PASSAT：具有服务器透明性的单密码认证秘密共享入侵容忍存储
PASSAT: Single Password Authenticated Secret-Shared Intrusion-Tolerant Storage with Server Transparency
摘要：
在本文中，我们介绍了PASSAT，一个实用的系统，以提高目前的云架构提供的安全保证，而不需要任何改变或合作的云服务提供商。PASSAT是一个对云服务器透明的应用程序，允许用户基于单个主密码安全有效地存储和访问存储在公共云存储上的文件。PASSAT采用快速、轻量级的XOR秘密共享方案，将用户的文件秘密共享，并将其分发到n个公开可用的云平台。为了访问文件，PASSAT与n个云平台中的任意k个进行通信以接收共享，并运行秘密共享重建算法来恢复文件。与少于k个平台妥协或勾结的攻击者（内部或外部）无法了解用户的文件或偷偷修改文件。为了向多个云平台验证用户身份，PASSAT将每个平台特有的验证凭证存储在密码管理器中，并受用户主密码的保护。在请求访问文件时，用户输入密码解锁保险库，并获取PASSAT可用于与云存储交互的身份验证令牌。我们基于Kurihara等人的（2，3）-XOR秘密共享的PASSAT实例，与三个流行的存储提供商，即谷歌驱动器，盒子和Dropbox的实施，证实了我们的方法可以有效地提高存储文件的机密性，完整性和可用性，而无需在服务器上进行更改。
英文摘要：
In this paper, we introduce PASSAT, a practical system to boost the security assurance delivered by the current cloud architecture without requiring any changes or cooperation from the cloud service providers. PASSAT is an application transparent to the cloud servers that allows users to securely and efficiently store and access their files stored on public cloud storage based on a single master password. Using a fast and light-weight XOR secret sharing scheme, PASSAT secret-shares users' files and distributes them among n publicly available cloud platforms. To access the files, PASSAT communicates with any k out of n cloud platforms to receive the shares and runs a secret-sharing reconstruction algorithm to recover the files. An attacker (insider or outsider) who compromises or colludes with less than k platforms cannot learn the user's files or modify the files stealthily. To authenticate the user to multiple cloud platforms, PASSAT crucially stores the authentication credentials, specific to each platform on a password manager, protected under the user's master password. Upon requesting access to files, the user enters the password to unlock the vault and fetches the authentication tokens using which PASSAT can interact with cloud storage. Our instantiation of PASSAT based on (2, 3)-XOR secret sharing of Kurihara et al., implemented with three popular storage providers, namely, Google Drive, Box, and Dropbox, confirms that our approach can efficiently enhance the confidentiality, integrity, and availability of the stored files with no changes on the servers.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
