Authorized Client-Side Deduplication Using CP-ABE in Cloud Storage

Abstract EN

Since deduplication inevitably implies data sharing, control over access permissions in an encrypted deduplication storage is more important than a traditional encrypted storage.

Therefore, in terms of flexibility, data deduplication should be combined with data access control techniques.

In this paper, we propose an authorized deduplication scheme using CP-ABE to solve this problem.

The proposed scheme provides client-side deduplication while providing confidentiality through client-side encryption to prevent exposure of users’ sensitive data on untrusted cloud servers.

Also, unlike existing convergent encryption schemes, it provides authorized convergent encryption by using CP-ABE to allow only authorized users to access critical data.

The proposed authorized deduplication scheme provides an adequate trade-off between storage space efficiency and security in cloud environment and is very suitable for the hybrid cloud model considering both the data security and the storage efficiency in a business environment.