This paper proposes a novel client-side deduplication protocol called KeyD that utilizes identity-based broadcast encryption to manage convergent keys without requiring an independent key management server. KeyD allows users to interact only with the cloud service provider during data upload and download. Security analysis shows that KeyD ensures data confidentiality, convergent key security, and ownership privacy. Performance analysis indicates KeyD achieves a better tradeoff among storage cost, communication overhead, and computation overhead compared to other schemes.