Evidence map›Paper›PMID 41992049›Full record

ArticleScientific reports2026

A privacy-preserving cloud storage framework with hybrid encryption, homomorphic keyword search, and blockchain-based integrity verification.

Haitham M A Ahmed, Swaleha Zubair, Mohammed Tawfik

Abstract read
In one paragraph

Article in Scientific reports, 2026. The graph could read no effect estimate from its abstract, so it casts no vote on the map. Not yet cited in PubMed.

0numbers the graph read from it
0cells of the map it votes in
0citing papers in PubMed
–field-weighted citation impact
1 · What the graph read from it

What it found

Each row is one number read from the abstract, on the scale the paper reported it, with its interval. Left of the dashed line favours the treatment, right favours the comparator. Under each row is the sentence it came from. New to these charts? A ten-minute tutorial.

The abstract states no effect estimate the extractor could read, or names no intervention and outcome on the map, so this paper lights no cell and moves no belief. It is still indexed, cited and linked below.

2 · The registry

The trial behind it

Trials whose registry record cites this paper, or whose number appears in the abstract. A trial that started after this paper was published is citing it as background, not reporting it.

Neither the registry nor the abstract names a trial number. If this is a trial report, that itself is worth knowing.

3 · Its place in the literature

Who cites it

0 citing papers in PubMed.

No citing paper in PubMed yet.

4 · The record

Corrections and comments

PubMed lists nothing against this paper. Absence here is not a guarantee, only a check that was made.

5 · Who and what money

Authors and funding

3 authors.

Haitham M A AhmedDepartment of Computer Science, Aligarh Muslim University, Aligarh, India.
Swaleha ZubairDepartment of Computer Science, Aligarh Muslim University, Aligarh, India.
Mohammed TawfikFaculty of Computer and Information Technology, Sana'a University, Sana'a, Yemen. m.tawfik@su.edu.ye.

Funding

No grant is acknowledged in the PubMed record.

6 · The paper itself

Abstract

Cloud storage outsourcing introduces critical privacy risks as Cloud Service Providers (CSPs) can access unencrypted user data, while encryption eliminates essential functionality such as searchability and remote integrity verification. Existing solutions face a trilemma: fully homomorphic encryption (FHE) remains impractical with seconds-per-operation overhead, searchable encryption leaks access patterns exploitable through inference attacks, and blockchain-based auditing schemes using public chains suffer from low throughput (7–15 TPS), high costs ($1–50 per transaction), and pseudonymous-but-traceable privacy. We present a privacy-preserving cloud storage framework that synergistically combines hybrid AES-ECC encryption for data confidentiality with HMAC-based authentication, Paillier homomorphic encryption (PHE) for probabilistic keyword encryption, and Ethereum-based smart contracts for decentralized integrity verification. Our hybrid protocol achieves IND-CPA security for bulk encryption with authenticated integrity through HMAC-SHA256, delivering 245.7ms encryption time for 1MB files and 7.3% storage overhead—21.2% faster than comparable systems. The Paillier-based keyword encryption prevents frequency analysis through probabilistic ciphertext generation, with search operations over 100 encrypted files completing in 847ms under the Decisional Composite Residuosity assumption. Leveraging Ethereum smart contracts with dynamic third-party auditor selection, our system achieves 287ms consensus latency on the Ganache test network with empirical collusion resistance measurements ([Formula: see text], consistent with hypergeometric model predictions). The distributed architecture demonstrates 85 TPS per group throughput while maintaining O(n) encryption complexity and O(1) blockchain operations validated through empirical log-log regression ([Formula: see text]) across file sizes from 1KB to 32KB, establishing feasibility for consortium-based privacy-critical cloud deployments. Production deployment on permissioned blockchain networks such as Hyperledger Fabric would provide additional privacy features including transaction unlinkability through identity management.

Indexed as

Access controlblockchainCloud storage securityData integrityEthereum smart contractsHomomorphic encryptionPrivacy-preserving encryptionSearchable encryption

Identifiers

PMID41992049
PMCPMC13221446

What OpenQuestion holds

Textmetadata
LicenceCC BY-NC-ND
Read underepoch 390

Registered trials

None linked

Read under generation 80e0d062 · epoch 390. Bibliography from PubMed, PubMed Central and OpenAlex; grants from NIH RePORTER; trial links from ClinicalTrials.gov; estimates, votes and beliefs from the OpenQuestion graph.