International Research Journal of Engineering and Technology (IRJET) Volume: 12 Issue: 04 | Apr 2024
www.irjet.net
e-ISSN: 2395-0056 p-ISSN: 2395-0072
TRUSTED WEB-BASED CLOUD STORAGE FOR SECURE DATA SHARING Mangina Umamaheswararao1, Ballanki Venu Gopal2, Chinthapalli Venu Gopal 3, Manukonda Satish 4, Veedhi Uday5, Valavala Surya Teja6 1CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101 2CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101 3CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101 4CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101 5CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101 6CST, Sri Vasavi Engineering College(A), Pedatadepalli,Tadepalligudem-534101
---------------------------------------------------------------------***--------------------------------------------------------------------only encrypted data, exposure from server-side Abstract - Public cloud storage, while offering cost
vulnerabilities is minimized. However, major cloud storage providers like Google Drive and Dropbox do not support built-in client-side encryption, relying instead on server-side measures. Apple iCloud employs end-to-end encryption only for select data types, leaving most stored information vulnerable to potential breaches. Several encryption techniques have been employed to enhance cloud security. Password-based encryption, often utilizing symmetric encryption algorithms like AES, is a common approach. However, it suffers from vulnerabilities due to low-entropy passwords, making brute-force attacks feasible. Additionally, such methods typically support only single-user encryption, limiting secure file-sharing capabilities. Hybrid encryption, integrating a Key Encapsulation Mechanism (KEM) and a Data Encapsulation Mechanism (DEM), is another widely used approach. Public cloud providers such as Amazon, Tresorit, and Mega implement the RSA-AES model, where data is encrypted using AES, and encryption keys are secured with RSA public keys. However, this approach has drawbacks, including inefficiencies in managing recipient public keys, increased cipher text size, and higher computational costs when sharing data with multiple users.
reduction and accessibility, presents significant security risks due to potential data breaches and server-side vulnerabilities. Client-side encryption is a promising solution, but current implementations often suffer from limitations, including poor security due to weak passwordbased encryption, inflexible hybrid encryption schemes, and usability issues stemming from required software installations. This paper identifies the shortcomings of existing client-side encryption approaches, such as limited file-sharing capabilities and coarse-grained access control. To address these challenges, we propose a trusted webbased cloud storage system designed to enhance data protection, control unauthorized access, and facilitate secure file sharing while preserving data integrity and confidentiality. This system aims to provide a secure, efficient, and user-friendly solution, mitigating the security and usability drawbacks of current cloud storage encryption methods.
Key Words: Public Cloud Storage, Cryptographic Techniques, Unauthorized Access Prevention, Encryption Algorithms, Secure File Sharing 1. INTRODUCTION Public cloud storage services have gained widespread adoption due to cost efficiency and ease of use, prompting individuals and organizations to store and share data online. However, this reliance on cloud providers raises significant security concerns, as sensitive data is often stored unencrypted, making it vulnerable to breaches and unauthorized access. While cloud providers implement server-side encryption, transport-layer security (TLS), and authentication mechanisms, these measures do not fully eliminate the risks associated with insider threats, misconfigurations, or cyberattacks. To mitigate these risks, client-side encryption has emerged as a robust solution, ensuring that data is encrypted before being uploaded and only decrypted by authorized users. Since the cloud provider stores
© 2025, IRJET
|
Impact Factor value: 8.315
Figure 1.1: System Architecture
|
ISO 9001:2008 Certified Journal
|
Page 585