An End-to-End Encryption Solution for Enterprise Content Applications
Chaoting Xuan

TL;DR
This paper introduces an end-to-end encryption system for enterprise content applications that ensures user data remains private from administrators and hackers, with secure key recovery and granular access control.
Contribution
It presents a novel E2EE method with master secret escrow and a privacy-preserving content encryption scheme integrated into existing enterprise hosting services.
Findings
Supports secure data storage and sharing in enterprise environments.
Enables master secret recovery without compromising security.
Compatible with major content hosting services.
Abstract
The content host services (like Dropbox, OneDrive, and Google Drive) used by enterprise customers are deployed either on premise or in cloud. Because users may store business-sensitive data (contents) in these hosting services, they may want to protect their data from disclosure to anyone else, even IT administrators. Unfortunately, even contents (files) are encrypted in the hosting services, they sometimes are still accessible to IT administrators today. The sensitive data could be exposed to public if the IT administrator turns malicious (like disgruntled employee) or his account is compromised by hackers. We propose an end-to-end encryption (E2EE) solution to address this challenge. The user data is encrypted at client side (mobile device) and remains encrypted in transit and at rest on server. Specifically, we design a new method to allow master secret recover and escrow, while…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCryptography and Data Security · Cloud Data Security Solutions · Digital Rights Management and Security
