A systematic framework for securing cloud data

Abstract

Cloud usage has increased rapidly in many organizations and institutions. Data storage as a service is one among the cloud service, where data owner stores his information in cloud servers rather than in their own servers. Security and Privacy issues are one of the biggest challenges for cloud computing services. Cloud security intends data stored online to be safe by preventing it from being stolen and leaked. Cloud data security can be provided by adopting cryptographic techniques. Data Security includes different services like confidentiality, integrity and identity and access management. To ensure data security a systematic framework that offers key generation, confidentiality, authentication, and key exchange services. Data owner before storing his data on to cloud will implement Laplace transform based key generation service that generates an encryption key by accepting a random secret phrase (seed). Laplace transform encryption is executed by accepting generated secret key and data to provide data confidentiality. If any data user is willing to access the owner’s data he has to be verified. User’s identity as well as Owner’s identity is verified by Knowledge based Authentication. After mutual authentication initial random secret phrase is securely shared between owner and user by initiating LU-key exchange method. Proposed framework is compared with different cloud security frameworks. Computational costs and drawbacks of frameworks are interpreted.