Data tamper-proofing method and system

Abstract

The invention discloses a data tamper-proofing method comprising the following steps of after original data information is segmented before sending, hashing the segmented information by using a pre-stored hash function to acquire an original data information verification string; synchronously sending the original data and the original data information verification string when in sending, synchronously receiving the sent data information and original data information verification string when in receiving; after the data information and the original data information verification string are received, segmenting the received data information, and then hashing the segmented information by using the pre-stored hash function to acquire a received data information verification string; and judging whether the received data information verification string is accordant with the original data information verification string by comparison, if yes, determining that the received data information is not tampered, and otherwise, determining that the received data information is tampered. The invention also provides a data tamper-proofing system. According to the method and the system provided by the invention, the difficulty of tampering the data by a third party is greatly increased, a collision attack from the third party with the aid of a rainbow table is effectively prevented, data falsification of a user is prevented, and data transmission security is ensured.

Description

technical field

[0001] The invention belongs to the field of data security, in particular to a data tamper-proof method and system. Background technique

[0002] Important data in an open network environment must be protected from tampering when it is transmitted to others, such as digital signatures and password verification. At present, the anti-tampering algorithm is to calculate the data with a one-way hash algorithm (also called a digest algorithm, and the commonly used digest algorithms are MD5 and SHA1), and then publish the hash value publicly. Before using the data, the data user also performs one-way hash calculation on the data, and compares the obtained value (also called the information summary of the original data) with the hash value disclosed by the publisher to verify whether the data has been tampered with . The data is slightly different, and its hash value is always different, and the information summary of the same data must be consistent, so the one-w...

Images