Search

Cloud Computing is an alternative to conventional IT Outsourcing. As a result, cloud computing migration between organizations is rapidly growing. The adoption of this technology brings many positive aspects but prescribes various risks and concerns. An organization that officially provides its cloud computing services to external providers and implies that its IT functions and process are outsourced to third-party providers of BPO services. For privacy-making public audit processes in dynamic cloud data storage, a modified Boneh-Lynn-Shachame Dynamic Auditing (MBLSDA) algorithm is suggested in this paper. The proposed algorithm executes an audit process for multiple users based on a batch audit simultaneously and effectively to enable Third Party Auditing (TPA). This paper integrates the homomorphic authenticator in an algorithm of dynamic signing audit by random marking in terms of the privacy conserving public auditing process. When the user of cloud service, store or update the data, it encrypts using Rijndal algorithm, and Boneh-Lynn-Shacham signature generation is used for key generation. Finally, a hybrid of these a proposed Modified Boneh-Lynn-Shacham Signing Dynamic audit the data to provide the security. [ABSTRACT FROM AUTHOR]

The various data collected by urban sensor devices need a huge storage space. The cloud's powerful calculation ability provides decent performance support and reduces the overhead on local storage. There are many kinds of data collected by urban sensor devices, and the same kind of sensors often need to upload large numbers of files together, which are usually private, so secure cloud storage in group members is essential. However, the cloud may try to modify or hide data for its own benefit, which requires the detection of a third-party auditor. This paper puts forward a new public audit scheme. Some changes have been made to the way of generating the private key, the parameters of key generation come from the feature information set of the same sensor. When the two information sets are close enough, the correctness of the authenticator generated by this file can be verified. When the sensor is revoked due to damage or loss, this scheme will effectively revoke and regenerate the private key with less overhead, thus preventing the leakage of data privacy. This also avoids the huge overhead caused by re-downloading data to generate authenticators in traditional schemes. In addition, our scheme is effective in tracking malicious members and reducing the computing overhead of the group. Finally, the experimental results show the effectiveness and practicality of the proposed scheme. [ABSTRACT FROM AUTHOR]

The security of the data in the cloud server suffers great challenges, and how to ensure the integrity of the outsourced data in the cloud servers is a problem that should be solved. Cloud data auditing technique is such a solution , which allows to check data integrity without retrieving them from the cloud. In case single-copy data may be violated by malicious attackers, Zhang et al. proposed a multi-copy cloud data auditing scheme MCAM in 2020. However, in their scheme, an attacker can forge the evidence for integrity verification only by exploiting public information and the cloud server can compromise the integrity verification even it does not store any data. In this paper, we identify these security flaws in MCAM and design a new evidence verification algorithm to fix them. Then, we propose a multi-copy cloud data auditing scheme based on our evidence verification algorithm and MCAM. In security analysis, we prove that our multi-copy cloud data auditing scheme can fix the security flaws of MCAM. Thus, our scheme is more secure than MCAM. In performance analysis, we show that our scheme is more communication efficient than MCAM. Finally, we point out one potential application of our scheme. [ABSTRACT FROM AUTHOR]

Aiming at solving the challenges of the Internet of Vehicles (IoV), such as privacy sensitive data exposing, data being vulnerable to unauthorized access and tampered with and the single point of failure of the cloud server, this paper introduces a blockchain-enabled data access method based on attribute-based encryption. To enhance the privacy protection, the attributes are hidden and all generated transactions are recorded on the blockchain for auditing. Even if it is untrusted to a third party, it can guarantee the user's control over his own data. To reduce the computation cost, decentralized edge nodes jointly maintain the blockchain and assist users with limited resources to complete most of the calculations. Meanwhile, the use of smart contracts not only reduces the verification workload, but also evaluates multiple factors such as the communication range, communication time, and calculation overhead of the roadside unit (RSU) to ensure that the vehicle can receive messages in a timely manner. In addition, timely updating the attributes can reduce the user's computational burden and increase the flexibility of the system. Numeral experiments to show the proposed scheme has many advantages of over others such as the storage cost, the whole time consume of the proposed algorithms and the proxy computation cost. [ABSTRACT FROM AUTHOR]

Aiming at solving the challenges of the Internet of Vehicles (IoV), such as privacy sensitive data exposing, data being vulnerable to unauthorized access and tampered with and the single point of failure of the cloud server, this paper introduces a blockchain-enabled data access method based on attribute-based encryption. To enhance the privacy protection, the attributes are hidden and all generated transactions are recorded on the blockchain for auditing. Even if it is untrusted to a third party, it can guarantee the user's control over his own data. To reduce the computation cost, decentralized edge nodes jointly maintain the blockchain and assist users with limited resources to complete most of the calculations. Meanwhile, the use of smart contracts not only reduces the verification workload, but also evaluates multiple factors such as the communication range, communication time, and calculation overhead of the roadside unit (RSU) to ensure that the vehicle can receive messages in a timely manner. In addition, timely updating the attributes can reduce the user's computational burden and increase the flexibility of the system. Numeral experiments to show the proposed scheme has many advantages of over others such as the storage cost, the whole time consume of the proposed algorithms and the proxy computation cost. [ABSTRACT FROM AUTHOR]

In recent years, blockchain holds promise to impact a wide range of application areas, but it still suffers from technical challenges such as security and scalability. The increase in the number of transactions puts blockchains under data storage pressure. The emergence of cross-chain technologies connects different blockchains and relieves the data storage pressure. However, the existing research generally focuses on the technical realization of cross chain, lacking in-depth research on consistency issues like data integrity verification of cross-chain interaction. In this paper, we propose a decentralized cross-chain data integrity verification scheme (DCIV) from the point of view of governing the chain by chain. We adopt supervision chain to audit the integrity of data in cross-chain interaction. We preprocess the off-chain original data in the form of Merkle tree. Before cross-chain interaction, we process the data with KZG polynomial commitment. During the auditing period, the supervision chain generates a challenge and verifies the integrity of cross-chain data. In particular, we add audit digests into the structure of transactions in blockchain to reduce the storage burden during auditing. Theoretical and experimental analyses demonstrate that DCIV can verify the integrity of data in cross-chain interaction, achieving secure and accurate cross-chain data sharing. [ABSTRACT FROM AUTHOR]

Cloud computing is a model that enables users to store their data remotely and enjoy the applications and services provided by this model on demand through a common set of configurable computing resources, without the burden of local data storage as well as maintenance. However, users no longer have physical possession of external data, and this makes the task of protecting data integrity in cloud computing extremely important so that users can use the cloud storage as if it were local, without worrying about the need to verify its integrity. Hence, public cloud storage auditing is critical, so users can use a Third-party auditor (TPA) to verify data integrity. In order to provide effective TPA security, the audit should not achieves any security vulnerabilities to the privacy of user data and does not provide any additional online burden to the user. In this paper, we propose an effective public auditing system for cloud data based on the signature of Boneh-Lynn-Shacham (BLS), in order to ensure public auditing and maintain data privacy. The proposed system also realizes batch auditing and data dynamic process. In addition, the proposed system enhances the level of security authentication through an Automatic Blocker Protocol (ABP) to protect the system from unauthorized TPA. An extensive security and performance analysis shows that the proposed system is very secure and effective [ABSTRACT FROM AUTHOR]

Cloud Data storage services allows users to easily store and access their data with any type of connected devices. However, since the data is outsourced, the user needs an auditing mechanism that enables him to check the integrity of his data without recovering it. Furthermore, the auditing should not incur a large computational and communication cost, especially since users should not have any computational issues while checking the integrity of their data using a computationally challenged device (smart-phone, tablet...). In this paper we propose an auditing scheme that provides to users an efficient and secure process to audit their outsourced data. The proposed scheme has a low computation overhead on the users and enables them to delegate the data verification process to a third party auditor while maintaining a low computational and communication overhead without jeopardizing the confidentiality of the stored data. [ABSTRACT FROM AUTHOR]