Lightweight and Privacy-Preserving Delegatable Proofs of Storage with Data Dynamics in Cloud Storage

Cloud storage has been in widespread use nowadays, which alleviates users’ burden of local data storage. Meanwhile, how to ensure the security and integrity of the outsourced data stored in a cloud storage server has also attracted enormous attention from researchers. Proofs of storage (<inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq1-2851256.gif"/></alternatives></inline-formula>) is the main technique introduced to address this problem. Publicly verifiable <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq2-2851256.gif"/></alternatives></inline-formula> allowing a third party to verify the data integrity on behalf of the data owner significantly improves the scalability of cloud service. However, most of existing publicly verifiable <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq3-2851256.gif"/></alternatives></inline-formula> schemes are extremely slow to compute authentication tags for all data blocks due to many expensive group exponentiation operations, even much slower than typical network uploading speed, and thus it becomes the bottleneck of the setup phase of the <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq4-2851256.gif"/></alternatives></inline-formula> scheme. In this article, we propose a new variant formulation called “Delegatable Proofs of Storage (<inline-formula><tex-math notation="LaTeX">$\mathsf {DPOS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">DPOS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq5-2851256.gif"/></alternatives></inline-formula>)”. Then, we construct a lightweight privacy-preserving <inline-formula><tex-math notation="LaTeX">$\mathsf {DPOS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">DPOS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq6-2851256.gif"/></alternatives></inline-formula> scheme, which on one side is as efficient as private <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq7-2851256.gif"/></alternatives></inline-formula> schemes, and on the other side can support third party auditor and can switch auditors at any time, close to the functionalities of publicly verifiable <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq8-2851256.gif"/></alternatives></inline-formula> schemes. Compared to traditional publicly verifiable <inline-formula><tex-math notation="LaTeX">$\mathsf {POS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">POS</mml:mi></mml:math><inline-graphic xlink:href="yang-ieq9-2851256.gif"/></alternatives></inline-formula> schemes, we speed up the tag generation process by at least several hundred times, without sacrificing efficiency in any other aspect. In addition, we extend our scheme to support fully dynamic operations with high efficiency, reducing the computation of any data update to <inline-formula><tex-math notation="LaTeX">$O(\log n)$</tex-math><alternatives><mml:math><mml:mrow><mml:mi>O</mml:mi><mml:mo>(</mml:mo><mml:mo form="prefix">log</mml:mo><mml:mi>n</mml:mi><mml:mo>)</mml:mo></mml:mrow></mml:math><inline-graphic xlink:href="yang-ieq10-2851256.gif"/></alternatives></inline-formula> and simultaneously only requiring constant communication costs. We prove that our scheme is sound and privacy preserving against auditor in the standard model. Experimental results verify the efficient performance of our scheme.