NaEPASC:a novel and efficient public auditing scheme for cloud data  

作　　者：Shuang TAN Yan JIA 

机构地区：[1]School of Computer, National University of Defense Technology

出　　处：《Journal of Zhejiang University-Science C(Computers and Electronics)》2014年第9期794-804,共11页浙江大学学报C辑（计算机与电子（英文版）

基　　金：Project supported by the National Natural Science Foundation of China(Nos.60933005 and 91124002);the National High-Tech R&D Program(863)of China(Nos.2010AA012505,2011AA010702,2012AA01A401,and 2012AA01A402);the National 242 Foundation(No.2011A010);the National Technology Support Foundation(Nos.2012BAH38B04 and 2012BAH38B06)

摘　　要：Cloud computing is deemed the next-generation information technology(IT) platform, in which a data center is crucial for providing a large amount of computing and storage resources for various service applications with high quality guaranteed. However, cloud users no longer possess their data in a local data storage infrastructure,which would result in auditing for the integrity of outsourced data being a challenging problem, especially for users with constrained computing resources. Therefore, how to help the users complete the verification of the integrity of the outsourced data has become a key issue. Public verification is a critical technique to solve this problem, from which the users can resort to a third-party auditor(TPA) to check the integrity of outsourced data. Moreover,an identity-based(ID-based) public key cryptosystem would be an efficient key management scheme for certificatebased public key setting. In this paper, we combine ID-based aggregate signature and public verification to construct the protocol of provable data integrity. With the proposed mechanism, the TPA not only verifies the integrity of outsourced data on behalf of cloud users, but also alleviates the burden of checking tasks with the help of users' identity. Compared to previous research, the proposed scheme greatly reduces the time of auditing a single task on the TPA side. Security analysis and performance evaluation results show the high efficiency and security of the proposed scheme.Cloud computing is deemed the next-generation information technology （IT） platform, in which a data center is crucial for providing a large amount of computing and storage resources for various service applications with high quality guaranteed. However, cloud users no longer possess their data in a local data storage infrastructure, which would result in auditing for the integrity of outsourced data being a challenging problem, especially for users with constrained computing resources. Therefore, how to help the users complete the verification of the integrity of the outsourced data has become a key issue. Public verification is a critical technique to solve this problem, from which the users can resort to a third-party auditor （TPA） to check the integrity of outsourced data. Moreover, an identity-based （ID-based） public key cryptosystem would be an efficient key management scheme for certificatebased public key setting. In this paper, we combine ID-based aggregate signature and public verification to construct the protocol of provable data integrity. With the proposed mechanism, the TPA not only verifies the integrity of outsourced data on behalf of cloud users, but also alleviates the burden of checking tasks with the help of users＇ identity. Compared to previous research, the proposed scheme greatly reduces the time of auditing a single task on the TPA side. Security analysis and performance evaluation results show the high efficiency and security of the proposed scheme.

关 键 词：Cloud storage Public verification Identity-based aggregate signature 

分 类 号：TP308[自动化与计算机技术—计算机系统结构]