PASSAT: Single Password Authenticated Secret-Shared Intrusion-Tolerant Storage with Server Transparency
Authors: Kiavash Satvat, Maliheh Shirvanian, Nitesh Saxena
AI-generated Key Points
- PASSAT is a practical system designed to enhance the security of files stored in public cloud storage.
- PASSAT operates transparently to cloud servers and enables users to securely store and access their files using a single master password.
- It utilizes a fast and lightweight XOR secret sharing scheme to distribute users' files among multiple publicly available cloud platforms.
- This approach improves confidentiality and enhances availability by ensuring data remains accessible even if one platform becomes unavailable.
- PASSAT guarantees data integrity by preventing unauthorized modifications or tampering through its use of secret shares.
- To authenticate users across multiple platforms, PASSAT stores authentication credentials on a password manager protected under the user's master password.
- The authors implemented PASSAT using a (2, 3)-XOR secret sharing scheme and integrated it with popular storage providers like Google Drive, Box, and Dropbox.
- Evaluation confirms that this approach efficiently enhances confidentiality, availability, and integrity without requiring any server modifications.
Abstract: In this paper, we introduce PASSAT, a practical system to boost the security assurance delivered by the current cloud architecture without requiring any changes or cooperation from the cloud service providers. PASSAT is an application transparent to the cloud servers that allows users to securely and efficiently store and access their files stored on public cloud storage based on a single master password. Using a fast and light-weight XOR secret sharing scheme, PASSAT secret-shares users' files and distributes them among n publicly available cloud platforms. To access the files, PASSAT communicates with any k out of n cloud platforms to receive the shares and runs a secret-sharing reconstruction algorithm to recover the files. An attacker (insider or outsider) who compromises or colludes with less than k platforms cannot learn the user's files or modify the files stealthily. To authenticate the user to multiple cloud platforms, PASSAT crucially stores the authentication credentials, specific to each platform on a password manager, protected under the user's master password. Upon requesting access to files, the user enters the password to unlock the vault and fetches the authentication tokens using which PASSAT can interact with cloud storage. Our instantiation of PASSAT based on (2, 3)-XOR secret sharing of Kurihara et al., implemented with three popular storage providers, namely, Google Drive, Box, and Dropbox, confirms that our approach can efficiently enhance the confidentiality, integrity, and availability of the stored files with no changes on the servers.
Ask questions about this paper to our AI assistant
You can also chat with multiple papers at once here.
The previous summary was created more than a year ago and can be re-run (if necessary) by clicking on the Run button below.
Similar papers summarized with our AI tools
Navigate through even more similar papers through a
tree representationLook for similar papers (in beta version)
By clicking on the button above, our algorithm compares the title and abstract of this paper with all the papers of the same arXiv category that we have summarized, and finds the closest ones. You can rerun it from time to time: the results improve as our database grows.
Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.