Secure File Sharing Platform Using Public Cloud

Abstract

This research project proposes a secure file sharing platform using public cloud storage of AWS S3 with end-to-end encryption. This implementation uses a hybrid architecture where Node.js is used as the backend with the AES-256 symmetric encryption for files and RSA public key encryption for key management using OpenSSL. The two-factor authentication with the access token and OTPs over SMS is used for decryption and download. Uploaders have the overall rights for revocation mechanism and administrators read only audit logs and system status with the Role Based Access Control. Performance Testing with Apache JMeter stress testing provided a consistent throughput and response rates with encryption overhead. The error rates were primarily because of intentional security features like rate limiting and access validation and not because of a system inefficiency. OWASP ZAP Security Scanning provided excellent protection and blocked 100% of over 1,800 simulated attacks like SQL injection, Cross site scripting, and Command injection attempts. The outcome exhibits excellent scalability, performance, and the balance of security. The platform is well suited to sensitive environments such as business, finance, and healthcare where secure auditable data exchange is critical.