Database data safety management method and system

Abstract

The invention relates to the technical field of information safety, and discloses a database data safety management method. The method comprises the following steps: receiving a database access request sent by a client, carrying out legality verification on the database access request, and sending the database access request to a key management system when the verification is passed; and receivingauthorization information returned by the key management system in response to the database access request, obtaining a data key according to the authorization information, and performing transparentencryption and / or decryption operation on a database file by utilizing the data key. According to the invention, transparent encryption and decryption operation is carried out by using the data key from the system file level, so that the quickness of data encryption and decryption can be ensured; and the permission of the data key is controlled through the key management system, so that the safety is considered under the condition of ensuring the data encryption and decryption rapidness. The invention further discloses a database data safety management system.

Description

Technical field [0001] The invention relates to the technical field of information security, in particular to a method and system for database data security management. Background technique [0002] With the popularity and development of the Internet, more and more online applications based on database technology provide services to customers. While database technology brings convenient applications to users, it also brings many problems, among which database information security issues are particularly prominent. Database administrators can take some precautions to help protect the security of the database, such as designing a security system, encrypting network transmission, and building a firewall around the database server, but if the media (such as drives or backups) is stolen or the database with high privileges is encountered The user maliciously bypasses the legitimate business to access the core data. The malicious party only needs to restore or attach the database to b...

AI Technical Summary

Problems solved by technology

Database administrators can take some precautions to help secure databases, such as designing a secure system, encrypting network transmissions, and building firewalls around database servers, but if you encounter stolen media (such as drives or backups) or a highly privileged database When a user maliciously bypasses legitimate business access to core data, the malicious party only needs to restore or attach the database to browse the data information of the database. Existing methods cannot effectively guarantee the security of database data

Images