Anonymous Aggregate Fine-Grained Cloud Data Verification System for Smart Health

With the rapid development of cloud computing and Internet of Things (IoT), smart health (s-health) is anticipated to enhance healthcare quality significantly. However, data integrity, user anonymity, and authentication concerns have not been adequately addressed in s-health. Remote data integrity checking (RDIC) and digital signature schemes have great potential to address these requirements. Nevertheless, the direct adoption of these schemes suffers from two flaws. First, they incur prohibitively high computation and communication overhead. Second, they leak sensitive health information about patients and do not provide complete anonymity. To address these issues, we introduce <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq1-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq2-3229269.gif"/></alternatives></inline-formula>, an aggregate anonymous attribute-based remote data verification scheme. In <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq3-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq4-3229269.gif"/></alternatives></inline-formula>, the integrity of an arbitrary number of cloud data files can be verified at once without downloading the whole data, thereby saving communication and computation resources. Moreover, in <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq5-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq6-3229269.gif"/></alternatives></inline-formula>, data owners can be authenticated by performing highly efficient operations. Also, <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq7-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq8-3229269.gif"/></alternatives></inline-formula> provides complete anonymity and supports dishonest-user traceability. We provide security definitions for <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq9-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq10-3229269.gif"/></alternatives></inline-formula> and prove its security under the hardness assumption of the bilinear Diffie-Hellman (BDH) problem. Performance comparisons and experimental results indicate that <inline-formula><tex-math notation="LaTeX">$\mathbf {A^{3}B}$</tex-math><alternatives><mml:math><mml:mrow><mml:msup><mml:mi mathvariant="bold">A</mml:mi><mml:mn mathvariant="bold">3</mml:mn></mml:msup><mml:mi mathvariant="bold">B</mml:mi></mml:mrow></mml:math><inline-graphic xlink:href="liu-ieq11-3229269.gif"/></alternatives></inline-formula>-<inline-formula><tex-math notation="LaTeX">$\mathbf {RDV}$</tex-math><alternatives><mml:math><mml:mi mathvariant="bold">RDV</mml:mi></mml:math><inline-graphic xlink:href="liu-ieq12-3229269.gif"/></alternatives></inline-formula> is more efficient and expressive than state-of-the-art approaches.