Pairing free and implicit certificate based signcryption scheme with proxy re-encryption for secure cloud data storage

Cloud computing is a promising computing model that enables convenient and on-demand network access to a shared pool of configurable computing resources. The first offered cloud service is moving data into the cloud: data owners let cloud service providers host their data on cloud servers and data consumers can access the data from the cloud servers. This new paradigm of data storage service also introduces new security challenges, because data owners and data servers have different identities and different business interests. Therefore, an independent auditing service is required to make sure that the data is correctly hosted in the Cloud. In this paper, we investigate this kind of problem and give an extensive survey of storage auditing methods in the literature. First, we give a set of requirements of the auditing protocol for data storage in cloud computing. Then, we introduce some existing auditing schemes and analyze them in terms of security and performance. Finally, some challenging issues are introduced in the design of efficient auditing protocol for data storage in cloud computing.

JCDC: A blockchain-based framework for secure data storage and circulation in JointCloud

Generally, enterprises store data in internal storage and establish firewalls to protect against intruders attempting to access the data. In cloud computing, data is stored in storage provided by service providers. Information privacy protection involves storing data in encrypted form. The cloud system is responsible for both storage and the encryption or decryption of data, allowing system administrators to access encrypted data and decryption keys. This capability poses a risk to information privacy as it enables unauthorized access to information. This survey discusses Data Storage in Cloud Computing, focusing on the concept of storing encryption and decryption services alongside the storage service. Additionally, the survey examines storage system architecture, security challenges, services, and user application systems to provide a comparison of various cloud models. In addition to the fundamental aspects of data storage and encryption, this survey delves into the evolving landscape of cloud computing, addressing the dynamic nature of storage system architectures. Enterprises increasingly rely on cloud service providers for scalable and flexible storage solutions, prompting a critical examination of the security challenges associated with this paradigm shift. The survey examines how storage services in different cloud models affect user applications and privacy. It stresses the importance of understanding cloud providers' services amidst evolving technology and growing threats. The study delves into trends like edge computing and distributed storage, evaluating their impact on cloud storage security. Overall, it aims to provide a comprehensive overview for enterprises and researchers to make informed decisions on data security in Cloud Computing.

Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers

Cloud computing and storage services allow clients to move their data center and applications to centralized large data centers and thus avoid the burden of local data storage and maintenance. However, this poses new challenges related to creating secure and reliable data storage over unreliable service providers. In this study, we address the problem of ensuring the integrity of data storage in cloud computing. In particular, we consider methods for reducing the burden of generating a constant amount of metadata at the client side. By exploiting some good attributes of the bilinear group, we can devise a simple and efficient audit service for public verification of untrusted and outsourced storage, which can be important for achieving widespread deployment of cloud computing. Whereas many prior studies on ensuring remote data integrity did not consider the burden of generating verification metadata at the client side, the objective of this study is to resolve this issue. Moreover, our scheme also supports data dynamics and public verifiability. Extensive security and performance analysis shows that the proposed scheme is highly efficient and provably secure.

Cloud Service Providers, exemplified by industry leaders like Google Cloud Platform, Microsoft Azure, and Amazon Web Services, deliver a dynamic array of cloud services in an ever-evolving landscape. This sector is witnessing substantial growth, with enterprises such as Netflix and PayPal heavily relying on cloud infrastructure for various needs such as data storage, computational resources, and various other services. The adoption of cloud solutions by businesses not only facilitates cost reduction but also fosters flexibility and supports scalability. Despite the undeniable advantages, concerns surrounding security and privacy persist in the realm of Cloud Computing. Given that Cloud services are accessible via the internet, there is a potential vulnerability to unauthorized access by hackers or malicious entities from anywhere in the world. A crucial aspect of addressing this challenge is the implementation of robust security measures, particularly focusing on data protection. To safeguard data in the Cloud, a fundamental recommendation is the encryption of data prior to uploading. Encryption should be maintained consistently, both during storage and in transit. While encryption enhances security, it introduces a potential challenge for data owners who may need to perform various operations on their encrypted data, such as accessing, modifying, updating, deleting, reading, searching, or sharing them with others. One viable solution to balance the need for data security and operational functionality is the adoption of Searchable Encryption (SE). SE operates on encrypted data, allowing authorized users to perform certain operations without compromising the security of sensitive information. The effectiveness of SE has notably advanced since its inception, and ongoing research endeavors aim to further enhance its capabilities. This paper provides a comprehensive review of the functionality of Searchable Encryption, with a primary focus on its applications in Cloud services during the period spanning 2019 to 2023. Additionally, the study evaluates one of its prominent schemes, namely Fully Homomorphic Encryption (FHE). The analysis indicates an overall positive trajectory in SE research, showcasing increased efficiency as multiple functionalities are aggregated and rigorously tested.

<span lang="EN-US">Cloud Computing is the ability to improve the utility or train new human resources without investing in new infrastructure, or add capabilities to existence without the latest software licensing. It expanded the capabilities of Information Technology (IT). From the past few years, cloud computing has developed from a good business concept in the best rising sectors of the IT industry. But more information on individuals and companies was put in the cloud, and concerns began to think about how secure the cloud environment was. Despite cloud surrounding structures, enterprise users still do not want to expand their business in the cloud. Security reduces the growth of cloud computing and continues to spread the market with complexity with data privacy and data protection. The security of cloud computing has constantly been an significant aspect of improved quality of service from cloud service providers. Data storage in the cloud has a problem related to data security. However, cloud computing construct many new security challenges which have not been well examine. In order to ensure that the user's data in the cloud is secure, we have proposed an effective mechanism with a distinctive feature of data integrity and privacy. This paper focusing on problems relating to the cloud data storage techniques and security in virtual environment. We recommend a method for providing data storage and security in cloud using public key Cryptosystem, which uses the concept of the modified RSA algorithm to provide better security for the data stored in the cloud. </span>

This paper shows security and privacy of user data stored in cloud services is of utmost concern especially for commercial public cloud platforms and service providers. The user data stored on cloud is encrypted, and it is desired that data mining operations on encrypted data must be executed efficiently. The proposed system implements a data mining operation namely clustering on encrypted data on cloud platforms using TCP / IP protocol. The clustering operation is performed using standard K-Means, Spectral, Hierarchical, Hybrid DBSCAN and simple DBSCAN clustering technique optimized for encrypted data.

Data Portability: Key to Cloud Portability and Interoperability

Aiming at the security issues about isolation storage, access, and sharing of the multi-tenant data under cloud environment, based on the Hadoop storage architecture, this paper proposes a Tag-Based protection method for Multi-tenant data security. For the isolation storage and access security of the private data, by introducing security tag to participate in storage and authentication access of the data, a consistent hash improved algorithm on dual authentication of dynamic password and security tag is proposed, realizing efficient isolation storage and secure access of the multi-tenant private data. For the security of the sharing data, a tag-based proxy re-encryption data sharing scheme is proposed, completing data secret sharing under the security authentication of the tenant sharing tag. For proxy re-encryption, use sharing tag to replace sharing data. Through the analysis of the security and instantiation of the method, this method is proved to be reliable and feasible under the cloud environment.

Cloud computing is one of the trending technologies that provide boundless virtualized resources to the internet users as an important services through the internet, while providing the privacy and security. By using these cloud services, internet users get many parallel computing resources at low cost. It predicted that till 2016, revenues from the online business management spent $4 billion for data storage. Cloud is an open source platform structure, so it is having more chances to malicious attacks. Privacy, confidentiality, and security of stored data are primary security challenges in cloud computing. In cloud computing, ‘virtualization’ is one of the techniques dividing memory into different blocks. In most of the existing systems there is only single authority in the system to provide the encrypted keys. To fill the few security issues, this paper proposed a novel authenticated trust security model for secure virtualization system to encrypt the files. The proposed security model achieves the following functions: 1) allotting the VSM(VM Security Monitor) model for each virtual machine; 2) providing secret keys to encrypt and decrypt information by symmetric encryption.The contribution is a proposed architecture that provides a workable security that a cloud service provider can offer to its consumers. Detailed analysis and architecture design presented to elaborate security model.

In mobile cloud computing, data storage and its processing is done externally from the mobile devices. The mobile user can access the applications or data from cloud servers (Dinh et al., Wireless Commun. Mobile Comput. 13(8), 1587–1611 [1]). The client can store his/her multimedia data to the cloud storage server. The client may be given assurance that the access rights of data will only be restricted to authorized access. The cloud service provider assures the clients for proper security, data confidentiality, and privacy for data in their service level agreement (SLA). Clients may be given full assurance in proper privacy policies and procedures for data safety in cloud but there may be risk of unauthorized access of client sensitive data by cloud service provider or cloud attacker. Another risk is the mobility of data. Data may be transferred from one location to other locations. Frequently, data may be transferred from one place to another place so there may be security concerns of data while mobility. To secure the client’s confidential data, we propose a framework designed with modified RSA encryption technique so that client’s multimedia data may be preserved before storing on the cloud from client side.

<p>The development of cloud storage is indispensable for today’s Internet information technology. The superiority of cloud storage is that the ownership of the storage medium and the ownership of the stored data are divided and held by two parties with respective interests - cloud server providers and data users. However, the transmission, storage and utilization of data constantly caused the violation of users’ rights and interests. Data integrity as a countermeasure has been paid growing attention to by researchers. Traditional data integrity protection schemes are based on the cloud server-client architecture, which requires high computational overhead and communication. To address this scenario, this paper proposes an improved data integrity verification scheme that enables local users to perform rapid and efficient data integrity verification of data stored on cloud servers, reduces the volume of communication data during the verification process, and effectively prevents the loss or tampering of data stored in the cloud server.</p> <p> </p>

Cloud storage provides great benefits and advantages like reduction in cost, increased flexibility, elasticity and the efficient use of resources. With these great advantages, there are concerns and problem for cloud users. Some obstacles in using cloud computing services are because of its distributed and untransparent nature. That's why users have no control over their data and information and are not sure of whether or not to trust cloud providers. Therefore, the objective of this research is to examine the influence of customer and provider characteristics on cloud service outcome, impact of Trust on cloud service outcome, and to examine if Trust mediate the relationship of customer characteristics and provider’s characteristics with cloud service outcome. In order to achieve the objectives of this research, the analyses of measurement model, factor analysis, assessment of structure model and regression analysis has been conducted. The Findings of this study shows that the existing threats in cloud service is one of the reason why users are not trusting cloud service providers. These threats which are privacy and security cause unwillingness to use cloud services. This study also found that Trust plays an enormous role for cloud service users and providers because it increases usage, willingness to use among customers, and reputation of cloud service providers. It also found that Outcome is really low if there is no trust in these services. This study will help cloud service providers/developers to know the reasons why some people and organizations are not willing to use their services.

Cloud computing has empowered the individual user by providing seemingly unlimited storage space and availability and accessibility of data anytime and anywhere. Cloud service providers are able to maximize data storage space by incorporating data deduplication into cloud storage. Although data deduplication removes data redundancy and data replication, it also introduces major data privacy and security issues for the user. In this paper, a new privacy-preserving framework that addresses this issue is proposed. Our framework uses an efficient deduplication algorithm to divide a given file into smaller units. These units are then encrypted by the user using the combination of a secure hash function and a block encryption algorithm. An index tree of hash values of these units is also generated and encrypted using an asymmetric search encryption scheme by the user. This index tree will enable the cloud service provider to search through the index and return the requested units. We will show that our proposed framework will allow cloud service and storage providers to employ data deduplication techniques without giving them access to either the users' plaintexts or the users' decryption keys.