Prov-trust: towards a trustworthy SGX-based data provenance system

Nesrine Kaaniche (1, 2, 3, 4) , Sana Belguith (5) , Maryline Laurent (1, 2, 6) , Ashish Gehani (7) , Giovanni Russello (8)

1 IP Paris - Institut Polytechnique de Paris
2 TSP - RST - Département Réseaux et Services de Télécommunications
3 SCN-SAMOVAR - Sécurité et Confiance Numérique
4 Department of Computer Science [Sheffield]
5 University of Salford
6 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité
7 SRI - SRI International [Menlo Park]
8 University of Auckland [Auckland]

Data provenance refers to records of the inputs, entities, systems, and processes that influence data of interest, providing a historical record of the data and its origins. Secure data provenance is vital to ensure accountability, forensics investigation of security attacks and privacy preservation. In this paper, we propose Prov-Trust, a decentralized and auditable SGX-based data provenance system relying on highly distributed ledgers. This consensually shared and synchronized database allows anchored data to have public witness, providing tamper-proof provenance data, enabling the transparency of data accountability, and enhancing the secrecy and availability of the provenance data. Prov-Trust relies on Intel SGX enclave to ensure a trusted execution of the provenance kernel to collect, store and query provenance records. The use of SGX enclave protects data provenance and users' credentials against malicious hosting and processing parties. Prov-Trust does not rely on a trusted third party to store provenance data while performing their verification using smart contracts and voting process. The storage of the provenance data in Prov-Trust is done using either the log events of Smart Contracts or blockchain's transactions depending on the provenance change event, which enables low storage costs. Finally, Prov-Trust ensures an accurate privacy-preserving auditing process based on blockchain traces and achieved thanks to events' logs that are signed by SGX enclaves, transactions being registered after each vote session, and sealing the linking information using encryption schemes.

Mots clés: Intel SGX Privacy Preserving Data Provenance Blockchain Data Integrity Kaaniche N. Belguith S. Laurent M. Gehani A. and Russello G. Prov-Trust: Towards a Trustworthy SGX-based Data Provenance System; Intel SGX; Privacy Preserving; Data Provenance; Blockchain; Data Integrity Kaaniche; N.; Belguith; S.; Laurent; M.; Gehani; A. and Russello; G. Prov-Trust: Towards a Trustworthy SGX-based Data Provenance System; Intel SGX privacy preserving data provenance blockchain data integrity; privacy preserving; data provenance; blockchain; data integrity

Domaines: Informatique [cs]; Cryptographie et sécurité [cs.CR]

Nesrine Kaaniche, Sana Belguith, Maryline Laurent, Ashish Gehani, Giovanni Russello. Prov-trust: towards a trustworthy SGX-based data provenance system. 17th International Conference on Security and Cryptography (SECRYPT), Jul 2020, Lieusaint - Paris, France. pp.225-237, ⟨10.5220/0009889302250237⟩. ⟨hal-03991163⟩