Method for storing user key safely and improving data security of cloud platform based on user login password

Abstract

The invention discloses a method for storing a user key safely and improving data security of a cloud platform based on a user login password. The method comprises the following steps: each cloud platform user uses different keys to encrypt data of the user; an encryption key is generated by adopting the user login password; and the key Kdg is acquired by a primary indirect conversion method and the data is encrypted and decrypted. By adopting the method provided by the invention, the security of data user is greatly improved so as to prevent a larger number of user data from leaking in batches; the security of the user key is ensured, and the storing security of data key in the cloud platform is improved through generating the key by the user login password to encrypt the secret data of the user; even if the user password is changed, the cloud platform does not work additionally, so that unnecessary burdens are not brought to the cloud platform system; and any hardware equipment and middle pluggable units are not required, therefore the system cost can not be increased.

Description

technical field [0001] The invention relates to a method for safely storing a user key based on a user login password and improving data security of a cloud platform. Background technique [0002] Cloud computing is cheap in terms of operation and support, and at the same time can obtain benefits such as faster deployment capabilities and near-infinite scalability. Nevertheless, many enterprises still choose the latter between cloud computing and traditional software architecture, largely because in cloud computing, the security issues related to enterprise data have not been properly resolved. According to the survey results of some analysis agencies, data security issues are one of the biggest obstacles for enterprise applications to migrate to cloud computing. [0003] Traditional IT systems are usually built in the customer's own data center, and the internal firewall of the data center ensures the security of system data. Compared with traditional software, the bigges...

AI Technical Summary

Problems solved by technology

But this method of using the same encoding for all data still has some problems

First, if the hacker cracks the corresponding key, he can decipher all the data stored in the cloud platform; The program has the right to run on the cloud platform, so when it needs to access data during operation, the cloud platform still needs to decrypt those data according to the requirements

Therefore, this method cannot be used to deal with this type of attack.

Images