MySQL transparent data encryption method and device based on cipher machine equipment

Abstract

The embodiment of the invention discloses a MySQL transparent data encryption and decryption method and device based on cryptographic machine equipment, and the method comprises the steps: modifying statements and functions related to encryption and decryption in MySQL into statements and functions for calling a domestic SM4 cryptographic algorithm according to the interface function characteristics of the cryptographic machine equipment supporting the domestic SM4 cryptographic algorithm; configuring related files of cryptographic machine equipment supporting the domestic SM4 cryptographic algorithm, wherein the related files comprise a header file, a configuration file and a dynamic link library file; modifying a CMakeLists file in the MySQL (Structured Query Language); and calling a domestic SM4 cryptographic algorithm in cryptographic machine equipment supporting the domestic SM4 cryptographic algorithm, and realizing encryption and decryption of MySQL transparent data through an encryption and decryption key generated by an external security module. According to the method and device, localization of a mainstream database encryption algorithm is achieved, the database read-write efficiency is improved, instant deployment for services is achieved, modification of an original database of the MySQL database is little, and forward compatibility is good.

Description

technical field [0001] The invention relates to the field of transparent data encryption and decryption, in particular to a MySQL transparent data encryption method and device based on cipher machine equipment. Background technique [0002] With the development of the information age, the amount of data is increasing exponentially, and the database is a very mature method for managing data, so it has also been applied to more and more fields. However, with the emergence of issues related to data security and privacy protection, the security application of data has become an issue that people pay more and more attention to. Under normal circumstances, the data managed by the database is stored in plain text on the hardware disk, so there will be certain security holes, that is, if the hardware disk of the database is stolen, it will cause data leakage. Therefore, some mainstream databases provide transparent data encryption and decryption methods to ensure safe storage of da...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem of algorithm security and credibility caused by the data protection encryption algorithm used by the mainstream database in the prior art, which is generally not a national secret algorithm, and the problem of the decline in the read and write performance of the database caused by the existing encryption algorithm, the present invention is proposed

Images