Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment

Rocha, Marciano da; Valadares, Dalton Cézane Gomes; Perkusich, Ângelo; Gorgônio, Kyller Costa; Pagno, Rodrigo Tomaz; Will, Newton C.

doi:10.5220/0009130600310043

Cited by 5 publications

(2 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…-The proposal to improve the security of the disk/file encryption process using Intel SGX; -The implementation of such proposal considering an Intel SGX application integrated with the Cryptomator tool; -The performance evaluation of a proof of concept, considering six different hardware combinations. [46], which has been presented at the 10th International Conference on Cloud Computing and Services Science (CLOSER). We expanded our former work with new performance results and comparisons, and a more accurate security assessment on the Intel SGX technology and our prototype.…”

Section: Contributionmentioning

confidence: 99%

See 1 more Smart Citation

Trusted Client-Side Encryption for Cloud Storage

Rocha

Valadares

Perkusich

et al. 2021

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

Nowadays, users are delegating the data storage to cloud services, due to the virtually unlimited storage, change history, broadband connection, and high availability. Despite the benefits and facilities, it is necessary to pay extra attention to data confidentiality and users' privacy, as numerous threats aim to collect such information in an unauthorized manner. An approach to ensure data confidentiality is the use of client-side encryption, with the user taking control of the encryption keys and defining which files or data will be encrypted. This scheme is already explored by many applications on personal computers and also as a native feature in some smartphone operating systems, but are still susceptible to certain types of attacks. Aiming to improve the security of the client-side encryption approach, we propose to apply the Intel Software Guard Extensions (SGX) to perform data sealing, creating a secure vault that can be synchronized with any cloud storage service, while relying on the SGX to protect the key handling. To validate our proposal, we build a proof of concept based on the Cryptomator application, an open-source client-side encryption tool specially designed for cloud storage services. Our results show an overall performance better than the original Cryptomator application, with stronger security premises. Thus, our solution proved to be feasible and can be expanded and refined for practical use and integration with cloud synchronization services.

show abstract

Section: Contributionmentioning

confidence: 99%

“…Workflow performed for data encryption and decryption through the Cryptomator with the inclusion of data sealing feature provided by Intel SGX technology[46].…”

mentioning

confidence: 99%

Trusted Client-Side Encryption for Cloud Storage

Rocha

Valadares

Perkusich

et al. 2021

Communications in Computer and Information Science

Self Cite

View full text Add to dashboard Cite

show abstract

Trusted Embedded Attestation Storage Scheme and System

Zhang,

Qi,

Mei

et al. 2023

2023 3rd International Conference on Electronic Information Engineering and Computer Science (EIECS)

View full text Add to dashboard Cite

Decaying Photos for Enhanced Privacy: User Perceptions Towards Temporal Redactions and 'Trusted' Platforms

Pias

Ahmad

Akter

et al. 2022

Proc. ACM Hum.-Comput. Interact.

View full text Add to dashboard Cite

With the rising popularity of photo sharing in online social media, interpersonal privacy violations, where one person violates the privacy of another, have become an increasing concern. Although applying image obfuscations can be a useful tool for improving privacy when sharing photos, prior studies have found these obfuscation techniques adversely affect viewers' satisfaction. On the other hand, ephemeral photos, popularized by apps such as Snapchat, allow viewers to see the entire photo, which then disappears shortly thereafter to protect privacy. However, people often use workarounds to save these photos before deletion. In this work, we study people's sharing preferences with two proposed 'temporal redactions', which combines ephemerality with redactions to allow viewers to see the entire image, yet make these images safe for longer storage through a gradual or delayed application of redaction on the sensitive portions of the photo. We conducted an online experiment (N=385) to study people's sharing behaviors in different contexts and under different levels of assurance provided by the viewer's platform (e.g., guaranteeing temporal redactions are applied through the use of 'trusted hardware'). Our findings suggest that the proposed temporal redaction mechanisms are often preferred over existing methods. On the other hand, more efforts are needed to convey the benefits of trusted hardware to users, as no significant differences were observed in attitudes towards 'trusted hardware' on viewers' devices.

show abstract

Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment

Cited by 5 publications

References 25 publications

Trusted Client-Side Encryption for Cloud Storage

Trusted Client-Side Encryption for Cloud Storage

Trusted Embedded Attestation Storage Scheme and System

Decaying Photos for Enhanced Privacy: User Perceptions Towards Temporal Redactions and 'Trusted' Platforms

Contact Info

Product

Resources

About