Remote Integrity Check with Dishonest Storage Server

We are interested in this problem: a verifier, with a small and reliable storage, wants to periodically check whether a remote server is keeping a large file x. A dishonest server, by adapting the challenges and responses, tries to discard partial information of x and yet evades detection. Besides the security requirements, there are considerations on communication, storage size and computation time. Juels et al. [10] gave a security model for Proof of Retrievability (POR) system. The model imposes a requirement that the original x can be recovered from multiple challenges-responses. Such requirement is not necessary in our problem. Hence, we propose an alternative security model for Remote Integrity Check (RIC). We study a few schemes and analyze their efficiency and security. In particular, we prove the security of a proposed scheme HENC. This scheme can be deployed as a POR system and it also serves as an example of an effective POR system whose "extraction" is not verifia...

• Type: Conference
• Year: 2008
• Where: ESORICS
• Authors: Ee-Chien Chang, Jia Xu
• Keywords: Alternative Security Model, ESORICS 2008, Large File X, Security Model, Security Privacy