Database transparent encryption method, device, equipment and medium based on KMS service

By adopting a transparent database encryption method based on KMS services in a financial-level distributed database system, the security risks brought about by key loss in the prior art are solved, and effective protection of encrypted data in the database is achieved.

CN119740251APending Publication Date: 2025-04-01JINZHUAN INFORMATION TECHNOLOGY CO LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202411928138.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-25
Publication Date
2025-04-01

AI Technical Summary

Technical Problem

In financial-grade distributed database systems, existing encryption and decryption methods pose a great security risk when keys are lost, making it difficult to effectively manage the security of sensitive data and data keys.

Method used

Using a transparent database encryption method based on KMS service, the metadata management module responds to the client encryption request, determines the interface identification information of the KMS server, generates plain text and cipher text information of the master key, and saves the cipher text information in the backup unit, and further encrypts and stores the data key.

Benefits of technology

It realizes legal services for distributed databases, ensures effective protection of encrypted data in the database, and reduces the security risks brought about by key loss.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The present invention discloses a method, device, equipment and medium for transparent encryption of a database based on a KMS service. The method includes a metadata management module applied to a distributed database system, and the method includes: in response to an encryption request issued by a client, determining the interface identification information of the KMS interface corresponding to the KMS server; the encryption request is a request for transparent encryption of sensitive data associated with a target database; if it is determined that the target database meets the preset verification conditions, then the plaintext information and ciphertext information of the master key are generated from the KMS server according to the interface identification information, and the ciphertext information of the master key is stored in a backup unit corresponding to the metadata management module; the data key is encrypted according to the plaintext information of the master key, the encrypted data key is obtained, and the encrypted data key is stored in the backup unit. The technical solution of the present invention realizes the service of ensuring the legality of the distributed database, and at the same time, it can also effectively protect the encrypted data in the database.
Need to check novelty before this filing date? Find Prior Art