TTP: Medium: A Campus Pilot For A Privacy-Enabled Cloud Storage, Search, and Collaboration Portal for Education

TTP：Medium：支持隐私的云存储、搜索和协作教育门户的校园试点

• 批准号: 1562376
• 负责人: Radu Sion
• 金额: $ 99.98万
• 依托单位: Private Machines Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1562376&HistoricalAwards=false
• 关键词: TTP; Medium; Campus; Pilot; Privacy

As higher education institutions consider moving services to the cloud to save costs and improve collaboration, significant challenges to successful large-scale adoption still exist. Institutions are unwilling to risk cloud deployment because provable technological defenses have thus far been lacking. Control over sensitive data is relinquished without the institution's knowledge, liability is shifted and data breach risks are significantly increased. Further, regulatory-sensitive data has become an increasingly attractive target. Recent history shows one major breach every few weeks, with an alarming increase in frequency. This project directly addresses this significant challenge by transitioning to practice -- through an educational campus pilot -- searchable cloud storage and collaboration tools with full in-cloud privacy, at-runtime security and no shift in liability for educators and students. The pilot provides secure cloud storage to 24,500 students and 2,500 educators. It constitutes a testbed for deploying secure protocols in a live environment via the participation of researchers and students in its operation. Extensive data dissemination for academic research purposes is an integral part of the pilot. Collected data points serve as significant knowledge repositories not only in the security community but also in the storage and cloud research communities. The project will result in the creation of a significant number of trust and security-related information technology jobs which must remain stateside to maintain the economic and political security of the United States. The project trains students and contributes to the creation of a skilled cyber-security domestic workforce available to fulfill our nation's needs. The project provides new course material and involves underrepresented groups, including at least one female PhD student.The technical underpinnings of the work rely on new mechanisms that ensure data is strongly encrypted before leaving trusted client premises while allowing users to still securely collaborate, query, share, synchronize, search, backup etc. Contrary to conventional wisdom, the project constructs a secure design that is also truly practical, but would not have been feasible with a server-centric approach in which search operations are performed server-side on encrypted data and are computationally expensive and necessarily limited in expressiveness. Instead, the pilot is based on an efficient design in which operations are distributed to client-side logic in a scalable, efficient manner, operating orders of magnitude faster than the equivalent server code on encrypted data. To further optimize processing, the system enables clients to leverage each other's work (such as indexing) in a distributed secure manner, through cloud-mediated conduits and mechanisms. Overall, the system ensures the cloud cannot ever access user data or see user search queries. Ultimately, clients receive all cloud benefits while ensuring full regulatory compliance. Even if the cloud provider is breached, data is fully protected.

尽管高等教育机构考虑将服务转移到云端以节省成本并改善协作，但成功大规模采用的重大挑战仍然存在。机构不愿意冒险部署云，因为迄今为止还缺乏可证明的技术防御。在机构不知情的情况下放弃对敏感数据的控制，责任转移，数据泄露风险显着增加。此外，监管敏感数据已成为越来越有吸引力的目标。最近的历史表明，每隔几周就会发生一次重大泄露，而且频率正在以惊人的速度增加。该项目通过教育校园试点过渡到实践，直接解决这一重大挑战，可搜索的云存储和协作工具具有完全的云内隐私、运行时安全性，并且教育工作者和学生的责任不会转移。该试点项目为 24,500 名学生和 2,500 名教育工作者提供安全的云存储。它构成了一个测试平台，通过研究人员和学生参与其操作，在实时环境中部署安全协议。用于学术研究目的的广泛数据传播是该试点的一个组成部分。收集的数据点不仅在安全社区而且在存储和云研究社区中充当重要的知识存储库。该项目将创造大量与信任和安全相关的信息技术工作岗位，这些工作岗位必须留在美国境内，以维护美国的经济和政治安全。该项目培训学生，并有助于培养一支熟练的网络安全国内劳动力，以满足我们国家的需求。该项目提供了新的课程材料，并涉及代表性不足的群体，其中至少包括一名女博士生。这项工作的技术基础依赖于新的机制，确保数据在离开受信任的客户端之前进行高度加密，同时允许用户仍然安全地协作、查询、共享、同步、搜索、备份等。与传统观点相反，该项目构建了一个真正实用的安全设计，但对于以服务器为中心的方法（其中搜索操作在服务器端对加密数据执行）来说是不可行的并且计算成本昂贵并且必然受到限制在表现力方面。相反，该试点基于高效的设计，其中操作以可扩展、高效的方式分发到客户端逻辑，其操作速度比加密数据上的等效服务器代码快几个数量级。为了进一步优化处理，该系统使客户能够通过云介导的管道和机制，以分布式安全方式利用彼此的工作（例如索引）。总体而言，该系统确保云无法访问用户数据或查看用户搜索查询。最终，客户可以获得所有云优势，同时确保完全合规。即使云提供商遭到破坏，数据也会得到充分保护。