arrow
Return

Highly Reliable Anonymous Cloud Synchronization

delete2026-09-01
delete0
PRE
AI
Z
Zhen Liu
Y
Yi Zhao
L
Lei Kang
张子剑 cover
张子剑 (Zijian Zhang)
Y
Yinggui Wang
祝
祝烈煌 (Liehuang Zhu)
DOI:10.1109/tifs.2026.3729510delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Password-based cloud storage (PBCS) allows users to outsource datasets to the cloud server and synchronize the corresponding data. However, there are two key challenges. First, they lack anonymity, making user activities linkable to public identities. Although integrating anonymous password-authenticated key exchange (APAKE) can achieve anonymity, it relies on private information retrieval (PIR), which causes high communication and computation overhead. Additionally, existing APAKE protocols are vulnerable to online password-guessing attacks (PGA). Second, PBCS cannot ensure reliable synchronization, where malicious/victimized servers may roll back user data undetectably. To address these issues, we propose HRACS, a highly reliable and anonymous cloud synchronization scheme, based on our newly designed PIR-free APAKE. Specifically, PIR-free APAKE replaces PIR through a lightweight pseudonym-signature mechanism, reducing communication overhead from linear to constant. The deterministic pseudonym also enables anonymous rate-limiting, mitigating online PGA. Moreover, HRACS simultaneously supports reliable synchronization of datasets by encrypting each item with authenticated encryption and computing a fingerprint of the entire dataset. Each item carries a binding proof to the fingerprint, allowing the user to detect any unauthorized modifications (e.g., reordering or rollback). Experimental results demonstrate that our PIR-free APAKE achieves competitive computation efficiency, reducing the overhead by up to 68.29% compared with existing APAKE protocols. Regarding communication, the bandwidth requirement remains constant and is reduced by up to 99.96% relative to PIR-based APAKE protocols when scaling to 20,000 users. Moreover, HRACS strengthens security without sacrificing performance, incurring overhead comparable to existing PBCS schemes.
Keywords:
Anonymous authentication
cloud synchronization
password-based cloud storage (PBCS)

Journal

IEEE Transactions on Information Forensics and Security cover
IEEE Transactions on Information Forensics and Security
IF:
8
Papers:
5.3K
Citations:
2.3W

Organization

B
Beijing Institute of Technology
Scholars:
2.6K
Papers: 715
Citations: 0
Cited Papers

Cited Papers

No cited papers available