Bifrost:安全、可扩展、高效的双通道文件共享系统
Bifrost: Secure, Scalable and Efficient File Sharing System Using Dual Deduplication
摘要:
我们考虑在用户之间共享敏感或有价值的文件的问题,同时部分依赖于常见的不可信的第三方,例如,云存储提供商(CSP)。虽然用户可以依靠安全的点对点(P2P)通道进行文件共享,但这会对数据传输造成潜在的延迟,并要求发送方在传输过程中保持活动和连接。用户可以在公共CSP上上传有关文件的信息,并仅共享使接收方能够下载和恢复原始文件的基本信息,而不是对整个文件使用P2P通道。本文介绍了Bifrost,一个创新的文件共享系统的灵感来自最近的双重重复数据删除的结果。Bifrost实现了所需的功能,同时保证了(1)CSP可以有效地压缩外包数据;(2)安全P2P信道仅用于传输简短但关键的信息;(3)用户可以检查数据完整性,即,检测CSP是否更改了外包数据;以及(4)共享后只有发送者(数据所有者)和预期接收者才能访问文件,即,云或没有恶意对手可以推断出关于共享文件的有用信息。我们使用概念验证实现来分析压缩和带宽性能。我们的实验表明,安全的文件共享可以实现仅发送650位的P2P通道上,无论文件大小,而CSP,帮助共享可以享受86.9%的压缩率。
英文摘要:
We consider the problem of sharing sensitive or valuable files across users while partially relying on a common, untrusted third-party, e.g., a Cloud Storage Provider (CSP). Although users can rely on a secure peer-to-peer (P2P) channel for file sharing, this introduces potential delay on the data transfer and requires the sender to remain active and connected while the transfer process occurs. Instead of using the P2P channel for the entire file, users can upload information about the file on a common CSP and share only the essential information that enables the receiver to download and recover the original file. This paper introduces Bifrost, an innovative file sharing system inspired by recent results on dual deduplication. Bifrost achieves the desired functionality and simultaneously guarantees that (1) the CSP can efficiently compress outsourced data; (2) the secure P2P channel is used only to transmit short, but crucial information; (3) users can check for data integrity, i.e., detect if the CSP alters the outsourced data; and (4) only the sender (data owner) and the intended receiver can access the file after sharing, i.e., the cloud or no malicious adversary can infer useful information about the shared file. We analyze compression and bandwidth performance using a proof-of-concept implementation. Our experiments show that secure file sharing can be achieved by sending only 650 bits on the P2P channel, irrespective of file size, while the CSP that aids the sharing can enjoy a compression rate of 86.9 %.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。