Key management for encrypted data storage in distributed systems

Abstract : Confidential data stored on mass storage devices is at risk to be disclosed to persons getting physical or administrator access to the device. Encrypting the data reduces this risk, at the cost of more cumbersome administration. In this publication, we examine the problem of encrypted data storage in a grid computing environment, where storage capacity and data is shared across organizational boundaries. We propose an architecture that allows users to store and share encrypted data in this environment. Access to decryption keys is granted based on the grids data access permissions. The system is therefore usable as an additional security feature together with a classical access control mechanism. Data owners can choose different tradeoffs of security versus efficiency. Storage servers need not to be trusted and common access control models are supported.
Document type :
Conference papers
Complete list of metadatas

https://hal.archives-ouvertes.fr/hal-01584305
Contributor : Équipe Gestionnaire Des Publications Si Liris <>
Submitted on : Friday, September 8, 2017 - 3:48:21 PM
Last modification on : Friday, January 11, 2019 - 4:34:26 PM

Identifiers

Citation

Ludwig Seitz, Jean-Marc Pierson, Lionel Brunie. Key management for encrypted data storage in distributed systems. Second International IEEE Security in Storage Workshop, Oct 2003, Washington, USA, United States. pp.20-30, ⟨10.1109/SISW.2003.10001⟩. ⟨hal-01584305⟩

Share

Metrics

Record views

159