| With the development of cloud computing,not only the methods of data generation are gradually diversified,but also the scale of data is also showing explosive growth.As an extension and development of cloud computing,cloud storage has gradually replaced traditional data storage and has become the first choice for users and enterprises because of its advantages of paying according to usage,super scalability,low cost,and large storage space.However,the exponential growth of cloud data has resulted in a large amount of redundant data stored in cloud servers.Therefore,in order to save storage resources and reduce the cost of management and maintenance,data deduplication technology has been proposed.With the improvement of user security awareness,users realize that the data stored in the cloud may be stolen or damaged.Therefore,the user replaces the plaintext data with the ciphertext data and stores it on the cloud server.However,the traditional encryption technology makes the same data encrypted into different ciphertexts,which makes it difficult for the cloud server to determine whether the plaintext corresponding to the ciphertext is the same and prevents the cloud server from performing data deduplication.In order to solve this problem,ciphertext data deduplication is proposed and has become a research hotspot in the field of cloud storage.This paper mainly studies the deduplication technology of ciphertext data in cloud storage.In order to solve the problem that the current ciphertext data deduplication scheme does not consider or cannot support lightweight update data ownership,and proposes the following two schemes:(1)Based on CP-ABE and re-encryption techniques,we design a deduplication scheme for ciphertext data supporting dynamic ownership management.A novel data encryption algorithm based on RSA-OPRF protocol is designed,which can resist brute-force attack and ensure the semantic security of low-entropy data.Meanwhile,a novel re-encryption strategy is designed to improve the update efficiency.A binary tree-based CP-ABE access tree is constructed by using the user’s identity attribute to realize secure access control and key management.Safety analysis and experimental analysis show that the scheme is safe and efficient.(2)Considering the fact that frequently updating data ownership will bring a great computational burden to the system,and that an owner of the original data needs to be online in real-time when updating data ownership,we propose a ciphertext data deduplication scheme that supports cloud-defined update strategy.By allowing the cloud server to customize the policy of delayed update and the task of updating data ownership,the proposed scheme not only solves the problem that an owner of the original data needs to be online in real-time,but also can reduce the computing burden of the client and improve the efficiency of updating data ownership.Safety analysis and experimental analysis show that the scheme is safe and efficient. |