Quantum encryption method, quantum encryption server and quantum encryption system

Abstract

The invention discloses a quantum encryption method, a quantum encryption server and a quantum encryption system for a database. The method comprises the steps of obtaining a target strategy from a preset strategy platform, wherein the preset strategy platform is configured to provide a strategy for performing quantum encryption processing on a database; and encrypting the target strategy to obtain an encrypted target strategy, and backing up the encrypted target strategy. And performing quantum encryption processing on the database according to the target strategy or the encryption target strategy. Therefore, through the quantum key distribution technology, the encryption of the database is realized, and the encryption process is safer. Moreover, since the quantum encryption server performs real-time backup on the encryption target strategy, the strategy can be recovered and the quantum encryption processing of the database can be continued even if the quantum encryption server or the strategy platform fails.

Description

Technical Field

[0001] The present application relates to the field of quantum programming, and more specifically, to a quantum encryption method for a database, a quantum encryption server, and a quantum encryption system. Background Art

[0002] In the digital world, data is becoming increasingly important. In related technologies, database encryption is usually used to protect data. However, once the system is interrupted, the corresponding policy cannot be obtained, resulting in data encryption failure and affecting data security. Summary of the invention

[0003] The present application provides a quantum encryption method, a quantum encryption server and a quantum encryption system for a database.

[0004] The embodiment of the present application provides a quantum encryption method for a database, the method comprising:

[0005] Acquire a target policy from a preset policy platform, where the preset policy platform is configured to provide a policy for performing quantum encryption processing on the database;

[0006] Encrypting the target policy to obtain an encrypted target policy, and backing up the encrypted target policy;

[0007] The quantum encryption process is performed on the database according to the target policy or the encryption target policy.

[0008] In this way, the embodiment of the present application provides a quantum encryption method for a database. First, the quantum encryption server obtains the target policy from the preset policy platform, and the preset policy platform is configured to provide a strategy for quantum encryption processing of the database. Next, the quantum encryption server encrypts the target policy, obtains the encrypted target policy, and backs up the encrypted target policy. Finally, the quantum encryption server performs quantum encryption processing on the database according to the target policy or the encrypted target policy. In this way, the encryption of the database is achieved through quantum key distribution technology, making the encryption process more secure. In addition, since the quantum encryption server will back up the encrypted target policy in real time, even if the quantum encryption server or the policy platform fails, the strategy can be restored and the quantum encryption processing of the database can continue.

[0009] In some embodiments, the preset strategy platform is configured by the following steps:

[0010] Based on the preset deployment document, construct a policy platform corresponding to the preset deployment document;

[0011] Based on the preset platform configuration file, the policy platform is configured to obtain the preset policy platform.

[0012] Thus, firstly, based on the preset deployment document, a policy platform corresponding to the preset deployment document is constructed, and the deployment document provides detailed instructions and steps for constructing the policy platform. Then, based on the preset platform configuration file, the policy platform is configured to obtain the preset policy platform, and the preset platform configuration file includes all parameters and settings required for the operation of the preset policy platform. In this way, by configuring the deployed policy platform, it is ensured that the policy platform can work according to the expected requirements to provide a strategy for quantum encryption processing of the database.

[0013] In some implementations, configuring the policy platform based on a preset platform configuration file to obtain a preset policy platform includes:

[0014] According to the preset platform configuration file, a server identifier corresponding to the database is configured to obtain a temporary policy platform, wherein the server identifier is used to indicate an application server that performs quantum encryption processing on the database;

[0015] Determining the sensitive tables and sensitive fields of the database according to the preset platform configuration file;

[0016] According to the preset platform configuration file, the strategy for performing quantum encryption processing on the sensitive table and the sensitive field is configured to obtain the preset strategy platform.

[0017] In this way, first, according to the preset platform configuration file, the server identifier corresponding to the database is configured to obtain a temporary policy platform. The server identifier is used to indicate the application server that performs quantum encryption processing on the database. Next, according to the preset platform configuration file, the sensitive tables and sensitive fields of the database are determined. Finally, according to the preset platform configuration file, the policy for quantum encryption processing of sensitive tables and sensitive fields is configured to obtain the preset policy platform. In this way, a preset policy platform is obtained, which can provide policies for quantum encryption processing of the database. These policies define how to perform quantum-level encryption on sensitive data in the database and how to manage the encryption process. The preset policy platform is the basis for the quantum encryption server to perform quantum encryption processing.

[0018] In certain embodiments, the method further comprises:

[0019] A quantum encryption and decryption plug-in is constructed according to the obtained preset plug-in configuration file, wherein the preset plug-in configuration file includes a server identifier.

[0020] Thus, first, the quantum encryption server builds a quantum encryption and decryption plug-in according to the obtained preset plug-in configuration file, which includes all the parameters and settings required to build the plug-in, including the server identifier. In this way, the quantum encryption server can build and configure a quantum encryption and decryption plug-in that can perform quantum-level encryption and decryption on sensitive data in the database.

[0021] In some embodiments, obtaining the target strategy from a preset strategy platform includes:

[0022] The target policy is obtained from the preset policy platform according to the server identifier.

[0023] In this way, according to the server identifier, the quantum encryption server obtains the target policy from the preset policy platform. In this way, the quantum encryption server can ensure that only the correct application server obtains the appropriate encryption policy, thereby ensuring that the data in the database is encrypted at the quantum level according to the established security standards.

[0024] In some implementations, encrypting the target policy to obtain the encrypted target policy and backing up the encrypted target policy includes:

[0025] Based on the quantum encryption and decryption plug-in and the preset encryption algorithm, the target policy is encrypted to obtain the target encryption policy;

[0026] The target encryption policy is backed up at a target location.

[0027] Thus, first, based on the quantum encryption and decryption plug-in and the preset encryption algorithm, the quantum encryption server encrypts the target policy to obtain the target encryption policy. Then, the quantum encryption server backs up the target encryption policy at the target location. In this way, the quantum encryption server not only protects the security of the target policy, but also ensures the durability and reliability of the policy. In the event of any failure or data loss, the backed-up policy can be quickly restored to maintain business continuity and data security. In addition, by encrypting the target policy, it is ensured that even if the target encryption policy is leaked, the target policy remains secure.

[0028] In some embodiments, performing the quantum encryption process on the database according to the target strategy or the encryption target strategy includes:

[0029] When the application server corresponding to the server identifier runs normally, the database is subjected to the quantum encryption processing based on the quantum encryption and decryption plug-in and according to the target policy.

[0030] In this way, when the application server corresponding to the server ID is running normally, the quantum encryption server performs quantum encryption processing on the database based on the quantum encryption and decryption plug-in according to the target strategy. In this way, the quantum encryption server can ensure that the sensitive data in the database is protected at the quantum level, and can resist various security threats even during data transmission and storage, thereby enhancing the confidentiality of sensitive data in the database.

[0031] In some embodiments, the step of performing the quantum encryption processing on the database based on the quantum encryption and decryption plug-in and according to the target strategy includes:

[0032] Obtaining a quantum key from a key management platform connected to the preset strategy platform;

[0033] Based on the quantum encryption and decryption plug-in, the sensitive table and the sensitive field are encrypted according to the target strategy and the quantum key to implement the quantum encryption processing of the database.

[0034] In this way, first, the quantum encryption server obtains the quantum key from the key management platform connected to the preset policy platform. Then, based on the quantum encryption and decryption plug-in, the quantum encryption server encrypts sensitive tables and sensitive fields according to the target policy and quantum key to achieve quantum encryption of the database. In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level, and can resist various security threats even during data transmission and storage, thereby enhancing the confidentiality of sensitive data in the database.

[0035] In some embodiments, performing the quantum encryption process on the database according to the target strategy or the encryption target strategy includes:

[0036] In the case where the application server runs abnormally, the quantum encryption processing is performed on the database based on the quantum encryption and decryption plug-in and according to the encryption target strategy.

[0037] In this way, when the application server runs abnormally, the quantum encryption server performs quantum encryption processing on the database based on the quantum encryption and decryption plug-in according to the encryption target strategy. In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level when the application server runs abnormally, and can resist various security threats even during data transmission and storage.

[0038] In some trial modes, the step of performing the quantum encryption processing on the database based on the quantum encryption and decryption plug-in and according to the encryption target strategy includes:

[0039] Obtaining the encryption target policy;

[0040] Decrypting the encrypted target policy to obtain the target policy;

[0041] Obtaining a quantum key from a key management platform connected to the preset strategy platform;

[0042] Based on the quantum encryption and decryption plug-in, the sensitive table and the sensitive field are encrypted according to the target strategy and the quantum key to implement the quantum encryption processing of the database.

[0043] In this way, first, the quantum encryption server obtains the encryption target policy. Then, the quantum encryption server decrypts the encryption target policy to obtain the target policy. Then, the quantum encryption server obtains the quantum key from the key management platform connected to the preset policy platform. Finally, based on the quantum encryption and decryption plug-in, the quantum encryption server encrypts the sensitive tables and sensitive fields according to the target policy and quantum key to realize quantum encryption of the database. In this way, the quantum encryption server can ensure that the sensitive data in the database is protected at the quantum level, and can resist various security threats even during data transmission and storage.

[0044] An embodiment of the present application provides a quantum encryption server, which includes a memory and a processor. The memory stores a computer program, and the above method is implemented when the computer program is executed by the processor.

[0045] The embodiment of the present application provides a quantum encryption system, the quantum encryption system includes the above-mentioned quantum encryption server, quantum database encryption policy platform and database, the quantum encryption server includes a quantum encryption and decryption plug-in;

[0046] The quantum encryption server is configured to obtain a target policy from the quantum database encryption policy platform, and the quantum database encryption policy platform is configured to provide a policy for performing quantum encryption processing on the database;

[0047] The quantum encryption and decryption plug-in is configured to encrypt the target policy, obtain the encrypted target policy, and back up the encrypted target policy;

[0048] The quantum encryption and decryption plug-in is configured to perform the quantum encryption processing on the database according to the target policy or the encryption target policy.

[0049] Thus, an embodiment of the present application provides a quantum encryption system, which includes a quantum encryption server, a quantum database encryption policy platform and a database. The quantum encryption server is configured to obtain a target policy from the quantum database encryption policy platform, and the quantum database encryption policy platform is configured to provide a policy for performing quantum encryption processing on the database. The quantum encryption and decryption plug-in is configured to encrypt the target policy, obtain an encrypted target policy, and back up the encrypted target policy. The quantum encryption and decryption plug-in is configured to perform quantum encryption processing on the database according to the target policy or the encrypted target policy. In this way, the encryption of the database is achieved through quantum key distribution technology, making the encryption process more secure. In addition, since the quantum encryption server will back up the encrypted target policy in real time, even if the quantum encryption server or the policy platform fails, the policy can be restored and the quantum encryption processing of the database can continue.

[0050] Additional aspects and advantages of the embodiments of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the embodiments of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0052] Figure 1 This is one of the flow charts of the quantum encryption method of certain embodiments of the present application;

[0053] Figure 2 is a schematic diagram of the structure of a quantum encryption system of certain embodiments of the present application;

[0054] Figure 3 This is the second flow chart of the quantum encryption method of certain embodiments of the present application;

[0055] Figure 4 This is the third flow chart of the quantum encryption method of certain embodiments of the present application;

[0056] Figure 5 This is the fourth flow chart of the quantum encryption method of certain embodiments of the present application;

[0057] Figure 6 This is the fifth flow chart of the quantum encryption method of certain embodiments of the present application;

[0058] Figure 7 This is the sixth flow chart of the quantum encryption method of certain embodiments of the present application;

[0059] Figure 8 This is the seventh flow chart of the quantum encryption method of certain embodiments of the present application;

[0060] Fig. 9 This is the eighth flow chart of the quantum encryption method of certain embodiments of the present application;

[0061] Fig.10 This is the ninth flow chart of the quantum encryption method of certain embodiments of the present application;

[0062] Fig.11 This is the tenth flowchart of the quantum encryption method of certain embodiments of the present application;

[0063] Fig.12 It is a schematic diagram of the structure of a quantum encryption system of an example of certain embodiments of the present application. DETAILED DESCRIPTION

[0064] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals represent the same or similar elements or elements having the same or similar functions from beginning to end. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the embodiments of the present application, and cannot be understood as limiting the embodiments of the present application.

[0065] In the digital world, data is becoming increasingly important and has become a core asset for business operations and development. These data include personal information, financial data, trade secrets, etc. If these data are stolen, it will cause significant damage to individuals, businesses, and even the entire society.

[0066] In order to protect these valuable data, enterprises usually use database encryption to ensure the security of data during storage and transmission. In related technologies, database encryption is based on the application of encryption and decryption plug-ins to parse the SQL of the business, and implement encryption and decryption of sensitive fields, so that even if the data is illegally obtained, it cannot be easily interpreted, thereby effectively preventing data leakage and abuse.

[0067] The user first configures policy information such as data source, encrypted table, encrypted field, etc. on the policy platform. When the business application system starts, the encryption and decryption plug-in is automatically initialized, and the policy platform query policy interface is called through http request to obtain the application policy information. Subsequently, the policy information is cached in the memory of the business application system, and the corresponding listener is created to dynamically obtain policy changes.

[0068] However, in real applications, business application systems may experience service interruptions, such as server failures, network problems, etc., which may result in the inability to obtain corresponding encryption policies. In this case, if database encryption is completely dependent on normal system services, then once the service is interrupted, data encryption may fail, thus affecting data security.

[0069] Based on the above questions, please refer to Figure 1 , the embodiment of the present application provides a quantum encryption method for a database, the method comprising:

[0070] 011: Get the target strategy from the preset strategy platform;

[0071] 012: Encrypt the target policy to obtain the encrypted target policy, and back up the encrypted target policy;

[0072] 013: Perform quantum encryption on the database according to the target policy or encryption target policy.

[0073] The embodiment of the present application also provides a quantum encryption server, including a memory and a processor. The quantum encryption method for a database of the embodiment of the present application can be implemented by the quantum encryption server of the embodiment of the present application. Specifically, a computer program is stored in the memory, and the processor is used to obtain a target policy from a preset policy platform. And encrypt the target policy to obtain an encrypted target policy, and back up the encrypted target policy. And perform quantum encryption processing on the database according to the target policy or the encrypted target policy.

[0074] The embodiment of the present application also provides a quantum encryption system. The quantum encryption method for a database of the embodiment of the present application can be implemented by the quantum encryption system of the embodiment of the present application. Specifically, the quantum encryption system includes a quantum encryption server and a quantum encryption and decryption plug-in. The quantum encryption server is configured to obtain a target policy from a preset policy platform. The quantum encryption and decryption plug-in can encrypt the target policy, obtain an encrypted target policy, and back up the encrypted target policy. The quantum encryption and decryption plug-in can perform quantum encryption processing on the database according to the target policy or the encrypted target policy.

[0075] Specifically, the database refers to a database used for quantum database encryption.

[0076] Quantum database encryption refers to a method that uses quantum computing principles and technologies to protect the security of data in a database. It combines quantum key distribution technology, quantum random number generation technology, and other quantum encryption technologies to provide higher security than traditional encryption methods.

[0077] Quantum key distribution technology refers to the use of quantum mechanics principles to establish a secure key exchange mechanism between communicating parties. Since any measurement of a quantum state will change the quantum state, any attempt to eavesdrop will be immediately discovered, thus ensuring the secure exchange of keys.

[0078] Quantum random number generation technology refers to the use of quantum random number generators such as quantum entanglement or quantum tunneling to generate truly random numbers. These random numbers can be used as encryption keys, making the encryption process more difficult to predict and crack.

[0079] The preset policy platform refers to a management system that integrates multiple security policies and rules. It can provide security configuration and policy management for various applications and services. The preset policy platform allows administrators to define and configure various security policies, such as encryption algorithm selection, key management rules, access control policies, etc.

[0080] The target policy refers to the policy information corresponding to the quantum encryption server used by the user.

[0081] A quantum encryption server refers to a server used to implement quantum database encryption technology. Quantum database encryption technology uses the principles of quantum mechanics to encrypt the database, providing encryption security that is theoretically unbreakable.

[0082] Quantum encryption processing refers to a method of encrypting a database that needs to be encrypted based on quantum database encryption technology.

[0083] See also Figure 2 , Figure 2 The following is a schematic diagram of the structure of the quantum encryption system. The quantum encryption system includes a quantum encryption server, a quantum database encryption policy platform, and a database. The quantum encryption server is a server that performs actual encryption operations. The quantum encryption server integrates quantum encryption technology and provides higher security than traditional encryption methods. The quantum encryption server integrates a quantum encryption and decryption plug-in, which provides encryption-related functions such as data encryption and decryption.

[0084] The quantum database encryption policy platform receives table structure information from the database and interacts with the quantum encryption server through encryption and decryption plug-ins. The quantum database encryption policy platform includes encryption algorithms, key management rules, and encryption policies for quantum databases. The quantum database encryption policy platform includes a policy platform and a key management platform, which is used to manage and distribute keys. The key management platform includes functions such as key generation, storage, distribution, rotation, and destruction to ensure the security and compliance of keys.

[0085] The database is directly connected to the quantum encryption and decryption plug-in, which means that all data stored in the database will be encrypted by the plug-in. The database may contain sensitive information such as business data and user data, so it needs to be encrypted to protect the security of the data.

[0086] The quantum encryption server first obtains the target policy from the preset policy platform. This preset policy platform is configured to provide policies for quantum encryption of the database, which may include the selection of encryption algorithms, key management rules, encryption levels, etc.

[0087] Then, the quantum encryption server encrypts the acquired target policy to obtain an encrypted target policy to protect the policy itself from unauthorized access. The encrypted target policy is backed up to prevent the policy from being lost or damaged.

[0088] Finally, the quantum encryption server performs quantum encryption on the database according to the target policy or encryption target policy.

[0089] In summary, the embodiments of the present application provide a quantum encryption method, a quantum encryption server, and a quantum encryption system for a database. First, the quantum encryption server obtains the target policy from the preset policy platform, and the preset policy platform is configured to provide a strategy for quantum encryption processing of the database. Next, the quantum encryption server encrypts the target policy to obtain the encrypted target policy, and backs up the encrypted target policy. Finally, the quantum encryption server performs quantum encryption processing on the database according to the target policy or the encrypted target policy. In this way, the encryption of the database is achieved through quantum key distribution technology, making the encryption process more secure. In addition, since the quantum encryption server will back up the encrypted target policy in real time, even if the quantum encryption server or the policy platform fails, the strategy can be restored and the quantum encryption processing of the database can continue.

[0090] See also Figure 3 In some embodiments, the preset strategy platform is configured by the following steps:

[0091] 021: Based on the preset deployment document, build a policy platform corresponding to the preset deployment document;

[0092] 022: Based on the preset platform configuration file, the policy platform is configured to obtain the preset policy platform.

[0093] Specifically, the preset deployment document refers to a document that provides detailed instructions and steps for building a policy platform.

[0094] The default platform configuration file refers to a file that includes all the parameters and settings required for the policy platform to run, such as database connection information, encryption algorithm selection, key management rules, etc.

[0095] First, the quantum encryption server builds a policy platform according to the preset deployment document, including installing the necessary software and hardware components, and setting the initial configuration of the policy platform.

[0096] Next, the quantum encryption server uses the preset platform configuration file to configure the policy platform. By configuring the policy platform, the quantum encryption server can ensure that the policy platform works as expected, thereby obtaining the preset policy platform.

[0097] The preset policy platform is a configured policy platform that provides policies for quantum encryption processing of databases. These policies define how to encrypt data in the database and how to manage the encryption process. The preset policy platform is the basis for the quantum encryption server to perform quantum encryption processing.

[0098] In this way, by configuring the deployed policy platform, it is ensured that the policy platform can work as expected to provide a strategy for quantum encryption processing of the database.

[0099] See also Figure 4 In some implementations, step 022 (configuring the policy platform based on the preset platform configuration file to obtain the preset policy platform) includes:

[0100] 0221: According to the preset platform configuration file, configure the server identifier corresponding to the database to obtain a temporary policy platform;

[0101] 0222: Determine the sensitive tables and sensitive fields of the database according to the preset platform configuration file;

[0102] 0223: According to the preset platform configuration file, configure the strategy for quantum encryption processing of sensitive tables and sensitive fields to obtain the preset strategy platform.

[0103] Specifically, the server identifier is used to distinguish different quantum encryption servers and ensure that the quantum encryption server can perform quantum encryption processing on the target database according to the correct policy information. For example, the unique IP address of the quantum encryption server, the host name of the quantum encryption server, and the universal unique identification code of the quantum encryption server.

[0104] First, according to the preset platform configuration file, configure the quantum encryption server identifier corresponding to the database. This identifier is used to indicate the quantum encryption server responsible for quantum encryption processing of the database.

[0105] Next, according to the preset platform configuration file, determine the sensitive tables and sensitive fields in the database. Sensitive tables and sensitive fields refer to those database tables and fields that store sensitive information and require special protection. This involves analyzing the database structure and identifying the tables and fields that need to be encrypted based on the importance and sensitivity of the data.

[0106] Finally, the quantum encryption server configures the strategy for quantum encryption processing of sensitive tables and sensitive fields according to the preset platform configuration file, including selecting the appropriate quantum encryption algorithm, setting encryption key management rules, defining encryption levels, etc. Through this process, the quantum encryption server can ensure that sensitive data is protected at the highest level during storage and transmission, thereby obtaining a preset policy platform.

[0107] In this way, a preset policy platform is obtained, which can provide policies for quantum encryption of databases. These policies define how to encrypt sensitive data in the database at the quantum level and how to manage the encryption process. The preset policy platform is the basis for the quantum encryption server to perform quantum encryption processing.

[0108] See also Figure 5 In some embodiments, the method further comprises:

[0109] 014: Build a quantum encryption and decryption plug-in based on the obtained preset plug-in configuration file.

[0110] In some embodiments, the quantum encryption system can also construct a quantum encryption and decryption plug-in based on the obtained preset plug-in configuration file.

[0111] In some embodiments, the processor is further configured to construct a quantum encryption and decryption plug-in according to the acquired preset plug-in configuration file.

[0112] Specifically, the preset plug-in configuration file refers to a file that includes all parameters and settings required to build a quantum encryption and decryption plug-in, including server identification, etc.

[0113] The quantum encryption server constructs a quantum encryption and decryption plug-in according to the obtained preset plug-in configuration file. In some embodiments, the steps of constructing the quantum encryption and decryption plug-in are:

[0114] In the first step, the quantum encryption server first reads the preset plug-in configuration file, which contains the information required to build and configure the quantum encryption and decryption plug-in. In the second step, according to the parameters and settings in the configuration file, the quantum encryption server generates the code of the quantum encryption and decryption plug-in. In the third step, the quantum encryption server compiles the generated plug-in code into an executable file and deploys it to the quantum encryption server. In this way, the quantum encryption server can use this plug-in to perform quantum encryption on the database.

[0115] In this way, the quantum encryption server can build and configure a quantum encryption and decryption plug-in that can perform quantum-level encryption and decryption on sensitive data in the database.

[0116] See also Figure 6In some implementations, step 011 (obtaining a target policy from a preset policy platform) includes:

[0117] 0111: Obtain the target policy from the preset policy platform according to the server identifier.

[0118] In some embodiments, the quantum encryption server is used to obtain a target policy from a preset policy platform according to a server identifier.

[0119] In some implementations, the processor is further configured to obtain a target policy from a preset policy platform according to the server identifier.

[0120] Specifically, the quantum encryption server first connects its own identification to the preset policy platform. Once connected to the policy platform, the quantum encryption server obtains the corresponding target policy according to the server identification. In some embodiments, after the quantum encryption server obtains the target policy, the quantum encryption server may verify the validity of the target policy to ensure that the target policy is up to date and applicable to the current application server and database environment. And prepare for the execution of the target policy, including parsing the policy content, setting the encryption algorithm, preparing the encryption key, etc.

[0121] In this way, the quantum encryption server can ensure that only the correct application server obtains the appropriate encryption strategy, thereby ensuring that the data in the database is encrypted at the quantum level in accordance with established security standards.

[0122] See also Figure 7 In some implementations, step 012 (encrypting the target policy, obtaining the encrypted target policy, and backing up the encrypted target policy) includes:

[0123] 0121: Based on the quantum encryption and decryption plug-in and the preset encryption algorithm, the target strategy is encrypted to obtain the target encryption strategy;

[0124] 0122: Back up the target encryption policy to the target location.

[0125] In some embodiments, the quantum encryption and decryption plug-in is used to encrypt the target policy based on the quantum encryption and decryption plug-in and the preset encryption algorithm to obtain the target encryption policy, and back up the target encryption policy at the target location.

[0126] In some embodiments, the processor is further configured to encrypt the target policy based on the quantum encryption and decryption plug-in and the preset encryption algorithm to obtain the target encryption policy, and to back up the target encryption policy at the target location.

[0127] Specifically, the target location refers to a secure location for storing the target encryption policy.

[0128] The preset encryption algorithm refers to a symmetric encryption algorithm. A symmetric encryption algorithm is an encryption technology in which the same key is used to encrypt and decrypt data, including the AES encryption algorithm, the DES encryption algorithm, and the 3DES encryption algorithm.

[0129] Using the preset encryption algorithm and quantum encryption and decryption plug-in, the quantum encryption server encrypts the target policy. The target policy is a set of defined rules and parameters that instruct the quantum encryption server how to perform quantum encryption processing on the data in the database. Through encryption processing, the target policy is converted into a target encryption policy, which can only be correctly decrypted and executed through the quantum encryption and decryption plug-in. Then, the quantum encryption server backs up the target encryption policy to the target location.

[0130] In this way, the quantum encryption server not only protects the security of the target policy, but also ensures the durability and reliability of the policy. In the event of any failure or data loss, the backed-up policy can be quickly restored to maintain business continuity and data security. In addition, by encrypting the target policy, it ensures that even if the target encryption policy is leaked, the target policy remains secure.

[0131] See also Figure 8 In some embodiments, step 013 (performing quantum encryption processing on the database according to the target strategy or the encryption target strategy) includes:

[0132] 0131: When the application server corresponding to the server identifier is running normally, the database is quantum encrypted based on the quantum encryption and decryption plug-in according to the target strategy.

[0133] In some embodiments, the quantum encryption and decryption plug-in is used to perform quantum encryption processing on the database according to the target strategy based on the quantum encryption and decryption plug-in when the application server corresponding to the server identifier is running normally.

[0134] In some embodiments, the processor is further configured to perform quantum encryption processing on the database according to a target policy based on a quantum encryption and decryption plug-in when an application server corresponding to the server identifier is operating normally.

[0135] Specifically, the application server refers to the quantum encryption server selected by the user.

[0136] The quantum encryption server first checks the running status of the application server corresponding to the server ID. If the application server is running normally and the quantum encryption and decryption plug-in has been correctly installed on the application server and is in an available state, the quantum encryption server will then parse the target policy and extract the parameters and rules required for encryption. These policies define how to perform quantum encryption on sensitive data in the database, including which encryption algorithm to choose and how to manage encryption keys.

[0137] Finally, based on the quantum encryption and decryption plug-in and target strategy, the quantum encryption server performs quantum encryption processing on the sensitive data in the database.

[0138] In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level, and can resist various security threats even during data transmission and storage, thereby enhancing the confidentiality of sensitive data in the database.

[0139] See also Fig. 9 In some embodiments, step 0131 (based on the quantum encryption and decryption plug-in, quantum encryption processing is performed on the database according to the target strategy) includes:

[0140] 01311: Obtain quantum keys from the key management platform that is connected to the preset strategy platform;

[0141] 01312: Based on the quantum encryption and decryption plug-in, sensitive tables and sensitive fields are encrypted according to the target strategy and quantum key to realize quantum encryption processing of the database.

[0142] In some embodiments, the quantum encryption and decryption plug-in is also used to obtain a quantum key from a key management platform that is connected to a preset policy platform. Based on the quantum encryption and decryption plug-in, sensitive tables and sensitive fields are encrypted according to the target policy and the quantum key to implement quantum encryption processing of the database.

[0143] In some embodiments, the processor is further used to obtain a quantum key from a key management platform connected to a preset policy platform, and based on a quantum encryption and decryption plug-in, encrypt sensitive tables and sensitive fields according to target policies and quantum keys to implement quantum encryption processing of the database.

[0144] Specifically, first establish a connection between the preset policy platform and the key management platform. Then, when needed, through a secure channel, the quantum encryption server obtains the required quantum key from the key management platform through the preset policy platform. Next, based on the quantum encryption and decryption plug-in, the quantum encryption server encrypts sensitive tables and sensitive fields according to the target policy and quantum key to achieve quantum encryption of the database.

[0145] In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level, and can resist various security threats even during data transmission and storage, thereby enhancing the confidentiality of sensitive data in the database.

[0146] See also Fig.10 In some embodiments, step 013 (performing quantum encryption processing on the database according to the target strategy or the encryption target strategy) includes:

[0147] 0132: In the event of an abnormal operation of the application server, the database is quantum encrypted based on the quantum encryption and decryption plug-in according to the encryption target strategy.

[0148] In some embodiments, the quantum encryption and decryption plug-in is also used to perform quantum encryption processing on the database according to the encryption target strategy based on the quantum encryption and decryption plug-in when the application server runs abnormally.

[0149] In some embodiments, the processor is used to perform quantum encryption processing on the database according to the encryption target strategy based on the quantum encryption and decryption plug-in when the application server runs abnormally.

[0150] Specifically, the quantum encryption server will continuously monitor its own operating status. If an operating anomaly is detected, such as a failure, response timeout, or service interruption, the quantum encryption server will activate the plug-in escape mechanism. That is, the database will be quantum encrypted according to the previously backed-up encryption target policy.

[0151] In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level even when the application server operates abnormally, and can resist various security threats even during data transmission and storage.

[0152] See also Fig.11 In some embodiments, step 0132 (based on the quantum encryption and decryption plug-in, quantum encryption processing is performed on the database according to the encryption target strategy) includes:

[0153] 01321: Get encryption target policy;

[0154] 01322: decrypt the encrypted target policy to obtain the target policy;

[0155] 01323: Obtain quantum keys from the key management platform that is connected to the preset strategy platform;

[0156] 01324: Based on the quantum encryption and decryption plug-in, sensitive tables and sensitive fields are encrypted according to the target strategy and quantum key to realize quantum encryption processing of the database.

[0157] In some embodiments, the quantum encryption and decryption plug-in is also used to obtain an encrypted target policy, decrypt the encrypted target policy, and obtain a target policy. The quantum key is obtained from a key management platform connected to a preset policy platform, and based on the quantum encryption and decryption plug-in, sensitive tables and sensitive fields are encrypted according to the target policy and the quantum key to achieve quantum encryption of the database.

[0158] In some embodiments, the processor is further configured to obtain an encrypted target policy, decrypt the encrypted target policy, and obtain a target policy, obtain a quantum key from a key management platform connected to a preset policy platform, and encrypt sensitive tables and sensitive fields based on a quantum encryption and decryption plug-in according to the target policy and the quantum key to implement quantum encryption of the database.

[0159] Specifically, first, the quantum encryption server obtains the encryption target policy. The encryption target policy is obtained by the quantum encryption and decryption plug-in from the place where the encryption target policy is stored in the quantum encryption server. Then, the quantum encryption server decrypts the encryption target policy to obtain the original target policy. The decryption process uses the quantum encryption and decryption plug-in and the corresponding decryption key on the quantum encryption server. The decrypted target policy contains specific instructions on how to quantum encrypt sensitive data in the database. Then, the quantum encryption server obtains the quantum key from the key management platform that is connected to the preset policy platform. Finally, based on the quantum encryption and decryption plug-in, the quantum encryption server encrypts sensitive tables and sensitive fields according to the target policy and quantum key to realize quantum encryption of the database.

[0160] In this way, the quantum encryption server can ensure that sensitive data in the database is protected at the quantum level and can resist various security threats even during data transmission and storage.

[0161] An embodiment of the present application provides a quantum encryption server, which includes a memory and a processor. The memory stores a computer program. When the computer program is executed by the processor, the above method is implemented.

[0162] See also Fig.11 , the embodiment of the present application provides a quantum encryption system, the quantum encryption system includes a quantum encryption server, a quantum database encryption policy platform and a database, the quantum encryption server includes a quantum encryption and decryption plug-in;

[0163] The quantum encryption server is configured to obtain a target policy from a quantum database encryption policy platform, and the quantum database encryption policy platform is configured to provide a policy for performing quantum encryption processing on a database;

[0164] The quantum encryption and decryption plug-in is configured to encrypt the target policy, obtain the encrypted target policy, and back up the encrypted target policy;

[0165] The quantum encryption and decryption plug-in is configured to perform quantum encryption processing on the database according to the target policy or encryption target policy.

[0166] In summary, the embodiment of the present application provides a quantum encryption system, which includes a business database, a quantum database encryption policy platform and a quantum encryption server. The quantum encryption server is configured to obtain a target policy from the quantum database encryption policy platform, and the quantum database encryption policy platform is configured to provide a policy for quantum encryption processing of the database. The quantum encryption and decryption plug-in is configured to encrypt the target policy, obtain an encrypted target policy, and back up the encrypted target policy. The quantum encryption and decryption plug-in is configured to perform quantum encryption processing on the database according to the target policy or the encrypted target policy. In this way, the encryption of the database is achieved through quantum key distribution technology, making the encryption process more secure. In addition, since the quantum encryption server will back up the encrypted target policy in real time, even if the quantum encryption server or the policy platform fails, the policy can be restored and the quantum encryption processing of the database can continue.

[0167] The following is a complete description of the above-mentioned quantum encryption method for databases using an example. Fig.12 , Fig.12 The following is a schematic diagram of the structure of a specific example of a quantum encryption system. Nacos is an open source service discovery and configuration management platform for building cloud-native applications.

[0168] like Fig.12 The first step is to configure the data source in the policy platform according to the deployment document. That is, configure the business database that needs to be quantum encrypted. And configure the corresponding policies for the tables and fields that need to be encrypted in the business database. After the data migration is completed, set the operation mode of the sensitive table to ciphertext mode. Data migration refers to quantum encryption of sensitive data already stored in the business database.

[0169] like Fig.12 In the second step, after setting the policy, the policy platform will publish the application policy information to nacos, including data source connection information, sensitive tables, sensitive fields, encryption algorithms, operation modes, pseudo keys, etc. When the policy platform updates the policy, nacos can also dynamically monitor the policy changes.

[0170] like Fig.12In the third step, after the business application completes the integration of the quantum encryption and decryption plug-in according to the quantum encryption and decryption plug-in integration document, the quantum encryption and decryption plug-in is initialized when the quantum encryption server is started for the first time. First, an http request is initiated to call the policy platform to obtain the configuration interface. Then, the application configuration information and the connection information of nacos are obtained according to the quantum encryption server identifier. After obtaining the connection information, nacosServer is created to pull the policy information on nacos. At the same time, a nacos listener is also created to dynamically obtain policy changes. Finally, the collected policy information is cached in the memory of the quantum encryption server. The policy information is symmetrically encrypted to obtain the encrypted backup policy information, which is cached in the reserved position of the quantum encryption server.

[0171] After caching the obtained policy information into memory, when the quantum encryption server performs database encryption, the plug-in will automatically parse the business database and perform quantum encryption and decryption on the business database. However, if the quantum encryption service is restarted, the policy information in the memory will be cleared, and the plug-in will need to be reinitialized to obtain the policy. If an exception occurs in the policy platform service at this time, resulting in a failure to obtain the application configuration information. Then the plug-in will not be able to obtain the policy information from the policy platform, and the quantum encryption server will automatically downgrade to obtain the encrypted backup policy information, decrypt the encrypted backup policy information to obtain the corresponding policy information, and save it to the memory of the quantum encryption server.

[0172] In this way, Fig.12 In the fourth step, the quantum encryption server can re-implement the encryption and decryption functions of sensitive data to protect sensitive data.

[0173] The present application also provides a computer-readable storage medium containing a computer program. When the computer program is executed by one or more processors, the one or more processors execute the method of the present application.

[0174] It is understood that a computer program includes computer program code. The computer program code may be in source code form, object code form, executable file or some intermediate form. Computer readable storage media may include: any entity or device capable of carrying computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), and software distribution medium.

[0175] In the description of this specification, the descriptions with reference to the terms "specifically", "further", "particularly", "understandably", etc. are intended to mean that the specific features, structures, materials or characteristics described in conjunction with the embodiments or examples are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms are not intended to refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, unless they are contradictory.

[0176] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a specific logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0177] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limitations on the present application. Ordinary technicians in this field can change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A quantum encryption method for a database, characterized in that: The method comprises: Acquire a target policy from a preset policy platform, where the preset policy platform is configured to provide a policy for performing quantum encryption processing on the database; Encrypting the target policy to obtain an encrypted target policy, and backing up the encrypted target policy; The quantum encryption process is performed on the database according to the target policy or the encryption target policy.

2. The method according to claim 1, characterized in that The preset strategy platform is configured by the following steps: Based on the preset deployment document, construct a policy platform corresponding to the preset deployment document; Based on the preset platform configuration file, the policy platform is configured to obtain the preset policy platform.

3. The method according to claim 2, characterized in that The configuring the policy platform based on the preset platform configuration file to obtain the preset policy platform includes: According to the preset platform configuration file, a server identifier corresponding to the database is configured to obtain a temporary policy platform, wherein the server identifier is used to indicate an application server that performs quantum encryption processing on the database; Determining the sensitive tables and sensitive fields of the database according to the preset platform configuration file; According to the preset platform configuration file, the strategy for performing quantum encryption processing on the sensitive table and the sensitive field is configured to obtain the preset strategy platform.

4. The method according to claim 3, characterized in that The method further comprises: A quantum encryption and decryption plug-in is constructed according to the obtained preset plug-in configuration file, wherein the preset plug-in configuration file includes a server identifier.

5. The method according to claim 4, characterized in that The obtaining of the target strategy from the preset strategy platform includes: The target policy is obtained from the preset policy platform according to the server identifier.

6. The method according to claim 4, characterized in that The step of encrypting the target policy to obtain an encrypted target policy and backing up the encrypted target policy includes: Based on the quantum encryption and decryption plug-in and the preset encryption algorithm, the target policy is encrypted to obtain the target encryption policy; The target encryption policy is backed up at a target location.

7. The method according to claim 4, characterized in that The performing the quantum encryption processing on the database according to the target strategy or the encryption target strategy includes: When the application server corresponding to the server identifier runs normally, the database is subjected to the quantum encryption processing based on the quantum encryption and decryption plug-in and according to the target policy.

8. The method according to claim 7, characterized in that The step of performing the quantum encryption processing on the database based on the quantum encryption and decryption plug-in and according to the target strategy includes: Obtaining a quantum key from a key management platform connected to the preset strategy platform; Based on the quantum encryption and decryption plug-in, the sensitive table and the sensitive field are encrypted according to the target strategy and the quantum key to implement the quantum encryption processing of the database.

9. The method according to claim 4, characterized in that The performing the quantum encryption processing on the database according to the target strategy or the encryption target strategy includes: In the case where the application server runs abnormally, the quantum encryption processing is performed on the database based on the quantum encryption and decryption plug-in and according to the encryption target strategy.

10. The method according to claim 9, characterized in that The step of performing the quantum encryption processing on the database based on the quantum encryption and decryption plug-in and according to the encryption target strategy includes: Obtaining the encryption target policy; Decrypting the encrypted target policy to obtain the target policy; Obtaining a quantum key from a key management platform connected to the preset strategy platform; Based on the quantum encryption and decryption plug-in, the sensitive table and the sensitive field are encrypted according to the target strategy and the quantum key to implement the quantum encryption processing of the database.

11. A quantum encryption server, characterized in that: The quantum encryption server includes a memory and a processor, the memory stores a computer program, and when the computer program is executed by the processor, the method according to any one of claims 1 to 10 is implemented.

12. A quantum encryption system, characterized in that: The quantum encryption system comprises the quantum encryption server, quantum database encryption policy platform and database as claimed in claim 11, wherein the quantum encryption server comprises a quantum encryption and decryption plug-in; The quantum encryption server is configured to obtain a target policy from the quantum database encryption policy platform, and the quantum database encryption policy platform is configured to provide a policy for performing quantum encryption processing on the database; The quantum encryption and decryption plug-in is configured to encrypt the target policy, obtain the encrypted target policy, and back up the encrypted target policy; The quantum encryption and decryption plug-in is configured to perform the quantum encryption processing on the database according to the target policy or the encryption target policy.

Images