Data safety storage method in cloud environment

Abstract

The invention discloses a data encryption method in a cloud environment. A sending end encrypts a dynamic token generated in advanced according to an encryption algorithm, an encryption result is used as a secret key, data is subjected to AES symmetric encryption according to the secret key to form an encrypted data part, the dynamic token is subjected to Exclusive OR, replacement, substitution and shifting and is spliced with the encrypted data part, a check code is calculated according to the data obtained after splicing, and the encrypted data part is transmitted after being spliced; and a receiving end with the same dynamic token and secret key with a receiving end carries out unpacking on data to obtain a check code to be verified and an encrypted data part after receiving the data, the encrypted data part is subjected to calculation to obtain a check code, the check code is compared with the check code to be verified, if the check code is the same with the check code to be verified, the data is correct data and the encrypted data part is stored and subjected to other processing, and on the contrary, the data is incorrect data, the data is regarded as tampered data and the data is abandoned. The data encryption method in the cloud environment, which is disclosed by the invention, can prevent leakage and prevent tampering, and is low in performance consumption.

Description

technical field

[0001] The invention belongs to the technical field of data security in a cloud environment, and in particular relates to a data encryption method in a cloud environment. Background technique

[0002] Security issues after data centralization in the cloud environment emerge. First, there are traces of the standard traffic and burst traffic of various application services in the traditional network, and the design of the traffic model is relatively standardized and simple, and there is no high requirement for the processing capacity of the security device. In the cloud computing environment, the scale of the same type of storage or application server grows rapidly, and it can be expanded in units of tens of thousands, and cannot be divided and conquered. It must be carried by a basic network with a unified architecture. Compared with the traditional network environment, this puts forward higher requirements on the performance indicators of the security device...