Research Of A Distributed Encryption Storage Scheme With Fault Tolerance And Its Application

With the popularization and development of information technology and electronic office,most of the enterprises has changed their office mode from the paper-based office to the electronic office now.Because of the preservation and difficult to find of paper documents inconvenient,it has been gradually out of use.Daily office and file archiving uses electronic documents now except for a few important documents.Compared to the traditional paper documents,electronic documents have some characteristics for the improvement of enterprise work efficiency.They modify easier,store easier and find easier,and the improvement is very significant.However,compared with paper documents,electronic documents face more threats: preservation of media damage,intentional or negligent deletion and modification,hackers and viruses,etc..Based on the need for the security in financial application,we propose a fault-tolerant distributed encryption storage scheme with data deduplication by constructing a novel t-out-of-N shared secret mechanism.and then designs a document security management scheme.The main contributions of this thesis are summarized as follows:1.In this thesis,it is shown that the performance of Shin et al.'s scheme is need to be improved since the fault-tolerance and effectiveness are necessary in a distributed encryption storage.2.Fault-tolerant distributed encryption storage with data deduplication is proposed: the encrypted information stored in different storage servers can ensure the security of information,the user will use the secret sharing(t,N)to divide the document and encryption key into N sub block,then upload them to the N distributed storage servers.A user only need to download t encrypted subblocks from t distributed storage servers to restore the encryption document,even a small number of distributed storage server fault system can run normally.Our scheme simultaneously offers the inter-KS and cross-tenant deduplication over encrypted data.3.The communication cost of uploading an encrypted data is reduced by using multiple data storage management servers instead of a single data storage management server.It is convenient for users in different regions to select an available data storage platform management server for processing related financial electronic documents.