Skip to content
Free planNo credit card requiredStart writing
AI for Research home
AI for Research home
Dashboard
Sign inGet started

Search 250 million research papers

Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.

About 718 papers for “Client-side encryption”

ANALYZING CLIENT-SIDE ENCRYPTION IMPLEMENTED IN CRYPTDB

Mira Maisura · Cyberspace Jurnal Pendidikan Teknologi Informasi · 2018

Client side encryption has become one of the choice for data security in outsourced database as it is believed to provide more security than the server side encryption. It allows users to protect their data and prohibit access to that data from unauthorized user. Here, key use for encryption and decryption are all belong and known only to the user. On the other words, data stored in the database are all in encrypted form. CryptDB, a new cryptographic technique, where the system acts as a proxy to protect the communication between the application server and database server, implementing the idea. The aim of this study is to look into more detail about the encryption scheme implemented in CryptDB in 2 different case study, using SEARCH command with the condition given. The result of the study will present how the statement change with the act of proxy, and the encryption scheme implemented here.

Cited by 0Open access

Toward Practical Client-Side Encryption in Cloud Computing

Robert H. Deng · 2024

Data breaches in the cloud are on the rise and are becoming more costly to organizations each year. Client-side encryption refers to the practice of encrypting data on end users' devices before uploading it to the cloud. This approach ensures that data is encrypted during transit and storage, making data inaccessible to anyone without the decryption keys, including service providers and other potential attackers. In this talk, we will first look at the challenges of client-side encryption and provide an overview of the key advancements as well as setbacks in addressing these challenges in the past two decades, including scalable access of encrypted data and search over encrypted data. There are numerous academic publications in this area and the choice of which techniques to use could have significant impact on the system's security, efficiency, and usability. Finally, we will present our design and implementation of a client-side encryption system for enterprise users.

Cited by 0Open access

Simple client-side encryption of personal information with Web Assembly

Marco Falda, Angela Grassi · arXiv (Cornell University) · 2023

The HTTPS protocol has enforced a higher level of robustness to several attacks; however, it is not easy to set up the required certificates on intranets, nor is it effective in the case the server confidentiality is not reliable, as in the case of cloud services, or it could be compromised. A simple method is proposed to encrypt the data on the client side, using Web Assembly. It never transfers data to the server as clear text. Searching fields in the server is made possible by an encoding scheme that ensures a stable prefix correspondence between ciphertext and plaintext. The method has been developed for a semantic medical database, and allows accessing personal data using an additional password while maintaining non-sensitive information in clear form. Web Assembly has been chosen to guarantee the fast and efficient execution of encrypting/decrypting operations and because of its characteristic of producing modules that are very robust against reverse engineering. The code is available at https://github.com/mfalda/client-encdec.

Cited by 0Open access

Framework for client side AES encryption technique in cloud computing

Niteen Surv, Balu Wanve, Rahul D. Kamble et al. · 2015

Now a days, cloud computing is most popular network in world. Cloud computing provides resource sharing and online data storage for the end users. In existed cloud computing systems there are many security issues. So, security becomes essential part for the data which is stored on cloud. To solve this problem we have proposed this paper. This paper presents client side AES encryption and decryption technique using secret key. AES encryption and decryption is high secured and fastest technique. Client side encryption is an effective approach to provide security to transmitting data and stored data. This paper proposed user authentication to secure data of encryption algorithm with in cloud computing. Cloud computing allows users to use browser without application installation and access their data at any computer using browser. This infrastructure guaranteed to secure the information in cloud server.

Cited by 26

A Secure and Efficient Client-Side Encryption Scheme in Cloud Computing

Tania Gaur, Divya Sharma · International Journal of Wireless and Microwave Technologies · 2016

Computation process has changed itself from desktop computing to cluster computing and to grid computing and now a days it goes towards cloud computing. In today's trend, Cloud computing is being preferred by majority of the organization because of its major advantages in terms of scalability and multi tenancy. Among all these advantageous features of cloud computing, the only hitch is the security of the data that is stored in the cloud. The security clause rests with the cloud service provider but security can be applied on client side also and it is possible if the user knows how his data is secured. This paper proposes a mechanism which can help the user to ensure the security of his data at the client-side.

Cited by 10Open access

Client-Side Encryption Based Secure Data Sharing Schemes for Cloud Platforms

B. Rama Murthi · International Journal for Research in Applied Science and Engineering Technology · 2023

Abstract: With more and more data moving to the cloud, privacy of user data have raised great concerns. Client-side encryption/decryption seems to be an attractive solution to protect data security, however, the existing solutions encountered three major challenges: low security due to encryption with low-entropy PIN, inconvenient data sharing with traditional encryption algorithms, and poor usability with dedicated software/plugins that require certain types of terminals. This work designs and implements Web Cloud, a practical browser-side encryption solution, leveraging modern Web technologies. It solves all the above three problems while achieves several additional remarkable features: robust and immediate user revocation, fast data processing with offline encryption and outsourced decryption. Notably, our solution works on any device equipped with a Web user agent, including Web browsers, mobile and PC applications. We implement Web Cloud based on own Cloud for basic file management utility, and utilize Web Assembly and Web Cryptography API for complex cryptographic operations integration. Finally, comprehensive experiments are conducted with many well-known browsers, Android and PC applications, which indicates that WebCloud is cross-platform and efficient. As an interesting by-product, the design of Web Cloud naturally embodies a dedicated and practical ciphertext- policy attribute-based key encapsulation mechanism (CP-AB-KEM) scheme, which can be useful in other applications

Cited by 0Open access

A Secure Client-Side Deduplication Scheme Based on Updatable Server-Aided Encryption

Guanxiong Ha, Chunfu Jia, Yuchen Chen et al. · IEEE Transactions on Cloud Computing · 2023

The server-aided encryption is widely used in encrypted deduplication systems to protect against brute-force attacks. However, it is non-trivial to update the master key managed by the key server in existing schemes. Once the master key is leaked, all user data are vulnerable to offline brute-force attacks. In this article, we extend the server-aided encryption with the updatable encryption (UE) and a dynamic proof of ownership (PoW) protocol to make it support efficient key updates and can be used in the client-side deduplication. Specifically, we design an updatable server-aided encryption scheme based on UE, which achieves efficient encryption and the user-transparent key update for a system-level master key. Besides, to further enable our updatable server-aided encryption to be applicable to the client-side deduplication, we propose a dynamic PoW protocol based on the Merkle tree. Compared to the state-of-the-art PoW scheme, our PoW protects data privacy and allows multi-time leakages for the target file. Finally, we analyze the security of our scheme and present the performance evaluation. The results show that our scheme provides comprehensive security protection for user data and achieves efficient encryption, PoW, and key update.

Cited by 19

Multi-Layer Authentication with Neural Biometrics for Secure Client-Side File Encryption

Rupinder Kaur, Rudransh Shukla, Anshu Kumari et al. · International Journal of Computer Sciences and Engineering · 2025

International Journal of Computer Sciences and Engineering (A UGC Approved and indexed with DOI, ICI and Approved, DPI Digital Library) is one of the leading and growing open access, peer-reviewed, monthly, and scientific research journal for scientists, engineers, research scholars, and academicians, which gains a foothold in Asia and opens to the world, aims to publish original, theoretical and practical advances in Computer Science,Information Technology, Engineering (Software, Mechanical, Civil, Electronics & Electrical), and all interdisciplinary streams of Computing Sciences. It intends to disseminate original, scientific, theoretical or applied research in the field of Computer Sciences and allied fields. It provides a platform for publishing results and research with a strong empirical component. It aims to bridge the significant gap between research and practice by promoting the publication of original, novel, industry-relevant research.

Cited by 0Open access

Comparing Client- & Server-Side AEAD Encryption in Software-Defined Storage Systems

David Mohren, Minh Truong, Brett Kelly et al. · 2025

To provide data confidentiality and establish data integrity with minimal performance overhead, “Authenticated Encryption with associated data” (AEAD) ciphers have become mandatory for implementing transport security in TLS 1.3. However, these ciphers have yet to find wide-range adoption within the domain of security at rest. This is problematic since software-defined storage (SDS) systems provide even smallscale organizations with a cost-effective method of storing large amounts of data. At present, AEAD ciphers at rest are most commonly used to encrypt objects in the object stores of AWS, Azure, and Google Cloud. However, these ciphers are not applied to client-side encryption for other storage formats, such as block or file storage, resulting in asymmetric security guarantees across storage services. On the server-side, AEAD encryption has, to the best of our knowledge, also not been widely adopted. Since neither AEAD encryption on the client- nor server-side has seen a wide-range adoption, this paper compares the benefits and downsides of employing AEAD encryption on the client- or server-side within SDS systems. To establish this comparison, we implemented a client-side and server-side encryption approach in the widely adopted Ceph SDS system. Our study demonstrates that incorporating AEAD ciphers can be achieved with a write performance loss of less than $5 \%$, while ensuring a higher security level than traditional encryption-at-rest approaches. Most importantly, we managed to achieve these security gains for data stored in all available storage formats in Ceph.

Cited by 0

TriFusion: A Client-Side Multi-Modal Encryption System with Double-Layer Security

Chimakurthy Mounika Begum, Kamalapuram Vigneswara Reddy, Adhi Neeraja et al. · 2025

With the increased fear of data breaches and unauthorized access with provision of confidentiality and integrity in information has become paramount. The paper introduces the TriFusion System a complete client-side, browser-based encryption and decryption platform with multi-layered security approach. It contains a proprietary double-layer encryption process dependent on Armstrong number transformations, and RGB color mappings that introduce complexity and randomness to make it immune to cryptographic attacks. It provides multi-key generation with password based approach, biometric image based approach and a hybrid approach for security and personalization. In order to maintain data integrity, The system employs a SHA-256 hash and saves it into the encrypted file in order to detect tampering during decryption. The TriFusion System executes only within the user’s web browser, independent of any server interaction, therefore completely avoiding the hazards related to transmission of data or centralized storage. Exploratory tests prove its robustness, scalability, and usability for secure file management for local and portable environments.

Cited by 0

Improved cloud security trust on client side data encryption using HASBE and Blowfish

N. Jayapandian, A. M. J. Md. Zubair Rahman, R. B. Sangavee et al. · 2016

Cloud computing has emerged as one of the most authoritative paradigms in the IT industry. In such area confidentiality, flexibility and access control of data are to be considered. Anyhow the data owners and service providers will not be on the same domain, the data will be stored in storage by the service providers. Most of the enterprises use firewalls to protect data against intruders,that they have stored in their internal storage. In order to build the belief in the development of cloud computing the cloud providers must defend the user data from unauthorized access and exposure. The best approach is encrypting the data on client side before storing it in cloud storage, however, this technique has a much infirmity from the client side in terms of key management, maintenance perspective, etc. Other way could be this kind of security service like Hierarchical Attribute Set Based Encryption, encryption/decryption service if provided by same cloud storage provider, the data negotiating cannot be ruled out since same provider has access to both storage and security service. Customer relationship management for business model that is driven by the type of software as a service method in the cloud. Implementing the scheme and showing that it is both efficient and flexible in dealing with access control for subcontracted data and encryption/decryption operations shows from top to bottom protected and operative way for retrieving data in a cloud environment.

Cited by 10

<tt>Crypt4GH-JS</tt>: securely storing sensitive data online with client-side encryption

Fabienne Thelen, Jannis Hochmuth, Sven Griep et al. · Bioinformatics · 2024

Crypt4GH-JS can be installed via Node Package Manager (https://www.npmjs.com/package/crypt4gh_js) or through its public GitHub Repository (https://github.com/fathelen/crypt4ghJS), where the source code is available. Crypt4GH-JS can be tested in the browser using our demonstration website, which can be found at: https://fathelen.github.io/crypt4ghJS/.

Cited by 0Open access

Secure Front-End Automation Framework (SFAF): Client-Side Encryption and Zero Trust API Interaction

Yuliia Horbenko · Zenodo (CERN European Organization for Nuclear Research) · 2026

This record presents the Secure Front-End Automation Framework (SFAF), an original security architecture developed by the author that integrates client-side data encryption with Zero Trust API interaction. The framework addresses critical client-side security vulnerabilities in modern web applications by enforcing continuous verification and encrypted data handling directly in the browser. The proposed approach was validated through experimental testing and statistical analysis, demonstrating a significant reduction in unauthorized API interactions and improved compliance with OWASP Top 10 security benchmarks without materially degrading system performance. ›This work contributes to the academic and professional discourse on secure front-end engineering and provides a practical model for developing scalable, Zero Trust–compliant web applications.

Cited by 0Open access

Aloha-HE: A Low-Area Hardware Accelerator for Client-Side Operations in Homomorphic Encryption

Florian Krieger, Florian Hirner, Ahmet Can Mert et al. · Zenodo (CERN European Organization for Nuclear Research) · 2024

Homomorphic encryption (HE) has gained broad attention in recent years as it allows computations on encrypted data enabling secure cloud computing. Deploying HE presents a notable challenge since it introduces a performance overhead by orders of magnitude. Hence, most works target accelerating server-side operations on hardware platforms, while little attention has been given to client-side operations. In this paper, we present a novel design methodology to implement and accelerate the client-side HE operations on area-constrained hardware. We show how to design an optimized floating-point unit tailored for the encoding of complex values. In addition, we introduce a novel hardware-friendly algorithm for modulo-reduction of floating-point numbers and propose various concepts for achieving efficient resource sharing between modular ring and floating-point arithmetic. Finally, we use this methodology to implement an end-to-end hardware accelerator, Aloha-HE, for the client-side operations of the CKKS scheme. In contrast to existing work, Aloha-HE supports both encoding and encryption and their counterparts within a unified architecture. Aloha-HE achieves a speedup of up to 59 x compared to prior hardware solutions.

Cited by 6Open access