Proxy Re-encryption Based Secure De-duplication

Along with the rise of social informatization level, requirements for mass data storage and processing have put forward higher requirements on mass storage space utilization rate and data safety. More and more large-scale archive storage systems choose data de-duplication technology to reduce the total cost of ownership, to improve the efficiency of network transmission, and use encryption technology to ensure the security of storage data. The former utilizes the similarity of data, and the encryption algorithm means to make precisely the encrypted ciphertexts be as close as possible to the random value of theory, so de-duplication on encrypted data directly reduces efficiency of data de-duplication. The target of this paper is to build a security mechanism for data de-duplication, trying to ensure the confidentiality of stored data under the premise of de-duplication efficiency.This paper makes modeling assumptions and limitations of the schema from the problem to solve, solution, and goals to achieve. This paper introduces related technologies including document segmentation and data de-duplication algorithm, data integrity and consistency assurance and inspection, lockbox, congestion mechanism, and proxy re-encryption. Then we analyze and summarize research status of the three fields--data de-duplication, storage security and secure. On this basis, we design secure de-duplication scheme based on the proxy re-encryption, including three aspects:mechanism of metadata management and access, system infrastructure and file access process. Finally, this paper analyzes security and performance of the mechanism and suggest for further research.