摘要
数据作为新型生产要素,是我国数字经济发展战略的重要基石,数据自身的安全是数字经济健康发展的基本保障。《中华人民共和国数据安全法》明确,需采取必要措施确保数据处于有效保护和合法利用的状态,以及具备保障持续安全状态的能力。亟需运用密码技术构建数据安全防护体系,维护数据的完整性、保密性和可用性,保障我国数字经济健康发展。论述了数据存储的方式及面临的安全威胁,以及应用层、驱动/内核层、块/簇层基于密码的数据保护模式,实现了数据存储的安全保护。
As a new production factor,data is the cornerstone of China’s digital economy development strategy.The security of data itself is the basic guarantee for the healthy development of digital economy.It clearly stipulates in the Data Security Law of the People’s Republic of China that necessary measures need to be taken to ensure that data is under effective protection and legal utilization,as well as having the ability to guarantee continuous security.It is urgent to build a data security protection system with cryptographic technology,maintain the integrity,confidentiality and availability of data,and safeguard the healthy development of China’s digital economy.This paper discusses the ways of data storage and the security threats it faces,as well as the cipher-based data protection model at application level,driver/kernel level,and block/cluster level,and implements the security protection of data storage.
作者
唐明环
徐璐瑶
王珂
王伟忠
TANG Minghuan;XU Luyao;WANG Ke;WANG Weizhong(China Academy of Industrial Internet,Beijing 100102,China;Sansec Technology Co.,Ltd.,Beijing 100102,China)
出处
《信息安全与通信保密》
2022年第11期100-107,共8页
Information Security and Communications Privacy
关键词
数据安全
密码技术
安全存储
应用层加密
驱动/内核层加密
块/簇层加密
data security
cryptographic technology
secure storage
application level encryption
driver/kernel level encryption
block/cluster level encryption