In this paper, we first formally define a notion of shared ownership within a file access control model. We then propose two possible instantiations of our proposed shared ownership model. Our first solution, called Commune, relies on secure file dispersal and collusion-resistant secret sharing to ensure that all access grants in the cloud require the support of an agreed threshold of owners. As such, Commune can be used in existing clouds without modifications to the platforms. Our second solution, dubbed Comrade, leverages the blockchain technology in order to reach consensus on access control decision. Unlike Commune, Comrade requires that the cloud is able to translate access control decisions that reach consensus in the blockchain into storage access control rules, thus requiring minor modifications to existing clouds. We analyze the security of our proposals and compare/evaluate their performance through implementation integrated with Amazon S3.
Category / Keywords: applications / secret sharing,key management Date: received 5 Mar 2017, last revised 9 Mar 2017 Contact author: rihubert at inf ethz ch Available format(s): PDF | BibTeX Citation Version: 20170309:102132 (All versions of this report) Short URL: ia.cr/2017/227 Discussion forum: Show discussion | Start new discussion