Privacy Aware Data Deduplication for Side Channel in Cloud Storage

• Published in: IEEE transactions on cloud computing 2020-04, Vol.8 (2), p.597-609
• Main Authors: Yu, Chia-Mu, Gochhayat, Sarada Prasad, Conti, Mauro, Lu, Chun-Shien
• Format: Article
• Language: English
• Subjects: Bandwidth; Bandwidths; Cloud computing; Cloud storage; data deduplication; Data privacy; Data storage; Information storage; Organizations; Privacy; Protocols; Servers; side channel
• ISSN: 2168-7161; 2168-7161; 2372-0018
• DOI: 10.1109/TCC.2018.2794542

Cloud storage services enable individuals and organizations to outsource data storage to remote servers. Cloud storage providers generally adopt data deduplication, a technique for eliminating redundant data by keeping only a single copy of a file, thus saving a considerable amount of storage and bandwidth. However, an attacker can abuse deduplication protocols to steal information. For example, an attacker can perform the duplicate check to verify whether a file (e.g., a pay slip, with a specific name and salary amount) is already stored (by someone else), hence breaching the user privacy. In this paper, we propose \mathsf{ZEUS} ZEUS ( ze ro-knowledge ded u plication re s ponse) framework. We develop \mathsf{ZEUS} ZEUS and \mathsf{ZEUS} ZEUS ^+ + , two privacy-aware deduplication protocols: \mathsf{ZEUS} ZEUS provides weaker privacy guarantees while being more efficient in the communication cost, while \mathsf{ZEUS} ZEUS ^+ + guarantees stronger privacy properties, at an increased communication cost. To the best of our knowledge, \mathsf{ZEUS} ZEUS