Abstract: This present application relates to data encryption and decryption technology, and especially relates to a data encryption and decryption method and apparatus. The described encryption method comprises: packeting plaintext data to be encrypted, randomly assigning an encryption function an encryption key to each group of the plaintext data, encrypting each group of the plaintext data with the encryption function and key respectively, and arranging the encrypted data according to its corresponding position in the plaintext data to form a ciphertext. The encryption apparatus includes: packet module, encryption function and key random assignment module and encryption processing module. This application also provides a data decryption method and apparatus.

Abstract: This present application relates to data encryption and decryption technology, and especially relates to a data encryption and decryption method and apparatus. The described encryption method comprises: packeting plaintext data to be encrypted, randomly assigning an encryption function to each group of the plaintext data, encrypting each group of the plaintext data with the encryption function respectively, and arranging the encrypted data according to its corresponding position in the plaintext data to form a ciphertext. The encryption apparatus includes: packet module, encryption function random assignment module and encryption processing module. This application also provides a data decryption method and apparatus. This invention randomly assigns an encryption function to the plaintext to be encrypted, and uses the assigned encryption function to encrypt the plaintext data to arrange and form a ciphertext, greatly strengthening the security of data storage, and achieving the perfect secrecy of data.

Abstract: The present application relates to the field of technology of cloud storage data security, and in particular, relates to a data control method of cloud storage. The method comprises: converting the original data by a preset method into irreversible data blocks to form a physical part of the original data, and storing it in the cloud storage data center; outputting information necessary for data restoration of the process of converting the original data to the physical part, as a logical part of the original data, and storing the logical part of the original data in an original data owner controlled storage media. In this invention, the original data to be stored is converted into the physical part, which is then stored in a cloud storage data center. The logical part of the original data required for restoring the physical part to the original data is controlled by owners of the original data.

Abstract: The present application relates to cloud storage technology and especially relates to a cloud storage data access method, apparatus and system based on OTP. This method includes: generating and storing true random numbers of a predetermined length and a random seed of a predetermined length composed of the true random numbers via a preset method; acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext; based on the true random data string, generating a true random cryptographic key of no shorter than the length of the plaintext, encrypting the plaintext using this cryptographic key and transmitting ciphertext to a cloud storage data center. This application also provides a cloud storage data access apparatus and system based on OTP.

Abstract: A cloud storage data access method, apparatus and system are provided to enhance data availability and fault tolerance of cloud storage. In accordance with the present application, data redundancy at a cloud storage data center level is created by creating parity values of original data to be stored through parity calculation on a data transmitting end and placing the original data, its parity values and the data used to create the original data parity values in different cloud storage data centers, according to a predetermined data redundant storing rule.

Abstract: A method and system for achieving data de-duplication on a block-level storage virtualization device belonging to the field of data storage technologies, is disclosed. The method comprises: deleting the duplicate data in the actual physical data corresponding to the specified virtual LBA address space to obtain the data extents after physical data is de-duplicated; establishing the correspondence between the virtual LBA address space and the data extents after the physical data is de-duplicated; according to the correspondence and metadata information of the data extents, obtaining the storage position information of the actual physical data corresponding to the virtual LBA address space pointed by external data read and write requests to complete the I/O redirection. This invention also provides a system for achieving data de-duplication on a block-level storage virtualization device. This invention can delete duplicate data across hosts and storage devices, to achieve a wider scope of data de-duplication.

Abstract: The present application relates to the field of technology of cloud storage data security, and in particular, relates to a data control method of cloud storage. The method comprises: converting the original data by a preset method into irreversible data blocks to form a physical part of the original data, and storing it in the cloud storage data center; outputting information necessary for data restoration of the process of converting the original data to the physical part, as a logical part of the original data, and storing the logical part of the original data in an original data owner controlled storage media. In this invention, the original data to be stored is converted into the physical part, which is then stored in a cloud storage data center. The logical part of the original data required for restoring the physical part to the original data is controlled by owners of the original data.

Abstract: This present application relates to the field of data encryption and decryption technology, and in particular, relates to a selective data encryption and decryption method and apparatus. The encryption method includes: generating a string of true random numbers 0, 1 of a predetermined length via the preset method as a random seed; acquiring data for several times from the random seed, and cascading the data acquired each time into a random string no shorter than the length of a plaintext; according to the random string, generating a plaintext encryption bit identifier random string; randomly selecting more than one half of plaintext data for encryption according to the plaintext encryption bit identifier random string; arranging the encrypted data and unencrypted data to form a ciphertext according to their positions of the plaintext.

Abstract: The present application relates to cloud storage technology and especially relates to a cloud storage data store and retrieval method, apparatus and system. The data storing method comprise grouping source data to be stored according to a predetermined grouping rule; reorganizing the content of the grouped source data to form new data; transmitting the new data to a cloud storage data center for storage. The data retrieval method comprises, as requested, retrieving the data from a cloud storage data center; acquiring data recovery information corresponding to the data; restoring the data to source data according to the data recovery information. This application also provides a cloud storage data storing and retrieving apparatus and system. This invention can improve the data security of cloud storage and mitigate the risk of user data illegal leak and decryption.

Abstract: This present application relates to the field of cloud storage security technology, and in particular, relates to a cloud storage data encryption method, apparatus and system. The method comprises: according to the amount of data X expected to be stored within the preset time, the proportion of local storage space R and the security level of data Z, calculating the size H of a random seed that should be generated; according to the amount Y of plaintext data every time, calculating the times u of random seed acquired; according to the times u, acquiring data from the generated random seed with the size of H for several times to generate a plaintext encryption bit identifier data string; by use of the data string, selecting more than one half of the plaintext data for encryption to form a ciphertext. This application also provides a cloud storage data encryption apparatus and system.

Abstract: The present application relates to cloud storage technology and especially relates to a cloud storage data access method, apparatus and system based on OTP. This method includes: generating and storing true random numbers of a predetermined length and a random seed of a predetermined length composed of the true random numbers via a preset method; acquiring data from the random seed for several times and cascading the data acquired each time into a true random data string of no shorter than the length of plaintext; based on the true random data string, generating a true random cryptographic key of no shorter than the length of the plaintext, encrypting the plaintext using this cryptographic key and transmitting ciphertext to a cloud storage data center. This application also provides a cloud storage data access apparatus and system based on OTP.

Abstract: This invention relates to technology field of cloud storage and especially relates to a cloud storage data access method. The method comprises: a step of data storing and a step of data retrieving. The data storing step comprises: converting a file to be stored into a group of data blocks to form a physical part of the file, saving a logical part of the file, which is formed by information of restoring the physical part back to original file; distributing the physical part to multiple cloud storage data centers for storage; and saving storing location information of the data blocks of the physical part in the cloud storage data centers in the logical part; the step of data retrieving comprises: acquiring the file's logical part according to a file access request; retrieving the physical part of the file from at least one of the cloud storage data centers according to the logical part information and restoring the physical part to the original file according to the logical part information.

Abstract: A method and system for communications roaming discloses that end subscribers apply for numbers provided by roaming networks, connect their numbers in local networks to roaming network ones and then store them in the database in Global Roaming Interface Agent (GRIA). When a called number is dialed, the calling communications network first determines if the calling number or the called number belongs to a number in local network. If no, the calling network sends Global Roaming Interface Agent a request to search and check if the number in roaming network is stored under the calling number or the called number; if yes, the corresponding calling number or called number in roaming network will be used as the number for communication. Taking the technical solution from this invention, a flexible and low-cost global roaming communications system can be achieved by binding subscribers' multiple numbers to establish a uniform end-subscriber communications interface.