A data protection system and method for a general database based on sgx

Abstract

The invention belongs to the field of database technology, and discloses an SGX-based data protection system and SGX-based data protection methods of a general database. One of the methods includes an initialization phase and an execution phase. The initialization phase includes: carrying out remote authentication and key sharing; sending an application data key and ID to a database engine by an application; using a shared key for encryption; and selecting the correct data key according to the ID of the application program. The execution phase includes: sending a database request to the data engine by the application; finding the key in the database engine according to a received ID; verifying the integrity of a sent message by the database engine; decrypting the message; verifying the integrity of a database file; executing a request statement in plaintext in enclave; encrypting an execution result to return the same to the application; and updating a database table and a table MAC value. The method protects the data confidentiality and the data integrity of the database. In a multi-application environment, the method still can realize protection of the data confidentiality and the data integrity for a lightweight database which does not support user isolation and access control.

Description

technical field [0001] The invention belongs to the technical field of databases, and in particular relates to a data protection method for a general database based on SGX, which protects the data confidentiality and data integrity of application programs in a multi-application program scenario, and protects application program data from external attackers , malicious attacks and tampering by malicious database administrators and malicious applications. For a lightweight database that does not support user isolation and access control, the invention can still protect data confidentiality and data integrity. Background technique [0002] Databases are an important part of modern computing systems. Especially in the era of rampant malware and cyber attacks, database security has become an important issue that needs to be addressed. The storage security of the database, and the anti-theft and anti-tampering of sensitive data have attracted more and more attention. The indust...

AI Technical Summary

Problems solved by technology

[0003] To sum up, the problems existing in the existing technology are: the current security encryption schemes have the following problems: they cannot provide strict security protection; they do not support many original computing functions; the methods based solely on cryptography have poor performance

Images