TY - JOUR
T1 - Towards Usable Cloud Storage Auditing
AU - Chen, Fei
AU - Meng, Fengming
AU - Xiang, Tao
AU - Dai, Hua
AU - Li, Jianqiang
AU - Qin, Jing
N1 - Funding Information:
This work was partially supported by National Natural Science Foundation of China under Grant No. (61872243, 61872197, 61672118, 61672358, U1713212), Guangdong Basic and Applied Basic Research Foundation (2020A151501489), the Science and Technology Plan Projects of Shenzhen (JCYJ20180305124126741), a project from Jiangsu Key Laboratory of Big Data Security &Intelligent Processing NJUPT, and a Grant from the Hong Kong Polytechnic University (Project No. YBZE).
Funding Information:
This work was partially supported by National Natural Science Foundation of China under Grant No. (61872243, 61872197, 61672118, 61672358, U1713212), Guangdong Basic and Applied Basic Research Foundation (2020A151501489), the Science and Technology Plan Projects of Shenzhen (JCYJ20180305124126741), a project from Jiangsu Key Laboratory of Big Data Security & Intelligent Processing NJUPT, and a Grant from the Hong Kong Polytechnic University (Project No. YBZE).
Publisher Copyright:
© 1990-2012 IEEE.
PY - 2020/11/1
Y1 - 2020/11/1
N2 - Cloud storage security has gained considerable research efforts with the wide adoption of cloud computing. As a security mechanism, researchers have been investigating cloud storage auditing schemes that enable a user to verify whether the cloud keeps the user's outsourced data undamaged. However, existing schemes have usability issues in compatibility with existing real world cloud storage applications, error-tolerance, and efficiency. To mitigate this usability gap, this article proposes a new general cloud storage auditing scheme that is more usable. The proposed scheme uses the idea of integrating linear error correcting codes and linear homomorphic authentication schemes together. This integration uses only one additional block to achieve error tolerance and authentication simultaneously. To demonstrate the power of the general construction, we also propose one detailed scheme based on the proposed general construction using the Reed Solomon code and the universal hash based MAC authentication scheme, both of which are implemented over the computation-efficient Galois field GF(28) GF (28). We also show that the proposed scheme is secure under the standard definition. Moreover, we implemented and open-sourced the proposed scheme. Experimental results show that the proposed scheme is orders of magnitude more efficient than the state-of-the-art scheme.
AB - Cloud storage security has gained considerable research efforts with the wide adoption of cloud computing. As a security mechanism, researchers have been investigating cloud storage auditing schemes that enable a user to verify whether the cloud keeps the user's outsourced data undamaged. However, existing schemes have usability issues in compatibility with existing real world cloud storage applications, error-tolerance, and efficiency. To mitigate this usability gap, this article proposes a new general cloud storage auditing scheme that is more usable. The proposed scheme uses the idea of integrating linear error correcting codes and linear homomorphic authentication schemes together. This integration uses only one additional block to achieve error tolerance and authentication simultaneously. To demonstrate the power of the general construction, we also propose one detailed scheme based on the proposed general construction using the Reed Solomon code and the universal hash based MAC authentication scheme, both of which are implemented over the computation-efficient Galois field GF(28) GF (28). We also show that the proposed scheme is secure under the standard definition. Moreover, we implemented and open-sourced the proposed scheme. Experimental results show that the proposed scheme is orders of magnitude more efficient than the state-of-the-art scheme.
KW - Cloud storage
KW - error correction code
KW - homomorphic authentication
KW - integrity checking
KW - usability
UR - http://www.scopus.com/inward/record.url?scp=85087199443&partnerID=8YFLogxK
U2 - 10.1109/TPDS.2020.2998462
DO - 10.1109/TPDS.2020.2998462
M3 - Journal article
AN - SCOPUS:85087199443
SN - 1045-9219
VL - 31
SP - 2605
EP - 2617
JO - IEEE Transactions on Parallel and Distributed Systems
JF - IEEE Transactions on Parallel and Distributed Systems
IS - 11
M1 - 9103614
ER -