Projects per year
Abstract
Cloud-based services enable easy-to-use data-sharing between multiple parties, and, therefore, have been widely adopted over the last decade. Storage services by large cloud providers such as Dropbox or Google Drive as well as federated solutions such as Nextcloud have amassed millions of users. Nevertheless, privacy challenges hamper the adoption of such services for sensitive data: Firstly, rather than exposing their private data to a cloud service, users desire end-to-end confidentiality of the shared files without sacrificing usability, e.g., without repeatedly encrypting when sharing the same data set with multiple receivers. Secondly, only being able to expose complete (authenticated) files may force users to expose overmuch information. The receivers, as well as the requirements, might be unknown at issue-time, and thus the issued data set does not exactly match those requirements. This mismatch can be bridged by enabling cloud services to selectively disclose only relevant parts of a file without breaking the parts' authenticity. While both challenges have been solved individually, it is not trivial to combine these solutions and maintain their security intentions.
In this paper, we tackle this issue and introduce selective end-to-end data-sharing by combining ideas from proxy re-encryption and redactable signature schemes. Proxy re-encryption provides us with the basis for end-to-end encrypted data-sharing, while redactable signatures enable to redact parts and selectively disclose only the remaining still authenticated parts. We overcome the issues encountered when naively combining these two concepts, introduce a security model, and present a modular instantiation together with implementations based on a selection of various building blocks. We conclude with an extensive performance evaluation of our instantiation.
In this paper, we tackle this issue and introduce selective end-to-end data-sharing by combining ideas from proxy re-encryption and redactable signature schemes. Proxy re-encryption provides us with the basis for end-to-end encrypted data-sharing, while redactable signatures enable to redact parts and selectively disclose only the remaining still authenticated parts. We overcome the issues encountered when naively combining these two concepts, introduce a security model, and present a modular instantiation together with implementations based on a selection of various building blocks. We conclude with an extensive performance evaluation of our instantiation.
Original language | English |
---|---|
Title of host publication | 15th International Conference on Information Systems Security, ICISS 2019 |
Publisher | Springer |
Pages | 175-195 |
ISBN (Electronic) | 978-3-030-36945-3 |
ISBN (Print) | 978-3-030-36944-6 |
DOIs | |
Publication status | Published - 2019 |
Event | 15th International Conference on Information Systems Security: ICISS 2019 - Hyderabad, India Duration: 16 Dec 2019 → 20 Dec 2019 Conference number: 2019 https://www.idrbt.ac.in/ICISS-2019/ |
Publication series
Name | Lecture Notes in Computer Science |
---|---|
Publisher | Springer, Cham |
Volume | 11952 |
ISSN (Print) | 0302-9743 |
ISSN (Electronic) | 1611-3349 |
Conference
Conference | 15th International Conference on Information Systems Security |
---|---|
Abbreviated title | ICISS |
Country/Territory | India |
City | Hyderabad |
Period | 16/12/19 → 20/12/19 |
Internet address |
Fingerprint
Dive into the research topics of 'Selective End-To-End Data-Sharing in the Cloud'. Together they form a unique fingerprint.Projects
- 1 Finished
Activities
- 1 Talk at conference or symposium
-
Selective End-To-End Data-Sharing in the Cloud
Felix Hörandner (Speaker)
19 Dec 2019Activity: Talk or presentation › Talk at conference or symposium › Science to science