Security control scheme for cloud data copy based on differential privacy model

Jun REN; Jin-bo XIONG; Zhi-qiang YAO

doi:10.11959/j.issn.2096-109x.2017.00163

您当前的位置：

首页 >

文章列表页 >

Security control scheme for cloud data copy based on differential privacy model

Papers | 更新时间：2024-06-03

- Security control scheme for cloud data copy based on differential privacy model
- Chinese Journal of Network and Information Security Vol. 3, Issue 5, Pages: 38-46(2017)
- 作者机构：
  
  1. 福建师范大学软件学院，福建福州 350108
  2. 福建省公共服务大数据挖掘与应用工程技术研究中心，福建福州 350108
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00163
  CLC： TP393
- Online First：2017-05，
  
  Published：15 May 2017
- 稿件说明：
移动端阅览
Jun REN, Jin-bo XIONG, Zhi-qiang YAO. Security control scheme for cloud data copy based on differential privacy model[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 38-46.
DOI：

Jun REN, Jin-bo XIONG, Zhi-qiang YAO. Security control scheme for cloud data copy based on differential privacy model[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 38-46. DOI： 10.11959/j.issn.2096-109x.2017.00163.

摘要

针对敌手利用重复数据删除作为侧信道攻击用户隐私信息的问题，提出一种安全的文件副本数量控制方案。核心思想是构建混合云架构，结合差分隐私中的隐私保护参数及收敛加密算法计算文件密钥值并对其进行二次加密，保证每个文件在服务器中只存有一个副本。与已有的通过设置阈值来控制副本数量的方案进行比较分析，所提方案可抵抗侧信道攻击、相关文件的攻击，以及针对加密算法的特定攻击，并节约了网络带宽及磁盘存储空间。

Abstract

In cloud computing environment

adversary may use data deduplication as a side channel to eavesdrop users’ privacy.In order to tackle this serious issue

a secure copy number control scheme was proposed.The highlights of the proposed scheme lie in constructing a hybrid cloud framework.Then file was encrypted for second times by using the privacy protection parameters of differential privacy as well as the key of the file computed by convergent encryption algorithm.After the file is uploaded

each file has only one copy in the server.Meanwhile

compared with the scheme that use setting threshold value to control the number of copies

the proposed scheme can resist against the side channel attack

related files attack

and the specific attack of encryption algorithm and save the network bandwidth and disk storage space.

关键词

Keywords

references

MEHMOOD A , NATGUNANATHAN I , XIANG Y , et al . Protection of big data privacy [J ] . IEEE Access , 2016 , 4 : 1821 - 1834 .

冯登国 , 张敏 , 李昊 . 大数据安全与隐私保护 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 246 - 258 .

FENG D G , ZHANG M , LI H . Big data security and privacy protection [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 246 - 258 .

MAI J E . Big data privacy:the datafication of personal informa tion [J ] . Information Society , 2016 , 32 ( 3 ): 192 - 199 .

熊金波 , 张媛媛 , 李凤华 , 等 . 云环境中数据安全去重研究进展 [J ] . 通信学报 , 2016 , 37 ( 11 ): 169 - 180 .

XIONG J B , ZHANG Y Y , LI F H , et al . Research progress on secure data deduplication in cloud [J ] . Journal on Communications , 2016 , 37 ( 11 ): 169 - 180 .

PAULO J , PEREIRA J . A survey and classification of storage deduplication systems [J ] . ACM Computing Surveys (CSUR) , 2014 , 47 ( 1 ): 11 .

RUSSELL D . Data deduplication will be even bigger in 2010 [J ] . Gartner , 2010 .

SORIA-COMAS J , DOMINGO-FERRER J . Big data privacy:challenges to privacy principles and models [J ] . Data Science and Engineering , 2016 , 1 ( 1 ): 21 - 28 .

DOUCEUR J R , ADYA A , BOLOSKY W J , et al . Reclaiming space from duplicate files in a serverless distributed file system [C ] // The International Conference on Distributed Computing Systems . 2002 : 617 - 624 .

LI M , QIN C , LEE P P C . CDStore:toward reliable,secure,and costefficient cloud storage via convergent dispersal [C ] // 2015 USENIX Annual Technical Conference (USENIX ATC 15) . 2015 : 111 - 124 .

STANEK J , SORNIOTTI A , ANDROULAKI E , et al . A secure data deduplication scheme for cloud storage [C ] // Financial Cryptography and Data Security . 2014 : 99 - 118 .

BELLARE M , KEELVEEDHI S , RISTENPART T . Message-locked encryption and secure deduplication [C ] // Advances in Cryptology–EUROCRYPT . 2013 : 296 - 312 .

KEELVEEDHI S , BELLARE M , RISTENPART T . DupLESS:server-aided encryption for deduplicated storage [C ] // The 22nd USENIX Security Symposium . 2013 : 179 - 194 .

HARNIK D , PINKAS B,SHULMAN-PELEG A . Side channels in cloud services:deduplication in cloud storage [J ] . IEEE Security ＆Privacy , 2010 , 8 ( 6 ): 40 - 47 .

LEE S , CHOI D . Privacy-preserving cross-user sourcebased data deduplication in cloud storage [C ] // The International Conference on ICT Convergence . 2012 : 329 - 330 .

OLIVIER , NEUMANN C , MONTALVO L , et al . Improving the resistance to side-channel attacks on cloud storage services [C ] // The International Conference on New Technologies,Mobility and Security (NTMS’12) . 2012 : 1 - 5 .

DWORK C . Differential privacy [J ] . Lecture Notes in Computer Science , 2006 ,( 2 ): 1 - 12 .

熊平 , 朱天清 , 王晓峰 . 差分隐私保护及其应用 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 101 - 122 .

XIONG P , ZHU T Q , WANG X F . A survey on differential privacy and applications [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 101 - 122 .

EBADI H , SANDS D , SCHNEIDER G . Differential privacy:now it's getting personal [J ] . ACM Special Interest Group on Programming Languages , 2015 , 50 ( 1 ): 69 - 81 .

GENG Q , KAIROUZ P , OH S , et al . The staircase mechanism in differential privacy [J ] . IEEE Journal of Selected Topics in Signal Processing , 2015 , 9 ( 7 ): 1 .

Views

2823

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

DP-FedDRC: differentially private personalized federated learning to alleviate dimension collapse

FLWD:A Webshell detection method based on federated learning

Survey on incentive-driven federated learning: privacy and security

Survey of differentially private methods for trajectory data

Privacy view and target of differential privacy

Related Author

Hu Changhui

Zhang Yuhao

Wang Minli

WU Shuixiu

CHAI Jiangli

ZENG Qingpeng

LIU Hengzhu

CHI Huanhuan

Related Institution

School of Cyberspace Security (School of Cryptography), Hainan University

School of Computer Information Engineering, Jiangxi Normal University

School of Mathematics and Computer Sciences, Nanchang University

Faculty of Date Science, City University of Macau, Macau

School of Information Engineering, Zhongnan University of Economics and Law

⁰