mybatis field encryption and decryption device and encryption and decryption system

Abstract

The invention provides a mybatis field encryption and decryption device and an encryption and decryption system, the device includes a mybatis interception plug-in and a parameter setting module; wherein, the mybatis interception plug-in is used to annotate and mark fields that need to be encrypted and decrypted, and update them in the database Automatically encrypt and decrypt before reading; the parameter setting module is used for users to set keys and magic values ​​that need to be encrypted and decrypted. The magic value refers to a prefix automatically added to encrypted data. The present invention aims at excessively high business coupling, uses mybatis plug-ins, and marks the fields that need to be encrypted and decrypted through annotations, and automatically encrypts and decrypts before the database is updated / read, without affecting the operation of the business logic on the database; for the original plaintext data requirements In the case of changing to ciphertext, the magic value is used for marking, and only the marked data is encrypted and decrypted to avoid data incompatibility before and after the change.

Description

technical field [0001] The invention belongs to the field of database content security, and in particular relates to a mybatis field encryption and decryption device and an encryption and decryption system. Background technique [0002] The field of database security has been committed to solving database network security and authority management. Due to the high degree of coupling between data security and business, there is no technology for encrypting and decrypting data on the market. The existing basic implementation method is in the business logic. Perform custom encryption on the fields to be encrypted, then store them in the database, read them out, and then decrypt them. The problem is that the coupling to the business is too high, and the operation is cumbersome. If the requirements change, it may cause the original storage in the database The plaintext in is incompatible with the ciphertext saved later, resulting in data confusion. [0003] In the saas system, da...

AI Technical Summary

Problems solved by technology

[0002] The field of database security has been committed to solving database network security and authority management. Due to the high degree of coupling between data security and business, there is no technology for encrypting and decrypting data on the market. The existing basic implementation method is in the business logic. Perform custom encryption on the fields to be encrypted, then store them in the database, read them out, and then decrypt them. The problem is that the coupling to the business is too high, and the operation is cumbersome. If the requirements change, it may cause the original storage in the database The plaintext in the file is incompatible with the ciphertext saved later, causing data confusion

[0004] (1) The internal personnel of the company directly export all the data, resulting in data leakage;

[0005] (2) The database was taken off, resulting in the leakage of key customer information

Images