Blockchain-Based Public Integrity Verification for Cloud Storage against Procrastinating Auditors

• Published in: IEEE transactions on cloud computing Vol. 9; no. 3; pp. 923 - 937
• Main Authors: Zhang, Yuan, Xu, Chunxiang, Lin, Xiaodong, Shen, Xuemin
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE Computer Society 01.07.2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Auditors; Bitcoin; Blockchain; certificateless public verification; Cloud computing; Cloud storage; Cryptography; Data integrity; Integrity; Performance evaluation; procrastinating auditors; Public Key Infrastructure; Resists; Security; Servers; Verification
• ISSN: 2168-7161; 2372-0018
• DOI: 10.1109/TCC.2019.2908400

The deployment of cloud storage services has significant benefits in managing data for users. However, it also causes many security concerns, and one of them is data integrity. Public verification techniques can enable a user to employ a third-party auditor to verify the data integrity on behalf of her/him, whereas existing public verification schemes are vulnerable to procrastinating auditors who may not perform verifications on time. Furthermore, most of public verification schemes are constructed on the public key infrastructure (PKI), and thereby suffer from certificate management problem. In this paper, we propose a c ertificateless p ublic v erification scheme against p rocrastinating a uditors (CPVPA) by using blockchain technology . The key idea is to require auditors to record each verification result into a transaction on a blockchain. Because transactions on the blockchain are time-sensitive, the verification can be time-stamped after the transaction is recorded into the blockchain, which enables users to check whether auditors perform the verifications at the prescribed time. Moreover, CPVPA is built on certificateless cryptography, and is free from the certificate management problem. We present rigorous security proofs to demonstrate the security of CPVPA, and conduct a comprehensive performance evaluation to show that CPVPA is efficient.