Data security management system and method

Abstract

The invention provides a data security management system and method. The system comprises a security service subsystem and a security support subsystem, wherein the security service subsystem is usedfor encrypting a to-be-stored data plaintext according to encryption configuration information so as to obtain a data ciphertext and an encryption identification code, and sending the data ciphertextand the encryption identification code to a storage pool for associated storage; and encrypting encryption process information by using a pre-configured user root key, and submitting the encrypted encryption process information and the encryption identification code to the security support subsystem; and the security support subsystem is used for decrypting the encrypted encryption process information by using a user public key; and mapping the decrypted encryption process information according to the encryption identification code carried in a decryption request, processing the encryption process information, generating decryption configuration information and feeding back the decryption configuration information to the security service subsystem, so as to enable the security service subsystem to generate the data plaintext corresponding to the data ciphertext according to the decryption configuration information to deliver the data plaintext to a target application to meet service demands.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a data security management system and a data security management method. Background technique [0002] With the rapid development of information network technology, the ecological chain of cloud computing is becoming more and more perfect, and cloud computing has become a high-value productivity tool. [0003] At present, more and more government agencies, enterprises, institutions, and individuals are beginning to migrate their applications to the cloud, achieving a balance between their own business needs and optimal allocation of resources; however, due to data security concerns, few core business applications are migrated to the cloud. cloud. [0004] Specifically, the data security protection advocated by existing cloud service providers is usually carried out from the perspective of infrastructure, based on the cloud computing service process, and the security respon...

AI Technical Summary

Problems solved by technology

[0005] In view of the above problems, the embodiment of the present invention provides a data security management system to solve the data security problem caused by the inability of independent protection of cloud tenant data assets in the existing cloud computing service process

Images