基于云计算技术的通信信道数据加密技术研究

Research on Data Encryption Technology Based on Cloud Computing Technology in Communication Channel

提出了一种基于云计算技术的通信信道数据加密方案。该方案采用高级加密标准(AdvancedEncryptionStandard,AES)算法实现高安全性,同时通过AVX2指令集扩展实现高速流加解密,设计适用于云环境的分层密钥管理体系,实现灵活可扩展的密钥分发和管理。此外,从云平台和虚拟化层进行安全加固,抵御完整性攻击和侧信道攻击。实验结果显示,在保证高标准安全性的前提下,文件加解密吞吐量较原始云环境提高22.4%,传输时延降低19.6%,中央处理器(CentralProcessingUnit,CPU)资源开销增加4.5%,内存资源开销增加6.2%,验证了该方案的可行性与有效性。

This paper proposes a communication channel data encryption scheme based on cloud computing technology.In this scheme,Advanced Encryption Standard(AES)algorithm is adopted to achieve high security,and at the same time,high-speed stream encryption and decryption are realized through the extension of AVX2 instruction set.This paper also designs a hierarchical key management system suitable for cloud environment to realize flexible and scalable key distribution and management.In addition,security reinforcement is carried out from the cloud platform and virtualization layer to resist integrity attacks and side channel attacks.The experimental results show that the file encryption and decryption throughput is increased by 22.4%,the transmission delay is reduced by 19.6%,the Central Processing Unit(CPU)resource overhead is increased by 4.5%,and the memory resource overhead is increased by 6.2%compared with the original cloud environment,which verifies the feasibility and effectiveness of this scheme.