Abstract:

Deduplication technology has been widely used in cloud storage to reduce storage space and communication cost by storing only a copy of redundant data. To achieve secure data deduplication, convergent encryption and many variants of it have been proposed. However, many schemes do not consider the problem of ownership changes and Proof-of-Ownership（PoW）. This paper puts forward a safe and efficient dynamic ownership management scheme, preventing users who revoke ownership from properly decrypt ciphertext by updating the group secret key and reencrypt the secret key ciphertext. The scheme supports secure PoW based on Bloom Filter and puts forward a new delay update strategy to further reduce the computational cost. Analysis and comparison show that the scheme has lower cost and is effective in dynamic ownership management.

Key words: cloud storage, data deduplication, dynamic ownership management, access control, delay update

摘要：

数据去重技术在云存储中应用广泛，通过存储数据的一个副本节省存储空间、降低通信开销。为了实现安全的数据去重复，收敛加密以及其很多变体相应被提出，然而，很多方案没有考虑所有权改变和所有权证明（PoW）问题。提出一种安全高效的动态所有权管理去重方案，通过更新组密钥对密钥密文进行重加密实现云用户所有权撤销后的管理问题，阻止撤销所有权的用户正确解密密文，构造了基于布隆过滤器的所有权证明，提出延迟更新策略进一步降低计算开销。分析和实验表明，该方案具有较小的开销，在动态所有权管理中是有效的。

关键词: 云存储, 数据去重, 动态所有权管理, 访问控制, 延迟更新