A publicly-verifiable
cloud data possession checking method is provided. The method includes the three stages of initialization, user challenge-response
verification and TTP arbitration; the three stages comprise the following ten steps that: step 1, data segmentation [F->F'] is performed; step 2,
verification tag generation [(SK, F)-> HVT] is performed; step 3, data and tag information upload [(F, HVT)->S] is performed; step 4, secret parameters are recorded to a TTP (
trusted third party); step 5, the TTP verifies recorded parameters; step 6, [chal] is initiated by a user, and the chal and the
verification information of the chal are handed over to the TTP so as to be
record; step 7, a
server makes a response; step 8, [(R, sk)->(' success', 'failure')] is verified; step 9,
relevant information acquisition is verified; and step 10, the
trusted third party performs verification publicly. With the publicly-verifiable
cloud data possession checking method of the invention adopted, the user can verify the existence and integrity of data in a
cloud storage server. The publicly-verifiable
cloud data possessions checking method is advantageous in no limitation on the number of
user authentication times as well as small storage capacity and low computational complexity of a
client, and has great practical value and broad application prospect.