PASSAT: Single Password Authenticated Secret-Shared Intrusion-Tolerant Storage with Server Transparency
AI-generated Key Points
- PASSAT is a practical system designed to enhance the security of files stored in public cloud storage.
- PASSAT operates transparently to cloud servers and enables users to securely store and access their files using a single master password.
- It utilizes a fast and lightweight XOR secret sharing scheme to distribute users' files among multiple publicly available cloud platforms.
- This approach improves confidentiality and enhances availability by ensuring data remains accessible even if one platform becomes unavailable.
- PASSAT guarantees data integrity by preventing unauthorized modifications or tampering through its use of secret shares.
- To authenticate users across multiple platforms, PASSAT stores authentication credentials on a password manager protected under the user's master password.
- The authors implemented PASSAT using a (2, 3)-XOR secret sharing scheme and integrated it with popular storage providers like Google Drive, Box, and Dropbox.
- Evaluation confirms that this approach efficiently enhances confidentiality, availability, and integrity without requiring any server modifications.
Authors: Kiavash Satvat, Maliheh Shirvanian, Nitesh Saxena
Abstract: In this paper, we introduce PASSAT, a practical system to boost the security assurance delivered by the current cloud architecture without requiring any changes or cooperation from the cloud service providers. PASSAT is an application transparent to the cloud servers that allows users to securely and efficiently store and access their files stored on public cloud storage based on a single master password. Using a fast and light-weight XOR secret sharing scheme, PASSAT secret-shares users' files and distributes them among n publicly available cloud platforms. To access the files, PASSAT communicates with any k out of n cloud platforms to receive the shares and runs a secret-sharing reconstruction algorithm to recover the files. An attacker (insider or outsider) who compromises or colludes with less than k platforms cannot learn the user's files or modify the files stealthily. To authenticate the user to multiple cloud platforms, PASSAT crucially stores the authentication credentials, specific to each platform on a password manager, protected under the user's master password. Upon requesting access to files, the user enters the password to unlock the vault and fetches the authentication tokens using which PASSAT can interact with cloud storage. Our instantiation of PASSAT based on (2, 3)-XOR secret sharing of Kurihara et al., implemented with three popular storage providers, namely, Google Drive, Box, and Dropbox, confirms that our approach can efficiently enhance the confidentiality, integrity, and availability of the stored files with no changes on the servers.
Ask questions about this paper to our AI assistant
You can also chat with multiple papers at once here.
Assess the quality of the AI-generated content by voting
Score: 0
Why do we need votes?
Votes are used to determine whether we need to re-run our summarizing tools. If the count reaches -10, our tools can be restarted.
The previous summary was created more than a year ago and can be re-run (if necessary) by clicking on the Run button below.
Similar papers summarized with our AI tools
Navigate through even more similar papers through a
tree representationLook for similar papers (in beta version)
By clicking on the button above, our algorithm will scan all papers in our database to find the closest based on the contents of the full papers and not just on metadata. Please note that it only works for papers that we have generated summaries for and you can rerun it from time to time to get a more accurate result while our database grows.
Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.