A client-side deduplication method for encrypted data blocks supporting data update

Abstract

The invention discloses a data update-supported deduplication method for an encrypted data block client. A convergence encryption algorithm is adopted, so that the same plaintext file blocks after encryption are mapped into the same ciphertext file blocks, a novel dynamic balance skip list is constructed as a file ownership authentication structure, and file ownership authentication interaction isperformed on a server and a subsequent uploader of files to achieve the deduplication of the encrypted data block client. A dynamic balance skip list self-balancing method is proposed, and nodes in the dynamic balance skip list are modified, inserted and deleted according to the dynamic operation instruction uploaded by a user and the authentication value of the plaintext file blocks to be updated; the method improves the deduplication ratio of the server and storage resource utilization rate, saves user bandwidth and upload time, and supports data block update to achieve server-side data flexible management.

Description

technical field [0001] The invention belongs to the technical field of computers, and further relates to a deduplication method of an encrypted data block client supporting data update in the technical field of information security. The present invention can be used in a cloud storage system that supports deduplication and update of encrypted data blocks, not only can improve the deduplication ratio, save upload bandwidth of users and storage space of servers, but also support user's update operation of file blocks, and realize flexible data management. Background technique [0002] Cloud storage data deduplication technology is widely used in data backup to reduce network and storage overhead. This technology eliminates data redundancy, leaving only one physical copy rather than multiple copies of the same content. Data deduplication technology is based on different deduplication strategies, which can be divided into client-side or server-side deduplication, file-level or ...

AI Technical Summary

Problems solved by technology

The shortcomings of this method are: the key in this method is randomly generated by the user, which cannot resist the content spoofing attack initiated by the first uploader of the file, the security is low, and this method does not support file block level deduplication , the deduplication granularity is small, and the deduplication ratio is low

The shortcomings of this method are: using bilinear algorithm and exponential operation, the calculation complexity is high and the efficiency is low; it cannot support the user's update operation on the file block. If the user wants to update the cloud backup file, he needs to upload the update. The entire file, not just the file block that needs to be updated, thus wasting user upload bandwidth and upload time

The shortcomings of this scheme are: large-scale insertion and deletion operations will lead to an imbalance in the homomorphic authentication structure, thus losing the efficiency of binary search; this method does not support deduplication of encrypted file blocks, and the deduplication ratio is low

The shortcomings of this method are: no safe and efficient file ownership authentication method is proposed, resulting in a large number of repeated file block uploads, wasting user bandwidth; the iterative convergence encryption algorithm is used to calculate the file block ciphertext, so that the decryption process of the file block ciphertext Low efficiency; due to its own structural limitations, Merkle Tree only supports leaf node modification and update, and does not support leaf node insertion and deletion updates. Therefore, it cannot fully meet the user's update requirements for file blocks

Images