基于阈值重加密的抗边信道攻击云数据安全去重方法

doi:10.11959/j.issn.1000-436x.2020103

Abstract

Abstract:

For security and efficiency problems in threshold based deduplication for cloud data,a novel method based on threshold re-encryption was proposed to deal with side channel attacks.A lightweight threshold re-encryption mechanism was presented to transfer the secondary encryption to the cloud for execution and allow clients to generate ciphertext based on key segmentation instead of ciphertext segmentation,both of which largely reduce computational overhead of clients.Also,the proposed mechanism enables clients to decrypt from both one-time encrypted and re-encrypted ciphertext,thus avoiding the overhead of redundant encryption of the same file.Mutual integrity verification between cloud service provider and clients was also supported by the proposed method,which directly ensured the correctness of the correspondence between ciphertext and plaintext on client side.Experiments show that the proposed method not only largely reduces the computational overhead on client side,but also achieves superior storage performance on cloud side simultaneously.

Key words: threshold deduplication, re-encryption, side channel attack, late verify

CLC Number:

TP302

Xin TANG,Linna ZHOU,Weijie SHAN,Dan LIU. Threshold re-encryption based secure deduplication method for cloud data with resistance against side channel attack[J]. Journal on Communications, 2020, 41(6): 98-111.

Figures/Tables 3

References 23

[1]	GAI K K , QIU M K . Blend arithmetic operations on tensor-based fully homomorphic encryption over real numbers[J]. IEEE Transactions on Industrial Informatics, 2017,14(8): 3590-3598.
[2]	LIU J , ASOKAN N , PINKAS B . Secure deduplication of encrypted data without additional independent servers[C]// Proceedings of the 22nd ACM Conference on Computer and Communications Security. New York:ACM Press, 2015: 874-855.
[3]	YAN Z , DING W X , YU X X ,et al. Deduplication on encrypted big data in cloud[J]. IEEE Transactions on Big Data, 2016,2(2): 138-150.
[4]	BELLARE M , KEELVEEDHI S , RISTENPART T . DepLess:server-aided encryption for deduplicated storage[C]// Proceedings of the 22nd USENIX Security Symposium. Berkeley:USENIX Association, 2013: 179-194.
[5]	KWON H , HAHN C , KOO D Y ,et al. Scalable and reliable key management for secure deduplication in cloud storage[C]// Proceedings of IEEE the 10th International Conference on Cloud Computing. Piscataway:IEEE Press, 2017: 391-398.
[6]	DUAN Y , . Distributed key generation for encrypted deduplication:achieving the strongest privacy[C]// Proceedings of the 21st ACM Conference on Computer and Communications Security Workshop. New York:ACM Press, 2014: 57-68.
[7]	YU C M , . Poster:efficient cross-user chunk-level client-side data deduplication with symmetrically encrypted two-party interactions[C]// Proceedings of the 23rd ACM Conference on Computer and Communications Security. New York:ACM Press, 2016: 1763-1765.
[8]	ZUO P F , HUA Y , WANG C ,et al. Mitigating traffic-based side channel attacks in bandwidth-efficient cloud storage[C]// Proceedings of the 32nd IEEE International Parallel ＆ Distributed Processing Symposium. Piscataway:IEEE Press, 2018: 1153-1162.
[9]	POORANIAN Z , CHEN K C , YU C M ,et al. RARE:defeating side channels based on data-deduplication in cloud storage[C]// Proceedings of the 37th IEEE International Conference on Computer Communications Workshops. Piscataway:IEEE Press, 2018: 444-449.
[10]	YU C M , GOCHHAYAT S P , CONTI M ,et al. Privacy aware data deduplication for side channel in cloud storage[J]. IEEE Transactions on Cloud Computing, 2018,doi:10.1109/TCC.2018.2794542.
[11]	HARNIK D , PINKAS B , SHULMAN-PELEG A . Side channels in cloud services:deduplication in cloud storage[J]. IEEE Security ＆Privacy, 2010,8(6): 40-47.
[12]	STANEK J , KENCL L . Enhanced secure thresholded data deduplication scheme for cloud storage[J]. IEEE Transactions on Dependable and Secure Computing, 2018,15(4): 694-707.
[13]	ZHANG Y , MAO Y L , XU M Z ,et al. Towards thwarting template side-channel attacks in secure cloud deduplications[J]. IEEE Transactions on Dependable and Secure Computing, 2019,doi:10.1109/TDSC.2019.2911502.
[14]	STANEK J , SORNIOTTI A , ANDROULAKI E ,et al. A secure data deduplication scheme for cloud storage[C]// Proceedings of the 18th International Conference on Financial Cryptography and Data Security.S.n.:s.l. , 2014: 99-118.
[15]	ARMKNECHT F , BOYD C , DAVIES G T ,et al. Side channels in deduplication:Trade-offs between leakage and efficiency[C]// Proceedings of the 12nd ACM Asia Conference on Computer and Communications Security. New York:ACM Press, 2017: 266-274.
[16]	BELLARE M , KEELVEEDHI S , RISTENPART T . DepLESS:server-aided encryption for deduplicated storage[C]// Proceedings of the 22nd USENIX Security Symposium. Berkeley:USENIX Association, 2013: 179-194.
[17]	LIU X F , SUN W H , LOU W J ,et al. One-tag checker:message-locked integrity auditing on encrypted cloud deduplication storage[C]// Proceedings of the 36th IEEE Conference on Computer Communications. Piscataway:IEEE Press, 2017: 1-9.
[18]	TANG X , ZHOU L N , HUANG Y F ,et al. Efficient cross-user deduplication of encrypted data through re-encryption[C]// Proceedings of the 17th IEEE International Conference on Trust,Security and Privacy in Computing and Communications. Piscataway:IEEE Press, 2018: 897-904.
[19]	DANG H , CHANG E C . Privacy-preserving data deduplication on trusted processors[C]// Proceedings of IEEE the 10th International Conference on Cloud Computing. Piscataway:IEEE Press, 2017: 66-73.
[20]	ZHANG K , LIANG X H , LU R X ,et al. Sybil attacks and their defenses in the Internet of Things[J]. IEEE Internet of Things Journal, 2014,1(5): 372-383.
[21]	DOUCEUR J , ADYA A , BOLOSKY W ,et al. Reclaiming space from duplicate files in a server-less distributed file system[C]// Proceedings of the 22nd International Conference on Distributed Computing Systems. Piscataway:IEEE Press, 2002: 617-624.
[22]	SHAMIR A . How to share a secret[J]. Communications of the ACM, 1979,22(11): 612-613.
[23]	ATENIESE G , HOHENBERGER , . Proxy re-signatures:new definitions,algorithms,and applications[C]// Proceedings of the 22nd ACM Conference on Computer and Communications Security. New York:ACM Press, 2015: 310-319.

Metrics

Recommended 0

No Suggested Reading articles found!

Threshold re-encryption based secure deduplication method for cloud data with resistance against side channel attack

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 3

References 23

Related Articles 15

Metrics

Recommended 0

[1]	Ruiqi LI, Chunfu JIA, Yafei WANG. Multi-key homomorphic proxy re-encryption scheme based on NTRU and its application [J]. Journal on Communications, 2021, 42(3): 11-22.
[2]	Yaru WANG, Ming TANG. Side channel leakage assessment with the Bartlett and multi-classes F-test [J]. Journal on Communications, 2021, 42(12): 35-43.
[3]	Xiaodong YANG, Wanting XI, Jiaqi WANG, Aijia CHEN, Caifen WANG. Electronic evidence sharing scheme of Internet of vehicles based on signcryption and blockchain [J]. Journal on Communications, 2021, 42(12): 236-246.
[4]	Shufen NIU,Wenke LIU,Lixia CHEN,Caifen WANG,Xiaoni DU. Electronic medical record data sharing scheme based on searchable encryption via consortium blockchain [J]. Journal on Communications, 2020, 41(8): 204-214.
[5]	Yingying LI,Jianfeng MA,Yinbin MIAO. Encrypted image retrieval in multi-key settings based on edge computing [J]. Journal on Communications, 2020, 41(4): 14-26.
[6]	FENG Chaosheng,LUO Wangping,QIN Zhiguang,YUAN Ding,ZOU Liping. Attribute-based proxy re-encryption scheme with multiple features [J]. Journal on Communications, 2019, 40(6): 177-189.
[7]	Yi WANG,Zhen WU,Bing LIN. Blind mask template attacks on masked cryptographic algorithm [J]. Journal on Communications, 2019, 40(1): 1-14.
[8]	Zhen WU,Yi WANG,Guanhao ZHOU. High order DPA with profiling [J]. Journal on Communications, 2018, 39(9): 135-146.
[9]	Zhen WU,Zhibo DU,Min WANG,Chunling XIANG. Template attack of Crypto chip based on clustering [J]. Journal on Communications, 2018, 39(8): 83-93.
[10]	Mang SU,Yan YU,Bin WU,Anmin FU. Research on the programming language for proxy re-encryption [J]. Journal on Communications, 2018, 39(6): 89-97.
[11]	Mang SU,Guozhen SHI,Anmin FU,Yan YU,Wei JIN. Proxy re-encryption based multi-factor access control scheme in cloud [J]. Journal on Communications, 2018, 39(2): 96-104.
[12]	Shan JIA,Zhengquan XU,Chuanbo HU,Hao WANG. Fingerprint template protection by adopting random projection based on re-encryption [J]. Journal on Communications, 2018, 39(2): 122-134.
[13]	En ZHANG,Yaoyao PEI,Jiao DU. RLWE-based ciphertext-policy attribute proxy re-encryption [J]. Journal on Communications, 2018, 39(11): 129-137.
[14]	Ju-yan LI,Chun-guang MA,Qian ZHAO. Resplittable threshold multi-broker proxy re-encryption scheme from lattices [J]. Journal on Communications, 2017, 38(5): 157-164.
[15]	En-tao LUO,Guo-jun WANG,Shu-hong CHEN,Khan-butt PINIAL. Privacy preserving friend discovery cross domain scheme using re-encryption in mobile social networks [J]. Journal on Communications, 2017, 38(10): 81-93.