Secured Data Sharing and Access Control for Cloud

Based Data Storage

Syed Sharukh Hussainy Dr. P. Balamurugan
Department of Networking and Communications Department of Networking and Communications
SRM Institute of Science and Technology SRM Institute of Science and Technology
Chennai, India Chennai, India
[email protected] [email protected]

Abstract—When it comes to the security of data in the cloud techniques are not considered to be reliable in a vulnerable
storage model, access control is the most crucial factor. However, cloud environment within security zones therefore we present
traditional methods of data sharing and access control present solution of various alternate technology which could provide
significant difficulties in the field of study due to issues like
privacy data leakage and key abuse. Electronic health records greater security and less vulnerability. Cloud computing
(EHR) are now able to be shared amongst various healthcare typically involves not requiring end-user knowledge of
apps thanks to cloud-based EHR outsourcing. In addition, the physical connection and location of the overall network in
blockchain model provides safety by authenticating users with order to access storage services, software, installation, and
a number of different kinds of encryption. Although there are information. The cloud is a widely used method in IT today,
risks to patients’ privacy, the benefits of working with the
cloud outweigh them. As a result, this study makes two major shifting the focus from individual computers to massive
contributions to the literature by establishing a framework for data centres [3]. According to NIST, ”cloud computing”
secure data sharing and retrieval in a blockchain-based cloud is ”a model for enabling convenient, on-demand network
environment. The first contribution implements a blockchain- access to a shared pool of configurable, logically isolated
based model for cloud-based access control and data sharing. As computing resources that are managed centrally and made
a result of the access control and data sharing process developed
using Blockchain technology, the issue of a single point of failure available by a service provider with minimal user interaction
in cloud architecture can be effectively addressed. Based on user or intervention.” The widespread availability of high-speed
ID and password, the Data User (DU) generates a registration internet is likely to lead to the distribution of applications as
request that is sent to the Data Owner (DO).The DO data is services across the Internet, reducing the system’s overall cost.
added to a blockchain for conducting financial transactions using
a secret key. Files are encrypted by the DO and then uploaded
to the Interplanetary File System (IPFS). The DO creates the Cloud Computing is the distribution, via Internet as a
ciphertext metadata and incorporates it into the blockchain service, of hardware and software resources on-demand [4].
ledger of transactions by means of the encrypted file location
and encrypted key. The second contribution is a blockchain-
Cloud computing’s primary goal is to efficiently utilise dis-
based system that streamlines the cloud’s data-sharing and persed resources, integrate them to maximise throughput, and
retrieval procedures. In order to ensure safe transmission, an address widespread computation issues. Scalability, virtualiza-
EHR application implements a data protection procedure. The tion, interoperability, the service standard, and delivery models
cloud computing infrastructure incorporates components such (public, private, and hybrid) are all terms associated with cloud
as data consumers, data producers, blockchain transactions,
smart contracts, and the Interplanetary File System (IPFS).
computing [5].
As an added bonus, DO includes a data protection algorithm
for securing EHR, wherein encrypted EHR is converted to a) Cloud computing’s practical uses
IPFS before being shared with the data consumer. The Tracy- Software as a Service, Platform as a Service, and
Singh product and the Conditional Autoregressive Value at risk Infrastructure as a Service are the various types of cloud
(CAViaR)-based Bird swarm algorithm are used to maintain
data privacy during the data protection process (CAViaR-based service providers.
BSA). With a response time of 251.33 seconds, 3.5% information • SaaS
loss, a user detection rate of 36.66%, and 82.87% privacy, the • PaaS
developed blockchain-based access control and data sharing in • IaaS
cloud structure achieved better performance.
Keywords— Cloud Computing, Blockchain Technology, In- b) Models for deploying to the cloud
terplanetary File System, CAViaR-based BSA There are three main types of cloud deployment mod-
els: public, private, and hybrid. In the Clouds Available
1. I NTRODUCTION to the Public, i.e.
The use of VPN services by end users to facilitate • Private Cloud
communication is what gave rise to the term ”cloud” in the • Community Cloud
communications lexicon [1]. As stated in [2], The traditional • Hybrid Cloud
1.1. Cloud-Based Information Exchange Using Blockchains technology was incorporated into this design so that the
Transactions are recorded in an immutable distributed ledger tamper-proof nature of the model could be ensured. System
called a blockchain, which is a product of a decentralised privacy has also been protected thanks to the development of
architectural model. Commonly, blockchain refers to a secure, cryptographic and proxy re-encryption algorithms. Improved
distributed database that stores data in chronological blocks functionality was also achieved through the incorporation of
[6]. When using a blockchain-based system, all types of data features such as tamper resistance, revocability of consent,
that are visible to the nodes are recorded. And it is the and auditability.
transparent, decentralised, and public ledger that records all
business dealings between any two parties in a way that can Blockchain-based distributed key management architecture
be verified at any time and in any place [7]. Information in (BDKMA) was modelled for IoT access control by [14].
a blockchain cannot be altered after it has been recorded, The latency was reduced by employing a fog computing
unless a new record is added to the chain. When it comes to structure, and the cross-domain access model was achieved
blockchain currencies, everyone on the network has access to by having multiple block chains run in the cloud. In
the same, accurate ledger, guaranteeing full consensus among addition, the blockchain model was implemented to ensure
all participants [8] [9]. compliance with privacy and security regulations while still
meeting requirements for granular auditing, decentralisation,
2. L ITERATURE R EVIEW scalability, and extensibility in access management. In
For example, [10] developed an emergency access control addition, models of system operation, as well as a number
management model (EACMS) for a health record blockchain of authorization assignment nodes and group access models,
system, elaborating on the existing research works based on were developed to facilitate system scalability. Multiple
ledger-based blockchain techniques. Rules based on smart structures can be supported by the system thanks to the
contracts were used in this model to regulate time limits and dynamic duration changes in transaction collection. This
unexpected events. In addition, Business Network Archive algorithm significantly improves system performance and
(BNA), which measures the system’s performance, was scales well to large networks.
created with the help of hyperledger composer. In this case,
smart contracts fetched necessary information from the ledger For the purpose of enforcing granular access control
and authorised each transaction. In addition, the model’s systems, [15] developed a blockchain-based system for secure
efficacy, security, and auditability are all dependent on the mutual authentication called BSeIn. This method provides
ledger smart contracts it employs. security and privacy through the use of encryption, integrated
attribute signature, and message authentication code. In this
For a trustworthy system of sharing cloud data, [11] implementation, attribute signatures and the blockchain work
presented a blockchain-driven access control model with together to verify terminals, gateways, and message hashes.
multiple attribute authorities. Each attribute was jointly Further, confidentiality was ensured via a multi-receiver
managed by different authorities in this model to prevent a encryption process. Smart contracts were used to ensure
single point of failure; this model relied on the Shamir secret scalability, and interactions between them handled the request
sharing algorithm and the Hyperledger Fabric implementation process.
process. Also, smart contracts were developed for estimating
tokens for attributes, which reduces the computation and A cross-domain data sharing strategy for electronic health
communication overhead in data users, and the benefits of the records was modelled by Y. Fang and colleagues [16]. This
blockchain model were taken into account to establish trust method incorporates a cryptographic model to ensure the
between multiple parties. In addition, the distributed ledger privacy of patient data while allowing for its secure transfer
technology (blockchain) model facilitates the recording of and exchange. This method deftly incorporates on-demand
the access control procedure in a secure and auditable fashion. revocation, fine-grained access control, and the delegation
model for managing permissions. In addition, both the proxy
This distributed ledger technology (blockchain) was signature model and the role-based model incorporated a
developed by [12]. Metadata about the files was stored on delegation procedure.
the blockchain, while the files themselves were stored in
various locations using Distributed Hash Tables (DHT) in
a peer-to-peer network. Also, the off-chain storage model 3. P ROPOSED M ODEL
that was developed achieves both low latency and high The deployment of EHR in the cloud has enabled the
throughput. This algorithm significantly lessens the burden sharing of medical data along with other healthcare-related
on the project’s central computing resources in terms of applications. Additionally, the blockchain ensures safety by
processing, availability, and accumulation. verifying the identities of its users through a variety of en-
cryption methods. When it comes to patient privacy, however,
Blockchain enabled access control method for personal the benefits of cloud computing’s streamlined administration
health record scheme presented by [13]. Blockchain come with some serious caveats. In this chapter, we’ll look at
the secure block chain-assisted framework that makes cloud- Calculate n value of fitness for the individuals and compute
based data sharing and retrieval possible. A data protection the optimal solution
model is developed for EHR applications to enable the secure
transmission. Interplanetary File System, Smart Agreement,
Data User, and Data Owner are all part of the transactional
block chain and data sharing infrastructure (IPFS). In this
case, the data owner stores a data protection strategy for
securing EHR, with the protected EHR being transmitted
to Inter-Planetary File System before being shared by the
user. In addition, Tracy-Conditional Singh’s Autoregressive
Value at risk-enabled Bird swarm algorithm (CAViaR-BSA),
an integration of BSA [17] and CAViaR [18], is used to protect
data by safeguarding its confidentiality while acquiring the
best privacy-preserving coefficients. In this case, privacy and
utility functions serve as inspiration for the development of
fitness goals.
3.1. CAVIAR-BSA: A Privacy-Protecting Protocol
Two procedures make up the CaViaR-BSA that was devel-
oped. CaViaR-BSA, a combination of BSA [19] and CAViR
[20], is proposed as the first step in determining the best
possible co-efficient. In the second stage, the optimal co-
efficient and input data matrix are offered into a Tracy Singh
product, which converts the raw data into encrypted data based 4. R ESULT AND D ISCUSSION
on the data protection system. In this work, we introduce This section details the developed CaViaR-enabled BSA’s
an optimization-driven searching algorithm to determine the effectiveness in terms of the performance metrics discussed
optimal coefficient values for ensuring the privacy of sensitive earlier (Responsiveness, Genuine user detection, privacy, and
data stored in the cloud and informational value. Optimal information loss). Changing the sample size is used for evalu-
coefficients and the Tracy Singh product are also employed to ation. As an added measure, we use datasets for the evaluation
safeguard cloud-based information. The Tracy Singh product of performance. The developed mechanism is tested using
resolves a problem that arose when converting a pair of the python. In CaViaR-enabled Bird Swarm algorithm we are
operators to their product. At the end of the data retrieval Initializing the population of the birds along with the various
phase, private information is obtained. The developed CaViaR- algorithm parameters and find the global experiences fitness
BSA method for privacy preservation is depicted in Fig 1. for the whole swarm and personal experience for each bird.
Calculate the status of each bird Foraging or Vigilance and
divide the population in to producers and scroungers birds
update the producers and scroungers birds to find the best
fitness or solution.

Fig. 1. Developed CaViaR-BSA privacy-protecting design

Input: Population Z with n number of individuals, Maxi-

mum iteration nmax , Frequency of birds flight behavior A ,
probability of foraging of food prob , Q, R, FL, y1, y2 signify
five constant parameters Fig. 2. Responsiveness Analysis of the Developed Method Using a Dataset
Output: Individual with optimal fitness
Initialization of birds population along with various algorith- To test the effectiveness of the developed CaViaR-based
mic parameters BSA on a variety of metrics—including responsiveness, gen-
uine user detection, privacy, and information loss parameter. employing a data protection model for securing EHR, with
Taking into account metrics like responsiveness, genuine user the protected EHR data being transmitted to Inter-Planetary
detection rate, privacy, and information loss, this section File System before sharing is allowed. In addition, Tracy-
explains the comparative assessment using datasets. product Singh’s and the Conditional Autoregressive Value at
risk-enabled Bird swarm algorithm (CAViaR-based BSA) are
used to ensure data privacy by producing highly confidential
coefficients. In addition, the CAViaR-based BSA is created by
melding BSA with CAViaR. By considering both privacy and
utility, an optimization-driven searching algorithm determines
the optimal coefficient values to use for cloud-based data
security. Optimal coefficients and the Tracy Singh product
are also employed to safeguard cloud-based information. The
Tracy Singh product provides an answer to an issue that arose
when attempting to multiply a pair of operators. At the end
of the data retrieval phase, private information is obtained.
This developed CAViaR-based BSA approach demonstrates
effective performance in analyses focusing on Responsiveness,
Genuine user detection, privacy, and information loss.
R EFERENCES
[1] J. Ni, K. Zhang, Y. Yu and T. Yang, ”Identity-Based Provable Data
Fig. 3. Analysis of the developed method on the dataset with the real-user Possession From RSA Assumption for Secure Cloud Storage,” in IEEE
detection rate in mind Transactions on Dependable and Secure Computing, vol. 19, no. 3, pp.
1753-1769, 1 May-June 2022.
Figure 2 displays the evaluation of responsiveness as a [2] M Shyamala Devi, P Mahalakshmi and Balamurugan P “Multimodal
Biometric Authentication using Gray Level Co-Occurrence Matrix for
function of user count. Figure 3 depicts the evaluation based on Enhancing Security in Cloud”, International Journal of Pure and Applied
genuine user detection rate as the user count is varied. Figure Mathematics, Scopus, ISSN: 1314-3395, Vol. 119 No. 16,pp. 5019-5031,
4 depicts the privacy-preserving assessment that modifies the 2018.
[3] J. Zhang, R. Lu, B. Wang and X. A. Wang, ”Comments on “Privacy-
training data. Preserving Public Auditing Protocol for Regenerating-Code-Based
Cloud Storage”,” in IEEE Transactions on Information Forensics and
Security, vol. 16, pp. 1288-1289, 2021.
[4] 4.Ning Chai, Chun Mao, Zhang Parthasarathy Poovendran, P. Balamuru-
gan,” Role of BIC (Big Data, IoT, and Cloud) for Smart Cities” Arabian
Journal for Science and Engineering, Springer SCI, ISSN 2191-4281,
SPECIAL ISSUE.,2021 (https://doi.org/10.1007/s13369-021-05888-x)
(Impact Factor: 2.334)
[5] M. Maghsoudloo, A. Rahdari and N. Khoshavi, ”SLA-Aware Multi-
Criteria Data Placement in Cloud Storage Systems,” in IEEE Access,
vol. 9, pp. 54369-54388, 2021.
[6] B. Tang and G. Fedak, ”WukaStore: Scalable, Configurable and Reliable
Data Storage on Hybrid Volunteered Cloud and Desktop Systems,” in
IEEE Transactions on Big Data, vol. 8, no. 1, pp. 85-98, 1 Feb. 2022.
[7] X. Zhang, J. Zhao, C. Xu, H. Wang and Y. Zhang, ”DOPIV: Post-
Quantum Secure Identity-Based Data Outsourcing with Public Integrity
Verification in Cloud Storage,” in IEEE Transactions on Services Com-
puting, vol. 15, no. 1, pp. 334-345, 1 Jan.-Feb. 2022.
[8] H. Yan and W. Gui, ”Efficient Identity-Based Public Integrity Auditing
of Shared Data in Cloud Storage With User Privacy Preserving,” in IEEE
Access, vol. 9, pp. 45822-45831, 2021.
[9] Y. Yang, Y. Chen, F. Chen and J. Chen, ”An Efficient Identity-Based
Fig. 4. Analyzing the privacy implications of our newly developed technique Provable Data Possession Protocol With Compressed Cloud Storage,” in
on a dataset IEEE Transactions on Information Forensics and Security, vol. 17, pp.
1359-1371, 2022.
[10] J. Li, H. Yan and Y. Zhang, ”Efficient Identity-Based Provable Multi-
5. C ONCLUSION Copy Data Possession in Multi-Cloud Storage,” in IEEE Transactions
on Cloud Computing, vol. 10, no. 1, pp. 356-365, 1 Jan.-March 2022.
In this section, we will develop the blockchain-assisted [11] X. Li, S. Liu, R. Lu and X. Zhang, ”On Security of an Identity-
framework for efficient data sharing and retrieval in the cloud. Based Dynamic Data Auditing Protocol for Big Data Storage,” in IEEE
Building a data protection model into EHR applications is Transactions on Big Data, vol. 7, no. 6, pp. 975-977, 1 Dec. 2021.
[12] H. Qiu, H. Noura, M. Qiu, Z. Ming and G. Memmi, ”A User-Centric
one way to ensure the safety of data transmission. Cloud Data Protection Method for Cloud Storage Based on Invertible DWT,”
framework components include data owner, data user, transna- in IEEE Transactions on Cloud Computing, vol. 9, no. 4, pp. 1293-1304,
tional block chain, smart agreement, and Interplanetary File 1 Oct.-Dec. 2021.
[13] H. Song, J. Li and H. Li, ”A Cloud Secure Storage Mechanism Based
System (IPFS). In this scenario, the data is shared between on Data Dispersion and Encryption,” in IEEE Access, vol. 9, pp. 63745-
the data owner and the authenticated user, with the data owner 63751, 2021.
[14] Y. Yang, Y. Chen, F. Chen and J. Chen, ”Identity-Based Cloud Storage
Auditing for Data Sharing With Access Control of Sensitive Informa-
tion,” in IEEE Internet of Things Journal, vol. 9, no. 13, pp. 10434-
10445, 1 July1, 2022.
[15] J. -N. Liu et al., ”Enabling Efficient, Secure and Privacy-Preserving
Mobile Cloud Storage,” in IEEE Transactions on Dependable and Secure
Computing, vol. 19, no. 3, pp. 1518-1531, 1 May-June 2022.
[16] R. Mendes, T. Oliveira, V. Cogo, N. Neves and A. Bessani, ”Charon: A
Secure Cloud-of-Clouds System for Storing and Sharing Big Data,” in
IEEE Transactions on Cloud Computing, vol. 9, no. 4, pp. 1349-1361,
1 Oct.-Dec. 2021.
[17] B. Sengupta, A. Dixit and S. Ruj, ”Secure Cloud Storage With Data
Dynamics Using Secure Network Coding Techniques,” in IEEE Trans-
actions on Cloud Computing, vol. 10, no. 3, pp. 2090-2101, 1 July-Sept.
2022.
[18] Z. Liu, Y. Liu, X. Yang and X. Li, ”Integrity Auditing for Multi-Copy
in Cloud Storage Based on Red-Black Tree,” in IEEE Access, vol. 9,
pp. 75117-75131, 2021.
[19] J. Li, H. Yan and Y. Zhang, ”Identity-Based Privacy Preserving Remote
Data Integrity Checking for Cloud Storage,” in IEEE Systems Journal,
vol. 15, no. 1, pp. 577-585, March 2021.
[20] C. -I. Fan, J. -J. Huang, S. -W. Tseng and I. -T. Chen, ”Dependable
Data Outsourcing Scheme Based on Cloud-of-Clouds Approach with
Fast Recovery,” in IEEE Transactions on Cloud Computing, vol. 9, no.
2, pp. 546-561, 1 April-June 2021.