Invention Description
Cloud storage is scalable and cost-efficient, but relying on a single provider introduces vulnerabilities such as: a single point of compromise, insider threats, vendor lock-in, and jurisdictional compliance risks. Traditional encryption-at-rest mitigates some threats but relies on centralized key management. Furthermore, classical algorithms like AES are vulnerable to future quantum computing advances. While post-quantum cryptography offers a solution, it introduces high computational costs, larger keys, and bigger ciphertexts, making it impractical for resource-constrained or high-throughput systems.
Researchers at Arizona State University developed a XOR-based data security systems for securely storing data across independent cloud storage providers using a secret sharing scheme. This system allows the original data to be reconstructed without revealing information about the data and is inherently resilient against quantum computing attacks. It prevents a destination server (or colluding adversary) from inferring the geographic location of a communicating client. Further, it includes integrity verification, tolerates provider failures, and features a protocol to prevent adversarial access over time without relying on traditional encryption methods.
This system enables secure data storage using XOR-based secret sharing to ensure confidentiality and resilience across distributed cloud providers.
Potential Applications
- Secure distributed cloud storage solutions for enterprises handling sensitive data
- Government and defense agencies requiring quantum-proof data protection
- Financial services and healthcare sectors needing fault-tolerant confidential storage
- Cloud service providers offering advanced security features
- Data backup and disaster recovery systems with enhanced security guarantees
Benefits and Advantages
- Inherently resilient against quantum computing attacks
- Fault tolerance allowing recovery despite multiple cloud provider failures
- Protection against insider threats and vendor lock-in risks
- Integrity verification and tampering or corruption detection
- Proactive protocol prevents adversarial access and enhances long-term security
- Eliminates dependence on encryption vulnerable to quantum computing