Privacy-Preserving Public Auditing for Secure Cloud Storage

• Published in: IEEE transactions on computers Vol. 62; no. 2; pp. 362 - 375
• Main Authors: Cong Wang, Chow, S. S. M., Qian Wang, Kui Ren, Wenjing Lou
• Format: Journal Article
• Language: English
• Published: New York IEEE 01-02-2013; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: batch verification; Cloud computing; Computation; Cryptography; Data storage; delegation; Design engineering; Information storage; Integrity; Memory; On-line systems; Outsourcing; privacy preserving; Protocols; public auditability; Servers; Stores; Studies; Tasks; zero knowledge
• ISSN: 0018-9340; 1557-9956
• DOI: 10.1109/TC.2011.245

Using cloud storage, users can remotely store their data and enjoy the on-demand high-quality applications and services from a shared pool of configurable computing resources, without the burden of local data storage and maintenance. However, the fact that users no longer have physical possession of the outsourced data makes the data integrity protection in cloud computing a formidable task, especially for users with constrained computing resources. Moreover, users should be able to just use the cloud storage as if it is local, without worrying about the need to verify its integrity. Thus, enabling public auditability for cloud storage is of critical importance so that users can resort to a third-party auditor (TPA) to check the integrity of outsourced data and be worry free. To securely introduce an effective TPA, the auditing process should bring in no new vulnerabilities toward user data privacy, and introduce no additional online burden to user. In this paper, we propose a secure cloud storage system supporting privacy-preserving public auditing. We further extend our result to enable the TPA to perform audits for multiple users simultaneously and efficiently. Extensive security and performance analysis show the proposed schemes are provably secure and highly efficient. Our preliminary experiment conducted on Amazon EC2 instance further demonstrates the fast performance of the design.