Access mode leakage prevention data safety isolation and sharing realization method

Abstract

The invention discloses an access mode leakage prevention data safety isolation and sharing realization method. According to the method, based on physical isolation, the agent encryption technology is utilized to realize data safety isolation and sharing, an original data storage mode is changed, a binary tree storage mode is utilized to guarantee that an access mode in a data access process is not leaked, and user privacy can be successfully protected. The method is advantaged in that safety risks caused by data sharing among users, attack possibility existing in virtual resource pooling and no user access mode hiding in a cloud data storage scheme can be successfully solved, through agent introduction, the data sharing function among the users in a department is realized, data safety isolation among departments is guaranteed in a physical mode, data storage is realized through employing a binary tree mode, and a user access mode is successfully hidden.

Description

technical field [0001] The invention relates to the technical field of cloud storage security and confidentiality, in particular to a method for implementing data security isolation and sharing against access mode leakage. Background technique [0002] With the popularity of cloud computing, its low cost and other advantages have attracted more and more enterprises. Since user data is no longer controlled by themselves, but stored on cloud servers, users attach great importance to data security, and must enhance the security of data storage and access. [0003] As early as 2010, Pinkas introduced the concept of access mode leakage and the security threats brought about in detail. Through long-term eavesdropping on user behavior, it is possible to grasp the address sequence and follow-up actions of the data received by the user for enough access operations. After analyzing the information, It is found that when a user accesses the data corresponding to a certain address sequ...

AI Technical Summary

Problems solved by technology

However, the existing cloud data storage solutions basically do not hide the user's access mode

[0004] When user data is stored on the server, in order to ensure security, it must be encrypted with its own key and then stored, which causes the problem of data sharing among users

[0005] Virtualization technology implements resource pooling. Although resource isolation can be achieved through mechanisms such as SELinux-sVirt, there is still the possibility of being compromised.

Images