Database field encryption method, electronic equipment and computer readable storage medium

Abstract

The invention discloses a database field encryption method, electronic equipment and a computer readable storage medium. The method comprises steps of determining a labeling category for a database field needing to be subjected to encryption operation; configuring a corresponding encryption key for the annotation category; encrypting a plaintext of a database field needing to be encrypted according to the encryption key by utilizing an encryption algorithm so as to generate a ciphertext; and storing the ciphertext in a database. The invention provides a database field encryption method. Different encryption keys are adopted for different annotation categories, the method can improve data security of the database, is high in universality, is suitable for all mainstream database programs, can achieve the periodic or irregular upgrading of the secret key, does not affect the historical data, further can achieve the batch updating of historical records, enables the secret key to be upgraded to the latest version in a unified manner, and is convenient in upgrading operation.

Description

technical field [0001] The present application relates to the technical field of databases, in particular to a database field encryption method, electronic equipment and a computer-readable storage medium. Background technique [0002] Most of the current secret-related fields use foreign database products, such as Oracle; it is a crucial task to ensure that the system has high performance and high availability while improving data security and ensuring that key information is not leaked. The field of database security has been committed to solving database network security and authority management. Due to the high degree of coupling between data security and business, there is no technology for encrypting and decrypting data on the market. The existing basic implementation method is in the business logic. Perform custom encryption on the fields to be encrypted, then store them in the database, read them out, and then decrypt them. The problem is that the coupling to the bus...

AI Technical Summary

Problems solved by technology

The field of database security has been committed to solving database network security and authority management. Due to the high degree of coupling between data security and business, there is no technology for encrypting and decrypting data on the market. The existing basic implementation method is in the business logic. Perform custom encryption on the fields to be encrypted, then store them in the database, read them out, and then decrypt them. The problem is that the coupling to the business is too high, and the operation is cumbersome. If the requirements change, it may cause the original storage in the database The plaintext in the file is incompatible with the ciphertext saved later, causing data confusion

Transparent encryption technology, among the current mainstream databases, only the Oracle database provides this interface, and for databases that do not provide this interface, although transparent encryption can still be achieved, high-speed indexing of encrypted fields cannot be achieved, resulting in poor performance. Low, it is difficult to become a general-purpose product, so there are only database encryption products for Oracle databases on the market

Images