Secure Enterprise Data Deduplication in the Cloud

With the advent of cloud computing as a new paradigm and technology, and the increased tendency of decision makers to envision a staged migration to cloud services, most enterprises are choosing to outsource their data to cloud storage providers, for better management of their IT resources, in terms of security, control, space and storage costs. In this context, assuming that the cloud service provider may not be trustworthy (i.e. is honest but curious), ensuring data privacy in all operations performed on enterprise data while these data reside in the Cloud is still a challenge. This paper proposes a novel twolevel data deduplication framework that can be used in cloud storage by enterprises. At the enterprise level, the enterprise performs cross-user data deduplication and outsources its data to the Cloud. At the cloud storage provider level, cross enterprise data deduplication is performed by the cloud service provider to further remove duplicates, resulting in cost and space savings. We argue that our framework will allow the enterprise to facilitate operations such as searching over encrypted data, sharing data within the enterprise, and downloading data from the Cloud directly, in a secure and efficient manner without the need to trust the cloud service provider.