Enhanced Certificateless Auditing Protocols for Cloud Data Management and Transformative Computation. Issue 6 (November 2020)

• Record Type: Journal Article
• Authors: Zhang, Jindan; Li, Zhihu; Wang, Baocang; Wang, Xu An; Ogiela, Urszula
• Is Part Of: Information processing & management. Volume 57:Issue 6(2020:Nov.)
• Publication Date: 2020-11
• Subjects: Information storage and retrieval systems -- Periodicals; Information science -- Periodicals; Systèmes d'information -- Périodiques; Sciences de l'information -- Périodiques; Information science; Information storage and retrieval systems; Periodicals; 658.4038
• DOI: 10.1016/j.ipm.2020.102287
• Languages: English
• ISSNs: 0306-4573

Abstract

Highlights: In this paper, we first discuss a typical example in the context of transformative computing: health care in the hospital and its outsourced data management in cloud servers. We point out certificateless storage auditing protocols can be used well in this context. The doctors need to do only a very little work to ensure the outsourced data on the cloud servers is unmodified. We also point out certificateless auditing protocols can be used in many other applications. We propose a cryptanalysis of two recently proposed certificateless public verifiable auditing protocols to protect against malicious auditors for cyber-physical-social system, namely, the SCLPV scheme by Zhang et al. and the scheme by Kang et al. We show that our proposed, improved versions of these two schemes can effectively address the identified security vulnerabilities, i.e., the forgeability of the tags in the SCLPV scheme and the forgeability of the semi-tags in the Kang et al. scheme. We also present a security analysis of the proposed improved protocols to demonstrate that they are more secure than their original counterparts. Our new protocols can be used as a very effective way for checking the integrity of outsourced cloud storage in the context of transformative computation. Abstract: Due the advent of new wireless communication, Internet of Things (IoT) and cloud computing, outsourcing the data processing and management to the cloud servers has become a typical transformative computing paradigm. In this context, a cloud auditing protocol is an effective way to check the data integrity for cloud data management. We present a cryptanalysis of two recently proposed certificateless public verifiable auditing protocols, the Zhang et al.'s protocol and the Kang et al.'s protocol. We argue that the tags in the Zhang et al.'s protocol and the semi-tags in the Kang et al.'s protocol can be forged, leading to insecure protocols. We propose improved versions of both protocols and analyze their security and efficiency. Our new protocols can be used as a very effective way for checking the integrity of outsourced cloud storage in the context of transformative computation.