Remote Data Integrity Research Articles

Video Data Integrity Verification Method Based on Full Homomorphic Encryption in Cloud System

Cloud computing is a new way of data storage, where users tend to upload video data to cloud servers without redundantly local copies. However, it keeps the data out of users' hands which would conventionally control and manage the data. Therefore, it becomes the key issue on how to ensure the integrity and reliability of the video data stored in the cloud for the provision of video streaming services to end users. This paper details the verification methods for the integrity of video data encrypted using the fully homomorphic crytosystems in the context of cloud computing. Specifically, we apply dynamic operation to video data stored in the cloud with the method of block tags, so that the integrity of the data can be successfully verified. The whole process is based on the analysis of present Remote Data Integrity Checking (RDIC) methods.

Dynamic Proofs of Retrievability for Coded Cloud Storage Systems

Cloud storage allows users to store their data in a remote server to get rid of expensive local storage and management costs and then access data of interest anytime anywhere. A number of solutions have been proposed to tackle the verification of remote data integrity and retrievability in cloud storage systems. Most of existing schemes, however, do not support efficient data dynamics and/or suffer from security vulnerabilities when involving dynamic data operations. In this paper, we propose a dynamic proof of retrievability scheme supporting public auditability and communication-efficient recovery from data corruptions. To this end, we split up the data into data blocks and encode each data block individually using outer code and inner code before outsourcing so that i) an update inside any data block only affects a few codeword symbols and ii) communication-efficient data repair for a breakdown server can be achieved and communication overhead for small data corruptions within a server can be eliminated. Based on the encoded data blocks, we utilize rb23Tree to enforce the data sequence for dynamic operations, preventing the cloud service provider from manipulating data block to pass the integrity check in the dynamic scenario. Formal security analysis and extensive experimental evaluations are conducted, showing that the proposed scheme is practical for use in cloud storage systems.

Remote Data Integrity Checking in Cloud Storage

As an important application in cloud computing, cloud storage provides data users flexible, scalable and high-quality data computation and storage services. A large number of data users opt to outsource their data files to the cloud storage. Because cloud storage services are not completely reliable, data users require trusty means to check the possession for their data files deployed to remote cloud servers. To overcome this critical issue, a few remote data integrity checking protocols have been presented. But many existing schemes have drawbacks in data dynamics or efficiency. So a new efficient remote data integrity checking protocol based on homomorphic hash function has been developed. The new scheme is certainly safe against replacing attack, replay attack and forgery attack based on a typical security model. To brace data dynamics like inertion, updation or deletion operations on file blocks, an operation record table is included to trace functions on data blocks, and also makes the cost of accessing operation record table almost less or firm. Prototype implementation shows that the scheme is beneficial for realworld applications.

RETRACTED ARTICLE: Certificateless remote data integrity checking using lattices in cloud storage

Due to the existence of many security threats in the cloud, remote data integrity checking (RDIC) is crucial for implementing secure cloud storage. It allows the data users to check the integrity of their data without retrieving whole data. As a solution to this, so far many researchers designed RDIC protocols using public key infrastructure (PKI). In this scenario, a public verifier must approve the data users’ certificates before the integrity checking task is to be performed. Thus, it suffers from the complex key management problem to approve the certificates, and it also incurs high computation cost over the public verifier. To solve the certificate management issue in PKI-based protocols and to provide security against quantum computer attacks, in this work, we design a Certificateless RDIC protocol using lattices. In this approach, the data integrity checking can be initiated using data owner’s identity (his name or email address) along with some secret information, which can guarantee the right public key is used for RDIC. Therefore, we can avoid the certificate management issue in PKI-based protocols to verify the data integrity. Finally, our security analysis guarantees that our Certificateless RDIC protocol is secure and it provides the privacy against the verifier, and performance analysis guarantees that it makes the less computation overhead over the public verifier.

Privacy-preserving public auditing for data integrity in cloud

Cloud computing which has collected extent concentration from communities of research and with industry research development, a large pool of computing resources using virtualized sharing method like storage, processing power, applications and services. The users of cloud are vend with on demand resources as they want in the cloud computing. Outsourced file of the cloud user can easily tampered as it is stored at the third party service providers databases, so there is no integrity of cloud users data as it has no control on their data, therefore providing security assurance to the users data has become one of the primary concern for the cloud service providers. Cloud servers are not responsible for any data loss as it doesn’t provide the security assurance to the cloud user data. Remote data integrity checking (RDIC) licenses an information to data storage server, to determine that it is really storing an owners data truthfully. RDIC is composed of security model and ID-based RDIC where it is responsible for the security of every server and make sure the data privacy of cloud user against the third party verifier. Generally, by running a two-party Remote data integrity checking (RDIC) protocol the clients would themselves be able to check the information trustworthiness of their cloud. Within the two party scenario the verifying result is given either from the information holder or the cloud server may be considered as one-sided. Public verifiability feature of RDIC gives the privilege to all its users to verify whether the original data is modified or not. To ensure the transparency of the publicly verifiable RDIC protocols, Let’s figure out there exists a TPA who is having knowledge and efficiency to verify the work to provide the condition clearly by publicly verifiable RDIC protocols.

A Comprehensive Survey on Public Auditing for Secure Cloud Storage

Cloud computing is the most popular paradigms used today by Industries & individual users to store data. This outsourcing releases user from capital as well as maintenance cost to own their data. But it brings new security challenges such as data integrity & privacy since user has no power of control on his own data. Advances in encryption & authentication techniques has improved security of data at cloud server(CS) but still it is not providing any certificate or assurance about cloud data to user. Most of the times users are not aware of the different controls employed by CS to protect integrity of data. Due to this lack of transparency in system, the user may lose trust on CS. Hence it is a need of user to check integrity of his data at regular intervals. Most of the researchers have given solutions to this problem with the help of cryptography techniques. External parties such as Third-Party Auditors (TPA) are performing audit to verify this remote data on behalf of user. This paper surveys different cryptography mechanisms proposed by different researchers to check integrity of remote data. Finally, we address future research challenges that need to be resolved by researchers to make system more transparent.

Data Integrity Checking with Reliable Data Transfer for Secure Cloud Storage

Currently, an increasing number of data owners prefer to store their data on remote servers due to a number of appealing advantages of cloud storage, say convenience and simplicity, scalability of the service and ubiquitous network access. However, outsourced data's transfer becomes a critical requirement for cloud users because of the emergence of various cloud storage services with different qualities of services. Therefore, the users might not only be anxious about the status of their data on cloud servers but also care whether the data are transferred entirely to the new cloud without corruption and whether the data on original cloud are discarded. To address these challenging issues, in this paper, we propose a novel auditing scheme for cloud storage services characterised by secure data transfer, provable data erasure, high error detection probability, confidential data storage. The proposed scheme can guarantee the integrity of remote data when the data are hosted on cloud servers and are transferred between two clouds, and secure deletion of the transferred data on the original cloud.

Effective and secure data storage in multi-cloud storage architectures

In multi-cloud storage, the data owners host their data and access the data from cloud servers. However, this new paradigm of data hosting service also introduces new security challenges such as integrity, availability and confidentiality of data. The prior works on ensuring remote data integrity in multi-cloud storage often lacks the address of confidentiality and availability issues, which are always important aspects of quality of service (QoS). In this paper, we propose an effective and secure data storage protocol in multiple cloud. In our design, we encrypt and encode the data before outsourcing into clouds to ensure confidentiality and availability of data respectively. Then, we consider the third party auditor (TPA) to verify the integrity of the data stored in the multi-cloud and extend verification method to support batch verification for multiple owners. Extensive security, performance analysis and experimental results show that our scheme is efficient and secure in multi-cloud.

Comment on id-based remote data integrity checking with data privacy preserving

Recently, an ID-based remote data integrity checking protocol with perfect data privacy preserving (IEEE Transactions on Information Forensics and Security, doi: 10.1109/TIFS.2016.2615853) was proposed to achieve data privacy protection and integrity checking. Unfortunately, in this letter, we demonstrate that their protocol is insecure. An active hacker can modify the stored data without being detected by the verifier in the auditing. And we also show malicious cloud server can convince the verifier that the stored data are kept intact after the outsourced data blocks are deleted. Finally, the reasons to produce such attacks are given.

Remote data integrity checking with server-side repair1

Remote data integrity checking with server-side repair1

Remote data integrity check for remotely acquired and stored stream data

Numerous sensors have been deployed to monitor processes or environments in various fields. These sensors produce stream data that are difficult to store in a central storage area owing to network bandwidth constraints and the massive amounts of storage necessary. Thus, it is sometimes efficient to store these data using remote storage services. However, integrity concerns arise when data are stored in remote storage. This paper presents a new integrity check method for remotely acquired and stored stream data. The proposed method uses a secure data acquisition and signature extraction module to produce integrity check metadata for the stream data. To share encryption keys used in signature generation and exchange messages like signatures, the module establishes a secure communication channel with the verifier that checks the integrity of the remote data. The signatures are the metadata of data records, which are used for integrity verification. Signatures for each data record are generated by a chain hash technique, but only some of them are kept in the signature store. The proposed method can successfully detect losses and modifications for remotely acquired and collected stream data.

A Survey on Remote Data Integrity Checking in PCS with ID-Based Proxy minded Record Uploading

A Survey on Remote Data Integrity Checking in PCS with ID-Based Proxy minded Record Uploading

A Survey on Identity-Based Proxy-Oriented Data Uploading and Remote Data Integrity Checking in Public Cloud

A Survey on Identity-Based Proxy-Oriented Data Uploading and Remote Data Integrity Checking in Public Cloud

Data Integrity Checking Protocol with Data Dynamics in Cloud Computing

We introduce a model for provable data possession (PDP) which allows a client that has stored data at an untrusted server to verify that the server possesses the original data without retrieving it. In a previous work, Ateniese et al. proposed a remote data integrity checking protocol that supports data partial dynamics. In this paper, we present a new remote data possession checking protocol which allows an unlimited number of file integrity verifications and efficiently supports dynamic operations, such as data modification, deletion, insertion and append. The proposed protocol supports public verifiability. In addition, the proposed protocol does not leak any private information to third-party verifiers. Through a specific analysis, we show the correctness and security of the protocol. After that, we demonstrate the proposed protocol has a good performance.

A new public remote integrity checking scheme with user and data privacy

With cloud storage, users can store their data files on a remote cloud server with a high quality on-demand cloud service and are able to share their data with other users. Since cloud servers usually are not regarded as fully trusted and the cloud data can be shared amongst users, the integrity checking of the remote files has become an important issue. A number of remote data integrity checking protocols have been proposed in the literature to allow public auditing of cloud data by a third party auditor (TPA). However, user privacy is not taken into account in most of the existing protocols. We believe that preserving the anonymity (i.e., identity privacy) of the data owner is also very important in many applications. In this paper, we propose a new remote integrity checking scheme which allows the cloud server to protect the identity information of the data owner against the TPA. We also define a formal security model to capture the requirement of user anonymity, and prove the anonymity of the proposed scheme. Moreover, we improve the existing security model for data privacy against the TPA, and show that an extended version of our protocol is secure under the strengthened security model.

Hierarchical remote data possession checking method based on massive cloud files

Cloud storage service enables users to migrate their data and applications to the cloud, which saves the local data maintenance and brings great convenience to the users. But in cloud storage, the storage servers may not be fully trustworthy. How to verify the integrity of cloud data with lower overhead for users has become an increasingly concerned problem. Many remote data integrity protection methods have been proposed, but these methods authenticated cloud files one by one when verifying multiple files. Therefore, the computation and communication overhead are still high. Aiming at this problem, a hierarchical remote data possession checking (hierarchical-remote data possession checking (H-RDPC)) method is proposed, which can provide efficient and secure remote data integrity protection and can support dynamic data operations. This paper gives the algorithm descriptions, security, and false negative rate analysis of H-RDPC. The security analysis and experimental performance evaluation results show that the proposed H-RDPC is efficient and reliable in verifying massive cloud files, and it has 32–81% improvement in performance compared with RDPC.

Identity-Based Remote Data Integrity Checking With Perfect Data Privacy Preserving for Cloud Storage

Remote data integrity checking (RDIC) enables a data storage server, say a cloud server, to prove to a verifier that it is actually storing a data owner’s data honestly. To date, a number of RDIC protocols have been proposed in the literature, but most of the constructions suffer from the issue of a complex key management, that is, they rely on the expensive public key infrastructure (PKI), which might hinder the deployment of RDIC in practice. In this paper, we propose a new construction of identity-based (ID-based) RDIC protocol by making use of key-homomorphic cryptographic primitive to reduce the system complexity and the cost for establishing and managing the public key authentication framework in PKI-based RDIC schemes. We formalize ID-based RDIC and its security model, including security against a malicious cloud server and zero knowledge privacy against a third party verifier. The proposed ID-based RDIC protocol leaks no information of the stored data to the verifier during the RDIC process. The new construction is proven secure against the malicious server in the generic group model and achieves zero knowledge privacy against a verifier. Extensive security analysis and implementation results demonstrate that the proposed protocol is provably secure and practical in the real-world applications.

Identity-Based Proxy-Oriented Data Uploading and Remote Data Integrity Checking in Public Cloud

More and more clients would like to store their data to public cloud servers (PCSs) along with the rapid development of cloud computing. New security problems have to be solved in order to help more clients process their data in public cloud. When the client is restricted to access PCS, he will delegate its proxy to process his data and upload them. On the other hand, remote data integrity checking is also an important security problem in public cloud storage. It makes the clients check whether their outsourced data are kept intact without downloading the whole data. From the security problems, we propose a novel proxy-oriented data uploading and remote data integrity checking model in identity-based public key cryptography: identity-based proxy-oriented data uploading and remote data integrity checking in public cloud (ID-PUIC). We give the formal definition, system model, and security model. Then, a concrete ID-PUIC protocol is designed using the bilinear pairings. The proposed ID-PUIC protocol is provably secure based on the hardness of computational Diffie-Hellman problem. Our ID-PUIC protocol is also efficient and flexible. Based on the original client's authorization, the proposed ID-PUIC protocol can realize private remote data integrity checking, delegated remote data integrity checking, and public remote data integrity checking.

REDICS: Remote Data Integrity Checking with Scalability

Existing remote data integrity checking mechanisms mainly focus on the properties such as retrievability, privacy-preserving and data-updating. Little attention has been paid to the property of scalability. Scalability here means that, when the scale of data expands to terabyte-level, the integrity checking system still works well. In this paper, we present a secure and efficient remote data integrity checking protocol named REDICS. Similar to the mechanisms of this field, REDICS is based on digital signature techniques. However, compared to other well-known approaches, REDICS not only ensures data integrity, but also enjoys the scalability feature. Experimental results show that the proposed protocol is feasible for real applications.

Remote Data Integrity Checking and Sharing in Cloud-Based Health Internet of Things

Remote Data Integrity Checking and Sharing in Cloud-Based Health Internet of Things