Security protection method and system for light-weight database

Abstract

The invention provides a security protection method and system for a light-weight database, and relates to the technical field of information security. The method includes the steps that firstly, a user has access to the database through a database access agency; secondly, the database access agency verifies the security of a running platform where a client-side is located through a remote authentication platform before responding to the operation conducted by the user on the database; thirdly, the database must be decoded before the operation conducted by the user is responded due to the fact that the database is a ciphertext database; fourthly, the running platform where the database is located needs to verify the security of the running platform before the database is decoded, if the running platform is safe, decoding is conducted on the database and the user operation is conducted, and the database is encoded and stored again after the operation is completed. The system comprises a remote authentication subsystem and a database encoding protection subsystem. After the method and system are adopted, the security of the database can be enhanced, the security of the running platform where the client-side is located and the security of the running platform where the database is located are verified before the user has access to the database, and therefore the potential safety hazards caused by undemanding identity authentication and the platforms which may have been broken through can be avoided.

Description

technical field [0001] The invention relates to the technical field of database protection methods, in particular to a light-weight database security protection method. The method encrypts and protects the database through trusted computing technology, and only performs database protection on the premise of ensuring the security of the platform where the database is located. Decryption; the remote proof technology is used to protect the database from being accessed by illegal users, and prevent legitimate users from accessing the database on unsecured client operating platforms. Background technique [0002] With the continuous development of database technology and network technology, the database application system based on network and database has been more and more widely used. These database systems are responsible for storing and managing information, and leaking or destroying such information will cause heavy losses to enterprises and countries. Therefore, the securi...

AI Technical Summary

Problems solved by technology

[0004] The above protection methods all have a common weakness, that is, they all ignore the security constraints on the running platform, neither verify the security status of the client running platform, nor verify the security status of the running platform where the database is located, thus leaving the system safety hazard

Images