DaSCE: Data Security for Cloud Environment with Semi-Trusted Third Party

DaSCE: Data Security for Cloud Environment with Semi-Trusted Third Party

Abstract—Off-site data storage is an application of cloud that relieves the customers from focusing on data storage system. However, outsourcing data to a third-party administrative control entails serious security concerns. Data leakage may occur due to attacks by other users and machines in the cloud. Wholesale of data by cloud service provider is yet another problem that is faced in the cloud environment. Consequently, high-level of security measures is required. In this paper, we propose Data Security for Cloud Environment with Semi-Trusted Third Party < Final Year Projects 2016 > a data security system that provides (a) key management (b) access control, and (c) file assured deletion. The DaSCE utilizes Shamir’s (k, n threshold scheme to manage the keys, where K out of n shares are required to generate the key. We use multiple key managers, each hosting one share of key. Multiple key managers avoid single point of failure for the cryptographic keys.Working prototype of DaSCE and evaluate its performance based on the time consumed during various operations.