Key management method, device and system and storage medium

Abstract

The invention discloses a key management method, device and system and a storage medium. The key management method comprises the following steps: based on a data service request sent by a data service terminal, confusing a first key generation algorithm to obtain a confused second key generation algorithm; sending a second key generation algorithm to the key server; performing cooperative calculation with the key server based on a second key generation algorithm, the first key fragment stored by the data storage server and the second key fragment stored by the key server, and performing anti-confusion on a calculation result of the cooperative calculation to obtain a key corresponding to the data service request. Therefore, only the data storage server can obtain the key corresponding to the data service request, and the first key generation algorithm is confused, so that the second key generation algorithm corresponding to the cooperative calculation can dynamically change, the difficulty of stealing the key by an attacker is increased, and while the usability of the key is met, the security of the key is improved.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a key management method, device, system and storage medium. Background technique [0002] In related technologies, if user privacy data is stored in a database in clear text, once it is dragged into the database, it will directly threaten user privacy data. Data encryption storage technology is a technology that can effectively protect private data. Its principle is to encrypt sensitive information in user data and store it in a database or file system, and decrypt it when it needs to be read. Even if the attacker implements a database dragging attack, as long as the key is not leaked, the attacker cannot obtain user privacy data. [0003] Key management is the core of encrypted storage technology. If the key is leaked, the encrypted data will no longer be safe. Traditional solutions are implemented through software or hardware. The software method is to save the ke...

AI Technical Summary

Problems solved by technology

The software method is to save the key in the configuration file or database, and directly read the key for decryption when it needs to be decrypted. This method has potential security risks

The hardware method is to save the key in the hardware medium, for example, U disk (USB flash disk). When decrypting data, insert the U disk to read the key to perform the decryption operation. After the decryption is completed, unplug the U disk. This method is safe Performance can be guaranteed, but ease of use is poor

Images