Clilets: Web Applications with Secure Client-Side Storage

Abstract

Today’s web applications require that all data be visible to the server. This is a problem in cases, such as a Web Tax service, where the user may not trust the server with the data. We present the Clilet system, a new web application system that allows sensitive data to be stored securely on the client yet still accessed by the web application. The system ensures that this data is not transmitted to the server, even though no trust is shared between client and server. We have built a working prototype.