An efficient and secure data sharing framework using homomorphic encryption in the cloud

Bharath Kumar Samanthula, Gerry Howser, Yousef Elmehdwi, Sanjay Madria

Research output: Chapter in Book/Report/Conference proceedingConference contributionResearchpeer-review

16 Citations (Scopus)

Abstract

Due to cost-efficiency and less hands-on management, data owners are outsourcing their data to the cloud which can provide access to the data as a service. However, by outsourcing their data to the cloud, the data owners lose control over their data as the cloud provider becomes a third party. At first, encrypting the data by the owner and then exporting it to the cloud seems to be a good approach. However, there is a potential efficiency problem with the outsourced encrypted data when the data owner revokes some of the users' access privileges. An existing solution to this problem is based on symmetric key encryption scheme and so it is not secure when a revoked user rejoins the system with different access privileges to the same data record. In this paper, we propose an efficient and Secure Data Sharing (SDS) framework using homomorphic encryption and proxy re-encryption schemes that prevents the leakage of unauthorized data when a revoked user rejoins the system. Our framework is secure under the security definition of Secure Multi- Party Computation (SMC) and also is a generic approach - any additive homomorphic encryption and proxy re-encryption schemes can be used as the underlying sub-routines. In addition, we also modify our underlying Secure Data Sharing (SDS) framework and present a new solution based on the data distribution technique to prevent the information leakage in the case of collusion between a user and the Cloud Service Provider.

Original languageEnglish
Title of host publicationProceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012
DOIs
StatePublished - 4 Oct 2012
Event1st International Workshop on Cloud Intelligence, Cloud-I 2012 - Istanbul, Turkey
Duration: 31 Aug 201231 Aug 2012

Other

Other1st International Workshop on Cloud Intelligence, Cloud-I 2012
CountryTurkey
CityIstanbul
Period31/08/1231/08/12

Fingerprint

Cryptography
Outsourcing
Data as a service (DaaS)
Information management
Costs

Keywords

  • Cloud computing
  • Homomorphic encryption
  • Privacy
  • Proxy reencryption

Cite this

Samanthula, B. K., Howser, G., Elmehdwi, Y., & Madria, S. (2012). An efficient and secure data sharing framework using homomorphic encryption in the cloud. In Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012 [2347681] https://doi.org/10.1145/2347673.2347681
Samanthula, Bharath Kumar ; Howser, Gerry ; Elmehdwi, Yousef ; Madria, Sanjay. / An efficient and secure data sharing framework using homomorphic encryption in the cloud. Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012. 2012.
@inproceedings{3d186d53cf594578a1c310799fec5124,
title = "An efficient and secure data sharing framework using homomorphic encryption in the cloud",
abstract = "Due to cost-efficiency and less hands-on management, data owners are outsourcing their data to the cloud which can provide access to the data as a service. However, by outsourcing their data to the cloud, the data owners lose control over their data as the cloud provider becomes a third party. At first, encrypting the data by the owner and then exporting it to the cloud seems to be a good approach. However, there is a potential efficiency problem with the outsourced encrypted data when the data owner revokes some of the users' access privileges. An existing solution to this problem is based on symmetric key encryption scheme and so it is not secure when a revoked user rejoins the system with different access privileges to the same data record. In this paper, we propose an efficient and Secure Data Sharing (SDS) framework using homomorphic encryption and proxy re-encryption schemes that prevents the leakage of unauthorized data when a revoked user rejoins the system. Our framework is secure under the security definition of Secure Multi- Party Computation (SMC) and also is a generic approach - any additive homomorphic encryption and proxy re-encryption schemes can be used as the underlying sub-routines. In addition, we also modify our underlying Secure Data Sharing (SDS) framework and present a new solution based on the data distribution technique to prevent the information leakage in the case of collusion between a user and the Cloud Service Provider.",
keywords = "Cloud computing, Homomorphic encryption, Privacy, Proxy reencryption",
author = "Samanthula, {Bharath Kumar} and Gerry Howser and Yousef Elmehdwi and Sanjay Madria",
year = "2012",
month = "10",
day = "4",
doi = "10.1145/2347673.2347681",
language = "English",
isbn = "9781450315968",
booktitle = "Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012",

}

Samanthula, BK, Howser, G, Elmehdwi, Y & Madria, S 2012, An efficient and secure data sharing framework using homomorphic encryption in the cloud. in Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012., 2347681, 1st International Workshop on Cloud Intelligence, Cloud-I 2012, Istanbul, Turkey, 31/08/12. https://doi.org/10.1145/2347673.2347681

An efficient and secure data sharing framework using homomorphic encryption in the cloud. / Samanthula, Bharath Kumar; Howser, Gerry; Elmehdwi, Yousef; Madria, Sanjay.

Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012. 2012. 2347681.

Research output: Chapter in Book/Report/Conference proceedingConference contributionResearchpeer-review

TY - GEN

T1 - An efficient and secure data sharing framework using homomorphic encryption in the cloud

AU - Samanthula, Bharath Kumar

AU - Howser, Gerry

AU - Elmehdwi, Yousef

AU - Madria, Sanjay

PY - 2012/10/4

Y1 - 2012/10/4

N2 - Due to cost-efficiency and less hands-on management, data owners are outsourcing their data to the cloud which can provide access to the data as a service. However, by outsourcing their data to the cloud, the data owners lose control over their data as the cloud provider becomes a third party. At first, encrypting the data by the owner and then exporting it to the cloud seems to be a good approach. However, there is a potential efficiency problem with the outsourced encrypted data when the data owner revokes some of the users' access privileges. An existing solution to this problem is based on symmetric key encryption scheme and so it is not secure when a revoked user rejoins the system with different access privileges to the same data record. In this paper, we propose an efficient and Secure Data Sharing (SDS) framework using homomorphic encryption and proxy re-encryption schemes that prevents the leakage of unauthorized data when a revoked user rejoins the system. Our framework is secure under the security definition of Secure Multi- Party Computation (SMC) and also is a generic approach - any additive homomorphic encryption and proxy re-encryption schemes can be used as the underlying sub-routines. In addition, we also modify our underlying Secure Data Sharing (SDS) framework and present a new solution based on the data distribution technique to prevent the information leakage in the case of collusion between a user and the Cloud Service Provider.

AB - Due to cost-efficiency and less hands-on management, data owners are outsourcing their data to the cloud which can provide access to the data as a service. However, by outsourcing their data to the cloud, the data owners lose control over their data as the cloud provider becomes a third party. At first, encrypting the data by the owner and then exporting it to the cloud seems to be a good approach. However, there is a potential efficiency problem with the outsourced encrypted data when the data owner revokes some of the users' access privileges. An existing solution to this problem is based on symmetric key encryption scheme and so it is not secure when a revoked user rejoins the system with different access privileges to the same data record. In this paper, we propose an efficient and Secure Data Sharing (SDS) framework using homomorphic encryption and proxy re-encryption schemes that prevents the leakage of unauthorized data when a revoked user rejoins the system. Our framework is secure under the security definition of Secure Multi- Party Computation (SMC) and also is a generic approach - any additive homomorphic encryption and proxy re-encryption schemes can be used as the underlying sub-routines. In addition, we also modify our underlying Secure Data Sharing (SDS) framework and present a new solution based on the data distribution technique to prevent the information leakage in the case of collusion between a user and the Cloud Service Provider.

KW - Cloud computing

KW - Homomorphic encryption

KW - Privacy

KW - Proxy reencryption

UR - http://www.scopus.com/inward/record.url?scp=84866847962&partnerID=8YFLogxK

U2 - 10.1145/2347673.2347681

DO - 10.1145/2347673.2347681

M3 - Conference contribution

SN - 9781450315968

BT - Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012

ER -

Samanthula BK, Howser G, Elmehdwi Y, Madria S. An efficient and secure data sharing framework using homomorphic encryption in the cloud. In Proceedings of the 1st International Workshop on Cloud Intelligence, Cloud-I 2012. 2012. 2347681 https://doi.org/10.1145/2347673.2347681