高机密性数据安全存储与访问系统设计

System design for security storage and accessing confidential data

研究并设计了一套安全模型的原型,主要用于为高机密性的数据提供安全保护。数据保护与访问方案可以分为静态保护与动态保护两种,本原型系统在加强静态保护的同时更加注重数据访问时的动态安全性。基于此提出了密码保险箱结构,用于保护运行时的机密数据,并且设计了一系列安全措施用以保障程序本身与用户数据的安全性与完整性,防御重放攻击,替换攻击等诸多攻击手段。对该原型系统的安全性进行了理论分析,并通过实际测试分析表明了系统的安全性与有效性。

A security model for protecting confidential data is presented. The protection methods are classified as static and dynamic. With static protection it focuses on run-time security. Secretbox structure is put forward to protect data in run-time and many measures are provided to insure the security and integrity of program and user＇ s data. These schemes can resist replay attack, replace attack from hackers. Validity and security is proved through theory analysis and experiment.