A Secure Model for Cloud Computing Based Storage and Retrieval
Yaga Reddemma · IOSR Journal of Computer Engineering · 2012
Enterprises protect their internal storage and retrieval process using firewalls and also protect it from insider attacks by formulating secure data access procedures.If the enterprises are willing to store data in cloud, cloud computing service providers have to take care of data privacy and security.A common way to achieve security is encryption/decryption mechanism employed by cloud service providers.However, performing both tasks such as storage and encryption/decryption mechanism by cloud server causes security problems as the administrators know the sensitive information and may involve in illegal practices.To overcome this problem, this paper presents a mechanism where the storage is done by one provider while encryption/decryption mechanisms are provided by another service provider.In the proposed system the party that uses cloud storage services must encrypt data before sending it to cloud while the service provider who is responsible for encryption/decryption must delete data once encryption/decryption process is completed.To illustrate the proposed mechanism, this paper uses a CRM service example that demonstrates how the parties involved in secure storage and retrieval when data is saved to cloud.It also provides insights into multi-party SLAs for the proposed system.