A cloud storage file encryption system

Abstract

The invention relates to an encryption system for file cloud storage, and the encryption system includes a file encryption filter, a password module, a key management and service system, and a key management and service client. The present invention enables the encryption and decryption of cloud storage files without any modification to the existing file cloud storage system through the file encryption filter, and enables the corresponding processing software or programs of encrypted files to use encryption without being affected. files; further, by using an independent third party to operate the key management and service system to provide key services, it can be guaranteed that only the user himself can see the files stored in the cloud system. In a word, the present invention well solves the information security problem of file cloud storage.

Description

Technical field [0001] The invention belongs to the technical field of information security, in particular to a cloud storage file encryption system. Background technique [0002] The cloud storage system that provides file storage (referred to as the file cloud storage system) is a system that provides network data storage services. It is very popular among users due to its ease of use. However, the data security of cloud storage systems is always the most concerned and worrying issue of cloud storage users. It is also a problem that has not been solved well, and it is also one of the obstacles to the development of cloud storage business. [0003] The most effective solution for file security protection in cloud storage is to encrypt files stored in the cloud system (the server of the file cloud storage system), and one of the simple cloud storage file encryption solutions is: Before uploading files to the cloud system of the file cloud storage system, first manually use tools t...

AI Technical Summary

Problems solved by technology

This scheme of automatically encrypting and decrypting files when uploading and downloading has the following problems: In addition to the function of saving user files in the cloud system, the current file cloud storage system also provides a file synchronization update function. That is to say, the user files in the cloud system and the files in the user's local computing device (personal computer, mobile terminal) (such as files in a file directory) are automatically updated synchronously (according to the set synchronization update strategy); with synchronization function, if you still use the above-mentioned scheme of encrypting files when uploading files and encrypting and decrypting files when downloading files, then a large number of file encryption or decryption operations may be required during synchronization operations, which is obviously inappropriate It is not only inefficient, but also brings additional complexity to the synchronization process (because judging the consistency between cloud files and local files will be more complicated, or even impossible, for example, if the file is judged by comparing the information fingerprint of the file consistency)

The disadvantages of this scheme are: firstly, the password is easy to be cracked, and secondly, once the user forgets the password, the user himself will not be able to decrypt and use his own encrypted file, which will cause inconvenience to the user of the file cloud storage system. loss

One solution to this problem is to let the file cloud storage system (the cloud) also save a copy of the user's password or a key generated by the password, and restore the password or key for the user when needed, but this password or key The problems brought by the key recovery scheme are: first, the operator of the file cloud storage system can see the content of the files saved by the user in the cloud system of the file cloud storage system through the saved password or key, and this is often what the user does not want. Things that happen or are worried about (such as customer data files and financial data files that institutional users save in the file cloud storage system are all that institutional users do not want the file cloud storage system operator to see), the second is to save them in the file cloud storage system The user password or key itself may be stolen (for example, due to external attacks or internal theft)

Images