A PASS Scheme in Cloud Computing - Protecting Data Privacy by Authentication and Secret Sharing

摘要

Cloud computing is an emerging IT service paradigm. Instead of developing their own IT departments, business sectors purchase on-demand IT service from external providers in a per-use basis. From business cost perspective, companies are shifting capital expenses (CapExp) on hardware equipments to operational expenses (OpExp). Many companies, especially those startups, found this cloud IT service is economically beneficial. However, this IT service paradigm still requires to overcome some security concerns before it can be fully deployed. One of the main security issues is how to protect client's data privacy from cloud employees. This paper proposes a PASS scheme for this purpose using Authentication and Secret Sharing.