Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment

Marciano da Rocha, Dalton Valadares, Angelo Perkusich, Kyller Gorgonio, Rodrigo Pagno, Newton Will

2020

Abstract

With the evolution of computer systems, the amount of sensitive data to be stored as well as the number of threats on these data grow up, making the data confidentiality increasingly important to computer users. Currently, with devices always connected to the Internet, the use of cloud data storage services has become practical and common, allowing quick access to such data wherever the user is. Such practicality brings with it a concern, precisely the confidentiality of the data which is delivered to third parties for storage. In the home environment, disk encryption tools have gained special attention from users, being used on personal computers and also having native options in some smartphone operating systems. The present work uses the data sealing, feature provided by the Intel Software Guard Extensions (Intel SGX) technology, for file encryption. A virtual file system is created in which applications can store their data, keeping the security guarantees provided by the Intel SGX technology, before send the data to a storage provider. This way, even if the storage provider is compromised, the data are safe. To validate the proposal, the Cryptomator software, which is a free client-side encryption tool for cloud files, was integrated with an Intel SGX application (enclave) for data sealing. The results demonstrate that the solution is feasible, in terms of performance and security, and can be expanded and refined for practical use and integration with cloud synchronization services.

Paper Citation

in Harvard Style

da Rocha M., Valadares D., Perkusich A., Gorgonio K., Pagno R. and Will N. (2020). Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment.In Proceedings of the 10th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER, ISBN 978-989-758-424-4, pages 31-43. DOI: 10.5220/0009130600310043

in Bibtex Style

@conference{closer20,
author={Marciano da Rocha and Dalton Valadares and Angelo Perkusich and Kyller Gorgonio and Rodrigo Pagno and Newton Will},
title={Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment},
booktitle={Proceedings of the 10th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,},
year={2020},
pages={31-43},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0009130600310043},
isbn={978-989-758-424-4},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 10th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,
TI - Secure Cloud Storage with Client-side Encryption using a Trusted Execution Environment
SN - 978-989-758-424-4
AU - da Rocha M.
AU - Valadares D.
AU - Perkusich A.
AU - Gorgonio K.
AU - Pagno R.
AU - Will N.
PY - 2020
SP - 31
EP - 43
DO - 10.5220/0009130600310043