SeDas: A Self-Destructing Data System Based on Active Storage Framework

Zeng, Lingfang; Chen, Shibin; Wei, Qingsong; Feng, Dan

doi:10.1109/tmag.2013.2248138

Cited by 19 publications

(19 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With this, all the stored information and their copies, as well as decryption keys, will become unusable after a user-specified time period and without any user involvement. SeDas [3] causes sensitive information, such as account numbers, passwords and notes to irreversibly self-destruct, without any action on the user's part. This technique is applicable in a multiple server-based system, admittedly incurring an operational overhead.…”

Section: Founding Principles Around Secure Data Storagementioning

confidence: 99%

“… Metadata server. This includes the functionality of: User management; Server management; Session management; and File metadata management [3].  Multi-cloud proxy server.…”

Section: Secret Sharing In a Multi-cloud Environmentmentioning

confidence: 99%

“…In many other similar works like [21,22], the use in exchange of Electronic Health Records were discussed extensively and the prove that such deployment can provide an increased data availability, confidentiality and integrity of the documents stored in the cloud, and so on were provided. SECRET architecture tends to extend these features by adding the possibility of a break-glass data recovery system, near keyless encryption with improved data privacy and security leading to the elimination of threats in poor key management by incorporating Self-Destructive Data System (SeDaS) [3] on the data to be distributed among the cloud service providers. This therefore enhances the security and privacy of data at every stage (in motion, at rest or in use) within and outside the cloud environment.…”

Section: The Secret Architecturementioning

confidence: 99%

“…This is also used to implement self-destruct with equal divided shares. The incorporation of a Self-Destructive system solves the problem of cloud user's privacy as there is no way the user's data can be accessed, copied, cached or used without the data owner's consent within a pre-determined time-frame as all data and their copies become destructed or unreadable after a user-specified time, without any user intervention [3]. The self-destructive system defines two modules: a self-destruct method object; and survival time parameter for each secret key part.…”

Section: How It Workmentioning

confidence: 99%

“… Keyless encryption and by extension data security and reduced key management hassles.  Provide data owner's privacy by implementing SeDas, as it meets all the privacy-preserving goals [3].  SeDas supports security erasing files and random storage in drives (Cloud, HDD or SSD) respectively [3].…”

Section: How It Workmentioning

confidence: 99%

See 4 more Smart Citations

The Future Internet: A World of Secret Shares

et al. 2015

View full text Add to dashboard Cite

Abstract:The Public Key Infrastructure (PKI) is crumbling, partially due to the lack of a strong understanding of how encryption actually works, but also due to weaknesses in its implementation. This paper outlines an Internet storage technique using secret sharing methods which could be used to overcome the problems inherent with PKI, while supporting new types of architectures incorporating such things as automated failover and break-glass data recovery. The paper outlines a novel architecture: SECRET, which supports a robust cloud-based infrastructure with in-built privacy and failover. In order to understand the performance overhead of SECRET, the paper outlines a range of experiments that investigate the overhead of this and other secret share methods.

show abstract

Section: Founding Principles Around Secure Data Storagementioning

confidence: 99%

“… Metadata server. This includes the functionality of: User management; Server management; Session management; and File metadata management [3].  Multi-cloud proxy server.…”

Section: Secret Sharing In a Multi-cloud Environmentmentioning

confidence: 99%

Section: The Secret Architecturementioning

confidence: 99%

Section: How It Workmentioning

confidence: 99%

Section: How It Workmentioning

confidence: 99%

See 3 more Smart Citations

The Future Internet: A World of Secret Shares

et al. 2015

View full text Add to dashboard Cite

show abstract

An improved attribute‐based encryption technique towards the data security in cloud computing

Namasudra

2017

Concurrency and Computation

111

View full text Add to dashboard Cite

Summary With the rapid development of the Internet, resource and knowledge sharing are two major problems experienced due to the presence of many hackers and malicious users. In this paper, an efficient and secure access control model has been proposed for the cloud computing environment for resource and knowledge sharing by using attribute‐based encryption (ABE), distributed hash table (DHT) network, and identity‐based timed‐release encryption (IDTRE). Here, at first, data or resources are encrypted by using the attributes of users, and encrypted data are divided into the encapsulated ciphertext and extracted ciphertext. Then, IDTRE algorithm has been used to encrypt the decryption key and combined the ciphertext of the key with the extracted ciphertext for creating the ciphertext shares. At last, the ciphertext shares are distributed into the DHT network, and encapsulated ciphertext are stored on the cloud servers. Both the performance and security analysis show the proficiency of the proposed scheme over the existing schemes in a cloud environment.

show abstract

Self-validating Bundles for Flexible Data Access Control

Gallo¹,

ANDO²,

Garbo³

2016

Proceedings of 4th International Conference in Software Engineering for Defence Applications

View full text Add to dashboard Cite

Modern cloud-based services offer free or low-costs content sharing with significant advantages for the users but also new issues in privacy and security. To protect sensitive contents (i.e. copyrighted, top secret, personal data, etc.) from the unauthorized access, sophisticated access management systems or/and decryption schemes have been proposed, generally based on trusted applications at client side. These applications, work also as access controllers, verifying specific permissions and restrictions accessing user's resources. We propose secure bundles (S-bundles), which encapsulate a behavioral model (provided as bytecode) to define versatile standalone access controllers and encoding/decoding/signature schemes. S-bundles contain also ciphered contents, data access policies and associated metadata. Unlike current solutions, our approach decouples the access policies from the applications installed in the user's platform. S-bundles are multi-platform, by means of trusted bytecode executors. They offer data protection in case of storage in untrusted or honest-but-curious cloud providers.

show abstract

SeDas: A Self-Destructing Data System Based on Active Storage Framework

Cited by 19 publications

References 17 publications

The Future Internet: A World of Secret Shares

The Future Internet: A World of Secret Shares

An improved attribute‐based encryption technique towards the data security in cloud computing

Self-validating Bundles for Flexible Data Access Control

Contact Info

Product

Resources

About