Abstract:With the rapid development and application of the Internet, traditional storage resources have been found unable to meet the growing demand for massive data storage. An increasing number of users have attempted to upload their data to third-party cloud servers for unified storage. Efficient deduplication and secure file sharing in the cloud have emerged as critical concerns. Moreover, users have always preferred to customize their passwords for encrypting and decrypting files, only sharing encrypted files when necessary. Based on this preference, a deterministic stepwise encryption algorithm was first designed. It was such that when the keys for the two steps of encryption satisfied a certain relationship, the two steps of encryption could be equivalent to a single encryption process. A novel key-customizable encrypted deduplication scheme with access control for cloud storage was proposed, utilizing the deterministic stepwise encryption algorithm to encrypt files and a ciphertext-policy attribute-based encryption algorithm to encrypt file keys. This scheme not only offered the flexibility to customize encryption and decryption keys for different users with the same files, but also ensured secure file sharing through a dynamic access control mechanism. Moreover, the optional access control component was made compatible with the majority of existing ciphertext-policy attribute-based encryption (CP-ABE) schemes, even allowing for different CP-ABE schemes within different attribute groups. Security analysis results show that the proposed scheme achieves the highest level of security under the current encrypted deduplication paradigm. Experimental and analytical results indicate that it effectively meets the practical needs of cloud service providers and users, and also achieves acceptable efficiency.

Improving Availability and Confidentiality of Shared Data under the Multi-cloud Environment

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

��计算中基于可转换代理签密的可证安全的认证协议

Privacy-Preserving Protocol for Data Stored in the Cloud

An improved security and privacy management system for data in multi-cloud environments using a hybrid approach

A No-Pairing Proxy Re-Encryption Scheme for Data Sharing in Untrusted Cloud.

A Cloud Approach for Secure Multi Data sharing between the Users

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

Pairing-Free Certificate-Based Proxy Re-Encryption Plus Scheme for Secure Cloud Data Sharing

A Key-insulated Proxy Re-encryption Scheme for Data Sharing in a Cloud Environment.

A Dynamic Secure Group Sharing Framework in Public Cloud Computing

Anonymous deduplication of encrypted data with proof of ownership in cloud storage

MD-S3C3

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

Dual-Cloud Multi-Secret Sharing Architecture for Privacy Preserving Persistent Computation

Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

Proxy Re-Encryption Based Multi-Factor Access Control Scheme in Cloud

An ORAM-based Privacy Preserving Data Sharing Scheme for Cloud Storage

Quantum-Resistant Multi-Feature Attribute-Based Proxy Re-Encryption Scheme for Cloud Services

Achieving Privacy-preserving Data Sharing for Dual Clouds