Remote storage service method and system based on SGX

Abstract

The invention discloses a remote storage service method and system based on SGX. The method comprises remote storage service system initialization, data storage, data access and data cleaning operations; the remote storage service system initialization operation comprises the steps of creating a credible space for a key generation function, a key expansion function and an encryption and decryptionfunction by virtue of the SGX and generating a parent key in the credible space; the data storage operation comprises the steps of transmitting to-be-stored data to a remote storage server by a client, generating a sub key of the to-be-stored data in the credible space and encrypting the to-be-stored data; the data access operation comprises the steps of decrypting accessed data in the credible space by the remote storage server and transmitting to the client by virtue of an encrypted channel; and the data cleaning operation comprises the steps of collecting to-be-cleaned data and the sub keyby the remote storage server and deleting. The method disclosed by the invention enables data encryption and decryption processes as well as storage and access processes not to be snooped or interfered by a rogue program or other prerogative software.

Description

technical field [0001] The present invention relates to the technical field of data storage service security, in particular to an SGX-based remote storage service method and system. Background technique [0002] With the development of information technology and the increasing amount of information, data storage services play an increasingly important role. Compared with local storage, remote storage can reduce the pressure on users to manage data and reduce data management costs, and has gradually become an important means of data storage and management. [0003] However, the development of technology has also made the attacks on data storage systems more and more serious. Although remote storage systems can take more professional protection measures to protect data than local storage systems independently maintained by users, they often become the focus of attacks, especially those that store private information, commercial data, software, etc. A remote storage server or...

AI Technical Summary

Problems solved by technology

However, its current user scale is small, the storage capacity is limited, and the system robustness is still slightly insufficient; and the storage service cannot be built or managed by customers, and the data is delivered to a large number of storage devices of unfamiliar nodes for storage, even if the data is encrypted. processing, and is not a good idea for businesses or other data-sensitive users

Images