Efficient Proofs of Secure Erasure

Karvelas, Nikolaos P.; Kiayias, Aggelos

doi:10.1007/978-3-319-10879-7_30

Cited by 16 publications

(8 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For doctors, eHealth may allow them to prioritize differently and tend to patients who cannot travel. Others have highlighted the possibility of using eHealth services to reduce health care costs [ 32 ].…”

Section: Methodsmentioning

confidence: 99%

Facilitating Secure Sharing of Personal Health Data in the Cloud

Thilakanathan

Calvo²,

Chen³

et al. 2016

JMIR Med Inform

View full text Add to dashboard Cite

BackgroundInternet-based applications are providing new ways of promoting health and reducing the cost of care. Although data can be kept encrypted in servers, the user does not have the ability to decide whom the data are shared with. Technically this is linked to the problem of who owns the data encryption keys required to decrypt the data. Currently, cloud service providers, rather than users, have full rights to the key. In practical terms this makes the users lose full control over their data. Trust and uptake of these applications can be increased by allowing patients to feel in control of their data, generally stored in cloud-based services.ObjectiveThis paper addresses this security challenge by providing the user a way of controlling encryption keys independently of the cloud service provider. We provide a secure and usable system that enables a patient to share health information with doctors and specialists.MethodsWe contribute a secure protocol for patients to share their data with doctors and others on the cloud while keeping complete ownership. We developed a simple, stereotypical health application and carried out security tests, performance tests, and usability tests with both students and doctors (N=15).ResultsWe developed the health application as an app for Android mobile phones. We carried out the usability tests on potential participants and medical professionals. Of 20 participants, 14 (70%) either agreed or strongly agreed that they felt safer using our system. Using mixed methods, we show that participants agreed that privacy and security of health data are important and that our system addresses these issues.ConclusionsWe presented a security protocol that enables patients to securely share their eHealth data with doctors and nurses and developed a secure and usable system that enables patients to share mental health information with doctors.

show abstract

Section: Methodsmentioning

confidence: 99%

Facilitating Secure Sharing of Personal Health Data in the Cloud

Thilakanathan

Calvo²,

Chen³

et al. 2016

JMIR Med Inform

View full text Add to dashboard Cite

show abstract

“…Alternatively, several platforms allow the prover to convince that the prover has access to some storage space [3, 12,22,33,39,45,51,64,67]. Additionally one can require that the proof implies that the space also was erased [51,67], or some function can only be computed in forward direction [33].…”

Section: Related Workmentioning

confidence: 99%

Proof-of-Prestige: A Useful Work Reward System for Unverifiable Tasks

Król

Sonnino

Al-Bassam

et al. 2021

ACM Trans. Internet Technol.

View full text Add to dashboard Cite

As cryptographic tokens and altcoins are increasingly being built to serve as utility tokens, the notion of useful work consensus protocols is becoming ever more important. With useful work consensus protocols, users get rewards after they have carried out some specific tasks useful for the network. While in some cases the proof of some utility or service can be provided, the majority of tasks are impossible to verify reliably. To deal with such cases, we design “Proof-of-Prestige” (PoP)—a reward system that can run directly on Proof-of-Stake (PoS) blockchains or as a smart contract on top of Proof-of-Work (PoW) blockchains. PoP introduces “prestige,” which is a volatile resource that, in contrast to coins, regenerates over time. Prestige can be gained by performing useful work, spent when benefiting from services, and directly translates to users minting power. Our scheme allows us to reliably reward decentralized workers while keeping the system free for the end-users. PoP is resistant against Sybil and collusion attacks and can be used with a vast range of unverifiable tasks. We build a simulator to assess the cryptoeconomic behavior of the system and deploy a full prototype of a content dissemination platform rewarding its participants. We implement the blockchain component on both Ethereum (PoW) and Cosmos (PoS), provide a mobile application, and connect it with our scheme with a negligible memory footprint. Finally, we adapt a fair exchange protocol allowing us to atomically exchange files for rewards also in scenarios where not all the parties have Internet connectivity. Our evaluation shows that even for large Ethereum traces, PoP introduces sub-millisecond computational overhead for miners in Cosmos and less than 0.013$ smart contract invocation cost for users in Ethereum.

show abstract

“…Therefore, these timestamps can be verified whenever the corresponding block is published on the main chain. The work in [23] presents a graph pebbling technique to ensure the data erasure in a bounded-space. Caching vs retention.…”

Section: Related Workmentioning

confidence: 99%

IoT Expunge

Panwar

Sharma

Gupta

et al. 2020

Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy

View full text Add to dashboard Cite

The growing deployment of Internet of Things (IoT) systems aims to ease the daily life of end-users by providing several value-added services. However, IoT systems may capture and store sensitive, personal data about individuals in the cloud, thereby jeopardizing user-privacy. Emerging legislation, such as California's CalOPPA and GDPR in Europe, support strong privacy laws to protect an individual's data in the cloud. One such law relates to strict enforcement of data retention policies. This paper proposes a framework, entitled IoT Expunge that allows sensor data providers to store the data in cloud platforms that will ensure enforcement of retention policies. Additionally, the cloud provider produces verifiable proofs of its adherence to the retention policies. Experimental results on a real-world smart building testbed show that IoT Expunge imposes minimal overheads to the user to verify the data against data retention policies. CCS CONCEPTS• Security and privacy → Security protocols; Mobile and wireless security; Domain-specific security and privacy architectures; Social aspects of security and privacy.1 Since secure enclave is a trusted agent of SDP, it can decrypt and compute over encrypted data.There are challenges in computing using enclaves due to side-channel attacks, e.g., cache-line, branch shadow, page-fault attacks [42], but since the focus of this paper is on implementing data retention policies, we do not address those challenges in this paper.

show abstract

Efficient Proofs of Secure Erasure

Cited by 16 publications

References 11 publications

Facilitating Secure Sharing of Personal Health Data in the Cloud

Facilitating Secure Sharing of Personal Health Data in the Cloud

Proof-of-Prestige: A Useful Work Reward System for Unverifiable Tasks

IoT Expunge

Contact Info

Product

Resources

About