DMCA
A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding (2012)
| Venue: | IEEE Trans. Parallel and Distributed Systems |
| Citations: | 25 - 0 self |
BibTeX
@ARTICLE{Lin12asecure,
author = {Hsiao-ying Lin and Wen-guey Tzeng},
title = {A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding},
journal = {IEEE Trans. Parallel and Distributed Systems},
year = {2012},
pages = {995--1003}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract—A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party’s cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness. Index Terms—Decentralized erasure code, proxy re-encryption, threshold cryptography, secure storage system. Ç 1
Keyphrases
storage system storage server secure data forwarding data confidentiality secure storage system erasure code general encryption scheme decentralized erasure code multiple function main technical contribution encrypted message cloud storage system cloud system key server index term serious concern proxy re-encryption scheme threshold cryptography flexible adjustment threshold proxy re-encryption scheme third party central authority long-term storage service robust data storage proxy re-encryption suitable parameter
