Proving Ownership of Privacy-Protected Cloud Storage Devices

Abstract

Systems for cloud storage is growing in popularity. Deduplication, a promising procedure collects only a single replica of recurring data there by reduces cost of cloud storages. Client-side deduplication makes an effort to locate existing deduplication opportunities prior to uploading at the client and avoid using server capacity to upload duplicates of already-existing data. This work, provides mechanism to overcome vulnerabilities and take advantage of client-side deduplication, giving an attacker access to other users' files of any size based on relatively weak hash signatures. More specifically, an attacker who is aware of a file's hash signature can persuade a storage service that it is the rightful owner of the file, at which point the intruder is allowed to acquire the entire file by the server. Proofs-of-ownership (PoWs), that allow a user to effectively prove to a host that the user genuinely owns a file instead of only giving a short summary of it. This work defines the principle of proof-of-ownership under strong security standards and strict efficiency constraints. Then, relying on popular encryption techniques and hash function, this study provides and assess security-related methodologies.