TWM465608U - Portable cloud file security and encryption system - Google Patents

Description

Portable cloud file security encryption system

This creation is about encrypting a file on a cloud host for uploading a file, and the file can be backed up to other storage devices (such as data storage devices, tapes, etc.), and the user is The system will automatically decrypt when downloading back to your own file.

As computer technology progresses, almost all data relies on the operation of computer systems and the storage of data in data storage devices. Therefore, how to ensure the security of data stored in the data storage device has become an important issue.

The traditional data storage device encryption uses only one key for encryption and decryption. When the key is obtained, all the files or data storage devices of the key can be decrypted, and if the data storage device system is damaged, even if The files in the previous data storage device have been backed up to other data storage devices. The data storage device is damaged and the key cannot be retrieved. Therefore, the file contents cannot be decrypted, so that the user can not read even if they have permission to read. The file.

Therefore, in view of the lack of the conventional technology, the main purpose of the present invention is to provide a cloud file security encryption device for converting at least one target file of a user-side electronic device to the cloud system, converting and encrypting the file. Data storage device for the cloud system.

The technical means adopted by the present invention is to receive a target file to be transmitted to the cloud system by using a key-value corresponding address conversion module, and convert the original file name of the target file into a corresponding conversion function to generate a corresponding file. a target address code; a sub-column generation module connected to the key-value corresponding address conversion module, the seed sequence generation module receiving the key The value corresponds to the target address code generated by the address conversion module, and then generates a sub-column by a preset hash function; a hash generation module receives the seed sequence generated by the seed sequence generation module, and then Converting the seed sequence into an alphanumeric hash, and using the alphanumeric hash as the unique key of the file; a key encryption module, the key generated by the hash generation module is the target The content of the file is encrypted by the key, and the subject file encrypted by the key is stored in two data storage devices at the same time.

Through the technical means adopted by this creation, when the file is uploaded to the cloud storage space, the file content is encrypted and stored on two different data storage devices to ensure that the file will not be lost and the file content will not be interpreted when stolen. And when the user downloads the file, it is automatically decrypted; and the encryption and decryption key is calculated in real time and each file has its own key, avoiding the problem that all the file contents can be cracked by one key.

Moreover, through this mechanism, the file can be backed up to other data storage devices, and when the user needs to read the file, the file name is recalculated according to the target address code (Object ID) through the decryption module. The file content is decrypted and the original file name is stored in the database and then returned to the user.

Furthermore, the key is not stored in any storage device or database, and is required to be recalculated each time the target address code is recalculated. Once the target address code is generated, it will not be changed. The target address code is also unique and not reused throughout the system. If the target address code is obtained, but because there is no hash module and salt value preset at the time of encryption, the unauthorized person cannot calculate the key value. This ensures a high level of security for the file.

The specific techniques used in this creation will be further illustrated by the following examples and accompanying drawings.

1‧‧‧User-side electronic device

2‧‧‧Network connection interface

2a‧‧‧Wireless internet connection interface

2b‧‧‧Wireless transceiver

3‧‧‧Internet

4‧‧‧Cloud System

41‧‧‧Cloud Server

42, 43‧‧‧ data storage device

5‧‧‧Cloud file security encryption device

51‧‧‧Key-value corresponding address conversion module

52‧‧‧ Seed Sequence Generation Module

53‧‧‧Hash generation module

54‧‧‧Key encryption module

D1‧‧‧target address code

D2‧‧‧ seed series

D3‧‧‧English digital hash

F‧‧‧Target file

Original file name of F1‧‧‧ file

Content of the F2‧‧‧ target file

FK‧‧‧ key encrypted file

f(x)1‧‧‧ first transfer function

f(x)2‧‧‧second transfer function

K1‧‧‧ key

N1‧‧‧ Internet node

Figure 1 is a schematic diagram showing the system architecture of the first embodiment of the present creation.

Figure 2 shows a schematic diagram of the cloud file security encryption device in Figure 1.

Figure 3 is a schematic diagram showing the system architecture of the second embodiment of the present creation.

Please refer to FIG. 1, which shows a schematic diagram of the system of the first embodiment of the present creation. A user-side electronic device 1 is connected to an Internet 3 via a network connection interface 2 and an Internet node N1, and is connected to the cloud system 4 by the Internet 3. The cloud system 4 includes a cloud server 41 and data storage devices 42, 43 built on the cloud server 41.

This creation creates a cloud file security encryption device 5 in the cloud system 4. The cloud file security encryption device 5 can upload the at least one target file F of the user terminal electronic device 1 to the cloud system 4 to be converted and encrypted to generate the key encrypted file FK, and the data stored in the cloud system 4 is stored. In the storage devices 42, 43.

Please refer to FIG. 2, which shows a schematic diagram of the cloud file security encryption device 5 in FIG. The cloud file security encryption device 5 of the present invention includes a key value corresponding address conversion module 51, receives the target file F, and uses the original file name F1 of the target file F as a preset first conversion function f(x). The 1 conversion produces a corresponding target address code D1 (Object ID). The first conversion function f(x)1 described above can convert the original file name F1 of the target file F to generate a corresponding target address code D1 using, for example, a hash function (Hash) technique.

A sub-column generation module 52 is connected to the key-value corresponding address conversion module 51. The seed sequence generation module 52 receives the target address code D1 generated by the key-value corresponding address conversion module 51, and then A sub-column D2 is generated with a predetermined second conversion function f(x)2. The aforementioned second transfer function f(x)2 can also generate the seed sequence D2 using a hash function technique.

A hash generation module 53 receives the seed sequence D2 generated by the seed sequence generation module 52, and then passes the seed sequence D2 through the salting process in the prior art. Converting to an alphanumeric hash D3, and using the alphanumeric hash D3 as the unique key K1 of the file F; a key encryption module 54 to generate the key K1 generated by the hash module 53 Key encryption is performed on the content F2 of the target file F. The file FK encrypted by the key is stored in the first data storage device 42 and the second data storage device 43 at the same time.

In summary, the author finds that each file uploaded to the cloud converts the original file name into the target address code by hashing, and then uses the encryption module to generate the seed sequence through the hash function (Hash). After the salt process, the English digital hash that is not easily cracked or easily restored to the original key is generated. The hash is the unique key of the file, and the file content is encrypted by using the key. At the same time, write two files to different data storage devices for storage.

Through this mechanism, the file can be backed up to other data storage devices. When the user needs to read the file, the file name is recalculated by the decryption module according to the target address code and the file content is decrypted and transmitted. The database obtains the original file name and stores it back to the user.

Furthermore, the key is not stored in any storage device or database, and is required to be recalculated each time the target address code is recalculated. Once the target address code is generated, it will not be changed. The target address code is also unique and not reused throughout the system. If the target address code is obtained, but because there is no hash module and salt value preset at the time of encryption, the unauthorized person cannot calculate the key value. This ensures a high level of security for the file.

Please refer to FIG. 3, which shows a system architecture diagram of the cloud file security encryption device in the second embodiment of the present invention. As shown in the figure, compared with the first embodiment, the embodiment has similar architectures, and the difference is that the network connection interface is changed to a wireless interface. That is, the user-side electronic device 1 is connected to the Internet 3 via the Internet node N1 via a wireless network connection interface 2a and the wireless transceiver 2b as an interface for data transmission and network link, and then connected by the Internet 3. To the cloud system 4. Included in the cloud system 4 The cloud server 41 and the data storage devices 42, 43 built in the cloud server 41. The operation of file security encryption is the same as in the previous embodiment.

The above-mentioned embodiments are only intended to illustrate the present invention and are not intended to limit the scope of the present invention. All other equivalent modifications or substitutions that have been made without departing from the spirit of the present invention should be included in the scope of the following claims. Inside.

1‧‧‧User-side electronic device

2‧‧‧Network connection interface

3‧‧‧Internet

4‧‧‧Cloud System

41‧‧‧Cloud Server

42, 43‧‧‧ data storage device

5‧‧‧Cloud file security encryption device

F‧‧‧Target file

FK‧‧‧ key encrypted file

N1‧‧‧ Internet node

Claims (6)

A cloud file security encryption device for converting a user-side electronic device to at least one target file of a cloud system via a network connection interface and an Internet, and converting and encrypting the file to a data storage device of the cloud system The cloud file security encryption device comprises: a key value corresponding address conversion module, receives the target file, and converts the original file name of the target file into a corresponding first conversion function to generate a corresponding target position. An address sequence generating module is connected to the key value corresponding address conversion module, and the seed number column generating module receives the target address code generated by the key value corresponding to the address conversion module, and then The preset second conversion function generates a sub-column; a hash generation module receives the seed sequence generated by the seed sequence generation module, and converts the seed sequence into an alphanumeric hash, and uses the alphanumeric The hash is the only key of the file; a key encryption module performs key encryption on the content of the target file by the key generated by the hash generation module. The cloud file security encryption device according to claim 1, wherein the cloud system includes: a first data storage device that stores the content of the target file encrypted by the key; at least one second data storage The device, when the target file encrypted by the key is stored in the first data storage device, simultaneously stores the key file encrypted by the key in the second data storage device. The cloud file security encryption device according to claim 1, wherein the network connection interface is a wired network connection interface. The cloud file security encryption device according to claim 1, wherein the network connection interface is a wireless network connection interface. The cloud file security encryption device according to claim 1, wherein the first The conversion function is a hash function. The cloud file security encryption device according to claim 1, wherein the second conversion function is a hash function.