| In recent years,cloud data storage technology has become more and more mature,bringing great convenience for people to store and access data efficiently anytime and anywhere.However,the exposed network environment and weak defense mechanism of cloud servers bring more and more obvious security risks for cloud data storage,and it is urgent to study secure storage solutions for cloud data.High-complexity passwords generated using key derivation algorithms can effectively improve the ability to resist a large number of attacks and are the basis for secure data storage in the cloud;suitable symmetric encryption schemes as a common and common method to protect data can effectively reduce the risk of data leakage;password-enhanced encryption as a key management scheme to store data and keys separately can make hackers obtain part of the device After gaining partial access to the device,the hacker still cannot access the data.In recent years,scholars in related fields have proposed a variety of cloud-oriented data storage schemes,but some of these schemes are less secure and some are less independent,and none of them can secure stored data directly and securely in the public network environment.To address the above problems,this thesis focuses on key derivation algorithm,symmetric encryption scheme and cryptographic reinforced encryption,optimizes the existing schemes,and designs a data storage encryption scheme with strong data protection independence and high security.The main research contents include:1.In order to improve the complexity and security of ciphers used for data encryption,we design and construct the slow key derivation algorithm RSA_Scrypt with higher security,which reduces the violent exhaustive attack on high-speed parallel devices by introducing the memory difficulty mechanism;and creatively introduce the asymmetric encryption mechanism,which effectively prevents the data from being reverse deduced while improving the key complexity.2.In order to better realize data encryption and decryption,design and construct the encryption scheme RAES_KECB with symmetric encryption as the main part and asymmetric encryption as a supplement,creatively use RSA_Scrypt to enhance the security of encryption algorithm while optimizing the security of ECB mode,and creatively design the new encryption working mode KECB to realize better encryption for confidential data.3.In response to the problems of existing PHE with key emitting devices,inadequate authentication scheme and multiple texts in one secret,this thesis designs RPHE scheme to reduce the possibility of key leakage and improve the security of data storage system by optimizing the storage process and key management logic of the existing scheme.The RSA_Scrypt,RAES_KECB and RPHE schemes designed in this thesis are tested and verified to prove their security and feasibility,and the experiments prove that the data encryption scheme designed in this thesis can improve the security of data storage in the cloud. |