Comment on id-based remote data integrity checking with data privacy preserving

2017 2nd International Seminar on Advances in Materials Science and Engineering

Zhang, Jianhong^1,2 ; Meng, Hongxin^1

College of Sciences, North China University of Technology, Beijing

100144, China^1

Guangxi Key Lab of Multi-source Information Mining and Security, Guilin

China, China^2

关键词: Cloud servers;    Data privacy protections;    Data-privacy preserving;    ID-based;    Information Forensics;    Integrity checking;    Outsourced datum;    Remote data;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/231/1/012006/pdf
DOI  :  10.1088/1757-899X/231/1/012006

来源: IOP

【 摘 要 】

Recently, an ID-based remote data integrity checking protocol with perfect data privacy preserving (IEEE Transactions on Information Forensics and Security, doi: 10.1109/TIFS.2016.2615853) was proposed to achieve data privacy protection and integrity checking. Unfortunately, in this letter, we demonstrate that their protocol is insecure. An active hacker can modify the stored data without being detected by the verifier in the auditing. And we also show malicious cloud server can convince the verifier that the stored data are kept intact after the outsourced data blocks are deleted. Finally, the reasons to produce such attacks are given.