关键词: 混合云存储, 数据去重, 收敛加密, 布隆过滤器

Abstract: To address the problem that convergent encryption used for data deduplication is vulnerable to brute-force attack and guessing attack in existing cloud storage systems, this paper presents a secure deduplication approach based on Bloom Filter in hybrid cloud storage environments （called BFHDedup）. Of the major importance is modification of the existing hybrid cloud storage system model, key server is deployed in the private cloud which supports bloom filter to authenticate users’ identities to achieve fine-grained user access control. Also, this approach adds extra encryption algorithm based on the traditional convergent encryption algorithm to doubly encrypt data and combines file-level deduplication with block-level deduplication to reach fine-grained deduplication. Moreover, a key encryption chain scheme is used to deal with the key management problem. Security analysis and simulation results show that, the proposed scheme achieves high data confidentiality, improves deduplication ratio and reduces the storage space at the expense of tolerable time overhead, which is effective against brute-force attack and guessing attack.

Key words: hybrid cloud storage, data deduplication, convergent encryption, Bloom Filter