Abstract:As digital data are explosively generated nowadays, data management becomes a critical problem, which makes cloud storage services important and popular. In reality, the storage overhead can be reduced significantly by performing date deduplication. Among the outsourced data, some of them are very personal and sensitive, and should be prevented for any leakage. Generally, if clients conventionally encrypt the data, deduplication is lost. Message-locked encryption (MLE) is a cryptographic primitive supporting encrypted data deduplication. A secure client-side deduplication scheme can be built upon MLE to reduce both communication and computation overhead for cloud storage systems, where a client interacts with the cloud server to check the duplicate data and only the data which has not been outsourced by other clients before is required to be uploaded. However, existing client-side encrypted data deduplication schemes are confronted with brute-force attacks that can recover files falling into a known set. Furthermore, existing schemes are vulnerable to illegal content distribution attacks, where the adversary can distribute data to other users via the cloud server without detecting. In this paper, we propose a secure and efficient client-side encrypted data deduplication scheme (CSED). In CSED, a dedicated key server is introduced in generating MLE keys to resist brute-force attacks. We propose a Bloom filter-based proofs of ownership (PoW) mechanism and integrate it into CSED to resist illegal content distribution attacks. Moreover, a hierarchical storage architecture is employed to improve the I/O efficiency on the cloud server. Security analysis and performance evaluation demonstrate that CSED is secure and efficient.

SimLESS: A Secure Deduplication System over Similar Data in Cloud Media Sharing

SimEnc: A High-Performance Similarity-Preserving Encryption Approach for Deduplication of Encrypted Docker Images.

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

FuzzyDedup: Secure Fuzzy Deduplication for Cloud Storage

A Similarity-Aware Encrypted Deduplication Scheme with Flexible Access Control in the Cloud

A Secure and Efficient Data Deduplication Scheme with Dynamic Ownership Management in Cloud Computing

CSED: Client-Side Encrypted Deduplication Scheme Based on Proofs of Ownership for Cloud Storage

ESDedup: An efficient and secure deduplication scheme based on data similarity and blockchain for cloud-assisted medical storage systems

Secure Distributed Deduplication Systems with Improved Reliability

Secure Auditing and Deduplicating Data in Cloud

Toward Encrypted Cloud Media Center with Secure Deduplication

Enabling Encrypted Cloud Media Center with Secure Deduplication

Heterogeneous Data Storage Management with Deduplication in Cloud Computing

Privacy-Preserving Deduplication of Sensor Compressed Data in Distributed Fog Computing

Anonymous deduplication of encrypted data with proof of ownership in cloud storage

Towards Secure Cloud Data Similarity Retrieval: Privacy Preserving Near-Duplicate Image Data Detection.

Policy-Based De-duplication in Secure Cloud Storage

KeyD: Secure Key-Deduplication with Identity-Based Broadcast Encryption

A Cloud Data Deduplication Scheme Based on Certificateless Proxy Re-Encryption.

De-duplication of Encrypted Data with Proof of Ownership in Cloud Storage

Secure and Efficient Cloud Data Deduplication with Ownership Management