面向重复数据消除的备份数据加密方法

为解决保证数据机密性与提高重复数据消除率之间的矛盾，提出了一种面向重复数据消除的备份数据加密方法，该方法利用分块内容的哈希值生成分块对称密钥，保证了明文分块与密文分块之间的一一对应。只要用户私钥和身份识别口令不同时泄露，该方法能够有效保证备份数据存储及传输过程中的机密性。实验结果表明，该方法较好地解决了传统加密方法与重复数据消除技术不兼容的问题，大幅度提高了加密备份数据的存储空间利用率，适用于对数据机密性有要求的海量数据备份应用。

Deduplication-oriented backup-data encryption method

In order to combine the data confidentiality and deduplication efficiency, a deduplication oriented backup data encryption method was proposed. According to the method, the symmetric keys, which were used to encrypt the chunks, were generated from the hash values of chunk contents in a consistent way. Thus, the one to one correspondence between the chunk plaintext and the chunk ciphertext could be guaranteed. The confidentiality of backup data in storage and transmission can be protected efficiently on condition that the user's private key and identification password are not leaked simultaneously. The experimental results indicate that the method, unlike the traditional encryption method, can be compatible with the deduplication technology well, and the storage space utilization of encrypted backup data can be improved notablely. This method is applicable to the backup of massive data, which has the requirement of confidentiality.