Identity based proxy-oriented data uploading and remote data integrity checking in public cloud

Download as docx, pdf

0 likes942 views

The document discusses an identity-based proxy-oriented data uploading and remote data integrity checking model called IDPUIC. It proposes allowing clients to delegate proxies to upload and process data when clients cannot directly access public cloud servers. It also addresses remote data integrity checking, which allows clients to check if their outsourced data remains intact without downloading the whole data. The document then provides a formal definition, system model, and security model for IDPUIC before describing an efficient and flexible IDPUIC protocol based on bilinear pairings that is provably secure based on the computational Diffie-Hellman problem.

Education

IEEE PROJECTS DEVELOPMENTS
WE OFFER IEEE PROJECTS MCA FINAL YEAR STUDENT PROJECTS, ENGINEERING
PROJECTS AND TRAINING, PHP PROJECTS, JAVA AND J2EE PROJECTS, ASP.NET
PROJECTS, NS2 PROJECTS, MATLAB PROJECTS AND IPT TRAINING .
CELL: +91 8870791415
Mail to: finalyearprojects2all@gmail.com
Identity-Based Proxy-Oriented Data Uploading and Remote Data Integrity Checking in
Public Cloud
Abstract
More and more clients would like to store their data to PCS (public cloud servers) along
with the rapid development of cloud computing. New security problems have to be solved in
order to help more clients process their data in public cloud. When the client is restricted to
access PCS, he will delegate its proxy to process his data and upload them. On the other hand,
remote data integrity checking is also an important security problem in public cloud storage. It
makes the clients check whether their outsourced data is kept intact without downloading the
whole data. From the security problems, we propose a novel proxy-oriented data uploading and
remote data integrity checking model in identity-based public key cryptography: IDPUIC
(identity-based proxy-oriented data uploading and remote data integrity checking in public
cloud). We give the formal definition, system model and security model. Then, a concrete ID-
PUIC protocol is designed by using the bilinear pairings. The proposed ID-PUIC protocol is
provably secure based on the hardness of CDH (computational Diffie-Hellman) problem. Our
ID-PUIC protocol is also efficient and flexible. Based on the original client’s authorization, the
proposed ID-PUIC protocol can realize private remote data integrity checking, delegated remote
data

This document proposes a novel security model for identity-based proxy-oriented data uploading and remote data integrity checking (id-puic) in public clouds. It defines the system and security models, then presents a concrete id-puic protocol that is secure based on the computational diffie-hellman problem, enabling various types of remote data integrity checking. The protocol is efficient and tailored to meet the needs of clients utilizing public cloud storage.

Identity based proxy-oriented data uploading and remote data integrity checki...Shakas Technologies

The document presents a novel identity-based proxy-oriented data uploading and remote data integrity checking model, termed id-puic, designed for public cloud storage. This protocol addresses security challenges by enabling clients to delegate data processing while maintaining the integrity of their data without extensive certificate management overheads. It introduces a secure and efficient method for private, delegated, and public remote data integrity checking using identity-based public key cryptography.

documentation for identity based secure distrbuted data storage schemesSahithi Naraparaju

This document proposes two identity-based secure distributed data storage schemes. The first scheme provides confidentiality against chosen plaintext attacks, while the second achieves confidentiality against chosen ciphertext attacks. The schemes allow a file owner to independently set access permissions for individual files without help from a private key generator. They also protect against collusion attacks between receivers and proxy servers. To the best of the author's knowledge, these are the first identity-based distributed storage schemes that allow file-level access control and protect against collusion in the standard model.

PPT FOR IDBSDDS SCHEMESSahithi Naraparaju

This document presents two identity-based secure distributed data storage schemes. The first scheme is secure against chosen plaintext attacks, while the second is secure against chosen ciphertext attacks. Both schemes allow a file owner to independently set access permissions for receivers. When a receiver makes a query, they can only access one file rather than all files from the owner. The schemes also protect against collusion attacks.

Identity based encryption with outsourced revocation in cloud computingPvrtechnologies Nellore

This document proposes a scheme for identity-based encryption with outsourced revocation in cloud computing. It introduces a Key Update Cloud Service Provider (KU-CSP) that handles most key generation operations during key issuing and updating, reducing the computation overhead on the Private Key Generator (PKG). The scheme uses a hybrid private key for each user consisting of an identity component from the PKG and a time component updated periodically by the KU-CSP. This allows revocation of compromised users by updating others' time components while keeping the PKG offline. The scheme aims to achieve this outsourced revocation efficiently and securely using the KU-CSP while preventing collusion.

Identity based secure distributed data storage schemesSahithi Naraparaju

This document proposes two identity-based secure distributed data storage schemes. The first scheme is secure against chosen plaintext attacks, while the second is secure against chosen ciphertext attacks. Both schemes allow a file owner to independently set access permissions and prevent unauthorized access or modification of outsourced files by proxy servers. The proposed schemes were designed to address confidentiality and integrity issues with existing distributed data storage systems by incorporating identity-based cryptography and access control set by the file owner.

iaetsd Robots in oil and gas refineriesIaetsd Iaetsd

This document discusses attribute-based encryption in cloud computing with outsourced revocation. It proposes a pseudonym generation scheme for identity-based encryption and outsourced revocation in cloud computing. The scheme offloads most key generation operations to a Key Update Cloud Service Provider during key issuing and updating, leaving only simple operations for the Private Key Generator and users. It aims to reduce computation overhead at the Private Key Generator while using an untrusted cloud service provider.

COST-EFFECTIVE AUTHENTIC AND ANONYMOUS DATA SHARING WITH FORWARD SECURITYShakas Technologies

The document proposes a system for cost-effective, anonymous, and authentic data sharing with forward security. It aims to address issues like efficiency, data integrity, and privacy in large-scale data sharing systems. The system uses identity-based ring signatures to allow anonymous authentication of data by owners. It further enhances security by providing forward security, meaning previously generated signatures remain valid even if a secret key is compromised in the future. The authors provide a concrete scheme, prove its security, and implement it to demonstrate practicality.

Cost effective authentic and anonymous data sharing with forward securityPvrtechnologies Nellore

This document proposes a system for anonymous and authentic data sharing on a large scale using identity-based ring signatures with forward security. It aims to address issues of efficiency, data integrity, and privacy for data owners. The system would allow data owners to anonymously authenticate their data, which could then be stored and analyzed on the cloud. Identity-based ring signatures eliminate the need for certificate verification, improving efficiency. Forward security is added so that if a user's secret key is compromised, previously generated signatures including that user remain valid. This is important for large-scale data sharing systems to avoid needing to reauthenticate all data if a single key is compromised. The document outlines the modules of the proposed system and describes identity-based ring signatures

IRJET- Proficient Public Substantiation of Data Veracity for Cloud Storage th...IRJET Journal

This document proposes a system for securely storing data in the cloud using dual protection. The system splits data files into multiple parts and stores each part in different cloud server locations. It also encrypts each split file before storage. This makes the data difficult for attackers to access, as they would need to decrypt the files and recombine parts from different locations. The system generates keys for auditing and verification. It allows file sharing and editing with owner permission. When users download files, they must provide the correct security key, which is verified before decrypting and recombining the file. The dual protection of splitting and encrypting files improves security for cloud data storage.

Identity based encryption with cloud revocation authority and its applicationsShakas Technologies

The document discusses a new identity-based encryption (IBE) scheme with a cloud revocation authority (CRA) that addresses scalability and efficiency issues present in prior revocable IBE schemes. The proposed system allows the CRA to manage a master key for all users instead of individual keys, enhancing performance and security. Additionally, it outlines the requirements for hardware and software to implement this solution.

COST-EFFECTIVE AUTHENTIC AND ANONYMOUS DATA SHARING WITH FORWARD SECURITYNexgen Technology

This document discusses cost-effective and anonymous data sharing using forward secure identity-based ring signatures. It proposes a new notion of forward secure ID-based ring signatures that allow ID-based ring signature schemes to provide forward security. This is the first scheme to provide this feature for ring signatures in an ID-based setting. The scheme provides unconditional anonymity and can be proven to be forward-securely unforgeable in the random oracle model under the RSA assumption. It is efficient, requiring only one exponentiation for key updates and no pairings. This scheme enables authentic and anonymous data sharing in large-scale systems like smart grids.

Cost effective authentic and anonymous data sharing with forward securityLeMeniz Infotech

The document discusses a new data sharing system that leverages identity-based ring signatures to enhance the anonymity and authenticity of shared data. It addresses challenges such as efficiency, data integrity, and privacy, while providing forward security to ensure that previously generated signatures remain valid even if a user's secret key is compromised. The proposed solution is intended to facilitate large-scale data sharing in cloud environments while maintaining security and accessibility for users.

IRJET- Privacy Preserving and Proficient Identity Search Techniques for C...IRJET Journal

This document presents a privacy preserving and efficient identity search technique for cloud data security. It proposes a scheme using visual-encryption techniques to overcome issues with untrusted cloud storage. The existing methodology uses data signing algorithms but has limitations as the private key depends on the security of one computer. The proposed system uses visual-cryptographic encryption, which scrambles data using an algorithm requiring a key to decrypt. It involves users uploading encrypted files, administrators approving requests to view files through live video verification, and decryption using the appropriate key. The scheme aims to securely store large volumes of data while allowing identity verification for file access on the cloud.

CONTROL CLOUD DATA ACCESS PRIVILEGE AND ANONYMITY WITH FULLY ANONYMOUS ATTRIB...Shakas Technologies

The document proposes an identity-based distributed provable data possession model (ID-DPDP) for verifying the integrity of data stored across multiple cloud servers. It aims to efficiently verify data integrity without downloading the entire file. The proposed ID-DPDP protocol is based on bilinear pairings and is provably secure under the computational Diffie-Hellman assumption. It also supports private, delegated, and public verification of data integrity based on the client's authorization.

Ch12 Cryptographic Protocols and Public Key InfrastructureInformation Technology

Chapter 12 of the Security+ Guide covers applying cryptography with a focus on digital certificates, their types, and the public key infrastructure (PKI) required for managing them. It explains the role of certificate authorities (CAs), including the certificate life cycle, key management, and various cryptographic transport protocols for secure communication. The chapter also discusses trust models and specific protocols for email and web security, emphasizing the importance of securing data transmission over the internet.

Authentication on Cloud using Attribute Based EncryptionAnkit Raj

The document presents a project on enhancing cloud security through Attribute-Based Encryption (ABE) to ensure secure authentication. It discusses the limitations of ABE, including inefficiency and expensive decryption, and proposes an improved version with outsourced decryption and verifiability. The project also outlines the implementation of ABE algorithms and presents future scope for a multi-user attribute system in cloud environments.

International Journal of Computational Engineering Research(IJCER) ijceronline

The document discusses the challenges and solutions related to cloud computing, focusing on multi-level authentication, security risks, and trusted third-party services for data integrity verification. It emphasizes the importance of a structured framework for risk management and proposes a dynamic auditing system to enhance cloud storage security. Additionally, it outlines the role of service level agreements (SLAs) in establishing trust between service providers and clients while ensuring data protection within shared cloud environments.

Control cloud data access privilege and anonymity with fully anonymous attrib...Pvrtechnologies Nellore

This document proposes two schemes, AnonyControl and AnonyControl-F, to address privacy issues in existing access control schemes for cloud storage. AnonyControl decentralizes the central authority to limit identity leakage and achieve semi-anonymity. It also generalizes file access control to privilege control. AnonyControl-F fully prevents identity leakage and achieves full anonymity. The schemes use attribute-based encryption and a multi-authority system to securely control user access privileges without revealing identity information. Security analysis shows the schemes are secure under certain cryptographic assumptions.

Attribute-Based Encryption for Cloud SecurityMphasis

The document discusses a secure outsourcing method for attribute-based encryption (ABE) that addresses data security concerns in cloud computing. It outlines the role of key generation and decryption service providers in managing access policies and private key issuance, while highlighting the efficiency challenges and the hybrid cloud model's advantages. The proposed approach allows users to securely share and download files from the cloud by requiring correct attribute sets and signatures for access.

4.authentication and key agreement based on anonymous identity for peer to-pe...Venkat Projects

The document proposes a peer-to-peer cloud authentication and key agreement (PCAKA) scheme based on anonymous identity to enable secure data migration between cloud servers. The scheme uses elliptic curve cryptography without a trusted authority to establish session keys between cloud providers. It protects server and user privacy through anonymous identities while enabling identity traceability for malicious servers. The proposed approach aims to develop trust between clouds and facilitate efficient cross-cloud data migration for mobile users.

Authentication Mechanisms For Signature Based Cryptography By Using Hierarchi...Editor IJMTER

This document discusses a method for enhancing security in signature-based cryptography using hierarchical visual cryptography (HVC), which divides a person's signature into four shares for added protection. The proposal outlines a system where any three shares are used to generate a key share while the fourth share is held by an authenticated server, ensuring that only authorized users can access the information. The document emphasizes the importance of security mechanisms to prevent unauthorized access and maintain data integrity in network environments.

Identity based proxy-oriented data uploading andKamal Spring

This document discusses a novel model called IDPUIC for proxy-oriented data uploading and remote data integrity checking in public cloud storage, utilizing identity-based public key cryptography. The proposed protocol is designed to ensure security and efficiency while allowing clients to delegate data processing and integrity checking to proxies. It provides methods for private, delegated, and public data integrity checking without compromising the original client's confidential information.

www.ijerd.comIJERD Editor

This document summarizes a research paper on using public key cryptography with an offline centralized server for secure communication in mission-critical networks. It discusses how public-private key pairs can provide security features like authentication, integrity, confidentiality and non-repudiation. It then describes a proposed scheme called SMOCK that uses a small number of cryptographic keys pre-stored offline at individual nodes to enable authentication with almost zero communication overhead and high availability. The document provides background on public key infrastructure (PKI) components like certificate authorities, registration authorities, repositories, and applications before discussing security requirements.

766 a secure-data-sharing-in-cloud-storage-with-independent-key-generation-ce...revathirram

This document summarizes a research paper that proposes a mediated certificateless public key encryption (mCL-PKE) scheme for secure data sharing in cloud storage. The key points are: 1) The mCL-PKE scheme solves problems of key escrow and certificate revocation without using computationally expensive bilinear pairing operations. 2) It uses a security mediator to instantly revoke compromised users and enforce access policies. The mediator also supports partial decryption to preserve data confidentiality. 3) The scheme extends mCL-PKE with an access control list to allow the data owner to encrypt data only once for multiple authorized users, improving efficiency over previous pairing-based schemes.

IRJET- Efficient Traceable Authorization Search System for Secure Cloud StorageIRJET Journal

This document proposes an efficient traceable authorization search system for secure cloud storage called EF-TAMKS-VOD. The system allows for flexible multiple keyword subset search over encrypted files stored on a cloud server. It solves key escrow problems by having a key generation center generate public/secret key pairs without escrowing the secret keys. The system also enables traceability of malicious users who leak their secret keys by identifying the original key owner. It further improves efficiency by allowing decryption computations to be outsourced to the cloud server and verified by users. Analysis shows the system improves efficiency and reduces computation overhead for users compared to previous solutions.

sweeney_brendan-css527-20141118-research_proposalBrendan Sweeney

This document proposes research into implementing identity-based cryptography (IBC) in a decentralized, peer-to-peer system without a central trusted authority. Key challenges include distributed identity verification, splitting the master secret key material across peers in a threshold manner to prevent collusion, and establishing secure channels for private key generation. Possible solutions may incorporate techniques from cryptocurrencies for identity verification and electronic voting to detect collusion during threshold key sharing. The goal is to test solutions using virtual machines to determine if identities can be reliably verified and the system remains resistant to attacks from colluding peers.

Identity based proxy-oriented data uploading and remote data integrity checki...Shakas Technologies

The document introduces a novel identity-based proxy-oriented data uploading and remote data integrity checking model (id-puic) for public cloud environments, addressing emerging security concerns. It emphasizes the benefits of eliminating certificate management overhead typical in public key infrastructure (PKI) by leveraging identity-based public key cryptography. The proposed id-puic protocol is designed to be efficient, secure, and capable of supporting various types of data integrity checking while allowing authorized proxies to process client data.

Presentación1mate 1Citlali Pelaxtla Ramirez

Identity based encryption with cloud revocation authority and its applicationsShakas Technologies

This document proposes a new revocable identity-based encryption (IBE) scheme utilizing a cloud revocation authority (CRA) to address inefficiencies and scalability issues found in existing systems like that of Li et al. The proposed system improves performance by allowing the CRA to manage a single master time key for all users, thereby reducing computational and communication costs. An additional CRA-aided authentication scheme with period-limited privileges is also introduced for managing various cloud services effectively.

More Related Content

What's hot (19)