The invention discloses a cluster data
encryption and decryption method, device and
system based on dual trusted binding and decryption deadline management and control, and relates to the technical field of
information security, the method comprises the following steps: collecting hardware feature information of a cluster terminal node,
processing the hardware feature information, and extracting a
byte with a certain length as an original
machine code; obtaining a dynamic key factor, and extracting a
byte with a specified length as a data key after a
processing result; after the original
machine code and the
certificate validity period information are spliced, a
certificate machine code is generated through
processing; after the original
machine code and the
certificate validity period information are spliced, a machine envelope secret key is generated through processing, and the data secret key is symmetrically encrypted to obtain a machine secret key; generating a key certificate; and encrypting the
plaintext data by using the data key to obtain a data
ciphertext. According to the invention, by introducing a multi-hardware
feature fusion and multi-level key
encryption system, the problems of equipment identity counterfeiting,
key leakage and uncontrollable
data life cycle in a cluster environment are solved.