Private Editing Using Untrusted Cloud Services

Yan Huang and David Evans
Second International Workshop on Security and Privacy in Cloud Computing
Minneapolis, Minnesota
24 June 2011


We present a general methodology for protecting the confidentiality and integrity of user data for a class of on-line editing applications. The key insight is that many of these applications are designed to perform most of their data-dependent computation on the client side, so it is possible to maintain their functionality while only exposing an encrypted version of the document to the server. We apply our methodology to Google Documents and describe a prototype extension tool that enables users to use a cloud application to manage their documents without sacrificing confidentiality or integrity. To provide adequate performance, we employ an incremental encryption scheme and extend it to support variable-length blocks. We analyze the security of our scheme and report on experiments that show our extension preserves most of the cloud application's functionality with less than 10% overhead for typical use.


Full paper (10 pages): [PDF]

Talk slides: [PPTX, PDF]

Download Extension