CAREER: Practical Cryptography for the Cloud

职业：云实用密码学

• 批准号: 1053886
• 负责人: Susan Hohenberger
• 金额: $ 41.58万
• 依托单位: Johns Hopkins University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-01-01 至 2011-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1053886&HistoricalAwards=false
• 关键词: CAREER; Practical; Cryptography; Cloud

Recently, the digital world has moved to a "cloud" computing and storage model, where businesses are offering storage space, computing power, and access to applications for rent. While this new model presents numerous opportunities, consumers of cloud services will face new challenges in data privacy and integrity.New practical cryptographic schemes for the cloud environment are the expected direct outcomes of this research. On the data privacy front, the goal is to use rental services to efficiently compute on sensitive data without exposing it to the server performing the computation. As a special case, schemes are needed for delegating sensitive capabilities to a partially trusted server. The server will only be able to perform actions allowed by the capability. For example, a user might grant her mail server the right to forward her encrypted email to a colleague without allowing the mail server to read her email. On the data integrity front, the goal is to develop techniques for digitally signing data so that any portion of the data may be quoted or redacted in an authenticated manner. A final goal is to study related foundational questions regarding circular encryption and the limitations of bilinear groups in cryptography.This research develops ideas and implementations for the efficient use of computing resources for rent. Its broader impact is in protecting data privacy and integrity for all users of these popular services.

最近，数字世界已转向“云”计算和存储模式，企业提供存储空间、计算能力和可供租用的应用程序。虽然这种新模式带来了许多机会，但云服务的消费者将在数据隐私和完整性方面面临新的挑战。针对云环境的新的实用加密方案是本研究的预期直接结果。在数据隐私方面，目标是使用租赁服务高效地计算敏感数据，而不会将其暴露给执行计算的服务器。作为一种特殊情况，需要使用方案将敏感功能委托给部分受信任的服务器。服务器将只能执行该功能允许的操作。例如，用户可能会授予她的邮件服务器将她的加密电子邮件转发给同事的权利，而不允许邮件服务器阅读她的电子邮件。在数据完整性方面，目标是开发对数据进行数字签名的技术，以便可以以认证的方式引用或编辑数据的任何部分。最终目的是研究循环加密的相关基础问题和双线性群在密码学中的局限性，为有效利用计算资源出租提供思路和实现。其更广泛的影响是保护这些流行服务的所有用户的数据隐私和完整性。