Delegated integrity check for hierarchical cloud data

Article type: Research Article

Authors: Shen, Shiuan-Tzuo^{; *} | Tzeng, Wen-Guey

Affiliations: Department of Computer Science, National Chiao Tung University, Hsinchu, Taiwan. E-mails: vink@cs.nctu.edu.tw, wgtzeng@cs.nctu.edu.tw

Correspondence: [*] Corresponding author: Shiuan-Tzuo Shen, Department of Computer Science, National Chiao Tung University, 1001 University Road, Hsinchu 30010, Taiwan. E-mail: vink@cs.nctu.edu.tw.

Abstract: In cloud storage, a data owner can store his data in a cloud and authorize some users to access his data. Since the data are outsourced to the cloud, the authorized users should check the data to assure integrity. The data owner does not allow unauthorized users to check integrity of his data. There are many private and public integrity check schemes. Nevertheless, this paper concerns the verification key spread problem. Delegated integrity check deals with the verification key spread problem and provides effective management of verifiers. A data owner can delegate a verifier to check his data and revoke the right of the verifier later. The verifier cannot re-delegate his integrity check capability to someone else. Delegated integrity check guarantees that only the delegated verifier can check integrity of data. This paper provides the model of delegated integrity check, an application scenario of personal health records, and two delegated integrity check schemes for hierarchical cloud data. The first scheme allows a verifier to check data possession of a storage server. The second scheme allows a verifier to check data retrievability from a storage server. The schemes achieve proof unforgeability, proof indistinguishability and delegation key unforgeability in the random oracle model.

Keywords: Delegated provable data possession, delegated proofs of retrievability, proxy re-encryption

DOI: 10.3233/JCS-150527

Journal: Journal of Computer Security, vol. 23, no. 4, pp. 471-508, 2015