Proof-of-Retrievability Outsourcing via Auditor and Batch Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure publicly verifiable proof-of-retrievability schemes cannot be easily transformed into outsourced/delegable schemes without significant modifications, and their adoption is hindered by limited computational capacity of portable devices and inconsistent network access, which affects trust in cloud storage.
Innovation Solution
A method that transforms any secure publicly verifiable proof-of-retrievability scheme into a secure outsourced/delegable scheme using external sources of randomness and cryptographic batch verification, allowing minimal user interaction and leveraging unpredictable randomness sources like the Bitcoin blockchain for efficient verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If secure publicly verifiable POR schemes are transformed into outsourced/delegable schemes, then user interaction is minimized and trust in cloud storage is enhanced, but the transformation requires significant modifications and increases system complexity
Solution Approach 1:
The patent introduces an independent auditor as an intermediary entity that performs POR verification on behalf of users. The auditor receives verification requests, executes POR protocols with cloud storage providers, and returns verification results. This mediator approach enables outsourced verification while maintaining security guarantees, as the auditor acts as a trusted third party that users can rely on without needing to perform complex verification themselves.
Solution Approach 2:
The verification process is segmented into distinct components: the user initiates a simple request, the auditor performs the complex POR execution and verification, and the results are returned to the user. This segmentation allows users to benefit from automated verification without bearing the computational burden or complexity of implementing POR protocols directly.
2Reliability
If users perform POR verification on portable devices with limited computational capacity, then direct verification is possible, but the computational overhead cannot be tolerated
Solution Approach 1:
The independent auditor serves as a computational intermediary that performs the resource-intensive POR verification operations. Users with limited computational capacity on portable devices can still achieve reliable verification by delegating the computationally heavy tasks to the auditor, who has sufficient resources to execute the protocols efficiently.
Solution Approach 2:
The auditor performs self-service by autonomously executing the POR protocols and verification processes without requiring continuous user intervention or computational resources from the user's device. The user simply initiates the process and receives results, while the auditor handles all computational heavy lifting independently.
3Reliability
If frequent POR execution is performed to ensure data retrievability, then data availability is verified continuously, but network access requirements and computational overhead increase
Solution Approach 1:
The independent auditor acts as an efficient intermediary that can execute POR verification frequently and reliably. By centralizing the verification capability in a dedicated auditor rather than requiring each user device to perform verification, the system achieves continuous data availability monitoring without burdening users with network access requirements or computational overhead at every verification instance.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for providing a proof-of-retrievability, 'POR', to a client, for data stored on a storage entity, performed in a memory of one or more computing devices, comprising the steps of a) Encoding, by said client, data to be stored on said storage entity, b) Exchanging credentials between said storage entity, said client and an auditing entity, c) Committing, by said client, to the encoded information using data identification information, d) Storing said encoded data on said storage entity together with said data identification information, e) Computing, by said auditing entity, logging information for said stored data by performing one or more POR between said auditing entity and said storage entity, wherein for sampling randomness for said POR a public source of unpredictable randomness is used, f) Verifying, by said auditing entity, said computed logging information, and g) Verifying, by said client, said verified logging information of said auditing entity in a single batch verification procedure.