CIPPPA: Conditional Identity Privacy-Preserving Public Auditing for Cloud-Based WBANs Against Malicious Auditors

• Published in: IEEE transactions on cloud computing Vol. 9; no. 4; pp. 1362 - 1375
• Main Authors: Zhang, Xiaojun, Zhao, Jie, Xu, Chunxiang, Li, Hongwei, Wang, Huaxiong, Zhang, Yuan
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01.10.2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Blockchains; Body area networks; Cloud computing; Cloud storage services; conditional identity privacy; Cryptography; Cybersecurity; Data integrity; Data privacy; Data storage; Ethereum blockchain; Homomorphic encryption; Integrity; Medical diagnostic imaging; Patients; Performance evaluation; Privacy; public auditing; Servers; wireless body area networks
• ISSN: 2168-7161; 2372-0018
• DOI: 10.1109/TCC.2019.2927219

Wireless body area networks (WBANs) rely on powerful cloud storage services to manage massive medical data. As precise medical diagnosis analysis is heavily based on these medical data, any altered medical data may cause severe consequences, the integrity of outsourced medical data has become the most concerning security issue. Up to date, most existing public auditing mechanisms have been proposed to check the data integrity, but they could not achieve conditional identity privacy, any patient would not like others to know his/her real identity corresponding to certain serious disease, and some malicious patients should be revoked timely due to misbehaviors. Additionally, they are vulnerable to malicious auditors, by colluding with the cloud server to cheat patients. In this paper, we propose a conditional identity privacy-preserving public auditing (CIPPPA) mechanism for cloud-based WBANs. CIPPPA is the first public auditing mechanism achieving conditional identity privacy of patients in WBANs, the real identity of a patient is unknown to anyone in cloud-based WBANs other than the private key generator (PKG). We attempt to integrate Ethereum blockchain into CIPPPA, which gives assistance to patients for validating malicious auditing behaviors. Formal security analysis and performance evaluation demonstrate that CIPPPA is practical for cloud-based WBANs.