Accelerating Secure and Verifiable Data Deletion in Cloud Storage via SGX and Blockchain
Xiangman Li, Xiaodong Wu, Jianbing Ni · 2024
Secure data deletion enables data owners to have full control over the erasure of their data stored on local or cloud data centers, and it is essential for preventing data leakage, especially in cloud storage. However, traditional data deletion methods based on unlinking, overwriting, and cryptographic key management are either ineffective in cloud storage or rely on impractical assumptions. In this paper, we introduce SevDel, a secure and verifiable data deletion scheme that utilizes zero-knowledge proofs to achieve verification of the encryption of outsourced data without retrieving the ciphertexts. Meanwhile, the deletion of encryption keys is guaranteed based on Intel SGX. SevDel implements secure interfaces for performing data encryption and decryption in secure cloud storage. It also utilizes smart contracts to enforce the operations of the cloud service provider, ensuring compliance with service level agreements with data owners and imposing penalties on the service provider for disclosing cloud data on its servers. Evaluation using real-world workloads demonstrates that SevDel efficiently achieves data deletion verification and maintains high bandwidth savings.