基于布隆过滤器所有权证明的高效安全可去重云存储方案

摘要

Convergent encryption algorithm is generally used in deduplication cloud storage system,the data can be encrypted by using the hash value as the encryption key,so that the same data is encrypted to obtain the same ciphertext,and the deletion of the duplicate data can be realized,then through the Proof of oWnership (PoW),the authenticity of user data can be verified to protect data security.Aiming at the problem that the time overhead of Proof of oWnership (PoW) is too high,which leads to the degradation of the whole system performance,an efficient security method based on Bloom Filter (BF) was proposed to verify the user hash value and the initialization value efficiently.Finally,a BF scheme supporting finegrained data deduplication was proposed.When the file level data was duplicated,the PoW was needed;otherwise,only partial block level data duplication detection was needed.The simulation experiment results show that,the key space overhead of the proposed BF scheme is lower than the classical Baseline scheme,and the time cost of the BF scheme is also lower than the Baseline scheme;and with the increase of data size,the performance advantage of BF scheme is more obvious.%可去重云存储系统中一般采用收敛加密算法,通过计算数据的哈希值作为其加密密钥,使得重复的数据加密后得到相同的密文,可实现对重复数据的删除;然后通过所有权证明(PoW),验证用户数据的真实性来保障数据安全.针对可去重云存储系统中所有权证明时间开销过高导致整个系统性能下降问题,提出了一种基于布隆过滤器进行所有权证明的高效安全方法,实现用户计算哈希值与初始化值的快速验证.最后,提出一种支持细粒度重复数据删除的BF方案,当文件级数据存在重复时进行所有权证明,否则只需要进行局部的文件块级数据重复检测.通过仿真对比实验,结果表明所提BF方案空间开销低于经典Baseline方案,同时时间开销低于经典Baseline方案,在数据文件越大的情况下性能优势更加明显.