Abstract:With the rapid development and application of the Internet, traditional storage resources have been found unable to meet the growing demand for massive data storage. An increasing number of users have attempted to upload their data to third-party cloud servers for unified storage. Efficient deduplication and secure file sharing in the cloud have emerged as critical concerns. Moreover, users have always preferred to customize their passwords for encrypting and decrypting files, only sharing encrypted files when necessary. Based on this preference, a deterministic stepwise encryption algorithm was first designed. It was such that when the keys for the two steps of encryption satisfied a certain relationship, the two steps of encryption could be equivalent to a single encryption process. A novel key-customizable encrypted deduplication scheme with access control for cloud storage was proposed, utilizing the deterministic stepwise encryption algorithm to encrypt files and a ciphertext-policy attribute-based encryption algorithm to encrypt file keys. This scheme not only offered the flexibility to customize encryption and decryption keys for different users with the same files, but also ensured secure file sharing through a dynamic access control mechanism. Moreover, the optional access control component was made compatible with the majority of existing ciphertext-policy attribute-based encryption (CP-ABE) schemes, even allowing for different CP-ABE schemes within different attribute groups. Security analysis results show that the proposed scheme achieves the highest level of security under the current encrypted deduplication paradigm. Experimental and analytical results indicate that it effectively meets the practical needs of cloud service providers and users, and also achieves acceptable efficiency.

Accelerating Encrypted Deduplication Via SGX.

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

Speed: Accelerating Enclave Applications Via Secure Deduplication

SimEnc: A High-Performance Similarity-Preserving Encryption Approach for Deduplication of Encrypted Docker Images.

Accelerating Forward and Backward Private Searchable Encryption Using Trusted Execution

Efficient Cross-User Deduplication of Encrypted Data Through Re-Encryption.

Exploring Dynamic Task Loading in SGX-Based Distributed Computing

On the Performance of Intel SGX

Benchmarking Analytical Query Processing in Intel SGXv2

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

DuckDB-SGX2: The Good, The Bad and The Ugly within Confidential Analytical Query Processing

DynSGX: A Privacy Preserving Toolset for Dynamically Loading Functions into Intel(R) SGX Enclaves

Secure Data Deduplication With Dynamic Access Control for Mobile Cloud Storage

Speed-Dedup: A New Deduplication Framework for Enhanced Performance and Reduced Overhead in Scale-Out Storage

HardIDX: Practical and Secure Index with SGX

Distributed Shielded Execution for Transmissible Cyber Threats Analysis

Leveraging Intel SGX to Create a Nondisclosure Cryptographic library

Key-customizable Encrypted Deduplication with Access Control for Cloud Storage

KeyD: Secure Key-Deduplication with Identity-Based Broadcast Encryption

Differentially Oblivious Data Analysis with Intel SGX: Design, Optimization, and Evaluation

A Secure and Efficient Data Deduplication Scheme with Dynamic Ownership Management in Cloud Computing