A secure file management system and method supporting read-write separation

Abstract

The invention discloses a secure file management system and method capable of achieving read / write splitting. The system and method are used for solving the problem of a traditional electronic file management system that the read privilege and write privilege of a file are not split. The system is composed of a credible authorized agency TA, a service provider, a file owner, a file approver and a file reader. The method comprises the steps of system initialization, identity registration, secret key distribution, encryption, service requesting, request response returning and file processing. According to the system and method, the file reading privilege of the file approver and the file reader is controlled by controlling the distribution of file reading secret keys, the file acquiring privilege of the file approver and the file reader is controlled by controlling the distribution of inquiring secret keys, the file writing privilege of the file approver is controlled by controlling the distribution of writing secret keys, and then file read / write privilege splitting is achieved.

Description

technical field [0001] The invention belongs to the technical field of network information security, and in particular relates to a read and write authority control scheme for computer encrypted files, which can be used for authorized access and modification of encrypted files in information security systems and other environments. Background technique [0002] With the rapid development of network technology and information technology, many documents are stored and disseminated in electronic form. What follows is that more and more traditional work models are migrating to the Internet, which not only accelerates the pace of economic development, but also greatly changes people's work and lifestyle, and improves people's work efficiency and life. quality. [0003] While the digitization of documents brings convenience to people, it also brings risks and threats. Security issues such as unauthorized access to files and unauthorized modification of files have seriously hinde...

AI Technical Summary

Problems solved by technology

The unauthorized access of the server to the file content is controlled by multiple servers sending part of the key to the user, but it cannot resist the joint decryption of the file owner's file by multiple servers;

[0010] The file owner encrypts the file before uploading the file, which can control the server's unauthorized access to the file owner's file content, but it is inconvenient for the file owner to authorize the file to other users

Images