CHAPTER 1
INTRODUCTION
1.1 CLOUD COMPUTING
Storing data in the cloud has become a trend. An increasing number of clients store
their important data in remote servers in the cloud, without leaving a copy in their local
computers. Sometimes the data stored in the cloud is so important that the clients must
ensure it is not lost or corrupted. While it is easy to check data integrity after completely
downloading the data to be checked, downloading large amounts of data just for checking
data integrity is a waste of communication bandwidth. Hence, a lot of works have been
done on designing remote data integrity checking protocols, which allow data integrity to
be checked without completely downloading the data. Remote data integrity checking is
first introduced in which independently propose RSA-based methods for solving this
problem. After that propose a remote storage auditing method based on pre-computed
challenge-response pairs.
Recently many works focus on providing three advanced features for remote data
integrity checking protocols: data dynamic, public verifiability and privacy against
verifiers. The system in support data dynamics at the block level, including block insertion,
block modification and block deletion. It supports data append operation. In addition, can
be easily adapted to support data dynamics. Can be adapted to support data dynamics by
using the techniques. On the other hand, It support public verifiability, by which anyone
(not just the client) can perform the integrity checking operation. The system in support
privacy against third party verifiers. Compare the proposed system with selected previous
system.
CHAPTER 2
LITERATURE SURVEY
PRIVACY-PRESERVING PUBLIC AUDITING FOR DATA STORAGE
SECURITY IN CLOUD COMPUTING
Cloud computing is the long dreamed vision of computing as a utility, where users
can remotely store their data into the cloud so as to enjoy the on-demand high quality
applications and services from a shared pool of configurable computing resources. By data
outsourcing, users can be relieved from the burden of local data storage and maintenance.
Thus, enabling public auditability for cloud data storage security is of critical importance
so that users can resort to an external audit party to check the integrity of outsourced data
when needed. To securely introduce an effective third party auditor (TPA), the following
two fundamental requirements have to be met: TPA should be able to efficiently audit the
cloud data storage without demanding the local copy of data, and introduce no additional
on-line burden to the cloud user. Specifically, our contribution in this work can be
summarized as the following three aspects:

Motivate the public auditing system of data storage security in Cloud
Computing and provide a privacy-preserving auditing protocol, i.e., our scheme
supports an external auditor to audit user’s outsourced data in the cloud
without learning knowledge on the data content.

Our scheme is the first to support scalable and efficient public auditing in the
Cloud Computing. In particular, our scheme achieves batch auditing where
multiple delegated auditing tasks from different users can be performed
simultaneously by the TPA.

Prove the security and justify the performance of our proposed schemes
through concrete experiments and comparisons with the state-of-the-art.
DYNAMIC PROVABLE DATA POSSESSION
As storage-outsourcing services and resource-sharing networks have become
popular, the problem of efficiently proving the integrity of data stored at untrusted servers
has received increased attention. In the provable data possession (PDP) model, the client
preprocesses the data and then sends it to an untrusted server for storage, while keeping a
small amount of meta-data. The client later asks the server to prove that the stored data
has not been tampered with or deleted (without downloading the actual data). However,
the original PDP scheme applies only to static (or append-only) files. Present a definitional
framework and efficient constructions for dynamic provable data possession (DPDP),
which extends the PDP model to support provable updates to stored data. Use a new
version of authenticated dictionaries based on rank information. The price of dynamic
updates is a performance change from O(1) to O(log n) (or O(n log n)), for a file consisting
of n blocks, while maintaining the same (or better, respectively) probability of misbehavior
detection. Our experiments show that this slowdown is very low in practice (e.g., 415KB
proof size and 30ms computational overhead for a 1GB file). Show how to apply our DPDP
scheme to outsourced file systems and version control systems (e.g., CVS).
EFFICIENT
REMOTE
DATA
POSSESSION
CHECKING
IN
CRITICAL
INFORMATION INFRASTRUCTURES
Checking data possession in networked information systems such as those related to
critical infrastructures (power facilities, airports, data vaults, defense systems, and so
forth) is a matter of crucial importance. Remote data possession checking protocols permit
checking that a remote server can access an uncorrupted file in such a way that the verifier
does not need to know beforehand the entire file that is being verified. Unfortunately,
current protocols only allow a limited number of successive verifications or are impractical
from the computational point of view. In this Project, Present a new remote data possession
checking protocol such that 1) it allows an unlimited number of file integrity verifications
and 2) its maximum running time can be chosen at set-up time and traded off against
storage at the verifier.
CHAPTER 3
SYSTEM ANALYSIS
3.1 EXISTING SYSTEM
In existing system, the clients store the data in server that server is trustworthy and
after the third party auditor can audit the client files. So, the third party auditor can stolen
the files.
Disadvantage

Existing system can support both features with the help of a third party auditor.
3.2 PROPOSED SYSTEM
Consider a cloud storage system in which there are a client and an untrusted server.
The client stores their data in the server without keeping a local copy. Hence, it is of critical
importance that the client should be able to verify the integrity of the data stored in the
remote untrusted server. If the server modifies any part of the client’s data, the client
should be able to detect it; furthermore, any third party verifier should also be able to
detect it. In case a third party verifier verifies the integrity of the client’s data, the data
should be kept private against the third party verifier.
Advantages
Proposed system has the following main contributions:

Remote data integrity checking protocol for cloud storage. The proposed system
inherits the support of data dynamics, and supports public verifiability and
privacy against third-party verifiers, while at the same time it doesn’t need to
use a third-party auditor.

Security analysis of the proposed system, which shows that it is secure against
the untrusted server and private against third party verifiers.
CHAPTER 4
LANGUAGE SPECIFICATION
4.1 INTRODUCTION ON .NET
Microsoft .NET is a set of Microsoft software technologies for rapidly building and
integrating XML Web services, Microsoft Windows-based applications, and Web solutions.
The .NET Framework is a language-neutral platform for writing programs that can easily
and securely interoperate. There’s no language barrier with .NET: there are numerous
languages available to the developer including Managed C++, C#, Visual Basic and Java
Script. The .NET framework provides the foundation for components to interact
seamlessly, whether locally or remotely on different platforms. It standardizes common
data types and communications protocols so that components created in different
languages can easily interoperate.
“.NET” is also the collective name given to various software components built upon
the .NET platform. These will be both products (Visual Studio.NET and Windows.NET
Server, for instance) and services (like Passport, .NET My Services, and so on).
4.1.1 THE .NET FRAMEWORK
The .NET Framework has two main parts:
1. The Common Language Runtime (CLR).
2. A hierarchical set of class libraries.
The CLR is described as the “execution engine” of .NET. It provides the environment
within which programs run. The most important features are

Conversion from a low-level assembler-style language, called Intermediate
Language (IL), into code native to the platform being executed on.

Memory management, notably including garbage collection.

Checking and enforcing security restrictions on the running code.

Loading and executing programs, with version control and other such features.
The following features of the .NET framework are also worth description
Managed Code
The code that targets .NET, and which contains certain extra Information
“metadata” to describe itself. Whilst both managed and unmanaged code can run in the
runtime, only managed code contains the information that allows the CLR to guarantee,
for instance, safe execution and interoperability.
Managed Data
With Managed Code comes Managed Data. CLR provides memory allocation and
Deal location facilities, and garbage collection. Some .NET languages use Managed Data by
default, such as C#, Visual Basic.NET and JScript.NET, whereas others, namely C++, do
not. Targeting CLR can, depending on the language you’re using, impose certain
constraints on the features available. As with managed and unmanaged code, one can have
both managed and unmanaged data in .NET applications - data that doesn’t get garbage
collected but instead is looked after by unmanaged code.
Common Type System
The CLR uses something called the Common Type System (CTS) to strictly enforce
type-safety. This ensures that all classes are compatible with each other, by describing
types in a common way. CTS define how types work within the runtime, which enables
types in one language to interoperate with types in another language, including crosslanguage exception handling. As well as ensuring that types are only used in appropriate
ways, the runtime also ensures that code doesn’t attempt to access memory that hasn’t
been allocated to it.
Common Language Specification
The CLR provides built-in support for language interoperability. To ensure that
you can develop managed code that can be fully used by developers using any
programming language, a set of language features and rules for using them called the
Common Language Specification (CLS) has been defined. Components that follow these
rules and expose only CLS features are considered CLS-compliant.
The Class Library
.NET provides a single-rooted hierarchy of classes, containing over 7000 types. The
root of the namespace is called System; this contains basic types like Byte, Double, Boolean,
and String, as well as Object. All objects derive from System. Object. As well as objects,
there are value types. Value types can be allocated on the stack, which can provide useful
flexibility. There are also efficient means of converting value types to object types if and
when necessary. The set of classes is pretty comprehensive, providing collections, file,
screen, and network I/O, threading, and so on, as well as XML and database connectivity.
The class library is subdivided into a number of sets (or namespaces), each
providing distinct areas of functionality, with dependencies between the namespaces kept
to a minimum.
4.1.2 LANGUAGES SUPPORTED BY .NET
The multi-language capability of the .NET Framework and Visual Studio .NET
enables developers to use their existing programming skills to build all types of applications
and XML Web services. The .NET framework supports new versions of Microsoft’s old
favorites Visual Basic and C++ (as VB.NET and Managed C++), but there are also a
number of new additions to the family. Visual Basic .NET has been updated to include
many new and improved language features that make it a powerful object-oriented
programming language. These features include inheritance, interfaces, and overloading,
among others. Visual Basic also now supports structured exception handling, custom
attributes and also supports multi-threading.
Visual Basic .NET is also CLS compliant, which means that any CLS-compliant
language can use the classes, objects, and components you create in Visual Basic .NET.
Managed Extensions for C++ and attributed programming are just some of the
enhancements made to the C++ language. Managed Extensions simplify the task of
migrating existing C++ applications to the new .NET Framework. C# is Microsoft’s new
language. It’s a C-style language that is essentially “C++ for Rapid Application
Development”. Unlike other languages, its specification is just the grammar of the
language. It has no standard library of its own, and instead has been designed with the
intention of using the .NET libraries as its own. Microsoft Visual J# .NET provides the
easiest transition for Java-language developers into the world of XML Web Services and
dramatically improves the interoperability of Java-language programs with existing
software written in a variety of other programming languages.
Active State has created Visual Perl and Visual Python, which enable .NET-aware
applications to be built in either Perl or Python. Both products can be integrated into the
Visual Studio .NET environment. Visual Perl includes support for Active State’s Perl Dev
Kit.
Other languages for which .NET compilers are available include

FORTRAN

COBOL

Eiffel
ASP.NET
Windows Forms
XML WEB SERVICES
Base Class Libraries
Common Language Runtime
Operating System
Figure 4.1.2.1 .Net Framework
C#.NET is also compliant with CLS (Common Language Specification) and
supports structured exception handling. CLS is set of rules and constructs that are
supported by the CLR (Common Language Runtime). CLR is the runtime environment
provided by the .NET Framework; it manages the execution of the code and also makes the
development process easier by providing services.
C#.NET is a CLS-compliant language. Any objects, classes, or components that
created in C#.NET can be used in any other CLS-compliant language. In addition, To use
objects, classes, and components created in other CLS-compliant languages in C#.NET
.The use of CLS ensures complete interoperability among applications, regardless of the
languages used to create the application.
Constructors And Destructors
Constructors are used to initialize objects, whereas destructors are used to destroy
them. In other words, destructors are used to release the resources allocated to the object.
In C#.NET the sub finalize procedure is available. The sub finalize procedure is used to
complete the tasks that must be performed when an object is destroyed. The sub finalize
procedure is called automatically when an object is destroyed. In addition, the sub finalize
procedure can be called only from the class it belongs to or from derived classes.
Garbage Collection
Garbage Collection is another new feature in C#.NET. The .NET Framework
monitors allocated resources, such as objects and variables. In addition, the .NET
Framework automatically releases memory for reuse by destroying objects that are no
longer in use.
In C#.NET, the garbage collector checks for the objects that are not currently in use
by applications. When the garbage collector comes across an object that is marked for
garbage collection, it releases the memory occupied by the object.
Overloading
Overloading is another feature in C#. Overloading enables us to define multiple
procedures with the same name, where each procedure has a different set of arguments.
Besides using overloading for procedures, for constructors and properties in a class.
Multithreading
C#.NET also supports multithreading. An application that supports multithreading
can handle multiple tasks simultaneously, and use of multithreading to decrease the time
taken by an application to respond to user interaction.
Structured Exception Handling
C#.NET supports structured handling, which enables us to detect and remove
errors at runtime. In C#.NET, need to use Try…Catch…Finally statements to create
exception handlers. Using Try…Catch…Finally statements, can create robust and effective
exception handlers to improve the performance of our application.
The .Net Framework
The .NET Framework is a new computing platform that simplifies application
development in the highly distributed environment of the Internet.
Objectives of. Net framework

To provide a consistent object-oriented programming environment whether
object codes is stored and executed locally on Internet-distributed, or executed
remotely.

To provide a code-execution environment to minimizes software deployment and
guarantees safe execution of code.

Eliminates the performance problems.
There are different types of application, such as Windows-based applications and Webbased applications.
4.2 INTRODUCTION ON SQL-SERVER
The OLAP Services feature available in SQL Server version 7.0 is now called SQL
Server 2000 Analysis Services. The term OLAP Services has been replaced with the term
Analysis Services. Analysis Services also includes a new data mining component. The
Repository component available in SQL Server version 7.0 is now called Microsoft SQL
Server 2000 Meta Data Services. References to the component now use the term Meta Data
Services. The term repository is used only in reference to the repository engine within Meta
Data Services.
SQL-SERVER database consist of six type of objects,
They are,
1. TABLE
2. QUERY
3. FORM
4. REPORT
5. MACRO
Table
A database is a collection of data about a specific topic.
Views of table
work with a table in two types,
1. Design View
2. Datasheet View
Design View
To build or modify the structure of a table work in the table design view. specify
what kind of data will be hold.
Datasheet View
To add, edit or analyses the data itself work in tables datasheet view mode.
Query
A query is a question that has to be asked the data. Access gathers data that
answers the question from one or more table. The data that make up the answer is either
dynaset (if you edit it) or a snapshot (it cannot be edited).Each time run the query, get
latest information in the dynaset. Access either displays the dynaset or snapshot for us to
view or perform an action on it, such as deleting or updating.
CHAPTER 5
SYSTEM SPECIFICATION
5.1 HARDWARE CONFIGURATION
SYSTEM
:
Pentium IV 2.4 GHz.
HARD DISK
:
40 GB.
FLOPPY DRIVE
:
1.44 Mb.
MONITOR
:
15 VGA Colour.
MOUSE
:
Touch Pad.
RAM
:
512 Mb.
5.2 SOFTWARE CONFIGURATION
OPERATING SYSTEM
:
CODING LANGUAGE
DATA BASE
Windows XP.
:
:
ASP.Net with C#
SQL Server 2005.
CHAPTER 6
SYSTEM ARCHITECTURE
6.1 ARCHITECTURAL DIAGRAM
Figure 6.1.1 Architectural Diagram
6.2 DATAFLOW DIAGRAM
Login
TPV
Untrust
Server
Client
File Verification
View Client
Details
Exists
no
Create Account
yes
Warning Mail
To Client
File Upload
Download
Verification
Metadata Cryptogrphic key
Sent to Mail
key request
to Client
Verifiction
Status
Block
Download
Request
Status
Process
Pending
Check
Allow
File Not
Modify
File Modify
File Download
with crypto
key
download modify
File with key
File Download
Verify & Upload
Downlod File
Warning from
Admin
End
Figure 6.2.1 Data Flow Diagram
6.3 UML DIAGRAM
6.3.1 ACTIVITY DIAGRAM
Login
Untrust Server
Client
TPV
No
Exists
View Client
Details
File Verification
Create Account
yes
File Upload
Download
Verification
Warning Mail
To Client
Cryptographic key
Sent to Mail
key request
to Client
Verification
Status
Download
Request
Status
Check
Process
Pending
File Not
Modify
File Modify
File Download
File Download
with crypto
key
download modify
File with key
Warning from
TPV
A
Figure 6.3.1.1 Activity Diagram
6.3.2 CLASS DIAGRAM
Verify & Upload
Downlod File
File Archive
Registration
ID
OwnerID
Password
Gender
Mobile
EMail
Date
FileID
FileName
FileSize
FilePath
FileOwner
MetaData
KeyRequest
DownloadStatus
ModifyStatus
VerifyStatus
Loginidgenration()
CreateAccount()
metadatagenration()
fileupload()
File Archive
Modify
FileID
FileName
FileSize
FilePath
FileOwner
MetaData
KeyRequest
VerifyStatus
comparemetadata()
fileupload()
Figure 6.3.2.1 Class Diagram
6.3.3 SEQUENCE DIAGRAM
Database
TPV
Untrust Server
Client
Create Account
Upload Files
Cryptography
Encryption key
Verify Client Files
Diect Verify Files
Download Verification key request
Download key Request
Allow/Block
Download Verification/Key Processing
Upload Verification File
File Modify Status
Download File
View Client Detalils
Warning To Client
Waring from TPV
Download
verification
Not Modify File
Figure 6.3.3.1 Sequence Diagram
6.3.4 USECASE DIAGRAM
Download
verification
Modify File
Create Account
Login
File Upload
Untrust Server
File Verify
Client
Cryptography key
Request
TPV
File Download
File Details
Client Details
Figure 6.3.4.1 Usecase Diagram
CHAPTER 7
IMPLEMENTATION
7.1 MODULE DESCRIPTION
There are 4 modules that is
1. Data Dynamics
i. Block Insertion
ii. Block Modification
iii. Block Deletion
2. public verifiability
3. Metadata Generation
4. Privacy against Third Party Verifiers
7.1.1 DATA DYNAMICS
Data dynamics means after clients store their data at the remote server, they can
dynamically update their data at later times. At the block level, the main operations are
block insertion, block modification and block deletion.
i.
Block Insertion:
The Server can insert anything o+n the client’s file.
ii.
Block Deletion:
The Server can delete anything on the client’s file.
iii.
Block Modification:
The Server can modify anything on the client’s file.
7.1.2 PUBLIC VERIFIABILITY
Each and every time the secret key sent to the client’s email and can perform the
integrity checking operation. In this definition, it has two entities: a challenger that stands
for either the client or any third party verifier, and an adversary that stands for the
untrusted server. Client doesn’t ask any secret key from third party.
7.1.3 METADATA KEY GENERATION
Let the verifier V wishes to the store the file F. Let this file F consist of n file blocks.
initially preprocess the file and create metadata to be appended to the file. Let each of the n
data blocks have m bits in them. A typical data file F which the client wishes to store in the
cloud.
Each of the Meta data from the data blocks mi is encrypted by using a RSA
algorithm to give a new modified Meta data Mi. Without loss of generality Show this
process. The encryption method can be improvised to provide still stronger protection for
Client’s data. All the Meta data bit blocks that are generated using the procedure are to be
concatenated together. This concatenated Meta data should be appended to the file F
before storing it at the cloud server. The file F along with the appended Meta data with the
cloud.
RSA ALGORITHM
RSA involves a public key and a private key. The public key can be known to
everyone and is used for encrypting messages. Messages encrypted with the public key can
only be decrypted using the private key. The keys for the RSA algorithm are generated the
following way:
1. Choose two distinct prime numbers p and q.

For security purposes, the integers p and q should be chosen at random,
and should be of similar bit-length.
2. Compute n = pq.

n is used as the modulus for both the public and private keys
3. Compute φ(n) = (p – 1)(q – 1), where φ is Euler's totient function.
4. Choose an integer e such that 1 < e < φ(n) and greatest common divisor of (e, φ(n)) =
1; i.e., e and φ(n) are coprime.

e is released as the public key exponent.
5. Determine d as:
i.e., d is the multiplicative inverse of e mod φ(n).
Encryption
Encryption is the process of converting plain text into cipher text.
.
Decryption
Decryption is the process of converting cipher text into plain text
.
7.1.4 PRIVACY AGAINST THIRD PARTY VERIFIER
Under the semi-honest model, a third party verifier cannot get any information
about the client’s data m from the system execution. Hence, the system is private against
third party verifiers. If the server modifies any part of the client’s data, the client should be
able to detect it; furthermore, any third Party verifier should also be able to detect it. In
case a third party verifier verifies the integrity of the client’s data, the data should be kept
private against the third party verifier
CHAPTER 8
SYSTEM TESTING
8.1 UNIT TESTING
Unit test involves the design of test case that validate that the internal program logic
is functionaly properly, and that program inputs produce valid outputs. All decision
branches and internal code flow should be validated. It is the testing of individual software
units of the application .it is done after the completion of an individual unit before
integration. This is a structural testing, that relies on knowledge of its construction and is
invasive. Unit tests perform basic tests at component level and test a specific business
process, application, and/or system configuration. Unit tests ensure that each unique path
of a business process performs accurately to the documented specifications and contains
clearly defined inputs and expected results.
8.2 INTEGRATION TESTING
Integration tests are designed to test integrated software components to determine
if they actually run as one program. Testing is event driven and is more concerned with
the basic outcome of screens or fields. Integration tests demonstrate that although the
components were individually satisfaction, as shown by successfully unit testing, the
combination of components is correct and consistent. Integration testing is specifically
aimed at exposing the problems that arise from the combination of components.
8.3 FUNCTIONAL TEST
Functional tests provide systematic demonstrations that functions tested are
available as specified by the business and technical requirements, system documentation,
and user manuals.
Functional testing is centered on the following items:
Valid Input
:
identified classes of valid input must be accepted.
Invalid Input
:
identified classes of invalid input must be rejected.
Functions
:
identified functions must be exercised.
Output
:
identified classes of application outputs must be exercised.
Systems/Procedures :
interfacing systems or procedures must be invoked.
Organization and preparation of functional tests is focused on requirements, key
functions, or special test cases. In addition, systematic coverage pertaining to identify
Business process flows; data fields, predefined processes, and successive processes must be
considered for testing. Before functional testing is complete, additional tests are identified
and the effective value of current tests is determined.
8.4 SYSTEM TEST
System testing ensures that the entire integrated software system meets
requirements. It tests a configuration to ensure known and predictable results. An example
of system testing is the configuration oriented system integration test. System testing is
based on process descriptions and flows, emphasizing pre-driven process links and
integration points.
8.5 WHITE BOX TESTING
White Box Testing is a testing in which in which the software tester has knowledge
of the inner workings, structure and language of the software, or at least its purpose. It is
purpose. It is used to test areas that cannot be reached from a black box level.
8.6 BLACK BOX TESTING
Black Box Testing is testing the software without any knowledge of the inner
workings, structure or language of the module being tested. Black box tests, as most other
kinds of tests, must be written from a definitive source document, such as specification or
requirements document, such as specification or requirements document. It is a testing in
which the software under test is treated, as a black box .you cannot “see” into it. The test
provides inputs and responds to outputs without considering how the software works.
8.7 ACCEPTANCE TESTING
User Acceptance Testing is a critical phase of any project and requires significant
participation by the end user. It also ensures that the system meets the functional
requirements.
CHAPTER 9
CONCLUSION AND FUTURE ENHANCEMENT
9.1 CONCLUSION
The proposed system is suitable for providing integrity protection of customers
important data. The proposed system supports data insertion, modification and deletion at
the block level, and also supports public verifiability. The proposed system is proved to be
secure against an untrusted server. It is also private against third party verifiers. Both
theoretical analysis and experimental results demonstrate that the proposed system has
very good efficiency in the aspects of communication, computation and storage costs.
Currently are still working on extending the protocol to support data level dynamics. The
difficulty is that there is no clear mapping relationship between the data and the tags. In
the current construction, data level dynamics can be supported by using block level
dynamics. Whenever a piece of data is modified, the corresponding blocks and tags are
updated. However, this can bring unnecessary computation and communication costs.
9.2 FUTURE ENHANCEMENT
The client file has been modified to clients does not show what modification is done
in client file by server, if the user need to know the modification only way to download the
corresponding file. In future will show what modification is done in the client file by server
to the client.
The user can view their file details such as upload files, download files. Modification
files can viewed through accessing with the help of mobile.