Abstract:Nowadays, many customers and enterprises backup their data to cloud storage that performs deduplication to save storage space and network bandwidth. Hence, how to perform secure deduplication becomes a critical challenge for cloud storage. According to our analysis, the state-of-the-art secure deduplication methods are not suitable for cross-user fine-grained data deduplication. They either suffer brute-force attacks that can recover files falling into a known set, or incur large computation (time) overheads. Moreover, existing approaches of convergent key management incur large space overheads because of the huge number of chunks shared among users.Our observation that cross-user redundant data are mainly from the duplicate files, motivates us to propose an efficient secure deduplication scheme SecDep. SecDep employs UserAware Convergent Encryption (UACE) and Multi-Level Key management (MLK) approaches. (1) UACE combines cross-user file-level and inside-user chunk-level deduplication, and exploits different secure policies among and inside users to minimize the computation overheads. Specifically, both of file-level and chunk-level deduplication use variants of Convergent Encryption (CE) to resist brute-force attacks. The major difference is that the file-level CE keys are generated by using a server-aided method to ensure security of cross-user deduplication, while the chunk-level keys are generated by using a user-aided method with lower computation overheads. (2) To reduce key space overheads, MLK uses file-level key to encrypt chunk-level keys so that the key space will not increase with the number of sharing users. Furthermore, MLK splits the file-level keys into share-level keys and distributes them to multiple key servers to ensure security and reliability of file-level keys.Our security analysis demonstrates that SecDep ensures data confidentiality and key security. Our experiment results based on several large real-world datasets show that SecDep is more time-efficient and key-space-efficient than the state-of-the-art secure deduplication approaches.

R-Dedup: Secure Client-Side Deduplication for Encrypted Data Without Involving a Third-Party Entity

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

A Secure and Lightweight Cloud Data Deduplication Scheme with Efficient Access Control and Key Management

Efficient Cross-User Deduplication of Encrypted Data Through Re-Encryption.

SecDep: A User-Aware Efficient Fine-Grained Secure Deduplication Scheme with Multi-Level Key Management.

Secure Cloud Data Deduplication with Efficient Re-Encryption

Secure and Efficient Cloud Data Deduplication with Randomized Tag.

Two-party Interactive Secure Deduplication with Efficient Data Ownership Management in Cloud Storage

A Similarity-Aware Encrypted Deduplication Scheme with Flexible Access Control in the Cloud

Enabling Transparent Deduplication and Auditing for Encrypted Data in Cloud

A Secured and Authorized Data Deduplication in Hybrid Cloud with Public Auditing

Secure Distributed Deduplication Systems with Improved Reliability

DedupDUM: Secure and Scalable Data Deduplication with Dynamic User Management

Secure Multi-Server-aided Data Deduplication in Cloud Computing.

A Secure and Efficient Data Deduplication Scheme with Dynamic Ownership Management in Cloud Computing

Secure Deduplication with Efficient and Reliable Convergent Key Management

Secure Data Deduplication With Dynamic Access Control for Mobile Cloud Storage

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

Secure deduplication with efficient user revocation in cloud storage

A Hybrid Cloud Approach for Secure Authorized Deduplication

KeyD: Secure Key-Deduplication with Identity-Based Broadcast Encryption