Encipherment protection system and encipherment protection method for database in cloud computing environment

Abstract

The invention provides an encipherment protection system and an encipherment protection method for a database in a cloud computing environment. The encipherment protection system provided by the invention comprises an application interface, a task management subsystem, a resource management subsystem and an encipherment engine pool. The encipherment protection system provided by the invention has the following advantages that 1. the encipherment protection system adopts the encipherment engine pool so as to avoid that the database performance is reduced by the influence of the overload operation of encipherment and decryption modules; 2. an application system is entirely transparent to final users of the database, so that the conversion between clear test and cipher text can be carried out according to the requirements; 3. the encipherment engine pool is fully independent from the database and the application system, so that the encipherment function of data can be realized without changing the database and the application system; 4. the encipherment engine pool constructed by using virtualization technologies has favorable manageability and elasticity, and can be constructed according to the requirements, the bottleneck problems of the fine granularity and the large concurrency access in the application of a relational database are solved, resources can be reasonably used, and the capability and the efficiency of a database server are enhanced.

Description

technical field [0001] The present invention relates to the field of information security in a cloud computing environment, and in particular to a database encryption protection system and encryption protection method in a cloud computing environment. A data encryption and decryption engine pool is constructed through virtualization technology, and encryption and decryption are dynamically created and scheduled according to the encryption and decryption load conditions. Engine, suitable for data encryption protection of large concurrent fine-grained access. Background technique [0002] Cloud computing is an Internet-based computing model for public participation, and its computing resources are dynamic, scalable, virtualized, and provided as a service. Users have changed from buying software in the past to renting corresponding application software through the Internet under cloud computing; from purchasing servers and building computer rooms before, to renting remote virtu...

AI Technical Summary

Problems solved by technology

[0003] In the cloud computing environment, deploying traditional security measures such as access control, firewall and intrusion detection to protect the database, there are two situations that may easily cause confidential information leakage: 1) The database administrator has too much authority and has the right to access all / part of the confidential data ; 2) Loss of backup media, maintenance of database system security requires regular backup of data in the database, a large number of data backup files are stored in unprotected magnetic and optical media, the hidden danger of loss is quite large, which may cause leakage of confidential information

Images