Ciphertext conversion method, decryption method and system in a heterogeneous storage system

Abstract

The invention provides a ciphertext conversion method in a heterogeneous storage system, a decryption method and a decryption system, wherein the ciphertext conversion method comprises the steps of: on the basis of the identity ID of an authorized visitor appointed by a data owner, and the public key pair and the private key pair of the system, obtaining an identity-based decryption private key associated with the identity ID of the authorized visitor; on the basis of the access strategy appointed by the data owner and the identity-based decryption private key, obtaining a conversion key through an attribute-based encryption method; and, on the basis of the conversion key, converting an identity-based ciphertext to obtain an attribute-based ciphertext. By means of the ciphertext conversion method in the heterogeneous storage system, the decryption method and the decryption system provided by the invention, on the premise that a plaintext is not leaked, the identity-based ciphertext is converted into the attribute-based ciphertext; the fact that two encryption systems independently operate and are not influenced mutually can be ensured; and thus, a safe and effective way is provided for sharing secret data by users of two sets of storage systems having different encryption algorithms.

Description

technical field [0001] The present invention relates to encrypted data migration technology, and more specifically, to a ciphertext conversion method, a decryption method and a system in a heterogeneous storage system. Background technique [0002] Since the development of modern cryptography technology, various cryptosystems have been produced to meet different purposes. According to whether the keys held by the two communicating parties are the same, cryptosystems can be divided into two categories: symmetric cryptosystems and asymmetric cryptosystems. Symmetric encryption uses symmetric cipher coding technology, and its feature is that the same key is used for file encryption and decryption, that is, the encryption key can also be used as the decryption key. This method is called a symmetric encryption algorithm in cryptography. Unlike symmetric encryption algorithms, asymmetric encryption algorithms require two keys: a public key (public key) and a private key (private ...

AI Technical Summary

Problems solved by technology

[0005] If the traditional asymmetric encryption algorithm or identity-based encryption algorithm is applied to the cloud storage system, you will encounter such a problem: when the user encrypts data, he does not know which other users will request to access his data in the future, so he cannot Designate authorized visitors

This simple method will bring a relatively large calculation burden and cumbersome operation process to the design company. When the amount of data is large, it will seriously reduce the efficiency of the storage system, and then affect the work progress of both parties.

Images