Convergent Encryption Research Articles

Data Fragmentation and Duplication in Cloud for Secure Performance

The Fragmentation and duplication in data sets is used to overcome the increased data overloading issue in the cloud servers. The increase in data usage and processing in cloud has brought new challenges to data management in cloud computing. We propose the idea which helps in reducing the data load in the cloud and reduces the storage and management cost for the users. Duplication finding plays a very major role in data management. Data de-duplication method finds the restricted fingerprint for every data chunk by using hash algorithms such as MD5 and SHA. The recognized fingerprint is then compared touching other available chunks in a database that is dedicated for storing the chunks. Though, there is simply one copy for every file stored in cloud, it will not be immobile if such a file is owned by a massive number. As a part the de-duplication system improves storage consumption whereas dropping reliability. Aiming to contradict with the above safety challenges, this proposed idea makes the first attempt to provide the idea of distributed dependable de-duplication system. This new distributed de-duplication system comes with increased reliability in which the data chunks are distributed diagonally to various cloud servers. This allows the redundancy of all data is eliminated. The security needs of data privacy and tag consistency are also achieve by introducing a deterministic furtive sharing system in distributed storage systems, as an option of using convergent encryption as in foregoing de-duplication system. Keywords: Cloud, Cloud Storage, Data Mapping, File Data Security, Fragmentation, Graph Colouring Algorithm, Graphical Representation, Node Allocation, Performance

Secure Deduplication Scheme for Cloud Encrypted Data

Cloud storage (CS) is gaining much popularity nowadays because it offers low-cost and convenient network storage services. In this big data era, the explosive growth in digital data moves the users towards CS but this causes a lot of storage pressure on CS systems because a large volume of this data is redundant. Data deduplication is an effective data reduction technique. The dynamic nature of data makes security and ownership of data as a very important issue. Proof-of-ownership schemes are a robust way to check the ownership claimed by any owner. However, this method affects the deduplication process because encryption methods have varying characteristics. A convergent encryption (CE) scheme is widely used for secure data deduplication. The problem with the CE-based scheme is that the user can decrypt the cloud data while he has lost his ownership. This article addresses the problem of ownership revocation by proposing a secure deduplication scheme for encrypted data. The proposed scheme enhances the security against unauthorized encryption and poison attack on the predicted set of data.

Cloud storage auditing with deduplication supporting different security levels according to data popularity

The public cloud storage auditing with deduplication is proposed to check the integrity of cloud data under the condition that the cloud stores only a single copy of the same file from different users. To the best of our knowledge, the existing schemes about cloud storage auditing with deduplication cannot support semantic security for cloud data. The recent data breach incidents have led to an increased demand for the security of encryption schemes. Under the circumstances, we consider to provide different security levels according to the popularity of cloud data. We use the semantic secure encryption to encrypt the unpopular data (private data) to realize semantic security and use convergent encryption to encrypt popular data to realize ciphertext deduplication. However, there exists a big challenge for cloud storage auditing when data popularity changes. Because encryption algorithms are different for popular data and unpopular data, the corresponding ciphertext will have to change once data popularity changes. The old authenticators cannot be valid for the integrity checking any longer after ciphertext changes. In order to overcome this challenge, we explore the numerical relationship between old authenticators and new ones. In our designed scheme, it is not necessary for users to be online for doing extra computation when data popularity changes. The cloud can perform the task of authentications transforming to ensure that the cloud storage auditing still smoothly runs. By detailed security Proof and performance analysis, we show that the proposed scheme is secure and efficient.

An enhanced secure content de-duplication identification and prevention (ESCDIP) algorithm in cloud environment

In cloud computing, de-duplication plays an essential role in detecting the de-duplication of encoded data with minimal computation and cost. De-duplication cleans the cloud datacentre’s unwanted storage and helps to identify the right owner of the content in the cloud. Even if there is only one copy of each data file stored in the cloud, the cloud has huge quantity of cloud users who own such data file. The existing method discussed a convergent encryption technique to solve the de-duplication problem. It also developed a system which does not allow storing any duplicate data in the cloud. However, the method does not assure consistency, reliability and confidentiality in cloud. Similar or different cloud users could store duplicated file in the cloud server, where cloud storage utilises high volume of storage. To find a solution for the above problems, the paper introduces enhanced secure content de-duplication identification and prevention (ESCDIP) algorithm to enhance the file-level and content-level de-duplication detection of encoded data with reliability in cloud environment. Every cloud user’s files contain an independent master key for encryption using ESCDIP technique and outsourcing them into the cloud. It reduces the overheads that are associated with the interactive duplication detection and query processes. The proposed method identifies the unique data chunking to store in the cloud. Based on experimental result, the ESCDIP method reduces 2.3 data uploading time in seconds, 2.31 data downloading time in seconds and 32.66% communication cost compared to existing approaches.

Secure Encrypted Data With Authorized Deduplication in Cloud

In this paper, we propose a novel secure role re-encryption system (SRRS), which is based on convergent encryption and the role re-encryption algorithm to prevent the privacy data leakage in cloud and it also achieves the authorized deduplication and satisfies the dynamic privilege updating and revoking. Meanwhile, our system supports ownership checking and achieves the proof of ownership for the authorized users efficiently. Specifically, we introduce a management center to handle with the authorized request and establish a role authorized tree (RAT) mapping the relationship of the roles and keys. With the convergent encryption algorithm and the role re-encryption technique, it can be guaranteed that only the authorized user who has the corresponding role re-encryption key can access the specific file without any data leakage. Through role re-encryption key updating and revoking, our system achieves the dynamic updating of the authorized user’s privilege. Furthermore, we exploit the dynamic count filters (DCF) to implement the data updating and improve the retrieval of ownership verifying effectively. We conduct the security analysis and the simulation experiment to demonstrate the security and efficiency of our proposed system.

CPDA: A Confidentiality-Preserving Deduplication Cloud Storage With Public Cloud Auditing

With growing popularity of cloud storage, the number of users of outsourcing data to cloud servers has increased dramatically. On the one hand, the rapidly increasing volume of data in the cloud is accompanied by a lot of data duplication. On the other hand, the cloud server stores only a unique copy of outsourced data in deduplication cloud storage system and the corruption or missing of the unique copy may bring immeasurable loss. Therefore, the file deduplication and integrity auditing are very important and how to securely and efficiently achieve them simultaneously needs to be settled urgently in academia and industry. In this paper, we propose a confidentiality-preserving deduplication cloud storage with public cloud auditing (CPDA). Firstly, our CPDA scheme achieves secure file deduplication on encrypted file, which supports public integrity auditing for the unique copy in the deduplication cloud storage system. Particularly, our CPDA scheme also realizes secure authentication tag deduplication. Secondly, our CPDA scheme utilizes the convergent encryption and random masking techniques to ensure data confidentiality during the file deduplication and integrity auditing process. Thirdly, our scheme not only supports each data owner to independently launch the integrity auditing of their own files, but also supports cloud server to periodically delegate the third party auditor to concurrently handle multiple auditing tasks to ensure the integrity of the outsourced files. Finally, the security of our scheme is formally proved and its performance is confirmed by numerical analyses and simulation experiments.

Enhanced Convergent Encryption Key Generation for Secured Data Deduplication in Cloud Storage

Data deduplication is broadlyfor maintaining asole copy of user’s data in cloud storage servers. Data Deduplication is a process of verify that whether the data are already stored in the cloud storage or not and maintain a single copy of data in the cloud. Deduplication is possible in cloud only with the use of convergent encryption (CE) technique. This technique is used to generate convergent encryption key from the user data which is to be uploaded to the cloud and the user’s data are encrypted with this convergent encryption key. This CE is exposed to different cryptography attacks. To maintain secure deduplication with convergent encryption in cloud, this paper proposes enhanced convergent encryption key generation technique. The paper introduces scheme with Key Generation and Management as a Service (KGMaaS) mechanism for generating and maintaining key for convergent encryption and deduplication process. Generation of convergent encryption key takes place in user’s side. In this process, a key is used for generating the convergent encryption key unlike existing method. Key used to generate convergent encryption key is received from KGMaaS. KGMaaS is assumed to be a trusted party for key generation and sharing. The proposed technique is analyst for security vulnerability, and it is ensure the security and efficient deduplication by procedure used in the overall data deduplication process.

An Optimization Procedure for Dropping Information Deduplication in Crossbreed Cloud Technique

Objectives: In computing, facts/data deduplication is a particular statistics firmness method for removing reproduction copy of repeating records. Intelligent compression or single-instance storage technique make sure that merely single sole request of information is retained on storage space media, such as disk, flash or tape. Unneeded data blocks are replaced with a pointer to the sole data copy. Methods: This study introduces focus on comparing the clouds via authorization steps, which incorporates file token technology and proportion token generation, in competition. To the convergent encryption and document add steps. We compare the overhead through using quite a lot of distinctive reasons. Findings: In cloud computing reproduction copies of repeat facts within the cloud referred to as Data Deduplication, and broadly used in cloud garage to decrease the amount of garage space and stay bandwidth. Data deduplication removes reproduction copies of equal documents can be existed in Cloud, if so best one reproduction is maintained and replacing the alternative copies with the original reproduction. To defend the privateness of sensitive Information on similar instance as maintaining deduplication, security algorithm is proposed for statistics safety. Application: We enforce a prototype of our proposed legal replica test scheme and behavior tested experiments the usage of our prototype. It shows planned legal duplicate test scheme incurs minimum overhead in comparison to ordinary operations. Keywords: Authoritative Duplicate Check, Cloud Storage, De Duplication, Hybrid Cloud, Secrecy, Security

Secure deduplication with reliable and revocable key management in fog computing

A secure deduplication technique removes duplicate data and stores only single copy to efficiently utilize the storage while guaranteeing the privacy of the data. Thus, it is a necessary technology for resource-limited for devices to save storages. However, most of the existing deduplication schemes based on convergent encryption suffer from 1) a convergent encryption key management problem and 2) a dynamic ownership management problem. In key management, convergent encryption generates a number of encryption keys whose size increases linearly with the number of distinct data. In terms of dynamic ownership management, although the ownership of data in a fog device or cloud storage frequently changes in real-world applications, supporting ownership changes are difficult because the convergent encryption keys are only bound to the data. In order to solve these problems, we present a secure deduplication scheme that features reliable and scalable key management based on pairing-based cryptography and supports dynamic ownership management. The proposed scheme avoids additional costs associated with distributing key components on secure channels and ownership keys on the user side yet guarantees secure key and ownership management.

Secure Deduplication Based on Rabin Fingerprinting over Wireless Sensing Data in Cloud Computing

The rapid advancements in the Internet of Things (IoT) and cloud computing technologies have significantly promoted the collection and sharing of various data. In order to reduce the communication cost and the storage overhead, it is necessary to exploit data deduplication mechanisms. However, existing data deduplication technologies still suffer security and efficiency drawbacks. In this paper, we propose two secure data deduplication schemes based on Rabin fingerprinting over wireless sensing data in cloud computing. The first scheme is based on deterministic tags and the other one adopts random tags. The proposed schemes realize data deduplication before the data is outsourced to the cloud storage server, and hence both the communication cost and the computation cost are reduced. In particular, variable-size block-level deduplication is enabled based on the technique of Rabin fingerprinting which generates data blocks based on the content of the data. Before outsourcing data to the cloud, users encrypt the data based on convergent encryption technologies, which protects the data from being accessed by unauthorized users. Our security analysis shows that the proposed schemes are secure against offline brute-force dictionary attacks. In addition, the random tag makes the second scheme more reliable. Extensive experimental results indicate that the proposed data deduplication schemes are efficient in terms of the deduplication rate, the system operation time, and the tag generation time.

Feasibility study on security deduplication of medical cloud privacy data

In view of the problem of resource waste caused by the repeated storage of medical data, our scheme proposes that convergent encryption is applied to the medical cloud, and the hash value of the convergent key is used as a repeat detection label and Bloom filter search to achieve the efficiency of the medical cloud, and the practicality of medical data is improved by introducing fuzzy keywords searching, ensuring the safe storage and correctness of medical data through local validation. At the same time, based on the actual application of different medical data, we use the authorization access method of identity token to realize the multi role access of medical cloud.

Secure Deduplication for Cloud Storage Using Interactive Message-Locked Encryption with Convergent Encryption, To Reduce Storage Space

ABSTRACT The digital data stored in the cloud requires much space due to copy of the same data. It can be reduced by dedupilcation, eliminating the copy of the repeated data in the cloud provided services. Identifying common checkoff data both files storing them only once. Deduplication can yield cost savings by increasing the utility of a given amount of storage. Unfortunately, deduplication has many security problems so more than one encryption is required to authenticate data. We have developed a solution that provides both data security and space efficiency in server storage and distributed content checksum storage systems. Here we adopt a method called interactive Message-Locked Encryption with Convergent Encryption (iMLEwCE). In this iMLEwCE the data is encrypted firstly then the cipher text is again encrypted. Block-level deduplication is used to reduce the storage space. Encryption keys are generated in a consistent configuration of data dependency from the chunk data. The identical chunks will always encrypt to the same cipher text. The keys configuration cannot be deduced by the hacker from the encrypted chunk data. So the information is protected from cloud server. This paper focuses on reducing the storage space and providing security in online cloud deduplication.

Secure Data Deduplication by Using Convergent Key Technique

Data de-duplication is the significant system used for removal the repetitive copy of information and broadly use in cloud storage to decrease and upload bandwidth. Our main motto be toward accomplish safe de-duplication within cloud. Convergent encryption has been utilized for safe de-duplication, complication is having colossal number of convergent keys. We will be utilizing base line approach in which each of the user have their own masterkey for encrypting their convergent keys also send them to cloud. This approach produces huge amount of keys with increment in amount of user and it needs help of user to look after master keys. At ending we will have De-key in which users need not deal with the key on their individual except steadily circulate convergent key among many servers.

Secure data deduplication using secret sharing schemes over cloud

Data deduplication has become an integral part of managing repositories of outsourced data to the cloud data centers. However, centralized data centers face issues of data loss and accessibility if something goes faulty as deduplication maintains just a unique copy of the content. Secure data deduplication exploits convergent encryption to perform data deduplication in encrypted domain. However, managing convergent keys provides a single point of vulnerability and overhead problems. Towards this end, we propose a secure data deduplication scheme that formally addresses the problems of fault tolerance, efficient and reliable key management, data confidentiality by obfuscation of outsourced information and integrity check at the user’s end prior to downloading via computation of authentication codes. Data is distributed into random looking shares based on Permutation ordered binary (POB) number system at multiple servers and is further made secure via the notion of proof of ownership (PoW) concept. Also, key overhead is minimized using Chinese Remainder Theorem (CRT) based secret sharing. The efficacy of the proposed scheme has been demonstrated by the experimental results and security analysis validates its suitability with respect to various attacks in real time scenarios.

Cryptographic Hashing Method using for Secure and Similarity Detection in Distributed Cloud Data

<p>The explosive increase of data brings new challenges to the data storage and supervision in cloud settings. These data typically have to be processed in an appropriate fashion in the cloud. Thus, any improved latency may originanimmense loss to the enterprises. Duplication detection plays a very main role in data management. Data deduplication calculates an exclusive fingerprint for each data chunk by using hash algorithms such as MD5 and SHA-1. The designed fingerprint is then comparing against other accessible chunks in a database that dedicates for storing the chunks. As an outcome, Deduplication system improves storage consumption while reducing reliability. Besides, the face of privacy for responsive data also arises while they are outsourced by users to cloud. Aiming to deal with the above security challenges, this paper makes the first effort to honor the notion of distributed dependable Deduplication system. We offer new distributed Deduplication systems with privileged reliability in which the data chunks are distributed across a variety of cloud servers. The protection needs an different of using convergent encryption as in foregoing Deduplication systems.</p>

LDAP: a lightweight deduplication and auditing protocol for secure data storage in cloud environment

Cloud data storage outsourcing has emerged as a service that can facilitate data owners (DOs) to store their data remotely. Outsourcing health, educational, financial, multimedia data to cloud storage server is beneficial as it eliminate the burden of initial infrastructure setup and maintenance costs. However data storage security and integrity remains challenging due to lack of control and physical possession over the data by the DOs. In this paper we present a lightweight auditing method for integrity verification and deduplication of outsourced data. The proposed scheme combines hashing and symmetric encryption with improved distributed hash table data structure which reduces the communication and computation overhead for integrity verification and also enables efficient dynamic operations of the data. The storage cost is drastically decreased by deduplication using the combined techniques of convergent encryption and filters. The outcome of the proposed methodology demonstrates that this light weight data audit protocol outperforms the other state of art schemes in computation, communication and storage costs.

A STUDY ON DATA DEDUPLICATION IN CLOUD COMPUTING

Cloud computing provides scalable, low-cost and location-independent services over the internet. The services provided ranges from simple backup services to cloud storage infrastructures. The fast growth of data volumes has greatly increased the demand for techniques for saving disk space and network bandwidth. Cloud storage services like Dropbox, Mozy, Google Drive choose a deduplication technique where the cloud server stores only a single copy of redundant data and creates links to the copy instead of storing actual copies. The security of users data become a new challenge. Hence the users encrypt the data before outsourcing to the cloud. Conventional encryption techniques are incompatible with deduplication while convergent encryption resolves this problem effectively. Various research papers have been studied from the literature, as a result, this paper attempts to survey data deduplication techniques in cloud storage along with concepts, categories and methods used in data deduplication.

Ms‐PoSW: A multi‐server aided proof of shared ownership scheme for secure deduplication in cloud

SummaryCollaborative cloud applications have become the dominant application mode in the big data era. These applications usually generate plenty of cooperative files, which share their ownerships with all collaborative participants. Data deduplication is a promising solution to improve the storage efficiency and save the user expenditure. However, it remains an open issue on how to securely prove the shared ownerships for the shared files and address the attacks on account of using data deduplication. To tackle the above issue, in this paper, we introduce a novel concept of the Proof of Shared oWnership (PoSW) and construct a secure multi‐server‐aided PoSW (ms‐PoSW) scheme for securing client‐side deduplication for the shared files, which is based on the convergent encryption, secret sharing, and bloom filter. In the ms‐PoSW scheme, we employ a sharing convergent key to avoid the single point of failure, introduce the secret sharing algorithm to implement the shared ownership, and construct a novel interaction protocol between the shared owners and the cloud server to prove the shared ownership. Furthermore, a hybrid PoSW scheme is constructed to address the secure proof of hybrid cloud architectures. Finally, security analysis and performance evaluation show the security and efficiency of the proposed schemes.

TrDup: enhancing secure data deduplication with user traceability in cloud computing

Data deduplication is a special type of resource usage optimisation. It leads to reduction of the used storage space and network bandwidth by eliminating duplicate copies of the same data file. Convergent encryption, as the state-of-art approach, has been widely adopted to perform secure deduplication in the cross-user scenario. However, all prior solutions do not support user traceability: there is no way to trace the identities of malicious users in case of duplicate faking attacks. To cope with this problem, we propose a deduplication scheme called TrDup. It realises traceability of malicious user's identity by incorporating traceable signatures with message-locked encryption technique. The TrDup construction is followed by its formal security analysis.

TrDup: enhancing secure data deduplication with user traceability in cloud computing

Data deduplication is a special type of resource usage optimisation. It leads to reduction of the used storage space and network bandwidth by eliminating duplicate copies of the same data file. Convergent encryption, as the state-of-art approach, has been widely adopted to perform secure deduplication in the cross-user scenario. However, all prior solutions do not support user traceability: there is no way to trace the identities of malicious users in case of duplicate faking attacks. To cope with this problem, we propose a deduplication scheme called TrDup. It realises traceability of malicious user's identity by incorporating traceable signatures with message-locked encryption technique. The TrDup construction is followed by its formal security analysis.