Cloud Computing Data Storage Security Based on Different Encryption Schemes

Introduction

Globalization has forced organizations to accomplish a lot with far less technical, personnel and budget resources. Therefore, when the cloud model was introduced and started to mature it became an obvious choice to many corporations regardless of size. This new model promises that clients can have as many hardware, and software resources as they wish and when it’s most needed, which made scalability an issue of the past and at a much less cost. Today, most of the cloud services are in the nature of Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). These services revolutionized the way information technology decision makers assess projects and their related risks versus return on investments. However, the looming security risks and issues an organization may face still are the biggest obstacles that refrain clients from fully harnessing the benefits of the cloud; especially for those whom their data security is an essential component of their daily business.

Many solutions have been identified to achieve security in the cloud and protect data either by using access control, data storage encryption, or a combination of the two. This paper presents a comprehensive survey of different encryption schemes used or are proposed to protect data in the cloud including the algorithm(s) the scheme uses to achieve the sought after level of confidentiality, integrity, and authenticity.

Storing and accessing data in the cloud has its own challenges that compounded the classical issues of security. Today, an organization may choose to host its sensitive data in the cloud to harness the benefits of cloud computing and compete in the respective domain of business it relies on for day to day operations. However, when the data is sensitive its stewards need to implement the most rigorous security scheme that not only should provide them with the appropriate access level but makes sure that no data is compromised or leaked. The classical scenarios of security schemes may still be used. However, there is a limitation that comes with them. For instance, if the data need to only be accessed by the internal staff then a symmetric encryption scheme may be used and the key management is less of a concern but a key management control must be in place. On the other hand, if the data must be accessible to internal and external users, then an asymmetric scheme will be more preferable. In both scenarios, the cloud provider need to gain access to the key to perform usable functionalities against the encrypted data. This exposure of the key may not be acceptable due to the fact that the CP itself may be curious to know the nature of the sensitive data stored on its premises. To accommodate clients’ security requirements, researchers are turning to the mathematical characteristics of fully homomorphic algorithms which enables search to be performed against encrypted data without the need of decrypting it.

In the rest of this paper we will examine different secure proposed solutions for accessing and transferring data in the cloud using different schemes that are based on the classical symmetric or asymmetric algorithms. Then, state the new solutions that are based on fully homomorphic schemes. These schemes are trying to solve the same problem which is securing data while enabling arbitrary calculation to be performed against it, except introducing asymptotically better performance in time and space. Finally, analyze these solutions in the paper conclusion based on the need of cloud computing in a multi-tenant environment and secure delegation computation.