Trusted Data Sharing over Untrusted Cloud Storage Provider

1. Trusted Data Sharing over Untrusted Cloud Storage Provider Gansen Zhao, ChunmingRong, Jin Li, Feng Zhang, and Yong Tang  Cloud Computing Technology and Science (CloudCom), 2010 IEEE Second International Conference on

2. Outline • Introduction • Security requirements • Progressive elliptic curve encryption scheme • Trusted sharing on untrusted cloud servers • Security analysis • Related work • Conclusions

3. Introduction • With cloud computing, data owners have only limited control over the IT infrastructure. • Cloud service providers have excessive privileges.

4. Introduction • The general idea of the proposal mechanism is to encrypt the data before storing on the cloud. On sharing the data, the encrypted data will be re-encrypted without being decrypted first. The re-encrypted data will then be cryptographically accessible to the authorize user only.

5. Security requirements • Data stored on the cloud should be confidential. • Sharing of the data can be achieved by the authorization by the data owner. • Permissions given by data owner cannot be transferred to others by the permission bearer. Bob Cloud Storage Provider Alice Trudy

6. Security requirements • The challenge of meeting the requirements is that secure data sharing needs to be achieved via an untrusted cloud storage provider.

7. Progressive elliptic curve encryption • The PECE scheme allows a piece of data to be encrypted multiple times using different keys such that the final cipertextcan be decrypted in a single run with a single key. • The encryption and decryption are both based on Elliptic Curve Cryptography.

8. Notation • Let m be a piece of data, U be a set of N users. For each , has the secret key ki. • Let q be a random number agreed by all • The encryption is performed in the order of • For , it computes • Where

9. Encrypt • When all has participated in the encryption process, the final encrypted data is as follows.

10. Decrypt • Let , then me can be decrypted by a single operation as follows.

11. Trusted sharing on untrusted cloud servers

12. Notation • ka : Alice private key (Alice’s key is not used) • kaG : Alice public key • kb : Bob private key • kbG : Bob public key • kc : Cloud Storage Provider private key • kcG: Colud Storage Provider public key • Assuming kc shared with Alice • (the key kc can be a key that is dynamically generated by Alice and the Cloud Provider mutually)

13. Trusted sharing on untrusted cloud servers Alice Cloud Storage Provider Bob Random number r, t Random number rc, rb

14. Algorithm Proof

15. Security Analysis Unauthorized Access to Data: • The attacker acquires a credential that can decrypt the data without the help of the Cloud Storage Provider. • To acquire such a credential, the attacker will need the knowledge of rkcG+ tG, or the knowledge of the three secrets of r, kcand t. As m, r, kc, and t are all kept in secret, the knowledge of rkcG+tG, or the knowledge of the three secrets of r, kcand t, are not possible.

16. Security Analysis • The attacker acquires a credential that can decrypt the data with the help of the Cloud Storage Provider. • To acquire such a credential, the attacker must have the knowledge of rb, kb, or the knowledge of rbkbG. As rb is delivered to Bob in the form of rbG, it is not possible for the attacker to calculate rb from rbG. kbis a secret that is kept in private by Bob, hence the attacker could not acquire kb.

17. Security Analysis • Information Disclosure During Sharing • To acquire the clear data during the sharing, an attacker must either have the decryption key for me, mc or mb. The above discussion proves that the attacker cannot decrypt me or mb. To decrypt mc, the attacker needs the knowledge of rckcG. As kc is the private secret kept by the Cloud Storage Provider, the attacker could be able to calculate rckcGfrom rcG. mc=me + rckcG + tcG

18. Attacker Use Case

19. Conclusions Limitations: • This work assumes that the private key of the cloud provider is known to the data owner. This is a very strong assumption as no system administrators would want to share their systems’ keys with users, making it impractical to be deployed. • The proposed algorithm and the protocol are less efficient than those protocols that requires only a single ECC encryption operation

20. Conclusions Contributions: • Identify the need for implementing trusted data sharing over untrusted cloud storage providers. • Propose a progressive encryption schemebased on elliptic curve encryption. • Devise a scheme for secure sharing on the cloud. • Perform a comprehensive security analysis of the proposed scheme and show that the scheme achieves trusted sharing over untrusted cloud servers.