Efficient public auditing scheme for cloud storage supporting user revocability with proxy re-signature scheme

doi:10.11772/j.issn.1001-9081.2016.07.1816

Journal of Computer Applications ›› 2016, Vol. 36 ›› Issue (7): 1816-1821.DOI: 10.11772/j.issn.1001-9081.2016.07.1816

Previous Articles Next Articles

Efficient public auditing scheme for cloud storage supporting user revocability with proxy re-signature scheme

ZHANG Xinpeng^1,2, XU Chunxiang¹, ZHANG Xinyan³, SAI Wei², HAN Xingyang², LIU Guoping²

1. School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu Sichuan 611731, China;
2. Logistic Information Center, Joint Logistics Department of Chengdu Military Region, Chengdu Sichuan 610015, China;
3. Department of Information, General Hospital of Chengdu Military Region, Chengdu Sichuan 610083, China

Received:2015-12-16 Revised:2016-02-23 Online:2016-07-10 Published:2016-07-14
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61370203), the Science and Technology Support Program of Sichuan Province (2012SZ0162).

基于代理重签名的支持用户可撤销的云存储数据公共审计方案

张新鹏^1,2, 许春香¹, 张新颜³, 赛伟², 韩兴阳², 刘国平²

1. 电子科技大学计算机科学与工程学院, 成都 611731;
2. 成都军区联勤部后勤信息中心, 成都 610015;
3. 成都军区总医院信息科, 成都 610083

通讯作者: 张新鹏
作者简介:张新鹏(1978-),男,四川成都人,博士研究生,主要研究方向:密码学、信息安全;许春香(1966-),女,四川成都人,教授,博士,主要研究方向:密码学、信息安全;张新颜(1976-),女,四川成都人,博士,主要研究方向:医学信息管理;赛伟(1962-),男,四川成都人,高级工程师,硕士,主要研究方向:软件工程、网络安全;韩兴阳(1979-),男,四川成都人,工程师,硕士,主要研究方向:网络安全、自动化;刘国平(1972-),男,四川成都人,工程师,硕士,主要研究方向:网络安全、自动化。
基金资助:
国家自然科学基金重点资助项目（61370203）；四川省科技支撑计划项目（2012SZ0162）。

Abstract

Abstract: Due to user revocability, the new data manager needs to verify the integrity of the former data manager's management data stored in the cloud server, which is obviously inevitable in reality. In order to solve this issue, an efficient privacy-preserving public auditing scheme for cloud storage scheme was proposed. Firstly, in the proposed scheme based on unidirectional proxy re-signature, the proxy re-signature key was generated by the current data manager's private key and the former public key, which did not leak any information, to realize transferring of ownership data caused by the users revocability securely. Secondly, it was proved that the proposed scheme could protect any malicious cloud server from generating the forged response proof which could pass the verification to cheat the Third Party Auditor (TPA). Moreover, the random masking technique was employed to prevent the curious TPA from revealing the primitive data blocks. Compared with the Padna scheme, even though the proposed scheme adds the new functions but its communication overhead in the process of auditing and computational cost are also lower than Panda's.

Key words: cloud storage, proxy re-signature, privacy-preserving, integrity verification, user revocation

摘要： 针对用户动态可撤销需要新的数据管理员对其前任所管理的数据进行完整性验证的问题，基于单向代理重签名技术提出了具有隐私保护的支持用户可撤销的云存储数据公共审计方案。首先，该方案中所采用的单向代理重签名算法，其代理重签名密钥由当前用户私钥结合已撤销用户公钥生成，不存在私钥泄露问题，能够安全实现数据所有权的转移；其次，该方案证明了恶意的云服务器不能产生伪造的审计证明响应信息来欺骗第三方审计者（TPA）通过审计验证过程；更进一步，该方案采用了随机掩饰码技术，能够有效防止好奇的第三方审计者恢复原始数据块。和Panda方案相比较，所提方案在增加抗合谋攻击功能的基础上，其审计过程中通信开销与计算代价仍全部低于Panda方案。

关键词: 云存储, 代理重签名, 隐私保护, 完整性验证, 用户可撤销

CLC Number:

TP309.7

ZHANG Xinpeng, XU Chunxiang, ZHANG Xinyan, SAI Wei, HAN Xingyang, LIU Guoping. Efficient public auditing scheme for cloud storage supporting user revocability with proxy re-signature scheme[J]. Journal of Computer Applications, 2016, 36(7): 1816-1821.

张新鹏, 许春香, 张新颜, 赛伟, 韩兴阳, 刘国平. 基于代理重签名的支持用户可撤销的云存储数据公共审计方案[J]. 计算机应用, 2016, 36(7): 1816-1821.

References

[1] HUBBARD D, SUTTON M. Top threats to cloud computing v1.0[EB/OL].[2015-09-10]. https://cloudsecurityalliance.org/topthreats/csathreats.v1.0.pdf.
[2] YU S, WANG C, REN K, et al. Achieving secure, scalable, and fine-grained data access control in cloud computing[C]//INFOCOM'10:Proceedings of the 29th Conference on Information Communications. Piscataway, NJ:IEEE, 2010:534-542.
[3] LI M, YU S, REN K, et al. Securing personal health records in cloud computing:patient-centric and fine-grained data access control in multi-owner settings[C]//SecureComm 2010:Proceedings of the 6th International ICST Conference on Security and Privacy in Communication Networks. Berlin:Springer, 2010:89-106.
[4] RAJU M, LANITHA B. Survey about cloud computing threats[J]. International Journal of Computer Science and Information Technologies, 2014, 5(1):384-389.
[5] JUELS A, KALISKI B S, Jr. PORs:proofs of retrievability for large files[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. New York:ACM, 2007:584-597.
[6] ATENIESE G, BURNS R, CURTMOLA R, et al. Provable data possession at untrusted stores[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. New York:ACM, 2007:598-609.
[7] SHACHAM H, WATERS B. Compact proofs of retrievability[C]//ASIACRYPT'08:Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security:Advances in Cryptology. Berlin:Springer, 2008:90-107.
[8] WANG C, WANG Q, REN K, et al. Privacy-preserving public auditing for data storage security in cloud computing[C]//INFOCOM'10:Proceedings of the 29th Conference on Information Communications. Piscataway, NJ:IEEE, 2010:525-533.
[9] WANG Q, WANG C, LI J, et al. Enabling public verifiability and data dynamics for storage security in cloud computing[C]//ESORICS'09:Proceedings of the 14th European Conference on Research in Computer Security. Berlin:Springer, 2009:355-370.
[10] WANG C, CHOW S S M, WANG Q, et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers, 2013, 62(2):362-375.
[11] ZHU Y, HU H, AHN G J, et al. Cooperative provable data possession for integrity verification in multicloud storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2012, 23(12):2231-2244.
[12] WANG B, LI B, LI H. Knox:privacy-preserving auditing for shared data with large groups in the cloud[C]//ACNS'12:Proceedings of the 10th International Conference on Applied Cryptography and Network Security. Berlin:Springer, 2012:507-525.
[13] WANG B, LI H, LI M. Privacy-preserving public auditing for shared cloud data supporting group dynamics[C]//ICC 2013:Proceedings of 2013 IEEE International Conference on Communications. Piscataway, NJ:IEEE, 2013:1946-1950.
[14] WANG B, LI B, LI H. Oruta:privacy-preserving public auditing for shared data in the cloud[C]//CLOUD 2012:Proceedings of the 2012 IEEE 5th International Conference on Cloud Computing. Piscataway, NJ:IEEE, 2012:295-302.
[15] YUAN J, YU S. Efficient public integrity checking for cloud data sharing with multi-user modification[C]//Proceedings of the 2014 IEEE Conference on Computer Communications. Piscataway, NJ:IEEE, 2014:2121-2129.
[16] WANG B, LI B, LI H. Panda:public auditing for shared data with efficient user revocation in the cloud[J]. IEEE Transactions on Services Computing, 2015, 8(1):92-106.
[17] LIBERT B, VERGNAUD D. Multi-use unidirectional proxy re-signatures[C]//Proceedings of the 15th ACM Conference on Computer and Communications Security. New York:ACM, 2008:511-520.

Efficient public auditing scheme for cloud storage supporting user revocability with proxy re-signature scheme

基于代理重签名的支持用户可撤销的云存储数据公共审计方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	LI Xiuyan, LIU Mingxi, SHI Wenbo, DONG Guofang. Efficient dynamic data audit scheme for resource-constrained users [J]. Journal of Computer Applications, 2021, 41(2): 422-432.
[2]	ZHANG En, LI Huimin, CHANG Jian. Verifiable k-means clustering scheme with privacy-preserving [J]. Journal of Computer Applications, 2021, 41(2): 413-421.
[3]	TANG Xin, ZHOU Linna. Response obfuscation based secure deduplication method for cloud data with resistance against appending chunk attack [J]. Journal of Computer Applications, 2020, 40(4): 1085-1090.
[4]	FU Wei, GU Chenyang, GAO Qiang. Multi-user sharing ORAM scheme based on attribute encryption [J]. Journal of Computer Applications, 2020, 40(2): 497-502.
[5]	LI Zhen, YAO Hanbing, MU Yicheng. Secure ranked search scheme based on Simhash over encrypted data [J]. Journal of Computer Applications, 2019, 39(9): 2623-2628.
[6]	WANG Haiyong, PENG Yao, GUO Kaixuan. CP-ABE access control scheme based on proxy re-encryption in cloud storage [J]. Journal of Computer Applications, 2019, 39(9): 2611-2616.
[7]	LIU Yudong, WANG Xu'an, TU Guangsheng, WANG Han. Cloud outsourcing data secure auditing protocol throughout whole lifecycle [J]. Journal of Computer Applications, 2019, 39(7): 1954-1958.
[8]	MING Yang, HE Baokang. Attribute revocation and verifiable outsourcing supported multi-authority attribute-based encryption scheme [J]. Journal of Computer Applications, 2019, 39(12): 3556-3562.
[9]	ZHOU Jian, JIN Yu, HE Heng, LI Peng. Dynamic cloud data audit model based on nest Merkle Hash tree block chain [J]. Journal of Computer Applications, 2019, 39(12): 3575-3583.
[10]	LI Jing, LIU Dongshi. Reliability evaluation model for cloud storage systems with proactive fault tolerance [J]. Journal of Computer Applications, 2018, 38(9): 2631-2636.
[11]	BAI Ping, ZHANG Wei, LI Cong, WANG Xu'an. Verifiable ciphertext retrieval scheme with user revocation [J]. Journal of Computer Applications, 2018, 38(6): 1640-1643.
[12]	CHEN Bo, HE Lianyue, YAN Weiwei, XU Zhaomiao, XU Jun. Portable operating system interface of UNIX compatibility technology in mass small distributed file system [J]. Journal of Computer Applications, 2018, 38(5): 1389-1392.
[13]	NING Xueli, LUO Yonglong, XING Kai, ZHENG Xiaoyao. Frequent location privacy-preserving algorithm based on geosocial network [J]. Journal of Computer Applications, 2018, 38(3): 688-692.
[14]	YANG Hongyu, WANG Yue. Multi-keyword ciphertext search method in cloud storage environment [J]. Journal of Computer Applications, 2018, 38(2): 343-347.
[15]	WANG Yifei, LUO Yonglong, YU Qingying, LIU Qingqing, CHEN Wen. Trajectory privacy-preserving method based on information entropy suppression [J]. Journal of Computer Applications, 2018, 38(11): 3252-3257.