Efficient and Scalable Query Authentication for Cloud-Based Storage Systems with Multiple Data Sources

IEEE Transactions on Services Computing

Volumn 10, Issue 4, 2017, Pages 520-533

  Chandrasekhar, Santosh ^a   Singhal, Mukesh ^a  

^a University of California   (United States)

Author keywords

aggregate authentication tags; Cloud based storage systems; discrete log; multi trapdoor hash functions; query authentication

Indexed keywords

AGGREGATES; AUTHENTICATION; DIGITAL STORAGE; FUNCTION EVALUATION; HASH FUNCTIONS;

AUTHENTICATION TAGS; COMPUTATION OVERHEADS; DISCRETE LOG; MULTIPLE DATA SOURCES; QUERY AUTHENTICATIONS; SECURITY AND PERFORMANCE; STORAGE SERVICE PROVIDERS; STORAGE SYSTEMS;

SEARCH ENGINES;

EID: 85029366507     PISSN: 19391374     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSC.2015.2500568     Document Type: Article

References (55)

1. EMC Corporation, "EMC Digital Universe Study - with research and analysis by IDC," 2014.
2. V. Bourne, "Microsoft SMB hosted IT commentary report 140110," Feb. 2010.
3. Dell and Intel, "Manage your changing IT needs," A European Report on Servers & Storage for Small Business, Feb. 2012.
4. Microsoft, "Drivers & inhibitors to cloud adoption for small and midsize businesses," Findings of Microsoft SMB Business in the Cloud 2012 research report conducted in conjunction with Edge Strategies Inc., Feb. 2012.
5. W. Wang, Z. Li, R. Owens, and B. K. Bhargava, "Secure and efficient access to outsourced data," in Proc. 1st ACM Cloud Comput. Security Workshop, Chicago, IL, USA, Nov. 13, 2009, pp. 55-66.
6. K. O. Inc., "Data loss in a virtual Environment - an emerging problem," White paper, 2011.
7. M. A. Shah, R. Swaminathan, and M. Baker, "Privacy-preserving audit and extraction of digital contents," Cryptology ePrint Archive, Rep. 2008/186, 2008, available from http://eprint.iacr.org/.
8. B. Panzer-Steinde, "Data integrity, CERN/IT draft 1.3," 2007.
9. L. N. Bairavasundaram, A. C. Arpaci-Dusseau, R. H. Arpaci-Dusseau, G. R. Goodson, and B. Schroeder, "An analysis of data corruption in the storage stack," ACM Trans. Storage, vol. 4, no. 3, pp. 8:1-8:28, 2008.
10. E. Pinheiro, W. Weber, and L. A. Barroso, "Failure trends in a large disk drive population," in Proc. 5th USENIX Conf. File Storage Technol., San Jose, CA, USA, Feb. 13-16, 2007, pp. 17-28.
11. B. Schroeder and G. A. Gibson, "Disk failures in the real world: What does an MTTF of 1,000,000 hours mean to you?" in Proc. 5th USENIX Conf. File Storage Technol., Feb. 13-16, San Jose, CA, USA, 2007, pp. 1-16.
12. E. Mykletun, M. Narasimha, and G. Tsudik, "Authentication and integrity in outsourced databases," ACM Trans. Storage, vol. 2, no. 2, pp. 107-138, 2006.
13. Q. Zheng, S. Xu, and G. Ateniese, "Efficient query integrity for outsourced dynamic databases," in Proc. ACM Workshop Cloud Comput. Security, Raleigh, NC, USA, Oct. 19, 2012, pp. 71-82.
14. A. Mendoza, "Cold storage in the cloud: Trends, challenges, and solutions," Intel, White paper, 2013.
15. "The health information technology for economic and clinical health act," Public Law 111-5, 111th Congress, Feb. 17, 2009.
16. K. Yang and X. Jia, "An efficient and secure dynamic auditing protocol for data storage in cloud computing," IEEE Trans. Parallel Distrib. Syst., vol. 24, no. 9, pp. 1717-1726, Sep. 2013.
17. J. Yuan and S. Yu, "Efficient public integrity checking for cloud data sharing with Multi-user modification," in Proc. IEEE Conf. Comput. Commun., Toronto, ON, Canada, Apr. 27-May 2, 2014, pp. 2121-2129.
18. C. Wang, Q. Wang, K. Ren, and W. Lou, "Privacy-preserving public auditing for data storage security in cloud computing," in Proc. IEEE 29th Int. Conf. Comput. Commun., Joint Conf. IEEE Comput. Commun. Soc., San Diego, CA, USA, Mar. 15-19, 2010, pp. 525-533.
19. Q. Wang, C. Wang, K. Ren, W. Lou, and J. Li, "Enabling public auditability and data dynamics for storage security in cloud computing," IEEE Trans. Parallel Distrib. Syst. vol. 22, no. 5, pp. 847-859, May 2011.
20. C. Wang, S. S. M. Chow, Q. Wang, K. Ren, and W. Lou, "Privacypreserving public auditing for secure cloud storage," IEEE Trans. Comput., vol. 62, no. 2, pp. 362-375, Feb. 2013.
21. B. Wang, B. Li, and H. Li, "Knox: Privacy-preserving auditing for shared data with large groups in the cloud," in Proc. 10th Int. Conf. Appl. Cryptography Netw. Security, Singapore, Jun. 26-29, 2012, pp. 507-525.
22. B. Wang, H. Li, X. Liu, F. Li, and X. Li, "Efficient public verification on the integrity of multi-owner data in the cloud," J. Commun. Netw., vol. 16, no. 6, pp. 592-599, 2014.
23. B. Wang, B. Li, and H. Li, "Oruta: Privacy-preserving public auditing for shared data in the cloud," IEEE Trans. Cloud Comput., vol. 2, no. 1, pp. 43-56, Jan.-Mar. 2014.
24. B. Wang, B. Li, and H. Li, "Panda: Public auditing for shared data with efficient user revocation in the cloud," IEEE Trans. Services Comput., vol. 8, no. 1, pp. 92-106, Jan./Feb. 2015.
25. M. Narasimha and G. Tsudik, "Authentication of outsourced databases using signature aggregation and chaining," in Proc. 11th Int. Conf. Database Syst. Adv. Appl., Singapore, Apr. 12-15, 2006, pp. 420-436.
26. H. Pang, J. Zhang, and K. Mouratidis, "Scalable verification for outsourced dynamic databases," Proc. VLDB Endowment, vol. 2, no. 1, pp. 802-813, 2009.
27. S. Chandrasekhar and M. Singhal, "Multi-trapdoor hash functions and their applications in network security," in Proc. IEEE 2nd Conf. Commun. Netw. Security, San Francisco, CA, USA, Oct. 29-31, 2014, pp. 472-480.
28. H. Krawczyk and T. Rabin, "Chameleon signatures," in Proc. Netw. Distrib. Syst. Security Symp., 2000, p. 12.
29. X. Chen, F. Zhang, H. Tian, B. Wei, W. Susilo, Y. Mu, H. Lee, and K. Kim, "Efficient generic on-line/off-line (threshold) signatures without key exposure," Inf. Sci., vol. 178, no. 21, pp. 4192-4203, 2008.
30. C. C. Erway, A. Küpçü, C. Papamanthou, and R. Tamassia, "Dynamic provable data possession," in Proc. 16th ACM Conf. Comput. Commun. Security, Chicago, IL, USA, Nov. 9-13, 2009, pp. 213-222.
31. A. Heitzmann, B. Palazzi, C. Papamanthou, and R. Tamassia, "Efficient integrity checking of untrusted network storage," in Proc. 4th ACM Workshop Storage Security Survivability, Alexandria, VA, USA, Oct. 27-31, 2008, pp. 43-54.
32. J. Wang and X. Du, "Skip list based authenticated data structure in DAS paradigm," in Proc. 8th Int. Conf. Grid Cooperative Comput., Lanzhou, Gansu, China, Aug. 27-29, 2009, pp. 69-75.
33. G. Ateniese, R. C. Burns, R. Curtmola, J. Herring, O. Khan, L. Kissner, Z. N. J. Peterson, and D. Song, "Remote data checking using provable data possession," ACM Trans. Inf. Syst. Security, vol. 14, no. 1, p. 12, 2011.
34. H. Wang, "Proxy provable data possession in public clouds," IEEE Trans. Services Comput., vol. 6, no. 4, pp. 551-559, Oct.-Dec. 2013.
35. A. Juels and B. S. K. Jr, "Pors: Proofs of retrievability for large files," in Proc. 14th ACM Conf. Comput. Commun. Security, Alexandria, VA, USA, Oct. 28-31, 2007, pp. 584-597.
36. H. Shacham and B. Waters, "Compact proofs of retrievability," in Proc. 14th Int. Conf. Theory Appl. Cryptol. Inf. Security: Adv. Cryptol., Melbourne, Vic., Australia, Dec. 7-11, 2008, pp. 90-107.
37. Y. Deswarte, J. Quisquater, and A. Saïdane, "Remote integrity Checking - how to trust files stored on untrusted servers," in Proc. IFIP TC11/WG11.5, Integrity Internal Control Inf. Syst. VI, 6th Working Conf. Integrity Internal Control Inf. Syst., Lausanne, Switzerland, Nov. 13-14, 2003, pp. 1-11.
38. D. L. G. Filho and P. S. L. M. Barreto, "Demonstrating data possession and uncheatable data transfer," IACR Cryptol. ePrint Archive, vol. 2006, p. 150, 2006.
39. P. T. Devanbu, M. Gertz, C. U. Martel, and S. G. Stubblebine, "Authentic data publication over the internet," J. Comput. Security, vol. 11, no. 3, pp. 291-314, 2003.
40. F. Li, M. Hadjieleftheriou, G. Kollios, and L. Reyzin, "Dynamic authenticated index structures for outsourced databases," in Proc. ACM SIGMOD Int. Conf. Manage. Data, Chicago, IL, USA, Jun. 27-29, 2006, pp. 121-132.
41. V. Kher and Y. Kim, "Securing distributed storage: Challenges, techniques, and systems," in Proc. 1st Int. Workshop Storage Security Survivability, Fairfax, VA, USA, Nov. 11, 2005, pp. 9-25.
42. F. Li, M. Hadjieleftheriou, G. Kollios, and L. Reyzin, "Authenticated index structures for aggregation queries," ACM Trans. Inf. Syst. Security, vol. 13, no. 4, p. 32, 2010.
43. B. Liu and Y. Chen, "Auditing for data integrity and reliability in cloud storage," in Handbook on Data Centers. New York, NY, USA: Springer, 2015, pp. 535-559.
44. E. Shi, E. Stefanov, and C. Papamanthou, "Practical dynamic proofs of retrievability," in Proc. 20th ACM SIGSAC Conf. Comput. Commun. Security, Berlin, Germany, Nov. 4-8, 2013, pp. 325-336.
45. M. Sookhak, H. Talebian, E. Ahmed, A. Gani, and M. K. Khan, "A review on remote data auditing in single cloud server: Taxonomy and open issues," J. Netw. Comput. Appl., vol. 43, pp. 121-141, 2014.
46. K. D. Bowers, A. Juels, and A. Oprea, "Proofs of retrievability: Theory and implementation," in Proc. 1st ACM Cloud Comput. Security Workshop, Chicago, IL, USA, Nov. 13, 2009, pp. 43-54.
47. Y. Zhu, G. Ahn, H. Hu, S. S. Yau, H. G. An, and C. Hu, "Dynamic audit services for outsourced storages in clouds," IEEE Trans. Services Comput., vol. 6, no. 2, pp. 227-238, Apr.-Jun. 2013.
48. D. Boneh, C. Gentry, B. Lynn, and H. Shacham, "Aggregate and verifiably encrypted signatures from bilinear maps," in Proc. Int. Conf. Theory Appl. Cryptographic Techn., 2003, pp. 416-432.
49. G. Ateniese and B. de Medeiros, "On the key exposure problem in chameleon hashes," in Proc. 4th Int. Conf. Security Commun. Netw., 2004, pp. 165-179.
50. A. Shamir and Y. Tauman, "Improved online/offline signature schemes," in Proc. 21st Annu. Int. Cryptol. Conf., 2001, pp. 355-367.
51. C.-P. Schnorr, "Efficient signature generation by smart cards," J. Cryptol., vol. 4, no. 3, pp. 161-174, 1991.
52. L. Harn, "New digital signature scheme based on discrete logarithm," Electron. Lett., vol. 30, no. 5, pp. 396-398, Mar. 1994.
53. P. Horster, M. Michels, and H. Petersen, "Meta-multisignature schemes based on the discrete logarithm problem," in Proc. 11th Int. Conf. Inf. Security, 1995, pp. 128-141.
54. S. Micali, K. Ohta, and L. Reyzin, "Accountable-subgroup multisignatures: Extended abstract," in Proc. 8th ACM Conf. Comput. Commun. Security, 2001, pp. 245-254.
55. D. Pointcheval and J. Stern, "Security proofs for signature schemes," in Proc. 15th Annu. Int. Conf. Theory Appl. Cryptographic Techn., Saragossa, Spain, May 12-16, 1996, pp. 387-398.