SEC : A Practical Secure Erasure Coding Scheme for Peer-to-Peer Storage System

Jing Tian,Zhi Yang,Yafei Dai

2006-01-01

Abstract:Though conventional block cipher is widely used in Peer-to-Peer storage systems, it is insufficient to ensure the confidentiality of long-term archive data because of the inherent Peer-to-Peer storage vulnerability that data is stored on other untrusted peers. There are two potential security weak spots: (1) sensitive data may be exposed from the encrypted data stored on an adversary peer when the weakness of block cipher is discovered or there is a leakage of secret key; (2) even when a user realizes the security threats, he/she cannot destroy the encrypted data stored on an adversary peer to minimizing the loss. This paper proposes a novel secure erasure code (SEC) scheme to solve the above security problems. The SEC scheme encodes the sensitive data into several fragments, and then stores the fragments onto different peers. In theory, SEC ensures unconditional confidentiality at the fragment level, which means that an adversary cannot obtain any portion of sensitive data from local stored encrypted fragment even if he/she has the secret key and infinite computation power. By leveraging the large scale property of Peer-to-Peer systems, SEC further makes it infeasible for the adversary to collect enough fragments for decrypting. SEC can be used alone or together with block cipher to solve these potential security problems. The performance results show that the SEC scheme is practical for the real-world applications.