Oblivious outsourced storage with delegation

  • Authors:
  • Martin Franz;Peter Williams;Bogdan Carbunar;Stefan Katzenbeisser;Andreas Peter;Radu Sion;Miroslava Sotakova

  • Affiliations:
  • Center for Advanced Security Research Darmstadt - CASED, Germany;Computer Science, Stony Brook University;Applied Research Center, Motorola Labs;Center for Advanced Security Research Darmstadt - CASED, Germany;Technische Universität Darmstadt, Germany;Computer Science, Stony Brook University;Computer Science, Stony Brook University

  • Venue:
  • FC'11 Proceedings of the 15th international conference on Financial Cryptography and Data Security
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

In the past few years, outsourcing private data to untrusted servers has become an important challenge. This raises severe questions concerning the security and privacy of the data on the external storage. In this paper we consider a scenario where multiple clients want to share data on a server, while hiding all access patterns. We propose here a first solution to this problem based on Oblivious RAM (ORAM) techniques. Data owners can delegate rights to external new clients enabling them to privately access portions of the outsourced data served by a curious server. Our solution is as efficient as the underlying ORAM constructs and allows for delegated read or write access while ensuring strong guarantees for the privacy of the outsourced data. The server does not learn anything about client access patterns while clients do not learn anything more than what their delegated rights permit.