A Data Deduplication Scheme Supporting Dynamic Management of Data Ownership

doi:10.3969/j.issn.1671-1122.2020.06.001

Abstract

Abstract:

Introducing data deduplication into the cloud storage system of big data center can improve the utilization of disk space and save user bandwidth consumption, but it will lead to security problems such as data confidentiality, integrity and privacy. How to achieve secure data deduplication has become a research hotspot in the field of cloud storage security. Based on the semi trusted cloud computing environment of big data center, this paper designs an encrypted data deduplication scheme supporting dynamic management of data ownership and privacy protection, which implements fine-grained access control through user-level key management and update mechanism. The experimental environment for performance simulation evaluation of the scheme is built. The cost of storage, communication and calculation is analyzed with the simulation results, which proves that the scheme has obvious advantages in overall efficiency and security.

Key words: data deduplication, data ownership, dynamic management, big data center, cloud storage

CLC Number:

TP309

LANG Weimin, MA Weiguo, ZHANG Yin, YAO Jinfang. A Data Deduplication Scheme Supporting Dynamic Management of Data Ownership[J]. Netinfo Security, 2020, 20(6): 1-9.

Figures/Tables 8

References 15

[1]	NIESEN U. An Information-theoretic Analysis of Deduplication[J]. IEEE Transactions on Information Theory, 2019,65(9):5688-5704.
[2]	ZHU Liehuang, WANG Hongyuan, XU Chang, et al. Efficient Group Proof of Storage with Malicious-member Distinction and Revocation[J]. IEEE Access, 2019(7):75476-75489.
[3]	LIANG Xueqin, YAN Zheng, CHEN Xiaofeng, et al. Game Theoretical Analysis on Encrypted Cloud Data Deduplication[J]. IEEE Transactions on Industrial Informatics, 2019,15(10):5778-5789.
[4]	YOUNGJOO S, DONGYOUNG K, JUNBEOM H. A Survey of Secure Data Deduplication Schemes for Cloud Storage Systems[J]. ACM Computing Surveys, 2017,29(4):74-101.
[5]	YOUNGJOO S, DONGYOUNG K, JUNBEOM H, et al. Decentralized Server-aided Encryption for Secure Deduplication in Cloud Storage[J]. IEEE Transactions on Services Computing, 2018,11(4):621-636.
[6]	DONGYOUNG K, JUNBEOM H. Privacy-preserving Deduplication of Encrypted Data with Dynamic Ownership Management in Fog Computing[J]. Future Generation Computer Systems, 2018,78(3):739-752.
[7]	HYUNSOO K, CHANGHEE H, KYUNGTAE K, et al. Secure Deduplication with Reliable and Revocable Key Management in Fog Computing[J]. Peer-to-Peer Networking and Applications, 2018,11(6):1153-1167.
[8]	GONZÁLEZ-MANZANO L, ORFILA A. An Efficient Confidentiality-preserving Proof of Ownership for Deduplication[J]. Journal of Network and Computer Applications, 2015,50:49-59.
[9]	YANG Chao, REN Jian, MA Jianfeng. Provable Ownership of Files in Deduplication Cloud Storage[J]. Security & Communication Networks, 2015,8(14):2457-2468.
[10]	SHIN Y, KIM K. Differentially Private Client-side Data Deduplication Protocol for Cloud Storage Services[M]. Hoboken: John Wiley & Sons, 2015.
[11]	CHEN Rongmao, MU Yi, YANG Guomin, et al. BL-MLE: Block-level Message-locked Encryption for Secure Large File Deduplication[J]. IEEE Transactions on Information Forensics & Security, 2015,10(12):2643-2652.
[12]	DAEHEE K, SEJUN S, BAEK-YOUNG C. Data Deduplication for Data Optimization for Storage and Network Systems[M]. Berlin: Springer, 2017.
[13]	B/T 37737-2019 Information Technology, Cloud Computing, Overall Technical Requirements for Distributed Block Storage Systems[S]. Beijing: Standard Press, 2019.
	B/T 37737-2019 信息技术云计算分布式块存储系统总体技术要求[S].北京: 标准出版社, 2019.
[14]	NG Wee Keong, WEN Yonggang, ZHU Huafei. Private Data Deduplication Protocols in Cloud Storage [C]//ACM. ACM Symposium on Applied Computing, March 26-30, 2012, Trento, Italy. New York: ACM, 2012: 441-446.
[15]	XU Jia, CHANG E C, ZHOU Jianying. Weak Leakage-resilient Client-side Deduplication of Encrypted Data in Cloud Storage [C]//ACM. The 8th ACM SIGSAC Symposium on Information, Computer and Communications Security, November 4-8, 2013, Berlin, Germany. New York: ACM, 2013: 195-206.

符号	含义
C_G	G₁、G₂和G₃的位长度
C_Z	${Z}_{p}^{*}$的位长度
C_H	散列值的位长度
C_F	文件F的位长度
n	文件F中的数据块数
M	每个数据块中的符号数
c	挑战响应数
W	文件F的数据所有者数
Enc/Dec	对称密钥加密/解密
e	双线性对运算
Exp	指数运算
Mul	乘法运算
H	散列运算

	NWZ	XCZ	本文方案
公共参数	$M{{C}_{G}}+2{{C}_{Z}}$	—	$2{{C}_{Z}}$
服务提供商	${{C}_{F}}+2{{C}_{H}}$	${{C}_{F}}+4{{C}_{H}}$	${{C}_{F}}+\left\| W \right\|{{C}_{G}}$
数据所有者	—	—	${{C}_{Z}}$

	NWZ	XCZ	本文方案
初始上传	$2{{C}_{H}}+{{C}_{F}}$	$3{{C}_{H}}+{{C}_{F}}$	${{C}_{H}}+{{C}_{F}}+3{{C}_{G}}$
后续上传	$\begin{matrix} & u\left( \log n+1 \right){{C}_{G}}+ \\ & uM{{C}_{Z}}+{{C}_{H}} \\ \end{matrix}$	$u\left( \log S+1 \right){{C}_{Z}}+2{{C}_{H}}$	${{C}_{G}}+u\left( \log n+1 \right){{C}_{H}}$
验证	$\begin{matrix} & e\left( M+1 \right)Exp+ \\ & uMMul+u\log nH \\ \end{matrix}$	$u{{C}_{Z}}+{{C}_{H}}$	$3{{C}_{Z}}$
密钥注册	—	—	${{C}_{G}}$
数据检索	${{C}_{F}}$	${{C}_{F}}$	${{C}_{F}}+4{{C}_{G}}$

	NWZ	XCZ	本文方案
客户端数据去重	√	√	√
加密数据的数据去重	√	√	√
标签一致性保护	×	√	√
外包数据的更新	×	×	√