Static data encryption protection method and system

Abstract

The invention relates to a static data encryption protection method and system. The static data encryption protection method comprises the steps of: registering information of a server host where a client is located to a server; distributing a master key for a directory or a file of the server host at the server, generating an encryption control strategy and issuing the encryption control strategyto a corresponding client; allowing the client to acquire a corresponding master key from the server according to the encryption control strategy; when data is written into the encrypted directory orfile, randomly generating a data key, and encrypting the directory or file by using the data key so as to obtain an encrypted file; and encrypting the data key by using the master key so as to obtaina key ciphertext, and writing the key ciphertext into the head of the encrypted file so as to finish data writing. According to the invention, the client executes encryption and decryption operationof the file, and the server achieves server host management, secret key management, control strategy management and the like, so encrypted file transparent access and key and strategy unified management are achieved; file management and use permission are separated; and the safety of file protection is improved.

Description

technical field [0001] The invention relates to the technical field of file security protection, in particular to a static data encryption protection method and system. Background technique [0002] With the continuous development of information technology, people's awareness of information security is getting stronger and stronger. How to ensure that the confidential data of enterprises will not be stolen is a problem that people are more and more concerned about. Sensitive data stored on enterprise servers includes various documents, pictures, audio and video files, database files, and other types of data, which may be subject to leakage risks from inside or outside the enterprise. [0003] Among the file security protection technologies, there are mainly terminal file encryption, transfer file encryption, and full disk encryption. There are various problems in the above methods: the terminal file encryption product is deployed on the user terminal system in the form of s...

AI Technical Summary

Problems solved by technology

There are various problems in the above methods: the terminal file encryption product is deployed on the user terminal system in the form of software, and the user needs to manually decrypt the file when accessing the encrypted file, which is inconvenient to use; the encryption of the transmitted file cannot solve the security of the file storage Problem; Full Disk Encryption encrypts data at the disk level, but cannot encrypt only specific files

[0004] At the same time, when the above products encrypt files, the encryption keys are all stored on the disk, which is less secure

Once the key is lost or leaked, the encrypted file will be leaked or damaged

Images