PRISMACLOUD

Privacy and Security Maintaining Cloud Services

With a current volume of over USD 100 billion and annual growth rates of over 10%, the world-wide market for cloud computing can be considered as the major growth area in ICT. However, big companies and public authorities are reluctant to entrust their most sensitive data to external parties for storage and processing. The reason for their hesitation is clear: There exist no satisfactory approaches to adequately protect the data during its lifetime in the cloud. PRISMACLOUD addresses these challenges and yields a portfolio of novel security enabled cloud services, guaranteeing the required security for sensitive data in the cloud.
Techniques for outsourcing computation with verifiable correctness and authenticity-preservation allow to securely delegate computations to cloud providers. A distributed multi-cloud data storage architecture shares data among several cloud providers and improves security and availability. Dynamically updating shares by means of novel techniques avoids vendor lock-in, preserves data authenticity, facilitates long term privacy and promotes a dynamic cloud provider market. Claims about the secure connection and configuration of the virtualized cloud infrastructures and properties of cloud topologies are verifiable by means of cryptographic techniques. User privacy issues are addressed by data minimization and anonymization technologies due to the application of privacy-preserving cryptographic techniques. As feasibility proof, three use cases from the fields of SmartCity, e-Government, and e-Health, will be implemented and evaluated by the project participants.
The PRISMACLOUD work program is complemented with activities addressing secure user interfaces, secure service composition, secure implementation in software and hardware, security certification, and an impact analysis from an end-user view. In order to converge with the European Cloud Computing Strategy, a strategy for the dissemination of results into standards is developed.

Project Members

Contact

Dr. Henrich Pöhls
Raum ITZ/IH 136
Innstr. 43

Tel.: +49(0)851/509-3217
Henrich.Poehls@uni-passau.de

Website

Sprechzeiten: Dienstags 15:00-17:00

2018

19.

L. Sell, H. C. Pöhls and T. Lorünser, "C3S: Cryptographically Combine Cloud Storage for Cost-Efficient Availability and Confidentiality" in Proceedings of the 10th International Conference on Cloud Computing Technology and Science (CLOUDCOM 2018) , IEEE , 2018.
http://henrich.poehls.com/papers/2018_SellPoehlsLoruenser_CostOfSecretSharedCloudStorage_IEEE-CloudCom.pdf

18.

S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Chameleon-Hashes with Dual Long-Term Trapdoors and Their Applications" in Progress in Cryptology (AFRICACRYPT 2018) , Springer , 2018. pp. 11--32.
DOI: https://doi.org/10.1007/978-3-319-89339-6_2
http://henrich.poehls.com/papers/2018_KrennPoehlsSamelinSlamanig_TrapdoorChamHash_AFRICACRYPT2018_full.pdf

17.

T. Lorünser, H. C. Pöhls, L. Sell and T. Länger, "CryptSDLC: Embedding Cryptographic Engineering into Secure Software Development Lifecycle" in Proceedings of the 13th International Conference on Availability, Reliability and Security (ARES 2018) , New York, NY, USA : ACM , 2018. pp. 4:1--4:9.
DOI: https://doi.org/10.1145/3230833.3233765
http://henrich.poehls.com/papers/2018_LoruenserPoehlsSellLaenger_CrypSDLC_ARES2018_preprint.pdf

16.

S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Protean Signature Schemes" in Proc. of the 17th conference on Cryptology and Network Security (CANS 2018) , Springer , 2018. pp. 256--276.
DOI: https://doi.org/10.1007/978-3-030-00434-7_13
http://henrich.poehls.com/papers/2018_KrennPoehlsSamelinSlamanig_SanitizableAndDeleteableSignature_CANS-full.pdf

2017

15.

J. Camenisch, D. Derler, S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Chameleon-Hashes with Ephemeral Trapdoors And Applications to Invisible Sanitizable Signatures" in Proc. of 20th IACR International Conference on Practice and Theory in Public-Key Cryptography (PKC 2017) , IACR , 2017. pp. 152--182.
DOI: https://eprint.iacr.org/2017/011
http://henrich.poehls.com/papers/2017_CDKPSS_chamhash_with_ephemeral_trapdoors_PKC-eprint.pdf

14.

H. C. Pöhls and T. Länger, "Einsetzbare Kryptografie für die Cloud" , Zeitschrift für Datenrecht und Informationssicherheit (digma) , vol. 17 , no. 1 , pp. 78--81 , 2017. Schulthess Juristische Medien .

13.

A. Bilzhause, H. C. Pöhls and K. Samelin, "Position Paper: The Past, Present, and Future of Sanitizable and Redactable Signatures" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 12th International Conference on Availability, Reliability and Security (ARES SECPID 2017) , Conference Publishing Services (CPS) , 2017.
http://henrich.poehls.com/papers/2017_BilzhausePoehlsSamelin_ARES17_RSS_SSS_PastPresentFuture.pdf

12.

M. Till Beck, J. Camenisch, D. Derler, S. Krenn, H. C. Pöhls, K. Samelin and D. Slamanig, "Practical Strongly Invisible and Strongly Accountable Sanitizable Signatures" in Proc. of 22nd Australasian Conference on Information Security and Privacy (ACISP 2017) , Springer , 2017. pp. 437--452.
DOI: https://eprint.iacr.org/2017/445.pdf
http://henrich.poehls.com/papers/2017_BCDKPSS_Practical-Strongly-Invisible-and-Strongly-Accountable-Sanitizable-Signatures_ACISP.pdf

2016

11.

A. Bilzhause, M. Huber, H. C. Pöhls and K. Samelin, "Cryptographically Enforced Four-Eyes Principle" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 11th International Conference on Availability, Reliability and Security (ARES SECPID 2016) , Conference Publishing Services (CPS) , 2016.
http://henrich.poehls.com/papers/2016_BilzhauseHuberPoehlsSamelin_4EyesPrinciple_ARES_SECPID.pdf

10.

C. Frädrich, H. C. Pöhls, W. Popp, N. Rakotondravony and K. Samelin, "Integrity and Authenticity Protection with Selective Disclosure Control in the Cloud and IoT" in Proc. of Information and Communications Security (ICICS 2016) , K.-Y. Lam et al., Eds. Springer , 2016.
http://henrich.poehls.com/papers/2016_SelectiveDisclosureControl_ICICS2016_full.pdf

T. Lorünser, D. Slamanig, T. Länger and H. C. Pöhls, "PRISMACLOUD Tools: A Cryptographic Toolbox for Increasing Security in Cloud Services" in Proc. of the Workshop on Security, Privacy, and Identity Management in the Cloudto be held at the 11th International Conference on Availability, Reliability and Security (ARES SECPID 2016) , Conference Publishing Services (CPS) , 2016.
http://henrich.poehls.com/papers/2016_LoruenserSlamanigLaengerPoehls_PRISMCLOUD-Architecture_SECPID_ARES.pdf

T. Länger, H. C. Pöhls and S. Ghernaouti, "Selected Cloud Security Patterns to Improve End User Security and Privacy in Public Clouds" in Privacy Technologies and Policy - 4th Annual Privacy Forum (APF 2016) , Springer , 2016.
http://henrich.poehls.com/papers/2016_LaengerPoehlsGhernaouti_SecurityPatternsForClouds_ENISA-APF.pdf

D. Derler, C. Hanser, H. C. Pöhls and D. Slamanig, "Towards Authenticity and Privacy Preserving Accountable Workflows" in {Privacy and Identity Management. Time for a Revolution? - Proc. of 10th IFIP WG 9.2, 9.5, 9.6/11.7, 11.4, 11.6/SIG 9.2.2 International Summer School} , Springer , 2016. pp. 170-186.
DOI: http://www.springer.com/de/book/9783319417622
http://henrich.poehls.com/papers/2015_DerlerHanserPoehlsSlamanig_Towards_Auth_Private_Accountable_Workflows.pdf

2015

D. Derler, H. C. Pöhls, K. Samelin and D. Slamanig, "A General Framework for Redactable Signatures and New Constructions" in {Proc. of 18th Annual International Conference on Information Security and Cryptology (ICISC 2015)} , Springer , 2015. pp. 3-19.
DOI: http://link.springer.com/content/pdf/10.1007%2F978-3-319-30840-1_1.pdf
http://henrich.poehls.com/papers/2015_DerlerPoehlsSamelinSlamanig-GeneralFrameworkForRedactableSignatures_ICISC.pdf

H. C. Pöhls and K. Samelin, "Accountable Redactable Signatures" in Proc. of the 10th International Conference on Availability, Reliability and Security (ARES 2015) , IEEE , 2015.
http://henrich.poehls.com/papers/2015_Poehls-Samelin_Accountable-Redactable-Signatures_ARES15.pdf

D. Demirel, D. Derler, C. Hanser, H. C. Pöhls, D. Slamanig and G. Traverso, "Overview of Functional and Malleable Signature Schemes (PRISMACLOUD Deliverable D4.4)" , 2015.
http://henrich.poehls.com/papers/2015_TechReport_PRISMACLOUD_D_4_4.pdf

E. Z. Tragos, H. C. Pöhls, R. C. Staudemeyer, D. Slamanig, A. Kapovits, S. Suppan, A. Fragkiadakis, G. Baldini, R. Neisse, P. Langendörfer, Z. Dyka and C. Wittke, "Securing the Internet of Things - Security and Privacy in a Hyperconnected World" in Building the Hyperconnected Society - IoT Research and Innovation Value Chains, Ecosystems and Markets , Ovidiu Vermesan and Peter Friess, Eds. River Publishers , 2015 , pp. 189-219.
http://henrich.poehls.com/papers/Building_the_Hyperconnected_Society_IERC_2015_Cluster_eBook_978-87-93237-98-8_P_Web.pdf

F. Geelkerken, H. C. Pöhls and S. Fischer-Hübner, "The legal status of malleable- and functional signatures in light of Regulation (EU) No910/2014" in {Proc. of 3rd International Academic Conference of Young Scientists on Law \& Psychology 2015 (LPS 2015)} , L'viv Polytechnic Publishing House , 2015. pp. 404-410.
https://drive.google.com/file/d/0B-Yu3Ni9z3PXM2lBajhCXzhoWk0/view

T. Lorünser, C. Bastos Rodriguez, D. Demirel, S. Fischer-Hübner, T. Gross, T. Länger, M. Noes, H. C. Pöhls, B. Rozenberg and D. Slamanig, "Towards a New Paradigm for Privacy and Security in Cloud Services" in New LEIT projects on Security-by-Design - 4th Cyber Security and Privacy EU Forum, CSP Forum 2015, Brussels, Belgium, April 28 - 29 , Springer , 2015.
DOI: http://arxiv.org/abs/1506.05980v2
http://henrich.poehls.com/papers/2015_DerlerPoehlsSamelinSlamanig-GeneralFrameworkForRedactableSignatures_ICISC.pdf