CN106850191A - The encryption and decryption method and device of distributed memory system communication protocol - Google Patents

Abstract

The invention relates to the technical field of storage system data security, and discloses an encryption and decryption method and device for a communication protocol of a distributed storage system, wherein the encryption method includes: the sending end obtains the original data to be encrypted; the sending end constructs a distributed storage system communication protocol message; the sender obtains the shared key of the encryption algorithm; the sender uses the encryption algorithm to encrypt the second field to the sixth field in the message with the shared key; the sender uses the encryption algorithm to use the shared key in the message The temporary request key in the fifth field of the message encrypts the seventh field in the message, and the sending end sends the encrypted message to the receiving end. Aiming at the problems of the RC4 encryption algorithm, the present invention designs an encryption method with variable length and no repeated sequence, which increases the difficulty of decrypting encrypted data and improves the security of data transmission.

Description

Encryption and decryption method and device for distributed storage system communication protocol

technical field

The invention relates to the technical field of storage system data security, in particular to an encryption and decryption method and device for a communication protocol of a distributed storage system.

Background technique

A distributed storage system stores data dispersedly on multiple independent devices. Distributed storage systems often consist of multiple nodes, and large-scale distributed storage may transmit control data and file data across computer rooms and on the public network. Especially in the Internet environment, some attackers may infer the content of the message based on the length of the message, and then crack the storage communication device to intercept key content information. How to ensure safe and reliable data transmission on the public network has become a fundamental issue in building a distributed storage system.

The distributed storage communication protocol is the basis of the distributed storage system. It ensures the consistency of state and metadata information between different nodes, and provides the basic conditions for users to access and use the storage system. However, its information content is exposed on the public network, and information security is greatly threatened. Therefore, certain measures must be taken to ensure the security of information transmission between each other.

The RC4 encryption algorithm is a symmetric encryption algorithm (Symmetric Key Encryption), which is a stream cipher with variable key length and byte-oriented operations. Stream ciphers are also symmetric ciphers, but unlike block encryption algorithms, stream ciphers do not group plaintext data, but use keys to generate cipher streams of the same length as plaintext to encrypt plaintext, and the same key is used for encryption and decryption. The RC4 encryption algorithm is widely used in the SSL/TLS (Secure Sockets Protocol/Transport Layer Security Protocol) standard, which is developed for communication between web browsers and servers.

Features of the RC4 encryption algorithm: (1) The algorithm is simple and easy to implement by software, the encryption speed is fast, and the security is relatively high; (2) The key length is variable, generally 256 bytes. Because the RC4 encryption algorithm has the advantages of simple implementation, fast encryption speed, and low consumption of hardware resources, it ranks among the ranks of lightweight encryption algorithms. However, its simple algorithm structure is also vulnerable to cracking attacks. The encryption strength of the RC4 encryption algorithm depends entirely on the key, that is, the pseudo-random sequence generation, and the real random sequence is impossible to achieve, only pseudo-random. This inevitably leads to duplication of keys. Whether it is encryption or decryption, the RC4 encryption algorithm only performs an XOR operation, which means that once the subkey sequence repeats, the ciphertext is very likely to be cracked.

Therefore, it is necessary to design a highly secure distributed storage communication protocol encryption and decryption method to prevent attackers from deducing the communication message format based on the message length and repeated fields.

Contents of the invention

For the above technical problems, the purpose of the present invention is to provide a method and device for encrypting and decrypting the communication protocol of a distributed storage system. For the problem of the RC4 encryption algorithm, a variable-length, non-repetitive sequence encryption method is designed, increasing It reduces the difficulty of decrypting encrypted data and improves the security of data transmission.

In order to achieve the above object, the present invention is achieved through the following technical solutions:

The invention provides an encryption method of a distributed storage system communication protocol, comprising the following steps:

The sender obtains the original data to be encrypted;

The sending end constructs a message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a four-word section, the third field is the length value of the fourth field, which occupies one byte, the fourth field is garbage text with random length and random content, the fifth field is the temporary request key, and the sixth field is the temporary response key Key, the seventh field is the original data to be encrypted on the sending end;

The sender obtains the shared key of the encryption algorithm;

The sending end encrypts the second field to the sixth field in the message with the shared key through an encryption algorithm;

The sending end encrypts the seventh field in the message by using the temporary request key of the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end.

Further, the seven fields of the message of the distributed storage system communication protocol are generated by multiple storage nodes of the distributed storage system.

Further, the temporary request key and the temporary response key are randomly generated by each storage node of the distributed storage system every specified time.

Further, the encryption algorithm is RC4 encryption algorithm.

The present invention also provides a method for decrypting the communication protocol of the distributed storage system, comprising the following steps:

The receiving end receives the encrypted message from the sending end;

The receiving end constructs a message of the distributed storage system communication protocol. The message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a four-word section, the third field is the length value of the fourth field, which occupies one byte, the fourth field is garbage text with random length and random content, the fifth field is the temporary request key, and the sixth field is the temporary response key Key, the seventh field is the original data to be decrypted on the receiving end;

The receiving end obtains the shared key of the encryption algorithm;

The receiving end decrypts the second field to the sixth field in the message by using the shared key through the encryption algorithm, and discards the contents of the first field to the fourth field;

The receiving end decrypts the bytes after the sixth field in the message by using the temporary response key of the sixth field in the message through an encryption algorithm, and obtains the decrypted original data.

Further, the receiving end uses an encryption algorithm to decrypt the second field to the sixth field in the message by using the shared key, and discards the contents of the first field to the fourth field, further comprising:

When the receiving end reads the message, it directly skips and discards the first field;

The receiving end uses the encryption algorithm to decrypt the second field in the message using the shared key, and verifies whether the decrypted plaintext of the second field is a magic number. If yes, proceed to the next step; if not, discard the message ;

The receiving end reads the third field in the message, and obtains the length value of the garbage text in the fourth field in the message;

The receiving end uses the shared key to decrypt the fourth field in the message through an encryption algorithm, and discards the decrypted junk text in the fourth field;

The receiving end decrypts the fifth field and the sixth field in the message by using the encryption algorithm and the shared key.

The present invention provides an encryption device for a distributed storage system communication protocol based on the encryption method of the above-mentioned distributed storage system communication protocol, including:

The original data acquisition unit is used for the sender to acquire the original data to be encrypted;

The sending end message construction unit is used for the sending end to construct the message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte , the second field is the magic number of four bytes, the third field is the length value of the fourth field of one byte, the fourth field is the garbage text of random length and random content, and the fifth field is the temporary request password key, the sixth field is the temporary response key, and the seventh field is the original data to be encrypted on the sender;

A shared key acquisition unit, used for the sender to acquire the shared key of the encryption algorithm;

The first encryption unit is used for the sending end to encrypt the second field to the sixth field in the message by using an encryption algorithm with a shared key;

The second encryption unit is used for the sending end to encrypt the seventh field in the message by using the temporary request key of the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end.

The present invention also provides a decryption device for a distributed storage system communication protocol based on the decryption method of the above-mentioned distributed storage system communication protocol, including:

The message receiving unit is used for the receiving end to receive the encrypted message from the sending end;

The receiving end message construction unit, the receiving end constructs the message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second The second field is the magic number of four bytes, the third field is the length value of the fourth field of one byte, the fourth field is random length and random content of garbage text, the fifth field is the temporary request key, The sixth field is the temporary response key, and the seventh field is the original data to be decrypted on the receiving end;

The acquisition unit is used for the receiving end to acquire the shared key of the encryption algorithm;

The first decryption unit is used for the receiving end to use the shared key to decrypt the second field to the sixth field in the message through an encryption algorithm, and discard the contents of the first field to the fourth field;

In the second decryption unit, the receiving end decrypts the bytes after the sixth field in the message by using the temporary response key in the sixth field in the message through an encryption algorithm, and obtains the decrypted original data.

Further, the first decryption unit further includes:

The first reading unit is used for directly skipping and discarding the first field when the receiving end reads the message;

The first decryption subunit is used for the receiving end to decrypt the second field in the message by using the shared key through an encryption algorithm, and verify whether the decrypted plaintext of the second field is a magic number, and if so, proceed to the next step, If not, discard the message;

The second reading unit is used for the receiving end to read the third field in the message to obtain the length value of the garbage text in the fourth field in the message;

The second decryption subunit is used for the receiving end to decrypt the fourth field in the message by using the shared key through an encryption algorithm, and discard the junk text in the decrypted fourth field;

The third decryption subunit is used for the receiving end to decrypt the fifth field and the sixth field in the message by using the shared key through an encryption algorithm.

Compared with the prior art, the beneficial effects of the encryption and decryption method of a distributed storage system communication protocol of the present invention are as follows:

1. The message of the communication protocol of the distributed storage system constructed by the present invention includes seven fields, wherein the fourth field is garbage text of random length and random content. The message of such a communication protocol has no fixed length, even if it is the same type For a message, even the same data packet, the content and length of the encrypted ciphertext are different, which increases the difficulty of decrypting the encrypted data and improves the security of data transmission;

2. Due to the existence of the temporary request key and the temporary response key in the message of the distributed storage system communication protocol, and are randomly generated by each node of the distributed storage system every specified time, the valid time range is the current request - Response is correct, so even if the same plaintext is encrypted at different times, the ciphertext generated will not be repeated, which also increases the difficulty of decrypting encrypted data and improves the security of data transmission;

The beneficial effects of an encryption and decryption device for a distributed storage system communication protocol are similar to those of an encryption and decryption method for a distributed storage system communication protocol, and will not be repeated here.

Description of drawings

FIG. 1 is a schematic flowchart of an encryption method of a communication protocol of a distributed storage system according to the present invention.

FIG. 2 is a schematic flowchart of a decryption method for a communication protocol of a distributed storage system according to the present invention.

FIG. 3 is a schematic structural diagram of an encryption device for a communication protocol of a distributed storage system according to the present invention.

FIG. 4 is a schematic structural diagram of a decryption device for a communication protocol of a distributed storage system according to the present invention.

detailed description

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

The nouns and concepts appearing in the following examples are explained below:

Distributed storage system is to disperse and store data on multiple independent devices. It adopts a scalable system structure, uses multiple storage servers to share the storage load, and uses location servers to locate and store information. It not only improves the reliability of the system , usability and access efficiency, and easy to expand. A distributed storage system includes multiple storage nodes. A storage node is generally a storage server (must have a controller), and the servers are interconnected through a high-speed network.

Currently commonly used communication protocols in distributed storage systems include Secure Shell (SSH) protocol, Secure Socket Layer SSL (Security Socket Layer) protocol and Secure Electronic Transaction SET (Secure Electronic Transaction) protocol.

The security of data in a distributed storage system needs to be protected by cryptographic technology, and data encryption is the core of all data security technologies. Common encryption algorithms can be divided into three categories: symmetric encryption algorithm (Symmetric Key Encryption), asymmetric encryption algorithm (Asymmetric Key Encryption) and hash algorithm. The performance of an encryption algorithm can usually be measured in terms of the complexity of the algorithm itself, the length of the key (the longer the key, the more secure it is), the speed of encryption and decryption, etc. The symmetric encryption algorithm requires both encryption and decryption to use the same key. Typical symmetric encryption algorithms include DES (Data Encryption Standard), 3DES, Bloefish, IDEA, RC4, RC5, RC6, and AES (Advanced Encryption Standard). The asymmetric encryption algorithm uses different keys for encryption and decryption. Without knowing the trapdoor information, the encryption key and decryption key cannot be derived from each other. Typical asymmetric encryption algorithms include RSA, ECC, DSA. Hash algorithms are used to verify the integrity of data. Typical hash algorithms include MD2, MD4, MD5 (Message-Digest Algorithm 5) and SHA-1.

The encryption and decryption method and device of a distributed storage system communication protocol of the present invention will be further described below in conjunction with the accompanying drawings and specific implementation methods:

Example 1

Please refer to Figure 1, an encryption method for a distributed storage system communication protocol, including the following steps:

Step S101: The sender obtains the original data to be encrypted.

Step S102: The sender constructs a message of the communication protocol of the distributed storage system, and the message of the communication protocol of the distributed storage system includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a random number occupying one byte. A four-byte magic number, the third field is the length value of the fourth field, which occupies one byte, the fourth field is random length and random content garbage text, the fifth field is the temporary request key, and the sixth field is Temporary response key, the seventh field is the original data to be encrypted on the sender.

It is worth noting that the seven fields of the message of the distributed storage system communication protocol are generated by multiple storage nodes of the distributed storage system, and the temporary request key and temporary response key are generated by the distributed storage system at regular intervals. Each storage node is randomly generated, and the recommended time is 2 hours. The random number in the first field is used to evade protocol identification, and the attacker cannot use the packet header to conclude that the packet is a communication protocol of the distributed storage system. The magic number in the second field is 0x195E8FF1, which is used for the communication protocol of the distributed storage system to judge whether this is a communication protocol message. If protection is required, there can be multiple magic numbers. In order to prevent some network managers or attackers from blocking our messages according to the length of the message, the protocol fills a piece of garbage text with random length and random content in the fourth field. The garbage text can be pure numbers, and the length is 10~100 byte. The third field is the length of the random pad content. The fifth and sixth fields are one of the keys for encryption and decryption. This encryption and decryption key is randomly generated by each storage node. The valid range is the current request-response pair, so that even if the same message is generated at different times The ciphertext content is also different.

The temporary request key is used to encrypt the sender of the request message, and decrypted by the receiver of the request message; the temporary response key is used to encrypt the sender of the response message, and decrypted by the receiver of the response message.

Step S103: The sender obtains the shared key of the encryption algorithm.

The shared key is a string of strings involved in encryption. The encryption algorithm operates under the control of the shared key. Corresponding to different keys, the same encryption algorithm and the same plaintext can produce completely different ciphertexts.

The way to obtain the shared key of the encryption algorithm can be a key server, U disk or Email.

The encryption algorithm adopted in the present invention is the RC4 encryption algorithm. The RC4 encryption algorithm and the data to be encrypted use exclusive OR (XOR) operation to generate ciphertext. For example, the byte of the shared key is 01101100, and the plaintext byte of the data to be encrypted is 11001100, then the obtained ciphertext byte is 10100000. Similarly, the decryption process is to perform exclusive OR (XOR) operation on the ciphertext and the shared key to obtain the corresponding plaintext of the original data.

Step S104: The sending end encrypts the second field to the sixth field in the message by using an encryption algorithm and a shared key.

It is worth noting that the random number in the first field does not need to be encrypted.

Step S105: The sending end encrypts the seventh field in the message by using the temporary request key in the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end.

In this way, after being encrypted by this encryption method, except the first field is plaintext, the second to seventh fields are all ciphertext.

Example 2

Please refer to Fig. 2, a decryption method of a distributed storage system communication protocol, comprising the following steps:

Step S201: the receiving end receives the encrypted message from the sending end.

Step S202: The receiving end constructs a message of the distributed storage system communication protocol. The message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a random number occupying one byte. The four-byte magic number 0x195E8FF1, the third field is the length value of the fourth field, which occupies one byte, the fourth field is garbage text with random length and random content, the fifth field is the temporary request key, and the sixth field It is the temporary response key, and the seventh field is the original data to be decrypted on the receiving end.

Step S203: the receiving end obtains the shared key of the encryption algorithm.

Step S204: The receiving end decrypts the second field to the sixth field in the message by using the shared key through an encryption algorithm, and discards the contents of the first field to the fourth field.

Step S205: The receiving end uses the temporary response key in the sixth field to decrypt the bytes after the sixth field through an encryption algorithm to obtain the decrypted original data.

The receiving end also saves the temporary request key for use when sending the response request.

The above step S204 further includes:

Step S2041: When the receiving end reads the message, directly skip and discard the first field;

Step S2042: The receiving end uses the encryption algorithm to decrypt the second field in the message using the shared key, and verifies whether the decrypted plaintext of the second field is the magic number 0x195E8FF1, if yes, proceed to the next step S2043, if not , the message is discarded;

Step S2043: the receiving end reads the third field in the message, and obtains the length value of the garbage text in the fourth field in the message, for example, the length of the junk text is k bytes;

Step S2044: The receiving end uses the shared key to decrypt the fourth field of k bytes in the message through an encryption algorithm, and discards the decrypted junk text in the fourth field;

Step S2045: The receiving end decrypts the fifth field and the sixth field in the message by using the encryption algorithm and the shared key.

Example 3

Please refer to Figure 3, an encryption device for a distributed storage system communication protocol, including the following units:

An original data obtaining unit 301, configured for the sending end to obtain the original data to be encrypted;

The message construction unit 302 at the sending end is used for the sending end to construct a message of the distributed storage system communication protocol. The message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random field occupying one byte. number, the second field is a magic number that occupies four bytes, the third field is the length value of the fourth field that occupies one byte, the fourth field is garbage text with random length and random content, and the fifth field is a temporary request key, the sixth field is the temporary response key, and the seventh field is the original data to be encrypted on the sender;

Shared key acquisition unit 303, used for the sender to acquire the shared key of the encryption algorithm;

The first encryption unit 304 is configured to encrypt the second field to the sixth field in the message by using an encryption algorithm at the sending end;

The second encryption unit 305 is used for the sending end to encrypt the seventh field in the message by using the temporary request key of the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end .

The original data acquisition unit 301 is sequentially connected to the sending end message construction unit 302 , the shared key acquisition unit 303 , the first encryption unit 304 and the second encryption unit 305 .

Example 4

Please refer to Figure 4, a decryption device for a distributed storage system communication protocol, including the following units:

A message receiving unit 401, configured for the receiving end to receive the encrypted message from the sending end;

The receiving end message construction unit 402, the receiving end constructs a message of the distributed storage system communication protocol, the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, The second field is a four-byte magic number, the third field is the length value of the one-byte fourth field, the fourth field is garbage text with random length and random content, and the fifth field is a temporary request key , the sixth field is the temporary response key, and the seventh field is the original data to be decrypted on the receiving end;

The obtaining unit 403 is used for the receiving end to obtain the shared key of the encryption algorithm;

The first decryption unit 404 is used for the receiving end to decrypt the second field to the fourth field in the message by using the shared key through an encryption algorithm, and discard the contents of the first field to the fourth field;

The second decryption unit 405 is used for the receiving end to use the temporary response key in the sixth field to decrypt the bytes after the sixth field through an encryption algorithm to obtain the decrypted original data.

The first decryption unit 404 further includes:

The first reading unit 4041 is used for directly skipping and discarding the first field when the receiving end reads the message;

The first decryption subunit 4042 is used for the receiving end to decrypt the second field in the message by using the shared key through the encryption algorithm, and verify whether the decrypted plaintext of the second field is a magic number, and if so, perform the second The reading unit 4043, if not, discard the message;

The second reading unit 4043 is used for the receiving end to read the third field in the message to obtain the length value of the garbage text in the fourth field in the message;

The second decryption subunit 4044 is used for the receiving end to use the shared key to decrypt the fourth field in the message through an encryption algorithm, and discard the decrypted junk text in the fourth field;

The third decryption subunit 4045 is used for the receiving end to decrypt the fifth field and the sixth field in the message by using the shared key through an encryption algorithm.

The above message receiving unit 401 is sequentially connected to the receiving end message building unit 402, the obtaining unit 403, the first decrypting unit 404 and the second decrypting unit 405, wherein the first decrypting unit 404 further includes a first reading unit 4041, a first The decryption subunit 4042 , the second reading unit 4043 , the second decryption subunit 4044 and the third decryption subunit 4045 .

As for the device disclosed in the embodiment of the present invention, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for relevant details, please refer to the description of the method part.

Professionals can further realize that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software or a combination of the two. In order to clearly illustrate the possible For interchangeability, in the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are performed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The above descriptions are only illustrative specific implementations of the present invention, and are not intended to limit the scope of the present invention. Any equivalent changes and modifications made by those skilled in the art without departing from the concepts and principles of the present invention are acceptable. Should belong to the protection scope of the present invention.

Claims (9)

1. An encryption method of a distributed storage system communication protocol, characterized in that, comprising the following steps: The sender obtains the original data to be encrypted; The sending end constructs a message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a four-word section, the third field is the length value of the fourth field, which occupies one byte, the fourth field is garbage text with random length and random content, the fifth field is the temporary request key, and the sixth field is the temporary response key Key, the seventh field is the original data to be encrypted on the sending end; The sender obtains the shared key of the encryption algorithm; The sending end encrypts the second field to the sixth field in the message with the shared key through an encryption algorithm; The sending end encrypts the seventh field in the message by using the temporary request key of the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end. 2. The encryption method of the distributed storage system communication protocol according to claim 1, wherein the seven fields of the message of the distributed storage system communication protocol are generated by a plurality of storage nodes of the distributed storage system. 3. The encryption method of the distributed storage system communication protocol according to claim 1, wherein the temporary request key and the temporary response key are randomly generated by each storage node of the distributed storage system at regular intervals . 4. The encryption method of the distributed storage system communication protocol according to claim 1, wherein the encryption algorithm is an RC4 encryption algorithm. 5. A method for decrypting a distributed storage system communication protocol, comprising the following steps: The receiving end receives the encrypted message from the sending end; The receiving end constructs a message of the distributed storage system communication protocol. The message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second field is a four-word section, the third field is the length value of the fourth field, which occupies one byte, the fourth field is garbage text with random length and random content, the fifth field is the temporary request key, and the sixth field is the temporary response key Key, the seventh field is the original data to be decrypted on the receiving end; The receiving end obtains the shared key of the encryption algorithm; The receiving end decrypts the second field to the sixth field in the message by using the shared key through the encryption algorithm, and discards the contents of the first field to the fourth field; The receiving end decrypts the bytes after the sixth field in the message by using the temporary response key of the sixth field in the message through an encryption algorithm, and obtains the decrypted original data. 6. The decryption method of the distributed storage system communication protocol according to claim 5, wherein the receiving end uses an encryption algorithm to decrypt the second field to the sixth field in the message using a shared key, And discard the contents of the first field to the fourth field, further including: When the receiving end reads the message, it directly skips and discards the first field; The receiving end uses the encryption algorithm to decrypt the second field in the message using the shared key, and verifies whether the decrypted plaintext of the second field is a magic number. If yes, proceed to the next step; if not, discard the message ; The receiving end reads the third field in the message, and obtains the length value of the garbage text in the fourth field in the message; The receiving end uses the shared key to decrypt the fourth field in the message through an encryption algorithm, and discards the decrypted junk text in the fourth field; The receiving end decrypts the fifth field and the sixth field in the message by using the encryption algorithm and the shared key. 7. The encryption device of the distributed storage system communication protocol based on the encryption method of the distributed storage system communication protocol described in any one of claims 1 to 4, characterized in that, comprising: The original data acquisition unit is used for the sender to acquire the original data to be encrypted; The sending end message construction unit is used for the sending end to construct the message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte , the second field is the magic number of four bytes, the third field is the length value of the fourth field of one byte, the fourth field is the garbage text of random length and random content, and the fifth field is the temporary request password key, the sixth field is the temporary response key, and the seventh field is the original data to be encrypted on the sender; A shared key acquisition unit, used for the sender to acquire the shared key of the encryption algorithm; The first encryption unit is used for the sending end to encrypt the second field to the sixth field in the message by using an encryption algorithm using a shared key; The second encryption unit is used for the sending end to encrypt the seventh field in the message by using the temporary request key of the fifth field in the message through an encryption algorithm, and the sending end sends the encrypted message to the receiving end. 8. The decryption device of the distributed storage system communication protocol based on the decryption method of the distributed storage system communication protocol described in any one of claims 5 to 6, characterized in that it comprises: The message receiving unit is used for the receiving end to receive the encrypted message from the sending end; The receiving end message construction unit, the receiving end constructs the message of the distributed storage system communication protocol, and the message of the distributed storage system communication protocol includes seven fields, wherein the first field is a random number occupying one byte, and the second The second field is the magic number of four bytes, the third field is the length value of the fourth field of one byte, the fourth field is random length and random content of garbage text, the fifth field is the temporary request key, The sixth field is the temporary response key, and the seventh field is the original data to be decrypted on the receiving end; The acquisition unit is used for the receiving end to acquire the shared key of the encryption algorithm; The first decryption unit is used for the receiving end to use the shared key to decrypt the second field to the sixth field in the message through an encryption algorithm, and discard the contents of the first field to the fourth field; In the second decryption unit, the receiving end uses the temporary response key of the sixth field in the message to decrypt the bytes after the sixth field in the message through an encryption algorithm to obtain decrypted original data. 9. The decryption device of the distributed storage system communication protocol according to claim 8, wherein the first decryption unit further comprises: The first reading unit is used for directly skipping and discarding the first field when the receiving end reads the message; The first decryption subunit is used for the receiving end to decrypt the second field in the message by using the shared key through an encryption algorithm, and verify whether the decrypted plaintext of the second field is a magic number, and if so, proceed to the next step, If not, discard the message; The second reading unit is used for the receiving end to read the third field in the message to obtain the length value of the garbage text in the fourth field in the message; The second decryption subunit is used for the receiving end to decrypt the fourth field in the message by using the shared key through an encryption algorithm, and discard the junk text in the decrypted fourth field; The third decryption subunit is used for the receiving end to decrypt the fifth field and the sixth field in the message by using the shared key through an encryption algorithm.