Database encryption method and device

Abstract

The invention relates to the technical field of cryptography, and discloses a database encryption method and device.The method comprises the steps that an encryption key of a to-be-encrypted database table is preset, the to-be-encrypted database table corresponds to a plurality of users, each user corresponds to a user key, and the encryption key of the to-be-encrypted database table corresponds to one user key; the user key of each user is associated with the encryption key through the decryption parameter of each user, and the decryption parameter of each user is determined according to the user key of each user and the encryption key; a first data key and a second data key of each data item in the database table to be encrypted are determined according to the encryption key; and according to the first data key and the second data key, based on a 3DES encryption algorithm, encryption processing is performed on each data item of the to-be-encrypted database table. According to the invention, the efficiency of database encryption can be improved, and high security and low key storage capacity of database encryption are realized.

Description

technical field [0001] The invention relates to the technical field of cryptography, in particular to a database encryption method and device. Background technique [0002] With the rapid development of various businesses of commercial banks, the amount of business data in the background database related to the business is also increasing exponentially. For data-intensive enterprises such as commercial banks, the importance of data has become increasingly prominent. On the one hand, data is the core of bank informatization and the key to ensuring the normal operation of banks; on the other hand, data is a valuable resource and wealth of banks. The mining, analysis and utilization of data will create greater wealth for banks. And it is precisely because the data is so important that it becomes a very clear target for attackers. In order to ensure the security of commercial bank databases, the first thing that needs to be understood is the source of security threats. Threats...

AI Technical Summary

Problems solved by technology

In the traditional field-based database encryption method, the key is statically generated. The disadvantages of this encryption method are obvious: (1) the encryption / decryption efficiency is low; (2) if a single key is used to repeatedly encrypt each field, the Ciphertext search attack is vulnerable; (3) If the data elements of each field are encrypted with different keys, the number of keys = the number of records × the number of fields, the number is very surprising and difficult to manage

[0009] For the above problems, no effective solutions have been proposed so far

Images