Encrypted cloud photo storage using Google photos
Encrypted cloud photo storage using Google photos
复制标题
DOI：
10.1145/3458864.3468220
复制
发表时间：
2021-06
期刊：
影响因子：
--
通讯作者：
John S. Koh;Jason Nieh;S. Bellovin
中科院分区：
文献类型：
--
作者：
John S. Koh;Jason Nieh;S. Bellovin
云照片服务广泛用于持久、方便且通常免费的照片存储，这对移动的设备尤其有用。随着用户在云中存储越来越多的照片，出现了严重的隐私问题，因为即使用户的凭据受到一次破坏，攻击者也可以不受限制地访问用户的所有照片。我们创建了Easy Secure Photos（ESP），使用户能够保护他们在Google Photos等云照片服务上的照片。ESP引入了一种新的客户端加密架构，包括一种新的格式保持图像加密算法，加密缩略图显示机制和可用的密钥管理系统。ESP对图像数据进行加密，使得结果仍然是与云照片服务兼容的标准格式图像，如JPEG。ESP有效地生成和显示加密缩略图，以便从受信任的用户设备快速轻松地浏览照片库。ESP的密钥管理可以简单地授权多个用户设备通过类似于设备配对的过程查看加密的图像内容，但使用云照片服务作为QR码通信通道。我们已经在一款流行的Android照片应用中实现了ESP，用于Google Photos，并证明它易于使用，并向用户透明地提供加密功能，保持良好的交互性能和图像质量，同时提供强大的隐私保证，并保留了Google Photos的共享和存储优势，而无需对云服务进行任何更改。
Cloud photo services are widely used for persistent, convenient, and often free photo storage, which is especially useful for mobile devices. As users store more and more photos in the cloud, significant privacy concerns arise because even a single compromise of a user's credentials give attackers unfettered access to all of the user's photos. We have created Easy Secure Photos (ESP) to enable users to protect their photos on cloud photo services such as Google Photos. ESP introduces a new client-side encryption architecture that includes a novel format-preserving image encryption algorithm, an encrypted thumbnail display mechanism, and a usable key management system. ESP encrypts image data such that the result is still a standard format image like JPEG that is compatible with cloud photo services. ESP efficiently generates and displays encrypted thumbnails for fast and easy browsing of photo galleries from trusted user devices. ESP's key management makes it simple to authorize multiple user devices to view encrypted image content via a process similar to device pairing, but using the cloud photo service as a QR code communication channel. We have implemented ESP in a popular Android photos app for use with Google Photos and demonstrate that it is easy to use and provides encryption functionality transparently to users, maintains good interactive performance and image quality while providing strong privacy guarantees, and retains the sharing and storage benefits of Google Photos without any changes to the cloud service.