Advertisement

Collaboration-Preserving Authenticated Encryption for Operational Transformation Systems

  • Michael Clear
  • Karl Reid
  • Desmond Ennis
  • Arthur Hughes
  • Hitesh Tewari
Part of the Lecture Notes in Computer Science book series (LNCS, volume 7483)

Abstract

We present a flexible approach for achieving user-controlled privacy and integrity of documents that are collaboratively authored within web-based document-editing applications. In this setting, the goal is to provide security without modifying the web application’s client-side or server-side components. Instead, communication between both components is transparently intercepted and processed (if necessary) by means of a local proxy or browser plugin. We improve upon existing solutions by securely preserving real-time collaboration for encrypted documents and facilitating self-containment of the metadata (an overhead of encryption) within the same document. An architectural generalization is also presented that permits generic transformations and fine-grained access control. Security is assessed with respect to several threat models, and performance is evaluated alongside other approaches.

Keywords

Range Query Homomorphic Encryption Threat Model Computer Support Cooperative Work Document Content 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Mitzenmacher, M. (ed.): Fully homomorphic encryption using ideal lattices. ACM Press (September 2009)Google Scholar
  2. 2.
    Brakerski, Z., Vaikuntanathan, V.: Fully Homomorphic Encryption from Ring-LWE and Security for Key Dependent Messages. In: Rogaway, P. (ed.) CRYPTO 2011. LNCS, vol. 6841, pp. 505–524. Springer, Heidelberg (2011)Google Scholar
  3. 3.
    Katz, J., Sahai, A., Waters, B.: Predicate Encryption Supporting Disjunctions, Polynomial Equations, and Inner Products. In: Smart, N.P. (ed.) EUROCRYPT 2008. LNCS, vol. 4965, pp. 146–162. Springer, Heidelberg (2008)CrossRefGoogle Scholar
  4. 4.
    Google docs (2012), https://docs.google.com/
  5. 5.
    Etherpad collaborative real-time editor (2012), http://www.etherpad.com
  6. 6.
  7. 7.
    Huang, Y., Evans, D.: Private editing using untrusted cloud services. In: 2011 31st International Conference on Distributed Computing Systems Workshops (ICDCSW), pp. 263–272 (2011)Google Scholar
  8. 8.
    Adkinson-Orellana, L., Rodríguez-Silva, D.A., Gil-Castiñeira, F., Burguillo-Rial, J.C.: Privacy for google docs: Implementing a transparent encryption layer. In: 2nd Cloud Computing International Conference - CloudViews (2010)Google Scholar
  9. 9.
    Bellare, M., Goldreich, O., Goldwasser, S.: Incremental cryptography: The case of hashing and signing, pp. 216–233 (1994)Google Scholar
  10. 10.
    Lipmaa, H.: Secure and Efficient Time-stamping Systems. Dissertationes mathematicae Universitatis Tartuensis. Tartu University Press (1999)Google Scholar
  11. 11.
    Feldman, A.J., Zeller, W.P., Freedman, M.J., Felten, E.W.: Sporc: group collaboration using untrusted cloud resources. In: Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, OSDI 2010, p. 1. USENIX Association, Berkeley (2010)Google Scholar
  12. 12.
    Buonanno, E., Katz, J., Yung, M.: Incremental Unforgeable Encryption. In: Matsui, M. (ed.) FSE 2001. LNCS, vol. 2355, pp. 109–124. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  13. 13.
    Sun, C., Ellis, C.: Operational transformation in real-time group editors: issues, algorithms, and achievements. In: Proceedings of the 1998 ACM Conference on Computer Supported Cooperative Work, CSCW 1998, pp. 59–68. ACM, New York (1998)CrossRefGoogle Scholar
  14. 14.
    Li, D., Li, R.: Preserving operation effects relation in group editors. In: Proceedings of the 2004 ACM Conference on Computer Supported Cooperative Work, CSCW 2004, pp. 457–466. ACM, New York (2004)CrossRefGoogle Scholar
  15. 15.
    Li, R., Li, D.: Commutativity-based concurrency control in groupware. In: 2005 International Conference on Collaborative Computing: Networking, Applications and Worksharing, p. 10 (2005)Google Scholar
  16. 16.
    Google documents list api version 3.0 (2012), https://developers.google.com/google-apps/documents-list/
  17. 17.
    Mozilla firefox (2012), http://www.mozilla.org/firefox
  18. 18.
    Liveconnect technical documentation (2012), https://developer.mozilla.org/en/LiveConnect
  19. 19.
    Saarinen, M.J.O.: Cycling attacks on gcm, ghash and other polynomial macs and hashes. Cryptology ePrint Archive, Report 2011/202 (2011), http://eprint.iacr.org/
  20. 20.
    Donoho, D.L., Flesia, A.G., Shankar, U., Paxson, V., Coit, J., Staniford, S.: Multiscale Stepping-Stone Detection: Detecting Pairs of Jittered Interactive Streams by Exploiting Maximum Tolerable Delay. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol. 2516, pp. 17–35. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  21. 21.
    Paxson, V., Floyd, S.: Wide area traffic: the failure of poisson modeling. IEEE/ACM Trans. Netw. 3, 226–244 (1995)CrossRefGoogle Scholar
  22. 22.
    Bouncy castle crypto api (2012), http://www.bouncycastle.org

Copyright information

© Springer-Verlag Berlin Heidelberg 2012

Authors and Affiliations

  • Michael Clear
    • 1
  • Karl Reid
    • 1
  • Desmond Ennis
    • 1
  • Arthur Hughes
    • 1
  • Hitesh Tewari
    • 1
  1. 1.School of Computer Science and StatisticsTrinity College DublinIreland

Personalised recommendations