Data encryption storage method realized based on national cryptographic algorithm

Abstract

The invention provides a data encryption storage method implemented based on a national secret algorithm, which belongs to the field of data security and comprises four parts: issuing of an agreed Key, generation of a master key, generation of a data key and data encryption. The key management service serves as a life cycle management center of the key and is responsible for centralized management of the key, and the key cannot be obtained from the periphery and can be used by deriving a data key through a master key; and the encryption and decryption of the data are locally realized in a form of safely transmitting a data key. The data storage risk is reduced, and the security of the encryption key is improved.

Description

technical field [0001] The invention relates to the field of data security, in particular to a data encryption storage method based on a national secret algorithm. Background technique [0002] Strictly speaking, security technologies for data are mainly divided into three categories: hiding, access control, and cryptography. Data transmission security, data storage security, data access security control, etc. are all areas of data security. In order to solve this kind of data security problem, the national secret encryption algorithm is implemented, and the commercial version includes SM1, SM2, SM3, SM4, SM7 and SM9 algorithms. [0003] In the process of encrypting and storing large files, the traditional method is to transfer the large files to a physical encryption machine for encryption, and then return them for storage. Although this can ensure the security of the data, it cannot guarantee the security of the transmission process. , and is inefficient (will depend on ...

AI Technical Summary

Problems solved by technology

[0003] In the process of encrypting and storing large files, the traditional method is to transfer the large files to a physical encryption machine for encryption, and then return them for storage. Although this can ensure the security of the data, it cannot guarantee the security of the transmission process. , and inefficient (will depend on various factors such as bandwidth)

Images