Balancing Access Control and Privacy for Data Deduplication via Functional Encryption

Abstract

Data deduplication serves as an effective way to optimize the storage occupation and the bandwidth consumption over clouds. As for the security of deduplication mechanism, users’ privacy and accessibility are of utmost concern since data are outsourced. However, the functionality of redundancy removal and the indistinguishability of deduplication labels are naturally incompatible, which bring about a lot of threats on data security. Besides, the access control of sharing copies may lead to infringement on users’ attributes and cumbersome query overheads. To balance the usability with the confidentiality of deduplication labels and securely realize an elaborate access structure, a novel data deduplication scheme is proposed in this paper. Briefly speaking, we drew support from learning with errors (LWE) to make sure that the deduplication labels are only differentiable during the duplication check process. Instead of authority matching, the proof of ownership (PoW) is then implemented under the paradigm of inner production. Since the deduplication label is light-weighted and the inner production is easy to carry out, our scheme is more efficient in terms of computation and storage. Security analysis also indicated that the deduplication labels are distinguishable only for duplication check, and the probability of falsifying a valid ownership is negligible.

Cloud Computing Storage Data Access Control Method Based on Dynamic Re-Encryption

“…However, with the continuous expansion of the network scale, the number of users and data in the cloud computing environment has increased sharply, and users' demand for data, personal privacy, and permission granularity has been increasing. ere is an urgent need to realize fine-grained dynamic authorization for large-scale users; the mode of security requirements has changed from a single user on both sides of the communication to a multiparty communication mode in which at least one party is multiuser, and from "same-domain" communication to "cross-domain" communication, the traditional access control is facing new challenges [7].…”