Data file encryption method and system based on double random numbers

Abstract

The invention relates to a data file encryption method and system based on double random numbers. An original data file is segmented into sensitive data and body data; the sensitive data forms a secret key; the body data forms a ciphertext through complement processing; the two groups of data are stored in different modes; when the data is used, the data is synthesized, thus obtaining a data file, wherein the realization mode of segmenting the original data file into the sensitive data and the body data comprises following steps of firstly, determining a double random number sequence { Xn, Yn } and an extraction proportion; grouping a to-be-encrypted original data file, thus obtaining a plurality of units; in each unit, determining a starting position for extracting secret key data according to the Xn; and determining the length for extracting the secret key data according to the Yn, wherein the Yn is obtained after the original random numbers are adjusted, and the total extraction proportion is matched. According to the method and the system, the secret key with a big data quantity can be adopted without increasing the system load of a server; the data security of a cloud storage system can be improved; and the privacy of the user data can be increased.

Description

technical field [0001] The present invention relates to the technical field of data file encryption, in particular to a method and system for encrypting data files based on double random numbers, and in particular to a technical solution for data file security and privacy protection in a cloud computing environment. Background technique [0002] The relevant background technology is introduced in several aspects as follows: [0003] 1. Data file encryption [0004] The role of data file encryption on the network is to prevent useful or private information from being intercepted and stolen on the network. For example, the transfer of important files. When logging in through the network, the typed password is transmitted to the server in plain text, and eavesdropping on the network is extremely easy, so it is very likely that hackers will steal the user's password. If the user is a Root user or Administrator users, the consequences will be extremely serious. If the bidding...

AI Technical Summary

Problems solved by technology

Whether it is personal computer data or company computer data, if it is leaked, the loss and impact will be huge

[0008] 2. Cloud Computing Security Issues

[0011] (1) All kinds of cloud applications running on the cloud platform have no fixed infrastructure and no fixed physical security boundaries, making it difficult to achieve user data security and privacy protection;

[0012] (2) The resources involved in the cloud service are owned by multiple managers, there is a conflict of interest, and it is impossible to plan and deploy security protection measures in a unified manner;

[0018] 3. Challenges faced by traditional encryption technology

Little progress has been made in the second aspect. Even if the cloud computing platform provides encryption tools, due to cost and efficiency considerations, almost no one uses them.

At present, with the increasing progress of supercomputing, the problem of key being cracked by violence has become a hidden danger of information security.

[0023] In addition, in terms of key management, traditional encryption technology does not provide a good means

Due to the limitations of the algorithm model, there is a certain degree of correlation between the keys, which are vulnerable to attack and cracking

[0024] Due to the large amount of data in cloud storage systems, traditional encryption technologies based on computational complexity face a dilemma: higher security requires longer keys, and longer keys mean greater security overhead, which results in lower efficiency and higher cost

[0025] In the field of cloud storage, traditional encryption technology also faces a non-technical hidden danger: the current cloud storage data security technology is organized and implemented by the cloud service provider, and the implementer of the encryption technology (master the key or the encryption system designer) , there is a great chance of obtaining the decryption technique

[0026] In fact, the data of the current mainstream cloud storage platforms are basically streaking. They just use management systems to ensure that user data is not violated as much as possible. However, the weakness of human nature makes the system fail. Cloud storage systems using traditional encryption technology cannot ensure user data. privacy

Images