Web system-oriented data encryption and decryption method and system

Abstract

The data encryption and decryption method comprises the steps that a Web filter intercepts a data submission HTTP request submitted by a client, inquires data encryption and decryption configuration information, determines which data in submitted data needs to be encrypted, calls a password component to encrypt the data needing to be encrypted, and forms a new data submission HTTP request; a Web filter intercepts a data query HTTP request submitted by a client, queries data encryption and decryption configuration information, determines which data in query data of the query request needs to be encrypted, and then calls a password component to encrypt the data needing to be encrypted to form a new data query HTTP request; the Web filter intercepts an HTTP response returned by the Web system, queries data encryption and decryption configuration information, determines which data in the HTTP response needs to be decrypted, and calls a password component to decrypt the data needing to be decrypted; searchable data are firstly subjected to word segmentation, and then data blocks subjected to word segmentation are encrypted.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a data encryption and decryption method and system oriented to a Web system. Background technique [0002] For network application systems, data security is very important. The most effective technical means to protect the data stored in the application system (such as data in the database) is to encrypt the stored data, and then encrypt the encrypted data when the data needs to be used. Data decryption. [0003] Although data encryption is the most effective technical means to protect data security, there are the following problems in its practical application: First, a large number of systems have been deployed, adding data encryption and decryption functions to these deployed systems, This involves code modification and system redeployment, which is very troublesome or difficult for many system operators; second, cryptography is a relatively professional technolo...

AI Technical Summary

Problems solved by technology

[0003] Although data encryption is the most effective technical means to protect data security, there are the following problems in its practical application: First, a large number of systems have been deployed, adding data encryption and decryption functions to these deployed systems, This involves code modification and system redeployment, which is very troublesome or difficult for many system operators; second, cryptography is a relatively professional technology, and most technicians are not familiar with it. There are relatively few technical personnel, which increases the difficulty of adding data encryption and decryption functions in the system; third, there are usually many codes (such as Web pages) involving data operations (such as reading and writing), and the data encryption and decryption codes are distributed among Different parts of the program and different web pages of the system add difficulty to the maintenance of data encryption and decryption codes; fourth, different encryption and decryption codes must be written for different systems, and the codes cannot be reused, resulting in waste of resources; fifth is , data encryption may affect the searchability of data; sixth, data encryption and decryption usually affect the speed of data storage and acquisition

Images