基于内容加密的安全去重算法研究

Research of secure deduplication algorithm based on content encryption

随着云存储时代的到来,越来越多的用户选择数据外包给云存储端进行存储和管理,云计算发展得到了质的飞跃。为了提高云存储效率和节约网络通信带宽,云环境下的数据加密安全去重问题成了研究热点。从机密性角度出发,对现有的数据加密安全去重算法进行比较分析和评价,并指出各安全去重算法的优势和存在的问题,最后给出基于内容加密的安全去重算法改进方案。该方案利用用户间文件级和用户内块级的不同安全策略解决传统去重算法存在的暴力破解攻击和时间开销较大等问题,并利用多级密钥来保证密钥安全性,同时减少密钥管理开销,以达到密钥管理开销和可靠性的平衡。

With the coming of cloud storage era,more and more users choose data outsourcing to the cloud storage and management,the development of cloud computing has been a qualitative leap.In order to improve the efficiency of cloud storage and save the network communication bandwidth,the security of data encryption in cloud environment has become a research hot issue.From the point of view of confidentiality,this paper makes a comparative analysis and evaluation of the existing secure cloud reloading algorithms for data encryption,and points out the advantages and problems of each secure deduplication algorithm,finally,an improved scheme of content encryption-based security de-duplication algorithm is presented.This scheme uses different security policies of file level and block level between users to solve the problem of brute force attack and large time cost in traditional recalculation.The multi-level key is used to ensure the security of the key,reducing the cost of key management,and achieving the balance of key management cost and reliability.