A static data encryption protection method and system

Abstract

The present invention relates to a static data encryption protection method and system. The method includes: registering the information of the server host where the client is located to the server; assigning a master key to the directory or file of the server host at the server, generating an encryption control strategy and downloading Send to the corresponding client; the client obtains the corresponding master key from the server according to the encryption control strategy; when writing data to the encrypted directory or file, a data key is randomly generated, and the directory or file is encrypted using the data key. Encrypt to obtain an encrypted file; use the master key to encrypt the data key to obtain the key ciphertext, and write the key ciphertext to the header of the encrypted file to complete the data writing. In the present invention, the client performs encryption and decryption operations of files, and the server implements server host management, key management, and control strategy management, etc., realizes transparent access to encrypted files, unified management of keys and strategies, and separates file management and use rights, improving file protection security.

Description

technical field [0001] The invention relates to the technical field of file security protection, in particular to a static data encryption protection method and system. Background technique [0002] With the continuous development of information technology, people's awareness of information security is getting stronger and stronger. How to ensure that the confidential data of enterprises will not be stolen is a problem that people are more and more concerned about. Sensitive data stored on enterprise servers includes various documents, pictures, audio and video files, database files, and other types of data, which may be subject to leakage risks from inside or outside the enterprise. [0003] Among the file security protection technologies, there are mainly terminal file encryption, transfer file encryption, and full disk encryption. There are various problems in the above methods: the terminal file encryption product is deployed on the user terminal system in the form of s...

AI Technical Summary

Problems solved by technology

There are various problems in the above methods: the terminal file encryption product is deployed on the user terminal system in the form of software, and the user needs to manually decrypt the file when accessing the encrypted file, which is inconvenient to use; the encryption of the transmitted file cannot solve the security of the file storage Problem; Full Disk Encryption encrypts data at the disk level, but cannot encrypt only specific files

[0004] At the same time, when the above products encrypt files, the encryption keys are all stored on the disk, which is less secure

Once the key is lost or leaked, the encrypted file will be leaked or damaged

Images