Two Factor data protection security mechanism for colud storage system

Computer Engineering

We propose a two-factor data security protection system with factor revocability for cloud storage system. This system allows a person or sender to send an encrypted message to a receiver through a cloud storage server. The sender only needs to recognize the identity of the receiver but no other information (like as its certificate or its public key). The receiver needs to possess two things in order to decrypt the cipher text. The first one is her/his secret key saved in the computer. The second thing is a unique personal security device which attach to the computer. It is impossible to decrypt the cipher text without either piece. More important thing, once the security device is lost or stolen, this device is revoked. It cannot be used to decrypt any cipher text. This can be completed by the cloud server which will immediately execute few algorithms to change the existing cipher text to be un-decryptable by this device. This process is totally transparent to the sender. Furthermore, the cloud server cannot decrypt any cipher text at any time. The efficiency and security analysis show that our system is not only practical but also secure.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.