Secure and Resilient Cloud Architecture

Final release of the secure block device with available extensions.

Initial implementation and report of the vulnerability-tolerant channel mechanism, the protection services, the route monitoring mechanism, and the multi-path communication mechanism.

Final implementation and report of the work package including the final architecture, middleware design, APIs and protocols, after the experience gained with the integration with the use cases and experimental evaluation.

This deliverable consists of the software developed in T4.2, T4.3 and T4.4 so far. It provides a release of SafeCloud API targeted towards a single cloud provider and without support for elasticity requirements. It offers a restricted set of novel multi-party computation protocols for use by the Sharemind applications. It features the integration of Secure Key Value Store and Sharemind, and the ability to access the former through a SafeCloud library by applications deployed on Sharemind.

Report describing the means of integrating secret-sharing based and order-preserving encryption-based secure multiparty computation methods in privacy-preserving applications.

Software package for the improved secure block device. Anti-tampering and data integrity can be provided quickly after the data has been stored.

Software package of the final release of the Secure SQL Engine component. This version will support elastic environments and will offer a richer set of processing operations.

Software package of the final release of the Secure Key Value Store component with elastic capabilities.

First prototype of the Cloud&Heat SafeCloud-based cloud storage platform with support for short-term and long-term data integrity. The storage extensions and performance optimizations are not yet available.

Implementation of the secure file system.

Final implementation and deployment of the MAXDATA SafeCloud-based healthcare platform use case with support for all the privacy and performance optimization features.

Final implementation and deployment of the Cloud&Heat SafeCloud-based cloud storage platform use case with support for all the privacy and performance optimization features.

First prototype of the Maxdata SafeCloud-based healthcare platform with non-elastic Secure Key Value Store and restricted SQL engine. Elasticity and advanced processing operations are not yet available.

Software package of an initial release of the Secure SQL Engine component. This version will not support elastic settings and will offer a restricted set of basic processing operations.

Report describing the data partitioning and secure multi-party computation techniques, algorithms, combination challenges and tradeoffs.

Software package of an initial release of the Secure Key Value Store component with the privacy-preserving functionality but still without elasticity.

This is the final software release of the SafeCloud platform, offering full support for different cloud providers, and for privacy, integrity, efficiency and elasticity requirements and tradeoffs. It includes the data partitioning schemes and secure multiparty computation protocols developed in T3.2 and T3.3, fully supporting the requirements of the secure SQL engine.

Report describing the refined and extended design and architecture of the privacy-preserving storage and computation components. This includes the dynamic system aspects considered in Task 3.3 and the description of their inclusion in the the Secure Key Value Store and Secure SQL Engine components.

Report describing the design and architecture of the privacy-preserving storage and computation components.

Report of the functional specifications of each component and service of the SafeCloud architecture.

Initial report summarizing the storage legal aspects of SafeCloud. This includes a list of constraints and features that must be added and implemented in SafeCloud, for instance clear temporal and technical guidelines on how to manage the legitimate destruction of archived data.

Proceedings of the second project's Workshop.

This document will provide detailed information about the recruitment of participants, the nature of the data collected, the informed consent procedures that will be implemented (with examples of Informed Consent Forms and Information Sheets), the procedures that will be implemented for data collection, storage, protection, retention and destruction, and their compliance with national and EU legislations, in the scope of the project’s market data collection efforts.

This deliverable describes the design and requirements of the MAXDATA SafeCloud-based healthcare platform use case and how it will be integrated into SafeCloud.

Description and implementation of the long-term secure block device. Long term means that strong antitampering and data integrity can be provided once the data has been stored for a long period of time in the system.

Proceedings of the first project's Workshop.

Presents a preliminary design of the secure communication middleware, including requirements and architecture.

Initial report describing the chosen storage architecture, the secure block device, and its link to the secure file system.

This deliverable describes the design and requirements of the Cloud&Heat SafeCloud-based cloud storage platform use case and how it will be integrated into SafeCloud.

Includes initial press releases, media kit, branding, success stories, press material.

The SafeCloud website will be launched and regularly updated.

Author(s): Dorian Burihabwa
Published in: Proceedings of the Phd Forum of SRDS 2016 (35th IEEE International Symposium on Reliable Distributed Systems), 2016