关键词: 数据去重, 多云存储, 双层校验机制, Merkle哈希树

Abstract: To address the problem that data is monopolized by a single cloud storage service provider and convergence encryption adopted for existing cloud storage systems is vulnerable to brute-force attacks, a cloud storage deduplication scheme using signature and Hash technology is proposed. The scheme which uses a two-layer verification mechanism to audit data integrity, can check the integrity of the file and locate the damaged data block accurately. And a merkle Hash tree is constructed to generate the check coefficient and duplicate-lable, so that the duplicate data can be detected. In addition, a combination of Mapbox and Lockbox is used to encrypt data, which ensures that the unauthaorized users can not access the files directly. The security analysis and simulation results show that the scheme can effectively resist the brute-force attacks, reduce the computation cost of duplicate-lable generation and storage space.

Key words: data deduplication, multiple cloud storage, two-layer verification mechanism, Merkle Hash tree