Toward Shared Ownership in the Cloud

Cloud storage platforms promise a convenient way for users to share files and engage in collaborations, yet they require all files to have a single owner who unilaterally makes access control decisions. Existing clouds are, thus, agnostic to the notion of shared ownership. This can be a significant...

Full description

Saved in:
Bibliographic Details
Published in:IEEE transactions on information forensics and security 2018-12, Vol.13 (12), p.3019-3034
Main Authors: Ritzdorf, Hubert, Soriente, Claudio, Karame, Ghassan O., Marinovic, Srdjan, Gruber, Damian, Capkun, Srdjan
Format: Article
Language:English
Subjects:
Access control
Blockchain
blockchain technology
Cloud computing
Cloud security
Collaboration
Cryptography
Decisions
distributed enforcement
Electronic mail
File systems
Ownership
Platforms
shared ownership
Stability
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Cloud storage platforms promise a convenient way for users to share files and engage in collaborations, yet they require all files to have a single owner who unilaterally makes access control decisions. Existing clouds are, thus, agnostic to the notion of shared ownership. This can be a significant limitation in much collaboration because, for example, one owner can delete files and revoke access without consulting the other collaborators. In this paper, we first formally define a notion of shared ownership within a file access control model. We then propose two possible instantiations of our proposed shared ownership model. Our first solution, called Commune, relies on secure file dispersal and collusion-resistant secret sharing to ensure that all access grants in the cloud require the support of an agreed threshold of owners. As such, Commune can be used in existing clouds without modifications to the platforms. Our second solution, dubbed Comrade, leverages the blockchain technology in order to reach consensus on access control decision. Unlike Commune, Comrade requires that the cloud is able to translate access control decisions that reach consensus in the blockchain into storage access control rules, thus requiring minor modifications to existing clouds. We analyze the security of our proposals and compare/evaluate their performance through implementations using Amazon S3.
ISSN:1556-6013
1556-6021
DOI:10.1109/TIFS.2018.2837648