Method, system and terminal for encrypting data by bypass audit compatible with extended main secret key

Abstract

The invention belongs to the technical field of data processing, and discloses a data encryption method and system compatible with a bypass audit expansion main secret key, and a terminal. And on the basis of analyzing standard TLS protocol data, calculating a main key in an extended key calculation mode, deducing a symmetric key according to the main key, and decrypting subsequent encrypted traffic by using the symmetric key. And a symmetric key derivation method in a general main key calculation mode of the TLS is integrated to realize decryption and auditing of the TLS encrypted database traffic in a non-forward security encryption suite configuration item. According to the TLS traffic decryption method under the non-forward security encryption suite, the decrypted plaintext is transmitted to the protocol analysis module, SQL statement auditing and standardized output are achieved, and the auditing capability of a database auditing system is effectively expanded.

Description

technical field [0001] The invention belongs to the technical field of data processing, and in particular relates to a method, system and terminal for encrypting data with a bypass audit compatible extended master key. Background technique [0002] At present, the database is the core information asset of the enterprise, and the database audit product has received unprecedented attention. The database audit system is a database security audit system based on database protocol analysis and SQL statement restoration technology through bypass collection of database network traffic. For security reasons, more and more client programs / Web services and other applications access the database by default using TLS encrypted connection access. Therefore, auditing the encrypted traffic accessing the database brings a new audit direction to the database auditing system. [0003] The main process of auditing the bypass mirrored database traffic in the existing database auditing system ...

AI Technical Summary

Problems solved by technology

[0009] (2) More and more standard TLS encrypted traffic uses the new method of calculating the extended master key to calculate the master key. Due to the change of the secret key calculation method, the original master key calculation method cannot calculate the master key of the extended method , so the symmetric key cannot be deduced, so the subsequent encrypted traffic cannot be decrypted, resulting in the TLS encrypted traffic under the extended master key calculation method, because the traffic cannot be decrypted and the relevant operations on the database cannot be audited

[0011] However, the original master key calculation method cannot calculate the master key of the extended master key calculation method, resulting in encrypted traffic under the extended key calculation method, which cannot be audited because it cannot be decrypted

Images