A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding

A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party's cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit th...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on parallel and distributed systems 2012-06, Vol.23 (6), p.995-1003
Main Authors: Hsiao-Ying Lin, Tzeng, Wen-Guey
Format: Article
Language:English
Subjects:
Cloud computing
Clouds
Confidentiality
Decentralized erasure code
Encoding
Encryption
Information storage
Internet
Messages
Product introduction
Proxy client servers
proxy re-encryption
Robustness
Secure storage
secure storage system
Servers
Storage area networks
Storage systems
threshold cryptography
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party's cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness.
ISSN:1045-9219
1558-2183
DOI:10.1109/TPDS.2011.252