Method for searching data base ciphertext

Abstract

The invention is a method for realizing fast cryptograph inquiry in database by auxiliary data structure, comprising the steps of establishing an auxiliary data structure, maintaining the auxiliary data structure and making cryptograph inquiry and its technical key points: by establishing a list-stored auxiliary data structure in the database for the fields to realize cryptograph inquiry, inserting the maintaining operation on the auxiliary data structure in the daily operation of the database and using the auxiliary data structure to inquire the cryptographic fields. The invention makes the database system originally not supporting cryptograph inquiry able to make high efficiency cryptograph inquiry on the cryptographic fields and can select encryption algorithms and secret keys by users and can assure the consistency of the whole database system and the accuracy and integrity of the cryptograph searching and other database operations. The invention can be applied to the database systems of the governments, armies and large-scale enterprises to be able to improve the system safety and strengthen the system practicality.

Description

technical field [0001] The invention belongs to the fields related to computer database and information security. It specifically relates to a method for realizing efficient conditional query on encrypted fields in a database. Background technique [0002] Due to the prominent security issues, more and more databases encrypt sensitive data to ensure its security. Since most of the current database management systems are imported from abroad, but firstly, the main foreign database management systems that support ciphertext queries are not exported to China, and most of the source codes of foreign database management systems are not open, so there may be security backdoors and loopholes; secondly, for To improve efficiency, more and more enterprises hand over software and data to special organizations for management and maintenance. If the key management and encryption and decryption processes are implemented by the database management system, the power of the database manage...

AI Technical Summary

Problems solved by technology

This method can use a high-encryption-strength algorithm, but since the index file is not part of the database, the database management system cannot implement concurrency control and fault recovery on it, so the consistency between the database and the index file cannot be guaranteed, and cannot be fully encrypted. Using the query optimization mechanism of the original database management system, the query efficiency is low, and the function and efficiency are greatly affected when the compound condition query involving the range query of the ciphertext field is realized.

Images