An integrity verification scheme of cloud storage for internet-of-things mobile terminal devices. Issue 92 (May 2020)

• Record Type: Journal Article
• Authors: Lu, Xiuqing; Pan, Zhenkuan; Xian, Hequn
• Is Part Of: Computers & security. Issue 92(2020)
• Publication Date: 2020-05
• Subjects: Cloud storage -- Integrity -- VB_MHT -- Blind form -- Privacy; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2019.101686
• Languages: English
• ISSNs: 0167-4048

Abstract

Highlight: We propose a lightweight auditing scheme in which TPA executes both block-tag generation and integrity verification instead of data owner. We redesign MHT as Version Based Merkle Hash Tree (VB_MHT), which can preserve the information of block node fresh and improve security in integrity verification of the shared data. We design a method for data owner to share cloud data with other users. The users can download and utilize the shared cloud data as long as he has authorization of data owner. We prove the security of the proposed scheme and evaluate the performance of computation and communication cost. The results show that our scheme is more efficient than the previous ones. Abstract: Because mobile cloud computing has many advantages such as large storage capacity, low cost and scalability, most data owners prefer to store their data on cloud servers to share with other users. However, the shared data in remote cloud servers is out of data owner's control and exposes to lots of security problems such as data integrity. So far, more and more auditing schemes have been proposed to verify data integrity, but in most of them, blocks are stored in plain text and leaked the privacy of data. In addition, data owner is in charge of generating block tags, which no doubt increases computation burden of data owner. In this paper, we firstly propose a secure and lightweight integrity verification scheme for Internet of Things (IoT) mobile terminal devices. Secondly, we design a data sharing method for data owner to share cloud data with authorized users. Finally, we redesign Merkle Hash Tree that can preserve the information of block node fresh and improve security in integrity verification of the shared data. As a result, the integrity verification scheme guarantees privacy and efficiency of sharing data on cloud and achieves lightweight operations of data owners.