Secure Encrypted Data With Authorized Deduplication in Cloud

Abstract

In this paper, we propose a novel secure role re-encryption system (SRRS), which is based on convergent encryption and the role re-encryption algorithm to prevent the privacy data leakage in cloud and it also achieves the authorized deduplication and satisfies the dynamic privilege updating and revoking. Meanwhile, our system supports ownership checking and achieves the proof of ownership for the authorized users efficiently. Specifically, we introduce a management center to handle with the authorized request and establish a role authorized tree (RAT) mapping the relationship of the roles and keys. With the convergent encryption algorithm and the role re-encryption technique, it can be guaranteed that only the authorized user who has the corresponding role re-encryption key can access the specific file without any data leakage. Through role re-encryption key updating and revoking, our system achieves the dynamic updating of the authorized user's privilege. Furthermore, we exploit the dynamic count filters (DCF) to implement the data updating and improve the retrieval of ownership verifying effectively. We conduct the security analysis and the simulation experiment to demonstrate the security and efficiency of our proposed system. INDEX TERMS Role re-encryption, role authorized tree, privacy leakage, authorized deduplication, proof of ownership.

Security Analysis and Improvements on a Remote Integrity Checking Scheme for Regenerating-Coding-Based Distributed Storage

“…e ongoing work targets the application extensions of our research methodology from regenerating-coding-based storage to privacy-preserving forwarding [21], security-asservice frameworks [22], mobile crowdsensing [23,24], authorized deduplication [25,26], and the adoption of a stronger threat model involving malware detection [16,18,27]. Security and Communication Networks…”

SecDedup: Secure Encrypted Data Deduplication With Dynamic Ownership Updating

“…In the related works discussed above, most of the schemes rely on a online trusted third party as in Xiong's sheme [23],Wang's scheme [30], et al Some of the schemes achieved dynamic ownership update, but their using of public key encryption or re-encryption caused significant overhead to the process. In this paper, we propose a secure encrypted data deduplication scheme named SecDedup, which not only achieves deduplicaion of encrypted data without any online third party, but also allows dynamic update of data ownership in a lightweight manner.…”

“…We assume that the CSP is honest but curious, i.e., it correctly performs the system operations, but will try to explore data content [23]. To some extent, the interests of users and CSP conflict with each other, as users require efficiency while the CSP always seeks ways to reduce storage costs.…”

Lightweight Cloud Storage Auditing With Deduplication Supporting Strong Privacy Protection

“…Yan et al [33] designed a heterogeneous data management scheme supporting both deduplication and access control simultaneously. By constructing a role authorized tree, Xiong et al [31] designed a secure encrypted data deduplication scheme, in which only the authorized user is able to access the specific file. Cui et al [4] proposed an attribute-based encrypted data deduplication scheme in the cloud.…”