高级检索

    云边存储场景下面向动态异构网络的跨用户数据加密去重

    Cross-User Encrypted Data Deduplication for Dynamic Heterogeneous Networks in Cloud-Edge Storage Scenario

    • 摘要: 动态异构网络已成为新一代网络主流形态,海量异质智能终端的爆发式接入,对云边协同架构下的数据加密存储与数据隐私保护提出了严苛要求。加密去重技术可识别并删除重复的加密数据内容,能够在保护数据隐私的同时有效为云边存储节省存储成本,具有很高的实用价值。但现有加密去重方案存在易受到副本伪造攻击、计算开销高、边缘节点存储负担重等局限,无法满足实际应用需求。为此,提出一种云边存储场景下的跨用户加密数据去重方案SEDedup。首先,设计一种适用于云边存储的服务器辅助加密方法,实现高效安全的跨用户数据加密去重,同时可有效防御副本伪造攻击;其次,利用异质终端数据的时间局部性,设计一种基于时段的重复数据检测方法,在降低边缘节点存储成本的同时实现高性能重复检测;最后,融合广义去重技术,实现相似异质终端数据的无损加密去重,最大化存储效率。安全分析与性能评估表明,SEDedup在有效保护数据隐私的同时,性能方面优于现有方案。

       

      Abstract: Dynamic heterogeneous networks have become the mainstream paradigm for next-generation networks. The explosive integration of massive heterogeneous smart terminals imposes stringent requirements on encrypted data storage and privacy preservation within the cloud-edge collaborative architecture. Encrypted deduplication technology can identify and eliminate duplicate encrypted data, effectively reducing storage costs for cloud-edge environments while preserving data privacy, thus holding high practical value. However, existing encrypted deduplication schemes suffer from limitations such as vulnerability to duplicate faking attacks, high computational overhead, and heavy storage burdens on edge nodes, which fail to meet practical application demands. To address these issues, we propose SEDedup, a cross-user encrypted data deduplication scheme designed for cloud-edge storage scenarios. First, a server-aided encryption method suitable for cloud-edge storage is designed to achieve efficient and secure cross-user encrypted deduplication while effectively defending against duplicate faking attacks. Second, leveraging the temporal locality of data from heterogeneous terminals, an epoch-based duplicate data detection method is designed to achieve high-performance duplicate detection while minimizing the storage overhead on edge nodes. Finally, by incorporating generalized deduplication technology, lossless encrypted deduplication for similar heterogeneous terminal data is realized to maximize storage efficiency. Security analysis and performance evaluation demonstrate that SEDedup outperforms existing schemes in terms of performance while effectively preserving data privacy.

       

    /

    返回文章
    返回