Blockchain-based Privacy-Preserving Group Data Auditing with Secure User Revocation  

作　　者：Yining Qi Yubo Luo Yongfeng Huang Xing Li 

机构地区：[1]Tsinghua University,Beijing,100084,China [2]Beijing National Research Center for Information Science and Technology,Beijing,100084,China [3]University of North Carolina at Chapel Hill,North Carolina,27599,USA

出　　处：《Computer Systems Science & Engineering》2023年第4期183-199,共17页计算机系统科学与工程（英文）

基　　金：The work is supported by the National Key Research and Development Program of China(No.2018YFC1604002);the National Natural Science Foundation of China(No.U1836204,No.U1936208,No.U1936216,No.62002197).

摘　　要：Progress in cloud computing makes group data sharing in outsourced storage a reality.People join in group and share data with each other,making team work more convenient.This new application scenario also faces data security threats,even more complex.When a user quit its group,remaining data block signatures must be re-signed to ensure security.Some researchers noticed this problem and proposed a few works to relieve computing overhead on user side.However,considering the privacy and security need of group auditing,there still lacks a comprehensive solution to implement secure group user revocation,supporting identity privacy preserving and collusion attack resistance.Aiming at this target,we construct a concrete scheme based on ring signature and smart contracts.We introduce linkable ring signature to build a kind of novel meta data for integrity proof enabling anonymous verification.And the new meta data supports secure revocation.Meanwhile,smart contracts are using for resisting possible collusion attack and malicious re-signing computation.Under the combined effectiveness of both signature method and blockchain smart contracts,our proposal supports reliable user revocation and signature re-signing,without revealing any user identity in the whole process.Security and performance analysis compared with previous works prove that the proposed scheme is feasible and efficient.

关 键 词：Provable data possession data integrity blockchain ring signature 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]