A share-oriented secure file directory file encryption system

Abstract

The invention relates to a secure file catalogue file encryption system towards sharing. The secure file catalogue file encryption system towards the sharing comprises a secure file catalogue, a file encryption filter and a file encryption filter auxiliary process, wherein files in the secure file catalogue is automatically encrypted by the file encryption filter, each file catalogue in the secure file catalogue is provided with or inherits a corresponding file decryption control strategy which is used to restrict certain person authorization users and community authorization users to decrypt encryption files in each file catalogue, and when the file encryption filter encrypts the files, the file decryption control strategies in the file catalogues where the files are located are used as file decryption control strategies of the encryption files, and then converted into file decryption control data, and finally stored in decryption files, and the file encryption filter auxiliary process is used to complete operation which can not be completed by the file encryption filter in an inner nuclear layer, and used to set a client end of a cloud storage system as a non-accredited process during the file cloud storage process, and thereby guarantees that the files uploaded to the cloud storage system are encrypted.

Description

technical field [0001] The invention belongs to the technical field of information security, and is a sharing-oriented security file directory file encryption system, in particular, a file encryption system suitable for safely sharing and using files among multiple people through cloud storage. Background technique [0002] File cloud storage has brought great convenience to users and has been welcomed by the majority of users. Now not only individual users are using file cloud storage systems, but more and more enterprises, institutions, especially small and medium-sized enterprises and institutions are also using file cloud storage systems, including public cloud storage systems. [0003] At present, many file cloud storage systems provide file sharing functions, that is, a user uploads a file to the cloud system of the file cloud storage system and at the same time designates users who can share the file, including specifying a specific individual user or group user . M...

AI Technical Summary

Problems solved by technology

The disadvantage of this technical solution is: if the shared files involve personal privacy or corporate secrets, then the operation and maintainer (operator) of the cloud storage system can see the content of the shared files, or the cloud storage system is attacked by hackers. From time to time, files may be stolen and private information may be leaked. These are issues that cloud storage users are very worried about.

However, the scheme in the patent application 201410151619.2 also has the following problems: 1) the user is required to manually encrypt files; 2) although all files in a file directory can be manually set for individual sharing users and group sharing policies and encrypted, However, if a new file is added to the file directory after completing the file policy setting and encryption operation, the newly added file still needs to manually set personal and group sharing policies and encrypt

All of these are very inconvenient for users

Images