Sealed storage for trusted cloud computing

Abstract

In cloud computing, cloud user's sensitive data is in the control of a third part, which will lead to considerable risk on the privacy and security of the data. To address this problem we propose a trusted cloud computing platform with sealed storage ability (TSSC). TSSC enable Infrastructure as a Service provider (IaaS) such as Amazon EC2 to provide remote attestation to the IaaS user by an attestation delegation server and seal the IaaS user's sensitive data with their desired integrity of the IaaS configuration. We implement our solution on Xen, and present a simple prototype based Nimbus. Our evaluation results show that the performance overhead of the solution is acceptable.