Abstract:

The most popular method to ensure confidentiality of users’data is to encrypt the data stored in the cloud. We propose a new method to ensure data confidentiality in cloud storage. Its properties include: (1) an encryption system which processes user data between clients and servers, is deployed on the front end of cloud storage servers; (2) real time encryption of user data: data is encrypted while being uploaded and decrypted while being downloaded; (3) the encryption system is transparent to both clients and cloud servers. Currently the widespread HTTP protocolbased cloud storage systems, such as Amazon S3 and OpenStack Swift, can use this method directly. Test data show that: this method can effectively offload the burden of data encryption and decryption without reducing the throughput.

Key words: cloud storage, data confidentiality, real time encryption, transparent encryption, TCP agent, HTTP protocol