A project report on “ENABLING CLOUD STORAGE AUDITING”
Loading...
Files
Date
2019-09-09T13:05:45Z
Authors
Journal Title
Journal ISSN
Volume Title
Publisher
Abstract
Key-exposure resistance has always been an important issue for in-depth cyber defence in
many security applications. Recently, how to deal with the key exposure problem in the settings
of cloud storage auditing has been proposed and studied. To address the challenge, existing
solutions all require the client to update his secret keys in every time period, which may
inevitably bring in new local burdens to the client, especially those with limited computation
resources, such as mobile phones. In this paper, we focus on how to make the key updates as
transparent as possible for the client and propose a new paradigm called cloud storage auditing
with verifiable outsourcing of key updates. In this paradigm, key updates can be safely
outsourced to some authorized party, and thus the key-update burden on the client will be kept
minimal. In particular, we leverage the third party auditor (TPA) in many existing public
auditing designs, let it play the role of authorized party in our case, and make it in charge of
both the storage auditing and the secure key updates for key-exposure resistance. In our design,
TPA only needs to hold an encrypted version of the client’s secret key while doing all these
burdensome tasks on behalf of the client. The client only needs to download the encrypted
secret key from the TPA when uploading new files to cloud. Besides, our design also equips
the client with capability to further verify the validity of the encrypted secret keys provided by
the TPA. All these salient features are carefully designed to make the whole auditing procedure
with key exposure resistance as transparent as possible for the client. We formalize the
definition and the security model of this paradigm. The security proof and the performance
simulation show that our detailed design instantiations are secure and efficient.
Description
Keywords
RAKSHITHA P, 16VFSB7045, ENABLING CLOUD STORAGE AUDITING, BCA Project Reports