Identity Authentication and Data Protection System and Deployment Optimization Framework Driven by Layered Security Architecture in Cloud Service System

AbstractThe popularity of cloud computing has made cloud storage mainstream, but its centralized nature has led to security issues such as loss of data control, integrity breaches, and privacy breaches.Traditional full verification is not suitable for resource constrained users due to its high cost.Although third-party auditing (TPA) alleviates trust issues, it still has high costs, privacy breaches, and collusion risks.The lack of data damage location and recovery mechanisms, insufficient support for dynamic updates, high cost of dynamic revocation for enterprise users, and poor real-time performance in multi cloud migration scenarios further limit the reliability of cloud storage.In response to challenges, this article proposes a hierarchical security architecture: firstly, a dynamic verification framework based on hierarchical authentication is designed, combined with error correction code technology to achieve damaged data localization and recovery, and reduce redundant authentication overhead through hierarchical verification; Secondly, a real-time revocation scheme based on proxy re signature and Trusted Execution Environment (TEE) is proposed, which supports dynamic updates of administrator attributes and remote signature replacement to avoid privacy leakage.Experiments have shown that hierarchical authentication significantly reduces authentication time overhead and optimizes data migration performance; Proxy re signing combined with TEE enables real-time revocation of user permissions, with controllable computational and communication costs.This article constructs a full chain protection system covering "verification positioning recovery revocation", systematically solving the contradiction between efficiency, functionality, and security of cloud storage data integrity verification.Future research will focus on discontinuous storage optimization, lightweight re signature mechanism and multidimensional security fusion (such as zero trust architecture and AI anomaly detection) to promote the transformation of the scheme to edge computing and enterprise level complex scenarios.