Sensitive Cloud Data Deduplication with Data Dynamics

To solve the confliction of data encryption and deduplication, a hMAC-Dedup scheme based on homomorphic MAC is proposed. In the scheme, every file is encrypted by the block level encryption and a tag is generated from each encrypted block. In the PoW (Proofs of oWnership) protocol, homomorphic MAC is used to check whether the file to store is real, by operating on the file’s encrypted blocks and pre-computed tags. The hMAC-Dedup can avoid the security shortcomings brought by hash-as-a-proof and provide encryption protection. It is also extended to support data dynamics, which includes block modification, insertion and deletion.