Data encryption and decryption method and device

Abstract

Embodiments of the invention relate to the technical field of cryptography, and in particular to a data encryption and decryption method and a data encryption and decryption device, used to improve data security in the sharing process. The method comprises: determining access constraint information of the data to be encrypted, wherein the access constraint information includes N constraint information; encrypting the data to be encrypted by the first key to obtain a first ciphertext, wherein the first key is a symmetric key; generating a plurality of pairs of second keys according to the N constraint information; encrypting at least a partial key parameter of the first key using the second public key for each second public key to obtain a second ciphertext, wherein the second private key corresponding to the second public key is used to decrypt the second ciphertext; storing the first ciphertext and the second ciphertext in the cloud storage server, and storing each second private keyand access condition in the key management center, wherein the key management center is configured to send the second private key corresponding to the current information satisfying the access condition to the client according to the current information of the client. In this way, the security of shared data may be improved.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of cryptography, and in particular, to a data encryption and decryption method and device. Background technique [0002] With the Internet O 2 The O industry is growing day by day, and major Internet companies have accumulated massive amounts of user information and behavior data, and these data are shared by merchants, third-party logistics, data analysts, operation and maintenance personnel, etc., making it difficult to protect user privacy and valuable data. Therefore, how data managers desensitize users' private information, when, where and how to share data are problems to be solved. [0003] In the prior art, the data encryption technology can guarantee the security of data transmission and storage, including symmetric and asymmetric methods. In the process of data sharing, if a single symmetric encryption method is used, multiple entities will share the decryption key, and ...

AI Technical Summary

Problems solved by technology

In the process of data sharing, if a single symmetric encryption method is used, multiple entities will share the decryption key, and data security is low; if a single asymmetric method is used, the system needs to generate a public-private key pair for each user. In the participating scenarios, the system key generation and storage overhead is too large

And as the amount of data continues to increase, it is difficult to manage huge ciphertext data locally

Therefore, traditional data encryption technology cannot meet the requirements of the Internet O 2 Big data security sharing requirements in the industry

Images