Security enhancement of an auditing scheme for shared cloud data. Issue 1 (7th April 2022)

• Record Type: Journal Article
• Authors: Rabaninejad, Reyhaneh; Attari, Mahmoud Ahmadian; Asaar, Maryam Rajabzadeh; Aref, Mohammad Reza
• Is Part Of: International journal of internet protocol technology. Volume 15:Issue 1(2022)
• Page Start: 60
• Page End: 68
• Publication Date: 2022-04-07
• Subjects: cloud storage -- shared data -- public auditing -- security analysis; File Transfer Protocol (Computer network protocol) -- Periodicals; Multicasting (Computer networks) -- Periodicals; 004.678
• Languages: English
• ISSNs: 1743-8209

Abstract

In cloud storage services, public auditing mechanisms allow a third party to verify integrity of the outsourced data on behalf of data owners without the need to retrieve data from the cloud server. In some applications, the identity of data users should be kept private from the third party auditor. Oruta is a privacy preserving public auditing scheme for shared data in the cloud which exploits ring signatures to protect the identity privacy. In this paper, we propose two attacks and demonstrate that the scheme is insecure and a dishonest server can arbitrarily tamper the outsourced data without being detected by the auditor. We also propose a solution to remedy this weakness with the minimum overhead and without losing any desirable features of the scheme. Performance evaluation demonstrates acceptable efficiency of improved scheme in comparison to the original protocol.