一种基于国密算法的文件流转及权限管理机制  

A Mechanism for File Transfer and Authority Management Based on National Secret Algorithm

作　　者：吴海波 青亮 古恒 WU Haibo;QING Liang;GU Heng(Westone Infomation Industry Ltd.,Chengdu 610041)

机构地区：[1]成都卫士通信息产业股份有限公司,成都610041

出　　处：《现代计算机》2021年第22期91-96,共6页Modern Computer

摘　　要：数据的价值在于利用与流动,如何实现数据的高效、安全、可控流转,已成为广泛关注的重要课题。首先对文件流转的研究现状、存在的问题进行分析。针对现有的文件流转机制中存在的安全问题,提出一种基于国密算法的文件流转及动态权限控制机制,能够实现在不完全可信云环境下的文件安全流转。该机制结合商用密码技术实现身份认证、密钥管理以及加密传输及细粒度的动态权限控制。对方案的总体架构、功能组成、密钥分发、主要业务流程进行描述,最后对方案进行安全性和效率性评估。本文提出的方案具备较高的安全性、高效率及适应性等优点,能较好地解决目前文件流转中存在的安全不可控和权限管控欠缺等问题。The value of data lies in its utilization and flowing. How to realize the efficient,safe and controllable flow of data has become an important topic of widespread concern. First,analyze the current research status and existing problems of file circulation. Aiming at the security problems existing in the existing file transfer mechanism,a file transfer and dynamic permission control mechanism based on the national secret algorithm is proposed,which can realize the secure transfer of files in an incompletely trusted cloud environment. This mechanism combines commercial cryptographic technology to realize identity authentication,key management,encrypted transmission,and fine-grained dynamic authority control. Describe the overall architecture,functional composition,key distribution,and main business processes of the program,and finally evaluate the security and efficiency of the program. The solution proposed in this paper has the advantages of high security,high efficiency and adaptability,and can better solve the problems of uncontrollable security and lack of authority control in the current file circulation.

关 键 词：文件流转 文件加密 动态权限 

分 类 号：TN918.4[电子电信—通信与信息系统] TP311.13[电子电信—信息与通信工程]