TWC: Small: Building Efficient and Accountable Multi-User ORAM Systems for Protecting Data Access Patterns

TWC：小型：构建高效且负责任的多用户 ORAM 系统以保护数据访问模式

• 批准号: 1422402
• 负责人: Wensheng Zhang
• 金额: $ 10万
• 依托单位: Iowa State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1422402&HistoricalAwards=false
• 关键词: TWC; Small; Building; Efficient; Accountable

Cloud-based data sharing is increasing in popularity, but there is also an increasing privacy consciousness. Continued growth in cloud computing will require reconciling these issues. While data encryption can provide some protection, it has been shown that even access patterns to encrypted data can reveal private information (e.g., knowing encrypted data was uploaded by the Centers for Disease Control and later accessed by a particular user suggests that the user is concerned about some disease, even if the specifics are not known.) There is a lack of study and understanding of how to protect data access pattern in practical scenarios, where there are multiple users and cloud servers and the users and server may not trust each other. The first objective of the research project is to deepen the understanding of the challenges in protecting data access patterns as well as the collateral security risks.Specifically, this project will develop formal models for protecting data access patterns and initial approaches to that protection, laying a solid foundation for developing novel solutions to protect data access patterns and strictly evaluating the security properties of the solutions. The project also plans to deliver security-provable, oblivious, efficient and accountable multi-user access protocols to outsourced data, for the sake of preserving each individual user's access pattern under a selected set of representative adversary models.

基于云的数据共享越来越受欢迎，但隐私意识也日益增强。 云计算的持续增长需要解决这些问题。 虽然数据加密可以提供一定的保护，但事实证明，即使是加密数据的访问模式也可能泄露私人信息（例如，知道加密数据是由疾病控制中心上传并随后由特定用户访问表明该用户担心）缺乏对如何在实际场景中保护数据访问模式的研究和理解，在实际场景中，存在多个用户和云服务器，并且用户和服务器可能不相互信任。 该研究项目的首要目标是加深对保护数据访问模式所面临的挑战以及附带安全风险的理解。具体来说，该项目将开发用于保护数据访问模式的正式模型以及该保护的初步方法，为保护数据访问模式奠定基础。为开发保护数据访问模式的新颖解决方案以及严格评估解决方案的安全属性奠定了坚实的基础。 该项目还计划为外包数据提供可安全证明的、不经意的、高效且负责任的多用户访问协议，以便在选定的一组代表性对手模型下保留每个用户的访问模式。