Mobile Data Security with Attribute-based Encryption and Confidential Computing

Mobile devices have a significant value in individuals' lives by offering various applications and functions within a single device. Considering their widespread social use, mobile devices are alluring targets for amassing personal data, including photos, videos, identities, financial details, and passwords. Nonetheless, challenges such as mobility, connectivity, and device security restrictions can give rise to issues like data breaches, financial scams, privacy breaches, and unauthorized data utilization. This paper proposes a private data management system that applies confidential computing to enhance the user's personal data security and reliability. The proposal involves the employment of Attribute-based Encryption within a trusted execution environment (e.g., provided by the mobile device's TrustZone technology). This setup ensures encrypted data storage and manipulation, seamlessly integrated and fortified alongside other applications on the device. By implementing this private data management system, we aim to mitigate potential security risks and bolster user confidence in their transactions and interactions.