Privacy-preserving deduplication of encrypted data with dynamic ownership management in fog computing

Future Generation Computer Systems

Volumn 78, Issue , 2018, Pages 739-752

  Koo, Dongyoung ^a   Hur, Junbeom ^a  

^a Korea University   (South Korea)

Author keywords

Data deduplication; Data ownership management; Data privacy; Efficiency; Fog computing

Indexed keywords

ACCESS CONTROL; DATA PRIVACY; DIGITAL STORAGE; EFFICIENCY; FOG; STORAGE MANAGEMENT;

COMMUNICATION OVERHEADS; COMPUTING ENVIRONMENTS; DATA DE DUPLICATIONS; DATA OWNERSHIP; LARGE AMOUNTS OF DATA; OWNERSHIP MANAGEMENTS; SECURITY AND PERFORMANCE; STORAGE SERVICE PROVIDERS;

INFORMATION MANAGEMENT;

EID: 85011277966     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2017.01.024     Document Type: Article

References (75)

1. R. van der Meulen, Gartner says 6.4 billion connected “things” will be in use in 2016, up 30 percent from 2015, Available at http://www.gartner.com/newsroom/id/3165317 (11/10/2015).
2. Idc market in a minute: Internet of things, Available at http://www.idc.com/downloads/idc_market_in_a_minute_iot_infographic.pdf.
3. S. Yi, C. Li, Q. Li, A survey of fog computing: Concepts, applications and issues, in: Workshop on Mobile Big Data (Mobidata), 2015, pp. 37–42.
4. F. Bonomi, R. Milito, J. Zhu, S. Addepalli, Fog computing and its role in the Internet of things, in: MCC Workshop on Mobile Cloud Computing (MCC), 2012, pp. 13–16.
5. I. Stojmenovic, Fog computing: A cloud to the ground support for smart things and machine-to-machine networks, in: Australasian Telecommunication Networks and Applications Conference (ATNAC), 2014, pp. 117–122.
6. Bonomi, F., Milito, R., Natarajan, P., Zhu, J., Fog Computing: A Platform for Internet of Things and Analytics. 2014, Springer International Publishing, 169–186.
7. M. Yannuzzi, R. Milito, R. Serral-Gracia, D. Montero, M. Nemirovsky, Key ingredients in an iot recipe: Fog computing, cloud computing, and more fog computing, in: IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), 2014, pp. 325–329.
8. A. Bisong, S.M. Rahman, An overview of the security concerns in enterprise cloud computing, CoRR abs/1101.5613, 2011, pp. 1–161. URL http://arxiv.org/abs/1101.5613.
9. I. Stojmenovic, S. Wen, The fog computing paradigm: Scenarios and security issues, in: Federated Conference on Computer Science and Information Systems (FedCSIS), 2014, pp. 1–8.
10. Rahman, N.H.A., Glisson, W.B., Yang, Y., Choo, K.-K.R., Forensic-by-design framework for cyber-physical cloud systems. IEEE Cloud Comput. 3:1 (2016), 50–59.
11. Yang, Y., Lu, J., Choo, K.-K.R., Liu, J.K., On Lightweight Security Enforcement in Cyber-Physical Systems. 2016, Springer International Publishing, 97–112.
12. Teing, Y.-Y., Dehghantanha, A., Choo, K.-K.R., Yang, L.T., Forensic investigation of {P2P} cloud storage services and backbone for iot networks: Bittorrent sync as a case study. Comput. Electr. Eng., 2016, 1–14.
13. Mailcious insider attacks to rise, Available at http://news.bbc.co.uk/2/hi/7875904.stm.
14. Ex-employees say it's ok to take corporate data with them, Available at http://www.darkreading.com/insider-threat/167801100/security/vulnerabilities/240148112/ex-employees-say-it-s-ok-to-take-corporate-data-with-them.
15. Jiang, R., Lu, R., Luo, J., Lai, C., Shen, X.S., Efficient self-healing group key management with dynamic revocation and collusion resistance for scada in smart grid. Secur. Commun. Netw. 8:6 (2015), 1026–1039.
16. Cahyani, N.D.W., Martini, B., Choo, K.-K.R., Al-Azhar, A.M.N., Forensic data acquisition from cloud-of-things devices: windows smartphones as a case study. Concurr. Comput.: Pract. Exper., 2016, 1–16.
17. D'Orazio, C.J., Choo, K.-K.R., Yang, L.T., Data exfiltration from Internet of things devices: ios devices as case studies. IEEE Internet Things J. PP:99 (2016), 1–12.
18. D'Orazio, C.J., Choo, K.-K.R., A technique to circumvent ssl/tls validations on ios devices. Future Gener. Comput. Syst., 2016, 1–9.
19. Choo, K.-K.R., Secure Key Establishment, Vol. 41. 2009, Springer, US.
20. Goyal, V., Pandey, O., Sahai, A., Waters, B., Attribute-based encryption for fine-grained access control of encrypted data. ACM Conference on Computer and Communications Security, (CCS), 2006, ACM, 89–98.
21. Yang, Y., Liu, J.K., Liang, K., Choo, K.-K.R., Zhou, J., Extended Proxy-Assisted Approach: Achieving Revocable Fine-Grained Encryption of Cloud Data. 2015, Springer International Publishing, 146–166.
22. Yang, Y., Zhu, H., Lu, H., Weng, J., Zhang, Y., Choo, K.-K.R., Cloud based data sharing with fine-grained proxy re-encryption. Pervasive Mob. Comput. 28 (2016), 122–134.
23. P. Puzio, R. Molva, M. Onen, S. Loureiro, Cloudedup: Secure deduplication with encrypted data for cloud storage, in: IEEE International Conference on Cloud Computing Technology and Science (CloudCom), Vol. 1, 2013, pp. 363–370.
24. Puzio, P., Molva, R., Önen, M., Loureiro, S., Block-level de-duplication with encrypted data. Open J. Cloud Comput. (OJCC) 1:1 (2014), 10–18.
25. J. Liu, N. Asokan, B. Pinkas, Secure deduplication of encrypted data without additional independent servers, in: ACM Conference on Computer and Communications Security (CCS), 2015, pp. 874–885.
26. S. Halevi, D. Harnik, B. Pinkas, A. Shulman-Peleg, Proofs of ownership in remote storage systems, in: ACM Conference on Computer and Communications Security (CCS), 2011, pp. 491–500.
27. W.K. Ng, Y. Wen, H. Zhu, Private data deduplication protocols in cloud storage, in: Annual ACM Symposium on Applied Computing (SAC), 2012, pp. 441–446.
28. J. Xu, E.-C. Chang, J. Zhou, Weak leakage-resilient client-side deduplication of encrypted data in cloud storage, in: ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2013, pp. 195–206.
29. D. Singelee, S. Seys, L. Batina, I. Verbauwhede, The communication and computation cost of wireless security: Extended abstract, in: ACM Conference on Wireless Network Security (WiSec), 2011, pp. 1–4.
30. Di Pietro, R., Oligeri, G., Esc: An efficient, scalable, and crypto-less solution to secure wireless networks. Comput. Netw. 84 (2015), 46–63.
31. M.W. Storer, K. Greenan, D.D. Long, E.L. Miller, Secure data deduplication, in: ACM International Workshop on Storage Security and Survivability (StorageSS), 2008, pp. 1–10.
32. S. Keelveedhi, M. Bellare, T. Ristenpart, Dupless: Server-aided encryption for deduplicated storage, in: USENIX Security Symposium, 2013, pp. 179–194.
33. Bellare, M., Keelveedhi, S., Ristenpart, T., Message-Locked Encryption and Secure Deduplication. 2013, Springer, Berlin, Heidelberg, 296–312.
34. M. Li, C. Qin, P.P.C. Lee, J. Li, Convergent dispersal: Toward storage-efficient security in a cloud-of-clouds, in: USENIX Workshop on Hot Topics in Storage and File Systems (HotStorage), Philadelphia, PA, 2014, pp. 1–5.
35. M. Li, C. Qin, P.P.C. Lee, Cdstore: Toward reliable, secure, and cost-efficient cloud storage via convergent dispersal, in: USENIX Annual Technical Conference (USENIX), Santa Clara, CA, 2015, pp. 111–124.
36. Li, J., Chen, X., Huang, X., Tang, S., Xiang, Y., Hassan, M.M., Alelaiwi, A., Secure distributed deduplication systems with improved reliability. IEEE Trans. Comput. 64:12 (2015), 3569–3579.
37. Blakley, G.R., Meadows, C., Security of Ramp Schemes. 1985, Springer, Berlin, Heidelberg, 242–268.
38. Rabin, M.O., Efficient dispersal of information for security, load balancing, and fault tolerance. J. ACM 36:2 (1989), 335–348.
39. J.R. Douceur, A. Adya, W.J. Bolosky, D. Simon, M. Theimer, Reclaiming space from duplicate files in a serverless distributed file system, in: International Conference on Distributed Computing Systems (ICDCS), 2002, pp. 617–624.
40. Harnik, D., Pinkas, B., Shulman-Peleg, A., Side channels in cloud services: Deduplication in cloud storage. IEEE Secur. Privacy 8:6 (2010), 40–47.
41. S. Lee, D. Choi, Privacy-preserving cross-user source-based data deduplication in cloud storage, in: International Conference on ICT Convergence (ICTC), 2012, pp. 329–330.
42. O. Heen, C. Neumann, L. Montalvo, S. Defrance, Improving the resistance to side-channel attacks on cloud storage services, in: International Conference on New Technologies, Mobility and Security (NTMS), 2012, pp. 1–5.
43. Y. Shin, J. Hur, K. Kim, Security weakness in the proof of storage with deduplication., in: IACR Cryptology ePrint Archive 2012 (2012) 1–11.
44. Nam, J., Choo, K.-K.R., Han, S., Kim, M., Paik, J., Won, D., Efficient and anonymous two-factor user authentication in wireless sensor networks: Achieving user anonymity with lightweight sensor computation. PLoS One 10:4 (2015), 1–21.
45. Yang, Y., Cai, H., Wei, Z., Lu, H., Choo, K.-K.R., Towards Lightweight Anonymous Entity Authentication for IoT Applications. 2016, Springer International Publishing, 265–280.
46. Barreto, J., Veiga, L., Ferreira, P., Hash challenges: Stretching the limits of compare-by-hash in distributed data deduplication. Inform. Process. Lett. 112:10 (2012), 380–385.
47. González-Manzano, L., Orfila, A., An efficient confidentiality-preserving proof of ownership for deduplication. J. Netw. Comput. Appl. 50 (2015), 49–59.
48. Y. Zheng, X. Yuan, X. Wang, J. Jiang, C. Wang, X. Gui, Enabling encrypted cloud media center with secure deduplication, in: ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2015, pp. 63–72.
49. S. Song, B.-Y. Choi, D. Kim, Selective encryption and component-oriented deduplication for mobile cloud data computing, in: International Conference on Computing, Networking and Communications (ICNC), 2016, pp. 1–5.
50. E. Esiner, A. Datta, Layered security for storage at the edge: On decentralized multi-factor access control, in: International Conference on Distributed Computing and Networking (ICDCN), 2016, pp. 9:1–9:10.
51. Widodo, R.N., Lim, H., Atiquzzaman, M., Sdm: Smart deduplication for mobile cloud storage. Future Gener. Comput. Syst., 2016, 1–10.
52. Li, J., Chen, X., Li, M., Li, J., Lee, P.P.C., Lou, W., Secure deduplication with efficient and reliable convergent key management. IEEE Trans. Parallel Distrib. Syst. 25:6 (2014), 1615–1625.
53. X. Jin, L. Wei, M. Yu, N. Yu, J. Sun, Anonymous deduplication of encrypted data with proof of ownership in cloud storage, in: IEEE/CIC International Conference on Communications in China (ICCC), 2013, pp. 224–229.
54. Telefonica, the response of the csps to the iot burst, Available at https://iot.telefonica.com/multimedia-resources/the-response-of-the-csps-to-the-iot-burst-whitepaper.
55. Y. Ke, R. Sukthankar, L. Huston, Y. Ke, R. Sukthankar, Efficient near-duplicate detection and sub-image retrieval, in: ACM Multimedia, Vol. 4, 2004, pp. 1–10.
56. Y. Chen, W. He, Y. Hua, W. Wang, Compoundeyes: Near-duplicate detection in large scale online video systems in the cloud, in: IEEE International Conference on Computer Communications (INFOCOM), 2016, pp. 1–9.
57. V. Rastogi, S. Nath, Differentially private aggregation of distributed time-series with transformation and encryption, in: ACM SIGMOD International Conference on Management of Data (SIGMOD), 2010, pp. 735–746.
58. G. Ács, C. Castelluccia, I Have a DREAM! (DiffeRentially privatE smArt Metering), 2011, pp. 118–132.
59. N. Mohammed, R. Chen, B.C.M. Fung, P.S. Yu, Differentially private data release for data mining, in: ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD), 2011, pp. 493–501.
60. Li, L., Lu, R., Choo, K.-K.R., Datta, A., Shao, S., Privacy-preserving-outsourced association rule mining on vertically partitioned databases. IEEE Trans. Inf. Forensics Secur. 11:8 (2016), 1847–1861.
61. Miao, M., Wang, J., Li, H., Chen, X., Secure multi-server-aided data deduplication in cloud computing. Pervasive Mob. Comput. 24 (2015), 129–137 Special Issue on Secure Ubiquitous Computing.
62. Y. Duan, Distributed key generation for encrypted deduplication: Achieving the strongest privacy, in: ACM Workshop on Cloud Computing Security (CCSW), 2014, pp. 57–68.
63. A. Azfar, K.-K.R. Choo, L. Liu, An android social app forensics adversary model, in: Hawaii International Conference on System Sciences (HICSS), 2016, pp. 5597–5606.
64. D'Orazio, C., Choo, K.-K.R., An adversary model to evaluate DRM protection of video contents on ios devices. Comput. Secur. 56 (2016), 94–110.
65. D'Orazio, C.J., Lu, R., Choo, K.-K.R., Vasilakos, A.V., A markov adversary model to detect vulnerable ios devices and vulnerabilities in ios apps. Appl. Math. Comput. 293 (2017), 523–544.
66. Do, Q., Martini, B., Choo, K.-K.R., A forensically sound adversary model for mobile devices. PLoS One 10:9 (2015), 1–15.
67. Lamport, L., Password authentication with insecure communication. Commun. ACM 24:11 (1981), 770–772.
68. Coron, J.-S., Mandal, A., Naccache, D., Tibouchi, M., Fully Homomorphic Encryption over the Integers with Shorter Public Keys. 2011, Springer, Berlin, Heidelberg, 487–504.
69. Raspberry pi, Available at http://www.raspberrypi.org/.
70. Wikipedia, List of conutries by Internet connection speeds, Available at https://en.wikipedia.org/wiki/List_of_countries_by_Internet_connection_speeds.
71. Almeroth, K.C., Ammar, M.H., Multicast group behavior in the Internet's multicast backbone (mbone). IEEE Commun. Mag. 35:6 (1997), 124–129.
72. W. Zhang, H. Tang, H. Jiang, T. Yang, X. Li, Y. Zeng, Multi-level selective deduplication for vm snapshots in cloud storage, in: IEEE International Conference on Cloud Computing (CLOUD), 2012, pp. 550–557.
73. Boneh, D., Boyen, X., Shacham, H., Short Group Signatures. 2004, Springer, Berlin, Heidelberg, 41–55.
74. L. Ballard, M. Green, B. de Medeiros, F. Monrose, Correlation-resistant storage via keyword-searchable encryption, in: IACR Cryptology ePrint Archive 2005, 2005, pp. 1–17.
75. Galbraith, S.D., Rotger, V., Easy decision diffie-hellman groups. LMS J. Comput. Math. 7 (2004), 201–218.