Protection of Identity Information in Cloud Computing without Trusted Third Party

Abstract

Abstract-Cloud computing allows the use of Internet-based services to support business processes and rental of IT-services on a utility-like basis. It offers a concentration of resources but also poses risks for data privacy. A single breach can cause significant loss. The heterogeneity of "users" represents a danger of multiple, collaborative threats.In cloud computing, entities may have multiple accounts associated with a single or multiple service providers (SPs). Sharing sensitive identity information (that is, Personally Identifiable information or PII) along with associated attributes of the same entity across services can lead to mapping of the identities to the entity, tantamount to privacy loss.Identity management (IDM) is one of the core components in cloud privacy and security and can help alleviate some of the problems associated with cloud computing. Available solutions use trusted third party (TTP) in identifying entities to SPs. The solution providers do not recommend the usage of their solutions on untrusted hosts.We propose an approach for IDM, which is independent of TTP and has the ability to use identity data on untrusted hosts. The approach is based on the use of predicates over encrypted data and multi-party computing for negotiating a use of a cloud service. It uses active bundle-which is a middleware agent that includes PII data, privacy policies, a virtual machine that enforces the policies, and has a set of protection mechanisms to protect itself. An active bundle interacts on behalf of a user to authenticate to cloud services using user's privacy policies.

A survey on security issues and solutions at different layers of Cloud computing

“…Experimental evaluations are not reported. 20 To solve third party problem, R. Ranchal et al [69] proposed an approach to protect identity information without including trusted third party and using active bundle scheme. In this approach, Samir's multi party secrete sharing scheme is used to encrypt data.…”

Protecting PLM Data Throughout Their Lifecycle

“…The AB prototype has been implemented using the mobile agent framework Jade (http://jade.tilab.com/) [17,18]. A mobile agent is a software object that contains code and carried data and is able to perform computations on visited hosts, transport itself from one host to another, and interact with and use capabilities of visited hosts [17].…”

“…This brings in all TTP related issues such as loss of control, lack of trust etc [18]. We are investigating approaches to decrease reliance on TTP making ABs more self-protected entities.…”

“…We are investigating approaches to decrease reliance on TTP making ABs more self-protected entities. One such approach based on predicates over encrypted data and multiparty computing for Identity Management is discussed in [18]. Another approach (used in Vanish [19]) is to use Shamir's threshold secret sharing technique [21] to split decryption keys into N shares, and use a threshold t (< N) that defines the minimum number of shares required to reconstruct the key.…”

Medical Diagnosis Expert System as Service in Cloud

“…To address these issues cryptographic techniques can be implemented to maintains security for personal information. The advent of cloud computing has permitted us to host the software pack that analyses patient personal information as s/w as a services, [5] PAAS layer controls the execution of the software. In this paper, we propose a novel approach development of cloud model for medical diagnosis expert system in cloud which provides secure patient information through decisions based on lab test reports of the patient and to implement patient access control…”