Cloud storage information processing system and method based on dynamic encryption RBAC model

Abstract

The invention belongs to the technical field of cloud storage, and discloses a cloud storage information processing system and method based on a dynamic encryption RBAC model, and a user side which isconnected with a cloud storage platform through a network and is used for user authentication, role authentication, file operation and management, file permission sharing and data online preview andediting. The safety management component is used for identity authentication and file access control; the cloud storage server is connected with the client and is used for data encryption and decryption, key management, file data storage and user operation logs; and the online collaboration server is used for providing online file preview and editing services. Based on the RBAC model of dynamic encryption, a reasonable and effective access control function can be provided, an access control strategy is dynamically encrypted, the reliability of data is practically and effectively ensured, and data privacy is protected; Meanwhile, a document online collaboration function is provided, so that difficulty in multi-version redundancy decentralized management of documents is avoided, and convenience is brought to enterprise organizations and individuals in private clouds.

Description

technical field [0001] The invention belongs to the technical field of cloud storage, and in particular relates to a cloud storage information processing system and method based on a dynamic encryption RBAC model. Background technique [0002] In recent years, cloud storage has been widely used. While it is convenient to use, cloud storage has also aroused widespread concerns among users about cloud storage data security and privacy protection security. Many cloud storage service providers such as Google and Microsoft have experienced security issues of user data and privacy leakage. Protecting user privacy and confidentiality of sensitive data has become an important security issue for cloud storage. [0003] Data access control is an important part of protecting data confidentiality in cloud storage. Most of the current research on access control is based on the static model scenario, where the policy library rarely changes and cannot represent the real access control sys...

AI Technical Summary

Problems solved by technology

[0004] (1) Inconvenient data management and control of corporate documents

When a group has a huge amount of data or involves too many management areas, it is not possible to perform unified centralized management and control of files under the conditions of public cloud storage, which is likely to cause problems such as data outflow leakage and management confusion, redundancy and dispersion.

[0005] (2) Data access cannot reach the optimal time

Data is stored in a single cloud storage provider. If the network fluctuates or is congested, the access speed will be too slow, and the user's network service quality will be significantly reduced.

[0006] (3) Data privacy and security cannot be guaranteed

Due to factors such as operation and maintenance costs and computing resources, the data stored on the public cloud storage platform can be directly viewed by the administrator of the cloud storage provider, and there is a possibility of being completely peeped. At the same time, there are endless data leakage problems, and the data privacy of users and groups cannot be guaranteed.

[0007] (4) Data cannot be edited and synchronized online

[0009] (1) The existing cloud storage information processing method is inconvenient in the management and control of enterprise group file data, and cannot carry out unified centralized management and control of files, which may easily cause problems such as data outflow leakage and management confusion, redundancy and dispersion

[0010] (2) In the existing cloud storage information processing method, data access cannot reach the optimal time, resulting in too slow access speed, and the user's network service quality is significantly reduced

[0011] (3) In the existing cloud storage information processing methods, data privacy and security cannot be guaranteed, and there is a possibility of being completely peeped. At the same time, data leakage problems are emerging one after another, and the data privacy of users and groups cannot be guaranteed

[0012] (4) In the existing cloud storage information processing method, the data cannot be edited and synchronized online, and the file cannot be synchronized in time after the user edits the file, which brings inconvenience to the timely update and version control of the internal files of the enterprise group

Images