ObliviSync：实用的不经意文件备份和同步
ObliviSync: Practical Oblivious File Backup and Synchronization
摘要：
不经意RAM（ORAM）协议是一种强大的技术，它可以隐藏客户端的数据以及不受信任的服务提供商的访问模式。我们提出了一个不经意的云存储系统，ObliviSync，专门针对最广泛使用的个人云存储范例之一：同步和备份服务，其中流行的例子是Dropbox，iCloud Drive和Google Drive。这种设置提供了一个独特的机会，因为上述隐私属性可以通过称为只写ORAM的更简单形式的ORAM来实现，与相关工作相比，它可以显著提高效率。我们的解决方案是渐近最优的，实际上是有效的，与非私有文件存储相比，大约4倍的小恒定开销，仅取决于根据使用率选择的总数据大小和参数，而不是单个文件的数量或大小。我们的建设还提供了对定时通道攻击的保护，这在ORAM协议中以前没有考虑过。我们构建并评估了ObliviSync的完整实现，该实现支持多个并发只读客户端和一个并发读/写客户端，其编辑自动无缝地传播到读者。我们表明，我们的系统在高工作负载下的功能，与现实的文件大小分布，并与小的额外延迟（与基线加密文件系统相比）时，与Dropbox作为同步服务配对。
英文摘要：
Oblivious RAM (ORAM) protocols are powerful techniques that hide a client's data as well as access patterns from untrusted service providers. We present an oblivious cloud storage system, ObliviSync, that specifically targets one of the most widely-used personal cloud storage paradigms: synchronization and backup services, popular examples of which are Dropbox, iCloud Drive, and Google Drive. This setting provides a unique opportunity because the above privacy properties can be achieved with a simpler form of ORAM called write-only ORAM, which allows for dramatically increased efficiency compared to related work. Our solution is asymptotically optimal and practically efficient, with a small constant overhead of approximately 4x compared with non-private file storage, depending only on the total data size and parameters chosen according to the usage rate, and not on the number or size of individual files. Our construction also offers protection against timing-channel attacks, which has not been previously considered in ORAM protocols. We built and evaluated a full implementation of ObliviSync that supports multiple simultaneous read-only clients and a single concurrent read/write client whose edits automatically and seamlessly propagate to the readers. We show that our system functions under high work loads, with realistic file size distributions, and with small additional latency (as compared to a baseline encrypted file system) when paired with Dropbox as the synchronization service.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
