Storage method of confidential data

Abstract

The invention discloses a storage method of confidential data, wherein the storage method includes steps of 1), a data owner generates public and private key pairs by using a public key cryptographic algorithm; a data user applies public key cryptographic algorithm to generate the public and private key pairs associated with its identity; 2), a data storage administrator generates a ciphertext data index and publishes to a data authority administrator; 3), the data authority administrator feeds back a confidential data visit request to the data storage administrator; 4) an re-encryption key is generated; after receiving the data visit request, the data owner generates re-encryption key according to the public key information of the user, and sends to the data storage administrator; 5), re-encrypted ciphertext is distributed; the data storage administrator applies the re-encryption key to encrypt the confidential data ciphertext requested to visit by the secret key encryption data; the re-encrypted ciphertext is is acquired, and sent to the authorized data user. The method can easier realize the safe and high-efficient distribution of multiple users, and has high practicability.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for storing confidential data. Background technique [0002] The security of confidential data is related to national security and social stability, and should not be disclosed. The storage, management and use of traditional confidential data still adopt the "rule of man" approach: the data owner hands over the confidential data to a dedicated data manager who is responsible for content access management and stores it offline in a dedicated storage system. Sometimes the data manager also Encryption is performed on confidential data. Any data user requesting to obtain data needs to be dually authorized by the data administrator and the data owner. The data administrator uses a dedicated storage medium such as a CD and assigns a special person to distribute the confidential data and decryption key to the data user. [0003] With the advent of the era of big ...

AI Technical Summary

Problems solved by technology

[0006] 2. When traditional encryption methods are used to encrypt confidential data, the ciphertext data cannot be directly handed over to the data user for use, and when multiple authorized data users request encrypted confidential data (usually symmetric key encryption), as long as one user obtains the data The decryption key assigned by the manager can be used to decrypt the decrypted data requested by other authorized data users. The data is vulnerable to collusion attacks. At the same time, repeated decryption and encryption operations also increase the risk of data leakage, and the operation is extremely inefficient. ;

[0007] 3. There is no distinction between storage and management. Traditional data managers not only perform content authority management of confidential data, but also perform data storage management. Data managers can easily become the biggest security hole in confidential data storage, making confidential data more secure. the uncertainty of

[0008] 4. The distribution efficiency of confidential data is too low, the timeliness is poor, and the value of confidential data cannot be fully utilized

Images