Cloud Storage Data Access Method, Apparatus and System Based on OTP

• US 20120134495A1
• Filed: 12/01/2010
• Published: 05/31/2012
• Est. Priority Date: 11/29/2010
• Status: Active Grant

• Current Assignee: Beijing Z & W Technology Consulting Company Limited
• Original Assignee: Beijing Z & W Technology Consulting Company Limited
• Inventors: Liu, Hui
• Granted Patent: US 8,401,186 B2
• Time in Patent Office: Days
• US Class Current: 380/46
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

The present application relates to cloud storage technology and especially relates to a cloud storage data access method, apparatus and system based on OTP. This method includes: generating and storing true random numbers of a predetermined length and a random seed of a predetermined length composed of the true random numbers via a preset method; acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext; based on the true random data string, generating a true random cryptographic key of no shorter than the length of the plaintext, encrypting the plaintext using this cryptographic key and transmitting ciphertext to a cloud storage data center. This application also provides a cloud storage data access apparatus and system based on OTP. The method, apparatus and system introduced by this invention can generate and store sufficient true random cryptographic key with relatively small physical space occupancy in comparison with that of plaintext, thereby enabling OTP to be applied into cloud storage data security protection.

Claims

1-10. -10. (canceled)

11. A cloud storage data access method based on OTP comprising:

generating and storing true random numbers of a predetermined length and a random seed of a determined length composed of the true random numbers via a preset method;

acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext;

generating a true random cryptographic key of no shorter than the length of the plaintext based on the true random data string; and

encrypting the plaintext with the true random cryptographic key and transmitting the encrypted plaintext to a cloud storage data center.

12. The method of claim 11 wherein the starting position of data acquisition from the random seed and the length of the acquired data are all random.

13. The method of claim 11 wherein the step of cascading comprises:

determining whether the length of the true random data string is greater than that of the plaintext, if yes, then randomly acquiring data from the true random data string for several times to generate a new true random data string of no shorter than that of the plaintext; and

wherein the step of generating the true random cryptographic key comprises;

generating the true random cryptographic key, based on the new random data string.

14. The method of claim 11 wherein the step of generating the true random cryptographic key comprises:

conducting message digest operation on the true random cryptographic key to generate the message digest value of the true random cryptographic key; and

determining whether the message digest value is identical to a previously stored message digest value of the true random cryptographic key, if not, outputting the true random cryptographic key generating in the conducting step;

if yes, then repeatedly acquiring data from the random seed for several times to generate an additional true random cryptographic key and determining whether the additional and the previously stored message digest values of the true random cryptographic key are the same, until a different true random cryptographic key is generated.

15. A cloud storage data access apparatus based on OTP comprising:

a true random number generation module for generating and storing true random numbers of a predetermined length and random seed of a predetermined length composed of the true random numbers via a preset method;

a true random cryptographic key generation module for acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext, and based on the true random data string, generating a true random cryptographic key of no shorter than the length of the plaintext; and

an encryption module for encrypting the plaintext with the true random cryptographic key and transmitting the encrypted plaintext to a cloud storage data center.

16. The apparatus of claim 15 wherein the true random cryptographic key generation module comprises:

an acquisition unit for acquiring data from the random seed for several times and outputting the acquired data;

a cascading unit for receiving the data output by the acquisition unit, cascading the output data into a true random data string of no shorter than the length of the plaintext, and outputting the true random data string; and

an encryption key generation unit for receiving the true random data string output by the cascading unit and, based on the true random data string, generating the true random cryptographic key.

17. The apparatus of claim 16 wherein the true random cryptographic key generation module also comprises:

a determining unit for determining whether the true random data string cascaded by the cascading unit is longer than the plaintext or not, if yes, then randomly acquiring data from the true random data string for several times to generate a new true random data string of no shorter than the length of plaintext and outputting the new true random data string to the encryption key generation unit.

18. The apparatus of claim 16 wherein the true random cryptographic key generation module also comprises:

a storage unit for storing a message digest value of the true random cryptographic key;

a message digest value generation module for conducting message digest value operation for the true random cryptographic key to generate and output the message digest value of the true random cryptographic key; and

a comparison module for receiving the message digest value output by the message digest value generation module, comparing the message digest value with a message digest value previously stored in the storage unit, and outputting the comparing result to the encryption key generation unit.

19. A cloud storage data access system based on OTP comprising a data transmission apparatus and a cloud storage data center, wherein the data transmission apparatus comprises:

a true random number generation module for generating and storing true random numbers of a predetermined length and a random seed of a predetermined length composed of the true random numbers via a preset method;

a true random cryptographic key generation module for acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext, and based on the true random data string, generating a true random cryptographic key of no shorter than the length of the plaintext; and

an encryption module for encrypting the plaintext with the true random cryptographic key and transmit the encrypted plaintext to a cloud storage data center.

20. The system of claim 19 wherein the true random cryptographic key generation module comprises:

an acquisition unit for acquiring data from the random seed for several times and outputting the acquired data;

a cascading unit for receiving the data output by the acquisition unit, cascading the output data into a true random data string of no shorter than the length of plaintext and outputting the true random data string; and

an encryption key generation unit for receiving the true random data string output by the cascading unit and, based on the true random data string, generating the true random cryptographic key.