Dragonfruit: Cloud Provider-Agnostic Trustworthy Cloud Data Storage and Remote Processing

Abstract

Trustworthy cloud services require practical secure storage and data processing techniques that enable end-users to upload sensitive data and perform computations remotely without having to first download the data. In this paper, we present Dragon fruit, a cloud provider-agnostic searchable cloud data storage solution, that allows the utilization of several existing cloud providers, and the execution of search queries over encrypted data by customers, using unmodified cloud infrastructures. In particular, Dragon fruit makes use of filename search capabilities that most existing cloud providers support to embed searchable data within the cloud. Dragon fruit supports queries using complex Boolean expressions on structured data formats such as JSON. Our evaluation on a real-world test-bed show that Dragon fruit is able to work with several cloud providers such as Google-Drive and Drop box simultaneously and is able to respond to search requests within a few seconds proving a reasonable performance overhead for practical usage.