标题： PM-Dedup：从云服务器到边缘服务器的部分迁移安全去重 显示英文标题

标题： PM-Dedup: Secure Deduplication with Partial Migration from Cloud to Edge Servers

摘要： 目前，越来越多的用户和企业将他们的数据存储在云中，但并不完全信任云提供商以明文形式处理他们的数据。 为了解决这一问题，他们在上传数据到云之前对其进行加密。 然而，使用不同的密钥进行加密意味着即使相同的数据也会变成不同的密文，从而使去重效果变差。 加密去重通过确保相同的数据块使用基于内容的密钥生成相同的密文来避免这个问题，从而使云能够高效地识别并删除加密形式的重复数据。 当前的加密数据去重工作可分为两种类型：基于目标的和基于源的。 基于目标的加密去重要求客户端以高网络带宽开销将所有加密块（去重的基本单位）上传到云。 基于源的去重涉及客户端上传加密块的指纹（哈希值）进行重复检查，并仅上传唯一的加密块，这减少了网络传输，但引入了高延迟和潜在的侧信道攻击，这些需要通过拥有权证明（PoW）来缓解，以及云的高计算开销。 因此，在确保安全的同时减少延迟和网络及云的开销已成为云存储中安全数据去重的一个重要挑战。 针对这一挑战，我们提出了PM-Dedup，一种新颖的安全基于源的去重方法，该方法将一部分去重检查过程和PoW任务从云转移到客户端边缘服务器中的可信执行环境（TEEs）。 我们还提出了各种设计来增强数据去重的安全性和效率。 显示英文摘要

摘要： Currently, an increasing number of users and enterprises are storing their data in the cloud but do not fully trust cloud providers with their data in plaintext form. To address this concern, they encrypt their data before uploading it to the cloud. However, encryption with different keys means that even identical data will become different ciphertexts, making deduplication less effective. Encrypted deduplication avoids this issue by ensuring that identical data chunks generate the same ciphertext with content-based keys, enabling the cloud to efficiently identify and remove duplicates even in encrypted form. Current encrypted data deduplication work can be classified into two types: target-based and source-based. Target-based encrypted deduplication requires clients to upload all encrypted chunks (the basic unit of deduplication) to the cloud with high network bandwidth overhead. Source-based deduplication involves clients uploading fingerprints (hashes) of encrypted chunks for duplicate checking and only uploading unique encrypted chunks, which reduces network transfer but introduces high latency and potential side-channel attacks, which need to be mitigated by Proof of Ownership (PoW), and high computing overhead of the cloud. So, reducing the latency and the overheads of network and cloud while ensuring security has become a significant challenge for secure data deduplication in cloud storage. In response to this challenge, we present PM-Dedup, a novel secure source-based deduplication approach that relocates a portion of the deduplication checking process and PoW tasks from the cloud to the trusted execution environments (TEEs) in the client-side edge servers. We also propose various designs to enhance the security and efficiency of data deduplication.