Repudiable storage method and system with multi-snapshot security
By initializing the master key in a deniable storage system and encrypting the storage data using the PPRF key tree, the problem of insufficient security under multi-snapshot attacks is solved, and the balance between multi-snapshot security and deniable storage is achieved.
CN119808180AActive Publication Date: 2025-04-11UNIV OF ELECTRONICS SCI & TECH OF CHINA
7 Cites 0 Cited by
Patent Information
- Application Number
- CN202510017392.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-06
- Publication Date
- 2025-04-11
- Estimated Expiration
- 2045-01-06
AI Technical Summary
Technical Problem
The prior art lacks security under multi-snapshot attacks and cannot effectively guarantee the reliability of denied storage.
Method used
By generating system common parameters, initializing the master key of the secure deletion system and hidden storage system, encrypting storage data using the PPRF key tree and file key table, and storing disk status through a tree structure, building a storage space that can deny storage system.
Benefits of technology
It realizes the provision of multi-snapshot security in a multi-snapshot attack environment, ensuring that the existence of hidden data cannot be inferred through snapshot differences, and ensuring complete deletion or deep hiding of sensitive information.
✦ Generated by Eureka AI based on patent content.
Abstract
The invention discloses a deniable storage method and system with multi-snapshot security. The method comprises the following steps: generating system public parameters according to security parameters; inputting a password of a secure deletion system to initialize the first master key; inputting a password of the hidden storage system to initialize a second master key; the disk state of the PPRF is stored through a tree structure, and a first key tree is generated; encrypting and storing encryption keys of all files to generate a first file key table; constructing a storage space of the deniable storage system; writing / updating, reading and deleting the public file; and writing, updating and deleting the hidden data. According to the method, normal file change in the snapshot period has multi-snapshot security; the hidden space and the public space can be freely switched, and compared with an existing deniable storage system with multi-snapshot safety, the capacity can be increased by 50 times at most; and the hidden space is completely encrypted by using the master key in the TPM module, so that a powerful guarantee is provided for the security of the hidden space.
Need to check novelty before this filing date? Find Prior Art