High-performance data multi-level encryption and decryption method and system based on complete homomorphic encryption

Abstract

The invention discloses a high-performance data multi-stage encryption and decryption method based on complete homomorphic encryption, which encrypt data by a symmetric key by means of a complete homomorphic encryption technology, encrypt the symmetric key by using a multi-stage encryption technology, establish a user relationship tree structure, and can achieve multi-level and controllable data encryption supporting a tree-shaped user system. Compared with an original multi-level encryption method directly for data encryption, the method has higher speed of encryption and decryption operation on data to be protected, smaller size of a ciphertext, and better facilitates the transmission and storage of the ciphertext. The invention also discloses a system for realizing the multi-stage encryption and decryption method.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a high-performance data multi-level encryption and decryption method and system based on complete homomorphic encryption. Background technique [0002] Multi-level encryption can enable users with tree-like affiliation to use their own private keys to share encrypted data. Specifically, users located near the root of the user relationship tree can use their own private keys to correctly decrypt the encrypted data of all directly subordinate users. , but cannot decrypt the encrypted data of its immediate superior users, nor can it decrypt the encrypted data of users located in different branches of the relationship tree with this user. However, because multi-level encryption technology is slower than many common encryption technologies, and the ciphertext volume is larger, the operation and storage overhead of using multi-level encryption to protect the entire amount of...

AI Technical Summary

Problems solved by technology

However, since multi-level encryption technology is slower than many common encryption technologies, and the ciphertext volume is larger, when the full amount of data is protected by multi-level encryption, the overhead of computing and storage is higher.

[0003] In addition, other existing encryption technologies, such as ordinary symmetric encryption technology and asymmetric encryption technology, cannot directly meet the requirements of multi-level encryption based on permission tree

Although attribute encryption technology can implement data encryption and ciphertext access control based on specific user attributes, the permission tree structure must be determined in advance and cannot be adjusted dynamically. Users with new attributes cannot access the generated ciphertext.

Images