Method and apparatus for duplicated data management in cloud computing
AssigneeNokia Technologies Oy
InventorZheng Yan
Life of this patent
Estimating the term…
Abstract
An approach is provided for managing data duplication in cloud computing. A method comprising, sending from a first device to a data center, data encrypted with a data encryption key for storing the encrypted data at the data center; encrypting the data encryption key according to an attribute-based encryption (ABE) scheme by using identity as an attribute in a deduplication policy for the data; issuing to a second device, a personalized secret attribute key which is derived from a public key of the second device according to the attribute-based encryption (ABE) scheme, wherein the personalized secret attribute key is to be used for decrypting the encrypted data encryption key at the second device, in combination with the policy.
Claims9
An apparatus comprising:
- at least one processor;
- and
- at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least:
- send, to a data center, data encrypted with a data encryption key for storing the encrypted data at the data center;
- encrypt the data encryption key according to an attribute-based encryption scheme by using identity as an attribute in a deduplication policy for the data;
- receive, from the data center, a public key associated with a device, wherein the public key is received in response to the device sending, to the data center, a request to store a duplicate of the encrypted data;
- and
- issue, to the device, a personalized secret attribute key which is derived from the public key of the device according to the attribute-based encryption scheme, wherein the personalized secret attribute key is to be used for decrypting the encrypted data encryption key at the device, in combination with the deduplication policy.
A method comprising:
- sending, by a first device and to a data center, data encrypted with a data encryption key for storing the encrypted data at the data center;
- encrypting, by the first device, the data encryption key according to an attribute-based encryption scheme by using identity as an attribute in a deduplication policy for the data;
- receiving, at the first device and from the data center, a public key associated with a second device, wherein the public key is received in response to the second device sending, to the data center, a request to store a duplicate of the encrypted data;
- and
- issuing, by the first device and to the second device, a personalized secret attribute key which is derived from the public key of the second device according to the attribute-based encryption scheme, wherein the personalized secret attribute key is to be used for decrypting the encrypted data encryption key at the device, in combination with the deduplication policy.
Dependencies are inferred from the claim text.