Securing Data in the Cloud

保护云中的数据

• 批准号: RGPIN-2016-03878
• 负责人: Gorbunov, Sergey
• 金额: $ 2.62万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=634820
• 关键词: Securing; Data; Cloud

Big data and cloud computing create new privacy challenges. Our personal devices (e.g., laptops, mobile phones, tablets) have low bandwidth and can perform only lightweight computations. These devices rely on the cloud to perform search queries and other types of computations over large datasets. However, the datasets may contain sensitive information (e.g., medical, financial, personal records) that should be encrypted in the cloud, in order to maintain security and privacy. This creates a fundamental problem: our personal devices cannot use the cloud to perform computations over encrypted data. Can we run a program over encrypted data in the cloud without revealing the data or the description of the program? Can we authenticate the results of the computations performed in the cloud without re-downloading the data and re-doing the work?

大数据和云计算带来了新的隐私挑战。我们的个人设备（例如笔记本电脑、手机、平板电脑）带宽较低，只能执行轻量级计算。这些设备依靠云来对大型数据集执行搜索查询和其他类型的计算。然而，数据集可能包含敏感信息（例如医疗、财务、个人记录），应在云中加密，以维护安全和隐私。这就产生了一个根本问题：我们的个人设备无法使用云对加密数据进行计算。我们能否在云中的加密数据上运行程序而不泄露数据或程序描述？我们是否可以验证在云中执行的计算结果，而无需重新下载数据并重新进行工作？