Format preserving-based database transparent encryption method

Abstract

The invention provides a format preserving-based transparent database encryption method. The security of a database can be effectively protected and storage is performed in a ciphertext form. A legal user can be transparentized; the same addition, deletion, modification and query methods as a non encrypted database are provided; and use of the user is not influenced. According to the method, a record in each data item of the database is encrypted in a format preserving encryption manner, so that the record can be stored in the database in the form of a ciphertext with the same data type. When the user needs to perform addition, deletion, modification and query on the encrypted database, a plaintext field input by the user is encrypted and converted into the ciphertext with the same data type, thereby enabling the plaintext field to be consistent with the data in the encrypted database; and a result obtained by a query is decrypted and presented to the user in a plaintext form, so that the user is transparentized.

Description

technical field [0001] The invention relates to the field of database security encryption, in particular to a format-preserving database transparent encryption method. Background technique [0002] With the development of the Internet, the problem of information security is becoming more and more serious, and the database, as the main storage method of information, has also become the object that needs to be protected. However, traditional firewalls and some security protection software are no longer sufficient to combat database intrusion and theft. At present, there are often various incidents of hackers invading the network and stealing the database in the server without any effort, which greatly threatens the security of user information. Therefore, it is necessary to use encryption technology to protect the database and store it in the form of ciphertext. Even if the data in the database is stolen, the intruder can ensure that the data information will not leak, there...

AI Technical Summary

Problems solved by technology

Elovici et al proposed a format-preserving database encryption method [Elovici Y, Waisenberg R, Shmueli E.Structure preserving database encryption method and system: U.S. Patent 8,639,947[P].2014-1-28.], Freeman et al proposed a A method to encrypt it at the database field level [Freeman W C, Hom RV. Field level database encryption using a transient key: U.S. Patent 9,251,355[P].2016-2-2.], but the implementation of this method is too complicated, The disadvantages of using are not conducive to storage and poor portability

Similarly, although some large-scale database management system (DBMS) software has provided some simple data encryption functions, its encryption performance is very limited, and the encryption methods of the DBMS are used to encrypt and protect the data, so that these data Difficult to port between different DBMS

Images