Differentially Authorized Deduplication System Based on Blockchain

doi:10.12142/ZTECOM.202102009

ZTE Communications ›› 2021, Vol. 19 ›› Issue (2): 67-76.DOI: 10.12142/ZTECOM.202102009

收稿日期:2021-01-13 出版日期:2021-06-25 发布日期:2021-07-27

Differentially Authorized Deduplication System Based on Blockchain

ZHAO Tian¹, LI Hui¹(), YANG Xin¹, WANG Han¹, ZENG Ming², GUO Haisheng², WANG Dezheng²

^1.Shenzhen Graduate School, Peking University, Shenzhen 518055, China
^2.ZTE Corporation, Shenzhen 518057, China

Received:2021-01-13 Online:2021-06-25 Published:2021-07-27
About author:ZHAO Tian is a postgraduate of the Shenzhen Graduate School, Peking University, China. His main research directions are big data applications, blockchain, and distributed storage.|LI Hui (huilihuge@163.com) is currently a professor and Ph.D. supervisor with the Shenzhen Graduate School, Peking University, China. His research fields include cyberspace security and block-chain technology, artificial intelligence and future network systems, distributed storage coding theory and systems, intelligent big data analysis, and data standards.|YANG Xin received the B.Eng. degree from the Department of Computer Science and Engineering, South China University of Technology, China in 2016. She is currently pursuing the Ph.D. degree with the School of Information Science, Peking University, China. She is also the student of the Peng Cheng Laboratory, China. Her research interests include cyber security, future network architecture, and distributed storage systems.|WANG Han received the B.Eng. degree from the Department of Communication Engineering, Jilin University of Technology, China in 2017. She is currently pursuing the Ph.D. degree with the School of Information Science, Peking University, China. Her research interests include distributed systems and cyber security.|ZENG Ming received his bachelor’s degree from University of Electronic Science and technology, China, majoring in computer science and technology. He is a system architect of ZTE Corporation and has been engaged in software development and architecture design for more than 16 years. His research interests include big data, blockchain and other related technologies fields.|GUO Haisheng received his master’s degree from Nanjing University of Aeronautics and Astronautics, China. He is a project manager of ZTE Corporation and has been engaged in software development, architecture design, project management for nearly 20 years. His research interests include blockchain and other related technologies fields.|WANG Dezheng received his master’s degree in computer science from Zhejiang University, China. He is a chief engineer of the Center Institute, ZTE Corporation and has been engaged in architecture design for more than 20 years. His research interests include big data and blockchain.
Supported by:
ZTE Industry-University-Institute Cooperation Funds(2019ZTE03-01);National Keystone R&D Program of China(2017YFB0803204);National Natural Science Foundation of China (NSFC)(61671001);Guangdong Provincial R&D Key Program(2019B010137001);Shenzhen Research Programs(JCYJ20190808155607340);PCL Future Regional Network Facilities for Large-scale Experiments and Applications(PCL2018KP001)

摘要/Abstract

Abstract:

In architecture of cloud storage, the deduplication technology encrypted with the convergent key is one of the important data compression technologies, which effectively improves the utilization of space and bandwidth. To further refine the usage scenarios for various user permissions and enhance user’s data security, we propose a blockchain-based differential authorized deduplication system. The proposed system optimizes the traditional Proof of Vote (PoV) consensus algorithm and simplifies the existing differential authorization process to realize credible management and dynamic update of authority. Based on the decentralized property of blockchain, we overcome the centralized single point fault problem of traditional differentially authorized deduplication system. Besides, the operations of legitimate users are recorded in blocks to ensure the traceability of behaviors.

Key words: convergent key, deduplication, blockchain, differential authorization

. [J]. ZTE Communications, 2021, 19(2): 67-76.

ZHAO Tian, LI Hui, YANG Xin, WANG Han, ZENG Ming, GUO Haisheng, WANG Dezheng. Differentially Authorized Deduplication System Based on Blockchain[J]. ZTE Communications, 2021, 19(2): 67-76.

图/表 10

Figure 1 File upload

Figure 2 PoV network model

Figure 3 Message transmission process of Proof of Vote (PoV) consensus

Figure 4 File-level data upload

Figure 5 File-level data download

Figure 6 Block generation process

Table 1 Parameters and their description

Parameter	Description
T_FL	Time required for file label generation
T_CE	Time it takes for the file or data block to convergent encryption
T_FT	File transfer time
T_PQ	Time required for blockchain permission query
T_OE	Time required for outer encryption
T_GB	Time required to generate a block
T_A	Total time
T_AE	Enhancement plan total time

Table 2 Hardware conditions for the implementation environment

Hardware	Setting
Operating system	Ubuntu16.04
CPU brand	AMD
CPU frequency	1.7 GHz
Memory size	8 GB
Network bandwidth	1 000 Mbit/s

Figure 7 Permission query time and main process time

Figure 8 Time required for outer encryption and the main process time

参考文献 21

1	HARNIK D, PINKAS B, SHULMAN⁃PELEG A. Side channels in cloud services: Deduplication in cloud storage [J]. IEEE security & privacy, 2010, 8(6): 40–47. DOI: 10.1109/MSP.2010.187 DOI URL
2	DOUCEUR J R, ADYA A, BOLOSKY W J, et al. Reclaiming space from duplicate files in a serverless distributed file system [C]//22nd International Conference on Distributed Computing Systems. Vienna, Austria: IEEE, 2002: 617–624. DOI: 10.1109/ICDCS.2002.1022312 DOI URL
3	LIU J, ASOKAN N, PINKAS B. Secure deduplication of encrypted data without additional independent servers [C]//22nd ACM SIGSAC Conference on Computer and Communications Security. Denver, USA: ACM, 2015: 874–885. DOI: 10.1145/2810103.2813623 DOI URL
4	LIU X F, SUN W H, LOU W J, et al. One⁃tag checker: message⁃locked integrity auditing on encrypted cloud deduplication storage [C]//IEEE Conference on Computer Communications (INFOCOM). Atlanta, USA: IEEE, 2017: 1–9. DOI: 10.1109/INFOCOM.2017.8056999 DOI URL
5	BELLARE M, KEELVEEDHI S, RISTENPART T. Message⁃locked encryption and secure deduplication [C]//Annual International Conference on the Theory and Applications of Cryptographic Techniques: Berlin/Heidelberg, Germany: Springer, 2013: 296–312. DOI: 10.1007/978-3-642-38348-9_18 DOI URL
6	PUZIO P, MOLVA R, ÖNEN M, et al. ClouDedup: secure deduplication with encrypted data for cloud storage [C]//5th International Conference on Cloud Computing Technology and Science. Bristol, UK: IEEE, 2013: 363–370. DOI: 10.1109/CloudCom.2013.54 DOI URL
7	KEELVEEDHI S, BELLARE M, RISTENPART T. Dupless: server⁃aided encryption for deduplicated storage [C]//22nd USENIX Conference on Security. Washington D. C., USA: USENIX, 2013: 179–194
8	LI J, CHEN X F, HUANG X Y, et al. Secure distributed deduplication systems with improved reliability [J]. IEEE transactions on computers, 2015, 64(12): 3569–3579. DOI: 10.1109/TC.2015.2401017 DOI URL
9	NAKAMOTO S. Bitcoin: a peer⁃to⁃peer electronic cash system [EB/OL]. (2008⁃10⁃31)[2020⁃01⁃01].
10	KHALIL R, GERVAIS A. Revive: rebalancing off⁃blockchain payment networks [C]//ACM SIGSAC Conference on Computer and Communications Security. Dallas, USA: ACM, 2017: 439–453. DOI: 10.1145/3133956.3134033 DOI URL
11	BHATTACHARYA R, WHITE M, BELOFF N. A blockchain based peer⁃to⁃peer framework for exchanging leftover foreign currency [C]//Computing Conference. London, UK: IEEE, 2017: 1431–1435. DOI: 10.1109/SAI.2017.8252284 DOI URL
12	HALEVI S, HARNIK D, PINKAS B, et al. Proofs of ownership in remote storage systems [C]//18th ACM Conference on Computer and Communications Security. Chicago, USA: ACM, 2011: 491–500. DOI: 10.1145/2046707.2046765 DOI URL
13	GERVAIS A, KARAME G O, WÜST K, et al. On the security and performance of proof of work blockchains [C]//ACM SIGSAC Conference on Computer and Communications Security. Vienna, Austria: ACM, 2016: 3–16. DOI: 10.1145/2976749.2978341 DOI URL
14	EYAL I, SIRER E G. Majority is not enough: Bitcoin mining is vulnerable [C]//International Conference on Financial Cryptography and Data Security. Berlin/Heidelberg, Germany: Springer, 2014: 436–454. DOI: 10.1007/978-3-662-45472-5_28 DOI URL
15	KIAYIAS A, RUSSELL A, DAVID B, et al. Ouroboros: a provably secure proof⁃of⁃stake blockchain protocol [C]//Advances in Cryptology—CRYPTO 2017, Cham, Switzerland: Springer, 2017: 357–388. DOI: 10.1007/978-3-319-63688-7_12 DOI URL
16	LI W T, ANDREINA S, BOHLI J M, et al. Securing proof⁃of⁃stake blockchain protocols [C]//Data privacy management, cryptocurrencies and blockchain technology. Cham, Switzerland: Springer, 2017: 297–315. DOI: 10.1007/978-3-319-67816-0_17 DOI URL
17	ZHENG Z B, XIE S A, DAI H N, et al. An overview of blockchain technology: Architecture, consensus, and future trends [C]//International Congress on Big Data (BigData Congress). Honolulu, USA: IEEE, 2017: 557–564. DOI: 10.1109/BigDataCongress.2017.85 DOI URL
18	SANKAR L S, SINDHU M, SETHUMADHAVAN M. Survey of consensus protocols on blockchain applications [C]//4th International Conference on Advanced Computing and Communication Systems (ICACCS). Coimbatore, India: IEEE, 2017: 1–5. DOI: 10.1109/ICACCS.2017.8014672 DOI URL
19	LI K J, LI H, WANG H, et al. PoV: an efficient voting⁃based consensus algorithm for consortium blockchains [J]. Frontiers in blockchain, 2020, 3: 11DOI: 10.3389/fbloc.2020.00011 DOI URL
20	LI J, CHEN X F, LI M Q, et al. Secure deduplication with efficient and reliable convergent key management [J]. IEEE transactions on parallel and distributed systems, 2014, 25(6): 1615–1625. DOI: 10.1109/TPDS.2013.284 DOI URL
21	KAHATE A. Cryptography and network security [M]. New Delhi, India: Tata McGraw⁃Hill Education, 2013

Differentially Authorized Deduplication System Based on Blockchain

RichHTML

PDF

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 21

相关文章 0

编辑推荐

Metrics