Privacy Aware Data Deduplication for Side Channel in Cloud Storage

Cloud storage services enable individuals and organizations to outsource data storage to remote servers. Cloud storage providers generally adopt data deduplication, a technique for eliminating redundant data by keeping only a single copy of a file, thus saving a considerable amount of storage and bandwidth. However, an attacker can abuse deduplication protocols to steal information. For example, an attacker can perform the duplicate check to verify whether a file (e.g., a pay slip, with a specific name and salary amount) is already stored (by someone else), hence breaching the user privacy. In this paper, we propose <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq1-2794542.gif"/></alternatives></inline-formula> <italic>(<underline>ze</underline>ro-knowledge ded<underline>u</underline>plication re<underline>s</underline>ponse)</italic> framework. We develop <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq2-2794542.gif"/></alternatives></inline-formula> and <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq3-2794542.gif"/></alternatives></inline-formula><inline-formula><tex-math notation="LaTeX">$^+$</tex-math><alternatives><mml:math><mml:msup><mml:mrow/><mml:mo>+</mml:mo></mml:msup></mml:math><inline-graphic xlink:href="yu-ieq4-2794542.gif"/></alternatives></inline-formula>, two privacy-aware deduplication protocols: <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq5-2794542.gif"/></alternatives></inline-formula> provides weaker privacy guarantees while being more efficient in the communication cost, while <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq6-2794542.gif"/></alternatives></inline-formula><inline-formula><tex-math notation="LaTeX">$^+$</tex-math><alternatives><mml:math><mml:msup><mml:mrow/><mml:mo>+</mml:mo></mml:msup></mml:math><inline-graphic xlink:href="yu-ieq7-2794542.gif"/></alternatives></inline-formula> guarantees stronger privacy properties, at an increased communication cost. To the best of our knowledge, <inline-formula><tex-math notation="LaTeX">$\mathsf{ZEUS}$</tex-math><alternatives><mml:math><mml:mi mathvariant="sans-serif">ZEUS</mml:mi></mml:math><inline-graphic xlink:href="yu-ieq8-2794542.gif"/></alternatives></inline-formula> is the first solution which addresses <italic>two-side privacy</italic> by neither using any extra hardware nor depending on heuristically chosen parameters used by the existing solutions, thus reducing both cost and complexity of the cloud storage. In summary, through the evaluation on real datasets and comparison to existing solutions, our proposed framework demonstrates its capability of eliminating data deduplication-based side channel and at the same time keeping the deduplication benefits.