Mchain: a blockchain-based vm measurements secure storage approach in iaas cloud with enhanced integrity and controllability
Open accessAbstract
Virtual machine (VM) measurements data in IaaS cloud play a crucial role in integrity evaluation and decision making. Hence, the secure storage for these data has attracted more attention recently. This paper proposes a novel approach, named Mchain, to enhance the integrity and controllability of the secure storage. Especially, to enhance the integrity, a two-layer blockchain network is introduced. In the first layer, after the production, the data packages are first verified by leveraging a correspondence between a package and a policy, and a one-to-one relation among a VM, a user, and a node. After that, we propose a consensus achievement algorithm to construct a semi-finished block on a candidate block arranged by data packages. Meanwhile, the semi-finished block is distributed to all nodes, which can provide a certain integrity. In the second-layer, tamper-resistant metadata is generated by performing PoW tasks on the semi-finished block, resulting in strong integrity. Further, to enhance the controllability, a revisable user-defined policy-based encryption method with KP-ABE is proposed. It helps to flexibly control the scope of authorized verifiers. The experimental results on six scenarios with simulated data set show that the proposed approach is appealing in integrity and controllability, and the time overhead of data storage.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Designing lightweight blockchain platforms can be a notable solution to enhance QoS by eliminating computation consensus mechanisms, compressing consensus storage, or designing lightweight block validation techniques.
“On the one hand, the design of lightweight blockchain platforms can be a notable solution to enhance the QoS, by eliminating computation consensus mechanisms of blockchain [303], compressing consensus storage [304], or designing lightweight block validation techniques [305], [306], [307].”
From Blockchain for 5G and beyond networks: A state of the art survey (2020) · cites this paper as [303]
Cites
Attribute-based encryption for fine-grained access control of encrypted data
Goyal, V., Pandey, O., Sahai, A., & Waters, B. R. (2006) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/1180405.1180418 · Cited by 5,092 · see citing works
Decentralizing Privacy: Using Blockchain to Protect Personal Data
Zyskind, G., Nathan, O., & Pentland, A. '. (2015) · 2015 IEEE Security and Privacy Workshops · doi:10.1109/spw.2015.27 · Cited by 2,617 · see citing works
A fully homomorphic encryption scheme
Boneh, D., & Gentry, C. (2009) · Cited by 2,359 · see citing works
The Bitcoin Backbone Protocol: Analysis and Applications
Garay, J. A., Kiayias, A., & Leonardos, N. (2015) · Lecture notes in computer science · doi:10.1007/978-3-662-46803-6_10 · Cited by 1,396 · see citing works
Liang, X., Shetty, S. S., Tosh, D. K., Kamhoua, C., Kwiat, K., & Njilla, L. (2017) · IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid) · doi:10.1109/ccgrid.2017.8 · Cited by 745 · see citing works
VC3: Trustworthy Data Analytics in the Cloud Using SGX
Schuster, F., Costa, M., Cédric Fournet, A., Gkantsidis, C., Peinado, M., Mainar-Ruiz, G., & Russinovich, M. (2015) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2015.10 · Cited by 594 · see citing works
An Analysis of Anonymity in the Bitcoin System
Reid, F., & Harrigan, M. (2011) · doi:10.1109/passat/socialcom.2011.79 · Cited by 581 · see citing works
Duan, Q., Yan, Y., & Vasilakos, A. V. (2012) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2012.113012.120310 · Cited by 311 · see citing works
Blockchain-Based Database To Ensure Data Integrity In Cloud Computing Environments
Gaetani, E., Aniello, L., Lombardi, F., Margheri, A., & Sassone, V. (2017) · ePrints Soton (University of Southampton) · doi:10.5281/zenodo.1169256 · Cited by 208 · see citing works
A protocol for property-based attestation
Chen, L., Landfermann, R., Löhr, H., Rohe, M., Sadeghi, A., & Stüble, C. (2006) · Scalable Trusted Computing · doi:10.1145/1179474.1179479 · Cited by 192 · see citing works
Can We Afford Integrity by Proof-of-Work? Scenarios Inspired by the Bitcoin Currency
Becker, J., Breuker, D., Heide, T., et al. (2013) · Springer eBooks · doi:10.1007/978-3-642-39498-0_7 · Cited by 109 · see citing works
Trust Enhanced Cryptographic Role-Based Access Control for Secure Cloud Data Storage
Zhou, L. F., Varadharajan, V., & Hitchens, M. (2015) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2015.2455952 · Cited by 101 · see citing works
Semi-adaptive Attribute-Based Encryption and Improved Delegation for Boolean Formula
Chen, J., & Wee, H. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-10879-7_16 · Cited by 70 · see citing works
Providing Root of Trust for ARM TrustZone using On-Chip SRAM
Zhao, S., Zhang, Q., Hu, G., Qin, Y., & Feng, D. (2014) · Workshop on Trustworthy Embedded Devices · doi:10.1145/2666141.2666145 · Cited by 66 · see citing works
Attack, Solution and Verification for Shared Authorisation Data in TCG TPM
Chen, L., & Ryan, M. D. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-12459-4_15 · Cited by 45 · see citing works
cTPM: a cloud TPM for cross-device trusted applications
Chen, C., Raj, H., Saroiu, S., et al. (2014) · doi:10.5555/2616448.2616466 · Cited by 39 · see citing works
Zhang, T., & Lee, R. B. (2015) · Proceedings - International Symposium on Computer Architecture/Proceedings · doi:10.1145/2749469.2750422 · Cited by 38 · see citing works
Guan, B., Wu, J., Wang, Y., et al. (2014) · IEEE Transactions on Cloud Computing · doi:10.1109/tcc.2014.2328582 · Cited by 33 · see citing works
Data Security Issues in Cloud Environment and Solutions
Dinadayalan, P., Jegadeeswari, S., & Gnanambigai, D. (2014) · World Congress on Computing and Communication Technologies (WCCCT) · doi:10.1109/wccct.2014.63 · Cited by 26 · see citing works
An improved vTPM-VM live migration protocol
Fan, P., Zhao, B., Shi, Y., et al. (2015) · Wuhan University Journal of Natural Sciences · doi:10.1007/s11859-015-1127-4 · Cited by 19 · see citing works
Self-citationEnabling public verifiability and availability for secure data storage in cloud computing
Jogdand, R. M., Goudar, R. H., Sayed, G. B., et al. (2013) · Evolving Systems · doi:10.1007/s12530-013-9095-4 · Cited by 18 · see citing works
Saikeerthana, R., & Umamakeswari, A. (2015) · Indian Journal of Science and Technology · doi:10.17485/ijst/2015/v8is9/65600 · Cited by 17 · see citing works
Droidsentry: Efficient Code Integrity and Control Flow Verification on TrustZone Devices
Suciu, D., & Sion, R. (2017) · International Conference on Control Systems and Computer Science · doi:10.1109/cscs.2017.28 · Cited by 4 · see citing works
Secure execution of unmodified applications on an untrusted host
Baumann, A., Peinado, M., Hunt, G. C., et al. (2013) · Cited by 3 · see citing works
Fine-grained sharing of encrypted sensor data over cloud storage with key aggregation.Preprint
Dang, H., Chong, Y. L., Brun, F., et al. (2015) · IACR Cryptology ePrint Archive · Cited by 1 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Blockchain for 5G and beyond networks: A state of the art survey
Nguyen, D. C., Pathirana, P. N., Ding, M., & Seneviratne, A. (2020) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2020.102693 · Cited by 412 · see citing works
- Authors
- Zhao, B., Fan, P., & Ni, M.
- Affiliations
- Wuhan University (CN)
- Venue
- IEEE Access
- Published
- 2018
- Volume
- 6
- Pages
- 43758-43769
- ISSN
- 2169-3536 (ISSN-L)
- OpenAlex
- W2888919782
- Cited by
- 37
- References
- 25
- Citations by year
- 2025: 2 · 2024: 6 · 2023: 5 · 2022: 4 · 2021: 8 · 2020: 8 · 2019: 4
- FWCI
- 8.06
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Locations
- IEEE Access (publishedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- National Key Basic Research Program of China (973 Program) (2014CB340600)
- Wuhan FRONTIER Program of Application Foundation (2018010401011295)
- Topics
- Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Keywords
- blockchain, secure data storage, IaaS cloud, data integrity, key-policy attribute-based encryption, consensus algorithms, proof-of-work, data provenance verification
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
