A credible database integrity protection method and system

Abstract

The invention provides a credible database integrity protecting method and system which are particularly but not just suitable for an industrial control system. The method includes the steps that when sensitive data need integrity protection, whether the current system environment conforms to the environment needed for sensitive data integrity protection or not is checked through a credible measurement technology, and whether the system environment is credible or not is checked similarly before an integrity measurement signature is verified. A signature secret key for carrying out integrity verification is protected by a hardware safety chip in an encipherment mode, and therefore safety based on hardware is achieved. Finally, integrity verification is achieved in a middleware mode, and the normal operation efficiency of a system is ensured while integrity verification of the sensitive data is ensured. Based on the credible database integrity protecting method and system, the safe database system for storing the sensitive data based on the safety chip can be set up for the industrial control environment, the integrity protection intensity of the sensitive data in the safe database system is improved, and it is ensured that production plans, technological processes and other sensitive data are not tampered.

Description

technical field [0001] The invention relates to a trusted database integrity protection method and system, belonging to the field of database security. Background technique [0002] Due to the strict requirements of industrial production on the availability of industrial control systems, security operations such as upgrades, patches, or updates of anti-virus software virus databases are usually not performed in a timely manner after deployment of industrial control systems. Therefore, compared with traditional information systems, there is a certain lag in the security protection measures of industrial control systems. With the integration of informatization and industrialization, enterprise management networks and industrial control networks in many industrial production fields are gradually interconnected to realize the integration of management and control. This makes the industrial control system face more serious external threats such as viruses, Trojan horses, and hac...

AI Technical Summary

Problems solved by technology

What's more serious is that once the insiders who have physical access to the industrial control system are malicious, they can tamper with sensitive data without being easily detected, causing serious losses

This is a problem that cannot be solved by a secure database solution that lacks hardware support

[0006] In short, there is still a lack of a database integrity verification technology achievement in the industrial control environment that can safely store sensitive data and bind its integrity to the system environment and underlying hardware security

Images