Secure distributed database backup method based on secret sharing

Abstract

The invention discloses a secure distributed database backup method based on secret sharing, which relates to the technical field of database security, and comprises the following steps: selecting n backup nodes, setting a recovery threshold value t, extracting sensitive information from a database, and segmenting the sensitive information into n shares in the backup nodes by adopting a secret sharing algorithm; a corresponding backup node is allocated to each share for storage; adding a password share for the share stored in each backup node to construct an encryption share; making a mapping table according to the corresponding relationship between the backup node and the encryption share; and receiving a recovery request, retrieving the encrypted share from the plurality of backup nodes according to the reply request in combination with the mapping table, and decoding the retrieved encrypted share to obtain sensitive information. According to the method, the sensitive information in the database is segmented and encrypted, and then the segmented information is distributed and stored on the plurality of backup nodes, so that the security of the data in the backup process is ensured.

Images