Party Auditor Research Articles

CPDA: A Confidentiality-Preserving Deduplication Cloud Storage With Public Cloud Auditing

With growing popularity of cloud storage, the number of users of outsourcing data to cloud servers has increased dramatically. On the one hand, the rapidly increasing volume of data in the cloud is accompanied by a lot of data duplication. On the other hand, the cloud server stores only a unique copy of outsourced data in deduplication cloud storage system and the corruption or missing of the unique copy may bring immeasurable loss. Therefore, the file deduplication and integrity auditing are very important and how to securely and efficiently achieve them simultaneously needs to be settled urgently in academia and industry. In this paper, we propose a confidentiality-preserving deduplication cloud storage with public cloud auditing (CPDA). Firstly, our CPDA scheme achieves secure file deduplication on encrypted file, which supports public integrity auditing for the unique copy in the deduplication cloud storage system. Particularly, our CPDA scheme also realizes secure authentication tag deduplication. Secondly, our CPDA scheme utilizes the convergent encryption and random masking techniques to ensure data confidentiality during the file deduplication and integrity auditing process. Thirdly, our scheme not only supports each data owner to independently launch the integrity auditing of their own files, but also supports cloud server to periodically delegate the third party auditor to concurrently handle multiple auditing tasks to ensure the integrity of the outsourced files. Finally, the security of our scheme is formally proved and its performance is confirmed by numerical analyses and simulation experiments.

Efficient public integrity auditing with secure deduplication in cloud computing

With the rapid development of cloud computing, storing data to cloud server becomes an increasing trend which promotes integrity auditing and data deduplication to be two hot research topics. Recently, some existing schemes addressed a problem about integrity auditing with deduplication. However, these schemes did not support aggregating authentication tags of different users in the integrity auditing process, which caused a heavy computation cost to the third party auditor TPA, especially in the batch auditing process. In this paper, we propose an efficient public auditing with secure deduplication scheme using the idea of aggregate signature, which makes the TPA verify the correctness of integrity proof generated by the cloud service provider with a constant computation cost. Our scheme can also efficiently support batch auditing, whose auditing complexity on the TPA is independent of the number of auditing tasks. Finally, we prove that our scheme is secure and efficient through security analysis and performance evaluation.

Toward a Global Business Standard for Supply Chain Ethics

In the evaluation of the ethical efficacy of companies within international supply chains, a major global trade issue remains. While top-tier globally sourced and delivered goods and services meet high quality standards regardless of the place of origin, there often remains a perception of ethical failings by the global supply chain partners’ business practices. Governments, companies, and individuals often question the fairness of trade practices along international supply chains and note companies locate production facilities in regions of the world with more lenient oversight of practices deemed unethical or illegal elsewhere. Would a global ethics standard that moves beyond mere recommendations eliminate such tactics and improve global ethics and international trade? This article presents a critical analysis of the leading global standards for business ethics and ends with a call for a more inclusive and comprehensive universal code of ethical conduct within a global supply chain. Once implemented, this code would be supported by third party auditing and reporting leading to an internationally recognized certification designed to publicize compliance by all participants in global supply chains.

Secure Third Party Auditor(TPA) for Ensuring Data Integrity in Fog Computing

Fog computing is an extended version of Cloud computing. It minimizes the latency by incorporating Fog servers as intermediates between Cloud Server and users. It also provides services similar to Cloud like Storage, Computation and resources utilization and security.Fog systems are capable of processing large amounts of data locally, operate on-premise, are fully portable, and can be installed on the heterogeneous hardware. These features make the Fog platform highly suitable for time and location-sensitive applications. For example, the Internet of Things (IoT) devices isrequired to quickly process a large amount of data. The Significance of enterprise data and increased access rates from low-resource terminal devices demands for reliable and low- cost authentication protocols. Lots of researchers have proposed authentication protocols with varied efficiencies.As a part of our contribution, we propose a protocol to ensure data integrity which is best suited for fog computing environment

ID‐based dynamic replicated data auditing for the cloud

SummaryAs an essential component of cloud computing, cloud storage provides flexible data storage services for individuals and organizations. By storing multiple replicas of data in servers, cloud storage providers (CSPs) can improve availability and stability of the cloud storage service. To ensure that all data replicas of a cloud user are intact and completely stored in the CSP, many multi‐replica cloud auditing schemes have been proposed. However, such schemes are predominantly based on the public key infrastructure (PKI), which incurs complex certificate management. In addition, existing schemes do not consider support for sector‐level dynamic auditing. In this paper, we propose a fine‐grained dynamic multi‐replica data auditing scheme that has the following features: (1) it uses ID‐based cryptography to eliminate the cost of certificate management, (2) it supports efficient sector‐level dynamic operations on cloud user data, and (3) it optimizes the challenge algorithm to reduce the computational cost of the third party auditor (TPA). We show that the proposed scheme is provably secure based on a random oracle model. The performance analysis and experiments show the efficiency of the proposed scheme.

DIRA: Enabling decentralized data integrity and reputation audit via blockchain

Multi-cloud storage is a promising platform to offer resilient solution for clients in financial or confidentiality aspects. The research of provable data possession (PDP) schemes has long been a popular topic in the perspective of enhancing trust between clients and clouds. For multi-cloud, the works almost rely on centralized agent server called organizer to control the clouds and third party auditor (TPA) to realize public verification and reputation system. However, such centralized structure brings in the risk of collusion attack that malicious clouds can collaborate with TPA to deceive the client. This paper tries to explore a new way to construct decentralized integrity and reputation audit (DIRA) scheme, by taking advantage of improved blockchain with two-step transaction validation and removing all the centralized structure from the multi-cloud storage. The analysis shows that the DIRA scheme obtains the resistance to collusion attack.

Authorized identity-based public cloud storage auditing scheme with hierarchical structure for large-scale user groups

Identity-based public cloud storage auditing schemes can check the integrity of cloud data, and reduce the complicated certificate management. In such a scheme, one Private Key Generator (PKG) is employed to authenticate the identity and generate private keys for all users, and one Third Party Auditor (TPA) is employed to by users to check the integrity of cloud data. This approach is undesirable for large-scale users since the PKG and the TPA might not be able to afford the heavy workload. To solve the problem, we give a hierarchical Private Key Generator structure for large-scale user groups, in which a root PKG delegates lower-level PKGs to generate private keys and authenticate identities. Based on the proposed structure, we propose an authorized identity-based public cloud storage auditing scheme, in which the lowest-level PKGs play the role of TPA, and only the authorized lowest-level PKGs can represent users in their domains to check cloud data's integrity. Furthermore, we give the formal security analysis and experimental results, which show that our proposed scheme is secure and efficient.

A generic approach for integrity verification of big data

Data integrity verification is a primary issue for the prominent and unchallenged success of Big Data. The large scale of data includes extra security overheads on customers that used Big Data services. In Big Data environment, many security challenges have pinched out such as data security, malicious insider attack, cyber attack, and abuse of data. In this paper, we have analyzed and identified a novel data integrity verification technique that provides better performance, efficiency, and quick review of Big Data. The milestone of our work are algebraic signature, homomorphic tag, and Combinatorial Batch Codes (CBC). Homomorphic tag delegates a special verifiable value to each data blocks. CBC allocates integral data to store on Big Data servers. This research work used multiple third-party auditors for batch auditing which ensure data integrity in a Big Data environment. Our approach handles single point failure error of single Third Party Auditor (TPA) efficiently. Without using any additional data structure, it supports dynamic data operations. The security and performance analysis with comparative results show the genuine application of our approach within the latest Big Data environment.

An improved strong key exposure resilient auditing for cloud storage auditing

One of the most essential services of cloud computing is cloud storage. For cloud storage auditing, key exposure is a serious security problem which is solved by updating client secret keys regularly. However, this leads to local burdens to clients. A cloud source auditing with verifiable outsourcing of key updates paradigm was used to make the key updates as transparent for the client where Third Party Auditor (TPA) was played the role of authorized party. It holds only an encrypted version of client’s secret key. However, key exposure security problem is not fully solved by this scheme. So in this paper, improved strong key exposure resilient auditing is introduced to solve the key exposure security problem and improve the security of cloud storage. In the proposed paradigm, a novel key update technique is used where update message is created by TPA and it sends to the client. The client updates their signing secret key based on the update message and client’s private key. Moreover, public key is obtained from the client while updating a message which improves the security of cloud storage. Thus this scheme makes the malicious cloud unable to get the signing secret key in unexposed time periods.

Privacy Preserving Third Party Auditing for Secure Cloud Storage

Privacy Preserving Third Party Auditing for Secure Cloud Storage

A Lightweight And privacy-preserving public cloud auditing scheme without bilinear pairings in smart cities

Smart Cities have become a global strategy. However, massive data generated by various smart devices need to be uploaded and stored to the cloud servers. It is critical to ensure the integrity and privacy of the stored data. Quite a few public cloud auditing schemes have been proposed recently. However, most of them use bilinear pairing operations in the audit phase, requiring a significant time cost. Meanwhile, users (may be resource-constrained mobile devices or sensor nodes) still need to perform significant computations, like computing meta data for each data block, which bring a huge burden of calculation for these users. Moreover, those schemes cannot effectively protect users’ data privacy. Thus, we propose a lightweight and privacy-preserving public cloud auditing scheme for smart cities that does not require bilinear pairings. First, the proposed scheme is pairing-free, and allowing a third party auditor to generate authentication meta set on behalf of users. Furthermore, it also protects data privacy against the third party auditor and the cloud service providers. In addition, this new scheme can be easily and naturally extended to batch auditing in a multi-user scenario. Detailed security and performance analyses show that the proposed scheme is more secure and efficient compared to the existing public cloud auditing schemes.

Secure distributed adaptive bin packing algorithm for cloud storage

Cloud computing delivers highly scalable and flexible computing and storage resources on pay-per-use policy. Cloud Computing’s services for computation and storage are getting increasingly popular and many organizations are now moving their data from in-house data centers to the Cloud Storage Providers (CSPs). However, increasing user base and remote storage of data introduces challenges like inefficient usage of resources and insider threat to data at rest in the cloud storage. Time varying workload and data intensive applications are vulnerable to encounter such challenges while using cloud computing services. The consolidation of virtual machines to minimize the total number of active servers is a promising solution to conserve the energy but it requires efficient resource management strategies. Additionally, the encryption strategies and third party auditors to maintain data integrity are still in their developing stage and therefore the data at rest is still a concern for the cloud storage users. In this paper, we designed a distributed storage allocation architecture for fair utilization of storage resources and we also design an integrated end to end security framework for data at rest in cloud storage to eliminate insider threats.

Cloud Data Integrity Checking Using Third Party Auditor

Cloud Data Integrity Checking Using Third Party Auditor

Cloud Data Security Using Third Party Auditor

Cloud Data Security Using Third Party Auditor

Secure Auditing for the Data Stored on Cloud by Third Party Auditor

Secure Auditing for the Data Stored on Cloud by Third Party Auditor

Publicly verifiable searchable symmetric encryption based on efficient cryptographic components

Public verifiability is an interesting feature that cryptographic protocols, such as those used in cloud computing applications, may support. By public verifiability, the client can delegate the verification process to a third party auditor without revealing the private key or data. The main contribution of this paper is achieving public verifiability in the symmetric setting of searchable encryption (SE), separately for single and Boolean keyword search. While Public verifiability in SE has already been achieved using complex tools such as indistinguishability obfuscation or pairing, this work employs basic cryptographic components and assumptions, such as pseudo-random functions, one-way functions, digital signatures and the DDH assumption.

Preventing malicious packet dropping nodes in MANET using IFHM based SAODV routing protocol

MANETs have grown into a usually used network for countless applications. Mostly, a transmission medium perspective undergoes with thoughtful security worries, which may be focused to packet dropping. In the network, when packet forward the drooping of valuable packets may occur due to the presence of malicious nodes. The major sources in MANET for packet losses are malicious packet dropping and link error. A node can perform unkindly and could harm the process of sending the packet. In order to overcome the issues and to have an efficient detection process of malicious drop with better secure performances, the improved failure aware third party Auditor (IFTPA) based homomorphism linear authenticator (HLA) mechanism (IFHM) is proposed with the secured ad hoc on demand distance vector (SAODV). The proposed approach permitsthe trustworthiness verification of packet loss information and malicious node detection by dropping identifying of routing and data packet. Packet dropping is because of the both link error and occurrence of malicious nodes, which can identify by SAODV. To make certain efficiency, the authentication service is implemented in the protocol. However, to succeed storage scalability, the protocol implements the pseudo random function (PRF) in the system to fix the secret key of a client to its uniqueness using the secret key of its server.

Enforcing security in cloud environment using elliptic curve cryptography and third party auditing

This paper has been withdrawn.

Dynamic Public Data Auditing Schemes on Cloud: A Survey

Cloud computing provides elastic computing and storage resource to users. Because of the characteristic the data is not under user’s control, data security in cloud computing is becoming one of the most concerns in using cloud computing resources. To improve data reliability and availability, Public data auditing schemes is used to verify the outsourced data storage without retrieving the whole data. However, users may not fully trust the cloud service providers (CSPs) because sometimes they might be dishonest. Therefore, to maintain the integrity of cloud data, many auditing schemes have been proposed. In this paper, analysis of various existing auditing schemes with their consequences is discussed. Keywords: — Third Party Auditor (TPA), Cloud Service Provider (CSP), Merkle-Hash Tree (MHT), Provable data Possession (PDP), Dynamic Hash Table (DHT).

Comparative Study On Trustee Of Third Party Auditor To Provide Integrity And Security In Cloud Computing

One of the storage device in the market are cloud services, there can be some security issues and conflicts between the client and service provider to resolve the third party auditor issues. This comparative analysis ensure reliable data storage providing computing resources in the form of service rather than a product and utilities are provided to users over world wide web. Cloud is a platform where data remotely stores in the server and also protects the data against threats; cloud environment is a domain which comes under the property of users for further development from research scholars. The information technology huge number of clients which is accessing the data and updating the data application and services move to centralized huge data centre and services management trust into cloud environment the computing resources are under control of service provider and the third party auditor ensures the data integrity over the sourced data. Compare Information Technology audit is a manual work our Cloud Third party auditor mechanism in cloud standard audit not only stores or reads the data also updates the data through query.