Database-based encrypted storage system and method

Abstract

The invention discloses an encrypted storage system and method based on a database, and belongs to the technical field of data security encrypted storage. The system comprises a data acquisition module, a user data importance degree judgment module, an encryption storage management module and a security authentication module, wherein the output end of the data acquisition module is connected with the input end of the user data importance degree judgment module; the output end of the user data importance degree judgment module is connected with the input end of the encryption storage management module; and the output end of the encryption storage management module is connected with the input end of the security authentication module. The invention further provides a method for implementing the system, the data consistency can be effectively achieved, and the safety and reliability of database data encryption are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data security encryption storage, and in particular to an encryption storage system and method based on a database. Background Art

[0002] Information security is one of the important factors that affect the process of informatization. In recent years, with the development of computer and Internet technology, big data can be used to easily analyze user behavior when people store data. Various databases have emerged one after another. All databases store private data that cannot be made public and need to be properly stored. However, it is impossible to reasonably use user characteristic behaviors to judge the importance of data. All user data is encrypted and stored, resulting in a waste of storage space and increasing the difficulty for users to find important data, making it difficult for users to effectively retrieve data. Summary of the invention

[0003] The purpose of the present invention is to provide a database-based encryption storage system and method to solve the problems raised in the above background technology.

[0004] In order to solve the above technical problems, the present invention provides the following technical solutions: a database-based encryption storage method, the method comprising:

[0005] S1. Collect all user data stored in the target computer, sort out the user behaviors generated before storing each user data; among the user behaviors generated before storage, capture and extract user characteristic behaviors associated with the user data;

[0006] S2. Establish a user characteristic behavior list, record the user behavior generated when the user stores data, match it with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behavior, and judge the importance of the user data according to the comprehensive score of the stored data; the user data includes important user data and ordinary user data;

[0007] S3, using the first key to encrypt the important data to generate encrypted data, using the second key to encrypt the first key to generate an encryption key, storing the encrypted important user data in the database, and storing the common user data in the database list without performing a separate encryption operation;

[0008] S4. Set user query and access rights.

[0009] Further, step S1 includes:

[0010] S1-1, collecting all user data stored in the target computer, and recording the user behavior before the user data is stored;

[0011] S1-2. Among all the recorded user behaviors, each user behavior generated by the same type of data is marked as a related user behavior;

[0012] S1-3, integrating the related user behaviors of the same type of data, obtaining a set of related user behavior records L = {L1, L2, L3, ..., L k}, where k is the type of associated user behavior in each associated user behavior record set, and each associated user behavior record set corresponds to a user data type;

[0013] S1-4. Calculate the proportion A of each associated user behavior in the associated user behavior record set based on the plurality of associated user behavior record sets.

[0014] Further, step S1-4 includes:

[0015] S1-4-1. A matrix is ​​constructed by the associated user behavior record set, and the L1 norm of each column vector in the matrix is ​​calculated according to the following formula:

[0016]

[0017] Among them, ||A i , j||1 is the L1 norm of each column vector; A ij is the element in the matrix; i is the row of the matrix; j is the column of the matrix; m is the number of rows of the matrix;

[0018] S1-4-2. Calculate the L1 norm of the matrix according to the following formula:

[0019]

[0020] Among them, ||A||1 is the L1 norm of the matrix; is the maximum value of the L1 norm of all column vectors; n is the number of columns in the matrix;

[0021] S1-4-3. Calculate the proportion A of each type of related user behavior according to the following formula:

[0022]

[0023] S1-4-4. According to the weight of each type of associated user behavior, the average weight Aavg of each type of associated user behavior in the associated user behavior record set is calculated according to the following formula:

[0024]

[0025] Where k is the type of associated user behavior in each associated user behavior record set;

[0026] S1-4-5. Compare A and Aavg. If A ≥ Aavg, determine that the associated user behavior is a user characteristic behavior; if A < Aavg, determine that the associated behavior is not a user characteristic behavior.

[0027] Further, step S2 includes:

[0028] S2-1. Establish a user characteristic behavior list. When storing user data, record the generated user behavior, and match the generated user behavior with the user characteristic behavior list. If the user behavior generated when storing user data matches the user characteristic behavior list, record the proportion of the corresponding user characteristic behavior; if not, do not record.

[0029] S2-2. According to the recorded proportion of user characteristic behaviors, calculate the weight Z of each user characteristic behavior generated when the user stores data according to the following formula:

[0030] Z = ∑nA

[0031] Where Z is the weight of each user characteristic behavior; n is the number of occurrences of each user characteristic behavior when the user stores data; A is the proportion of each user characteristic behavior.

[0032] S2-3. According to the weights of each user characteristic behavior generated when the user stores data, calculate the comprehensive score Y of the data to be stored by the user according to the following formula:

[0033] Y = Z1 + Z2 + Z3 + … + Zp

[0034] Where p is the number of user characteristic behaviors generated when the user stores data.

[0035] S2-4. Set a comprehensive score threshold H. When the comprehensive score Y of the data to be stored by the user is greater than or equal to the comprehensive score threshold H, regard the user data as important user data; when the comprehensive score Y of the data to be stored by the user is less than the comprehensive score threshold H, regard the user data as ordinary user data.

[0036] Further, step S4 includes:

[0037] S4-1. The user provides login credentials for security authentication. The system matches the login credentials provided by the user with the stored user credentials. The user who passes the security authentication only has the permission to access and view ordinary data in the database.

[0038] S4-2. According to the user characteristic behavior list, the behavior generated when the user stores data is matched with the user characteristic behavior list. Users who have passed the security authentication and have the user characteristic behavior have the authority to access and view the encrypted data in the database;

[0039] S4-3. Use the encrypted data access interface provided by the system to store, read and update the encrypted data.

[0040] In order to better implement the above method, an encrypted storage system based on a database is also proposed. The encrypted storage system includes a data acquisition module, a user data importance judgment module, an encrypted storage management module and a security authentication module;

[0041] The data collection module is used to collect all user data stored in the target computer, sort out the user's behaviors before storing each user data; and capture and extract the user's characteristic behaviors associated with the user data among the user behaviors generated before storage;

[0042] A user data importance judgment module is used to establish a user characteristic behavior list, record the user behavior generated when the user stores data, match it with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behavior, and judge the importance of the user data according to the comprehensive score of the stored data; the user data includes important user data and ordinary user data;

[0043] An encryption storage management module, used to encrypt important user data using a first key to generate encrypted data, encrypt the first key using a second key to generate an encryption key, store the encrypted important user data in a database, and store common user data in a database list without performing encryption operations separately;

[0044] The security authentication module is used to set user query and access rights and identify the user. Furthermore, the data collection module includes a collection unit, a recording unit and a user feature behavior extraction unit;

[0045] A collection unit, used to collect all user data stored in the database;

[0046] A recording unit, used to record user behaviors generated by the user before storing each user data;

[0047] The user characteristic behavior extraction unit is used to extract user behaviors with special characteristics from various user behaviors obtained in the recording unit.

[0048] Further, the encryption storage management module includes a key generation storage unit, a key recovery unit, a data encryption processing unit, and a data backup recovery unit;

[0049] A key generation storage unit is used to generate and store keys using a common encryption algorithm library, a cryptographic algorithm and a random number generation algorithm;

[0050] A key recovery unit, used to recover the key when it is lost or damaged;

[0051] A data encryption processing unit, used to encrypt data when storing it and decrypt the ciphertext when reading it;

[0052] The data backup and recovery unit is used to perform regular backup and recovery of the database.

[0053] Furthermore, the security authentication module includes a user authentication unit, a permission control unit and a security policy management unit;

[0054] A user authentication unit, used to authenticate the user;

[0055] A permission control unit, used to control the user's access rights to database data;

[0056] The security policy management unit is used to formulate security policies to ensure system security, monitor and record all security incidents, and issue alarms and responses.

[0057] Compared with the prior art, the present invention has the following beneficial effects:

[0058] 1. The present invention can process the data before storing it in the database, and encrypt the processed data as important user data and store it in the database;

[0059] 2. The present invention can utilize the double encryption method of the first key and the second key to effectively improve the security and reliability of database data encryption;

[0060] 3. The present invention can store encrypted data and encryption keys only in a database, which can effectively ensure data consistency. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0062] Figure 1 A schematic diagram of the structure of a database-based encryption storage system according to the present invention;

[0063] Figure 2 It is a schematic diagram of the steps of a database-based encryption storage method of the present invention. DETAILED DESCRIPTION

[0064] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0065] See also Figure 1-Figure 2 The present invention provides a technical solution: a database-based encryption storage method, the method comprising:

[0066] S1. Collect all user data stored in the target computer, sort out the user behaviors generated before storing each user data; among the user behaviors generated before storage, capture and extract user characteristic behaviors associated with the user data;

[0067] S2. Establish a user characteristic behavior list, record the user behavior generated when the user stores data, match it with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behavior, and judge the importance of the user data according to the comprehensive score of the stored data; the user data includes important user data and ordinary user data;

[0068] S3, using the first key to encrypt the important data to generate encrypted data, using the second key to encrypt the first key to generate an encryption key, storing the encrypted important user data in the database, and storing the common user data in the database list without performing a separate encryption operation;

[0069] S4. Set user query and access rights.

[0070] Further, step S1 includes:

[0071] S1-1, collecting all user data stored in the target computer, and recording the user behavior before the user data is stored;

[0072] S1-2. Among all the recorded user behaviors, each user behavior generated by the same type of data is marked as a related user behavior;

[0073] S1-3, integrating the related user behaviors of the same type of data, obtaining a set of related user behavior records L = {L1, L2, L3, ..., L k}, where k is the type of associated user behavior in each associated user behavior record set, and each associated user behavior record set corresponds to a user data type;

[0074] S1-4. Calculate the proportion A of each associated user behavior in the set of associated user behavior records according to the set of several associated user behavior records.

[0075] Further, step S1-4 includes:

[0076] S1-4-1. Construct a matrix from the set of associated user behavior records, and calculate the L1 norm of each column vector in the matrix according to the following formula:

[0077]

[0078] where ||A i , j||1 is the L1 norm of each column vector; A ij is an element in the matrix; i is the row of the matrix; j is the column of the matrix; m is the number of rows of the matrix;

[0079] S1-4-2. Calculate the L1 norm of the matrix according to the following formula:

[0080]

[0081] where ||A||1 is the L1 norm of the matrix; is the maximum value of all column vector L1 norms; n is the number of columns of the matrix;

[0082] S1-4-3. Calculate the proportion A of each type of associated user behavior according to the following formula:

[0083]

[0084] S1-4-4. Calculate the average proportion Aavg of each type of associated user behavior in the set of associated user behavior records according to the proportion of each type of associated user behavior and the following formula:

[0085]

[0086] where k is the type of associated user behavior in each set of associated user behavior records;

[0087] S1-4-5. Compare A and Aavg. If A ≥ Aavg, determine that the associated user behavior is a user characteristic behavior; if A < Aavg, determine that the associated behavior is not a user characteristic behavior.

[0088] Further, step S2 includes:

[0089] S2-1. Establish a user characteristic behavior list. When the user stores data, record the generated user behavior and match the generated user behavior with the user characteristic behavior list. If the user behavior generated when the user stores data matches the user characteristic behavior list, record the proportion of the corresponding user characteristic behavior; if not, do not record;

[0090] S2-2. According to the proportion of the recorded user characteristic behaviors, the weight Z of each user characteristic behavior generated when the user wants to store data is calculated according to the following formula:

[0091] Z=∑nA

[0092] Among them, Z is the weight of each user's characteristic behavior; n is the number of times each user's characteristic behavior appears when the user stores data; A is the proportion of each user's characteristic behavior;

[0093] S2-3. According to the weights of each user's characteristic behaviors generated when the user wants to store data, the comprehensive score Y of the data to be stored by the user is calculated according to the following formula:

[0094] Y=Z1+Z2+Z3+…+Zp

[0095] Among them, p is the number of user characteristic behaviors generated when the user stores data;

[0096] S2-4. Set a comprehensive score threshold H. When the comprehensive score Y of the data to be stored by the user is greater than or equal to the comprehensive score threshold H, the user data is regarded as important user data. When the comprehensive score Y of the data to be stored by the user is less than the comprehensive score threshold H, the user data is regarded as ordinary user data.

[0097] Further, step S4 includes:

[0098] S4-1. The user provides login credentials for security authentication. The system matches the login credentials provided by the user with the stored user credentials. Users who pass the security authentication only have the authority to access and view ordinary data in the database;

[0099] S4-2. According to the user characteristic behavior list, the behavior generated when the user stores data is matched with the user characteristic behavior list. Users who have passed the security authentication and have the user characteristic behavior have the authority to access and view the encrypted data in the database;

[0100] S4-3. Use the encrypted data access interface provided by the system to store, read and update the encrypted data.

[0101] In order to better implement the above method, an encrypted storage system based on a database is also proposed. The encrypted storage system includes a data acquisition module, a user data importance judgment module, an encrypted storage management module and a security authentication module;

[0102] The data collection module is used to collect all user data stored in the target computer, sort out the user's behaviors before storing each user data; and capture and extract the user's characteristic behaviors associated with the user data among the user behaviors generated before storage;

[0103] A user data importance judgment module is used to establish a user characteristic behavior list, record the user behavior generated when the user stores data, match it with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behavior, and judge the importance of the user data according to the comprehensive score of the stored data; the user data includes important user data and ordinary user data;

[0104] An encryption storage management module, used to encrypt important user data using a first key to generate encrypted data, encrypt the first key using a second key to generate an encryption key, store the encrypted important user data in a database, and store common user data in a database list without performing encryption operations separately;

[0105] The security authentication module is used to set user queries and access permissions and identify users.

[0106] Furthermore, the data collection module includes a collection unit, a recording unit and a user characteristic behavior extraction unit;

[0107] A collection unit, used to collect all user data stored in the database;

[0108] A recording unit, used to record user behaviors generated by the user before storing each user data;

[0109] The user characteristic behavior extraction unit is used to extract user behaviors with special characteristics from various user behaviors obtained in the recording unit.

[0110] Further, the encryption storage management module includes a key generation storage unit, a key recovery unit, a data encryption processing unit, and a data backup recovery unit;

[0111] A key generation storage unit is used to generate and store keys using a common encryption algorithm library, a cryptographic algorithm and a random number generation algorithm;

[0112] A key recovery unit, used to recover the key when it is lost or damaged;

[0113] A data encryption processing unit, used to encrypt data when storing it and decrypt the ciphertext when reading it;

[0114] The data backup and recovery unit is used to perform regular backup and recovery of the database.

[0115] Furthermore, the security authentication module includes a user authentication unit, a permission control unit and a security policy management unit;

[0116] A user authentication unit, used to authenticate the user;

[0117] A permission control unit, used to control the user's access rights to database data;

[0118] The security policy management unit is used to formulate security policies to ensure system security, monitor and record all security incidents, and issue alarms and responses.

[0119] In this embodiment, the file data in a computer database is taken as an example, all the file data stored in the computer is obtained, and the user behaviors obtained by recording the behaviors before the file data is stored include the number of file downloads, the number of file clicks, the number of file edits, the number of file forwardings, and the number of file browsings. The above five user behaviors are used as the associated user behaviors of the file data, and the user behaviors of the file data are integrated to obtain the associated user behavior record set as follows:

[0120] Set 1: L = {4, 7, 6, 3, 2}; Set 2: L = {5, 4, 3, 1, 4}; Set 3: L = {7, 9, 4, 2, 3}; Set 4: L = {0, 4, 2, 0, 1}; According to the set, the matrix is ​​obtained, and the L1 norm of the number of file downloads is 17; the L1 norm of the number of file clicks is 24; the L1 norm of the number of file edits is 15; the L1 norm of the number of file forwarding is 6; the L1 norm of the number of file browsing is 10; the L1 norm of the matrix is ​​the maximum value of the column vector, which is 24; the proportion of each user behavior is never obtained: 0.7; 1; 0.625; 0.25; 0.42; and the average proportion of the associated user behavior is 0.599. Through analysis, it is found that the number of file downloads, the number of file clicks, and the number of file edits are all user characteristic behaviors of file data.

[0121] The user behaviors generated by the existing file data to be stored by the user include file download times, file click times, file edit times, file forward times and file browse times, and the corresponding times are 8, 13, 10, 2 and 5 respectively; the comprehensive score of the file data is 24.85; the comprehensive score threshold is set to 20; the file data is determined to be important user data, the file data is encrypted with a first key to generate encrypted data, and then the first key is encrypted with a second key to generate an encryption key; the encrypted file data is stored in a database.

[0122] When a user wants to access data in a query database, security authentication is first performed. Users who have passed the security authentication can access ordinary data in the query database. The behavior generated when the user stores data is matched with the constructed user characteristic behavior list. Users who have passed the security authentication and have user characteristic behaviors have the authority to access and view encrypted data in the database. The system continuously stores, reads and updates encrypted data.

[0123] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0124] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A database-based encryption storage method, characterized in that: The method includes: S1. Collect all user data stored in the target computer, and sort out the behaviors generated by the user before storing each piece of the user data; Among the user behaviors generated before storage, capture and extract the user characteristic behaviors associated with the user data; S2. Establish a user characteristic behavior list, record the user behaviors generated when the user stores data, match with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behaviors, and judge the importance degree of the user data through the comprehensive score of the stored data; the user data includes important user data and ordinary user data; S3. Use the first key to encrypt the important data to generate encrypted data, use the second key to encrypt the first key to generate an encrypted key, store the encrypted important user data in the database, and store the ordinary user data in the database list without performing a separate encryption operation; S4. Set user query and access permissions.

2. The method for encrypted storage based on a database according to claim 1, characterized in that: The step S1 includes: S1-1. Collect all user data stored in the target computer and record the user behaviors before the user data is stored; S1-2. Among all the recorded user behaviors, perform the same type marking on each user behavior generated by the same type of data, and regard the marked same type of user behaviors as an associated user behavior; S1-3, integrating the related user behaviors of the same type of data, obtaining a set of related user behavior records L = {L1, L2, L3, ..., L k }, where k is the type of associated user behavior in each associated user behavior record set, and each associated user behavior record set corresponds to a user data type; S1-4. According to the several sets of associated user behavior records, calculate the proportion A of each associated user behavior in the set of associated user behavior records.

3. The method for encrypted storage based on a database according to claim 2, characterized in that: The step S1-4 includes: S1-4-1. Construct a matrix through the set of associated user behavior records, and calculate the L1 norm of each column vector in the matrix according to the following formula: Among them, ||A i , j||1 is the L1 norm of each column vector; A ij is the element in the matrix; i is the row of the matrix; j is the column of the matrix; m is the number of rows of the matrix; S1-4-2. Calculate the L1 norm of the matrix according to the following formula: Among them, ||A||1 is the L1 norm of the matrix; is the maximum value of the L1 norm of all column vectors; n is the number of columns in the matrix; S1-4-3. Calculate the proportion A of each type of associated user behavior according to the following formula: S1-4-4. According to the proportion of each type of associated user behavior, calculate the average proportion Aavg of each type of associated user behavior in the set of associated user behavior records according to the following formula: where k is the type of associated user behavior in each set of associated user behavior records; S1-4-5. Compare A and Aavg. If A≥Aavg, judge that the associated user behavior is a user characteristic behavior; if A<Aavg, judge that the associated behavior is not a user characteristic behavior.

4. The method for encrypted storage based on a database according to claim 1, characterized in that: The step S2 includes: S2-1. Establish a user characteristic behavior list. When the user stores data, record the generated user behaviors, and match the generated user behaviors with the user characteristic behavior list. If the user behaviors generated when the user stores data match the user characteristic behavior list, record the proportion of the corresponding user characteristic behavior; if not, do not record; S2-2. According to the recorded proportion of the user characteristic behavior, calculate the weight Z of each user characteristic behavior generated when the user stores data according to the following formula: Z = ∑nA where Z is the weight of each user characteristic behavior; n is the number of times each user characteristic behavior appears when the user stores data; A is the proportion of each user characteristic behavior; S2-3. According to the weights of each user's characteristic behaviors generated when the user wants to store data, the comprehensive score Y of the data to be stored by the user is calculated according to the following formula: Y=Z1+Z2+Z3+…+Zp Among them, p is the number of user characteristic behaviors generated when the user stores data; S2-4. Set a comprehensive score threshold H. When the comprehensive score Y of the data to be stored by the user is greater than or equal to the comprehensive score threshold H, the user data is regarded as important user data. When the comprehensive score Y of the data to be stored by the user is less than the comprehensive score threshold H, the user data is regarded as ordinary user data.

5. The method for encrypted storage based on a database according to claim 1, characterized in that: The step S4 comprises: S4-1. The user provides login credentials for security authentication. The system matches the login credentials provided by the user with the stored user credentials. Users who pass the security authentication only have the authority to access and view ordinary data in the database; S4-2. According to the user characteristic behavior list, the behavior generated when the user stores data is matched with the user characteristic behavior list. Users who have passed the security authentication and have the user characteristic behavior have the authority to access and view the encrypted data in the database; S4-3. Use the encrypted data access interface provided by the system to store, read and update the encrypted data.

6. A database-based encrypted storage system using the database-based encrypted storage method according to any one of claims 1 to 5, characterized in that: The encrypted storage system includes a data acquisition module, a user data importance determination module, an encrypted storage management module and a security authentication module; The data collection module is used to collect all user data stored in the target computer and sort out the user's behavior before storing each user data; Capturing and extracting user characteristic behaviors associated with the user data from the user behaviors generated before storage; The user data importance judgment module is used to establish a user characteristic behavior list, record the user behavior generated when the user stores data, match it with the user characteristic behavior list, calculate the comprehensive score of the data to be stored by the user according to the matched user characteristic behavior, and judge the importance of the user data according to the comprehensive score of the stored data; the user data includes important user data and ordinary user data; The encryption storage management module is used to encrypt important user data using a first key to generate encrypted data, encrypt the first key using a second key to generate an encryption key, store the encrypted important user data in a database, and store common user data in a database list without performing encryption operations separately; The security authentication module is used to set user query and access rights and identify the user.

7. The database-based encrypted storage system according to claim 6, characterized in that: The data collection module includes a collection unit, a recording unit and a user characteristic behavior extraction unit; The collection unit is used to collect all user data stored in the database; The recording unit is used to record the user behavior generated before the user stores each user data; The user characteristic behavior extraction unit is used to extract user behaviors with special characteristics from various user behaviors obtained in the recording unit.

8. The database-based encrypted storage system according to claim 6, characterized in that: The encryption storage management module includes a key generation storage unit, a key recovery unit, a data encryption processing unit, and a data backup recovery unit; The key generation storage unit is used to generate and store keys using a common encryption algorithm library, a cryptographic algorithm and a random number generation algorithm; The key recovery unit is used to recover the key when the key is lost or damaged; The data encryption processing unit is used to encrypt data when storing data and decrypt ciphertext when reading data; The data backup and recovery unit is used to perform regular backup and recovery of the database.

9. The database-based encryption storage system according to claim 6, characterized in that: The security authentication module includes a user authentication unit, a permission control unit and a security policy management unit; The user authentication unit is used to authenticate the user; The permission control unit is used to control the user's access rights to the database data; The security policy management unit is used to formulate security policies to ensure system security, monitor and record all security events, and issue alarms and respond.

Images