journal article·2023-01-04Open access

Lightweight Integrity Preserving Scheme for Secure Data Exchange in Cloud-Based IoT Systems

Zaid Alaa Hussien, Husam A. Abdulmalik, Mohammed Abdulridha Hussain, Vincent Omollo Nyangaresi, Junchao Ma, Zaid Ameen Abduljabbar, Iman Qays Abduljaleel

Applied Sciences· Volume 13· Issue 2

Abstract

The information obtained from external sources within the cloud and the resulting computations are not always reliable. This is attributed to the absence of tangible regulations and information management on the part of the information owners. Although numerous techniques for safeguarding and securing external information have been developed, security hazards in the cloud are still problematic. This could potentially pose a significant challenge to the effective adoption and utilization of cloud technology. In terms of performance, many of the existing solutions are affected by high computation costs, particularly in terms of auditing. In order to reduce the auditing expenses, this paper proposes a well-organised, lightweight system for safeguarding information through enhanced integrity checking. The proposed technique implements a cryptographic hash function with low-cost mathematic operations. In addition, this paper explores the role of a semi-trusted server with regard to smart device users. This facilitates the formal management of information prior to distribution through the IoT-cloud system. Essentially, this facilitates the validation of the information stored and exchanged in this environment. The results obtained show that the proposed system is lightweight and offers features such as a safeguarding capability, key management, privacy, decreased costs, sufficient security for smart device users, one-time key provision, and high degree of accuracy. In addition, the proposed method exhibits lower computation complexity and storage expenses compared with those of other techniques such as bilinear map-based systems.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Cloud Data Security Solutions · Cryptography and Data Security · Blockchain Technology Applications and Security

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Information Technology Department, Management Technical College, Southern Technical University, Basrah 61004, Iraq

Department of Computer Science, College of Education for Pure Sciences, University of Basrah, Basrah 61004, Iraq

Faculty of Biological & Physical Sciences, Tom Mboya University, Homabay 40300, Kenya

College of Big Data and Internet, Shenzhen Technology University, Shenzhen 518118, China

Technical Computer Engineering Department, Al-Kunooze University College, Basrah 61001, Iraq

Shenzhen Institute, Huazhong University of Science and Technology, Shenzhen 518118, China

Department of Computer Science, College of Computer Science and Information Technology, University of Basrah, Basrah 61004, Iraq

Funding

university-enterprise cooperative R&D project of SZTU

References (43)

Show source-provided references
1. Public integrity auditing for dynamic group cooperation files with efficient user revocation10.1016/j.csi.2022.103641 ↗
2. A survey on privacy and security of Internet of Things10.1016/j.cosrev.2020.100312 ↗
3. Hussien, Z.A., Abduljabbar, Z.A., Hussain, M.A., Al Sibahee, M.A., Lu, S., and AL-Asadi, H.A. (2019, January 22–24). An efficient and secure scheme for dynamic shared data in cloud. Proceedings of the 3rd International Conference on Computer Science and Application Engineering, Sanya, China.10.1145/3331453.3361648 ↗
4. Multi-class privacy-preserving cloud computing based on compressive sensing for IoT
5. Belal, M.M., and Sundaram, D.M. (2022). Comprehensive review on intelligent security defences in cloud: Taxonomy, security issues, ML/DL techniques, challenges and future trends. J. King Saud Univ.-Comput. Inf. Sci., in press.10.1016/j.jksuci.2022.08.035 ↗
6. Ateniese, G., Burns, R., Curtmola, R., Herring, J., Kissner, L., Peterson, Z., and Song, D. (2007, January 28). Provable data possession at untrusted stores. Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS’07), New York, NY, USA.10.1145/1315245.1315318 ↗
7. An efficient and secure dynamic auditing protocol for data storage in cloud computing10.1109/TPDS.2012.278 ↗
8. Secure cloud storage with data dynamics using secure network coding techniques10.1109/TCC.2020.3000342 ↗
9. ProSAS: Proactive security auditing system for clouds10.1109/TDSC.2021.3062204 ↗
10. Juels, A., and Kaliski, B.S. (2007, January 28). Pors: Proofs of retrievability for large files. Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS ’07), New York, NY, USA.10.1145/1315245.1315317 ↗
11. Compact proofs of retrievability10.1007/s00145-012-9129-2 ↗
12. The complexity of online memory checking10.1145/1462153.1462155 ↗
13. Feng, Y., Mu, Y., Yang, G., and Liu, J.K. (2015, January 1). A new public remote integrity checking scheme with user privacy. Proceedings of the 20th Australasian Conference on Information Security and Privacy (ACISP ’15), Brisbane, QLD, Australia.10.1007/978-3-319-19962-7_22 ↗
14. Comparative analysis of cloud data integrity auditing protocols10.1016/j.jnca.2016.03.010 ↗
15. Schwarz, T.S.J., and Miller, E.L. (2006, January 4–7). Store, forget, and check: Using algebraic signatures to check remotely administered storage. Proceedings of the 26th IEEE International Conference on Distributed Computing Systems (ICDCS ’06), Lisboa, Portugal.
16. Curtmola, R., Khan, O., Burns, R., and Ateniese, G. (2008, January 17–20). MR-PDP: Multiple-replica provable data possession. Proceedings of the 28th International Conference on Distributed Computing Systems (ICDCS ’08), Beijing, China.10.1109/ICDCS.2008.68 ↗
17. Ateniese, G., Kamara, S., and Katz, J. (2009, January 6–10). Proofs of storage from homomorphic identification protocols. Proceedings of the 15th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 09), Tokyo, Japan.
18. Ateniese, G., Di Pietro, R., Mancini, L.V., and Tsudik, G. (2008, January 22). Scalable and efficient provable data possession. Proceedings of the 4th International Conference on Security and Privacy in Communication Netowrks (SecureComm ’08), New York, NY, USA.10.1145/1460877.1460889 ↗
19. Erway, C., Küpçü, C.A., Papamanthou, C., and Tamassia, R. (2009, January 9–13). Dynamic provable data possession. Proceedings of the 16th ACM Conference on Computer and Communications Security, New York, NY, USA.10.1145/1653662.1653688 ↗
20. Dynamic provable data possession10.1145/2699909 ↗
21. WITHDRAWN: Dynamic remote data auditing for securing big data storage in cloud computing10.1016/j.ins.2015.09.004 ↗
22. Wang, C., Wang, Q., Ren, K., and Lou, W. (2010, January 14–19). Privacy-preserving public auditing for data storage security in cloud computing. Proceedings of the IEEE INFOCOM, San Diego, CA, USA.10.1109/INFCOM.2010.5462173 ↗
23. Wang, C., Wang, Q., Ren, K., and Lou, W. (2009, January 13–15). Ensuring data storage security in cloud computing. Proceedings of the 17th International Workshop on Quality of Service (IWQoS), Charleston, SC, USA.
24. Comparative analysis of cloud data integrity auditing protocols
25. Zheng, Q., and Xu, S. (2011, January 21). Fair and dynamic proofs of retrievability. Proceedings of the First ACM Conference on Data and Application Security and Privacy (CODASPY’ 11), New York, NY, USA.10.1145/1943513.1943546 ↗
26. Zhu, Y., Wang, H., Hu, Z., Ahn, G.J., Hu, H., and Yau, S.S. (2010, January 4). Efficient provable data possession for hybrid clouds. Proceedings of the 17th ACM Conference on Computer and Communications Security (CCS ’10), New York, NY, USA.10.1145/1866307.1866421 ↗
27. A privacy-preserving remote data integrity checking protocol with data dynamics and public verifiability10.1109/TKDE.2011.62 ↗
28. Efficient remote data possession checking in critical information infrastructures10.1109/TKDE.2007.190647 ↗
29. Wei, L., Zhu, H., Cao, Z., Jia, W., and Vasilakos, A.V. (2010, January 21–25). SecCloud: Bridging secure storage and computation in cloud. Proceedings of the IEEE 30th International Conference on Distributed Computing Systems Workshops, Genova, Italy.10.1109/ICDCSW.2010.36 ↗
30. Security and privacy for storage and computation in cloud computing10.1016/j.ins.2013.04.028 ↗
31. Du, W., Jia, J., Mangal, M., and Murugesan, M. (2004, January 24–26). Uncheatable grid computing. Proceedings of the 24th International Conference on Distributed Computing Systems, Tokyo, Japan.10.1109/ICDCS.2004.1281562 ↗
32. Efficient strong designated verifier signature schemes without random oracle or with nondelegatability10.1007/s10207-011-0146-1 ↗
33. A novel id-based designated verifier signature scheme10.1016/j.ins.2007.07.005 ↗
34. Secure auditing and deduplicating data in cloud10.1109/TC.2015.2389960 ↗
35. Enabling cloud storage auditing with key-exposure resistance10.1109/TIFS.2015.2400425 ↗
36. Liu, B., Yu, X.L., Chen, S., Xu, X., and Zhu, L. (2017, January 25–30). Blockchain based data integrity service framework for IoT data. Proceedings of the 2017 IEEE International Conference on Web Services (ICWS), Honolulu, HI, USA.10.1109/ICWS.2017.54 ↗
37. Blockchainbased verification framework for data integrity in edge-cloud storage10.1016/j.jpdc.2020.06.007 ↗
38. RDIC: A blockchain-based remote data integrity checking scheme for IoT in 5G networks10.1016/j.jpdc.2021.02.012 ↗
39. A lightweight data integrity verification with data dynamics for mobile edge computing
40. Lightweight and Privacy-Preserving Delegatable Proofs of Storage with Data Dynamics in Cloud Storage10.1109/TCC.2018.2851256 ↗
41. Abduljabbar, Z.A., Jin, H., Ibrahim, A., Hussien, Z.A., Abbdal, M.A., and Zou, D. (2016, January 23–26). Privacy preserving image retrieval in IoT-cloud. Proceedings of the 15th International Conference on Trust, Security and Privacy in Computing and Communications, Tianjin, China.10.1109/TrustCom.2016.0141 ↗
42. Chen, B., and Curtmola, R. (2012, January 16). Robust dynamic remote data checking for public clouds. Proceedings of the 2012 ACM Conference on Computer and Communications Security (CCS ’12), New York, NY, USA.10.1145/2382196.2382319 ↗
43. Toward secure and dependable storage services in cloud computing10.1109/TSC.2011.24 ↗