trademark

3.0 Secure Data Storage and Transactions Logs (cont.)
3.3 Employ SUNDR
3.3.1 Why?
To store data securely on untrusted servers
3.3.2 How?
Use SUNDR (secure untrusted data repository) to detect any attempts at unauthorized file
modification by malicious server operators or users. It is also effective to detect integrity or
consistency failures in visible file modifications using fork consistency.
3.4 Use broadcast encryption
3.4.1 Why?
To improve scalability.
3.4.2 How?
Use broadcast encryption scheme [FN 93] in which a broadcaster encrypts a message
for some subset S of users who are listening on a broadcast channel. Any user in S
can use a private key to decrypt the broadcast. However, even if all users outside of
S collude, they can obtain no information about the content of the broadcast. Such
systems are said to be collusion resistant. The broadcaster can encrypt to any subset S
of his choice. It may still be possible that some members of S may contribute to piracy
by constructing a pirate decoder using private keys assigned to them. To ascertain the
identities of such malicious members—and thereby discourage piracy—traitor-tracing
mechanisms should be implemented as well.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
18