Data security management system and method

Abstract

The invention provides a data security management system and method. The system comprises a security service subsystem and a security support subsystem; a first processing module of the security service subsystem is used for encrypting data plaintext according to encryption configuration information to obtain data ciphertext and an encryption identification code to send to a receiving end; the encryption process information is encrypted by using a preconfigured user root key, and the encrypted encryption process information and the encryption identification code are sent to the security support subsystem; the security support subsystem is used for decrypting the encrypted encryption process information by using a user public key corresponding to the first processing module; the encryptionidentification code is mapped according to a decryption request to correspond to the decrypted encryption process information, the encryption process information is processed to generate decryption configuration information, and the decryption configuration information is fed back to a second processing module of the security service subsystem, so that the second processing module can generate thedata plaintext corresponding to the data ciphertext according to the decryption configuration information; the data plaintext is provided for the receiving end to use, and the service demand is satisfied.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a data security management system and a data security management method. Background technique [0002] With the rapid development of information network technology, the ecological chain of cloud computing is becoming more and more perfect, and cloud computing has become a high-value productivity tool. [0003] At present, more and more government agencies, enterprises, institutions, and individuals are beginning to migrate their applications to the cloud, achieving a balance between their own business needs and optimal allocation of resources; however, due to data security concerns, few core business applications are migrated to the cloud. cloud. [0004] Specifically, the data security protection advocated by existing cloud service providers is usually carried out from the perspective of infrastructure, based on the cloud computing service process, and the security respon...

AI Technical Summary

Problems solved by technology

[0005] In view of the above problems, the embodiment of the present invention provides a data security management system to solve the data security problem caused by the inability of independent protection of cloud tenant data assets in the existing cloud computing service process

Images