DERAID: A Decryption and Encryption Integrated Redundant Array of Independent Disks Technology

In the era of big data, ensuring both data confidentiality and reliability has become a critical concern for data owners. While encryption algorithms and erasure coding techniques can independently guarantee confidentiality and reliability, respectively, traditional methods that apply encryption before or after erasure coding often lead to significant performance degradation and increased storage overhead. To address these limitations, this paper proposes DERAID, a novel RAID-based technology that integrates encryption directly into the coding process. DERAID is designed to improve the efficiency of encoding, decoding, updating and reconstruction operations, while simultaneously ensuring data confidentiality and reliability and minimizing the data expansion rate. The scheme employs a unified coding structure based on the ECB encryption mode, where conventional parity blocks are replaced by a combination of cryptographic keys and verification blocks. Experimental results demonstrate that, compared to traditional methods and QS-code, DERAID improves encoding performance by 44.7–95.3%, updating performance by 48.2–99.6% and reconstruction performance by 63.0–99.9%, while reducing the data expansion rate by 3.3–36.9%. These results indicate that DERAID achieves a practical balance between security, reliability and performance.