Enterprise management public data protection system and method based on double factors in cloud environment

Abstract

The invention discloses an enterprise management public data protection system and method based on double factors in a cloud environment, and the system comprises: a data owner which encrypts the databased on attributes, and forms a primary ciphertext; a cloud service provider which is used for carrying out secondary encryption storage on the primary ciphertext to generate a secondary ciphertext,reserving an original secondary ciphertext when a notification of updating the secondary ciphertext of the authorization center is received, carrying out secondary encryption on the original primaryciphertext again, and storing the newly generated secondary ciphertext; an authorization center which is used for initializing the system, managing users, generating system parameters, distributing safety equipment and informing a cloud service provider of updating the second-level ciphertext; and a user which downloads the second-level ciphertext and decrypts the second-level ciphertext to meetthe requirement that the user with the special attribute obtains the data by using the secret key. An attribute-based encryption and security equipment encryption and revocation technology is adoptedto ensure that only users with attributes meeting in enterprise management can access public data, and the public data can be revoked and reissued even if the security equipment is lost.

Description

technical field [0001] The invention relates to the technical field of public data protection, in particular to a two-factor-based enterprise management public data protection system and method in a cloud environment. Background technique [0002] At present, in modern enterprise management, building a safe and efficient enterprise management system has become a trend. With the continuous improvement of management quality requirements, a large number of problems continue to appear. On the one hand, it is very important to build a secure storage space to ensure that data (such as corporate finance, core technology, trade secrets, etc.) : The needs of financial departments, research and development departments, and decision-making departments) are also a big challenge, especially how to access public data in enterprise computers safely and efficiently is a problem that needs to be solved urgently. However, it is difficult to solve such thorny problems with traditional data p...

AI Technical Summary

Problems solved by technology

As far as we know, Joseph K. Liu et al first proposed a reversible two-factor data security protection mechanism, however, their scheme is actually an identity-based scheme, and the ciphertext can only be decrypted by a single user rather than a group of users

Therefore, their solution only solves the problem of secure access to single-user data, and is not suitable for the protection of public data in cloud environments

In addition, how to implement factor revocation under the premise of protecting data security is also a challenge for the two-factor scheme

Images