零信任架构下多服务器自动加密算法设计  

Design of Multi-server Automatic Encryption Algorithm under Zero Trust Architecture

作　　者：王峥 WANG Zheng(Information Network Management Center,Beijing You’an Hospital,Capital Medical University,Beijing 100069,China)

机构地区：[1]首都医科大学附属北京佑安医院,信息网络管理中心,北京100069

出　　处：《微型电脑应用》2024年第7期19-22,共4页Microcomputer Applications

基　　金：北京市自然科学基金(4196422)。

摘　　要：设计一种零信任架构,针对多服务器提出一种自动加密算法。基于零信任架构构建多服务器可搜索加密模型。对模型进行形式化定义,明确各参与方之间的交互和操作流程;为了证明模型的安全性,以游戏方式定义安全模型,通过设计攻击策略和游戏规则,评估加密模型的不可区分性。结合不可区分概率设计加密算法。将多服务器自动加密算法与其他算法展开比较实验测试,结果表明,该算法支持多服务器和多关键字,可在保证最高计算效率的前提下完成安全性最高的数据加密和解密。This paper designs a zero trust architecture and propose an automatic encryption algorithm for multiple servers.Based on a zero trust architecture,a multi-server searchable encryption model is constructed.It formalizes the definition of the model,clarify the interactions and operational processes between all parties involved.In order to demonstrate the security of the model,the security model is defined in a game format,and the indistinguishability of the encrypted model is evaluated by designing attack strategies and game rules.An encryption algorithm is designed based on indistinguishable probability.Comparative experimental testing is conducted among the multi-server automatic encryption algorithm and other algorithms,and the results show that this algorithm supports multiple servers and multiple keywords,and can achieve the highest security of data encryption and decryption while ensuring the highest computational efficiency.

关 键 词：零信任架构 可搜索加密算法 形式化定义 安全模型 多服务器 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]