Abstract
Public integrity auditing enables a user to delegate a third-party auditor (TPA) to periodically audit the integrity of the outsourced data. Whereas, the security of public auditing schemes relies on the trustworthiness of TPA: once TPA misbehaves, the data integrity auditing would be invalidated. In this paper, we propose a blockchain-based efficient public integrity auditing scheme to resist misbehaved TPA, where the user is required to check the behaviors of TPA in a much longer period compared with that of the data integrity auditing performed by TPA. To free users from heavy computation costs during the checking, our scheme uses two key techniques. We first design a smart contract to (1) enable TPA to record each auditing entry (which records the information about each auditing task) into the blockchain and (2) ensure the validity of each recorded entry. Then, we propose an auditing record chain built on the Ethereum blockchain to link all auditing entries corresponding to the same data in the chronological order. By doing so, the user only needs to check the last auditing entry generated by TPA to verify the trustworthiness of TPA (i.e., whether TPA has correctly performed the prescribed auditing tasks). Compared with existing schemes, where the user has to check multiple entries one by one, our scheme achieves the same security guarantee with constant and low costs in terms of communication and computation.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Li, S., Xu, C., Zhang, Y.: CSED: client-side encrypted deduplication scheme based on proofs of ownership for cloud storage. J. Inf. Security Appl. 46, 250–258 (2019)
Zhang, X., Zhao, J., Xu, C., Li, H., Wang, H., Zhang, Y.: CIPPPA: conditional identity privacy-preserving public auditing for cloud-based wbans against malicious auditors, IEEE Trans. Cloud Comput. 1–14, (2019), to appear. https://doi.org/10.1109/TCC.2019.2927219
Yang, A., Xu, J., Weng, J., Zhou, J., Wong, D.S.: Lightweight and privacy-preserving delegatable proofs of storage with data dynamics in cloud storage. IEEE Trans. Cloud Comput. 1–14 (2018). https://doi.org/10.1109/TCC.2018.2851256
Zhang, X., Xu, C., Wang, H., Zhang, Y., Wang, S.: FS-PEKS: lattice-based forward secure public-key encryption with keyword search for cloud-assisted industrial internet of things, IEEE Trans. Dependable and Secure Comput. 1–15 (2019). https://doi.org/10.1109/TDSC.2019.2914117
Wang, C., Chow, S.S., Wang, Q., Ren, K., Lou, W.: Privacy-preserving public auditing for secure cloud storage. IEEE Trans. Comput. 62(2), 362–375 (2011)
Zhang, Y., Xu, C., Lin, X., Shen, X.S.: Blockchain-based public integrity verification for cloud storage against procrastinating auditors, IEEE Trans. Cloud Comput. 1–15 (2019). https://doi.org/10.1109/TCC.2019.2908400
Shacham, H., Waters, B.: Compact proofs of retrievability. In: Pieprzyk, J. (ed.) ASIACRYPT 2008. LNCS, vol. 5350, pp. 90–107. Springer, Heidelberg (2008). https://doi.org/10.1007/978-3-540-89255-7_7
Ateniese, G., et al.: Provable data possession at untrusted stores. In: Proceedings of CCS, pp. 598–609 (2007)
Wang, C., Wang, Q., Ren, K., Lou, W.: Privacy-preserving public auditing for data storage security in cloud computing. In: Proceedings of INFOCOM. IEEE, pp. 1–9 (2010)
Boneh, D., Lynn, B., Shacham, H.: Short signatures from the weil pairing, In: Proceedings of ASIACRYPT, pp. 514–532 (2001)
Zhang, Y., Xu, C., Yu, S., Li, H., Zhang, X.: SCLPV: secure certificateless public verification for cloud-based cyber-physical-social systems against malicious auditors. IEEE Trans. Comput. Social Syst. 2(4), 159–170 (2015)
Armknecht, F., Bohli, J.-M., Karame, G.O., Liu, Z., Reuter, C.A.: Outsourced proofs of retrievability. In: Proceedings of CCS. ACM, pp. 831–843 (2014)
Zhang, Y., Lin, X., Xu, C.: Blockchain-based secure data provenance for cloud storage. In: Proceedings of ICICS, pp. 3–19 (2018)
Katz, J., Lindell, Y.: Introduction to modern cryptography. Chapman and Hall/CRC (2014)
Nakamoto, S.: Bitcoin: A peer-to-peer electronic cash system. Technical Report, Manubot (2019)
Swan, M.: Blockchain: Blueprint for a new economy. OReilly Media Inc. (2015)
Underwood, S.: Blockchain beyond bitcoin (2016)
Wood, G.: Ethereum: a secure decentralised generalised transaction ledger. Ethereum Project Yellow Paper 151(2014), 1–32 (2014)
Gencer, A.E., Basu, S., Eyal, I., van Renesse, R., Sirer, E.G.: Decentralization in bitcoin and ethereum networks. In: Meiklejohn, S., Sako, K. (eds.) FC 2018. LNCS, vol. 10957, pp. 439–457. Springer, Heidelberg (2018). https://doi.org/10.1007/978-3-662-58387-6_24
Buterin, V.: A next-generation smart contract and decentralized application platform, White Paper, vol. 3, no. 37 (2014)
Li, M., Zhu, L., Lin, X.: Efficient and privacy-preserving carpooling using blockchain-assisted vehicular fog computing. IEEE Internet of Things J. 6(3), 4573–4584 (2018)
Li, M., Weng, J., Yang, A., Liu, J.-N., Lin, X.: Towards blockchain-based fair and anonymous ad dissemination in vehicular networks. IEEE Trans. Vehicular Technol. 1–12 (2019) to appear. https://doi.org/10.1109/TVT.2019.2940148
Li, M., Weng, J., Yang, A., Lu, W., Zhang, Y., Hou, L., Liu, J.-N., Xiang, Y., Deng, R.H.: Crowdbc: a blockchain-based decentralized framework for crowdsourcing. IEEE Trans. Parallel Distrib. Syst. 30(6), 1251–1266 (2018)
Rizzo, L.: Effective erasure codes for reliable computer communication protocols. ACM SIGCOMM Comput. Commun. Rev. 27(2), 24–36 (1997)
Yuan, H., Chen, X., Wang, J., Yuan, J., Yan, H., Susilo, W.: Blockchain-based public auditing and secure deduplication with fair arbitration. Inf. Sci. 1–36 (2020), to appear. https://doi.org/10.1016/j.ins.2020.07.005
Xu, Y., Ren, J., Zhang, Y., Zhang, C., Shen, B., Zhang, Y.: Blockchain empowered arbitrable data auditing scheme for network storage as a service. IEEE Trans. Services Comput. 13(2), 289–300 (2019)
Staffie: How can we verify bgls aggregate signatures in solidity (2018). https://ethereum.stackexchange.com/questions/51421/how-can-we-verify-bgls-aggregate-signatures-in-solidity
https://gist.github.com/BjornvdLaan/ca6dd4e3993e1ef392f363ec27fe74c4
Acknowledgements
This work is supported by the National Key R&D Program of China under Grant 2017YFB0802000, the National Nature Science Foundation of China under Grant 61872060, 61370203, 62002050, 62072215, 61702222, the Chengdu Innovation Project 2019-YF05-02029-GX, the New Generation Artificial Intelligence Science and Technology Major Project of Sichuan Province 2019YFG0400, and the Key Laboratory of Dynamic Cognitive System of Electromagnetic Spectrum Space, Ministry of Industry and Information Technology, Nanjing University of Aeronautics and Astronautics under Grant KF20202110.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 Springer Nature Switzerland AG
About this paper
Cite this paper
Li, S., Xu, C., Zhang, Y., Yang, A., Wen, X., Chen, K. (2021). Blockchain-Based Efficient Public Integrity Auditing for Cloud Storage Against Malicious Auditors. In: Wu, Y., Yung, M. (eds) Information Security and Cryptology. Inscrypt 2020. Lecture Notes in Computer Science(), vol 12612. Springer, Cham. https://doi.org/10.1007/978-3-030-71852-7_14
Download citation
DOI: https://doi.org/10.1007/978-3-030-71852-7_14
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-71851-0
Online ISBN: 978-3-030-71852-7
eBook Packages: Computer ScienceComputer Science (R0)