A secure client side deduplication scheme in cloud storage environments

Nesrine Kaaniche (1, 2, 3) , Maryline Laurent (1, 2, 3)

1 TSP - RST - Département Réseaux et Services de Télécommunications
2 SAMOVAR - Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux
3 CNRS - Centre National de la Recherche Scientifique

Recent years have witnessed the trend of leveraging cloud-based services for large scale content storage, processing, and distribution. Security and privacy are among top concerns for the public cloud environments. Towards these security challenges, we propose and implement, on OpenStack Swift, a new client-side deduplication scheme for securely storing and sharing outsourced data via the public cloud. The originality of our proposal is twofold. First, it ensures better confidentiality towards unauthorized users. That is, every client computes a per data key to encrypt the data that he intends to store in the cloud. As such, the data access is managed by the data owner. Second, by integrating access rights in metadata file, an authorized user can decipher an encrypted file only with his private key

Mots clés: Cloud Storage; Data Security; Deduplication; Confidentiality; Proof of Ownership

Domaines: Cryptographie et sécurité [cs.CR]

Nesrine Kaaniche, Maryline Laurent. A secure client side deduplication scheme in cloud storage environments. NTMS 2014 : 6th International Conference on New Technologies, Mobility and Security , Mar 2014, Dubai, United Arab Emirates. pp.1 - 7, ⟨10.1109/NTMS.2014.6814002⟩. ⟨hal-01263425⟩