Fuzzy Identity-Based Cloud Storage Auditing Scheme with Sensitive-Information Hiding and Access Control Functions

Cloud auditing is a mechanism that can effectively check the integrity of outsourced data stored on cloud servers without the need to download whole data. Identity-based cloud auditing schemes avoid the dependency issues of public key infrastructure and certificate management in traditional auditing protocols, and have therefore received widespread attention and research. Fuzzy identities, represented by biometric features, have the advantages of being easy to carry, not easily lost or damaged, which also provides convenience for sharing cloud storage data. Therefore, how to apply fuzzy identity technology to cloud auditing is a meaningful research question. Based on the current research on identity-based cloud audit mechanism, this paper proposes a fuzzy identity-based cloud audit scheme that can achieve secure access control of storage data in the process of sharing. This solution not only enables reliable auditing of remote data, but also allows other users to use fuzzy identities for secure access control. In order to avoid privacy information leakage during the data sharing process, key information will be hidden during the data upload processing stage. In addition, detailed security proof will be provided for the designed protocol based on standard cryptographic assumptions. Finally, the performance analysis issues, such as communication overhead, computational cost, and storage redundancy, are also considered, which are compared with related research works. The results indicate that our proposed scheme has certain performance advantages.