134
data stored in the cloud and shared data among users by using the asymmetric group key agreement scheme and proxy re-signature. The asymmetric group key agreement scheme allows the group to share both public
and private keys and create a tag attached to files. The proxy re-signature
updates the tags when there are changes in the group members. User
identity information is preserved by anonymising the auditor and group
members. In this way, data control is improved, in instances such as when
employees leave an organisation.
Similar to the auditing scheme proposed by Yu et al. (2015), a number
of works have proposed auditing schemes where, in effect, an independent
third party serves as the verifier of data integrity. For example, Sookhak
et al (2014) proposed a remote data auditing method for verifying the
integrity of data stored in cloud; algebraic signatures are used to allow the
auditor to check the possession of user data in cloud. Similarly, Yu et al.
(2016) propose key-updating and authenticator-evolving mechanism with
zero- knowledge privacy of the stored files for secure cloud data auditing,
which incorporates zero-knowledge proof systems, proxy re-signatures
and homomorphic linear authenticators. Yang et al. (2015) proposed an
extended proxy-assisted approach that utilises an attribute-based encryption method to ensure scalable data sharing within the cloud. Tian et al.
(2015) proposed a dynamic hash table (DHT) public auditing scheme.
The DHT is a two-dimensional data structure used by the auditor to
record data property information for rapid and dynamic auditing. Public
key-based homomorphic authentication and random masking created by
the auditor are used for the preservation of privacy.
While each of the approaches above represent novel means to securing
data, the practical reality is that most cloud service providers rely on traditional security and privacy methodologies. A wide range of approaches
have been proposed for securing cloud services including securing infrastructure using extant multi-component methods. For example, Liu et al.
(2015) propose a secure infrastructure based on Advanced Encryption
Standard (AES), Searchable Symmetric Encryption (SSE), CiphertextPolicy Attribute-Based Encryption (CPABE) and Digital Signature (DS).
Mollah et al. (2017) propose a scheme that utilises a combination of secret
key encryption, public key encryption, searchable secret key encryption
and digital signatures for a data searching and sharing scheme. The
STOVE model proposed by Tan et al. (2014) secures data in the cloud by
restricting the operational ability of applications. The model restricts
untrusted applications and isolates the application using formal
O. M. ALOFE AND K. FATEMA
data stored in the cloud and shared data among users by using the asymmetric group key agreement scheme and proxy re-signature. The asymmetric group key agreement scheme allows the group to share both public
and private keys and create a tag attached to files. The proxy re-signature
updates the tags when there are changes in the group members. User
identity information is preserved by anonymising the auditor and group
members. In this way, data control is improved, in instances such as when
employees leave an organisation.
Similar to the auditing scheme proposed by Yu et al. (2015), a number
of works have proposed auditing schemes where, in effect, an independent
third party serves as the verifier of data integrity. For example, Sookhak
et al (2014) proposed a remote data auditing method for verifying the
integrity of data stored in cloud; algebraic signatures are used to allow the
auditor to check the possession of user data in cloud. Similarly, Yu et al.
(2016) propose key-updating and authenticator-evolving mechanism with
zero- knowledge privacy of the stored files for secure cloud data auditing,
which incorporates zero-knowledge proof systems, proxy re-signatures
and homomorphic linear authenticators. Yang et al. (2015) proposed an
extended proxy-assisted approach that utilises an attribute-based encryption method to ensure scalable data sharing within the cloud. Tian et al.
(2015) proposed a dynamic hash table (DHT) public auditing scheme.
The DHT is a two-dimensional data structure used by the auditor to
record data property information for rapid and dynamic auditing. Public
key-based homomorphic authentication and random masking created by
the auditor are used for the preservation of privacy.
While each of the approaches above represent novel means to securing
data, the practical reality is that most cloud service providers rely on traditional security and privacy methodologies. A wide range of approaches
have been proposed for securing cloud services including securing infrastructure using extant multi-component methods. For example, Liu et al.
(2015) propose a secure infrastructure based on Advanced Encryption
Standard (AES), Searchable Symmetric Encryption (SSE), CiphertextPolicy Attribute-Based Encryption (CPABE) and Digital Signature (DS).
Mollah et al. (2017) propose a scheme that utilises a combination of secret
key encryption, public key encryption, searchable secret key encryption
and digital signatures for a data searching and sharing scheme. The
STOVE model proposed by Tan et al. (2014) secures data in the cloud by
restricting the operational ability of applications. The model restricts
untrusted applications and isolates the application using formal
O. M. ALOFE AND K. FATEMA