The invention provides a method and a
system for preventing tampering of a
database audit log based on searchable
encryption, which not only can solve the problems of internal attacks of auditing personnel and tampering of auditing certificates in a traditional
database audit
system, but also can further improve the security of the audit
system, and each role independently holds a private key, so that the security of the audit system is improved. And private
data security protection is realized by using secret
data transmission between the
database server and the user. In order to solve the elliptic curve problem, the
database server identity and the user identity participate in
encryption calculation, and internal attacks and malicious monitoring and tampering of
data transmission are prevented. Compared with the prior art, the method has the technical advantages that (1)
data privacy protection is enhanced:
key management of a symmetric
encryption algorithm in a traditional scheme has many challenges, more randomness and complexity are introduced in the encryption process, and a
database server independently has a personal private key, so that the
privacy protection is enhanced; the
threat to the security of the whole system caused by the privacy leakage of a single user or the leakage of the
master key is prevented, and the
key management is relatively simple. (2) internal
attack and tampering resistance: a traditional database auditing system is easily attacked by internal personnel and tampered by auditing certificates, and integrity
verification is performed on log information based on identity and IP thoughts, so that the reliability of the auditing system is improved, the independence and credibility of the auditing process are ensured, and the
attack resistance is improved.