TWC: Small: Oblivious Cloud Storage Systems, from Theory to Practice --- Simpler, More Efficient, More Robust

TWC：小：Oblivious云存储系统，从理论到实践——更简单、更高效、更健壮

• 批准号: 1528178
• 负责人: Huijia Lin
• 金额: $ 49.9万
• 依托单位: University of California-Santa Barbara
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1528178&HistoricalAwards=false
• 关键词: TWC; Small; Oblivious; Cloud; Storage

Outsourcing storage to the cloud has become more widespread in recent years; however, cloud storage services are constantly exposed to a number of non-trivial adversarial threats. This work addresses security risks arising from the leakage of access patterns, which is the ability of an adversary to detect when the same item is accessed repeatedly on a storage server, which has been shown to substantially impact data privacy. This project develops CloudORAM, the first provably-secure fully concurrent and asynchronous oblivious storage system that relies on simple tree-based Oblivious RAM (ORAM) techniques, the state-of-the-art cryptographic solution for hiding access patterns. CloudORAM's system architecture uses a trusted proxy node processing concurrent accesses, from potentially multiple clients, to an untrusted server to hide access patterns. CloudORAM also outperforms existing systems in terms of performance, storage requirements, and scalability, while being substantially simpler to describe and deploy due to the tree-based ORAM structure. This project develops better combinatorial techniques to reduce bandwidth consumption in ORAM-based storage solutions as well as proofs of concept for new oblivious storage systems without the need of a trusted proxy node, and presents the first comprehensive formal framework to formalize and prove security of oblivious storage systems.

近年来，将云到云的外包存储变得越来越普遍。但是，云存储服务不断暴露于许多非平凡的对抗威胁。这项工作解决了访问模式泄漏引起的安全风险，这是对手在存储服务器上反复访问同一项目何时检测的能力，该商品已被证明会显着影响数据隐私。该项目开发了Cloudoram，这是第一个被证明是完全并发和异步的遗忘系统，该系统依赖于简单的基于树的遗忘RAM（ORAM）技术，这是用于隐藏访问模式的最先进的加密解决方案。 Cloudoram的系统体系结构使用可信赖的代理节点处理并发访问，从潜在的多个客户端到不信任的服务器，以隐藏访问模式。 Cloudoram在性能，存储要求和可扩展性方面还胜过现有系统，同时由于基于树的Oram结构而更简单地描述和部署。 该项目开发了更好的组合技术，可以减少基于Oram的存储解决方案中的带宽消耗，并为新的遗忘存储系统提供概念证明，而无需值得信赖的代理节点，并提出了第一个正式的正式框架，以正式化和证明忽略存储系统的安全性。