Enabling Cloud Storage Auditing with Key Exposure Resistance

Auditing is an important service to verify the data in the cloud. Most of the auditing protocols are based on the assumption that the client’s secret key for auditing is secure. The security is not fully achieved, because of the low security parameters of the client. If the auditing protocol is not secured means the data of the client will exposed inevitably. In this paper a new mechanism of cloud auditing is implemented. And investigate to reduce the damage of the client key exposure in cloud storage auditing. Here the designing is built upon to overcome the week key auditing process. The auditing protocol is designed with the help of key exposure resilience. In the proposed design, the binary tree structure and the pre-order traversal technique is used to update the secret keys of the client. The security proof and the performance shows the cloud storage auditing with key exposure resilience is very efficient. INTRODUCTION Cloud storage auditing is used to verify the integrity of the data stored in public cloud, which is one of the important security techniques in cloud storage. In recent years, auditing protocols for cloud storage have attracted much attention and have been researched intensively these protocols focus on several different aspects of auditing, and how to achieve high bandwidth and computation efficiencyis one of the essential concerns. For that purpose, theHomomorphic Linear Authenticator (HLA) technique that supports blockless verification is explored to reduce the overheadsof computation and communication in auditing protocols, which allows the auditor to verify the integrity of the data in cloud without retrieving the whole data. Many cloud storage auditing protocols like have been proposed based on this technique. The privacy protection of data is also an important aspect of cloud storage auditing. In order to reduce the computational burden of the client, a third-party auditor (TPA) is introduced to help the client to periodically check the integrity of the data in cloud. However, it is possible for the TPA to get the client’s data after it executes the auditing protocol multiple times. Auditing protocols are designed to ensure the privacy of the client’s data in cloud. Another aspect having been addressed in cloud storage auditing is how to support data dynamic operations. An n get al. has proposed an auditing protocol supporting fully dynamic data operations including modification, insertion and deletion. Auditing protocols can also support dynamic data operations. Other aspects, such as proxy auditing, user revocation and eliminating certificate management in cloud storage auditing have also been studied. Though many research works about cloud storage auditing have been done in recent years, a critical security problem—the key exposure problem for cloud storage auditing, has remained unexplored in previous researches. While all existing protocols focus on the faults or dishonesty of the cloud, they have overlooked the possible weak sense of security and/or low security settings at theclient.In fact, the client’s secret key for cloud storage auditing maybe exposed, even known by the cloud, due to several reasons. Firstly, the key management is a very complex procedure which involves many factors including system policy, user training, etc. One client often needs to manage varieties of keys to complete different security tasks. Any careless mistake or fault in managing these keys would make the key exposure possible. It is not uncommon to see a client choosing tousle cheap software-based key management for