storage and it takes minimum delay and computation costs while providing better functionality.