Database encryption field fuzzy retrieval method based on GCM encryption mode

Abstract

The invention provides a database encryption field fuzzy retrieval method based on a GCM encryption mode. The method comprises the steps of segmenting an original plaintext of an encrypted field according to a specified length or a length sequence, applying an encryption algorithm based on a GCM encryption mode to encrypt each segment formed after the plaintext is segmented, solving a corresponding authentication value Tag, generating a corresponding ciphertext index set, and splicing the authentication value Tag in a ciphertext index set with a ciphertext, and storing the spliced authentication value Tag and the ciphertext in a ciphertext field. When fuzzy retrieval is carried out, elements in the ciphertext index set are matched with the content to be retrieved, a large number of unmatched records can be filtered out, the number of records needing to be decrypted for fuzzy matching is reduced, and the query efficiency is improved; the length of the authentication value Tag can be flexibly selected due to applying the GCM encryption mode, so that the method has high adaptability to a database field storage space.

Description

technical field [0001] The invention relates to a fuzzy search method for encrypted fields of a database based on a GCM (Galois / Counter Mode) encryption mode, belonging to the technical fields of information security and database encryption. Background technique [0002] With the rapid development of informatization and networking, in the era of big data, in the face of massive data resources, database security protection is becoming increasingly important, and encrypting sensitive fields in the database has become an effective method for database security protection . However, for encrypted fields, if you need to perform fuzzy query on the content, you generally need to decrypt the original content and then perform matching, which seriously affects the query efficiency. Among the solutions for this scenario, some require major modifications to the database system, while others consume a lot of database resources. [0003] In the prior art, there is a method of constructin...

AI Technical Summary

Problems solved by technology

[0004] In order to overcome the deficiencies of the prior art, the present invention aims at the inefficiency of the fuzzy search for character-type encrypted fields in the existing database encrypted content retrieval technology, and the existing ciphertext index methods such as hash value index have higher requirements on the length of the database storage field , and needs to transform the database table structure and other defects, a fuzzy retrieval method for database encrypted fields based on GCM encryption mode is proposed

Images