Data security confidentiality method under cloud environment

Abstract

The present invention discloses a data security confidentiality method under a cloud environment. The method is based on an independent third-party authentication and storage device and a terminal security detection program, wherein, the third-party authentication and storage device comprises a self-controlled chip and a memory; a program that runs on the self-controlled chip comprises a control module and a file system module; the memory comprises an encrypted memory area and an ordinary memory area; the control module accessed the encrypted memory area of the memory; the ordinary memory area comprises the terminal security detection program; the encrypted memory area comprises identity authentication information, a key and an algorithm software carrier; the key adopts an encryption mode of associating an AES (Advanced Encryption Standard) symmetric key with an RSA (Rivest Shamir Adleman) asymmetric key; and a fingerprint identifier is arranged on the third-party authentication and storage device. The data security confidentiality method under the cloud environment disclosed by the present invention guarantees data not to be stolen and tampered in the cloud environment, and improves security and confidentiality of user data in a terminal and a service terminal.

Description

【Technical field】 [0001] The invention relates to a method for protecting information security, in particular to a data security and confidentiality method in a cloud environment. 【Background technique】 [0002] Cloud computing supports users to obtain application services at any location and using various terminals, and the requested resources come from the "cloud" rather than fixed tangible entities. Whether it is an enterprise or an individual user, there is a large amount of private data, such as corporate business confidential data, corporate customer information data, financial data, personal bank accounts and passwords, private photos, and so on. For users of cloud computing services, "cloud" is like a black box, because in the cloud environment, users do not know where their data is ultimately stored, whether the data transmission process is safe, or whether the cloud service provider has Special permissions to access user data. In other words, users cannot control...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to overcome the deficiencies of the above-mentioned prior art, and provide a data security and confidentiality method in a cloud environment, which aims to solve the problem of weak information confidentiality and easy data leakage in the process of using cloud computing services in the prior art. technical problem

Images