Leveraging Convergent Encryption for Secure and Efficient Data Protection in Distributed Cloud Systems
Keywords:
Convergent Encryption, Secure Data Deduplication, Distributed Cloud Systems, Message-Locked Encryption, Cloud Security, Data Privacy, Key Management, Bloom Filters, Proof of Ownership, Multi-Cloud Storage, Secure Storage Systems, Cryptographic TechniquesAbstract
The rapid expansion of distributed cloud systems has led to an unprecedented increase in data generation, storage demands, and security concerns. Efficient data management techniques such as deduplication have become essential for reducing storage overhead and optimizing bandwidth usage. However, traditional encryption techniques hinder deduplication because identical data encrypted with different keys produces distinct ciphertexts. Convergent Encryption (CE), also known as message-locked encryption, addresses this challenge by generating encryption keys directly from the data content, thereby enabling secure deduplication while preserving data confidentiality. This paper investigates the application of convergent encryption in distributed cloud environments, focusing on achieving a balance between storage efficiency and data security. It presents a comprehensive analysis of CE mechanisms, system architecture, and workflow, along with a discussion of existing solutions such as Proof of Ownership and hybrid encryption models. The study further proposes an enhanced framework that integrates secure key management, access control, and probabilistic data structures like Bloom filters to improve performance and mitigate security risks. Despite its advantages, convergent encryption is vulnerable to several security threats, including dictionary attacks, brute-force attempts, and confirmation-of-file attacks. To address these challenges, the paper explores advanced mitigation strategies such as salting techniques, rate limiting, trusted key servers, and multi-cloud storage approaches. Performance evaluation indicates that CE significantly reduces storage redundancy and network overhead while maintaining acceptable levels of security when combined with additional safeguards. The findings suggest that convergent encryption, when augmented with robust security enhancements, can serve as a viable solution for secure and efficient data protection in large-scale distributed cloud systems. The paper concludes by highlighting future research directions, including the integration of artificial intelligence for anomaly detection, blockchain-based key management, and quantum-resistant encryption schemes to further strengthen cloud data security.
Downloads
References
Hazheen Sarbast Mahmood, Dildar Masood Abdulqader, Rozin Majeed Abdullah, Halbast Rasheed Ismael, Zryan Najat Rashid, Teba Mohammed Ghazi Sami, “Conducting In-Depth Analysis of AI, IoT, Web Technology, Cloud Computing, and Enterprise Systems Integration for Enhancing Data Security and Governance to Promote Sustainable Business Practices”, Journal of Information Technology and Informatics Vol. 03, No. 02, pp. 297-322 (2024)
Sai Dikshit Pasham, “Privacy-Preserving Data Sharing in Big Data Anal”, THE METASCIENCE Volume 1, Issue 1 (Oct-Dec)-2023 (An International Multidisciplinary Research Journal)
Ajay Chandra, “Privacy-Preserving Data Sharing in Cloud Computing Environments”, International Peer Reviewed/Refereed Multidisciplinary Journal (EIPRMJ), ISSN: 2319-5045 Volume 13, Issue 1, January-June, 2024
Q. Li et al., "A survey on federated learning systems: Vision, hype and reality for data privacy and protection," IEEE Transactions on Knowledge and Data Engineering, vol. 35, no. 4, pp. 3347-3366, 2021.
F. Thabit, S. Alhomdy, A. H. Al-Ahdal, and S. Jagtap, "A new lightweight cryptographic algorithm for enhancing data security in cloud computing," Global Transitions Proceedings, vol. 2, no. 1, pp. 91-99, 2021.
F. Thabit, O. Can, S. Alhomdy, G. H. Al-Gaphari, and S. Jagtap, "A Novel Effective Lightweight Homomorphic Cryptographic Algorithm for data security in cloud computing," International Journal of intelligent networks, vol. 3, pp. 16-30, 2022.
S. Namasudra, D. Devi, S. Kadry, R. Sundarasekar, and A. Shanthini, "Towards DNA based data security in the cloud computing environment," Computer Communications, vol. 151, pp. 539-547, 2020.
F. Thabit, S. Alhomdy, and S. Jagtap, "A new data security algorithm for the cloud computing based on genetics techniques and logical-mathematical functions," Journal of Information Technology and Informatics Vol. 03, No. 02, pp. 297-322 (2024) 318 ???????????????????? ???????????????????????? VOLUME 03, 2024 International Journal of Intelligent Networks, vol. 2, pp. 18- 33, 2021.
S. S. Abdul-Jabbar, A. Aldujaili, S. G. Mohammed, and H. S. Saeed, "Integrity and security in cloud computing environment: a review," Journal of Southwest Jiaotong University, vol. 55, no. 1, 2020.
R. Dubey et al., "Big data analytics and artificial intelligence pathway to operational performance under the effects of entrepreneurial orientation and environmental dynamism: A study of manufacturing organisations," International journal of production economics, vol. 226, p. 107599, 2020.
D. Chen and H. Zhao, "Data security and privacy protection issues in cloud computing," in 2012 international conference on computer science and electronics engineering, 2012, vol. 1: IEEE, pp. 647-651.
A. Nadeem and M. Y. Javed, "A performance comparison of data encryption algorithms," in 2005 international Conference on information and communication technologies, 2005: IEEE, pp. 84-89.
P. Yang, N. Xiong, and J. Ren, "Data security and privacy protection for cloud storage: A survey," Ieee Access, vol. 8, pp. 131723-131740, 2020.
E. Bertino and E. Ferrari, "Big data security and privacy," in A comprehensive guide through the Italian database research over the last 25 years: Springer, 2017, pp. 425-439.
L. Xu, C. Jiang, J. Wang, J. Yuan, and Y. Ren, "Information security in big data: privacy and data mining," Ieee Access, vol. 2, pp. 1149-1176, 2014.
A. Albugmi, M. O. Alassafi, R. Walters, and G. Wills, "Data security in cloud computing," in 2016 Fifth international conference on future generation communication technologies (FGCT), 2016: IEEE, pp. 55-59.
R. D. Raut, S. K. Mangla, V. S. Narwane, B. B. Gardas, P. Priyadarshinee, and B. E. Narkhede, "Linking big data analytics and operational sustainability practices for sustainable business management," Journal of cleaner production, vol. 224, pp. 10-24, 2019
Published
How to Cite
Issue
Section
License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.
IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.
