Data encryption key management method, system and terminal

Abstract

The embodiment of the invention provides a data encryption key management method, a system and a terminal. The method comprises the following steps: receiving a data encryption key escrow request sent by a first terminal, wherein the data encryption key escrow request carries a first encryption key, the first encryption key is obtained by encrypting a third encryption key with a second public key, the second public key is a public key of encryption equipment, and the third encryption key is the data encryption key of the first terminal; and saving the first encryption key. According to the embodiment of the invention, as the data encryption key of the terminal is escrowed to an encryption service management system, when the electronic encryption key of the terminal is lost, the data encryption key of the terminal can be restored through the encryption service management system, so that the encryption system of the terminal is decoupled from a CA (Certificate Authority), the problem of repeated investment of the CA is improved, and the independency of encryption service is enhanced.

Description

technical field [0001] Embodiments of the present invention relate to the field of information security, and more specifically, relate to a data encryption key management method and system, an encryption service management system, and a terminal. Background technique [0002] Cloud computing is a revolution in the development of information technology. It is characterized by dynamic allocation of computing and storage resources, which improves the efficiency of resource use and facilitates unified management of resources. However, in the cloud computing scenario, users relocate computing and storage resources to the cloud computing server provided by the operator, losing the security control of their data, which will lead to data security problems. For example, an administrator can mount any user's virtual disk to spy on user privacy. [0003] In order to improve the security of data in the cloud, operators provide an encryption scheme for data in the cloud. The encryption...

AI Technical Summary

Problems solved by technology

[0005] Using the above encryption scheme, the enterprise needs to modify the interface of the enterprise's existing CA to connect with the above data encryption system, or re-purchase a CA that meets the above functions, which will cause repeated investment in the CA, and the encryption business is not independent. The cloud service provider needs to follow the Connect with CAs of various enterprises

Images