PKI-based cryptography for secure cloud data storage using ECC

It is widely accepted cloud storage provides a lot of benefits to its users by significantly reducing the burden of storage and computation. However unlike traditional data storage systems, cloud data is produced, transferred and stored at off-premise multi-tenant storage systems. This increases the vulnerability of unauthorized disclosure and unauthorized modification. Hence without appropriate security and privacy solution in place it will cause some critical data security problems to its users. In this paper we address the security issues of storing private and sensitive data in the cloud storage service and proposed a PKI-based Cryptography scheme for cloud storage. Our scheme has several advantages. First it can ensure the users have the identity they claim in the virtual cloud storage world. Second, it secures the data during its entire life-cycle; the whole process doesn't reveal the clear data to any third party including the cloud provider. Third, it offers controlled data access and sharing among users, so that unauthorized users or untrusted servers can't access or search over data without data owner's authorization. At last, we apply ECC for all the cryptographic operations of our scheme, which provides low computation and communication cost as well as less key-size to provide same level of security as of RSA, and thus it makes our scheme more efficient.