Improved publicly verifiable auditing protocol for cloud storage. (8th October 2020)

• Record Type: Journal Article
• Authors: Zhang, Jindan; Lin, Chuan; Ogiela, Urszula; Nedjah, Nadia; Sangaiah, Arun K.; Wang, Xuan
• Other Names: Awan Irfan guestEditor.; Younas Muhammad guestEditor.; Benbernou Salima guestEditor.; Ogiela Lidia guestEditor.; Leu Fang‐Yie guestEditor.; Fiore Ugo guestEditor.
• Is Part Of: Concurrency and computation. Volume 33:Number 23(2021)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2020-10-08
• Subjects: attack -- auditing protocol -- cloud storage -- tag generation; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.6049
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: Outsourcing data to cloud servers is a popular service for data owners, however, how to check the integrity and freshness of the outsourced data is very challenge. Recently, Jin et al. proposed a cloud auditing protocol with full integrity and freshness support for cloud data, unfortunately in this article, we show their proposal is not secure. Concretely, the cloud servers can forge the authentication tag and thus has the ability to forge proof of data possession, which obviously invalidates their cloud auditing protocol. We also give a new cloud auditing protocol and analysis its security and performance. The results show our protocol is more efficient and secure.