Secure Deduplication with Efficient and Reliable Convergent Key Management
Secure Deduplication with Efficient and Reliable Convergent Key Management
复制标题
通过高效可靠的融合密钥管理实现安全重复数据删除
DOI：
10.1109/tpds.2013.284
复制
发表时间：
2014-06-01
影响因子：
5.3
通讯作者：
Lou, Wenjing
中科院分区：
文献类型：
--
作者：
Li, Jin;Chen, Xiaofeng;Lou, Wenjing
数据删除是一种消除数据重复副本的技术，已广泛应用于云存储中，以减少存储空间和上传带宽。尽管前景看好，但一个新的挑战是在云存储中执行安全备份。虽然收敛加密已被广泛采用的安全加密，使收敛加密实用的一个关键问题是有效和可靠地管理大量的收敛密钥。第一次尝试正式解决的问题，实现有效和可靠的密钥管理安全密钥管理。我们首先介绍一种基线方法，在这种方法中，每个用户都持有一个独立的主密钥，用于加密收敛密钥并将其外包给云。然而，这样的基线密钥管理方案随着用户数量的增加而产生大量的密钥，并且要求用户专门保护主密钥。为此，我们提出Dekey，一个新的结构，用户不需要管理自己的任何密钥，而是安全地分布在多个服务器的收敛密钥共享。安全性分析表明，Dekey是安全的定义在建议的安全模型。收敛加密，也称为内容散列键控，是一种从相同的明文文件生成相同密文的密码系统。这在云中有应用
Data Deduplication is a technique for eliminating duplicate copies of data, and has been widely used in cloud storage to reduce storage space and upload bandwidth. Promising as it is, an arising challenge is to perform secure Deduplication in cloud Storage. Although convergent encryption has been extensively adopted for secure Deduplication, a critical issue of making convergent encryption practical is to efficiently and reliably manage a huge number of convergent keys. The first attempt to formally address the problem of achieving efficient and reliable key management in secure Deduplication. We first introduce a baseline approach in which each user holds an independent master key for encrypting the convergent keys and outsourcing them to the cloud. However, such a baseline key management scheme generates an enormous number of keys with the increasing number of users and requires users to dedicatedly protect the master keys. To this end, we propose Dekey, a new construction in which users do not need to manage any keys on their own but instead securely distribute the convergent key shares across multiple servers. Security analysis demonstrates that Dekey is secure in terms of the definitions specified in the proposed security model. Convergent encryption, also known as content hash keying, is a cryptosystem that produces identical cipher text from identical plaintext files. This has applications in cloud