Secure Cloud Storage Research Articles

Data storage lock algorithm with cryptographic techniques

<span>The cloud computing had its impact far and wide, and Enterprise solutions are getting migrated to different types of clouds. The services are delivered from the data centers which are located all over the world. As the data is roaming with less control in any data centers, data security issues in cloud are very challenging. Therefore we need multi-level authentication, data integrity, privacy and above all encryption to safeguard our data which is stored on to the cloud. The data and applications cannot be relocated to a virtual server without much degree of security concern as there can be much confidential data or mission-critical applications. In this paper, we propose Data Storage Lock Algorithm (DSLA) to store confidential data thereby provides secure data storage in cloud computing based on cryptographic standards.</span>

Privacy-Preserving Public Auditing and Data Dynamics for Secure Cloud Storage Based on Exact Regenerated Code

Cloud storage allows users to store their data in the cloud to avoid local storage and management costs. Since the cloud is untrusted, the integrity of stored data in the cloud has become an issue. To address this problem, several public auditing schemes have been designed to verify integrity of the data in the cloud. However, these schemes have two drawbacks: public auditing may reveal sensitive data to verifier and does not address the data recovery problem efficiently. This article proposes a new privacy-preserving public auditing scheme with data dynamics to secure the data in the cloud based on an exact regenerated code. This scheme encodes the data for availability, then masks the encoded blocks with randomness for privacy of data and enables a public auditor to verify the integrity of the data. Further, this scheme also supports dynamic data updates. In addition, security and performance analysis proves that proposed scheme is provably secure and efficient.

Security and Privacy Cloud Storage as a Personal Digital Archive Storage Media

Increasing the utilization of internet technology gave birth to the new challenges in the protection of privacy and personal data, especially with the increasing collection practices, the utilization and dissemination of one's personal data. Regulatory instruments and failed to become one of the trigger mechanism of the weak protection of privacy and personal data in particular in the use of cloud storage technology. Cloud storage is a technology which uses the internet and a central server that much to keep or manage user data. Cloud storage allows users to use the application without the install so that personal files can be accessed anywhere and at any time through internet access. This technology enables efficiency by concentrating storage, data processing and memory. However, on the other hand, cloud storage has raised new legal issues, namely how the personal data of users of cloud storage are protected from a variety of disclosure and distribution by cloud storage service providers to third parties.

Intrusion-resilient public cloud auditing scheme with authenticator update

Key-exposure resilient cloud storage auditing can create a secure cloud storage during before and after the key-exposure period. However, the malicious cloud server can still tamper with and even discard the client’s files which are uploaded during the key-exposure period without being detected. So as to cope with this problem, we propose an intrusion-resilient public cloud auditing scheme, in which auditing authenticators are updated periodically to prevent the malicious cloud from tampering with these files using the exposed key. In addition, our scheme is secure unless the client and TPA (Third Party Auditor) are compromised in the same time period. This is different from Yu et al.’s scheme proposed in TIFS 2017, which is not secure if the client and TPA are compromised in different periods. Finally, the scheme can protect the client’s file privacy, and prevent a curious TPA from recovering the file. The security analysis and the results of the experiment indicate that the security and performance of the scheme are acceptable.

Application Research of Blockchain Technology in Financial Field

This paper focuses on the risks of fraud, credit risk, market risk and central institutions in traditional financial markets, as well as the main problems faced by blockchain technology in financial services such as supply chain finance, trade finance, credit reporting, transaction clearing, insurance, and securities. The problem, through the research and analysis of the basic model and composition technology of the block chain, proposes that the future blockchain technology in the financial field innovation and development direction is the block chain technology and distributed security authentication technology, artificial intelligence technology, security cloud storage technology and big data processing technology are effectively combined to design a financial service and management platform based on block chain

An IND-CCA2 secure post-quantum encryption scheme and a secure cloud storage use case

Code-based public key encryption (PKE) is a popular choice to achieve post-quantum security, partly due to its capability to achieve fast encryption/decryption. However, code-based PKE has larger ciphertext and public key sizes in comparison to conventional PKE schemes (e.g., those based on RSA). In 2018, Lau and Tan proposed a new rank metric code-based PKE scheme, which has smaller public key and ciphertext sizes compared to other code-based PKE schemes. They also proved that their scheme achieves IND-CPA security, assuming the intractability of the decisional rank syndrome decoding problem. It is known that IND-CCA2 security is the strongest and most popular security assurance for PKE schemes. Therefore, in this paper, we obtain a new code-based PKE scheme from Lau and Tan’s scheme, in order to inherit the underlying small public key and ciphertext sizes. However, our new scheme is shown to achieve IND-CCA2 security, instead of the weaker IND-CPA security. Specifically, the respective public key size and ciphertext size in our new scheme are 15.06 KB and 1.37 KB under 141-bit security level, and 16.76 KB and 1.76 KB under 154-bit security level. We then present a use case for the proposed scheme, that is for secure cloud storage.

Secure Cloud Storage using Secret Key Sharing and Proxy Re-Encryption Based Third Party Auditing Service

Cloud Computing (CC) provides an easy way to access and store the information by vast remote servers, instead of using personal computer. There is no physical control over personal data by user, hence some security issues may arise for users and organization to secure the data in cloud. The sensitive data can be hacked by attackers, so the integrity of data stored in cloud is a major concern for users. In this research work, the data integrity can be ensured by using Third Party Storage Auditing Service (TPSAS), where it satisfies all the requirements of users in cloud. The ultimate aim of this research is to avoid the unauthorized access of user’s data stored in the cloud. In this paper, two major problems are considered for attaining the integrity of data in the cloud. The first one is, the unauthorized user tries to modify the data, which is solved by the proposed TPSAS. The second problem considered in this research is, since the Cloud Service Provider (CSP) is semi trustable it can be malfunctioned at any time, which can be solved based on the secure secret key sharing algorithm and proxy re-encryption methodology. The secure secret key sharing is implemented based on the Shamir key sharing algorithm and the proxy re-encryption process is implemented based on the bear and lion proxy re-encryption methodology.

Authentication and Authorization Mechanism for Cloud Security

Cloud Computing is a most widespread and popular form of computing, promising high reliability for customers and providers both at the same point of time for many fields, where cloud storage security is based on Authentication and Authorization in cloud computing. Data is uploaded into a cloud and stored in a datacenter, Authentication and authorization are the major concerns to access the data stored in cloud by users from the data center. Security is a major issue; these are mainly deal with identity and access management, prevention of data loss and malware attack control management. In this paper we majorly concentrated on Authentication and Authorization to cloud access, we focused on identity management mechanism as cloud security solution that provides directory services for application access management. We discussed the protocols that support authorization and allows the communication across applications with the help of tokens instead of credentials. We even concentrated on the different mechanisms which plays a major role in designing a secured cloud computing architecture from malicious intrusions and attacks, it is a step to verify the presence and functioning of the cloud customers and cloud providers through security mechanisms to protect from different risks, threats and attacks. In this paper we discussed different security Algorithms and Authentication architecture along with the proposed algorithm, where analysis is done along with the computational evaluation with output

ABE Technique and Erasure Code for Secure Cloud Storage with Revocation

ABE Technique and Erasure Code for Secure Cloud Storage with Revocation

A COMBINED DATA STORAGE WITH ENCRYPTION AND KEYWORD BASED DATA RETRIEVAL USING SCDS-TM MODEL IN CLOUD

With the hasty growth of the Internet technologies and the need for increased computational methods, cloud computing has become a new paradigm in the business and IT endeavors. This technology facilitates the enterprises to move their confidential data into the cloud, where their data is stored in a remote data centers and accessed via the internet. These resources are controlled by third parties who may not be trustworthy and provide adequate data security. While this technology has many benefits, the security issues also increases. Various methods have been proposed for designing a secure cloud storage system.However many of the prior works suffers from security, confidentiality, and integrity issues that limit the functionalities of the storage system. Moreover, the existing schemes suffers delay due to the lack of online verification, and increasein the communication cost as data is retrieved back to the owner for every request made by the user. Hence it remains a challenge for constructing an efficient data storage and data retrieval. In this paper, we present the development of a secure and efficient cloud storage system, “SCDS-TM” that supports data confidentiality, data integrity, and data retrieval functionalities. With the use of Elliptic Curve Cryptography and storage correctness proof, weovercame the data confidentiality and data integrity issues. In order to augment the data retrieval functionality, we exploited a keyword search method called “coordinate matching” technique of capturing the related documents based upon the search query.The performance of the proposed method is analyzed based on various factors such as communication overhead,data transfer rate, query execution time, data security level, probability ratio and precision ratio.Thorough analysis of scrutinizing the privacy and efficiency allow our proposed method to be secure, efficient and offers a higher level of security with low communication overhead.

Providing a Secure Cloud Storage by Using Attribute Based Temporary Key Word Search Scheme

The cloud providers are not fully trusted in the accept of temporary keyword search on confidential data. Hence this is the main focus of this research, it is necessary to outsource data in the encrypted format. In the attribute-based keyword search scheme the authorized users generate some tokens which were in encrypted format and send them to cloud for the search operation. These tokens can be used to extract all the cipher texts which are generated at any time and contain the search token which were generated by authorized users. Since this may lead to some information leakage, a new cryptographic primitive is introduced which is more secure to propose a scheme in which the search tokens can only extract the cipher texts generated in a specified time interval and that cryptographic primitive is called key-policy attribute-based temporary keyword search (KPABTKS) which provide this property. To evaluate the security, we have to prove that the proposed scheme achieves the keyword secrecy property and is secure against selectively chosen keyword attack (SCKA) both in the random oracle model and Decisional Bilinear Diffie-Hellman (DBDH) assumption. And at last the research will show the complexity of the encryption algorithm is linear with respect to the number of the involved attributes.

Distributed scheme to authenticate data storage security in cloud computing

Cloud Computing is the revolution in current generation IT enterprise. Cloud computing displaces database and application software to the large data centers, where the management of services and data may not be predictable, where as the conventional solutions, for IT services are under proper logical, physical and personal controls. This aspect attribute, however comprises different security challenges which have not been well understood. It concentrates on cloud data storage security which has always been an important aspect of quality of service (QOS). In this paper, we designed and simulated an adaptable and efficient scheme to guarantee the correctness of user data stored in the cloud and also with some prominent features. Homomorphic token is used for distributed verification of erasure – coded data. By using this scheme, we can identify misbehaving servers. In spite of past works, our scheme supports effective and secure dynamic operations on data blocks such as data insertion, deletion and modification. In contrast to traditional solutions, where the IT services are under proper physical, logical and personnel controls, cloud computing moves the application software and databases to the large data centers, where the data management and services may not be absolutely truthful. This effective security and performance analysis describes that the proposed scheme is extremely flexible against malicious data modification, convoluted failures and server clouding attacks.

Encryption Cipher Text Retrieval Scheme Based on Fully Homomorphic Encryption Enterprise Cloud Storage

With the development of computer networks, cloud storage has become the mainstream way for people to store information. However, some essential information is disclosed during the storage process and the security of information has become the most concerned issue at present. In order to use the powerful computing of cloud storage to realize resource sharing between relevant departments without revealing information of other unrelated departments, this paper proposes an encryption cipher text retrieval scheme based on fully homomorphic encryption enterprise cloud storage (ECRS), and designs an Enterprise-side security model. The model uses full homomorphic encryption, decryption and spatial vector cipher text retrieval to achieve the security of information and resource sharing among enterprise departments. ECRS determines the employee who can encrypt or decrypt the files, and who has access to the files by modifying the number of attributes intersected between attribute sets. The solution can provide the security for cloud storage, resources for different departments, and improve the accuracy for cipher text retrieval.

Witness-based searchable encryption with optimal overhead for cloud-edge computing

Abstract The security and utilization of cloud storage are well-known open issues. Public key encryption with keyword search (PEKS) provides an important primitive to discuss applications in the field of cloud storage, where the receiver can use the trapdoor of the keyword to search. However, the internal attack derived by the cloud server is an inherent issue of PEKS. There are two breakthroughs, so-called authenticated PEKS (APKES) and witness-based searchable encryption (WBSE), to tackle this issue by modifying framework of PEKS. The existing schemes of APEKS and WBSE can offer security against the internal attacks, but they require the trapdoor size is proportional to c n where n is the total number of senders, and c is the constant size of the ciphertext or proportion to the security parameter. In this paper, we propose a new WBSE scheme with constant overhead as long as n is bounded. We analyze the security of our scheme based on homomorphic encryption and digital signature. Finally, we provide implementations to show the effectiveness on the cloud-edge model.

Secure and Cost Effective Public Cloud Storage for Managing Construction Firm Services

In the world of online business their comes a difficulty where we cannot assure the organization is trustworthy or except for the physical operational premises we look forward for the existence of the organization online i.e. a web site. Recently their area unit tremendous has begun where small and medium scale companies, UN agency take the responsibility to frame information in superhighway websites of organizations. These companies take just one occasion charges and develop a variety of static model which could show static knowledge. But, a corporation keeps on growing and dealing on further and extra fields for such state of affairs the data or illustration of information regarding organization should be changed that the net website should be turned off or passed in at a lower place construction mode that is-cost-efficient. To beat this we tend to stand live designing a model which could handle the illustration and modify it per user convenience. This might be achieved with the help of Dynamic net Application and MVC Structure.

ACTIVE-HASH-TABLE BASED PUBLIC AUDITING FOR SECURE CLOUD STORAGE

Public auditing scheme for secure cloud storage based on dynamic hash table, which is a new two-dimensional data structure located at a third-party auditor (TPA) to record the data property information for dynamic auditing. Differing form the existing works, the proposed scheme migrates the authorized information from the cloud services provider to the TPA and thereby significantly reduces the computational cost and communication overhead. Our scheme can also achieve higher updating efficiency than the state of the art schemes. In addition, we extend our scheme to support privacy preservation by combining the homomorphic authenticator based on the public key with the random masking generated by the TPA and achieve batch auditing by employing the aggregate BLS signature technique. We formally prove the security of the proposed scheme and evaluate the auditing performance by detailed experiments and comparisons with the existing ones. The results demonstrate that the proposed scheme can effectively achieve secure auditing for cloud storage and outperform the previous schemes’ in computation complexity, storage costs, and communication overhead.

SCSA: A Solution for Key Leakage in Cloud Storage Auditing

SCSA is the abbreviation of secure cloud storage auditing. Cloud storage auditing is a mechanism to ensure the integrity of data stored in cloud. Many Individuals and organizations depend on cloud to store their vast amount of data. After storing their data, client loses the control over their data, So it is natural that client become doubtful about the existence of their data which is stored in the cloud. Thus, this auditing scheme is introduced. This scheme helps the client to check whether their data is altered by any other third party, But this auditing scheme is also vulnerable to attacks. A secret key is required to prove the existence of original data in cloud. But that secret key is not secured properly, so in case if the key is lost, an attacker can make fake proofs of the data and thus data loss incidents can be made hidden from the clients, To avoid that, a solution is presented in this paper that is periodic key update. More efficient algorithm is used for updating key, and also this paper proposes two new algorithm for auditing purposes, In addition duplication of data is also avoided.

Third Party Public Auditing Scheme for Security in Cloud Storage

Third Party Public Auditing Scheme for Security in Cloud Storage

Survey on Revocation in Ciphertext-Policy Attribute-Based Encryption.

Recently, using advanced cryptographic techniques to process, store, and share data securely in an untrusted cloud environment has drawn widespread attention from academic researchers. In particular, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a promising, advanced type of encryption technique that resolves an open challenge to regulate fine-grained access control of sensitive data according to attributes, particularly for Internet of Things (IoT) applications. However, although this technique provides several critical functions such as data confidentiality and expressiveness, it faces some hurdles including revocation issues and lack of managing a wide range of attributes. These two issues have been highlighted by many existing studies due to their complexity which is hard to address without high computational cost affecting the resource-limited IoT devices. In this paper, unlike other survey papers, existing single and multiauthority CP-ABE schemes are reviewed with the main focus on their ability to address the revocation issues, the techniques used to manage the revocation, and comparisons among them according to a number of secure cloud storage criteria. Therefore, this is the first review paper analysing the major issues of CP-ABE in the IoT paradigm and explaining the existing approaches to addressing these issues.

Enhancing Cloud Storage Privacy (CSP) Based on Hybrid Cryptographic Techniques

Cloud computing has emerged as a new technology model for providing customized, high quality and reliable services for clients over the Internet. These clients can rent the services as long as they need rather than owning and maintaining large expensive IT infrastructure. One of the most used cloud services is the cloud storage as it provides storage on demand service. Nevertheless, due to the structure of cloud services which may not fully be managed by the cloud clients, the privacy and security of cloud storage become a significant challenge. Most of the previous works on the cloud security trying to solve the security challenges with data encryption techniques. However, these solutions do not protect data from being exposed or read by the server administrator or owner. In this paper, we have proposed a hybrid novel solution referred to as Cloud Storage Privacy (CSP) paradigm to enhance the privacy policies for cloud storage. This framework solution combines three of the superior cryptographic techniques: RSA, AES and Block-Chain. The solution not only secures the asset in the cloud but also protects the asset from unauthorized server access and improving user password protection. We have compared the proposed solution with the best based on our knowledge cloud storage services which are Google Drive and Dropbox in terms of performance and security. The result shows that the proposed solution outperforms existing services.