Secure Deduplication of Encrypted Data without Additional Independent Servers

Paper 2015/455

Secure Deduplication of Encrypted Data without Additional Independent Servers

Jian Liu, N. Asokan, and Benny Pinkas

Abstract

Encrypting data on client-side before uploading it to a cloud storage is essential for protecting users' privacy. However client-side encryption is at odds with the standard practice of deduplication. Reconciling client-side encryption with cross-user deduplication is an active research topic. We present the first secure cross-user deduplication scheme that supports client-side encryption {\em without requiring any additional independent servers}. Interestingly, the scheme is based on using a PAKE (password authenticated key exchange) protocol. We demonstrate that {\em our scheme provides better security guarantees than previous efforts}. We show both the effectiveness and the efficiency of our scheme, via simulations using realistic datasets and an implementation.

Metadata

Available format(s): PDF
Publication info: Preprint. MINOR revision.
Keywords: applications
Contact author(s): jian liu @ aalto fi
History: 2016-09-07: last of 7 revisions; 2015-05-13: received; See all versions
Short URL: https://ia.cr/2015/455
License: CC BY

BibTeX

@misc{cryptoeprint:2015/455,
      author = {Jian Liu and N. Asokan and Benny Pinkas},
      title = {Secure Deduplication of Encrypted Data without Additional Independent Servers},
      howpublished = {Cryptology {ePrint} Archive, Paper 2015/455},
      year = {2015},
      url = {https://eprint.iacr.org/2015/455}
}