Abstract
Cloud storage system has brought great convenience but also brings serious security problems. To ensure data security in the cloud, users usually authorize a third-party auditor (TPA) to verify their data integrity regularly. However, TPA may lead to security threats such as data disclosure and tampering. Fortunately, blockchain makes up for the lack of TPA. But there exists the problem of interaction difficulties and expensive deployment of smart contracts in the blockchain scenario. This paper proposes a blockchain-based collaborative public auditing scheme for remote data. In the proposed scheme, the cloud service provider (CSP) completes the challenge and verification work independently, reducing the communication overhead in the proof stage and improving the overall system efficiency. In addition, we consider allowing users to seek partners to reduce the cost of personal audits. Through the EigenTrust model evaluating the credibility of users, the users can select a high-quality partner to complete public auditing work, effectively avoiding collusion among malicious users. The proposed scheme can be proved secure and efficient according to the complete security analysis and comprehensive performance evaluation.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
He, Q., Li, Z., Zhang, X.: Study on cloud storage system based on distributed storage systems. In: International Conference on Computational and Information Sciences, Chengdu, pp. 1332–1335. IEEE (2010)
Hashem, I.A.T., Yaqoob, I., Anuar, N.B., Mokhtar, S., Gani, A., Khan, S.U.: The rise of “big data’’ on cloud computing: review and open research issues. Inf. Syst. 47, 98–115 (2015)
Singh, A., Chatterjee, K.: Cloud security issues and challenges: a survey. J. Netw. Comput. Appl. 79, 88–115 (2017)
Kandukuri, B.R., Rakshit, A., et al.: Cloud security issues. In: 2009 IEEE International Conference on Services Computing, Chengdu, pp. 517–520. IEEE (2009)
Wang, C., Ren, K., Lou, W.: Toward publicly auditable secure cloud data storage services. IEEE Netw. 24(4), 19–24 (2010)
Katz, J., Lindell, A.Y.: Aggregate message authentication codes. In: Malkin, T. (ed.) CT-RSA 2008. LNCS, vol. 4964, pp. 155–169. Springer, Heidelberg (2008). https://doi.org/10.1007/978-3-540-79263-5_10
Liu, B., Lu, J., Yip, J.: XML data integrity based on concatenated hash function. arXiv preprint arXiv:0906.3772 (2009)
Ateniese, G., Burns, R., Curtmola, R., et al.: Provable data possession at untrusted stores. In: Proceedings of the 14th ACM Conference on Computer and Communications Security, pp. 598–609. ACM, New York (2007)
Cong, W., Chow, S.S.M., Qian, W., Ren, K., Lou, W.: Privacy-preserving public auditing for secure cloud storage. IEEE Trans. Comput. 62(2), 362–375 (2011)
Wang, B., Li, B., Hui, L.: Oruta: privacy-preserving public auditing for shared data in the cloud. IEEE Trans. Cloud Comput. 2(1), 43–56 (2014)
Yang, K., Jia, X.: An efficient and secure dynamic auditing protocol for data storage in cloud computing. IEEE Trans. Parallel Distrib. Syst. 24(9), 1717–1726 (2012)
Huang, L., Zhang, G., Yu, S., Fu, A., Yearwood, J.: SeShare: secure cloud data sharing based on blockchain and public auditing. Concurr. Comput. Pract. Exp. 31(22), e4359 (2012)
Xu, Y., Ren, J., Zhang, Y., Zhang, C., Shen, B., Zhang, Y.: Blockchain empowered arbitrable data auditing scheme for network storage as a service. IEEE Trans. Serv. Comput. 13(2), 289–300 (2019)
Yu, Y., Li, Y., Yang, B., Susilo, W., Yang, G., Bai, J.: Attribute-based cloud data integrity auditing for secure outsourced storage. IEEE Trans. Emerg. Top. Comput. 8(2), 377–390 (2020)
Xue, J., Xu, C., Zhao, J., et al.: Identity-based public auditing for cloud storage systems against malicious auditors via blockchain. Sci. China Inf. Sci. 62(3), 1–16 (2019)
Nakamoto, S.: Bitcoin: a peer-to-peer electronic cash system (2008). https://bitcoin.org/bitcoin.pdf. Accessed 1 July 2015
Wang, H., Qin, H., Zhao, M., Wei, X., Shen, H., Susilo, W.: Blockchain-based fair payment smart contract for public cloud storage auditing. Inf. Sci. 519, 348–362 (2020)
Fan, K., Bao, Z., Liu, M., Vasilakos, A.V., Shi, W.: Dredas: decentralized, reliable and efficient remote outsourced data auditing scheme with blockchain smart contract for industrial IoT. Futur. Gener. Comput. Syst. 110, 665–674 (2020)
Zhang, C., Xu, Y., Hu, Y., et al.: A blockchain-based multi-cloud storage data auditing scheme to locate faults. IEEE Trans. Cloud Comput. (2021) https://doi.org/10.1109/TCC.2021.3057771. Early access 8 Feb 2021
Li, A., Tian, G., Miao, M., Gong, J.: Blockchain-based cross-user data shared auditing. Connect. Sci. 34(1), 83–103 (2022)
Kamvar, S.D., Schlosser, M.T., Garcia-Molina, H.: The EigenTrust algorithm for reputation management in P2P networks. In: Proceedings of the 12th International Conference on World Wide Web, pp. 640–651. ACM, New York (2003)
Acknowledgements
This work is supported in part by the National Social Science Fund of China (No. 21XTQ015), the Natural Science Foundation of Fujian Province of China under Grant (Nos. 2019J01752, 2020J01905, 2020J01814); Science and Technology Project of Putian City (No. 2021R4001-10); and the presidential research fund of Minnan Normal University (No. KJ18024).
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG
About this paper
Cite this paper
Xiao, J., Huang, H., Wu, C., Chen, Q., Huang, Z. (2022). A Blockchain-Based Collaborative Auditing Scheme for Cloud Storage. In: Chen, X., Shen, J., Susilo, W. (eds) Cyberspace Safety and Security. CSS 2022. Lecture Notes in Computer Science, vol 13547. Springer, Cham. https://doi.org/10.1007/978-3-031-18067-5_11
Download citation
DOI: https://doi.org/10.1007/978-3-031-18067-5_11
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-031-18066-8
Online ISBN: 978-3-031-18067-5
eBook Packages: Computer ScienceComputer Science (R0)