CAREER: Practical Cryptography for the Cloud

最近，数字世界已经转向“云”计算和存储模式，企业提供存储空间、计算能力和对应用程序的访问。虽然这种新模式提供了许多机会，但云服务的消费者将面临数据隐私和完整性方面的新挑战。新的实用的云环境加密方案是本研究的预期直接结果。在数据隐私方面，目标是使用租赁服务有效地计算敏感数据，而不会将其暴露给执行计算的服务器。作为一种特殊情况，需要将敏感功能委托给部分受信任的服务器。服务器将只能执行功能允许的操作。例如，用户可能授予邮件服务器将加密电子邮件转发给同事的权利，但不允许邮件服务器读取她的电子邮件。在数据完整性方面，目标是开发数字签名数据的技术，以便可以以经过身份验证的方式引用或编校数据的任何部分。最后的目标是研究关于循环加密和密码学中双线性群的局限性的相关基础问题。本研究开发了有效利用计算资源进行租赁的想法和实现。其更广泛的影响是保护这些流行服务的所有用户的数据隐私和完整性。

Recently, the digital world has moved to a "cloud" computing and storage model, where businesses are offering storage space, computing power, and access to applications for rent. While this new model presents numerous opportunities, consumers of cloud services will face new challenges in data privacy and integrity.New practical cryptographic schemes for the cloud environment are the expected direct outcomes of this research. On the data privacy front, the goal is to use rental services to efficiently compute on sensitive data without exposing it to the server performing the computation. As a special case, schemes are needed for delegating sensitive capabilities to a partially trusted server. The server will only be able to perform actions allowed by the capability. For example, a user might grant her mail server the right to forward her encrypted email to a colleague without allowing the mail server to read her email. On the data integrity front, the goal is to develop techniques for digitally signing data so that any portion of the data may be quoted or redacted in an authenticated manner. A final goal is to study related foundational questions regarding circular encryption and the limitations of bilinear groups in cryptography.This research develops ideas and implementations for the efficient use of computing resources for rent. Its broader impact is in protecting data privacy and integrity for all users of these popular services.