An Auditable Encrypted Storage Method

Abstract

The invention relates to data encryption and storage technology, and aims to provide an auditable encrypted storage method and system. The system includes a client and a server that are connected based on the Internet. The client is configured with a key generation module, a data processing module, an audit initiation module, an integrity verification module, and an encrypted data restoration module, and only an integrity certification module is configured on the server. . Even if the server end of the present invention obtains the outsourced data, it cannot know its real content, and when the security parameter λ is selected with an appropriate value, it is very difficult to brute force cracking. Use a modified RSA algorithm to encrypt files, and use a relatively safe mapping function to assist. These two parts are encrypted and unreadable for the remote service, and a specific calculation formula is subsequently constructed to verify its integrity without requiring the user to download the file back and decrypt it. It can improve the security of encrypted storage and make file auditing more convenient.

Description

Technical field [0001] The present invention relates to data encryption and storage techniques, and more particularly to an auditable encryption storage method and system. Background technique [0002] In the era of Internet popularity, end users are constraints for their own calculation conditions, often choose to store files on remote servers, such as managed servers, clouds, and more. From the perspective of information security, this method alleviates the device pressure of the end user itself, but has increased security hazards to some extent. After being invaded, the remote server may be steadped and tampered, even embed malicious code; the credibility of cloud service providers cannot guarantee that the user has lost the control of its status after the user uploaded files. Especially when the user file is compared to confidentiality, the consequences become relatively serious. [0003] One of the main means to address this situation is to encrypt the file before uploading....

AI Technical Summary

Problems solved by technology

[0004] 1. If the encryption algorithm used is not suitable, or the strength is relatively low, the attacker can still restore the plaintext data through brute force guessing, that is, the encryption will not achieve the desired effect

[0005] 2. If an appropriate encryption algorithm is selected, end users still cannot conveniently conduct follow-up audits on remote files

But the problem is that the user's audit requirements are still relatively cumbersome and need to consume more resources on the terminal

Images