一种基于时间期限和访问次数控制的文件生命周期控制方法  

A FILES LIFECYCLE CONTROL METHOD BASED ON DEADLINE AND ACCESS TIMES CONTROL

作　　者：傅晓[1] 王志坚[1] 杨家奇 王宇[1] 

机构地区：[1]河海大学计算机与信息学院,江苏南京211100

出　　处：《计算机应用与软件》2016年第11期305-309,共5页Computer Applications and Software

基　　金：江苏省自然科学基金项目(BK20130852)

摘　　要：针对目前互联网环境中电子文件数据到期后无法安全彻底自毁现象,提出一种文件生命周期控制方法。通过两次散列和多重加密,引入Web分层思想,将时间、次数和销毁策略作为属性添加到文件头部,将加密后的文件分为存储层和控制层,文件生命周期结束后按照销毁策略销毁文件。实验结果表明,该方法在实现可抵抗传统密码攻击和蛮力攻击的基础上,不需要任何用户或者可信第三方进行干预,混合加密后的文件安全性得到增强,销毁后的明文和密钥皆无法恢复。In order to solve that the electronic documents in Internet environment cannot safely and completely self-destruct when expiring,this paper presents a file lifecycle control method. Through two hash calculations and multiple encryptions,and by introducing the layers idea in Web programming,we added the deadline,times and destruction strategies to the header of files as attributes. We divided the encrypted files into the storage layer and the control layer. The files will be destroyed according to destruction policy after their lifecycles are expired. Experimental results showed that this method did not need the intervention exposed by any user or the trusted third party on the basis of implementing the capability of resisting traditional cryptographic or brute-force attacks. The safety of the files with hybrid encryption is enhanced,and the destructed cipher text or keys can no longer be restored.

关 键 词：用户文件 自毁 时间期限 访问次数 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]