Abstract:To secure cloud storage and enforce access control, data encryption has become essential, given the ever increasing cyber threat everywhere. Attribute-based Encryption (ABE) crypto systems are widely considered as a promising solution under such a context for its security strength, scalability and control flexibility. One major challenge, however, for applying ABE-based techniques in real world applications is its high overhead in various aspects. In this research, we are particularly concerned with the storage size expansion in existing ABE schemes. This combined with the vast-size nature of the cloud data poses an enormous challenge to the effective usage of the cloud data storage space and affects the utility of data deduplication. Normally, data deduplication is carried out based on identifying similar and even identical contents both within and between data files, however, these patterns will be destroyed after performing data encryption using any semantically secure encryption scheme including ABE. In this research, we focus on ciphertexts deduplication under ABE, which to our best knowledge is the first of such an effort. Our fundamental observation stems from the structure of ABE ciphertexts and the possible similarities among different access structures. We show how to design a secure ciphertext deduplication scheme based on a classical CP-ABE scheme by innovatively modifying the construction with a recursive algorithm, eliminating the duplicated secrets and adding additional randomness to some certain ciphertext. We then give a detailed analysis on the proposed scheme with respect to both efficiency and security. To thoroughly assess the performance of the proposed scheme, we also implement a prototype system and conduct comprehensive experiments, which shows that our ciphertext reduplication scheme could reduce up to 80% computation and storage cost in the best case.

Secure Data Deduplication With Reliable Key Management for Dynamic Updates in CPSS.

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

A Secure and Efficient Data Deduplication Scheme with Dynamic Ownership Management in Cloud Computing

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

Secure Data Deduplication With Dynamic Access Control for Mobile Cloud Storage

Secure deduplication with efficient user revocation in cloud storage

KeyD: Secure Key-Deduplication with Identity-Based Broadcast Encryption

Secure data deduplication for Internet-of-things sensor networks based on threshold dynamic adjustment

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

Secure Batch Deduplication without Dual Servers in Backup System

SecDedoop: Secure Deduplication with Access Control of Big Data in the HDFS/Hadoop Environment

Fog-to-MultiCloud Cooperative Ehealth Data Management with Application-Aware Secure Deduplication

Convergent encryption enabled secure data deduplication algorithm for cloud environment

Secure deduplication schemes for content delivery in mobile edge computing

Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

ESDedup: An efficient and secure deduplication scheme based on data similarity and blockchain for cloud-assisted medical storage systems

Secure and Efficient Data Privacy-preserving Scheme for Mobile Cyber Physical Systems

Building a Highly Available and Intrusion Tolerant Database Security and Protection System (DSPS)

The Design and Implementation of a Rekeying-aware Encrypted Deduplication Storage System

Efficient Cross-User Deduplication of Encrypted Data Through Re-Encryption.

Decentralized and Privacy Sensitive Data De-Duplication Framework for Convenient Big Data Management in Cloud Backup Systems