MCA PROJECT PRESENTATION KALAI SELVAN (1).pptx

ppt-project

1. On the security of Data access control for Multi authority cloud storage system Submitted by, K.Kalai selvan 911517621001 III MCA,MSEC, Kilakarai . Submitted to, Ms.S.Sajithabanu M.Tech.,(Ph.D)., Assistant Professor Dept.of MCA , MSEC,Kilakarai .

2. Abstract Data access control has becoming a challenging issue in cloud storage systems. Some techniques have been proposed to achieve the secure data access control in a semitrusted cloud storage system. In existing proposed a basic Data Access Control scheme for Multi Authority Cloud Storage system (DAC-MACS) and an Extensive Data Access Control Scheme (EDAC-MACS). I propose a new extensive DAC-MACS scheme (NEDAC-MACS) to withstand the above two attacks so as to guarantee more secure attribute revocatio n

3. Introduction Cloud computing can help enterprises improve the creation and delivery of IT solutions by providing them with access to services in a cost-effective and flexible manner. Clouds can be classified into three categories, depending on their accessibility restrictions and the deployment model. They are: Public Cloud Private Cloud Hybrid Cloud

4. Existing System DAC-MACS could achieve efficient decryption and immediate revocation and the EDAC-MACS could also achieve these goals even though non revoked users reveal their Key Update Keys to the revoked user. However, through our cryptanalysis, the revocation security of both schemes cannot be guaranteed .

5. Disadvantages First attack, the revoked user can eavesdrop to obtain other users Key Update Keys to update its Secret Key, and then it can obtain proper Token to decrypt any secret information as a non revoked user. In addition, by the second attack, the revoked user can intercept Cipher text Update Key to retrieve its ability to decrypt any secret information as a non revoked user.

6. Proposed System I propose a new extensive DAC-MACS scheme (NEDAC-MACS) to withstand the above two attacks so as to guarantee more secure attribute revocation. Then, formal cryptanalysis of NEDAC-MACS is presented to prove the security goals of the scheme. Finally, the performance comparison among NEDAC-MACS and related schemes is given to demonstrate that the performance of NEDAC-MACS is superior to that of DACC, and relatively same as that of DAC-MACS

7. Literature Survey Title Author Description Issues A survey on security issues in service delivery models of cloud computing S. Subashini Cloud Computing holds the potential to eliminate the requirements for setting up of high-cost computing infrastructure for the IT-based solutions and services that the industry uses . a survey of the different security risks that pose a threat to the cloud is presented. This paper is a survey more specific to the different security issues that has emanated due to the nature of the service delivery models of a cloud computing   system.

8. Literature Survey Title Author Description Issues DAC-MACS: Effective data access control for multi authority cloud storage systems K.Yang Data access control is an effective way to ensure the data security in the cloud. However, due to data outsourcing and untrusted cloud servers, the data access control becomes a challenging issue in cloud storage systems. DAC-MACS: Effective data access control for multi-authority cloud storage systems.

9. System Specification Software Requirements Operating System : Windows 7/8/10 Platform : Java Language Application Software : Net beans IDE Front End : Java Back End : MySQL

10. Hardware Requirements Processor : Core i3 RAM : 6 GB RAM Hard Disk : 250GB Hard Disk

11. Dataflow diagram Start Registration Key Generation Login & Verification Authentication File Uploading Cryptographic Process Stop Download

12. Use case diagram Register/Login Key Generation Download Verification Authentication File Uploading Cryptographic Process

13. System Architecture

14. Activity Diagram

15. Sequence Diagram

16. Modules 1.Intialization Of User 2.Key Generation 3.File Uploading To Cloud With (Key) 4.File Request 5.Multiauthority Verification With Key 6.File Download

17. Initialization of User In Initialization of User , user enter the personal information to register into application. After register the information , user can login into the process through the username and password.

18. Key Generation Secret key exposure can happen in this system model. An auditing protocol with key exposure resilience is composed by five algorithms (Sys Setup ,Key Update, Auth Gen, ProofGen, Proof Verify), Current security model considers the notion of the forward security and data possession property. The cloud is allowed to get the client’s secret key for cloud storage auditing .

19. File uploading to cloud with (key) In file uploading , after login into the account, user upload the file for cloud process. The client produces files and uploads these files along with corresponding authenticators to the cloud. The cloud stores these files for the client and provides download service if the client requires. Dynamic data operations for audit services are also attended in order to make auditing more flexible.

20. File Request The cloud stores these files for the client and provides download service if the client requires. Each file is further more divided into multiple blocks. For the simplicity of description, The client can periodically audit whether his files in cloud are correct.

21. Auditing the key and file and file download The client will update his secret keys for cloud storage auditing in the end of each time period, but the public key is always unchanged. The cloud is allowed to get the client’s secret key for cloud storage auditing in one certain time period. It means the secret key exposure can happen in this system model. The auditing protocol achieves key-exposure resilience while satisfying current efficiency requirements

22. SCREEN SHOTS

23. User login

24. User Registers For Cloud Storage

25. CA Login page

26. .

27. User Login

28. Activation Process

29. .

30. Active Process

31. TOTP

32. .

33. User Credentials

34. File upload process

35. Download file

36. Download

37. Conclusion we first give two attacks on DAC-MACS and EDAC-MACS for their backward revocation security. Then, a new effective data access control scheme for multi authority cloud storage systems (NEDAC-MACS) is proposed to withstand the two vulnerabilities and thus to enhance the revocation security. NEDACMACS can withstand the two vulnerabilities even though the non revoked users reveal their received key update keys to the revoked user. In NEDAC-MACS, the revoked user has no chance to decrypt any objective cipher text even if it actively eavesdrop to obtain an arbitrary number of non revoked users’ Key Update Keys KUK or collude with some non revoked users or obtain any transmitted information.

38. Future Enhancement This system is found tested and examined for its successful processing. Future change in the environment or processing can be easily adopted by having simple change in coding. It is very user friendly, cost effective, feature rich and it provides very high level of security evocation . The cloud does not know the identity of the user who stores information, but only verifies the user’s credentials. Key distribution is done in a decentralized way.

39. References K. Yang, X. Jia, and K. Ren, “DAC-MACS: Effective data access control for multi authority cloud storage systems,” IEEE Trans. Information Forensics and Security, vol. 8, no. 11, pp. 1790-1801, Nov. 2013 Ken Yang and Xiao Hua Jia , "Expressive, Efficient, and Revocable Data Access Control for Multi-Authority Cloud Storage," IEEE Trans. Parallel and Distributed Systems, vol.25, no.7, pp.1735-1744, July 2014 A. Sahai and B. Waters, “Fuzzy identity-based encryption.

40. THANK YOU