Authenticated secure data storage and sharing in cloud computing

Cloud computing has been widely recognized as one of the most influential information technologies because of its unprecedented advantages. The adoption of cloud storage services (e.g., Dropbox, Google Drive, Microsoft OneDrive, etc.) for storing, managing, and sharing data has gained significant attention across the world. Specifically, data storage outsourcing, wherein both individuals and enterprises can store and manage their data remotely on the cloud, is one of the most important cloud applications. However, outsourcing services to the cloud increases the risk of user and service authentication. Data management operations, such as data storage, data modification, and data a ccess in the c loud may not be f ully trusted by its owner. Further, storing data in the cloud increases the risk of data leakage and unauthorized access. Thus, the aforementioned cloud data security requirements introduce challenges to the design of a system to provide secure data storage and sharing in cloud computing. Therefore, in this thesis, we develop a secure cloud storage model for authenticated secure data storage and sharing in cloud computing. The secure cloud storage services include secure delegation and attestation as a service, provenance as a service, and access control as a service. Secure delegation and attestation as a service focuses on how to securely delegate and deploy the data services in a cloud. Provenance as a service concentrates on how to generate the integrity verification of outsourced data and define an access control structure for the data o perations. Access control as a service focuses on how to provide flexible data access control for the private/public cloud storage services. In this thesis, we have made the following contributions.