Security protection providing system and method for database

Abstract

The invention provides a security protection providing system and method for a database. The system comprises an access module, an access control module, a database file protection module, an encryption and decryption module, a hard disk copy prevention module and a log recording module; the access module allows / forbids access to the database; the access control module allows legal applications and tools to be connected with the database and forbids the connection of database with other applications and tools; the database file protection module protects the database files from being deleted, copied, moved and the like; the encryption and decryption module encrypts files exported from the database by legal applications and tools, and, when encrypted data files are imported, decrypts the encrypted data files first and then imports the decrypted files into the database; the hard disk copy prevention module forbids the disk-level backup of the hard disk; the log recording module records all operations on the database, operation time, operation types, operators and the like. According to the system and the method, security protection is provided for the database, the protection is comprehensive, the expandability is good, the security is high, and the system resource occupancy rate and the user experience is good.

Description

technical field [0001] The present invention relates to a system and method for providing security protection for a database. For a database server, through operating system network drivers, file drivers, SPI, HOOK and encryption and decryption technologies, the protection of data in the database can be realized to avoid database data leakage possible. [0002] Abbreviations and explanations: [0003] SPI: Windows Network Access Control Technology [0004] HOOK: Windows hook technology [0005] IP: computer network access address [0006] Network driver: based on the network transmission driver on winodws / linux. [0007] Ghost: Disk Backup Tool Background technique [0008] With the continuous development of enterprise informatization, enterprises build information systems: business systems, office systems, financial systems, etc., and the data of these systems are stored in databases, many of which have sensitive information databases for corporate customers. The data...

AI Technical Summary

Problems solved by technology

[0010] 1. Cannot control the computer accessing the database

Any computer can connect to the database, and the connection of illegal computers cannot be prevented

[0011] 2. Any application or tool can connect to the database, causing illegal applications or tools to obtain data information from the database

The security of the database file is not guaranteed

[0014] 5. The operation of the database has been audited (the audit at the network level is not the audit function provided by the database itself), but the audit is only an after-the-fact means, and it cannot be blocked in time when dangerous operations are found

Images