Key separation combined encryption method and system

Abstract

The invention discloses a key separation combined encryption method and system, and relates to the field of data security and computer network technology. The method comprises the following steps: dividing data into a first part of the data and a second part of the data by a user terminal; encrypting the first part of the data to obtain a first partial ciphertext of the data by utilizing the terminal key obtained from a key distribution center (KDC); sending the first partial ciphertext of the data and the second part of the data to a server end by the user terminal, so that the server end utilizes a server end key obtained from the KDC to encrypt the second part of the data to obtain a second partial ciphertext of the data.

Description

technical field [0001] The invention relates to the technical fields of data security and computer network, in particular to a combined encryption method and system with key separation. Background technique [0002] With the rapid development of mobile Internet and wireless network technology, a large amount of digital data is generated every day. People are paying more and more attention to the privacy and security of data. Data encryption is one of the main means to protect privacy. On the one hand, in order to ensure data security, the encryption algorithms and keys used for encryption are becoming more and more complex, especially when the computing power of the device is limited, such as mobile phones, set-top boxes, etc., the encryption and decryption will take a long time and affect the user experience; on the other hand, At present, encryption usually means that one party sets a key and then encrypts the file, and then stores the encrypted data and key on the server ...

AI Technical Summary

Problems solved by technology

However, the above two methods involve one party participating in the encryption and decryption of files, especially the first one, which has high requirements on the performance of the mobile phone, and when the key of this party is lost, the private information will be leaked, and the second one requires server-side The computing performance is very strong, but in the mobile Internet environment, the computing performance of the user terminal and the server side (not limited to the set-top box) is not very high

In addition, when users want to share encrypted data with other users, one way is to send the key to other users, but it will increase the risk of leakage, and the other way is to re-encrypt the document with a new key, but it will increase storage space

Images