Updatable block-level message-locked encryption(MLE) can efficiently update encrypted data, and public auditing can verify the integrity of cloud storage data by utilizing a third party auditor(TPA). However, there ar...Updatable block-level message-locked encryption(MLE) can efficiently update encrypted data, and public auditing can verify the integrity of cloud storage data by utilizing a third party auditor(TPA). However, there are seldom schemes supporting both updatable block-level deduplication and public auditing. In this paper, an updatable block-level deduplication scheme with efficient auditing is proposed based on a tree-based authenticated structure. In the proposed scheme, the cloud server(CS) can perform block-level deduplication, and the TPA achieves integrity auditing tasks. When a data block is updated, the ciphertext and auditing tags could be updated efficiently. The security analysis demonstrates that the proposed scheme can achieve privacy under chosen distribution attacks in secure deduplication and resist uncheatable chosen distribution attacks(UNC-CDA) in proof of ownership(PoW). Furthermore, the integrity auditing process is proven secure under adaptive chosen-message attacks. Compared with previous relevant schemes, the proposed scheme achieves better functionality and higher efficiency.展开更多
随着云计算服务的广泛使用,越来越多的数据被存储到云服务器上。为了解决云存储系统中加密数据面临的密文重复性检测和拥有权证明(Proof of Ownership,PoW)等问题,文章利用收敛加密和Bloom过滤器的方法设计和实现了一个基于阿里云平台...随着云计算服务的广泛使用,越来越多的数据被存储到云服务器上。为了解决云存储系统中加密数据面临的密文重复性检测和拥有权证明(Proof of Ownership,PoW)等问题,文章利用收敛加密和Bloom过滤器的方法设计和实现了一个基于阿里云平台的密文数据安全去重系统。首先,利用收敛加密的方法产生文件的加密密钥,实现了不同用户之间密钥的共享,有利于跨用户之间密文的去重;其次,基于Bloom过滤器的方法,实现了文件拥有权证明,有效地预防了攻击者通过单一的文件哈希值去获取整个文件;最后,基于当前的阿里云平台实现了整个安全去重系统,有效地保证了数据去重的安全性。此外,实验结果和性能分析也证明了方案是高效可行的。展开更多
基金supported by the Doctoral Foundation in Henan University of Technology (31401152)
文摘Updatable block-level message-locked encryption(MLE) can efficiently update encrypted data, and public auditing can verify the integrity of cloud storage data by utilizing a third party auditor(TPA). However, there are seldom schemes supporting both updatable block-level deduplication and public auditing. In this paper, an updatable block-level deduplication scheme with efficient auditing is proposed based on a tree-based authenticated structure. In the proposed scheme, the cloud server(CS) can perform block-level deduplication, and the TPA achieves integrity auditing tasks. When a data block is updated, the ciphertext and auditing tags could be updated efficiently. The security analysis demonstrates that the proposed scheme can achieve privacy under chosen distribution attacks in secure deduplication and resist uncheatable chosen distribution attacks(UNC-CDA) in proof of ownership(PoW). Furthermore, the integrity auditing process is proven secure under adaptive chosen-message attacks. Compared with previous relevant schemes, the proposed scheme achieves better functionality and higher efficiency.
文摘随着云计算服务的广泛使用,越来越多的数据被存储到云服务器上。为了解决云存储系统中加密数据面临的密文重复性检测和拥有权证明(Proof of Ownership,PoW)等问题,文章利用收敛加密和Bloom过滤器的方法设计和实现了一个基于阿里云平台的密文数据安全去重系统。首先,利用收敛加密的方法产生文件的加密密钥,实现了不同用户之间密钥的共享,有利于跨用户之间密文的去重;其次,基于Bloom过滤器的方法,实现了文件拥有权证明,有效地预防了攻击者通过单一的文件哈希值去获取整个文件;最后,基于当前的阿里云平台实现了整个安全去重系统,有效地保证了数据去重的安全性。此外,实验结果和性能分析也证明了方案是高效可行的。
