Block level cloud data deduplication scheme based on attribute encryption

Wenting GE; Weihai LI; Nenghai YU

doi:10.11959/j.issn.2096-109x.2023066

您当前的位置：

首页 >

文章列表页 >

Block level cloud data deduplication scheme based on attribute encryption

Papers | 更新时间：2024-06-03

- Block level cloud data deduplication scheme based on attribute encryption
- Chinese Journal of Network and Information Security Vol. 9, Issue 5, Pages: 106-115(2023)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2023066
  CLC： TP393
- Online First：2023-10，
  
  Published：25 October 2023
- 稿件说明：
移动端阅览
Wenting GE, Weihai LI, Nenghai YU. Block level cloud data deduplication scheme based on attribute encryption[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 106-115.
DOI：

Wenting GE, Weihai LI, Nenghai YU. Block level cloud data deduplication scheme based on attribute encryption[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 106-115. DOI： 10.11959/j.issn.2096-109x.2023066.

摘要

针对已有的云数据去重方案主要集中在文件级去重。提出了一种基于属性加密的支持数据块级去重的方案，对文件级和数据块级做双粒度去重，并由属性加密实现数据共享。在混合云架构上设计算法，私有云根据文件标签和数据块标签进行重复性检测和一致性检测，并由块级标签建立默克尔树，支持对用户进行所有权证明。用户上传密文，私有云应用线性秘密共享技术，向密文添加访问结构和辅助信息，并为新的拥有权限的用户更新整体的密文信息。由私有云做代理重加密和代理解密，在无法获得明文的情况下承担大部分计算，减轻用户的计算时间开销。处理好的密文和标签存入公有云中，由私有云进行存取。安全性分析表明，所提方案在私有云可达到PRV-CDA（privacy chosen-distribution attacks）安全。分别对固定分块大小改变属性个数和固定属性个数改变分块大小两种情况进行仿真实验，应用4种椭圆曲线加密测试密钥生成、加密和解密计算时间，结果符合线性秘密共享的特性。仿真实验和开销分析表明所提方案可提升去重效率，并降低计算时间开销。

Abstract

Due to the existing cloud data deduplication schemes mainly focus on file-level deduplication.A scheme was proposed

based on attribute encryption

to support data block-level weight removal.Double granularity weight removal was performed for both file-level and data block-level

and data sharing was achieved through attribute encryption.The algorithm was designed on the hybrid cloud architecture Repeatability detection and consistency detection were conducted by the private cloud based on file labels and data block labels.A Merkle tree was established based on block-level labels to support user ownership proof.When a user uploaded the cipher text

the private cloud utilized linear secret sharing technology to add access structures and auxiliary information to the cipher text.It also updated the overall cipher text information for new users with permissions.The private cloud served as a proxy for re-encryption and proxy decryption

undertaking most of the calculation when the plaintext cannot be obtained

thereby reducing the computing overhead for users.The processed cipher text and labels were stored in the public cloud and accessed by the private cloud.Security analysis shows that the proposed scheme can achieve PRV-CDA (Privacy Choose-distribution attacks) security in the private cloud.In the simulation experiment

four types of elliptic curve encryption were used to test the calculation time for key generation

encryption

and decryption respectively

for different attribute numbers with a fixed block size

and different block sizes with a fixed attribute number.The results align with the characteristics of linear secret sharing.Simulation experiments and cost analysis demonstrate that the proposed scheme can enhance the efficiency of weight removal and save time costs.

关键词

Keywords

references

BELLARE M , KEELVEEDH S . Interactive message-locked encryption and secure deduplication [C ] // Public-Key cryptography PKC 2015:18th ICAR International Conference on Practice and Theory in Public Key Cryptography . 2015 : 516 - 538 .

AHAMED N , DURAIPANDIAN N . Secured data storage using deduplication in cloud computing based on elliptic curve cryptography [J ] . Tech Science Press , 2022 , 41 : 83 - 94 .

CHEN R , MU Y , YANG G , et al . BL-MLE:block-level message-locked encryption for secure large file deduplication [J ] . IEEE Transactions on Information Forensics ＆ Security , 2015 , 10 ( 12 ): 2643 - 2652 .

ZHAO Y , CHOW S . Updatable block-level message-locked encryption [J ] . IEEE Transactions on Dependable and Secure Computing , 2021 , 18 ( 4 ): 1620 - 1631 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // Proceedings of the 13th ACM Conference on Computer and Communications Security . 2006 : 89 - 98 .

EMURA K , MIYAJI A , OMOTE K , et al . A ciphertext-policy attribute-based encryption scheme with constant ciphertext length [J ] . International Journal of Applied Cryptography , 2009 , 2 ( 1 ): 46 - 59 .

CUI H , DENG R , LI Y , et al . Attribute-based storage supporting secure deduplication of encrypted data in cloud [J ] . IEEE Transactions on Big Data , 2019 , 5 ( 3 ): 330 - 342 .

GOYAL V , JAIN A , PANDEY O , et al . Bounded ciphertext policy attribute based encryption [C ] // 35th International Colloquium on Automata,Languages and Programming (ICALP 2008) . 2008 : 579 - 591 .

WATERS B . Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization [C ] // Public Key Cryptography-PKC 2011 . 2011 : 53 - 70 .

GONZALEZ-MANZANO L , ORFILA A . An efficient confidentiality-preserving proof of ownership for deduplication [J ] . Journal of Network ＆ Computer Applications , 2015 , 50 ( 4 ): 49 - 59 .

HUANG K , ZHANG X S , MU Y , et al . Bidirectional and malleable proof-of-ownership for large file in cloud storage [J ] . IEEE Transactions on Cloud Computing , 2021 ( 99 ): 1 .

CHEN Y , HU Y , ZHU M , et al . Attribute-based keyword search with proxy re-encryption in the cloud [J ] . IEICE Transactions on Communications , 2018 ,( 8 ): 1798 - 1808 .

刘尚 , 郭银章 . 云计算多授权中心 CP-ABE 代理重加密方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 3 ): 176 - 188 .

LIU S , GUO Y Z . Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 3 ): 176 - 188 .

BONEH D , FRANKLIN M . Identity-based encryption from the Weil pairing [J ] . SIAM Journal on Computing , 2003 , 32 ( 3 ): 586 - 615 .

SZYDLO M , LECTURE NOTES IN COMPUTER SCIENCE 3027 . Merkle Tree Traversal in Log Space and Time [C ] // 2004 International Conference on the Theory and Application of Cryptographic Techniques (EUROCRYPT 2004) . 2004 : 541 - 554 .

ROUSELAKIS Y , WATERS B . New constructions and proof methods for large universe attribute-based encryption [C ] // ACM Sigsac Conference on Computer ＆ Communications Security . 2013 : 463 - 474 .

ROUSELAKIS Y , WATERS B . New constructions and proof methods for large universe attribute-based encryption [C ] // Sigsac Conference on Computer ＆ Communications Security . 2013 .

Views

258

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Dynamic multi-keyword searchable encryption scheme

Proof of storage with corruption identification and recovery for dynamic group users

Research and realization on USBKEY based network storage user data protection

Research on privacy preserving mechanism of attribute-based encryption cloud storage

Related Author

Chenghao YUAN

Yong LI

Shuang REN

Tao JIANG

Hang XU

Liangmin WANG

Jianfeng MA

Xiao YU

Related Institution

School of Electronic and Information Engineering, Beijing Jiaotong University

School of Computer and Information Technology, Beijing Jiaotong University

State Key Laboratory of Integrated Service Networks, Xidian University

School of Cyber Engineering, Xidian University

School of computer science and engineering, Southeast University

⁰