Enforcing Data Geolocation Policies in Public Cloud using Trusted Computing

Syed Zair Abbas; Mudassar Aslam

Paper 2023/999 Original: eprint.iacr.org/2023/999 ↗

Enforcing Data Geolocation Policies in Public Cloud using Trusted Computing

Syed Zair Abbas

Mudassar Aslam

Abstract

With the advancement in technology, Cloud computing always amazes the world with revolutionizing solutions that automate and simplify complex computational tasks. The advantages like no maintenance cost, accessibility, data backup, pay-per-use models, unlimited storage, and processing power encourage individuals and businesses to migrate their workload to the cloud. Despite the numerous advantages of cloud computing, the geolocation of data in the cloud environment is a massive concern, which relates to the performance and government legislation that will be applied to data. The unclarity of data geolocation can cause compliance concerns. In this work, we have presented a technique that will allow users to restrict the geolocation of their data in the cloud environment. We have used trusted computing mechanisms to attest the host and its geolocation remotely. With this model, the user will upload the data whose decryption key will be shared with a third-party attestation server only. The decryption key will be sealed to the TPM of the host after successful attestation guaranteeing the authorized geolocation and platform state.

Metadata

Available format(s): PDF
Category: Applications
Publication info: Preprint.
History: 2023-06-27: last updated; 2023-06-27: published
Short URL: https://ia.cr/2023/999
License: https://creativecommons.org/licenses/by-nc-nd/4.0/

BibTeX

@misc{cryptoeprint:2023/999,
      author = {Syed Zair Abbas and Mudassar Aslam},
      title = {Enforcing Data Geolocation Policies in Public Cloud using Trusted Computing},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/999},
      year = {2023},
      url = {https://eprint.iacr.org/2023/999}
}