ntvНаучно-технический вестник информационных технологий, механики и оптикиScientific and Technical Journal of Information Technologies, Mechanics and Optics2226-14942500-0373Университет ИТМО10.17586/2226-1494-2026-26-3-525-531ntv-620Research ArticleКОМПЬЮТЕРНЫЕ СИСТЕМЫ И ИНФОРМАЦИОННЫЕ ТЕХНОЛОГИИCOMPUTER SCIENCEЖурналирование событий жизненного цикла данных в облачном хранилище на основе технологии блокчейнBlockchain-based logging of data lifecycle events in cloud storagehttps://orcid.org/0009-0000-3319-8357ЕремукВ. В.EremukV. V.

Еремук Владимир Вадимович — аспирант

Санкт-Петербург, 197101

Vladimir V. Eremuk — PhD Student

Saint Petersburg, 197101

polar.vl@yandex.ruhttps://orcid.org/0009-0000-3319-8357КасьяновА. В.KasyanovA. V.

Касьянов Александр Владимирович — аспирант

Санкт-Петербург, 197022

Alexandr V. Kasyanov — PhD Student

Saint Petersburg, 197022

kasjanov@inbox.ruhttps://orcid.org/0009-0002-1462-3156ПримакЛ. А.PrimakL. A.

Примак Любовь Андреевна — аспирант

Санкт-Петербург, 197101

Liubov A. Primak — PhD Student

Saint Petersburg, 197101

laprimak@itmo.ruhttps://orcid.org/0000-0002-1999-5381РомашовВ. А.RomashovV. A.

Ромашов Виктор Андреевич — аспирант

Санкт-Петербург, 197101

Victor A. Romashov — PhD Student

Saint Petersburg, 197101

whiviktor@gmail.comУниверситет ИТМОРоссияITMO UniversityRussian FederationСанкт-Петербургский государственный электротехнический университет «ЛЭТИ» им. В.И. Ульянова (Ленина)РоссияSaint Petersburg Electrotechnical University “LETI”Russian Federation202609072026263525531Copyright © Еремук В.В., Касьянов А.В., Примак Л.А., Ромашов В.А., 20262026Еремук В.В., Касьянов А.В., Примак Л.А., Ромашов В.А.Eremuk V.V., Kasyanov A.V., Primak L.A., Romashov V.A.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://ntv.elpub.ru/jour/article/view/620

Введение. Представлен метод регистрации событий жизненного цикла данных в облачном хранилище в условиях недоверенной инфраструктуры облачного провайдера. Согласно построенной модели угроз, при компрометации облачного провайдера, злоумышленник имеет возможность модифицировать, переупорядочивать, откатывать и удалять хранимые данные и соответствующие им записи событий жизненного цикла. Новизна предложенного метода заключается в привязке каждой версии данных к двусторонне подписанной записи жизненного цикла с ее фиксацией в блокчейне, что обеспечивает обнаружение несанкционированных изменений независимо от провайдера после подтверждения транзакции. Метод. Метод предназначен для внедрения в системы, включающие облачное хранилище под управлением недоверенного провайдера и клиентские устройства, являющиеся узлами частной блокчейн-сети. Каждая операция создания, изменения или удаления данных сопровождается формированием регистрационной записи, содержащей хеш текущей и предыдущей версий данных, тип операции, метку времени и идентификатор пользователя. Запись подписывается на стороне клиента и провайдера, после чего формируется транзакция и отправляется в блокчейн с протоколом консенсуса Tendermint. Для ускорения проверок регистрационные записи и статус подтверждения транзакций дополнительно хранятся на стороне провайдера. Статус подтверждения синхронизируется при последующих обращениях; версии данных без подтвержденных транзакций доступны только для чтения. Проверка целостности включает сопоставление хеш-суммы, проверку подписей и проверку подтверждения транзакции в блокчейне. Основные результаты. Выполнена экспериментальная оценка метода в частной блокчейн-сети с протоколом консенсуса Tendermint, с 1000 клиентами и 10 валидаторами. В эксперименте достигнуто среднее время подтверждения транзакции в 1,3 с при пиковом значении 1,8 с. Выполнение криптографических операций, необходимых для работы изложенного метода журналирования, занимает менее 3 мс на стороне клиента на одну операцию над данными. Обсуждение. В сравнении с коммерческими аналогами (Amazon Web Services CloudTrail и Google Cloud Audit Logs), предложенный метод обеспечивает возможность выполнения аудита сразу после подтверждения транзакции, но требует дополнительных временных затрат при выполнении операций над данными. Задачи обеспечения доступности и предотвращения удаления данных не рассматриваются в рамках данного исследования.

This study presents a method for registering data lifecycle events in cloud storage under an untrusted cloud provider infrastructure. According to the adopted threat model, if the cloud provider is compromised, an adversary is capable of modifying, reordering, rolling back, and deleting stored data as well as the corresponding lifecycle event records. The novelty of the proposed method lies in binding each data version to a dual-signed lifecycle record anchored in a blockchain which enables detection of unauthorized modifications independently of the provider after transaction confirmation. The method is intended for deployment in systems that include cloud storage operated by an untrusted provider and client devices acting as nodes of a private blockchain network. Each create, modify, or delete operation is accompanied by the formation of a registration record containing the hash of the current data version, the hash of the previous version, the operation type, a timestamp, and a user identifier. The record is signed by both the client and the provider, after which a corresponding transaction is formed and submitted to a blockchain using the Tendermint consensus protocol. To accelerate verification procedures, registration records and transaction confirmation statuses are additionally stored on the provider side. The confirmation status is synchronized during subsequent accesses; data versions without confirmed transactions are available in read-only mode. Integrity verification includes matching the payload hash, verifying both signatures, and confirming the presence of the transaction in the blockchain. An experimental evaluation of the method was conducted in a private blockchain network using the Tendermint consensus protocol with 1,000 clients and 10 validators. The average transaction confirmation time achieved in the experiment was 1.3 s, with a peak value of 1.8 s. Client-side cryptographic operations required by the proposed logging method take less than 3 ms per data operation. Compared to commercial solutions (Amazon Web Services CloudTrail and Google Cloud Audit Logs), the proposed method enables audit execution immediately after transaction confirmation but introduces additional latency in the data operation path. Issues related to availability and prevention of physical data deletion is beyond the scope of this study.

жизненный цикл данныхблокчейноблачное хранилищепроверка целостностиаудитжурналированиеdata lifecycleblockchaincloud storageintegrity checkingauditingReferencesHao J., Deng Z., Li J. The evolution of data pricing: From economics to computational intelligence. Heliyon, 2023, vol. 9, no. 9, pp. e20274. doi: 10.1016/j.heliyon.2023.e20274Hao J., Deng Z., Li J. The evolution of data pricing: From economics to computational intelligence // Heliyon. 2023. V. 9. N 9. P. e20274. doi: 10.1016/j.heliyon.2023.e20274Juhasz Z. Quantitative cost comparison of on-premise and cloud infrastructure based EEG data processing. Cluster Computing, 2021, vol. 24, no. 2, pp. 625–641. doi: 10.1007/s10586-020-03141-yJuhasz Z. Quantitative cost comparison of on-premise and cloud infrastructure based EEG data processing // Cluster Computing. 2021. V. 24. N 2. P. 625–641. doi: 10.1007/s10586-020-03141-yWang L., Tian Y., Xiong J. Achieving reliable and anti-collusive outsourcing computation and verification based on blockchain in 5G-enabled IoT. Digital Communications and Networks, 2022, vol. 8, no. 5, pp. 644–653. doi: 10.1016/j.dcan.2022.05.012Wang L., Tian Y., Xiong J. Achieving reliable and anti-collusive outsourcing computation and verification based on blockchain in 5G-enabled IoT // Digital Communications and Networks. 2022. V. 8. N 5. P. 644–653. doi: 10.1016/j.dcan.2022.05.012Song M., Sang Y. Secure outsourcing of matrix determinant computation under the malicious cloud. Sensors, 2021, vol. 21, no. 20, pp. 6821. doi: 10.3390/s21206821Song M., Sang Y. Secure outsourcing of matrix determinant computation under the malicious cloud // Sensors. 2021. V. 21. N 20. P. 6821. doi: 10.3390/s21206821Chen Z., Tian Y., Zhou F., Xiong W., Yang Z., Wang S. A rational and reliable model for outsourcing polynomial two-party computation. Computers and Electrical Engineering, 2024, vol. 120, part C, pp. 109829. doi: 10.1016/j.compeleceng.2024.109829Chen Z., Tian Y., Zhou F., Xiong W., Yang Z., Wang S. A rational and reliable model for outsourcing polynomial two-party computation // Computers and Electrical Engineering. 2024. V. 120. Part C. P. 109829. doi: 10.1016/j.compeleceng.2024.109829Dawood M., Tu S., Xiao C., Alasmary H., Waqas M., Rehman S.U. Cyberattacks and security of cloud computing: a complete guideline. Symmetry, 2023, vol. 15, no. 11, pp. 1981. doi: 10.3390/sym15111981Dawood M., Tu S., Xiao C., Alasmary H., Waqas M., Rehman S.U. Cyberattacks and security of cloud computing: a complete guideline // Symmetry. 2023. V. 15. N 11. P. 1981. doi: 10.3390/sym15111981Ang’udi J.J. Security challenges in cloud computing: A comprehensive analysis. World Journal of Advanced Engineering Technology and Sciences, 2023, vol. 10, no. 2, pp. 155–181. doi: 10.30574/wjaets.2023.10.2.0304Ang’udi J.J. Security challenges in cloud computing: A comprehensive analysis // World Journal of Advanced Engineering Technology and Sciences. 2023. V. 10. N 2. P. 155–181. doi: 10.30574/wjaets.2023.10.2.0304Mahida A. Secure data outsourcing techniques for cloud storage. International Journal of Science and Research (IJSR), 2024, vol. 13, no. 4, pp. 181–184. doi: 10.21275/sr24402065432Mahida A. Secure data outsourcing techniques for cloud storage // International Journal of Science and Research (IJSR). 2024. V. 13. N 4. P. 181–184. doi: 10.21275/sr24402065432Du J., Dong G., Ning J., Xu Z., Yang R. Identity-based controlled delegated outsourcing data integrity auditing scheme. Scientific Reports, 2024, vol. 14, no. 1, pp. 7582. doi: 10.1038/s41598-024-58325-yDu J., Dong G., Ning J., Xu Z., Yang R. Identity-based controlled delegated outsourcing data integrity auditing scheme // Scientific Reports. 2024. V. 14. N 1. P. 7582. doi: 10.1038/s41598-024-58325-yMakhdoom I., Abolhasan M., Lipman J., Piccardi M., Franklin D. PrivySeC: A secure and privacy-compliant distributed framework for personal data sharing in IoT ecosystems. Blockchain: Research and Applications, 2024, vol. 5, no. 4, pp. 100220. doi: 10.1016/j.bcra.2024.100220Makhdoom I., Abolhasan M., Lipman J., Piccardi M., Franklin D. PrivySeC: A secure and privacy-compliant distributed framework for personal data sharing in IoT ecosystems // Blockchain: Research and Applications. 2024. V. 5. N 4. P. 100220. doi: 10.1016/j.bcra.2024.100220Alwaheidi M.K., Islam S. Data-driven threat analysis for ensuring security in cloud enabled systems. Sensors, 2022, vol. 22, no. 15, pp. 5726. doi: 10.3390/s22155726Alwaheidi M.K., Islam S. Data-driven threat analysis for ensuring security in cloud enabled systems // Sensors. 2022. V. 22. N 15. P. 5726. doi: 10.3390/s22155726Dikii D., Arustamov S., Grishentsev A. DOS attacks detection in MQTT networks. Indonesian Journal of Electrical Engineering and Computer Science, 2021, vol. 21, no. 1, pp. 601–608. doi: 10.11591/ijeecs.v21.i1.pp601-608Dikii D., Arustamov S., Grishentsev A. DOS attacks detection in MQTT networks // Indonesian Journal of Electrical Engineering and Computer Science. 2021. V. 21. N 1. P. 601–608. doi: 10.11591/ijeecs.v21.i1.pp601-608Kumari P., Jain A.K. A comprehensive study of DDoS attacks over IoT network and their countermeasures. Computers & Security, 2023, vol. 127, pp. 103096. doi: 10.1016/j.cose.2023.103096Kumari P., Jain A.K. A comprehensive study of DDoS attacks over IoT network and their countermeasures // Computers & Security. 2023. V. 127. P. 103096. doi: 10.1016/j.cose.2023.103096Pakmehr A., Aßmuth A., Taheri N., Ghaffari A. DDoS attack detection techniques in IoT networks: a survey. Cluster Computing, 2024, vol. 27, no. 10, pp. 14637–14668. doi: 10.1007/s10586-024-04662-6Pakmehr A., Aßmuth A., Taheri N., Ghaffari A. DDoS attack detection techniques in IoT networks: a survey // Cluster Computing. 2024. V. 27. N 10. P. 14637–14668. doi: 10.1007/s10586-024-04662-6Bukhowah R., Aljughaiman A., Rahman M.M.H. Detection of DoS attacks for IoT in information-centric networks using machine learning: Opportunities, challenges, and future research directions. Electronics, 2024, vol. 13, no. 6, pp. 1031. doi: 10.3390/electronics13061031Bukhowah R., Aljughaiman A., Rahman M.M.H. Detection of DoS attacks for IoT in information-centric networks using machine learning: Opportunities, challenges, and future research directions // Electronics. 2024. V. 13. N 6. P. 1031. doi: 10.3390/electronics13061031Sahu S.K., Mazumdar K. Exploring security threats and solutions Techniques for Internet of Things (IoT): from vulnerabilities to vigilance. Frontiers in Artificial Intelligence, 2024, vol. 7, pp. 1397480. doi: 10.3389/frai.2024.1397480Sahu S.K., Mazumdar K. Exploring security threats and solutions Techniques for Internet of Things (IoT): from vulnerabilities to vigilance // Frontiers in Artificial Intelligence. 2024. V. 7. P. 1397480. doi: 10.3389/frai.2024.1397480Almutairi M., Sheldon F.T. IoT-Cloud Integration Security: A Survey of Challenges, Solutions, and Directions. Electronics, 2025, vol. 14, no. 7, pp. 1394. doi: 10.3390/electronics14071394Almutairi M., Sheldon F.T. IoT-Cloud Integration Security: A Survey of Challenges, Solutions, and Directions // Electronics. 2025. V. 14. N 7. P. 1394. doi: 10.3390/electronics14071394Sekar S., Rani P.S., Dhanamathi A., Raju A.R., Pandey P., Bavaneeswari M. Securing the cloud with AWS Shield for comprehensive protection of cloud infrastructure and services. Proc. of the 11th International Conference on Communication and Signal Processing (ICCSP), 2025, pp. 1825–1830. doi: 10.1109/iccsp64183.2025.11088761Sekar S., Rani P.S., Dhanamathi A., Raju A.R., Pandey P., Bavaneeswari M. Securing the cloud with AWS Shield for comprehensive protection of cloud infrastructure and services // Proc. of the 11th International Conference on Communication and Signal Processing (ICCSP). 2025. P. 1825–1830. doi: 10.1109/iccsp64183.2025.11088761Roy A., Banerjee A., Bhardwaj N. A study on Google Cloud Platform (GCP) and its security. Machine Learning Techniques and Analytics for Cloud Security, 2021, pp. 313–338. doi: 10.1002/9781119764113.ch15Roy A., Banerjee A., Bhardwaj N. A study on Google Cloud Platform (GCP) and its security // Machine Learning Techniques and Analytics for Cloud Security. 2021. P. 313–338. doi: 10.1002/9781119764113.ch15Anderson M.W. Enabling the Write-Once Read-Many (WORM) dashboard and web interface for HPC data storage. Idaho National Laboratory, 2023.Anderson M.W. Enabling the Write-Once Read-Many (WORM) dashboard and web interface for HPC data storage // Idaho National Laboratory. 2023.Lupaiescu S., Cioata P., Turcu C.E., Gherman O., Turcu C.O., Paslaru G. Centralized vs. decentralized: Performance comparison between bigchaindb and amazon QLDB. Applied Sciences, 2023, vol. 13, no. 1, pp. 499. doi: 10.3390/app13010499Lupaiescu S., Cioata P., Turcu C.E., Gherman O., Turcu C.O., Paslaru G. Centralized vs. decentralized: Performance comparison between bigchaindb and amazon QLDB // Applied Sciences. 2023. V. 13. N 1. P. 499. doi: 10.3390/app13010499Zhao X., Li M., Feng F., Xia Y. Towards a secure joint cloud with confidential computing. Proc. of the IEEE International Conference on Joint Cloud Computing (JCC), 2022, pp. 79–88. doi: 10.1109/jcc56315.2022.00019Zhao X., Li M., Feng F., Xia Y. Towards a secure joint cloud with confidential computing // Proc. of the IEEE International Conference on Joint Cloud Computing (JCC). 2022. P. 79–88. doi: 10.1109/jcc56315.2022.00019Ahmad A., Lee S., Peinado M. Hardlog: Practical tamper-proof system auditing using a novel audit device. Proc. of the IEEE Symposium on Security and Privacy (SP), 2022, pp. 1791–1807. doi: 10.1109/sp46214.2022.9833745Ahmad A., Lee S., Peinado M. Hardlog: Practical tamper-proof system auditing using a novel audit device // Proc. of the IEEE Symposium on Security and Privacy (SP). 2022. P. 1791–1807. doi: 10.1109/sp46214.2022.9833745Javed H., Abaid Z., Akbar S., Ullah K., Ahmad A., Saeed A., et al. Blockchain-based logging to defeat malicious insiders: The case of remote health monitoring systems. IEEE Access, 2024, vol. 12, pp. 12062–12079. doi: 10.1109/access.2023.3346432Javed H., Abaid Z., Akbar S., Ullah K., Ahmad A., Saeed A., et al. Blockchain-based logging to defeat malicious insiders: The case of remote health monitoring systems // IEEE Access. 2024. V. 12. P. 12062–12079. doi: 10.1109/access.2023.3346432Tong Q., Yin L., Liu Y., Xu J. Append-only authenticated Data Sets based on RSA accumulators for transparent log system. Computer Standards & Interfaces, 2025, vol. 93, pp. 103978. doi: 10.1016/j.csi.2025.103978Tong Q., Yin L., Liu Y., Xu J. Append-only authenticated Data Sets based on RSA accumulators for transparent log system // Computer Standards & Interfaces. 2025. V. 93. P. 103978. doi: 10.1016/j.csi.2025.103978Kim T.N., Ngoc D.H., Moldovyan N.A. Constructing new representative collective signature using the GOST R 34.10-2012. Journal of Communications, 2022, vol. 17, no. 6, pp. 478–485. doi: 10.12720/jcm.17.6.478-485Kim T.N., Ngoc D.H., Moldovyan N.A. Constructing new representative collective signature using the GOST R 34.10-2012 // Journal of Communications. 2022. V. 17. N 6. P. 478–485. doi: 10.12720/jcm.17.6.478-485Mikhailovich P.P., Victorovich C.A., Nikolayevich Y.N., Yuryevich Z.M. Implementation of GOST 34.12-2018 Encryption for LoRaWAN End-devices. Proc. of the Ural Symposium on Biomedical Engineering, Radioelectronics and Information Technology (USBEREIT), 2021, pp. 0451–0454. doi: 10.1109/USBEREIT51232.2021.9455037Mikhailovich P.P., Victorovich C.A., Nikolayevich Y.N., Yuryevich Z.M. Implementation of GOST 34.12-2018 Encryption for LoRaWAN End-devices // Proc. of the Ural Symposium on Biomedical Engineering, Radioelectronics and Information Technology (USBEREIT). 2021. P. 0451–0454. doi: 10.1109/USBEREIT51232.2021.9455037Kazymyrov O., Kazymyrova V. Algebraic aspects of the Russian hash standard GOST R 34.11-2012. Cryptology ePrint Archive, 2013.Kazymyrov O., Kazymyrova V. Algebraic aspects of the Russian hash standard GOST R 34.11-2012 // Cryptology ePrint Archive. 2013.Komarova A., Menshchikov A., Klyaus T., Korobeynikov A., Gatchin Y., Tishukova N. Analysis and comparison of electronic digital signature state standards GOST R 34.10-1994, GOST R 34.102001 and GOST R 34.10-2012. Proc. of the 10th International Conference on Security of Information and Networks, 2017, pp. 262-267. doi: 10.1145/3136825.3136894Komarova A., Menshchikov A., Klyaus T., Korobeynikov A., Gatchin Y., Tishukova N. Analysis and comparison of electronic digital signature state standards GOST R 34.10-1994, GOST R 34.102001 and GOST R 34.10-2012 // Proc. of the 10th International Conference on Security of Information and Networks. 2017. P. 262-267. doi: 10.1145/3136825.3136894Kim S., Kim D. Data-tracking in blockchain utilizing hash chain: a study of structured and adaptive process. Symmetry, 2024, vol. 16, no. 1, pp. 62. doi: 10.3390/sym16010062Kim S., Kim D. Data-tracking in blockchain utilizing hash chain: a study of structured and adaptive process // Symmetry. 2024. V. 16. N 1. P. 62. doi: 10.3390/sym16010062Yin M., Malkhi D., Reiter M.K., Gueta G.G., Abraham I. HotStuff: BFT consensus with linearity and responsiveness. Proc. of the 2019 ACM Symposium on Principles of Distributed Computing, 2019, pp. 347–356. doi: 10.1145/3293611.3331591Yin M., Malkhi D., Reiter M.K., Gueta G.G., Abraham I. HotStuff: BFT consensus with linearity and responsiveness // Proc. of the 2019 ACM Symposium on Principles of Distributed Computing. 2019. P. 347–356. doi: 10.1145/3293611.3331591Wang R., Yuan M., Wang Z., Li Y. Improved fast-response consensus algorithm based on HotStuff. Sensors, 2024, vol. 24, no. 16, pp. 5417. doi: 10.3390/s24165417Wang R., Yuan M., Wang Z., Li Y. Improved fast-response consensus algorithm based on HotStuff // Sensors. 2024. V. 24. N 16. P. 5417. doi: 10.3390/s24165417Kang D., Gupta S., Malkhi D., Sadoghi M. Hotstuff-1: Linear consensus with one-phase speculation. Proc. of the ACM on Management of Data, 2025, vol. 3, no. 3, pp. 1–29. doi: 10.1145/3725308Kang D., Gupta S., Malkhi D., Sadoghi M. Hotstuff-1: Linear consensus with one-phase speculation // Proc. of the ACM on Management of Data. 2025. V. 3. N 3. P. 1–29. doi: 10.1145/3725308Amoussou-Guenou Y., Beltrando L., Herlihy M., Potop-Butucaru M. Byzantine Reliable Broadcast and Tendermint consensus with trusted components. Cryptology ePrint Archive, 2025.Amoussou-Guenou Y., Beltrando L., Herlihy M., Potop-Butucaru M. Byzantine Reliable Broadcast and Tendermint consensus with trusted components // Cryptology ePrint Archive. 2025.Cason D., Fynn E., Milosevic N., Milosevic Z., Buchman E., Pedone F. The design, architecture and performance of the tendermint blockchain network. Proc. of the 40th International Symposium on Reliable Distributed Systems (SRDS), 2021, pp. 23–33. doi: 10.1109/srds53918.2021.00012Cason D., Fynn E., Milosevic N., Milosevic Z., Buchman E., Pedone F. The design, architecture and performance of the tendermint blockchain network // Proc. of the 40th International Symposium on Reliable Distributed Systems (SRDS). 2021. P. 23–33. doi: 10.1109/srds53918.2021.00012Makani S.T. Efficient resource utilization with auto tagging using amazon’s cloud trail services. International Journal of Computer Sciences and Engineering, 2023, vol. 11, no. 9, pp. 11–16. doi: 10.26438/ijcse/v11i9.1116Makani S.T. Efficient resource utilization with auto tagging using amazon’s cloud trail services // International Journal of Computer Sciences and Engineering. 2023. V. 11. N 9. P. 11–16. doi: 10.26438/ijcse/v11i9.1116Kesseli T. Security in Cloud Environments: Using an Open-Source Tool to Secure the Cloud Platform. Master’s Thesis. Oulu University of Applied Sciences, 2025, 71 p.Kesseli T. Security in Cloud Environments: Using an Open-Source Tool to Secure the Cloud Platform. Master’s Thesis. Oulu University of Applied Sciences. 2025. 71 p.

The authors declare that there are no conflicts of interest present.