Shamir's key based confidentiality on cloud data storage

The significance of the cloud enables the data owners (DOs) to store data remotely in cloud server (CS). The external and internal attacks on the stored data at CS can deliberately remove data. Furthermore, the CS removes the stored data to make empty location for the user's upcoming new data. However, it is a legal expectation of DOs to know whether their data are correctly stored or altered in CS. In this article, we propose a novel privacy-aware and hash-parity-bits-based public auditing (PA-HPPA) framework to secure full data, left half of the data, and the right half of the data, generated by a DO. DO generates two private key pairs with the assistance of a virtual key and a user ID (IP). The virtual key is the sequence number of DO who is registered and provided by the trusted data manager (TDM) while IP is the sequence number of DO working in an organization. Subsequently, DO blinds the categorized data and generates their signatures and hashes. In addition, DO generates the parity bits using xor and assigns to each hard drive (HD) in CS, which assistants to TDM in public auditing. Second, how to identify the error in the stored data and how to securely recover the error/missed data? Extension to the framework, the novel proposed data error identification and secure data recovery produce tags for installed HDs of CS using truth table and recover the altered/missed data via a authenticator, which is produced using xor function. Third, how to protect a valid user from revocation and, in case a user has revoked on merit basis, then how to securely access the stored data of it? This novel work has proposed three conditions to meet the validity of the valid user from revocation and securely generating the public-private key pairs to access the stored data of the revoked user securely from CS. Fourth, there is an efficient novel proposed dynamic operation scheme to insert, update, or delete the stored data at CS without regenerating the signatures, hashes, and tags for the whole stored data in cloud. The security analysis and the performance evaluation of the proposed solutions are provably efficient and secure with reduced communication costs.

Cloud computing has providing unlimited storage space to store data in cloud. Service providers can increase space in cloud by incorporating with de-duplication systems. In the previous de-duplication systems, they consider single server to store data in cloud. However, as lots of de-duplication system and storage are intend by users and applications for higher reliability and the data are critical. Hence in this system, the concept of de-duplication and security is achieved by means of Proof of Ownership of the File[POF]. We used multiple server to store the data in cloud in this system. We outsource the keys to slave machine securely in order to keep the data very secure. De-key supports both file level and block level de-duplications. The overhead of key management is avoided in this system and provides fault tolerance for key management. In this system, Triple DES technique is used, as the plain text is encrypted triple times with the convergent keys so that the data will be more secured. Scalability increases as de-key achieved efficiently. Cost efficiency is achieved as multiple users of same data is just referred and not newly added. Deleting content of shared file of different user will allow deleting only convergent key reference not co0ntent stored in Hadoop Distributed File system Storage[HDFS].

The present focuses on the Cloud storage services are having a critical issue in handling the user's private information and its confidentiality. The User data privacy preserving is a vital facet of online storage in cloud computing. The information in cloud data storage is underneath, staid molests of baffling addict endeavor, and it may leads to user clandestine in a roar privacy breach. Moreover, privacy preservation is an indeed research pasture in contemporary information technology development. Preserving User Data in Cloud Service (PUDCS) happens due to the data privacy breach results to a rhythmic way of intruding high confidential digital storage area and barter those information into business by embezzle others information. This paper focuses on preventing (hush-hush) digital data using the proposed privacy preserving framework. It also describes the prevention of stored data and de-identifying unauthorized user attempts, log monitoring and maintaining it in the cloud for promoting allusion to providers and users.

<span lang="EN-US">Cloud Computing is the ability to improve the utility or train new human resources without investing in new infrastructure, or add capabilities to existence without the latest software licensing. It expanded the capabilities of Information Technology (IT). From the past few years, cloud computing has developed from a good business concept in the best rising sectors of the IT industry. But more information on individuals and companies was put in the cloud, and concerns began to think about how secure the cloud environment was. Despite cloud surrounding structures, enterprise users still do not want to expand their business in the cloud. Security reduces the growth of cloud computing and continues to spread the market with complexity with data privacy and data protection. The security of cloud computing has constantly been an significant aspect of improved quality of service from cloud service providers. Data storage in the cloud has a problem related to data security. However, cloud computing construct many new security challenges which have not been well examine. In order to ensure that the user's data in the cloud is secure, we have proposed an effective mechanism with a distinctive feature of data integrity and privacy. This paper focusing on problems relating to the cloud data storage techniques and security in virtual environment. We recommend a method for providing data storage and security in cloud using public key Cryptosystem, which uses the concept of the modified RSA algorithm to provide better security for the data stored in the cloud. </span>

Nowadays, cloud services are used by numerous people all around the globe. One of its major applications is in the field of cloud storage. Users can store data in cloud without the need to have har...

It has been found that the Cloud computing facilities have been used by users of various categories to meet their flexible computing needs which include Processing Powers, Storages, Servers, etc., and among these needs, Public Cloud storage has been used for storing huge data files of different formats and different sizes in Cloud. Because of data security concerns in Cloud, symmetric algorithms have been preferred for encryption and decryption of these data files. Because of limited Internet speed, we must have provision to identify fast and efficient symmetric algorithms for Cloud storages. In the literature survey, we have not found any framework to investigate the efficiency of symmetric algorithms in securing and storing data in Cloud based on various parameters like Encryption Time, Decryption Time, and Throughput, etc.

Cloud computing enables users with limited resources to accomplish complex computation. Meanwhile, the massive human physiological data generated by Wireless Body Area Network (WBAN) can be benefited by it through being stored in cloud servers. However, cloud storage of human physiological data is challenged by some issues, while one of them is soundness verification. Although local WBAN user is not powerful enough to compute the result on whole data repository, he may have concern on the correctness of the results from cloud which he pays for. To address this problem, this paper proposes a DMB+ tree data structure, and designs a query and verification algorithm for human physiological data in cloud computing environment based on DMB+ tree. By reducing the number of layers returned from the query tree, the algorithm reduces the height of the tree when verifying, thus improving the efficiency of query validation. The experimental results show that the performances in time and network traffic of DMB+ query verification are superior to Merkle tree and digital signature algorithm.

In trusted public cloud, allowing data consumers to recover the information with full integrity. The most of research efforts were focused on a single data owner for safe cloud-based encryption of encrypted data. Additionally, searchable encryption makes it possible for a data user to locate a specific encrypted document from a cloud of encrypted data by searching for keywords (KS). This study isn't useful for retrieving relevant results from keyword searches. Such issues may be overcome using the secure and privacy-preserving keyword search retrieval (SPKSR) technology, which allows users to recover hashed encrypted files from cloud data that is also hashed encrypted. Three distinct entities are included in the proposed system: (a) cloud server (CS), (b) data owner (DO), and (c) data users (DU). It is the CS that generates a searchable index tree for the owner’s hashed encrypted files. The CS keeps the index tree structure and the hashed encrypted document set in its own storage. The encrypted data is hashed and DU executes the “search” over it. Analyses and comparisons of the experimental findings of the suggested system with the other existing system demonstrate its superiority.KeywordsCloud serverCloud computingData usersData ownerIndex treeKeyword‐based searchHashed encrypted document

Предметом дослідження є шифрування інформації в хмарних обчисленнях і сховищах даних. Хмарні технології дозволяють значно скоротити витрати на ІТ-інфраструктуру і гнучко реагувати на зміни обчислювальних потреб. В такому випадку має бути забезпечено можливість проведення обчислень над зашифрованими даними без їх дешифрування. Таку властивість має повністю гомоморфне шифрування. Метою даної статті є підвищення ефективності повністю гомоморфного шифрування (ПГШ) на основі матричних поліномів за допомогою методу пакетного шифрування в один шифротекст декількох відкритих текстів з наступною комплексною обробкою зашифрованих даних. Пакетне шифрування зводиться до того, що при одній операції над двома шифротекстами відбувається одночасне виконання операцій покоординатно над усіма даними, що містяться в цих шифротекстах у вигляді відкритих текстів (SIMD). Завданнями визначено побудову алгоритмів повністю гомоморфного шифрування даних за допомогою матричних поліномів. У статті використано методи шифрування: з використанням китайської теореми про залишки; шляхом запису в одній матриці декількох різних власних значень при різних власних векторах; за допомогою інтерполяції матричних поліномів. В результаті описано та проаналізовано можливі підходи до побудови пакетних ПГШ на підставі матричних поліномів, а також представлено набір алгоритмів, що реалізують криптосхему ПГШ з інтерполяцією матричних поліномів. Наведені алгоритми і криптосхеми дозволяють передавати інформацію в повідомленнях і дані в запитах як відкритий текст, бо над шифрованими даними можна здійснювати необмежену кількість складних алгебраїчних операцій. Це, у свою чергу, ускладнює можливість дешифрування і зчитування даних без знання всього алгоритму. Було показано, що побудовані криптосхеми перевершують аналоги по ефективності, які розроблені дослідниками з IBM. Можна зробити наступний висновок: пакетне повністю е шифрування на основі матричних поліномів здатне виключити необхідність хоча б часткового дешифрування даних для несанкціонованих обчислень над зашифрованими масивами даних у хмарних сховищах.

The article presents the concept and technical aspects of the development of a corporate educational information system using machine learning methods and modern approaches to ensuring information security. The proposed solution is aimed at educational institutions and provides adaptive management of the educational process, optimization of resources and increased information security. The main emphasis is on the development of the system architecture, which includes the efficient placement of servers, the use of containerization technology, system monitoring, version control, and the application of security protocols to protect data and the system as a whole. The use of two servers is proposed: one for basic computing tasks, data storage and support of basic services, and the other for backup, monitoring and protection against unauthorized access. To increase the flexibility and scalability of the system, Docker containerization technology is used, which allows isolating processes and simplifies integration with cloud services. An important component is the integration of external monitoring, which provides control over the availability of services in real time. Emphasis is also placed on the use of reinforced firewalls and backup Internet connections to increase the system's resistance to cyber threats and cyber attacks. Functionality of the system includes an intuitive interface with a number of interactive widgets, such as information about recently registered courses, uploading learning materials, an integrated calendar, displaying performance graphs and task lists. Users can quickly receive information about their progress and plan the next steps in the educational process. An important decision was to abandon the creation of our own corporate chat in favor of implementing ready-made solutions with a high level of security and support for teamwork. This allows you to significantly optimize the use of resources and focus on the development of the main functions of the system. In addition, the use of version control systems for effective project management is proposed, which allows isolating different stages of development and minimizing the risk of errors. The proposed concept of the corporate educational information system provides a comprehensive approach to the management of the educational process taking into account the requirements of modern technologies, increases the effectiveness of education and guarantees a high level of data security.

The Cloud computing technology is a concept of providing online multiple resources in the scalable and reliable method. The user will access cloud service as per their requirement of computing level. There is no capital expenditure involved in computing resources for cloud user. The users have to pay as per their storage, network and service usage. The cloud computing have some highlighted issues like compliance, cross border data storage issues, multi-tenant and down time issues. The most important issues are related to storage of data in cloud. Data confidentiality, data integrity, data authentication and regulations on data protection are major problems that affect user’s business. This paper discusses about encryption and decryption data security issues in cloud and its safety measures and comes out with a novel research work of cloud data security model.

Cloud is a virtual environment which provides huge amount of storage to cloud users. It is more useful to small and medium scale enterprises for their initial startup. It simplifies the work burden in maintaining the server and storage from users' side. Cloud has serious dispute in securing the data from unauthorized access. If users' sensitive data are stored in cloud then it must be secured. Security of data is ensured by encryption algorithms but not all traditional encryption algorithms do so in cloud. To product the data in cloud, this paper proposes an Enhanced Encryption Algorithm (EEA) for securing the data in cloud storage. This is a symmetric encryption algorithm. It uses same key for encrypting and decrypting the data before stored in to cloud. Result of the proposed EEA produces different ciphertext for same plaintext. It confuses the cryptanalyst (hackers) to get the original data. Hence this EEA is efficient hiding techniques for public cloud.

Security is an increasingly growing concern for network communications and video is an emerging segment of network traffic that uses large amounts of bandwidth. Streaming video, vs. downloading a video for later viewing, requires a continuous, high data rate. The data rate will vary depending on the quality of the video. Video surveillance is a streaming video application that in addition may require securing the data stream to prevent others from viewing it as well as prevent any tampering of that video stream. There are two parts to secure communication, key distribution and ciphers. A cipher requires a secret key that is used to encrypt data (plaintext), transforming it into an unreadable form (ciphertext) and then to decrypt it back into its original form. Key distribution is the method used to exchange the secret key between the desired end users and no one else. Current block ciphers are relatively slow compared to existing bandwidth because they require a substantial amount of processing that must compete for CPU cycles with the video encoding and compression processing. Frequently changing keys is thought to increase security, but the public key exchange method requires even more processing than the cipher. Cipher and key exchange processing can be off-loaded from the CPU, when the communication end point is the other end of the link, by using dedicated hardware called a link encryptor. Current classical security algorithms are based on the perceived computational complexity of certain mathematical functions and have not been proved secure. The public key algorithm is at risk from future quantum computers, whereas block ciphers are only weakened and an easy fix is to double the length of the key. Both are constantly at risk from a potential break through algorithm. Communications channels that exploit properties unique to quantum systems have been shown to enable functionality that cannot be achieved by classical means. If a high level of security is deemed necessary for the video stream, one might consider the use of a One-Time-Pad cipher [Wikipedia 2010], the only provably secure cipher, along with Quantum Key Distribution (QKD), also a provably secure method of exchanging the secret keys used by a cipher. QKD is a protocol based on the quantum laws of physics and is provably information theoretically secure to accomplish key distribution [Gisin, et al., 2002]. QKD keys, when used with a One-Time-Pad cipher, can provide secure communications. A One-Time-Pad cipher algorithm performs an Exclusive OR (XOR) on a random secret key and the message. This is a simple operation that incurs little overhead compared to the more common

Cloud data storage is a model of data storage where data in its digital form is stored in logical pools across the physical storage which is distributed across multiple servers usually in diverse locations. The full physical environment is owned and managed by an organization called Cloud Service Provider (CSP). In this type of storage, the data is distributed and owned by third party, and there is risk of unauthorized access. This makes security, reliability, confidentiality and privacy of data more important when storage in cloud is thought of. Although there are methods available for providing security, much work is not done with emphasis on dynamic nature of the data. Hence securing the data while updating becomes important. In this paper, a method that ensures confidentiality of data stored in cloud using homomorphic encryption is presented. The paper also provides a technique to ensure confidentiality during data updates in cloud. The presented method includes byte level automorphism for ensuring data integrity and confidentiality. The tabulated experimental results show that the proposed method provides more secure frame work for ensuring confidentiality and integrity of data in cloud.

Privacy preserving Internet of Things: From privacy techniques to a blueprint architecture and efficient implementation