Back to results
US 12,118,109 B2Granted
Data storage method, device, and storage medium
AssigneeBeijing Baidu Netcom Science Technology Co., Ltd.
InventorJingqi Cao
Life of this patent
Estimating the term…
Abstract
Provided are a data storage method, a device, and a storage medium. The implementation scheme is as follows: target data to be stored is divided into data fragment original texts, and storage nodes are allocated for the data fragment original texts; in a trusted execution environment, the data fragment original texts are encrypted according to node information of the storage nodes to obtain data fragment cipher texts associated with the storage nodes; and the data fragment cipher texts are stored to the storage nodes.
Claims18
A data storage method, comprising:
- dividing target data to be stored into data fragment original texts, and allocating storage nodes for the data fragment original texts;
- in a trusted execution environment, encrypting the data fragment original texts according to node information of the storage nodes to obtain data fragment cipher texts associated with the storage nodes;
- and
- storing the data fragment cipher texts to the storage nodes;
- wherein in the trusted execution environment, encrypting the data fragment original texts according to the node information of the storage nodes comprises:
- in the trusted execution environment, acquiring a data fragment original text, identification information of the data fragment original text and node information of a storage node allocated for the data fragment original text through an encryption interface;
- generating an encryption key according to a root key, the identification information of the data fragment original text, the node information of the storage node and a first random number;
- and
- encrypting the data fragment original text by adopting the encryption key.
6 more elements
An electronic device, comprising:
- at least one processor;
- and
- a memory communicatively connected to the at least one processor;
- wherein the memory stores an instruction executable by the at least one processor, and the instruction, when executed by the at least one processor, causes the at least one processor to perform the following steps:
- dividing target data to be stored into data fragment original texts, and allocating storage nodes for the data fragment original texts;
- in a trusted execution environment, encrypting the data fragment original texts according to node information of the storage nodes to obtain data fragment cipher texts associated with the storage nodes;
- and
- storing the data fragment cipher texts to the storage nodes;
- wherein the at least one processor is caused to perform in the trusted execution environment, encrypting the data fragment original texts according to the node information of the storage nodes by:
- in the trusted execution environment, acquiring a data fragment original text, identification information of the data fragment original text and node information of a storage node allocated for the data fragment original text through an encryption interface;
- generating an encryption key according to a root key, the identification information of the data fragment original text, the node information of the storage node and a first random number;
- and
- encrypting the data fragment original texts by adopting the encryption key.
10 more elements
A non-transitory computer readable storage medium storing a computer instruction, wherein the computer instruction is configured to cause a computer to perform the following steps:
- dividing target data to be stored into data fragment original texts, and allocating storage nodes for the data fragment original texts;
- in a trusted execution environment, encrypting the data fragment original texts according to node information of the storage nodes to obtain data fragment cipher texts associated with the storage nodes;
- and
- storing the data fragment cipher texts to the storage nodes;
- wherein the computer instruction is configured to cause the computer to perform in the trusted execution environment, encrypting the data fragment original texts according to the node information of the storage nodes by:
- in the trusted execution environment, acquiring a data fragment original text, identification information of the data fragment original text and node information of a storage node allocated for the data fragment original text through an encryption interface;
- generating an encryption key according to a root key, the identification information of the data fragment original text, the node information of the storage node and a first random number;
- and
- encrypting the data fragment original texts by adopting the encryption key.
6 more elements
Dependencies are inferred from the claim text.