Every day, an enormous share of the world’s digital life flows into cloud data centers. Documents, medical records, business transactions, and sensor streams are gathered globally and stored in remote facilities operated by companies that most users will never see or meet. These storage providers function as untrustworthy third parties: they handle the sending, processing, and receiving of an organization’s data, yet they offer no cryptographic guarantee that the data remains untouched, that access requests are honest, or that the software managing permissions behaves as promised. A new study published in Cluster Computing by Lella Sridhara Rao of Anurag University and colleagues across six Indian institutions argues that this arrangement has reached its limits, and proposes a blockchain-enabled layered architecture for secure cloud storage that rethinks access control from the ground up.
The problem the researchers set out to solve is deceptively simple to state. Cloud applications face high operating costs, weak data protection, and inconsistent software quality, and the access control methods in widespread use rarely address resilience against sophisticated attack scenarios. Sybil attacks, in which an adversary fabricates a swarm of fake identities to overwhelm a system, replay attacks, in which captured authentication messages are retransmitted to impersonate a legitimate user, and collusion by malicious insiders who combine their privileges to reach data they should never see, all exploit the same structural weakness: the system that decides who may access what is itself a single, mutable point of failure. As a result, organizations need a secure, scalable, and trustworthy access control framework that not only detects and prevents unauthorized access but also ensures immutability, accountability, and resilience against threats from both inside and outside the perimeter.
The proposed answer integrates blockchain technology directly with cloud storage, and the integration is architectural rather than cosmetic. In the proposed system, a dataset is drawn from CICIDS2017, the Canadian Institute for Cybersecurity Intrusion Detection System 2017 benchmark, a widely used collection of realistic network traffic containing both benign activity and labeled attack scenarios. After the data is stored, users communicate through a Cloud Service Interface for essential functions such as network access, authority management, and overall security authentication. The interface is not merely a login page; it is the front door of a multi-layer authentication process that spans the blockchain’s edge layer, the network layer, the management layer, and the cloud service interface itself. Because every request must pass through this sequence of independent verification stages, the researchers report that data becomes substantially more secure than in conventional single-gate designs.
The technical logic of the layered design deserves close attention. The blockchain edge layer sits closest to the user, anchoring identity and permission decisions in a distributed ledger whose entries, once written, cannot be silently altered. This immutability is what transforms access control from a promise into a provable property: when a permission is granted, the grant is recorded on the ledger, and when access occurs, the event is traceable to a ledger entry that no insider can rewrite. The network layer then guards the transport path, ensuring that authentication messages crossing it cannot be replayed or forged, since each exchange is bound to ledger state that changes with every transaction. The management layer coordinates authority management, deciding which parties hold the power to issue, modify, or revoke permissions, and it does so under the same ledger discipline, so that even administrators act within an auditable frame.
This layered authentication has a direct consequence for the attack classes that motivated the work. A Sybil attack depends on the attacker’s ability to mint identities cheaply; when identity issuance is anchored to a ledger with consensus rules and cost, the swarm of fake identities becomes far harder to sustain. A replay attack depends on authentication messages remaining valid when retransmitted; when each message is bound to evolving ledger state, an old message no longer opens any door. Insider collusion depends on administrators combining mutable privileges out of sight; when every privilege change is written to an immutable record, collusion leaves evidence. The architecture thus converts each attack from an exploit into a traceable event, which is precisely the shift the researchers identify as missing from existing methods.
Performance is the second pillar of the proposal, and it is where the work departs from much of the blockchain-security literature, which often accepts heavy overhead as the price of trust. The researchers state that the proposed system improves storage capacity and security while minimizing communication cost, storage cost, and execution time. The mechanism behind these gains lies in the division of labor among the layers: the edge layer handles verification close to the user, reducing round trips to distant cloud units; the management layer concentrates authority decisions, avoiding redundant checks; and the cloud service interface streamlines the essential functions of network access, authority management, and security authentication into a single coherent workflow. In conventional designs, these functions are scattered across separate systems, each adding latency, storage, and coordination overhead that accumulates with every user request.
The choice of CICIDS2017 as the evaluation dataset is significant for what it says about the system’s intended threat model. The benchmark contains realistic traffic patterns drawn from operational networks, including intrusion scenarios that mimic the behavior of real adversaries rather than synthetic anomalies. Evaluating a blockchain-anchored access control system against such data tests whether the layered authentication can distinguish legitimate user flows from hostile ones under conditions that resemble production environments. The researchers describe the workflow as follows: the dataset is taken from CICIDS2017, and after data storage, users communicate through the Cloud Service Interface for the essential functions of network access, authority management, and overall security authentication, with the multi-layer authentication process spanning the blockchain’s edge layer, network layer, management layer, and cloud service interface guarding each exchange.
The broader context of the research is a field in rapid transition. The study’s bibliography traces a decade of effort to secure cloud storage through attribute-based encryption, role-based access control, deduplication with dynamic ownership management, proxy re-encryption, zero-trust dynamic access control, and data integrity auditing without private key storage. Recent work has pushed toward distributed ledger technology for personal data access control with key redistribution, blockchain-assisted identity management and integrity verification in cloud environments, and blockchain-based authentication protocols designed specifically from a cloud computing perspective. The new proposal sits squarely in this lineage but differs in a crucial respect: rather than bolting a ledger onto an existing access control system, it makes the ledger the structural backbone of a layered architecture whose every stage draws its trust from the same immutable record.
What makes the work potentially consequential for practice is the combination it achieves. Organizations have long faced a trade-off between security and performance: stronger authentication typically means more verification steps, more cryptographic operations, and higher costs, while leaner systems leave gaps that adversaries exploit. The researchers claim that their layered blockchain design escapes this trade-off, delivering improved storage capacity and security alongside reduced communication cost, storage cost, and execution time. If the claimed gains hold at production scale, the implications extend across sectors that depend on cloud storage under regulatory pressure, from healthcare systems managing sensitive records to financial platforms handling transactional data, where accountability and immutability are not optional features but legal requirements.
The study, received in August 2025, revised in May 2026, and published on 15 October 2026 in Cluster Computing as volume 29, article 856, arrives at a moment when the cloud’s role as the world’s default data repository is colliding with growing distrust of the parties that operate it. The authors, spanning departments of artificial intelligence, electronics and communication engineering, and computer science and engineering across Hyderabad, Surampalem, Guntur, and Vaddeswaram, state no funding involvement and no competing interests. Their contribution is a design argument backed by evaluation: that the trust deficit at the heart of cloud storage can be closed not by asking storage companies to behave better, but by rebuilding the access control system so that its decisions are anchored in a ledger no single party can rewrite, verified across layers no single message can bypass, and measured against attack data no synthetic benchmark can flatter. Whether this architecture becomes the template for the next generation of cloud security will depend on adoption, but the direction it points is unambiguous: the future of cloud trust may be written, block by block, in immutable ink.
Subject of Research: Secure cloud storage strategy of access control system using blockchain
Article Title: Secure cloud storage strategy of access control system using blockchain
Article References: Rao, L. S., Santhosh, P., Satyanarayana, D., Latha, A., Fariddin, S. B., & Sowjanya, G. N. (2026). Secure cloud storage strategy of access control system using blockchain. Cluster Computing, 29(15), Article 856. https://doi.org/10.1007/s10586-026-06641-5
Image Credits: AI Generated
DOI: 10.1007/s10586-026-06641-5
Keywords: Secure, cloud, storage, strategy, access, control, system, blockchain, scientific research
News Source: Denise Maddox. (October 17, 2026). Blockchain Layers Guard Cloud Storage Against Insider and Sybil Attacks. Scienmag.
