A New Authentication and Homomorphic Encryption as a Service Model for Preserving Privacy in Clouds

Abstract

The security as a Service (SECaaS) is a new model which provides security solution to users through Cloud Computing. The maturity of Cloud Computing services makes possible the use of the SECaaS model. This new model offers huge benefits to users, such as Authentication as a Service (AaaS) and Encryption as a Service (ENCaaS). So, it can offer more security features, since it uses the resources of Clouds and it's connected to the different security policy databases. While SECaaS offers to cloud users and companies a multitude of security services, it still remains very limited and several aspects of security are not covered by this model, especially the part concerning the privacy. In addition, SECaaS is a new model that is not yet correctly deployed and it is not sufficiently solicited by companies. On the other side, Homomorphic encryption is considered as a good solution to ensure the privacy for users using the cloud services because it permits to make calculation on cipher text and data without decrypting them, but this solution suffer from many limitations such as the key size, the high latency and some serious performance problems. The main idea of this paper it's to propose a new security model to preserving user's privacy using homomorphic encryption while bypassing its limitations. So, This paper proposes a framework for Authentication and Homomorphic Encryption (A-HEaaS) based on security as a Service model which permits a secure access to the Cloud servers and the use of homomorphic encryption for calculations on encrypted data. The paper describes the design of our model and gives an implementation of our framework on medical Data.

Encryption as a Service for IoT: Opportunities, Challenges, and Solutions

“…Full-Cloud Mobile cloud [19] Parallelizing the operations performed on fully homomorphic encrypted data. Full-Cloud General businesses [20] Using a private cloud that provides enough resources for a fully homomorphic algorithm. Full-Cloud General companies [21] SEaaS Considering the typographical errors in searching the ciphertexts.…”

“…In the pursuit of refining and expanding the HEaaS, Zkik et al [20] presents a pioneering platform that seeks to transcend the inherent limitations of homomorphic algorithms through the judicious utilization of cloud resources. At its core, this platform provides users with a potent toolkit for secure and versatile data manipulation, unencumbered by the conventional constraints posed by fully homomorphic encryption.…”

“…This platform is a testament to the synergy between cutting-edge cryptographic techniques and the vast computational prowess of cloud infrastructures. By enabling users to interact with their encrypted data in a versatile and seamless manner, Zkik et al [20] forges a pathway towards realizing the full potential of fully homomorphic encryption. In doing so, it embarks on a journey to bridge the gap between theoretical cryptography and practical utility, thereby enriching the landscape of secure computation within modern cloud ecosystems.…”

Cloud Computing: Major Challenges and Counter Acts

“…In a paper by Karim Zkik et al [10] emphasized on safeguarding the user privacy by presenting a novel approach of Homomorphic encryption. The work aims to be focused on S ec aas (Security as a service) model of Cloud Computing wherein any user will choose the level of security by subscribing to this service.…”