Distributed system sensitive data transmission protection method and device

Abstract

The invention discloses a distributed system sensitive data transmission protection method and device. The method comprises the following steps: encryption and decryption, and the encryption comprisesthe random generation of a symmetric secret key and the symmetric encryption of data; setting the life length of the data, asymmetrically encrypting the symmetric key, Meanwhile, carrying out hash function hash conversion to finally form encrypted data; wherein the decryption processing comprises the steps of obtaining the head and main body data of the encrypted data, and decrypting the encrypted symmetric key in the head to obtain the symmetric key; performing hash calculation on the main body data, the life length and the encrypted symmetric key in the head, and encrypting a calculation result through the symmetric key to obtain a hash message authentication code; and judging whether the hash message authentication code is matched or not, decrypting the main body data to obtain plaintext data when the hash message authentication code is matched and the life length is valid, and destroying the encrypted symmetric key. According to the invention, the safety in the sensitive data transmission process can be ensured.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for protecting sensitive data transmission in a distributed system. Background technique [0002] In recent years, protecting sensitive data from being leaked has become a hot issue that people pay attention to. In addition to directly stealing physical storage devices, intruders can also steal file data through network attacks; moreover, due to sharing requirements, sensitive data will be accessed by multiple people, which also increases the possibility of leakage. [0003] Encrypting data or files has become a recognized and successful protection method. In fact, people have already developed many excellent encryption algorithms, such as DES, AES, RSA, etc., and some applications such as crypt use these encryption algorithms, and users use these tools to manually complete encryption and decryption. Because these applications are cumbersome to oper...

AI Technical Summary

Problems solved by technology

Because these applications are cumbersome to operate, are not tightly integrated with the entire system and are vulnerable to attacks, general users are not willing to use them. This problem also exists in distributed systems. Network information security and data redundancy problems are still distributed How to ensure the security of sensitive data transmission is an urgent problem to be solved

Images