Identity-based public cloud storage auditing schemes can check the integrity of cloud data,and reduce the complicated certificate management.In such a scheme,one Private Key Generator (PKG) is employed to authenticate the identity and generate private keys for all users,and one Third Party Auditor (TPA) is employed to by users to check the integrity of cloud data.This approach is undesirable for large-scale users since the PKG and the TPA might not be able to afford the heavy workload.To solve the problem,we give a hierarchical Private Key Generator structure for large-scale user groups,in which a root PKG delegates lower-level PKGs to generate private keys and authenticate identifies.Based on the proposed structure,we propose an authorized identity-based public cloud storage auditing scheme,in which the lowest-level PKGs play the role of TPA,and only the authorized lowest-level PKGs can represent users in their domains to check cloud data’s integrity.Furthermore,we give the formal security analysis and experimental results,which show that our proposed scheme is secure and efficient.