Data management method, device and system

Abstract

The invention discloses a data management method, and the method comprises the steps that a client can determine a ciphertext index value according to the information of plaintext data, and transmits the ciphertext index value to cloud equipment; the cloud device can establish a corresponding relationship between the ciphertext index value and the information of the storage position of the ciphertext data corresponding to the plaintext data in an index structure (such as B-tree), or search the storage position of the ciphertext data from the index structure according to the ciphertext index value, and then execute the operation on the ciphertext data. In the application, the ciphertext index value is used for replacing a field in the data column to serve as a key value in a conventional ordered index to realize search of the ciphertext data, and sequence-based query can be performed on the ciphertext data stored in the table without adding a data table field, so that the space occupied by expansion of the table for storing the ciphertext data is reduced, and the search efficiency of the ciphertext data is improved. And the expandability of the stored data in the cloud equipment is improved.

Description

technical field [0001] The present application relates to the technical field of databases, and in particular, to a method, device and system for data management. Background technique [0002] Traditional databases can use permissions to ensure the security of the database, but relying on permissions to manage the database may have the problem of internal managers tampering with data. In addition, due to the open environment and the fuzzification of network boundaries, user data is more fully exposed to attackers throughout the business process. Whether it is in the process of transmission, storage, operation and maintenance, or operation, it may suffer from attackers. attack. [0003] For cloud database scenarios, in terms of ensuring user data security, a solution for fully encrypted database is proposed. The solution of fully encrypted database means that user data is encrypted by the user key on the client side, and then the encrypted ciphertext data is stored in the d...

AI Technical Summary

Problems solved by technology

[0004] At present, the encryption scheme of user data usually adopts symmetric encryption. Symmetric encryption cannot guarantee the sequential operation of encrypted data based on sequence. Add a new data column to store the data that requires order preservation, which will cause the expansion of the data column used to store data with order preservation requirements, reducing the scalability of the database

Images