Secure Encrypted Data with Authorized Deduplication in Cloud
Secure Encrypted Data with Authorized Deduplication in Cloud
复制标题
通过云中授权的重复数据删除保护加密数据
DOI：
10.1109/access.2019.2920998
复制
发表时间：
2019
期刊：
影响因子：
3.9
通讯作者：
Zhiqiang Yao
中科院分区：
文献类型：
--
作者：
Jinbo Xiong;Yuanyuan Zhang;Shaohua Tang;Ximeng Liu;Zhiqiang Yao
本文提出了一种新的安全角色重加密系统（SRRS），该系统基于收敛加密和角色重加密算法来防止云环境下的隐私数据泄露，并实现了授权去重和动态权限更新与撤销。同时，该系统支持所有权检查，有效地实现了授权用户的所有权证明。具体来说，我们引入了一个管理中心来处理授权请求，并建立一个角色授权树（RAT）来映射角色和密钥之间的关系。通过采用收敛加密算法和角色重加密技术，可以保证只有拥有相应角色重加密密钥的授权用户才能访问特定文件而不发生任何数据泄漏。通过角色重加密密钥的更新和撤销，实现了授权用户权限的动态更新。此外，我们利用动态计数过滤器（DCF）来实现数据更新，并有效地提高了所有权验证的检索。我们进行了安全性分析和仿真实验，以证明我们提出的系统的安全性和效率。
In this paper, we propose a novel secure role re-encryption system (SRRS), which is based on convergent encryption and the role re-encryption algorithm to prevent the privacy data leakage in cloud and it also achieves the authorized deduplication and satisfies the dynamic privilege updating and revoking. Meanwhile, our system supports ownership checking and achieves the proof of ownership for the authorized users efficiently. Specifically, we introduce a management center to handle with the authorized request and establish a role authorized tree (RAT) mapping the relationship of the roles and keys. With the convergent encryption algorithm and the role re-encryption technique, it can be guaranteed that only the authorized user who has the corresponding role re-encryption key can access the specific file without any data leakage. Through role re-encryption key updating and revoking, our system achieves the dynamic updating of the authorized user’s privilege. Furthermore, we exploit the dynamic count filters (DCF) to implement the data updating and improve the retrieval of ownership verifying effectively. We conduct the security analysis and the simulation experiment to demonstrate the security and efficiency of our proposed system.