Authors:
Marciano da Rocha
1
;
Dalton Cézane Gomes Valadares
2
;
Angelo Perkusich
3
;
Kyller Costa Gorgonio
4
;
Rodrigo Tomaz Pagno
1
and
Newton Carlos Will
1
Affiliations:
1
Department of Computer Science, Federal University of Technology, Paraná, Dois Vizinhos, Brazil
;
2
Department of Mechanical Engineering, Federal Institute of Pernambuco, Caruaru, Brazil, Department of Computer Science, Federal University of Campina Grande, Campina Grande, Brazil
;
3
Department of Electrical Engineering, Federal University of Campina Grande, Campina Grande, Brazil
;
4
Department of Computer Science, Federal University of Campina Grande, Campina Grande, Brazil
Keyword(s):
Intel SGX, Data Sealing, File Encryption, Confidentiality, Integrity, Secure Storage, Cloud Storage.
Abstract:
With the evolution of computer systems, the amount of sensitive data to be stored as well as the number of threats on these data grow up, making the data confidentiality increasingly important to computer users. Currently, with devices always connected to the Internet, the use of cloud data storage services has become practical and common, allowing quick access to such data wherever the user is. Such practicality brings with it a concern, precisely the confidentiality of the data which is delivered to third parties for storage. In the home environment, disk encryption tools have gained special attention from users, being used on personal computers and also having native options in some smartphone operating systems. The present work uses the data sealing, feature provided by the Intel Software Guard Extensions (Intel SGX) technology, for file encryption. A virtual file system is created in which applications can store their data, keeping the security guarantees provided by the Intel S
GX technology, before send the data to a storage provider. This way, even if the storage provider is compromised, the data are safe. To validate the proposal, the Cryptomator software, which is a free client-side encryption tool for cloud files, was integrated with an Intel SGX application (enclave) for data sealing. The results demonstrate that the solution is feasible, in terms of performance and security, and can be expanded and refined for practical use and integration with cloud synchronization services.
(More)