紀要論文

Intel SGXを利用したクラウド環境から保護された暗号化共有ファイルシステム

Encrypted and shared file system protected from cloud environments using Intel SGX

jpn

24321192

https://doi.org/10.15002/00025260

法政大学大学院情報科学研究科

法政大学大学院紀要. 情報科学研究科編

17

1

6

2022-03-24

Version of Record

The platform of cloud services is a system consisting of huge physical machines owned by cloud service providers. Therefore, users of cloud services need to trust the cloud service provider to handle data on the cloud service or handle information protected by encryption or other methods. However, in the former case, there are incidents of privacy violation by cloud service providers, and in the latter case, conventional encryption methods cannot process encrypted data, which limits its functionality and causes delays in encryption and decryption. In this research, we propose a protected shared file system that uses the cloud service as storage by using Intel SGX, a type of TEE technology. Intel SGX provides an isolated execution environment by deploying an encrypted memory area called an Enclave. Only encryption-protected data and Enclave-protected applications exist on the cloud service, and the file system can be mounted by the local environment by the formal owner. In addition, it can be mounted in multiple local environments and other SGX applications, and treated like shared storage.

Article

AA12746425