Protection of Cloud Database Containing Personal Information Using Homomorphic Encryption

Abstract

In this article, we prove the possibility of using homomorphic encryption for protection of cloud database containing personal information in compliance with the existing normative legal acts on the protection of personal data. We reviewed existing implementations of homomorphic encryption algorithms. We substantiated ambivalent approach to the use of virtual server to store personal data and other valuable information assets of organization based on homomorphic encryption and GOST R 34.12.2015 "Information technology. Cryptographic protection of information. Block ciphers". We performed analysis of economic efficiency of approved model in the organization with and without use of cloud technologies. Our approach not only meets all the requirements of the Russian legislation, but also enables to obtain economic benefit by allowing to scale server at lower cost.