IRJET- Secure Data Sharing Scheme for Mobile Cloud Computing using SEDASC
0 likes26 views
1) The document proposes a Secure Data Sharing in Clouds (SeDaSC) methodology for secure data sharing in cloud computing. 2) SeDaSC provides data confidentiality and integrity, access control, secure data sharing without reencryption, protection from insider threats, and forward/backward access control. 3) It encrypts files with a single key, and generates two shares of the key - one given to the user and the other stored by a trusted third party, to prevent insider threats from malicious users.
More Related Content
What's hot (18)
Similar to IRJET- Secure Data Sharing Scheme for Mobile Cloud Computing using SEDASC (20)
More from IRJET Journal (20)
Recently uploaded (20)
![COMPUTER GRAPHICS AND VISUALIZATION :MODULE-1 notes [BCG402-CG&V].pdf](https://cdn.slidesharecdn.com/ss_thumbnails/module-1notesbcg402-cgv-250506151048-0a0d458b-thumbnail.jpg?width=560&fit=bounds)
![COMPUTER GRAPHICS AND VISUALIZATION :MODULE-02 notes [BCG402-CG&V].pdf](https://cdn.slidesharecdn.com/ss_thumbnails/module-02notesbcg402-cgv-250506151048-aef09ce3-thumbnail.jpg?width=560&fit=bounds)
IRJET- Secure Data Sharing Scheme for Mobile Cloud Computing using SEDASC
- 1. International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056 Volume: 06 Issue: 03 | Mar 2019 www.irjet.net p-ISSN: 2395-0072 © 2019, IRJET | Impact Factor value: 7.211 | ISO 9001:2008 Certified Journal | Page 2762 SECURE DATA SHARING SCHEME FOR MOBILE CLOUD COMPUTING USING SeDaSc Preethi P1, Priyadarshini J2, Soniya V3, A.S. Balaji4 1,2,3Student, Department of computer science, Anand Institute of Higher Technology Chennai, India 4Assistant Professor, Department of Computer Science Engineering, Anand Institute of Higher Technology, Chennai, India ----------------------------------------------------------------------***--------------------------------------------------------------------- Abstract - Cloud storage liberates organizations from establishing in-house data storage systems. However, cloud storage gives rise to security concerns. Cloud-specific and conventional insider threats are faced by data in case of group-shared data. The important issue is the Secure data sharing among a group that counters insider threats of legitimate yet malicious users. In this paper, we propose the Secure Data Sharing in Clouds (SeDaSC) methodology that provides: 1) data confidentiality and integrity; 2) access control; 3) data sharing (forwarding) withoutusingcompute- intensive reencryption; 4) insider threat security; and 5) forward and backward access control 6) One time download 7) Share Time Expire 8) Secret Key Management. The SeDaSC methodology encrypts a file with a single encryption key. The user gets only one share among the two different key shares that are generated for each user. The possession of a single share of a key allows the SeDaSC methodology to counter the insider threats. The other key share is stored by a trustedthird party, which is called the cryptographic server. The SeDaSC methodology is applicable to conventional and mobile cloud computing environments. We implement a workingprototype of the SeDaSC methodology and evaluate its performance based on the time consumed during various operations. We formally verify the working of SeDaSCbyusinghigh-levelPetri nets, the Satisfiability Modulo Theories Library, and a Z3 solver. The results proved to be encouraging and show that SeDaSC has the potential to be effectively used for secure data sharing in the cloud. Key Words: SeDaSc, reencryption, Key, cloud, Z3solver, etc… 1. INTRODUCTION CLOUD computing combining a set of existing and new techniques from research areas such as service-oriented architectures (SOA) and virtualization is considered as the next step in the evolution of on-demand information technology. It is routine for users to leverage cloud storage services to share data with others in a friend circle, e.g., Dropbox, Google Drive and Ali Cloud. The shared data in cloud servers, however, usually contains users’ sensitive information (e.g., personal profile, financial data, health records, etc.) and needs to be well protected. As the ownership of the data is separated from the administration of them, the cloud servers may migrate users’ data to other cloud servers in outsourcing or share them in cloud searching. Therefore, the big challenge is to protect the privacy of those shared data in cloud, especially in cross- cloud and big data environment. This challenge can be met by designing a comprehensive solution to support user- defined authorization period and to provide fine-grained access control during this period. After the user-defined expiration time the shared data should be self-destroyed. The data is stored in a common encrypted form to alleviate the problems. The user cannot share his/her encrypteddata at a fine-grained level whichisandisadvantageofencrypting data. The owner must know exact details of the one he/she wants to share with. In many applications, the data owner wants to share information with several users according to the security policy based on the users’ credentials. The significant advantagesofAttributebased encryption(ABE)is that it is based on the tradition publickeyencryptioninstead of one-to-one encryption because it achievesflexibleone-to- many encryption. To achieve both data security and fine- grained access control, the powerful method is provided by ABE scheme. In the key-policy ABE (KP-ABE) scheme the ciphertext is labeled with set of descriptive attributes. The user can get the plaintext only when the set of descriptive attributes satisfies the access structureinthekey.Ingeneral, the owner has the right to specify that certain sensitive information is only valid for a limited period of time, or should not be released before a particular time. In Timed- Release Encryption (TRE) an encryption key is associated with a predefined release time, and a receiver can only construct the corresponding decryption key in this time instance. On this basis, Paterson et al. proposed a time specific encryption (TSE) scheme, which is able to specify a suitable time interval such that the ciphertext can only be decrypted in this interval (decryption time interval, DTI). It can be used in many applications,e.g.,Internetprogramming contest, electronic sealed-bid auction, etc. Electronicsealed- bid auction is a method to establish the price of goods through the Internet whilekeepingthebidssecret during the bidding phase. That is, the bids (ciphertext) should be kept secret during the bidding phase (a specific time interval). Thus, in this paper, we attempt to solve these problems by using KPABE and adding a constraint of timeinterval toeach attribute in the set of decryption attributes.
- 2. International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056 Volume: 06 Issue: 03 | Mar 2019 www.irjet.net p-ISSN: 2395-0072 © 2019, IRJET | Impact Factor value: 7.211 | ISO 9001:2008 Certified Journal | Page 2763 2. EXISTING SYSTEM In existing system, sharing data among users is perhaps one of the most engaging features that motivate’s cloud storage. Regarding availability of files, without the permission of the data owner, third party cannot access the files and without compromisingthedata owner’sanonymity. When a file is shared to multiple users, the problem occurs. 3. PROPOSED SYSTEM In this project, a key-policy attribute-based encryption with time-specified attributes (KP-TSABE), a novel secure data Autolysis of Data scheme in cloud computing.Inthe KP- TSABE scheme, every ciphertext is labeled with a time interval while private key is associated with a time instant. The ciphertext can only be decrypted if both the timeinstant is in the allowed time interval and the attributes associated with the ciphertext satisfy the key’s access structure. we propose the Secure Data Sharing in Clouds (SeDaSC) methodology that provides: 1) data confidentiality and integrity; 2) access control; 3) data sharing (forwarding) without using compute-intensive reencryption; 4) insider threat security; and 5) forward and backwardaccesscontrol 6) One time download 7) Share Time Expire 8) Secret Key Management. 4. OVERALL ARCHITECTURE Fig -1: overall architecture diagram 4.1 Authentication and Authorization First the user has to register and then the data base has to be accessed. After registration the user can login to the site. The whole mechanism from unauthorized usage will be protected and protect itself due to authorization and authentication. The user who wants to use this application, they have to register the details given. 4.2 File Encryption and data storing to cloud User shares the file which he want to Upload. At first the uploaded files are stored in the Local System. Then the user upload the file to the real Cloud Storage (In this application, we use Dropbox). The file gets encrypted by using AES (Advanced Encryption Standard) Algorithm andPrivateKey will be produced while uploading to cloud. Again the Encrypted Data is converted as Binary Data forData security and Stored in Cloud. 4.3 File Sharing The files which are uploaded in the cloudissharedtothe friends or users. The user who uploaded the file has to set the time to expire the data in Cloud. The Private Key of the Shared file will be send through Email. 4.4 File Decryption and download from cloud The user can download the data by decryption by using AES (Advanced Encryption Standard) Algorithm. Corresponding Private Keys should be given by the user to decrypt the data. The data will be deleted if the user enter the Wrong Private Key for Three times. Theintimationemail will be sent to the Data owner if the file got deleted. The Downloaded Data will be stored in Local Drive. 4.5 File Autolysis of data and access control The Data will be automatically deletediftheUserdoes not downloaded the file successfully with in the time given by the data owner. If the user download the data, then the File Autolysis will be disabled. If the File got deleted by File Autolysis scheme, the intimation Email will be sent to Data Owner. If data owner attach any malicious in our shared file then will intimate to shared user. In our website to block the backward access. Example. If a user to logout account then can’t go back our previous page. 5. CONCLUSION The proposed system the SeDaSC methodology, which is a cloud storage security scheme for group data. The proposed methodology provides data confidentiality, secure data sharing without reencryption, access control for malicious insiders, and forward and backward access control. Moreover, the SeDaSC methodology provides assured
- 3. International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056 Volume: 06 Issue: 03 | Mar 2019 www.irjet.net p-ISSN: 2395-0072 © 2019, IRJET | Impact Factor value: 7.211 | ISO 9001:2008 Certified Journal | Page 2764 deletion by deleting the parameters required to decrypt a file. 6. FUTURE ENHANCEMENT The future enhancement of the project is focused on the attempt to enhance security and also different types of advanced algorithm for Encryption may be used todevelope this application. We use Dropbox as a Cloud Server. In Future, we may developed that the user can select the Cloud Server such as Google Drive, Hostinger, Dropbox, AppBox He/She want. REFERENCES 1) Addressing Techniques for Secure Data Sharing in Cloud. Arti Bhagat,Nisha Rathee.IEEE,ICICCT2018. 2) Secured Cloud Data Sharing Using Auditable Aggregate Key. Pooja Pol and Amrit Priyadarshi. IEEE and ICAECCT 2016. 3) Modified Secret Sharing Algorithm for Secured Medical Data Sharing in Cloud Environment.Mr.K.A.Muthukumar and Dr.M.Nandhini. 2016 IEEE and ICONSTEM. 4) Hybrid Encryption TechniquesforSecureSharingof a Sensitive Data for Banking Systems Over Cloud.Prachi More , Shubham Chandugade , Shaikh Mohammad Shafi Rafiq and Prof. Priya Pise. 2018 IEEE and ICACCT 2018 5) A Seamless Secret Sharing Scheme Implementation for Securing Data in Public Cloud Storage Service.NelmiawatandWahyudiArifandi.2018IEEE 6) B. Wang, B. Li, and H. Li, “Oruta: Privacy-preserving public auditingfor shared data in the cloud,” Cloud Computing, IEEE Transactions on, vol. 2, no. 1, pp. 43–56, 2014. 7) J. Xiong, Z. Yao, J. Ma, X. Liu, Q. Li, and J. Ma, “Priam: Privacy preserving identity and access managementschemeincloud,”KSIITransactionson Internet and Information Systems (TIIS), vol. 8, no. 1, pp. 282–304, 2014. 8) P. Jamshidi, A. Ahmad, and C. Pahl, “Cloudmigration research: A systematic review,” Cloud Computing, IEEE Transactions on, vol. 1, no. 2, pp. 142–157, 2013.