Token-Based Cloud Computing

Abstract

Secure outsourcing of computation to an untrusted (cloud) service provider is becoming more and more important. Pure cryptographic solutions based on fully homomorphic and verifiable encryption, recently proposed, are promising but suffer from very high latency. Other proposals perform the whole computation on tamper-proof hardware and usually suffer from the the same problem. Trusted computing (TC) is another promising approach that uses trusted software and hardware components on computing platforms to provide useful mechanisms such as attestation allowing the data owner to verify the integrity of the cloud and its computation. However, on the one hand these solutions require trust in hardware (CPU, trusted computing modules) that are under the physical control of the cloud provider, and on the other hand they still have to face the challenge of run-time attestation.In this paper we focus on applications where the latency of the computation should be minimized, i.e., the time from submitting the query until receiving the outcome of the computation should be as small as possible. To achieve this we show how to combine a trusted hardware token (e.g., a cryptographic coprocessor or provided by the customer) with Secure Function Evaluation (SFE) to compute arbitrary functions on secret (encrypted) data where the computation leaks no information and is verifiable. The token is used in the setup phase only whereas in the time-critical online phase the cloud computes the encrypted function on encrypted data using symmetric encryption primitives only and without any interaction with other entities.

Elliptic Curve Cryptography Digital Signature Algorithm For PrivacyPreserving Public Auditing For Shared Data In The Cloud

“…Kubiatowicz et al [19] explain structural design for encrypted determined storage during Cloud called OceanStore; Sadeghi et al [20] explain a procedure throughout usage of a tamper-proof hardware token. This method applies toward a cloud service supplier which is base scheduled trust compute platform.…”

Securing Mobile Cloud Environment with Unified Reliable Encryption Algorithm, Security Key and Authentication

“…Authentication for cloud and traditional web environment is widely adopted the use of Identity Based Authentication [5], R.A. Popa et.al [13] and many other devoted frameworks [7] which uses security key to allow users verify their identity to the authentication server according to their security requirements. However, this architecture is not ready for deployment in practical applications yet access control in traditional web applications and Cloud services is different from cloud environment usage.…”

Privacy-supporting cloud computing by in-browser key translation

“…Some generic technological solutions have appeared in the literature. The first one uses trusted hardware tokens [38], in which some trusted hardware performs the computations (such as key translations) that involve sensitive data. Solutions based on trusted hardware tokens may work, but appear to have significant scalability issues, and require much more research.…”

“…Expressing secrecy properties as equivalences is quite standard and is used in hundreds of papers, for example in [6,14,15,24,38]. There is no particular aspect of the system we analyse which makes it less suitable to this kind of analysis than those other systems.…”