云存储中加密数据的自适应重复删除方法  

Adaptive deduplication method for encrypted data in cloud storage

作　　者：张曙光 咸鹤群 刘红燕[1] 侯瑞涛 张曼 Zhang Shuguang;Xian Hequn;Liu Hongyan;Hou Ruitao;Zhang Man(College of Computer Science&Technology,Qingdao University,Qingdao Shandong 266071,China;Key Laboratory of Network Assessment Technology,Chinese Academy of Sciences,Beijing 100093,China;State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China)

机构地区：[1]青岛大学计算机科学技术学院,山东青岛266071 [2]中国科学院信息工程研究所中国科学院网络测评技术重点实验室,北京100093 [3]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《计算机应用研究》2018年第9期2772-2776,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61303197;61501276);山东省自然科学基金资助项目(ZR2013FQ005;ZR2016FQ02);中国科学院网络测评技术重点实验室开放课题

摘　　要：为了保护个人隐私,用户倾向于在数据上传至云服务器之前将其加密。相同的明文数据被加密成不同密文数据,使云服务器无法识别出重复的加密数据。现存的解决方案多数依赖可信第三方,且没有划分数据流行度,导致安全性与执行效率较低。提出一种无须可信第三方的自适应重复删除方法。利用完美散列函数检查数据的流行度,使用口令认证密钥交换协议与同态加密安全传递数据的加密密钥,在保证用户数据隐私的前提下进行安全的重复数据删除。与现有其他方案相比,安全性与实用性更强。实验和仿真证明了方案的高效性。In order to protect personal privacy,users tend to encrypt their data before uploading them to the cloud.With different keys,the same data may have different ciphertexts.This will make it difficult for the cloud server to perform deduplication.Most of the existing solutions relied on the trusted third parties.These schemes did not distinguish between the popularity of the data,which resulted in lower security and implementation efficiency.This paper proposed an adaptive data deduplication scheme.It defined data popularity,and it was measured using perfect hash function.It adopted the password authentication key exchange protocol and homomorphic encryption for encryption key delivery.It achieved secure data deduplication while preserving the data privacy.By comparing with the other schemes,this scheme is more secure and more applicable.The experiments and simulations show that proposed scheme is secure and efficient.

关 键 词：重复数据删除 完美散列函数 口令认证密钥交换协议 同态加密 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]