System and method for data security deduplication in fog computing environment, and cloud storage platform

Abstract

The invention belongs to the technical field of cloud storage, and discloses a data security deduplication system and method in a fog computing environment, and a cloud storage platform, which adopts an encryption scheme supporting deduplication to ensure that data is safely and efficiently stored on cloud servers and fog nodes; The attribute encryption scheme manages the data ownership of users and fog nodes; MerkleTree is used to generate data labels to prevent malicious users from conducting side channel attacks on servers; The user obtains the data again, which ensures the security of the server data. In addition, the present invention has also carried out a detailed security analysis. It is proved that the present invention can achieve the expected security goal, and can realize efficient data storage and deduplication operation at the same time.

Description

technical field [0001] The invention belongs to the technical field of cloud storage, and in particular relates to a data security deduplication system and method in a fog computing environment, and a cloud storage platform. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: With the development of cloud computing, more and more users prefer to store data on cloud servers rather than on the local side. International Data Center (IDC) According to a report by the Global Times, in 2013, the amount of newly generated data in the world was 4.4ZB, and in 2017, the amount of newly generated data in the world surged to 15.2ZB. It is estimated that by 2020, the amount of newly generated data in the world will be It will reach 40ZB, which will undoubtedly bring a great burden to the cloud server. Another IDC report pointed out that 75% of the data generated in the world every year is duplicated, which seriously damages t...

AI Technical Summary

Problems solved by technology

However, MLE is not dynamic. If a user's authority is revoked, but his MLE key is still kept locally, if the user colludes with some hackers and steals the ciphertext, he can use the previously reserved MLE The plaintext data can be obtained by decrypting the key, which is extremely unsafe for cloud servers

[0004] To sum up, the problems existing in the existing technology are: the deduplication of encrypted data is not compatible with data update, and the existing encrypted data is only applicable to cloud servers. The pressure on the cloud server does not effectively protect the data privacy of users

[0006] Due to the randomness of user key selection, the same plaintext file may be encrypted into different ciphertext files. In addition, when some user permissions are revoked, in order to prevent these users from still being able to decrypt data, the encrypted The traditional update method uses re-encryption technology. However, re-encryption of complete data is expensive.

Images