RSE-PoW：具有授权的重复数据删除功能的角色对称加密PoW方案，用于多媒体数据

118 浏览量 2021-02-24 23:27:32 上传评论收藏 566KB PDF 举报

在当今数字化时代，数据的爆炸性增长尤其是多媒体数据的迅猛发展，已经使得我们步入了异构多媒体数据的时代。为了提高在异构网络中海量多媒体数据的存储效率和减少管理成本，直接的方法是进行多媒体数据的重复数据删除（deduplication）。然而，这一过程却带来了严重的隐私泄露问题，以及诸如侧信道攻击和未授权访问等新的安全挑战。为了解决这些问题，Jinbo Xiong等人提出了一个新颖的角色对称加密（Role Symmetric Encryption，RSE）算法和基于该算法的拥有权证明（Proof of Ownership，PoW）方案，即RSE-PoW方案，用于在多层次的异构环境中安全地进行重复数据删除。该方案是首个能够防止隐私泄露并能抵抗侧信道攻击的解决方案，同时能够有效地实现对异构网络中多媒体数据的授权重复数据删除。关键词包括：数据去重（Data Deduplication）、拥有权证明（Proof of Ownership）、角色对称加密（Role Symmetric Encryption）、隐私保护（Privacy Protection）和授权去重（Authorized Deduplication）。数据去重技术的核心是识别并消除存储在系统中的重复数据，以减少存储空间的需求，同时保持数据的完整性。这一技术在云计算、备份和存储系统中尤为重要，因为它能够显著降低存储成本并提升效率。在进行数据去重时，数据拥有者必须证明他们对数据拥有合法的所有权，这是RSE-PoW方案的一个关键组成部分。拥有权证明是一种机制，它允许数据拥有者证明其对数据块的唯一所有权。在RSE-PoW方案中，结合角色对称加密技术，使得在不泄露数据内容的前提下，能够证明数据块的所有权。通过这种方式，可以在不侵犯用户隐私的情况下，保护数据不被未授权访问。角色对称加密技术是一种特殊的加密方式，它基于数据的访问角色，而非简单的用户身份进行加密。这种加密策略确保了数据的保密性，并允许系统基于用户角色访问和处理数据，而无需了解数据的明文内容。RSE-PoW方案运用角色对称加密技术，增强了数据去重过程的安全性。授权去重是RSE-PoW方案另一个关键功能，它确保只有授权的数据拥有者或用户能够对其数据进行去重。这一机制有效地保护了数据所有者的利益，防止了未授权的数据复制行为。为了确保RSE-PoW方案的安全性和效率，作者还进行了安全分析和性能评估。通过这些评估，证明了该方案能够有效防止数据泄露和抵御侧信道攻击，同时提高了多媒体数据去重的效率。 Jinbo Xiong及其团队来自福建师范大学数学与信息科学学院、福建省网络空间安全与密码学重点实验室以及西安工程大学信息工程学院。他们的研究成果展现了在数据存储和安全领域进行深入研究和创新的能力，提供了对多媒体数据安全管理具有实际应用价值的新技术。总体来说，RSE-PoW方案的提出，不仅解决了传统数据去重所面临的隐私泄露和安全性问题，还为异构网络环境中的数据管理提供了高效、安全的授权去重解决方案，这对于大数据和云计算领域的数据保护技术具有重要意义。随着数字技术的不断进步，这类研究对于推动数据存储和管理技术的发展具有不可估量的价值。

资源推荐

资源详情

资源评论

Noname manuscript No.

(will be inserted by the editor)

RSE-PoW: A role symmetric encryption PoW

scheme with authorized deduplication for multimedia

data

Jinbo Xiong · Yuanyuan Zhang · Xuan

Li · Mingwei Lin · Zhiqiang Yao ·

Guangjun Liu

Received: date / Accepted: date

Abstract The explosive growth of global data and the gradual evolution of

multimedia processing pattern promote us to enter the era of heterogeneous

multimedia data. To improve the storage eﬃciency and reduce the manage-

ment expenditure of these massive multimedia data in heterogeneous networks,

the direct way is multimedia data deduplication. However, it arises serious pri-

vacy concerns and poses new security challenges, such as privacy leakage, the

side-channel attack and unauthorized access. To solve these issues, we propose

a novel role symmetric encryption (RSE) algorithm and a RSE-based proof of

ownership (RSE-PoW) scheme for secure deduplication in hierarchical hetero-

geneous environments, which is based on the role symmetric encryption, proof

of ownership and bloom ﬁlter. The prop osed scheme is the ﬁrst solution to

prevent the privacy leakage and resist against the side-channel attack, mean-

while, achieve the authorized deduplication eﬀectively for multimedia data in

heterogeneous network. Security analysis and performance evaluation show the

security and eﬃciency of our proposed scheme.

Keywords Data Deduplication · Proof of Ownership · Role Symmetric

Encryption · Privacy Protection · Authorized Deduplication

J. Xiong · Y. Zhang

College of Mathematics and Informatics, Fujian Normal University, Fuzhou, 350117, China;

Fujian Provincial Key Laboratory of Network Security and Cryptology, Fujian Normal U-

niversity, Fuzhou 350007, China

E-mail: {jinbo810, zyy837603010}@163.com

X. Li · M. Lin · Z. Yao(



)

Fujian Engineering Research Center of Public Service Big Data Mining and Application

Fuzhou, 350117, China

E-mail: {jessieli24, linmwcs}@163.com, yzq@fjnu.edu.cn

G. Liu

School of Information Engineering, Xi’an University

Xi’an, 710065, China

E-mail: guangjliu@163.com

2 Jinbo Xiong et al.

1 Introduction

The explosive growth of global data and the rapidly development of heteroge-

neous multimedia and social network promote us to enter the era of heteroge-

neous multimedia data [33]. More and more enterprises and individuals utilize

the cloud platform for multimedia data storage and management to achieve the

resources sharing. And the gradually evolution of multimedia data referring

various media data types like text, audio, video [31], and animation, brings a

challenge for these cloud platforms, where a traditional media ﬁle with single

type develops into the multimedia big data [33]. In addition, the development

of the heterogeneous network and the heterogeneous cloud, which is referred

that a network connects computers and other devices with diﬀerent networks,

operating systems and clouds, [19], such as D2D network of 5G [32], e-health

network [11] [12], social network, heterogeneous multimedia network and wire-

less heterogeneous network [34], facilitates multimedia data distribution and

dissemination [32]. Statistics show that the global data volume reached 8.61

ZB by the end of 2015, and expected to 2020, it will unexpectedly reach 44

ZB [35] [37]. Furthermore, the proportion of multimedia data, such as, image

and video data has exceeded 90% [27]. According to the oﬃcial statistics of

each application, more than 51000 apple applications are downloaded from the

apple store per mimute, the user uploads 300 hours new videos to YouTube

per minute, in one mimute, more than 24.30 million photos are posted to

the Instagram. Therefore, facing the huge amount of multimedia data, how

to improve the storage eﬃciency and reduce the management expenditure in

heterogeneous networks is a critical challenge for the cloud service providers

[13].

Data compression is the direct technology to save storage space and band-

width overheads [22]. However, the diﬀerent individuals may use the diﬀerent

data compression technologies, the same ﬁle will generate multiple replicas in

the cloud server. To solve the above issue, the data deduplication [30] [35] has

been proposed, which is aimed at duplicating the replicas for the data sets. For

a plaintext, the cloud server adopts random sampling or extracting hash value

to check with the source data, if exists, the plaintext will not be uploaded [16].

However, multimedia data deduplication may arise serious privacy concerns

and pose new security challenges, such as privacy leakage, the side-channel

attacks and unauthorized access [14] [39].

Typically, the cloud service platforms are honest-but-curious [36], that is,

they may leak the privacy information because of the curious property or col-

lusion with the adversary. In order to prevent privacy leakage, the common

solution is to encrypt the privacy information [5] [6]. Meanwhile, for achiev-

ing data deduplication in cloud, the convergence encryption (CE) [29] and

message-locked encryption (MLE) [1] have been considered, where the encryp-

tion key is a hash value of the original ﬁle. Therefore, the identical ﬁles will

generate the same key and the same ciphertext. Based on the MLE and the

idea of key updating, Li et al. [15] and Qin et al. [25] proposed the rekeying

scheme to implement encrypted deduplication storage system. The another

Title Suppressed Due to Excessive Length 3

solution is to audit the outsourced data, Shen et al. [28] proposed a novel au-

diting protocol with global and sampling blockless veriﬁcation to achieve the

privacy protection. However, the above CE algorithm easily suﬀers from the

content guessing attack, where the adversary may guess the content based on

the intercepted ciphertext. Meanwhile, the data deduplication schemes based

on CE may result in the side-channel attack, where an adversary obtains the

sensitive information simply by supplying the hash value of the ﬁle [10].

In order to counter the side-channel attacks [26], Halevi et al. [9] proposed

a novel security protocol, called the proof of ownership (PoW), which is used

to verify that a user who indeed owns a particular ﬁle. PoW protocol is an

interaction protocol between the client side and the server side. Moreover, to

improve the eﬃciency, ﬂexibility and scalability of the PoW protocol, a series

of enhanced various schemes were proposed based on the challenge-response

model, such as s-PoW [4] [24], bf-PoW [2], ce-PoW [7], ase-PoW [8] and PoSW

[39].

However, the above PoW schemes could not satisfy the access control to

the multimedia ﬁle, that is, diﬀerent individuals own diﬀerent privileges, only

authorized owners can access the corresponding multimedia ﬁles. Li et al. [14],

Xiong et al. [38] and Miao et al. [21] proposed the schemes in a hybrid cloud

architecture and multi-server-aided scheme for secure authorized deduplica-

tion in cloud. However, the most solutions of authorized deduplication are not

suitable for the widely used hierarchical heterogeneous environment. Most of

the cloud applications are implemented under the hierarchical environment,

e.g., company managements, school managements, heterogeneous networks.

Gonzalez-Manzano et al. [8] proposed an ase-PoW scheme in the hierarchi-

cal environment, which uses a lightweight access control procedure to resist

against the content guessing attacks, where the encryption key is linked to the

owners’ attributes. However, the proposed scheme does not consider the key

management, and does not describe the key revocation and update policies.

Furthermore, the process of the key calculation is the symmetric recursive

encryption with the high computational cost.

In order to achieve the multimedia data dedulpication, Rashid et al. [27],

Li et al. [18] and Kwon et al. [13] proposed a series of schemes for multimedia

data dedulpication in cloud. However, these schemes have less considered the

side-channel attacks and the authorized deduplication.

To tackle the above issues, we put forward a novel Role Symmetric Encryp-

tion PoW (RSE-PoW) scheme for secure multimedia deduplication in hetero-

geneous environments. Our proposed scheme is based on the role symmetric

encryption [40], proof of ownership [9] and bloom ﬁlter [3] to achieve secure

multimedia data deduplication, which improves the ase-PoW scheme proposed

by Gonzalez-Manzano et al. [8]. Up to now, it is the ﬁrst solution to preven-

t the privacy leakage and resist against the side-channel attacks, meanwhile,

achieve the authorized deduplication eﬀectively for multimedia data. The con-

tributions of the proposed scheme are shown as follows:

4 Jinbo Xiong et al.

– We describe a novel Role Symmetric Encryption (RSE) algorithm and de-

ﬁne a hierarchical tree structure to manage the user’s role keys. Multimedia

data can be map to the hierarchical structure, and the relationship of the

user roles can also be mapped to the hierarchical structure. For the hierar-

chical role tree, the root node assigns the master key to each department,

and the other keys of groups are assigned and calculated by the superi-

or nodes. Diﬀerent role keys represent diﬀerent privileges, the encryption

key is related to the role key according to access control policies. There-

fore, only users with speciﬁc role permissions can access the corresponding

multimedia ﬁles.

– In our RSE algorithm, we deﬁne the access control policies based on role,

when the user’s permission is revoked, the corresponding role key should be

deleted and updated. For the hierarchical role tree, we just delete the role

key node of the given user, and reassign the master key to the department

that includes the deleted node. The group keys are assigned and calculated

by the superior node, and have no eﬀect on the other departments, which

can achieve ﬂexible access control.

– We propose a novel Role Symmetric Encryption PoW (RSE-PoW) scheme,

which combines the RSE algorithm with the PoW security proposal to

achieve secure multimedia data deduplication in hierarchical heterogeneous

environments. We adopt the RSE to prevent the privacy leakage, and use

the PoW protocol to resist against the side-channel attacks, and utilize the

role access control mechanism to achieve authorized deduplication. More-

over, we consider the key revocation and update policies, and implement

the proposed RSE-PoW to achieve secure multimedia data deduplication.

Security analysis shows that the proposed scheme is secure under the pro-

posed security model. Meanwhile, the performance evaluation makes it

clear that the proposed scheme is eﬃcient.

The rest of this paper is organized as follows: Section 2 introduces the

preliminary in our work. In Section 3, we present the overview, models and

goals. Section 4 describes the details of the RSE algorithm and RSE-PoW

scheme. Section 5 gives the security analysis of the proposed schemes, and the

performance analysis and evaluation are described in Section 6. We discuss

the related work in Section 7. Finally, we draw the conclusions in Section 8.

2 Preliminary

2.1 Data Structure: Bloom Filter

Bloom ﬁlter (BF) [3] is used to retrieve whether a speciﬁed element is in a

set. BF consists of a binary vector and a series of random mapping functions.

Through multiple hash operations, the elements is mapped to a bit array. If

all the mapping results are equal to 1, the retrieved element exists in the set.

The less memory consumption and the higher time eﬃciency are the main

advantages of BF. However, there is a certain probability of false positives

剩余24页未读，继续阅读

评论收藏

内容反馈

weixin_38613548

粉丝: 4
资源: 934

RSE-PoW：具有授权的重复数据删除功能的角色对称加密PoW方案，用于多媒体数据

rse-jobscraper:一个Python程序，用于刮擦某些网站以进行研究软件工程类型的工作并发送电子邮件

具有云存储权限的加密文件重复数据删除方案

rse-services:研究软件工程服务，用于可复制，可持续的软件

RSE-Project5:Udacity Robotics软件工程师Nanodegree-项目5-家庭服务机器人

sublime-scheme-rse:Sublime Text 配色方案 RSE

international-survey-analysis:RSE国际调查分析

rse-tools:一小部分主要用于研究软件开发的临时工具

rse-stories:什么是RSE？ 你的故事是什么？ 通过分享故事，我们可以更好地了解成为研究软件工程师的意义

RSE-runtime-3.4.zip

基于策略的加密云存储重复数据删除机制

云存储系统的多用户可搜索对称加密方案

eclipse-rse-3.2-1.el6.i686.rpm

基于labview的数据采集

RSE加密解密算法实例---可直接运行

matlab有些代码不运行-rse-handbook:RSE手册

云计算工程师 RSE-Cloud 考试大纲

m---rse:摩尔斯电码机模拟器

相关性分析rse-assignment-ma笔记

锐捷认证云桌面工程师（RSE-CDA ）PPT.rar

新增指令冒险控制1

2022锐捷RSE-cloud考题.rar

android多国语言文件夹文件汇总.pdf

数据采集解析实用教案.pptx

锐捷项目管理RSE-PM(C9201)

eclipse远程开发插件RSE

三菱电梯故障代码表.pdf

最新资源

rse-stories:什么是RSE？你的故事是什么？通过分享故事，我们可以更好地了解成为研究软件工程师的意义