College of Computer and Control Engineering, Nankai University, Tianjin 300000, China.
College of Mathematics and Informatics, Fujian Normal University, Fuzhou 350000, China.
Sensors (Basel). 2018 Jun 4;18(6):1814. doi: 10.3390/s18061814.
In recent years, the Internet of Things (IoT) has found wide application and attracted much attention. Since most of the end-terminals in IoT have limited capabilities for storage and computing, it has become a trend to outsource the data from local to cloud computing. To further reduce the communication bandwidth and storage space, data deduplication has been widely adopted to eliminate the redundant data. However, since data collected in IoT are sensitive and closely related to users' personal information, the privacy protection of users' information becomes a challenge. As the channels, like the wireless channels between the terminals and the cloud servers in IoT, are public and the cloud servers are not fully trusted, data have to be encrypted before being uploaded to the cloud. However, encryption makes the performance of deduplication by the cloud server difficult because the ciphertext will be different even if the underlying plaintext is identical. In this paper, we build a centralized privacy-preserving duplicate removal storage system, which supports both file-level and block-level deduplication. In order to avoid the leakage of statistical information of data, Intel Software Guard Extensions (SGX) technology is utilized to protect the deduplication process on the cloud server. The results of the experimental analysis demonstrate that the new scheme can significantly improve the deduplication efficiency and enhance the security. It is envisioned that the duplicated removal system with privacy preservation will be of great use in the centralized storage environment of IoT.
近年来,物联网(IoT)得到了广泛的应用和关注。由于物联网中的大多数终端设备的存储和计算能力有限,将数据从本地外包到云计算已经成为一种趋势。为了进一步减少通信带宽和存储空间,数据去重技术被广泛采用,以消除冗余数据。然而,由于物联网中收集的数据是敏感的,并且与用户的个人信息密切相关,因此用户信息的隐私保护成为一个挑战。由于物联网中终端和云服务器之间的无线信道等通道是公开的,并且云服务器不完全可信,因此在将数据上传到云之前,必须对其进行加密。然而,加密使得云服务器进行去重的性能变得困难,因为即使底层明文相同,密文也会不同。在本文中,我们构建了一个集中式隐私保护去重存储系统,该系统支持文件级和块级去重。为了避免数据统计信息的泄露,利用英特尔软件保护扩展(SGX)技术保护云服务器上的去重过程。实验分析的结果表明,新方案可以显著提高去重效率并增强安全性。预计具有隐私保护的去重系统将在物联网的集中存储环境中得到广泛应用。