Secure Data Integrity Check Based on Verified Public Key Encryption With Equality Test for Multi-Cloud Storage

Wenchao Li; Willy Susilo; Chunhe Xia; Luqi Huang; Fuchun Guo; Tianbo Wang

doi:10.1109/TDSC.2024.3375369

IEEE Transactions on Dependable and Secure Computing

Secure Data Integrity Check Based on Verified Public Key Encryption With Equality Test for Multi-Cloud Storage

Nov.-Dec. 2024, pp. 5359-5373, vol. 21

DOI Bookmark: 10.1109/TDSC.2024.3375369

Authors

Wenchao Li, School of Cyber Science and Technology, Beihang University, Beijing, China
Willy Susilo, School of Computing and Information Technology, Institute of Cybersecurity and Cryptology, University of Wollongong, Wollongong, NSW, Australia
Chunhe Xia, Beijing Key Laboratory of Network Technology, Beihang University, Beijing, China
Luqi Huang, School of Computing and Information Technology, Institute of Cybersecurity and Cryptology, University of Wollongong, Wollongong, NSW, Australia
Fuchun Guo, School of Computing and Information Technology, Institute of Cybersecurity and Cryptology, University of Wollongong, Wollongong, NSW, Australia
Tianbo Wang, School of Cyber Science and Technology, Beihang University, Beijing, China

Keywords

Cloud Computing, Servers, Encryption, Public Key, Security, Keyword Search, Data Integrity, Multi Cloud Server, Equality Test, Public Verification, Privacy Preserve, Data Security, Public Key, Multi Cloud Storage, Cloud Computing, Encrypted Data, Remote Server, Chosen Plaintext, Data Storage, Computational Resources, Search Data, Testing Algorithm, Secret Key, Communication Cost, Data Verification, Public Value, Data Owner, Encryption Scheme, Cloud Environment, Security Proof, Secure Storage, User Pairing, Encryption Method, Attribute Based Encryption, Internet Of Vehicles, Probabilistic Polynomial Time, Verification Mechanism, Secure Channel, Internet Of Things, Cost Comparison, Theoretical Analysis

Abstract

Cloud computing eliminates the need for local hardware, addressing the challenge of high computing expenses. However, entrusting data to the cloud may pose the risk of unintentional data loss. Using multiple copies and multi-cloud servers is promising because even if the data on one cloud storage server is compromised, the data proprietor can retrieve the information from alternate cloud storage servers. To protect data security, data needs to be encrypted before uploading to the cloud. However, users cannot directly confirm whether their encrypted documents and copies are stored securely and with integrity on cloud servers. To verify data copies on remote servers without downloading and decrypting, we propose Public Verification Public Key Encryption with Equality Test (PVPKEET). Under PVPKEET, users upload encrypted data to cloud servers, and then the test result and proof will be provided by the cloud server without decryption. The publicly verified proof can be examined by all users, allowing everyone to witness the copies stored correctly. Our approach is resistant to chosen-plaintext attacks and is verifiable. A comparison with prior research demonstrates the efficiency and feasibility of our design.

Like what you’re reading?

Already a member?

Get this article FREE with a new membership!

References

[1]I. Drago, M. Mellia, M. M. Munafo, A. Sperotto, R. Sadre, and A. Pras, “Inside dropbox: Understanding personal cloud storage services,” in Proc. Internet Meas. Conf., 2012, pp. 481–494.

[2]F. Daryabar, A. Dehghantanha, B. Eterovic-Soric, and K.-K. R. Choo, “Forensic investigation of OneDrive, box, GoogleDrive and dropbox applications on android and iOS devices,” Australian J. Forensic Sci., vol. 48, no. 6, pp. 615–642, 2016.

[3]D. Quick and K.-K. R. Choo, “Google drive: Forensic analysis of data remnants,” J. Netw. Comput. Appl., vol. 40, pp. 179–193, 2014.

[4]G. Yang, C. H. Tan, Q. Huang, and D. S. Wong, “Probabilistic public key encryption with equality test,” in Proc. Cryptographers’ Track RSA Conf., Springer, 2010, pp. 119–131.

[5]Y. Zhang, F. Guo, W. Susilo, and G. Yang, “Balancing privacy and flexibility of cloud-based personal health records sharing system,” IEEE Trans. Cloud Comput., vol. 11, no. 3, pp. 2420–2430, Third Quarter, 2023.

[6]J. Lai, W. Susilo, R. H. Deng, and F. Guo, “SDSS: Sequential data sharing system in IoT,” IEEE Trans. Inf. Forensics Security, vol. 19, pp. 2288–2299, Dec.2024.

[7]W. Li, C. Xia, C. Wang, and T. Wang, “Secure and temporary access delegation with equality test for cloud-assisted IoV,” IEEE Trans. Intell. Transp. Syst., vol. 23, no. 11, pp. 20 187–20 201, Nov.2022.

[8]H. Xiong , “Heterogeneous signcryption with equality test for IIoT environment,” IEEE Internet of Things J., vol. 8, no. 21, pp. 16 142–16 152, Nov.2021.

[9]W. Susilo, F. Guo, Z. Zhao, and G. Wu, “PKE-MET: Public-key encryption with multi-ciphertext equality test in cloud computing,” IEEE Trans. Cloud Comput., vol. 10, no. 2, pp. 1476–1488, Second Quarter, 2022.

[10]S. Ma, “Identity-based encryption with outsourced equality test in cloud computing,” Inf. Sci., vol. 328, pp. 389–402, 2016.

[11]S. Ma, Q. Huang, M. Zhang, and B. Yang, “Efficient public key encryption with equality test supporting flexible authorization,” IEEE Trans. Inf. Forensics Security, vol. 10, no. 3, pp. 458–470, Mar.2015.

[12]H. T. Lee, S. Ling, J. H. Seo, H. Wang, and T.-Y. Youn, “Public key encryption with equality test in the standard model,” Inf. Sci., vol. 516, pp. 89–108, 2020.

[13]L. Wu, Y. Zhang, K.-K. R. Choo, and D. He, “Efficient identity-based encryption scheme with equality test in smart city,” IEEE Trans. Sustain. Comput., vol. 3, no. 1, pp. 44–55, First Quart., 2018.

[14]S. Ma, Y. Zhong, and Q. Huang, “Efficient public key encryption with outsourced equality test for cloud-based IoT environments,” IEEE Trans. Inf. Forensics Security, vol. 17, pp. 3758–3772, Oct.2022.

[15]N. Cao, C. Wang, M. Li, K. Ren, and W. Lou, “Privacy-preserving multi-keyword ranked search over encrypted cloud data,” IEEE Trans. Parallel Distrib. Syst., vol. 25, no. 1, pp. 222–233, Jan.2014.

[16]R. Chen, Y. Mu, G. Yang, F. Guo, and X. Wang, “A new general framework for secure public key encryption with keyword search,” in Proc. Australas. Conf. Inf. Secur. Privacy, Springer, 2015, pp. 59–76.

[17]L. Fang, W. Susilo, C. Ge, and J. Wang, “Public key encryption with keyword search secure against keyword guessing attacks without random oracle,” Inf. Sci., vol. 238, pp. 221–241, 2013.

[18]X. Ding, P. Liu, and H. Jin, “Privacy-preserving multi-keyword top-

k

$k$ k similarity search over encrypted data,” IEEE Trans. Dependable Secure Comput., vol. 16, no. 2, pp. 344–357, Mar./Apr.2019.

[19]X. Ge , “Towards achieving keyword search over dynamic encrypted cloud data with symmetric-key based verification,” IEEE Trans. Dependable Secure Comput., vol. 18, no. 1, pp. 490–504, Jan./Feb.2021.

[20]W. Zhang, Y. Lin, and G. Qi, “Catch you if you misbehave: Ranked keyword search results verification in cloud computing,” IEEE Trans. Cloud Comput., vol. 6, no. 1, pp. 74–86, First Quart., 2018.

[21]X. Ge, J. Yu, F. Chen, F. Kong, and H. Wang, “Toward verifiable phrase search over encrypted cloud-based IoT data,” IEEE Internet of Things J., vol. 8, no. 16, pp. 12 902–12 918, Aug.2021.

[22]X. Liu, X. Yang, Y. Luo, and Q. Zhang, “Verifiable multi-keyword search encryption scheme with anonymous key generation for medical Internet of Things,” IEEE Internet of Things J., vol. 9, no. 22, pp. 22315–22326, Nov.2022.

[23]M. Ma, D. He, M. K. Khan, and J. Chen, “Certificateless searchable public key encryption scheme for mobile healthcare system,” Comput. Elect. Eng., vol. 65, pp. 413–424, 2018.

[24]Y. Miao, R. H. Deng, K.-K. R. Choo, X. Liu, J. Ning, and H. Li, “Optimized verifiable fine-grained keyword search in dynamic multi-owner settings,” IEEE Trans. Dependable Secure Comput., vol. 18, no. 4, pp. 1804–1820, Jul./Aug.2021.

[25]K. Gu, W. Zhang, X. Li, and W. Jia, “Self-verifiable attribute-based keyword search scheme for distributed data storage in fog computing with fast decryption,” IEEE Trans. Netw. Service Manag., vol. 19, no. 1, pp. 271–288, Mar.2022.

[26]Y. Bao, W. Qiu, and X. Cheng, “Secure and lightweight fine-grained searchable data sharing for IoT-oriented and cloud-assisted smart healthcare system,” IEEE Internet of Things J., vol. 9, no. 4, pp. 2513–2526, Feb.2022.

[27]H. Li, Q. Huang, J. Huang, and W. Susilo, “Public-key authenticated encryption with keyword search supporting constant trapdoor generation and fast search,” IEEE Trans. Inf. Forensics Security, vol. 18, pp. 396–410, Nov.2023.

[28]X. Ge, J. Yu, R. Hao, and H. Lv, “Verifiable keyword search supporting sensitive information hiding for the cloud-based healthcare sharing system,” IEEE Trans. Ind. Informat., vol. 18, no. 8, pp. 5573–5583, Aug.2022.

[29]Q. Tang, “Towards public key encryption scheme supporting equality test with fine-grained authorization,” in Proc. Australas. Conf. Inf. Secur. Privacy, Springer, 2011, pp. 389–406.

[30]D. He, M. Ma, S. Zeadally, N. Kumar, and K. Liang, “Certificateless public key authenticated encryption with keyword search for industrial Internet of Things,” IEEE Trans. Ind. Informat., vol. 14, no. 8, pp. 3618–3627, Aug.2018.

[31]X. Liu, G. Yang, W. Susilo, K. He, R. H. Deng, and J. Weng, “Privacy-preserving multi-user outsourced computation for boolean circuits,” IEEE Trans. Inf. Forensics Security, vol. 18, pp. 4929–4943, Aug.2023.

[32]Y. Hou, Y. Cao, H. Xiong, Y. Song, and L. Xu, “An efficient online/offline heterogeneous signcryption scheme with equality test for IoVs,” IEEE Trans. Veh. Technol, vol. 72, no. 9, pp. 12047–12062, Sep.2023.

[33]H. T. Lee, S. Ling, J. H. Seo, and H. Wang, “Semi-generic construction of public key encryption and identity-based encryption with equality test,” Inf. Sci., vol. 373, pp. 419–440, 2016.

[34]L. Wu, Y. Zhang, K.-K. R. Choo, and D. He, “Pairing-free identity-based encryption with authorized equality test in online social networks,” Int. J. Found. Comput. Sci., vol. 30, no. 04, pp. 647–664, 2019.

[35]R. Gennaro, C. Gentry, and B. Parno, “Non-interactive verifiable computing: Outsourcing computation to untrusted workers,” in Proc. 30th Annu. Cryptol. Conf., Springer, 2010, pp. 465–482.

[36]Y. Miao, Q. Tong, R. H. Deng, K.-K. R. Choo, X. Liu, and H. Li, “Verifiable searchable encryption framework against insider keyword-guessing attack in cloud storage,” IEEE Trans. Cloud Comput., vol. 10, no. 2, pp. 835–848, Second Quarter, 2022.

[37]B. Chen, T. Xiang, D. He, H. Li, and K.-K. R. Choo, “BPVSE: Publicly verifiable searchable encryption for cloud-assisted electronic health records,” IEEE Trans. Inf. Forensics Security, vol. 18, pp. 3171–3184, May2023.

[38]X. Liu, G. Yang, Y. Mu, and R. H. Deng, “Multi-user verifiable searchable symmetric encryption for cloud storage,” IEEE Trans. Dependable Secure Comput., vol. 17, no. 6, pp. 1322–1332, Nov./Dec.2020.

[39]Y. Guo, C. Zhang, C. Wang, and X. Jia, “Towards public verifiable and forward-privacy encrypted search by using blockchain,” IEEE Trans. Dependable Secure Comput., vol. 20, no. 3, pp. 2111–2126, May/Jun.2023.

[40]R. Bocu and C. Costache, “A homomorphic encryption-based system for securely managing personal health metrics data,” IBM J. Res. Develop., vol. 62, no. 1, pp. 1–1, 2018.

[41]K. Kurosawa and Y. Ohtaki, “UC-secure searchable symmetric encryption,” in Proc. 16th Int. Conf. Financial Cryptogr. Data Secur., Springer, 2012, pp. 285–298.

[42]K. Kurosawa and Y. Ohtaki, “How to update documents verifiably in searchable symmetric encryption,” in Proc. 12th Int. Conf. Cryptol. Netw. Secur., Springer, 2013, pp. 309–328.

[43]H. Xiong, K.-K. R. Choo, and A. V. Vasilakos, “Revocable identity-based access control for big data with verifiable outsourced computing,” IEEE Trans. Big Data, vol. 8, no. 1, pp. 1–13, Feb.2022.

[44]J. Lai, R. H. Deng, C. Guan, and J. Weng, “Attribute-based encryption with verifiable outsourced decryption,” IEEE Trans. Inf. Forensics Security, vol. 8, no. 8, pp. 1343–1354, Aug.2013.

[45]S. Lin, R. Zhang, H. Ma, and M. Wang, “Revisiting attribute-based encryption with verifiable outsourced decryption,” IEEE Trans. Inf. Forensics Security, vol. 10, no. 10, pp. 2119–2130, Oct.2015.

[46]B. Qin, R. H. Deng, S. Liu, and S. Ma, “Attribute-based encryption with efficient verifiable outsourced decryption,” IEEE Trans. Inf. Forensics Security, vol. 10, no. 7, pp. 1384–1393, Jul.2015.

[47]J. Sun, G. Xu, T. Zhang, X. Yang, M. Alazab, and R. H. Deng, “Verifiable, fair and privacy-preserving broadcast authorization for flexible data sharing in clouds,” IEEE Trans. Inf. Forensics Security, vol. 18, pp. 683–698, Dec.2023.

[48]Q. Wang, F. Zhou, B. Zhou, J. Xu, C. Chen, and Q. Wang, “Privacy-preserving publicly verifiable databases,” IEEE Trans. Dependable Secure Comput., vol. 19, no. 3, pp. 1639–1654, May/Jun.2022.

[49]Z. Zhao, W. Susilo, B. Wang, and K. Zeng, “Public-key encryption with tester verifiable equality test for cloud computing,” IEEE Trans. Cloud Comput., vol. 11, no. 4, pp. 3396–3406, Fourth Quarter, 2023.

[50]R. Chen, Y. Mu, G. Yang, F. Guo, and X. Wang, “Dual-server public-key encryption with keyword search for secure cloud storage,” IEEE Trans. Inf. Forensics Security, vol. 11, no. 4, pp. 789–798, Apr.2016.

Verifiable El-gamal re-encryption with authenticity in cloud
2013 Fourth International Conference on Computing, Communications and Networking Technologies (ICCCNT)
Multi-user Searchable Encryption Scheme with Constant-Size Keys
2017 IEEE 7th International Symposium on Cloud and Service Computing (SC2)
PVSAE: A Public Verifiable Searchable Encryption Service Framework for Outsourced Encrypted Data
2016 IEEE International Conference on Web Services (ICWS)
Efficient Verifiable Public Key Encryption with Keyword Search Based on KP-ABE
2014 Ninth International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA)
Time-Controllable Keyword Search Scheme With Efficient Revocation in Mobile E-Health Cloud
IEEE Transactions on Mobile Computing
Public-Key Encryption With Tester Verifiable Equality Test for Cloud Computing
IEEE Transactions on Cloud Computing
A Probabilistic Public-Key Encryption with Ensuring Data Integrity in Cloud Computing
2023 International Conference on Control, Artificial Intelligence, Robotics & Optimization (ICCAIRO)
Lightweight Searchable and Equality-Testable Certificateless Authenticated Encryption for Encrypted Cloud Data
IEEE Transactions on Mobile Computing
Forward Secure Public Key Encryption with Keyword Search for Outsourced Cloud Storage
IEEE Transactions on Cloud Computing
Privacy-Preserving Multi-Keyword Searchable Encryption for Distributed Systems
IEEE Transactions on Parallel & Distributed Systems

Secure Data Integrity Check Based on Verified Public Key Encryption With Equality Test for Multi-Cloud Storage

Authors

Keywords

Abstract

References

Related Articles