Secure and Efficient Cloud Data Deduplication with Ownership Management
Secure and Efficient Cloud Data Deduplication with Ownership Management
复制标题
通过所有权管理实现安全高效的云重复数据删除
DOI：
10.1109/tsc.2017.2771280
复制
发表时间：
2020-11-01
影响因子：
8.1
通讯作者：
Wang, Liangmin
中科院分区：
文献类型：
--
作者：
Jiang, Shunrong;Jiang, Tao;Wang, Liangmin
重复数据删除在云存储中得到了广泛的应用，通过消除冗余数据，只存储一份数据，减少存储空间和通信开销。为了实现安全的重复数据删除，提出了收敛加密方案及其多种变体。然而，大多数方案没有考虑或无法同时有效地解决所有权动态变化和安全的所有权证明（PoW）。在本文中，我们提出了一种安全的数据重复删除方案，该方案具有高效的PoW过程，用于动态所有权管理。特别地，我们的方案支持跨用户的文件级和用户内部的块级重复数据删除。在文件级重复数据删除过程中，我们构造了一种新的PoW方案来保证标签的一致性并实现相互所有权的验证。此外，我们设计了一个延迟更新策略，以实现有效的所有权管理。对于用户内部的块级重复数据删除，使用用户辅助密钥实现密钥的收敛管理，减少密钥存储空间。最后，安全性和性能分析表明，该方案能够保证数据的保密性和标签的一致性，在数据所有权管理方面是有效的。
Data deduplication has been widely used in cloud storage to reduce storage space and communication overhead by eliminating redundant data and storing only one copy for them. In order to achieve secure data deduplication, the convergent encryption scheme and many of its variants are proposed. However, most of these schemes do not consider or cannot address the efficiently dynamic ownership changes and the secure Proof-of-Ownership (PoW), simultaneously. In this paper, we propose a secure data deduplication scheme with efficient PoW process for dynamic ownership management. Specially, our scheme supports both cross-user file-level and inside-user block-level data deduplication. During the file-level deduplication, we construct a new PoW scheme to ensure the tag consistency and achieve the mutual ownership verification. Moreover, we design a lazy update strategy to achieve efficient ownership management. For inside-user block-level deduplication, the user-aided key is used to realize convergent key management and reduce the key storage space. Finally, the security and performance analysis demonstrate that our scheme can ensure data confidentiality and tag consistency, and it is efficient in data ownership management.