Secure cloud data deduplication method and system based on trusted hardware

Abstract

The invention discloses a secure cloud data deduplication method and system based on trusted hardware. Comprising the following steps: firstly, performing data encryption and label generation on an original file; sending the encrypted file and a corresponding label to a cloud storage platform; and enabling the cloud storage platform to store the to-be-encrypted file without the same copy after repeatedly detecting the label, and assigning the file permission. A secure trusted hardware area TH is configured in a cloud storage platform, all algorithms and operations related to user file privacy are realized in trusted hardware, and a code running in the trusted hardware is called CEnclave. Before a user communicates with a cloud storage platform, remote authentication needs to be carried out on the user and the TH to ensure secure transmission of data, and after the TH receives the data transmitted by the user, ORAM implicit reading is carried out on the TH and a cloud storage server CSS to realize a secure de-duplication process.

Description

technical field [0001] The invention belongs to the technical field of data deduplication, and in particular relates to a method and system for deduplication of secure cloud data based on trusted hardware. Background technique [0002] Among the massive data, there is a large amount of redundant data, which wastes the storage space in the cloud server. In order to alleviate storage pressure and reduce network communication overhead, data deduplication technology is applied to cloud storage systems. The technology keeps only one backup of the same file in cloud storage, resulting in significant savings in storage costs. [0003] Defects and deficiencies of the prior art: [0004] 1. Data deduplication solutions often require frequent communication between the client and the server. Most existing solutions lack consideration for data security in untrusted environments, and user information may be stolen during the deduplication process. The adversary steals the attack, and ...

AI Technical Summary

Problems solved by technology

[0004] 1. Data deduplication solutions often require frequent communication between the client and the server. Most existing solutions lack consideration for data security in untrusted environments, and user information may be stolen during the deduplication process. The adversary steals the attack, and the original data and private information are leaked;

[0005] 2. Existing solutions often lack the guarantee of data integrity. Malicious users may upload data that is inconsistent with the label, and semi-trusted cloud storage platforms may damage outsourced data due to external and internal attacks. Integrity may be compromised;

Images