Database tamper-proofing method and system applied to data security products

Abstract

A database tamper-proofing method applied to data security products is provided. The method comprises: designing a logic operation for a database table. The logic operation comprises logical addition, logical deletion, and logical modification. The logic addition is newly adding a valid data record; the logical deletion is newly adding a deletion record for representing that object data has been deleted; and the logical modification firstly executes logic deletion for recording that the object data has been deleted, and executes logic addition for recording modified object data and identifications of the object data. According to the technical scheme of the present invention, since only write permissions to the database table of ordinary users are retained, and each database table contains a data structure for implementing conversion from the bottom addition to the logic operation, so that only-addition operations are used to stimulate the addition, deletion and modification operations on the bottom of the datable table; and the hash value is recorded in the only-addition operation process to be taken as fingerprint verification to ensure the authenticity of the audit history, so that not only all operations of the database access layer are retained, but also tamperresistance in the whole process of the history of all the database objects is realized.

Description

technical field [0001] The invention relates to the technical field of data processing, in particular to a database tamper-proof method and system applied to data security products. Background technique [0002] Now governments, enterprises and institutions generally adopt the method of attaching a bastion host, bypass monitoring and real-time backup system to the application system to monitor and audit the operation and maintenance of the application database to ensure the authenticity of historical data. Existing application systems with operation audit functions or audit data security application systems focus on the comprehensiveness of audit content and the display of audit content. Generally, bypass or data periodic backup methods are used to ensure the authenticity of historical data, but Data security is not guaranteed from the design model of the database, and there is still the possibility of historical data being used or tampered with in the operation and maintena...

AI Technical Summary

Problems solved by technology

[0003] This application provides an application database permission and structure model design scheme applied in the field of data security, which cuts off the way that the historical data information existing in the current application database may be tampered with. During the upgrade, use and operation and maintenance of data security products , solve the problem that the audit information cannot reflect the real situation of the database history after the historical data is modified, and greatly guarantee the authenticity of the historical data of the application database

Images