Publication Type

Journal Article

Version

acceptedVersion

Publication Date

5-2017

Abstract

Cloud computing offers various services to users by re-arranging storage and computing resources. In order to preserve data privacy, cloud users may choose to upload encrypted data rather than raw data to the cloud. However, processing and analyzing encrypted data are challenging problems, which have received increasing attention in recent years. Homomorphic Encryption (HE) was proposed to support computation on encrypted data and ensure data confidentiality simultaneously. However, a limitation of HE is it is a single user system, which means it only allows the party that owns a homomorphic decryption key to decrypt processed ciphertexts. Original HE cannot support multiple users to access the processed ciphertexts flexibly. In this paper, we propose a Privacy-Preserving Data Processing (PPDP) system with the support of a Homomorphic Re-Encryption Scheme (HRES). The HRES extends partial HE from a single-user system to a multi-user one by offering ciphertext re-encryption to allow multiple users to access processed ciphertexts. Through the cooperation of a Data Service Provider (DSP) and an Access Control Server (ACS), the PPDP system can support seven basic operations over ciphertexts, which include Addition, Subtraction, Multiplication, Sign Acquisition, Comparison, Equivalent Test, and Variance. To enhance the flexibility and security of our system, we further apply multiple ACSs to take in charge of the data from their own users and design computing operations over ciphertexts belonging to multiple ACSs. We then prove the security of PPDP, analyze its performance and advantages by comparing with some latest work, and demonstrate its efficiency and effectiveness through simulations with regard to big data process.

Keywords

Access control, Cloud Computing, Data sharing, Homomorphic encryption, Privacy preservation, Proxy re-encryption

Discipline

Databases and Information Systems | Information Security

Research Areas

Cybersecurity

Publication

Information Sciences

Volume

409-410

First Page

35

Last Page

55

ISSN

0020-0255

Identifier

10.1016/j.ins.2017.05.004

Publisher

Elsevier

Copyright Owner and License

Authors

Additional URL

https://doi.org/10.1016/j.ins.2017.05.004

Download

Share

COinS