面向企业私有云的数据安全保护方法研究

Research on data security protection method for enterprise private cloud

针对现有企业私有云面临的数据安全存储和完整性校验问题,提出一种新的数据线性加扰混合加密保护方法。首先在数据加密之前进行数据细粒度和线性分割线划分;其次,分别对分割后的子数据块进行数据加扰处理;最后使用国产密码算法对加扰数据块进行混合加密和完整性校验。将所提出的算法与SM4和SM2加密算法进行比较,并通过实验分别对算法的正确性、加密文件类型、加/解密效率和安全性进行评估。实验结果表明,相对于另外两种加密算法,提出的算法在兼顾加/解密效率的同时安全性得到大幅度提升。

The existing enterprise private cloud is facing a problem about data security storage and integrity verification.This paper proposed a new data linear scrambling hybrid encryption protection method.Firstly,it fine-grained and linearly divided the data before they encrypted.Secondly,it respectively subjected the divided sub-blocks to data scrambling processing.Finally,it used the domestic cipher algorithm to perform mixed encryption and integrity check on the scrambled data blocks.It compared the proposed algorithm with the SM4 and SM2 encryption algorithms,and through experiments evaluated the correctness,encryption file type,encryption and decryption efficiency and security of the algorithm.The experimental results show that compared with the other two encryption algorithms,the proposed algorithm can greatly improve the security while improving the encryption and decryption efficiency.