Data transparent encryption and decryption system suitable for big data platform

Abstract

The invention discloses a data transparent encryption and decryption system suitable for a big data platform. The system comprises an encryption and decryption algorithm execution subsystem and a keylife cycle management subsystem. Wherein the encryption and decryption algorithm execution subsystem at least comprises an intermediate control module, an execution module, a data storage module, a configuration receiving and control module, a key algorithm library and a key calling module; the secret key life cycle management subsystem comprises a secret key life cycle user management module, a secret key life cycle management service module and a secret key storage module. The system can support the use of an international standard cryptographic algorithm and a national commercial cryptographic algorithm at the same time, and realizes the full life cycle management of the data encryption key.

Description

technical field [0001] The invention relates to data encryption and decryption and key life cycle management, in particular to a data transparent encryption and decryption system supporting national secret algorithms in a big data platform. Background technique [0002] Foreseeing the development potential of big data, more and more enterprises and organizations have deployed big data analysis and processing platforms to process large data sets. Among them, the distributed system infrastructure Hadoop platform is widely used because it can process heterogeneous massive data from multiple sources in real time. However, while the platform helps companies quickly analyze data, it also brings new data security risks. Because different users with different analysis needs can access the data in the big data platform, it is easy to cause data leakage, especially for administrator users. , It is very easy to bypass the access control policy and directly access the data stored in th...

AI Technical Summary

Problems solved by technology

[0005] 1. Cannot support column-level transparent encryption in the database and file-level transparent encryption in the file system at the same time

[0006] 2. Does not support national commercial encryption algorithms, such as SM2, SM3, SM4, SM9

[0007] 3. Key management is too complicated to realize the full lifecycle management of data encryption keys (including national secret algorithm encryption keys)

Images