针对办公开放XML(Office Open XML,OOXML)格式的文档在全生命周期的隐私安全问题,提出了基于身份加密的OOXML文档安全自毁方案,使得用户的隐私性办公开放XML文档在用户设置的授权期限后主动删除.选择密钥把文档对称加密,同时对该密钥进行基于身份的加密(Identity—Based Encryp—tion,IBE),然后把文档的一部分密文和密钥的密文混合处理,并将混合密文份额发送到对象存储系统上.
To deal with the issue of the whole lifecycle security of the privacy document in the internet which is based on Office Open XML format. It proposes a secure-destruction scheme for OOXML document with identity-based encryption (IOSS), which can protect a user's sensitive OOXML document by making the document automatically deleted after a period of time. Specifical- ly, it encrypts the OOXML document into a ciphertext by a symmetric key and encrypt the symmet- ric key using the IBE algorithm. Then, it uses the Mix Shares Generation algorithm to make the part of document's ciphertext and the symmetric key's ciphertext into mixed ciphertext. Finally, it dis- tributes the mixed ciphertext shares into Object Storage System (OSS).