I-Corps: Secure Document Management in the Cloud

研究人员建议构建一种可在现有云存储服务之上使用的工具，以实现云中的安全文档管理。本质上，使用我们为不同平台开发的客户端应用程序，所有文档在发送到云端之前都会自动加密，并以加密格式存储在云端。因此，云服务提供商将无权访问存储的文档。此外，加密密钥将由我们的服务器端解决方案自动管理。使用作为先前研究的一部分开发的技术，该工具的服务器端实现将提供对加密数据的高效搜索、基于角色的访问控制、安全文档共享和审核日志生成。此外，由于所提出的设计将加密密钥分成多个部分，任何潜在的对我们服务器的黑客攻击都不能用于恢复存储在云中的任何文档。此外，我们的服务器绝不会以明文形式存储任何与文档相关的信息。该项目将使研究人员能够了解在云和移动服务环境中管理加密数据的最佳实践。此外，它还将使他们能够看到当前加密数据管理解决方案（包括我们的）在真实操作环境中的性能和局限性。 从长远来看，如果该项目成功，可以大大降低由于使用云和移动服务而导致的信息泄露的隐私和经济风险。这可能会产生直接的经济影响，并增加人们对使用基于云的文档管理服务的信任，为新应用程序开辟道路，而这些应用程序在今天由于缺乏必要的安全性和合规性机制而被认为是不可行的。

Researchers propose to build a tool that could be used on top of existing cloud storage services to enable secure document management in the cloud. In essence, using our client side apps developed for different platforms, all the documents will be automatically encrypted before they are sent to the cloud and stored in the cloud in an encrypted format. Therefore, the cloud service provider will not have any access to stored documents. In addition, encryption keys will be automatically managed by our server side solution. Using techniques developed as a part of prior research, the tool's server side implementation will provide efficient search over encrypted data, role-based access control, secure document sharing, and audit log generation. Furthermore, due to the proposed design that separates encryption keys into multiple pieces, any potential hacking into our server cannot be used to recover any document stored in the cloud. In addition, our server will never store any information related to documents in plaintext form. This project will allow researchers to understand best practices in managing encrypted data in the context of cloud and mobile services. In addition, it will allow them to see the performance and limitations of current encrypted data management solutions (including ours) in real operating environments. Longer-term, if this project is successful, it could substantially decrease the privacy and economic risks of information disclosure due to usage of cloud and mobile services. This could have a direct economic impact, as well as increasing trust in using cloud based document management services, opening the way for new applications that would today be considered infeasible due to lack of necessary security and compliance mechanisms.