Hoarding Mutual Data via Security-Arbiteron the Cloud

Most of the organizations outsource data cache to the cloud such that a proprietor of an organization can easily allocate data with other users. Due to the presence of security issues in the cloud, both proprietors and users are suggested to verify the integrity of cloud data with Provable Data Possession (PDP). However, previous methods disclose the identity of a data proprietor to the untrusted cloud or any public verifiers, or introduce distinct overheads on authentication metadata to preserve privacy. In this work, we propose a simple and efficient publicly verifiable approach to ensure cloud data integrity without sacrificing the privacy of data proprietors or requiring distinct verification metadata. Specifically, we introduce a security arbiter (SEA), which is able to generate authentication metadata (i.e., signatures) on deployed data for data proprietors. Thus, an organization can employ its own anonymous verification mechanism, and the cloud is unaware to that since it only deals with typical PDP-metadata, consequently, there are no extra hoards overhead when compared with existing non-anonymous PDP solutions. The significant features include data secrecy, such that the SEA does not learn anything about the data to be uploaded to the cloud at all, which is able to minimize the requirement of trust on the SEA. Security scrutinizations prove our pattern is secure, and experiment results demonstrate our pattern is efficient.