Paper 2011/585

Iris: A Scalable Cloud File System with Efficient Integrity Checks

Emil Stefanov, Marten van Dijk, Alina Oprea, and Ari Juels


We present Iris, a practical, authenticated file system designed to support workloads from large enterprises storing data in the cloud and be resilient against potentially untrustworthy service providers. As a transparent layer enforcing strong integrity guarantees, Iris lets an enterprise tenant maintain a large file system in the cloud. In Iris, tenants obtain strong assurance not just on data integrity, but also on data freshness, as well as data retrievability in case of accidental or adversarial cloud failures. Iris offers an architecture scalable to many clients (on the order of hundreds or even thousands) issuing operations on the file system in parallel. Iris includes new optimization and enterprise-side caching techniques specifically designed to overcome the high network latency typically experienced when accessing cloud storage. Iris also includes novel erasure coding techniques for efficient support of dynamic Proofs of Retrievability (PoR) protocols over the file system. We describe our architecture and experimental results on a prototype version of Iris. Iris achieves end-to-end throughput of up to 260MB per second for 100 clients issuing simultaneous requests on the file system. (This limit is dictated by the available network bandwidth and maximum hard drive throughput.) We demonstrate that strong integrity protection in the cloud can be achieved with minimal performance degradation.

Available format(s)
Publication info
Published elsewhere. Unknown where it was published
cloud computingfile systemsproofs of retrievability
Contact author(s)
aoprea @ rsa com
2012-03-14: revised
2011-11-02: received
See all versions
Short URL
Creative Commons Attribution


      author = {Emil Stefanov and Marten van Dijk and Alina Oprea and Ari Juels},
      title = {Iris: A Scalable Cloud File System with Efficient Integrity Checks},
      howpublished = {Cryptology ePrint Archive, Paper 2011/585},
      year = {2011},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.