Electronic information security storage system and method based on cloud computing

Abstract

The invention provides an electronic information security storage system and method based on cloud computing, and relates to the technical field of cloud computing, and the method comprises the steps: employing an electronic information encryption device to perform encryption processing on electronic storage information based on the cloud computing technology to generate electronic encryption information, extracting key information to generate an electronic information abstract, the electronic information abstract is encrypted by sending an encryption private key to generate an electronic information digital signature, an electronic storage instruction is received, an encryption result is sent to an electronic information storage device through an electronic information exchange device, stored electronic encryption information is determined, and an electronic reading instruction is received. The electronic information storage device decrypts the electronic information digital signature according to the decryption request public key and compares the electronic information digital signature with the electronic information abstract for verification; and determining the digital signature of the electronic information passing the verification, decrypting the electronic encrypted information by the electronic information storage device to obtain electronic storage information, and sending the electronic storage information to the request end, so that encrypted storage, efficient transmission and security verification of the information can be realized.

Description

Technical Field

[0001] The present invention relates to the technical field of cloud computing, and in particular to a cloud computing-based electronic information security storage system and method. Background Art

[0002] With the rapid development of information technology, the amount of network data has shown an explosive growth trend. This sharp increase in data volume has brought new challenges to storage technology, requiring storage systems to have sufficient capacity, efficient data processing capabilities, and strong security mechanisms. Cloud computing technology is efficient, flexible, and scalable. Through virtualization technology, a large number of computing resources, storage resources, and network resources can be pooled to achieve dynamic allocation and on-demand use of resources, greatly improving resource utilization and data processing efficiency, and meeting storage needs in different application scenarios.

[0003] In the prior art, traditional storage methods have problems such as low efficiency and insufficient security when processing massive amounts of data, and cannot achieve efficient and secure storage of electronic information. The distributed storage and replication mechanism of data can easily lead to data redundancy problems, which not only wastes storage space, but also may affect the processing speed and accuracy of data. However, the existing storage system cannot effectively solve the data redundancy problem.

[0004] Therefore, it is necessary to provide a cloud computing-based electronic information security storage system and method to solve the above technical problems. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides a cloud computing-based electronic information security storage system and method for solving the problem that traditional storage methods have low efficiency, insufficient security, and data redundancy when processing massive data, and cannot achieve efficient and secure storage of electronic information.

[0006] The present invention provides a cloud computing-based electronic information security storage system, the storage system comprising:

[0007] An acquisition module is used to acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information;

[0008] An extraction module is used to extract key information from the electronic encrypted information to generate a corresponding electronic information summary, and to perform secondary encryption processing on the electronic information summary using a corresponding transmission encryption private key of the sending end to generate a corresponding electronic information digital signature;

[0009] A storage module, used for receiving the electronic storage instruction of the sending end, sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to be stored according to the electronic information digital signature;

[0010] A verification module, used to receive an electronic read instruction from a requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to a request decryption public key corresponding to the requesting end, and compares and verifies the electronic information summary;

[0011] The sending module is used to determine the electronic information digital signature that has passed the verification, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end.

[0012] Preferably, the acquisition module is used to acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information. The corresponding calculation formula is as follows:

[0013] DJX=E(DCX,K)

[0014] In the formula, DJX represents electronic encrypted information; E() represents the encryption function corresponding to one encryption process; DCX represents electronic storage information; K represents the key of the electronic information encryption device.

[0015] Preferably, the extraction module is used to extract key information from the electronic encrypted information to generate a corresponding electronic information summary, and use the corresponding sending encryption private key of the sender to perform secondary encryption processing on the electronic information summary to generate a corresponding electronic information digital signature, specifically including:

[0016] A summary extraction unit, used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate a corresponding summary of the electronic information;

[0017] A private key encryption unit, used to obtain a sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate a corresponding digital signature of the electronic information;

[0018] The packaging processing unit is used to package the electronic encrypted information and the electronic information digital signature.

[0019] Preferably, the summary extraction unit is used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate the corresponding electronic information summary, specifically including:

[0020] The total number of sub-electronic encrypted information in the electronic encrypted information is set to n, and the electronic encrypted information is DJX={ZDJX1, ZDJX2, ..., ZDJX n};

[0021] Extract the key information in the electronic encrypted information to generate the corresponding electronic information digest. The corresponding calculation formula is as follows:

[0022]

[0023] Where ZY represents the electronic information summary; sim() represents the transfer function; β represents the key information extraction coefficient; N represents the number of times the transfer function is executed; ZDJX n represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information.

[0024] Preferably, the private key encryption unit is used to obtain the sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate the corresponding digital signature of the electronic information, specifically including:

[0025] Select prime numbers p and q, and p≠q, and calculate the corresponding modulus as follows:

[0026] M=p×q

[0027] Wherein, M represents the modulus; p and q represent prime numbers, and p≠q;

[0028] The Euler function corresponding to the modulus is calculated as follows:

[0029]

[0030] In the formula, The Euler function corresponding to the modulus is used to determine the number of positive integers less than the modulus M and coprime with the modulus M; M represents the modulus; p and q represent prime numbers, and p≠q;

[0031] According to the Euler function corresponding to the modulus Determine the encryption exponent e corresponding to the sent encryption private key, and the integer e satisfies And e and mutually prime;

[0032] According to the modulus M and the encryption exponent e corresponding to the sent encryption private key, determine that the sent encryption private key is (e, M);

[0033] The electronic information summary is encrypted twice by sending the encryption private key (e, M) to generate the corresponding electronic information digital signature. The corresponding calculation formula is as follows:

[0034] SZQM=ZY e mod M

[0035] In the formula, SZQM represents the digital signature of electronic information; ZY represents the summary of electronic information; e represents the encryption exponent corresponding to the sent encryption private key; M represents the modulus; and mod represents the remainder operation.

[0036] Preferably, the storage module is used to receive the electronic storage instruction of the sending end, send the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to perform the storage operation according to the electronic information digital signature, specifically including:

[0037] A storage receiving unit, used for the electronic information exchange device to receive the electronic storage instruction from the sending end;

[0038] A packaging and sending unit, used to send the packaged electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device;

[0039] An instruction verification unit, used for the electronic information storage device to verify the electronic storage instruction according to the signature attribute of the electronic information digital signature;

[0040] The result output unit is used for, if the verification is passed, the electronic information storage device to perform a storage operation on the electronic encrypted information; if the verification is not passed, the electronic information storage device to reject the electronic storage instruction and send a storage error message to the sending end.

[0041] Preferably, the signature attributes of the electronic information digital signature include a first signature attribute, a second signature attribute and a third signature attribute, and the calculation formulas of the first signature attribute, the second signature attribute and the third signature attribute are as follows:

[0042] QMSX1=(H(ZDJX n )×β)mod f(ZY)

[0043] QMSX2=(r-β)mod f(ZY)

[0044] QMSX3=(mod(Y-1))mod f(ZY)

[0045] Where, QMSX1 represents the first signature attribute; H() represents the attribute parameter extraction function of the sub-electronic encryption information; ZDJX n It represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information; β represents the key information extraction coefficient; mod represents the remainder operation; f() represents the information extraction function corresponding to the electronic information summary; ZY represents the electronic information summary; QMSX2 represents the second signature attribute; r represents the summary conversion parameter; QMSX3 represents the third signature attribute; Y represents the number of electronic information summaries.

[0046] Preferably, the verification module is used to receive an electronic read instruction from the requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to the request decryption public key corresponding to the requesting end and compares and verifies it with the electronic information summary, specifically including:

[0047] a read receiving unit, used for the electronic information storage device to receive an electronic read instruction from the requesting end;

[0048] A one-time decryption unit is used to determine the corresponding request decryption public key according to the identity information of the requesting end, and perform one-time decryption processing on the digital signature of the electronic information through the request decryption public key. The corresponding calculation formula is as follows:

[0049] According to the Euler function corresponding to the modulus and the encryption exponent e corresponding to the sent encryption private key, determining the decryption coefficient d corresponding to the requested decryption public key;

[0050] Determine the requested decryption public key as (d, M) according to the modulus M and the decryption coefficient d corresponding to the requested decryption public key;

[0051] The electronic information digital signature is decrypted once using the requested decryption public key, and the corresponding calculation formula is:

[0052] QZQ ′ =SZQM d mod M

[0053] In the formula, SZQM ′ It represents the digital signature of electronic information after a decryption process; SZQM represents the digital signature of electronic information; d represents the decryption coefficient corresponding to the public key requested for decryption; M represents the modulus; mod represents the remainder operation;

[0054] The comparison and verification unit is used to compare and verify the electronic information digital signature after one decryption process with the electronic information summary.

[0055] Preferably, the sending module is used to determine the verified electronic information digital signature, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end, and further includes:

[0056] For the electronic information digital signature that fails the verification, the electronic information storage device rejects the electronic read instruction and sends a read error message to the requesting end.

[0057] A method for securely storing electronic information based on cloud computing, the method comprising:

[0058] Acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information;

[0059] Extracting key information from the electronic encrypted information to generate a corresponding electronic information digest, and performing secondary encryption processing on the electronic information digest using a corresponding sending encryption private key of the sending end to generate a corresponding electronic information digital signature;

[0060] receiving the electronic storage instruction from the sending end, and sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, wherein the electronic information storage device determines the electronic encrypted information that needs to be stored according to the electronic information digital signature;

[0061] Receiving an electronic read instruction from a requesting end, the electronic information storage device performs a decryption process on the electronic information digital signature according to a request decryption public key corresponding to the requesting end and compares and verifies the electronic information summary;

[0062] The electronic information digital signature that has passed the verification is determined, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end.

[0063] Compared with the related art, the electronic information security storage system and method based on cloud computing provided by the present invention has the following beneficial effects:

[0064] The present invention can obtain electronic storage information through an acquisition module, an extraction module, a storage module, a verification module and a sending module, and perform a primary encryption process on the electronic storage information by using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encryption information; extract key information in the electronic encryption information to generate a corresponding electronic information summary, and perform a secondary encryption process on the electronic information summary by using a corresponding sending encryption private key of a sending end to generate a corresponding electronic information digital signature; receive an electronic storage instruction of the sending end, send the electronic encryption information and the electronic information digital signature to the electronic information storage device through an electronic information exchange device, and the electronic information storage device determines the electronic encryption information that needs to be stored according to the electronic information digital signature; receive an electronic read instruction of a request end, and the electronic information storage device performs a primary decryption process on the electronic information digital signature according to a request decryption public key corresponding to the request end, and compares and verifies it with the electronic information summary; determine the electronic information digital signature that has passed the verification, and the electronic information storage device performs a secondary decryption process on the corresponding electronic encryption information to obtain the electronic storage information and send it to the request end. The present invention can realize the secure storage of electronic information through cloud computing technology and digital signature mechanism, significantly improve storage efficiency and security, and solve the storage efficiency problem caused by network information redundancy; and through electronic information encryption device, electronic information exchange device and electronic information storage device, it can ensure the high-speed processing and storage capacity of electronic information data; at the same time, through the verification mechanism, it can ensure the security and integrity of electronic information, as well as the stability and reliability of the storage system. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 A system block diagram of a cloud computing-based electronic information security storage system of the present invention;

[0066] Figure 2 It is a structural block diagram of an extraction module of an electronic information security storage system based on cloud computing of the present invention;

[0067] Figure 3 A structural block diagram of a storage module of an electronic information security storage system based on cloud computing of the present invention;

[0068] Figure 4 A structural block diagram of a verification module of an electronic information security storage system based on cloud computing of the present invention;

[0069] Figure 5 The present invention is a flowchart of a method for securely storing electronic information based on cloud computing. DETAILED DESCRIPTION

[0070] The present invention will be further described below in conjunction with the accompanying drawings and implementation modes.

[0071] Embodiment 1

[0072] like Figure 1 As shown, a cloud computing-based electronic information security storage system comprises:

[0073] An acquisition module is used to acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information;

[0074] An extraction module is used to extract key information from the electronic encrypted information to generate a corresponding electronic information summary, and to perform secondary encryption processing on the electronic information summary using a corresponding transmission encryption private key of the sending end to generate a corresponding electronic information digital signature;

[0075] A storage module, used for receiving the electronic storage instruction of the sending end, sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to be stored according to the electronic information digital signature;

[0076] A verification module, used to receive an electronic read instruction from a requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to a request decryption public key corresponding to the requesting end, and compares and verifies the electronic information summary;

[0077] The sending module is used to determine the electronic information digital signature that has passed the verification, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end.

[0078] The acquisition module can utilize the distributed processing capability of cloud computing technology to efficiently process large-scale data. After acquiring the electronic storage information, the module can encrypt the electronic storage information once using an encryption algorithm through an electronic information encryption device to generate corresponding electronic encrypted information, thereby effectively preventing the risk of data leakage during transmission.

[0079] The extraction module can first extract the key information in the electronic encrypted information and generate a fixed-length electronic information summary using a hash function. Subsequently, it can use the corresponding private encryption key of the sender to perform a secondary encryption on the electronic information summary to generate a unique and tamper-proof electronic information digital signature, thereby ensuring the authenticity and integrity of the information.

[0080] The storage module can receive the electronic storage instruction from the sending end, and securely transmit the electronic encrypted information and its corresponding electronic information digital signature to the electronic information storage device through the electronic information exchange device. The electronic information storage device can identify and verify the electronic encrypted information that needs to be stored based on the information in the electronic information digital signature, ensuring that only authorized data can be stored.

[0081] When the requesting end issues an electronic reading instruction, the verification module can receive the instruction and trigger the electronic information storage device to decrypt the electronic information digital signature using the request decryption public key corresponding to the requesting end. The decrypted summary can then be compared with the stored original summary to verify the integrity and authenticity of the information, thereby effectively preventing the risk of data tampering during storage.

[0082] Once the digital signature of the electronic information is verified, the sending module can instruct the electronic information storage device to perform secondary decryption processing on the corresponding electronic encrypted information, and use the decryption key of the sending end to restore the original electronic storage information. Finally, the decrypted information is securely sent to the requesting end through an encrypted communication channel, completing the entire secure storage and reading process.

[0083] In the specific implementation process, the acquisition module is used to acquire the electronic storage information, and encrypt the electronic storage information once using the electronic information encryption device based on the cloud computing technology to generate the corresponding electronic encrypted information. The corresponding calculation formula is as follows:

[0084] DJX=E(DCX,K)

[0085] In the formula, DJX represents electronic encrypted information; E() represents the encryption function corresponding to one encryption process; DCX represents electronic storage information; K represents the key of the electronic information encryption device.

[0086] It is understandable that the acquisition module can capture and extract electronic storage information from various data sources. In order to ensure the security of this information, an electronic information encryption device can be introduced based on cloud computing technology to perform strict encryption processing on the electronic storage information. The processing process takes the original electronic storage information as input, and uses the key of the electronic information encryption device to perform calculations through the encryption function, and finally generates the corresponding electronic encrypted information.

[0087] Through the above methods, the high confidentiality of electronically stored information during transmission and storage can be ensured, effectively preventing the risk of unauthorized access and leakage.

[0088] like Figure 2As shown, the extraction module 200 is used to extract the key information in the electronic encrypted information to generate a corresponding electronic information summary, and use the corresponding sending encryption private key of the sender to perform secondary encryption processing on the electronic information summary to generate a corresponding electronic information digital signature, specifically including:

[0089] A digest extraction unit 201 is used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate a corresponding digest of the electronic information;

[0090] The private key encryption unit 202 is used to obtain the sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate the corresponding digital signature of the electronic information;

[0091] The packaging processing unit 203 is used to package the electronic encrypted information and the electronic information digital signature.

[0092] In practical applications, the extraction module can accurately extract key information from electronic encrypted information and then generate the corresponding electronic information summary.

[0093] Specifically, the summary extraction unit can receive input electronic encrypted information, efficiently and accurately extract key information from the electronic encrypted information, and generate an electronic information summary with rich information content.

[0094] Subsequently, the private key encryption unit can use the corresponding sending encryption private key of the sender to perform secondary encryption on the generated electronic information summary and convert it into the corresponding electronic information digital signature, thereby enhancing the security of the information and ensuring the integrity and authenticity of the electronic information summary during the transmission process.

[0095] Finally, the packaging processing unit can package the electronic encrypted information and the generated electronic information digital signature. This step involves data integration and packaging, and the electronic encrypted information and the electronic information digital signature can be transmitted as a whole to facilitate subsequent verification and decryption operations.

[0096] The summary extraction unit is used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate the corresponding electronic information summary, specifically including:

[0097] The total number of sub-electronic encrypted information in the electronic encrypted information is set to n, and the electronic encrypted information is DJX={ZDJX1, ZDJX2, ..., ZDJX n};

[0098] Extract the key information in the electronic encrypted information to generate the corresponding electronic information digest. The corresponding calculation formula is as follows:

[0099]

[0100] Where ZY represents the electronic information summary; sim() represents the transfer function; β represents the key information extraction coefficient; N represents the number of times the transfer function is executed; ZDJX n represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information.

[0101] The private key encryption unit is used to obtain the sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate the corresponding digital signature of the electronic information, specifically including:

[0102] Select prime numbers p and q, and p≠q, and calculate the corresponding modulus as follows:

[0103] M=p×q

[0104] Wherein, M represents the modulus; p and q represent prime numbers, and p≠q;

[0105] The Euler function corresponding to the modulus is calculated as follows:

[0106]

[0107] In the formula, The Euler function corresponding to the modulus is used to determine the number of positive integers less than the modulus M and coprime with the modulus M; M represents the modulus; p and q represent prime numbers, and p≠q;

[0108] According to the Euler function corresponding to the modulus Determine the encryption exponent e corresponding to the sent encryption private key, and the integer e satisfies And e and mutually prime;

[0109] According to the modulus M and the encryption exponent e corresponding to the sent encryption private key, determine that the sent encryption private key is (e, M);

[0110] The electronic information summary is encrypted twice by sending the encryption private key (e, M) to generate the corresponding electronic information digital signature. The corresponding calculation formula is as follows:

[0111] SZQM=ZY e mod M

[0112] In the formula, SZQM represents the digital signature of electronic information; ZY represents the summary of electronic information; e represents the encryption exponent corresponding to the sent encryption private key; M represents the modulus; and mod represents the remainder operation.

[0113] like Figure 3 As shown, the storage module 300 is used to receive the electronic storage instruction of the sending end, and send the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to perform the storage operation according to the electronic information digital signature, specifically including:

[0114] The storage receiving unit 301 is used for the electronic information exchange device to receive the electronic storage instruction from the sending end;

[0115] A packaging and sending unit 302 is used to send the packaged electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device;

[0116] The instruction verification unit 303 is used for the electronic information storage device to verify the electronic storage instruction according to the signature attribute of the electronic information digital signature;

[0117] The result output unit 304 is used for, if the verification is passed, the electronic information storage device to perform a storage operation on the electronic encrypted information; if the verification is not passed, the electronic information storage device to reject the electronic storage instruction and send a storage error message to the sending end.

[0118] Among them, in the storage receiving unit, the electronic information exchange device end can receive the electronic storage instructions from the sending end and ensure the integrity and timeliness of the instructions.

[0119] Next, the packaging and sending unit can use encryption technology and packaging algorithms to encapsulate the electronic encrypted information to be stored and its corresponding electronic information digital signature, and transmit it to the electronic information storage device safely and efficiently through the electronic information exchange device.

[0120] The instruction verification unit can strictly verify the received electronic storage instruction according to the signature attributes of the electronic information digital signature, namely the first signature attribute, the second signature attribute and the third signature attribute, to confirm its authenticity and validity.

[0121] If the verification process is successfully passed, the result output unit will perform a storage operation on the verified electronic encrypted information through the electronic information storage device, thereby ensuring the security and durability of the data. On the contrary, if the verification fails, the result output unit will trigger a rejection mechanism, refuse to execute the electronic storage instruction, and immediately generate a storage error message, which will be fed back to the sending end through the electronic information exchange device so that the sending end can take corresponding measures in time.

[0122] The signature attributes of the electronic information digital signature include a first signature attribute, a second signature attribute and a third signature attribute. The calculation formulas of the first signature attribute, the second signature attribute and the third signature attribute are as follows:

[0123] QMSX1=(H(ZDJX n )×β)mod f(ZY)

[0124] QMSX2=(r-β)mod f(ZY)

[0125] QMSX3=(mod(Y-1))mod f(ZY)

[0126] Where, QMSX1 represents the first signature attribute; H() represents the attribute parameter extraction function of the sub-electronic encryption information; ZDJX n It represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information; β represents the key information extraction coefficient; mod represents the remainder operation; f() represents the information extraction function corresponding to the electronic information summary; ZY represents the electronic information summary; QMSX2 represents the second signature attribute; r represents the summary conversion parameter; QMSX3 represents the third signature attribute; Y represents the number of electronic information summaries.

[0127] like Figure 4 As shown, the verification module 400 is used to receive the electronic reading instruction of the requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to the request decryption public key corresponding to the requesting end and compares and verifies the electronic information summary, specifically including:

[0128] A read receiving unit 401, used for the electronic information storage device to receive an electronic read instruction from the requesting end;

[0129] The one-time decryption unit 402 is used to determine the corresponding request decryption public key according to the identity information of the requesting end, and perform one-time decryption processing on the electronic information digital signature by using the request decryption public key. The corresponding calculation formula is as follows:

[0130] According to the Euler function corresponding to the modulus and the encryption exponent e corresponding to the sent encryption private key, determining the decryption coefficient d corresponding to the requested decryption public key;

[0131] Determine the requested decryption public key as (d, M) according to the modulus M and the decryption coefficient d corresponding to the requested decryption public key;

[0132] The electronic information digital signature is decrypted once using the requested decryption public key, and the corresponding calculation formula is:

[0133] QZQ ′ =SZQM d mod M

[0134] In the formula, SZQM ′ It represents the digital signature of electronic information after a decryption process; SZQM represents the digital signature of electronic information; d represents the decryption coefficient corresponding to the public key requested for decryption; M represents the modulus; mod represents the remainder operation;

[0135] The comparison and verification unit 403 is used to compare and verify the electronic information digital signature after one decryption process with the electronic information digest.

[0136] It should be noted that the read receiving module can receive electronic read instructions from the requesting end to ensure the validity and timeliness of the data request.

[0137] The one-time decryption module can accurately locate the corresponding request decryption public key according to the identity information of the requesting end. Specifically, the decryption coefficient corresponding to the request decryption public key can be determined according to the Euler function corresponding to the modulus and the encryption exponent corresponding to the sent encryption private key, and then the binary corresponding to the request decryption public key can be obtained. Using the request decryption public key, the received electronic information digital signature can be decrypted once.

[0138] Ultimately, the comparison and verification module can accurately compare and verify the digital signature of the electronic information after a decryption process with the summary of the electronic information, thereby ensuring the integrity and authenticity of the information and effectively preventing the information from being tampered with or forged during transmission.

[0139] The sending module is used to determine the verified electronic information digital signature, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end, and also includes:

[0140] For the electronic information digital signature that fails the verification, the electronic information storage device rejects the electronic read instruction and sends a read error message to the requesting end.

[0141] In practical applications, if the digital signature of the electronic information is verified, the sending module can accurately send the decrypted electronic storage information to the requesting end, thereby ensuring the timely delivery and effective use of the information.

[0142] However, for electronic information digital signatures that fail to pass the verification process, the sending module will trigger a rejection processing mechanism. At this time, the electronic information storage device will refuse to execute the corresponding electronic reading instruction, and immediately generate a corresponding reading error message, and quickly feed it back to the requesting end, so that the requesting end can promptly understand the cause of the reading failure and take corresponding processing measures, thereby greatly improving the security and stability of the system and optimizing the user experience.

[0143] Embodiment 2

[0144] like Figure 5 As shown, a method for secure storage of electronic information based on cloud computing, the storage method comprising:

[0145] S1, obtaining electronic storage information, and performing a primary encryption process on the electronic storage information using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information;

[0146] S2, extracting key information from the electronic encrypted information to generate a corresponding electronic information summary, and performing secondary encryption processing on the electronic information summary using a corresponding sending encryption private key of the sending end to generate a corresponding electronic information digital signature;

[0147] S3, receiving the electronic storage instruction from the sending end, sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determining the electronic encrypted information that needs to be stored according to the electronic information digital signature;

[0148] S4, receiving an electronic read instruction from the requesting end, the electronic information storage device performs a decryption process on the electronic information digital signature according to the request decryption public key corresponding to the requesting end, and compares and verifies the electronic information summary;

[0149] S5, determining the electronic information digital signature that has passed the verification, the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information, obtains the electronic storage information and sends it to the requesting end.

[0150] Through the introduction of the above embodiments, the present invention provides an electronic information security storage system and method based on cloud computing. The present invention can obtain electronic storage information through an acquisition module, an extraction module, a storage module, a verification module and a sending module. Based on cloud computing technology, an electronic information encryption device is used to perform a primary encryption process on the electronic storage information to generate corresponding electronic encrypted information; key information in the electronic encrypted information is extracted to generate a corresponding electronic information summary, and the electronic information summary is secondary encrypted using a corresponding sending encryption private key of the sending end to generate a corresponding electronic information digital signature; an electronic storage instruction of the sending end is received, and the electronic encrypted information and the electronic information digital signature are sent to the electronic information storage device through an electronic information exchange device. The electronic information storage device determines the electronic encrypted information that needs to perform a storage operation according to the electronic information digital signature; an electronic read instruction of the requesting end is received, and the electronic information storage device performs a primary decryption process on the electronic information digital signature according to the requesting end corresponding request decryption public key, and compares and verifies it with the electronic information summary; the electronic information digital signature that passes the verification is determined, and the electronic information storage device performs a secondary decryption process on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end. The present invention can realize the secure storage of electronic information through cloud computing technology and digital signature mechanism, significantly improve storage efficiency and security, and solve the storage efficiency problem caused by network information redundancy; and through electronic information encryption device, electronic information exchange device and electronic information storage device, it can ensure the high-speed processing and storage capacity of electronic information data; at the same time, through the verification mechanism, it can ensure the security and integrity of electronic information, as well as the stability and reliability of the storage system.

[0151] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0152] Those skilled in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium includes a read-only memory (ROM), a random access memory (RAM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), a one-time programmable read-only memory (OTPROM), an electronically erasable rewritable read-only memory (EEPROM), a compact disc (CD-ROM) or other optical disc storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium that can be used to carry or store data.

[0153] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

Claims

1. A cloud computing-based electronic information security storage system, characterized in that: The storage system comprises: An acquisition module is used to acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information; An extraction module is used to extract key information from the electronic encrypted information to generate a corresponding electronic information summary, and to perform secondary encryption processing on the electronic information summary using a corresponding transmission encryption private key of the sending end to generate a corresponding electronic information digital signature; A storage module, used for receiving the electronic storage instruction of the sending end, sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to be stored according to the electronic information digital signature; A verification module, used to receive an electronic read instruction from a requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to a request decryption public key corresponding to the requesting end, and compares and verifies the electronic information summary; The sending module is used to determine the electronic information digital signature that has passed the verification, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end.

2. The electronic information security storage system based on cloud computing according to claim 1 is characterized in that: The acquisition module is used to acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information. The corresponding calculation formula is as follows: DJX=E(DCX,K) In the formula, DJX represents electronic encrypted information; E() represents the encryption function corresponding to one encryption process; DCX represents electronic storage information; K represents the key of the electronic information encryption device.

3. The electronic information security storage system based on cloud computing according to claim 1 is characterized in that: The extraction module is used to extract key information from the electronic encrypted information to generate a corresponding electronic information summary, and use the corresponding sending encryption private key of the sender to perform secondary encryption processing on the electronic information summary to generate a corresponding electronic information digital signature, specifically including: A summary extraction unit, used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate a corresponding summary of the electronic information; A private key encryption unit, used to obtain a sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate a corresponding digital signature of the electronic information; The packaging processing unit is used to package the electronic encrypted information and the electronic information digital signature.

4. The electronic information security storage system based on cloud computing according to claim 3 is characterized in that: The summary extraction unit is used to receive the electronic encrypted information, extract key information from the electronic encrypted information, and generate the corresponding electronic information summary, specifically including: The total number of sub-electronic encrypted information in the electronic encrypted information is set to n, and the electronic encrypted information is DJX={ZDJX1, ZDJX2, ..., ZDJX n }; Extract the key information in the electronic encrypted information to generate the corresponding electronic information digest. The corresponding calculation formula is as follows: Where ZY represents the electronic information summary; sim() represents the transfer function; β represents the key information extraction coefficient; N represents the number of times the transfer function is executed; ZDJX n represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information.

5. The electronic information security storage system based on cloud computing according to claim 3 is characterized in that: The private key encryption unit is used to obtain the sending encryption private key corresponding to the sending end, perform secondary encryption processing on the electronic information summary by using the sending encryption private key, and generate the corresponding digital signature of the electronic information, specifically including: Select prime numbers p and q, and p≠q, and calculate the corresponding modulus as follows: M=p×q Wherein, M represents the modulus; p and q represent prime numbers, and p≠q; The Euler function corresponding to the modulus is calculated as follows: In the formula, The Euler function corresponding to the modulus is used to determine the number of positive integers less than the modulus M and coprime with the modulus M; M represents the modulus; p and q represent prime numbers, and p≠q; According to the Euler function corresponding to the modulus Determine the encryption exponent e corresponding to the sent encryption private key, and the integer e satisfies And e and mutually prime; According to the modulus M and the encryption exponent e corresponding to the sent encryption private key, determine that the sent encryption private key is (e, M); The electronic information summary is encrypted twice by sending the encryption private key (e, M) to generate the corresponding electronic information digital signature. The corresponding calculation formula is as follows: SZQM=ZY e mod M In the formula, SZQM represents the digital signature of electronic information; ZY represents the summary of electronic information; e represents the encryption exponent corresponding to the sent encryption private key; M represents the modulus; and mod represents the remainder operation.

6. The electronic information security storage system based on cloud computing according to claim 1 is characterized in that: The storage module is used to receive the electronic storage instruction of the sending end, and send the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, and the electronic information storage device determines the electronic encrypted information that needs to perform the storage operation according to the electronic information digital signature, specifically including: A storage receiving unit, used for the electronic information exchange device to receive the electronic storage instruction from the sending end; A packaging and sending unit, used to send the packaged electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device; An instruction verification unit, used for the electronic information storage device to verify the electronic storage instruction according to the signature attribute of the electronic information digital signature; The result output unit is used for, if the verification is passed, the electronic information storage device to perform a storage operation on the electronic encrypted information; if the verification is not passed, the electronic information storage device to reject the electronic storage instruction and send a storage error message to the sending end.

7. The electronic information security storage system based on cloud computing according to claim 4 or 6, characterized in that: The signature attributes of the electronic information digital signature include a first signature attribute, a second signature attribute and a third signature attribute. The calculation formulas of the first signature attribute, the second signature attribute and the third signature attribute are as follows: QMSX1=(H(ZDJX n )×β)mod f(ZY) QMSX2=(r-β)mod f(ZY) QMSX3=(mod(Y-1))mod f(ZY) Where, QMSX1 represents the first signature attribute; H() represents the attribute parameter extraction function of the sub-electronic encryption information; ZDJX n It represents the nth sub-electronic encrypted information in the electronic encrypted information; n represents the total number of sub-electronic encrypted information in the electronic encrypted information; β represents the key information extraction coefficient; mod represents the remainder operation; f() represents the information extraction function corresponding to the electronic information summary; ZY represents the electronic information summary; QMSX2 represents the second signature attribute; r represents the summary conversion parameter; QMSX3 represents the third signature attribute; Y represents the number of electronic information summaries.

8. The electronic information security storage system based on cloud computing according to claim 1 or 5, characterized in that: The verification module is used to receive the electronic reading instruction of the requesting end, and the electronic information storage device performs a decryption process on the electronic information digital signature according to the request decryption public key corresponding to the requesting end and compares and verifies the electronic information summary, specifically including: a read receiving unit, used for the electronic information storage device to receive an electronic read instruction from the requesting end; A one-time decryption unit is used to determine the corresponding request decryption public key according to the identity information of the requesting end, and perform one-time decryption processing on the digital signature of the electronic information through the request decryption public key. The corresponding calculation formula is as follows: According to the Euler function corresponding to the modulus and the encryption exponent e corresponding to the sent encryption private key, determining the decryption coefficient d corresponding to the requested decryption public key; Determine the requested decryption public key as (d, M) according to the modulus M and the decryption coefficient d corresponding to the requested decryption public key; The electronic information digital signature is decrypted once using the requested decryption public key, and the corresponding calculation formula is: SZQM ′ =SZQM d against M In the formula, SZQM ′ It represents the digital signature of electronic information after a decryption process; SZQM represents the digital signature of electronic information; d represents the decryption coefficient corresponding to the public key requested for decryption; M represents the modulus; mod represents the remainder operation; The comparison and verification unit is used to compare and verify the electronic information digital signature after one decryption process with the electronic information summary.

9. The electronic information security storage system based on cloud computing according to claim 1 is characterized in that: The sending module is used to determine the verified electronic information digital signature, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end, and also includes: For the electronic information digital signature that fails the verification, the electronic information storage device rejects the electronic read instruction and sends a read error message to the requesting end.

10. A cloud computing-based electronic information security storage method, applied to a cloud computing-based electronic information security storage system as claimed in any one of claims 1 to 9, the storage method comprising: Acquire electronic storage information, and encrypt the electronic storage information once using an electronic information encryption device based on cloud computing technology to generate corresponding electronic encrypted information; Extracting key information from the electronic encrypted information to generate a corresponding electronic information digest, and performing secondary encryption processing on the electronic information digest using a corresponding sending encryption private key of the sending end to generate a corresponding electronic information digital signature; receiving the electronic storage instruction from the sending end, and sending the electronic encrypted information and the electronic information digital signature to the electronic information storage device through the electronic information exchange device, wherein the electronic information storage device determines the electronic encrypted information that needs to be stored according to the electronic information digital signature; Receiving an electronic read instruction from a requesting end, the electronic information storage device performs a decryption process on the electronic information digital signature according to a request decryption public key corresponding to the requesting end and compares and verifies the electronic information summary; The electronic information digital signature that has passed the verification is determined, and the electronic information storage device performs secondary decryption processing on the corresponding electronic encrypted information to obtain the electronic storage information and send it to the requesting end.

Images