IRJET - Multi Authority based Integrity Auditing and Proof of Storage with Data Deduplication in Cloud

International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056
Volume: 07 Issue: 03 | Mar 2020 www.irjet.net p-ISSN: 2395-0072
© 2020, IRJET | Impact Factor value: 7.34 | ISO 9001:2008 Certified Journal | Page 5244
MULTI AUTHORITY BASED INTEGRITY AUDITING AND PROOF OF
STORAGE WITH DATA DEDUPLICATION IN CLOUD
Arokia Mary Pooja S1, Anantha Narayanan R2, K Meenakshi3
1,2Student, Dept. of Computer Science and Engineering, SRM Institute of Science and Technology, Tamil Nadu
3Assisstant Professor, Dept. of Computer Science and Engineering, SRM Institute of Science and Technology,
Tamil Nadu
---------------------------------------------------------------------***----------------------------------------------------------------------
Abstract - Cloud helps in providing services to an
organization over a network with the ability for users to
upload, update and share information. Givingsecuritytocloud
is the most important characteristic to consider in the cloud
computing environment as clients frequently store sensitive
data with cloud storage providers. The problem is that, these
providers may be untrusted. Sharing data in a multi-user
environment, in a secure manner while preserving data from
an unauthorized user is still a challenging issue. Integrity of
the outsourced files can be checked using a cryptographic
technique called Proof of Storage (PoS). In this paper, we have
introduced a method that uses hybrid symmetric and
asymmetric encryption for users to safely store sensitive
information by encryptingandre-encryptingthefile uploaded.
This approach helps store data in the cloud in a secure
manner, thereby protecting it from any attacks that may be
imposed by an intruder. File level data de-duplication
technique is used to identify duplicate data, eliminate
redundancy thus saving the storage space in the cloud server.
The concept of Re-Encryption using AES, DES and RSA
algorithm is introduced to create an efficient system to
establish secure file deduplication and PoS, simultaneously.
Key Words: Cryptography, Hybrid Encryption, Cloud
Security, Proof of Storage, Deduplication.
1. INTRODUCTION
Cloud computing is used for storing and accessing personal,
confidential and sensitive data. The prime benefit of using
cloud storage from the user’s perspective is that customers
can decrease their expenditure in purchasing and
maintaining storage infrastructure whilst only paying for
requested storage, which can be scaled-up and down upon
demand [1]. But it is also very true that cloud Storage is not
in unlimited. Data deduplication is the best way to handle
these data [3]. Here file level technique is used. Elimination
of repetitive or duplicate data is referredtoasdeduplication.
It is very crucial in cloud storages to help save storage space
because redundant information can slow down the system
and occupy unnecessary space. The text file uploaded onthe
cloud is first checked for deduplication using file level
deduplication technique. It is done so bycomparingthehash
index values generated using SHA-1 algorithm and a
comparison check for different users having the same file is
performed. If the current file has the same hash as the
existing file, then a message is promptedtosaythatthesame
file is being uploaded.
Cloud Service Provider manages the information stored.
Data security at various levels is crucial. The problems in a
cloud network may includeintrusionbyhacker,data stealing
and tampering of information etc. To overcome theseissues,
Cryptography is used to ensure safe transmission of
information over the network [5]. It is a process by which an
original text is converted into another form. This transition
from original message to cipher text istermedasencryption.
The mechanism from which a cipher text istransformedinto
the original text is called decryption. This is done with the
help of a key generated from encrypting. Hybrid encryption
provides thrice the time protection for the data stored over
the cloud network. Hybrid encryption is a process by which
two or more algorithms are combined and to provide more
security rather than using a single algorithm. Cloud
computing is used for complex applications in large scale
systems with multiple users. Therefore, it is very important
to ensure the security of data and authenticity ofusersinthe
cloud network. A series of encryption and re-encryption
process in a cloud platform aids in improving the security
aspect from the client’s side. It also helps in guarantyingthat
the Proof of Storage (PoS) is maintained. This mechanism
includes confidentiality, integrity, authenticationofidentity,
and non-repudiation.
1.1 Existing System
An integrity auditing schemefor data stored in the cloudwas
proposed. A novel model wasbuilt to assisthighconcurrency
and hold huge data in the real scenario [1]. Computing tasks
were centralized (e.g., concealing a company’s important
information), which are redundant for the manager, are
shared among users. The users, rather than requesting
information from the concerned person, obtain the required
data directly from the cloudserver [2]. The existingsolutions
for the security of data stored in the cloud is provided by
single level encryption algorithmsat the server side, without
taking into account the confidentiality level of data. A secure
cloud computing model based on data splitting was also
introduced. There are hybrid cryptographic techniques, but
the data stored are generally split and each split information
is encrypted using different algorithms and stored [7]. The
objective of this technique was to establish therequiredlevel

of security for data. It reduces processing time and provides
reliability and confidentiality.
Disadvantage:
The main disadvantage is data integrity issues. Hiding
sensitiveinformationusingtraditionalsinglelevelencryption
is not appropriateforfiles stored in thecloudduetoitsmulti-
tenancy and susceptibility to attacks [7].Themechanismand
the system model built for sensitive informationhidingatthe
server side makes the existing scheme advantageous but not
efficient because it does provide adequate proof to the user
that the file uploaded is held safely and that only authorized
person is given permission to request or access.
1.2 Proposed system
We have proposed a cloud system that provides more
reliability using multilevel encryption and decryption. First,
we will be checking for duplicate file by using file level
deduplication which checks the files by comparing the hash
indices using SHA-1 algorithm, after decryption before the
multilevel encryption. If any duplicate data is found in the
file, then the system does not allow the user to upload it in
the cloud consequently saving storage space. To eradicate
the lack of security, we have introduced a simple yet secure
mechanism where after each encryption, the keys obtained
are encrypted again and are stored in a server.Inorderto do
this, a combination of cryptographic algorithmssuchasAES,
DES and RSA are taken. A time-based key is generated to
check that only authorized users are accessing any data
shared between multiple users.
Advantage:
In the proposed framework, we encrypt the data thrice and
store it in a server. All these algorithms use the plaintext in
original form to convert into cipher texts thus generating
keys and storing the encryptedkeysindifferentservers. This
is in turn helps prevent intruders from hacking into the
database and stealing sensitive information. We are adding
extra security level in it. In this, unauthorized user can’t use
the data easily because of a time-based key. Confidential
information is held in the cloud storage safely because of
three level hybrid cryptographic process. We also reduce
the storage space by avoiding duplicate data.
2. Methodology
The text file uploaded on the cloud is first checked for
deduplication using file level deduplication technique.
Redundant data uploaded in the cloud can be easily
identified by the user. It is done so by comparing the hash
index values generated using SHA-1 algorithm and a
comparison check is performed. If the current file has the
same hash as the existing file, then a message is prompted to
say that the same file is being uploaded. If not, the file is
stored in the cloud by first encrypting it using AESalgorithm
for which a key is generated. The cipher text isconsidered as
the plain text in the next encryption process using DES for
which another key is generated. The same is done using RSA
for which two keys are generated. The final cipher text is
stored in the first server. The keys generated for each
algorithm is encrypted using AES and is stored again in a
different server. The keys generated from this is stored in
the third server. Thus, informationisencryptedstronglyand
is distributed among different servers thereby hiding
sensitive information securely in the cloud server while
saving storage space.
Fig -1: Encryption and Re-encryption process
2.1 Algorithms used
Symmetric Encryption:
Advanced Encryption Standard (AES) is a standard
adopted by the US government. AES has three blocks 128,
192, 256 respectively.Thisalgorithmgoesthrough10rounds
for 128 bits. For a 192 bit key, 12 rounds and 14 rounds for
256 bit sized keys. A common public key is generated.
Utilization of memory space is the least in AES. It is the most
widely used forof encryptionandissuperiorwhencompared
to other algorithms.
Data Encryption Standard (DES) is adopted by American
government in 1976, a traditional encryption algorithm. The
DES algorithm uses various cryptographic technologies. An
original text is split into several blocks. Key lengthgivenis64
bits with each block containing 64 bits. Where only 56 bits
are accepted, or valid bits and the remaining block are of 8
bits which is used forparitychecking.Acommonpublickeyis
generated here. Using DES, we can encrypt a data in the least
time when compared to other cryptographic algorithms.
Asymmetric key Encryption:
Rivest–Shamir–Adleman(RSA)Algorithm:InRSA,thereare
two keys, public and private key and is an asymmetric key

encryption. In network systems, the most usually used
operations is RSA verification of signature. It has the least
output bits though it is slow and consumes a lot of memory.
3. Technical modules
3.1. Deduplication
Elimination of repetitive or duplicate data is referred to as
deduplication. It is very crucial in cloud storages to help save
storage space because redundantinformationcanslowdown
the system and occupy unnecessary space. The text file
uploaded on the cloud is first checked for deduplication
using file level deduplication technique. Repetitive
information stored in the cloud can be identified easily by
the user. It is done so by comparing the hash index values
generated using SHA-1 algorithm and a comparison check
for different users having the same file is performed. If the
current file has the same hash as the existing file, then a
message is prompted to say that the same file is being
uploaded. If the uploaded file is not a duplicate copy, then it
enters the encryption phase.
Fig -2: Uploading existing file
Fig -3: Deduplicate file exists message
3.2 Encryption
If the file does not contain redundant data, the file is stored
in the cloud by first encrypting it using AES algorithm for
which a key is generated. The cipher textisconsideredasthe
plain text in the next encryption processusingDESforwhich
another key is generated. The same is done using RSA for
which two keys are generated. The final cipher text is stored
in the first server.
Fig -4: Encrypted data stored
3.3 Re-Encryption
The keys generated for each algorithm is encrypted again
using AES and is stored in a different server. This is mapped
to the next block using the file Id in the database. The final
keys generated from this is stored similarly in the third
server. Thus, information is encrypted strongly and is
distributed among different servers therebyhidingsensitive
information securelyinthecloudserverwhilesavingstorage
space.
Fig -5: Re-encrypted keys stored in a different server

Fig -6: Final keys from re-encryption stored in the third
server
3.4 Time based Key generation
Authentication is given basedonrandomnumbergeneration
which is used to check that only the authorized or registered
user is requesting and accessing the file. This is done within
a time limit to add to the protection of data. When the user
wants to view the file content that was allowed by another
user, his integrity is first checked by sending this auto-
generated time-based key to their associated email ID. By
entering the correct key, we can verify that only an
authorized person is accessing the content. It also ensures
integrity in a cloud environment where multipleclientsstore
important information.
Fig -7: Verification of authorization of the user
3. CONCLUSIONS
The data is stored successfully using multilevel encryption
by using AES, DES, RSA in a multiuser environment. The
stored data is protected making it difficult for hackers to
steal sensitive information as it ishardtotrack thepatternof
algorithms used to encrypt the data and re-encryptionof the
obtained keys further makes it hard to retrieve keys from
different servers. Integrity auditing and proof of storage is
maintained using this technique while reducing the storage
space occupied by a file in cloud with data deduplication.
REFERENCES
[1] W. Shen, J. Qin, J. Yu, R. Hao, and J. Hu, “Enabling
identity-based integrity auditing and data sharing with
sensitive information hiding for secure cloud storage,”
IEEE Transactions on Information Forensics and
Security, vol. 14, no. 2, pp. 331–346, 2019.
[2] C.Wang “Privacy preserving public auditing for secure
cloud storage,” IEEE Transactions on Computer, vol. 62,
no. 2, pp. 362-375, 2013.
[3] Identity-based remote data integrity checking with
perfect data privacy preserving for cloud storage, IEEE
Transactions on Information Forensics and Security,
G.Ateniese April 2017.
[4] Y. Wang, Q. Wu, B. Qin, W. Shi, R. H. Deng, and J. Hu,
“Identity based data outsourcing with comprehensive
auditing in clouds,” IEEE transactions on information
forensics and security. 12, no.4, pp. 940– 952, 2017.
[5] H. Wang, “Identity-based distributed provable data
possession in multi cloudstorage,”IEEETransactionson
Services Computing, vol. 8, no. 2, pp. 328–340, 2015.
[6] Z. Yan, W. Ding, X. Yu, H. Zhu, and R. H. Deng,
“Deduplication on encrypted big data in cloud,” IEEE
Transactions on Big Data, vol. 2, no. 2, pp. 138–150,
2016.
[7] Vishwanath S Mahalle, Aniket K Shahade, Enhancingthe
Data Security in Cloud by Implementing Hybrid (RSA &
AES) Encryption Algorithm, 2014
[8] Soufiane Oukili, Seddik Bri, "High speed efficient
advanced encryption standard implementation",
Networks Computers and Communications (ISNCC)
2017 International Symposium on, pp. 1-4, 2017.
[9] Punam V. Maitri, Aruna Verma, "secure file storage in
cloud computing using hybrid cryptographyalgorithm",
ieee wispnet 2016 conference (c), 2016.
[10] Mauro Storch, César A. F. de Rose, "Cloud Storage Cost
Modeling for Cryptographic File Systems", Parallel
Distributed and Network-based Processing (PDP) 2017
25th Euromicro International Conference on, pp. 9-14,
2017.
[11] Shivani Saxena, Amit Shrivastava, Aumreesh Saxena,
Manish Manoria, "Protecting Data Storage on Cloud to
Enhance Security Level and Processing of the Data by
using Hadoop", Advanced Computation and
Telecommunication (ICACAT) 2018 International
Conference on, pp. 1-6, 2018.

[12] Lijuan Li, Shuguo Li, "High throughput AES
encryption/decryption with efficient reordering and
merging techniques", Field Programmable Logic and
Applications (FPL) 2017 27th International Conference
on, pp. 1-4, 2017.
[13] Y. Wang, A. Kumar, Y. Ha, "FPGA-based high throughput
XTS-AES encryption/decryption for storage area
network", IEEE Int. Conf Field- Programmable
Technology (FPT), pp. 268-271, 2014.
[14] Dongyoung Koo, Youngjoo Shin, Joobeom Yun, Junbeom
Hur, "a hybrid deduplication for secure and efficient
data outsourcing in fog computing", 2016, IEEE 8th
international conferenceon cloudcomputingtechnology
and science.
[15] Yingbing Zhou, Yongzhen LI, "The Design and
Implementation of a Symmetric Encryption Algorithm
Based on DES", IEEE ICSESS, pp. 517-520, June 2014.
[16] Jun Ren, Zhiqiang Yao, Jinbo Xiong, Yuanyuan Zhang,
Ayong Ye, "a secure data deduplication scheme
based on differential privacy", 2016 ieee 22nd
international conference on parallel and distributed
system.
[17] Amarja Hanumant Bhosale, A.A. Manjrekar, "Attribute-
Based Storage Control with Smart De-Duplication
Filter Using Hybrid Cloud", Computing Communication
Control and Automation (ICCUBEA) 2018 Fourth
International Conference on, pp. 1-6, 2018.
[18] K. He, J. Chen, R. Du, Q. Wu, G. Xue and X. Zhang,
"DeyPoS: Deduplicatable Dynamic ProofofStoragefor
Multi-User Environments," in IEEE Transactions on
Computers, vol. 65, no. 12, pp. 3631-3645, 1 Dec. 2016.
[19] Q. Zheng and S. Xu, “Secure and efficient proofofstorage
with deduplication,” in Proc. 2nd ACM Conf. Data Appl.
Security Privacy, 2012, pp. 1–12 .
[20] Wang, B. Li, and H. Li, “Public auditing for shared data
with efficient user revocation in the cloud,” in Proc.
INFOCOM, 2015, pp. 2904–2912.
[21] R. Du , L. Deng, J. Chen, K. He, and M. Zheng, “Proofs of
ownership and retrievability in cloud storage,” in Proc.
IEEE 13th Int. Conf. Trust, Security Privacy Comput.
Commun., 2014 , pp. 328–335.
[22] Minxin Du, Qian Wang, Meiqi He, Jian Weng, "Privacy-
Preserving Indexing and Query Processing for Secure
Dynamic Cloud Storage", Information Forensics and
Security IEEE Transactions on, vol. 13, no. 9, pp. 2320-
2332, 2018.
[23] Jasleen K., S.Garg[,“Security in Cloud Computing using
Hybrid of Algorithms”,IJERJS, Volume 3, Issue 5, ISSN
2091-2730,pages 300-305, September-October, 2017.
[24] Kiruthika.R,Jeena.R , “ Enhancing Cloud Computing
Security using AES Algorithm”, IJARCSSE, Volume 5,
Issue 3, ISSN 2277 128X,pp 630-635, March 2016.
[25] S. Munjal1, S. Garg, “Enhancing Data Security and
Storage in Cloud Computing Environment”, IJCSIT, Vol.
6, ISSN 0975- 9646, pages 2623-2626,2015.

IRJET - Multi Authority based Integrity Auditing and Proof of Storage with Data Deduplication in Cloud

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Ähnlich wie IRJET - Multi Authority based Integrity Auditing and Proof of Storage with Data Deduplication in Cloud

Ähnlich wie IRJET - Multi Authority based Integrity Auditing and Proof of Storage with Data Deduplication in Cloud (20)

Mehr von IRJET Journal

Mehr von IRJET Journal (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

IRJET - Multi Authority based Integrity Auditing and Proof of Storage with Data Deduplication in Cloud