Security data storage management method and system and security storage management module

Abstract

The invention discloses a secure data storage management method. The method comprises the steps of sending a storage space application request; decrypting the storage space application request by using the private key to obtain a first access certificate and application information; randomly generating a second access certificate, determining an initial address of the storage space, and then allocating the storage space; encrypting the second access certificate to obtain encrypted information, and sending the encrypted information to the process or the equipment; and enabling the process or the equipment to store the to-be-stored data into the storage space. According to the method, the storage space application request sent by the process or the equipment is encrypted, decrypted and verified in combination with the asymmetric password, so that attacks such as replay and tampering in data storage and access processes are effectively resisted, and the confidentiality and integrity of data are ensured; and the confidentiality, the integrity and the availability in the data storage and access process are improved. The invention further provides a security data storage management system and a security storage management module, which have the above beneficial effects.

Description

technical field [0001] The present application relates to the field of data storage, in particular to a method and system for secure data storage management and a secure storage management module. Background technique [0002] In the process of data storage and access, if there is no safe and reliable management mechanism, it is very vulnerable to attacks such as replay, tampering, and eavesdropping, resulting in data leakage, disorder, loss, and even system crashes. [0003] Usually, when the data access subject initiates an access request, the traditional access control method only judges according to whether the access subject has authority, and cannot know whether the requesting access subject is in a safe operating environment. Even if the access subject has legal authority, if the access subject in a malicious environment accesses the data, it will still cause data leakage and illegal access. For example, after the access subject passes the access control verification ...

AI Technical Summary

Problems solved by technology

[0002] In the process of data storage and access, if there is no safe and reliable management mechanism, it is very vulnerable to attacks such as replay, tampering, and eavesdropping, resulting in data leakage, disorder, loss, and even system crashes

[0003] Usually, when the data access subject initiates an access request, the traditional access control method only judges according to whether the access subject has authority, and cannot know whether the requesting access subject is in a safe operating environment

Even if the access subject has legal authority, if the access subject in a malicious environment accesses the data, it will still cause data leakage and illegal access. For example, after the access subject passes the access control verification and obtains the data, the malicious program can attack and intercepted data

Images