53 results about "Database encryption" patented technology

Methods for database recovery for encrypted indexes are performed by systems and devices. A query with a decryption key is received from a client device, where the query modifies an encrypted index of a database using a secure enclave. When events requiring remedial actions for the database occur during the querying, some transactions of the query and later queries are deferred, and a remedial action is initiated that includes restarting the database. A determination of the remedial action being unsuccessful in recovering the encrypted index causes the action to be re-performed until another query having the decryption key is received whereupon the action is performed again to recover the encrypted index utilizing the decryption key. Deferred transactions are then performed with the decryption key. When a database restarts for access without secure enclaves, the encrypted index for the database is invalidated, and the remedial actions are otherwise completed or discarded.

The invention provides a searchable encryption management method and device, a storage medium and electronic equipment, and relates to the technical field of database encryption access. Determining a database operation required by the proxy server and target data required to be operated based on the target data request; the target equipment is any one of a cloud server and user equipment; executing a data operation corresponding to the database operation on the target data based on the keyword of the target data; wherein the database operation comprises any one of the following operations: data initialization operation, data query operation, data addition operation, data deletion operation and data updating operation. The searchable encryption management method and device, the storage medium and the electronic equipment provided by the invention are used for improving the calculation performance, the security and the access efficiency of searchable encryption.

The invention provides a financial communication method between distributed devices and a financial communication system, the distributed nodes are established based on the device information of the distributed devices, the communication rules between the distributed devices are designed based on the distributed nodes for the transmission of financial data, a basis is provided for the stable transmission of the financial data, and the communication efficiency is improved based on the financial communication service. According to a communication rule, a node transmission strategy of financial data at distributed nodes is determined, stable and efficient transmission of the financial data at the distributed nodes is realized, communication encryption data based on the node transmission strategy is established, the financial data is transmitted based on the node transmission strategy and the communication encryption data, and financial receiving data is obtained. According to the method, the security in the data transmission process is ensured, the financial receiving data is encrypted and stored on the distributed equipment based on a database encryption technology, and the security of data storage is ensured.

The application discloses a database encryption control method and system based on micro services, and relates to the technical field of distributed database security; a password device distribution service, a certificate key management service and a dynamic load balancing service are created according to a micro service architecture; the password device distribution service distributes password devices when the password devices are applied to be used by the outside world, and provides a calling interface; the certificate key management service uniformly manages certificates and keys in the password devices, and can migrate the certificates and the keys between the password devices; and the dynamic load balancing service dynamically distributes the password devices to nodes according to usage information of the nodes on the password devices.

Described herein are methods and systems for constructing an encrypted index of a database to facilitate secure and efficient encrypted queries. An example method includes creating a plaintext index sorted by specific attributes, mapping records to integers via a hash function, permuting records using a pseudo-random permutation network, and generating an encrypted swap vector through homomorphic encryption. This encrypted swap vector is then sent to the database, enabling the creation of an encrypted index that maintains query privacy while supporting efficient retrieval of data.

The invention discloses a cross-platform integrated cost information collaborative system, which belongs to the field of information sharing technology and specifically comprises: a carrier selection module is responsible for counting the number of databases of each department, and generating a sequence according to the size of stored information; an information sharing carrier is selected from the sequence for data sharing; a database transmission module marks a database with a sequence number less than k as a front database according to the sequence k of the information sharing carrier, and transmits data to the information sharing carrier from front to back in sequence; for a rear database with a sequence number greater than k, the data is transmitted from back to front; a reference control module consults all cost information through the information sharing carrier, and sets a cache time after the reference is completed; after the reference is completed, the data is returned to each database along the original path; an encryption key module sets different encryption keys for each database, and the information sharing carrier selects a corresponding decryption algorithm according to the database sequence number to decrypt the data, so as to ensure the security of the data during the transmission process.

The invention relates to a key management method and device, equipment, a storage medium and a program product. The method is applied to an intermediate layer in a database encryption system, the database encryption system comprises a database kernel, the intermediate layer and at least one key management system, the database kernel interacts with the key management system through the intermediate layer, and the method comprises the following steps: receiving a key decryption request sent by the database kernel, the key decryption request carries identification information of the first target key; acquiring the first target key from the first key management system according to the identification information of the first target key and the first mapping relationship; sending the first target key to a database kernel; the first target key is used for the database kernel to decrypt the ciphertext of the second target key according to the first target key to obtain the second target key, and the second target key is used for encrypting or decrypting the to-be-processed data in the database kernel. By adopting the method, the stability of the data kernel can be improved.

The invention discloses an encryption and decryption calling method and system between a micro-service and a database, relates to the technical field of network security transmission, and solves the problem that the encryption evaluation rectification efficiency of dynamic data encryption and decryption is too low when a third-party application interacts with the database. The encryption and decryption calling method comprises the steps that in a distributed network environment, a database encryption and decryption management platform inputs third-party application information; configuring a database encryption and decryption configuration file according to the third-party application information; analyzing all tables and fields to be encrypted and decrypted of the third-party application, and judging the stock data state of the tables and the fields; processing the field to be encrypted and decrypted, and configuring loading dependency of a database encryption and decryption component; generating authentication information, and configuring a database encryption and decryption gateway; starting a database encryption and decryption component, calling a gateway interface to verify the identity permission, obtaining a database encryption and decryption configuration file, caching the database encryption and decryption configuration file to a memory, and enhancing a calling function of a data source; and when the normal business calls the database to run, the database encryption and decryption gateway encrypts and decrypts.

This invention belongs to the field of 3D simulation training technology and provides a lightweight modeling and real-time rendering 3D simulation training system. It includes a lightweight modeling module that optimizes 3D models to generate a lightweight model library that supports dynamic adjustment of detail levels; a real-time rendering and interaction module that uses a Unity3D or WebGL engine and dynamically adjusts the model detail levels based on LOD technology according to view distance; a multimodal training and assessment module that integrates question bank management, dynamic question loading, and automatic scoring functions; and a permission management and data security module that implements role-based permission isolation and uses the AES-128 algorithm to encrypt and protect data. This invention effectively eliminates the risk of unauthorized operations and data leakage in a single-machine environment through local role-based permission verification and multi-level database encryption mechanisms, ensuring system security in offline training scenarios. Compared to the plaintext storage and weak permission control of existing technologies, this invention significantly enhances the system's security capabilities.

This invention utilizes homomorphic encryption to propose a multi-key graph database encryption method and system that supports single-keyword retrieval. It enables full-text retrieval of symmetric encrypted ciphertext data under multiple keys using a single keyword. By employing this invention, secure partitioned encryption of graph databases can be achieved, reducing the risk of data leakage from single-key encrypted data. It also effectively leverages the data structure characteristics of graph databases, proposing a multi-key symmetric encryption solution with enhanced security. After completing multi-key encryption, to ensure the full-text retrieval capability of the graph database, a single-keyword full-text encrypted retrieval solution is proposed, improving the memory and communication overhead of encrypted retrieval.

The invention provides a database encryption and decryption method and device, computing equipment and a storage medium. According to the method, under the condition that the data processing request is received, the target data page serving as the operation object of the transaction engine is determined based on the to-be-processed data corresponding to the received data processing request; and generating the target key based on the address information of the target data page, the data located at the target position in the target data page and the initialization key, so that when the target data page is processed by the transaction engine based on the data processing request, the target key is generated. And performing encryption operation and / or decryption operation on the target data page by using the target key so as to automatically realize encryption and decryption operation of the data page in the operation process of the transaction engine, thereby realizing guarantee on the security of the database.

This application provides a database encryption method, device, and system based on large-scale model multi-agent collaboration. By setting up a data request control agent and an encryption / decryption execution agent, the data request control agent, upon receiving a database operation request, determines the operation request type and the operation request object. If it determines that the operation request object has an encryption strategy, it sends an encryption / decryption processing request for the operation request object to the encryption / decryption execution agent based on the operation request type. The encryption / decryption execution agent, based on a reinforcement learning algorithm, determines the optimal resource scheduling scheme from multiple candidate resource scheduling schemes and performs encryption / decryption processing on the operation request object according to the determined optimal resource scheduling scheme. By dynamically scheduling encryption resources based on real-time monitored performance indicators of various types of encryption resources, resource utilization is improved, and the real-time performance of encryption / decryption processing is enhanced.

The invention relates to the field of data security, in particular to a method and a system for uniformly desensitizing webpage information, and the method comprises the following steps: uniformly intercepting request data sent by a user through a browser by using an interceptor; matching sensitive information with the intercepted data by using at least one of two encryption methods according to a configuration item to judge whether encryption is needed or not; sensitive information needing to be encrypted is automatically encrypted according to the configuration content of the configuration item, an encryption label is added to encrypted data, and then the encrypted data are stored in a database; when a user requests background data through a browser, the background server obtains the request data from the database in a unified mode, decrypts the data with the encryption label and processes the data into a desensitization mode. A unified desensitization method is adopted, original programs do not need to be modified, database encryption storage and desensitization display are automatically achieved, and efficiency and safety can be improved.

The invention discloses a database encryption method combined with an application system. The database encryption method specifically comprises the following steps: S1, setting a security container and a basic container (namely a data container) in a database system service cache; s2, adding a password service strategy component among the database system, the application system and the encryption service system; s3, adding a cryptographic operation service component to the database system; s4, a safety information service layer is added to the whole data system, and a data query access function of an external system.The method has the advantages that the important data encryption requirement of the application system is met, other function experience of the application system is not affected, the database still stores the ciphertext of the important data, and the safety of the application system is improved. The data security, the system robustness, the service response performance and the like are superior to those of the existing database encryption technology, the data confidentiality is ensured, meanwhile, all function services provided by the existing database system are not influenced, and the effects of data security and confidentiality and non-perception experience are achieved.

The invention provides a database encryption method, device and system based on large-model multi-agent cooperation, and the method comprises the steps: setting a data request control agent and an encryption and decryption execution agent, enabling the data request control agent to determine an operation request type and an operation request object under the condition that the data request control agent receives a database operation request, and carrying out the encryption and decryption of the operation request; under the condition of determining that the operation request object has the encryption strategy, sending an encryption / decryption processing request for the operation request object to the encryption / decryption execution agent according to the operation request type; and the encryption and decryption execution agent determines an optimal resource scheduling scheme from a plurality of current candidate resource scheduling schemes based on a reinforcement learning algorithm, performs encryption / decryption processing on the operation request object according to the determined optimal resource scheduling scheme, and performs encryption / decryption processing on the operation request object according to performance indexes of various types of encryption resources monitored in real time. And encryption resources are dynamically scheduled, so that the resource utilization rate is improved, and the real-time performance of encryption and decryption processing can be improved.

The invention discloses a micro-service-based database encryption control method and system, and relates to the technical field of distributed database security. Creating a cryptographic device distribution service, a certificate key management service and a dynamic load balancing service according to the micro-service architecture, distributing the cryptographic device by the cryptographic device distribution service when the cryptographic device is applied to use in the outside world, and providing a calling interface; the certificate and secret key management service uniformly manages certificates and secret keys in the password devices and can migrate the certificates and the passwords between the password devices; and the dynamic load balancing service is used for dynamically distributing the password equipment to the nodes according to the use information of the nodes on the password equipment.

The invention relates to the technical field of database security, and particularly provides a plug-in database encryption control method and device, and the method comprises the following steps: S1, deploying an encryption plug-in on a database server; s2, configuring an encryption control strategy on the database server; s3, executing the SQL statement by the user; and S4, in the database system service operation process, the administrator user modifies the encryption control strategy. Compared with the prior art, safer and more reliable database access and operation can be realized, and the integrity and confidentiality of data are guaranteed.

The invention provides a post-quantum distributed relational database encryption system and method, and relates to the technical field of network security. The query module supports efficient equivalent query and JOIN operation on the premise of post-quantum encryption, and the performance bottleneck and security risk caused by full-amount decryption are avoided; the hybrid cryptography transition module realizes smooth transition from a basic cryptography algorithm to a post-quantum cryptography algorithm, and ensures the compatibility and future security of the system; the post-quantum security calculation push-down framework can directly execute aggregation calculation on encrypted data, so that the security and efficiency of data processing are greatly improved; and the post quantum key management module automatically manages the key life cycle, so that the complexity and security challenge of key management in a large-scale distributed environment are solved. Through systematic design and multi-module cooperative work, quantum computing threats can be effectively coped with, and the safety and availability of data in the whole life cycle are guaranteed.

Embodiments of the present application provide a memory database encryption method, a database system and an electronic device. The method comprises: in response to an encryption function start request, encrypting a memory database and writing the encrypted memory database into a first persistent file, and encrypting real-time commands for the memory database and writing the encrypted real-time commands into a second persistent file; deleting a third persistent file to determine the first persistent file as a backup file of the memory database, and deleting a fourth persistent file, the third persistent file being a backup file that is not encrypted before the encryption function is started, and the fourth persistent file being a command log that is not encrypted before the encryption function is started, thereby achieving transparent encryption of the memory database and improving data security.

The application relates to a multi-modal database encryption method, system and electronic equipment, wherein the multi-modal database encryption method comprises the following steps: acquiring a to-be-processed data block, screening sensitive data in the to-be-processed data block, and taking the sensitive data as a to-be-encrypted data block; compressing the to-be-encrypted data block through a compressor to obtain binary stream data; and encrypting the binary stream data, and writing the encrypted binary stream into a disk to realize encryption of the to-be-encrypted data block. Through the application, the problem of low data encryption efficiency in a DolphinDB system is solved.

The invention relates to the technical field of quantum, and particularly provides a quantum confidential query method, device and equipment, a medium and a product. In the disclosure, an original generated key is acquired, the original generated key is related to a measurement base of a second user, and the original generated key comprises a plurality of bits; generating a sparse key based on the parity check value corresponding to the original generated key; performing replacement processing on the sparse key to obtain an intermediate key; performing shift processing on the intermediate key to obtain a final key; and querying in database encryption information from the second user by using the final key to obtain target data. The original generated key is obtained through the bit with the random length, so that the first user can obtain the bit number with the random length through one-time query, the communication complexity is reduced, and the efficiency is improved. Moreover, error correction detection is completed on the original generated key by generating the sparse key, errors caused by channel noise are avoided, and thus channel loss can be tolerated. Therefore, the accuracy of quantum confidential query can be improved.

The invention provides a fuzzy retrieval system and method based on database encryption fields and a client. The fuzzy retrieval system and method are used for sending an obtained fuzzy retrieval request to a platform server. The fuzzy retrieval request comprises an encrypted field used for retrieving data; the platform server is used for distributing each piece of encrypted field data to the corresponding data processing micro-server according to the data volume of the encrypted field, and the number of the data processing micro-servers is adjusted based on the number of the encrypted field data; each data processing micro server is used for decrypting the received encrypted field data by adopting a decryption algorithm to obtain a decryption result; and obtaining a fuzzy retrieval result of the encrypted field. Due to the fact that the encrypted field is divided into the multiple pieces of encrypted field data, then each piece of encrypted field data is distributed to the corresponding data processing micro-server, each data processing micro-server can independently process the received encrypted field data, and the efficiency is high when complex query is processed.

The present application relates to the field of intelligent agriculture technology, and provides a lightweight intelligent production management system for multiple breeding varieties, which comprises a three-layer lightweight architecture using a hardware acquisition end, an edge operation end and a local interaction end. Each end cooperates to realize local data acquisition, analysis, operation, storage and interaction without cloud dependence. The system is based on the core data flow logic of real-time sharing of environmental monitoring data and precise feeding data linkage, feeding and weighing data and inventory accounting data, and integrally realizes intelligent regulation and control of breeding environment, precise feeding management, full-dimension production data acquisition, inventory digital accounting, equipment state monitoring and remote visualized supervision. By accurately implementing the hash value evidence mechanism into specific breeding business scenarios such as feed weight, weighing at slaughter, and feed into warehouse, and combining with multiple technical means such as device unique identification, timestamp, database encryption storage and write protection, the data is prevented from being tampered with throughout the whole process, and the authenticity and traceability of the data are guaranteed.

The invention relates to the technical field of database encryption, and provides a multi-client sequence uncovering encryption method and system based on block optimization, and the method comprises the steps: carrying out the encryption of a queried message and a query message through employing an expansion Hash calculation algorithm, and obtaining a ciphertext and a token; according to the expanded Hash calculation algorithm, a Hash component is added on the basis of a deterministic attribute maintaining Hash protocol, so that equal judgment and continuous judgment are supported; for the ciphertext and the token, verifying whether the block hash is equal; if all the block Hash are equal, the queried message is equal to the query message; if the block Hash is not equal, bit comparison is carried out, and the size of the queried message and the size of the query message are judged. Two types of judgments can be completed through one verification operation, so that the overall performance can be remarkably improved in a high-concurrency scene.

The application discloses a kind of drilling and completion database fine-grained authority management system and method.The system includes: client and server;The client includes;Main program, local database encryption and decryption module, client user authentication module, database connection module, behavior authority management module, user interface module, client update module.The method includes: S1, setting main program and each module in client;S2, encrypting local database;S3, decoupling client user from database account;S4, accessing network database and local database by database connection module;S5, only allowing user to access data in database through user interface module;S6, managing user behavior by behavior authority management module;S7, responsible for changing by server.The beneficial effects of the application are: provided with local database encryption and decryption module and behavior authority management module, realize the fine control of data access authority.

The invention relates to the technical field of database encryption, in particular to a database encryption protection method of a security operation and maintenance auditing system, and the method comprises the following steps: aiming at a data table in a database, extracting table structure metadata of the data table, including attributes, corresponding data types and foreign key constraint information; executing different association analysis strategies through a combination form of data types corresponding to any two attributes to obtain an association degree of any two attributes; extracting an SQL (Structured Query Language) statement of the data table from an operation log of the database, and determining instruction frequent weights of any two attributes to obtain grouping priorities of any two attributes; dividing all attributes into a plurality of encryption attribute groups; and according to the attribute proportion of foreign key constraint information contained in the encryption attribute group, selecting encryption strategies with different intensities for the encryption attribute group to carry out encryption protection. According to the method and the device, the decryption delay of multi-table associated query can be remarkably reduced while the security of the relational data is ensured.

The application relates to a method for database encryption using an encrypted string, belonging to the technical field of information security, which comprises the following steps: a parameter for password calculation is stored in multiple different positions, when a database field needs to be accessed, the parameter is combined by using an algorithm to obtain a correct decryption key. An administrator needs to set a parameter, which is not in the form of a password, but in the form of a space coordinate position. Three space coordinates are provided by the administrator, a hardware identification code is obtained, and a fourth space coordinate is formed. An algorithm is used to generate an identification code authKey, which aims to replace the traditional administrator password setting by human subjective setting, and the coordinates are replaced by strings, and the algorithm is used to ensure the password complexity and security.

The application discloses a kind of based on dot matrix code micro perturbation anti-fake method and system, it is related to information coding field, comprising: by gathering anti-fake object information to generate binary dot matrix image, extract initial seed and store in database after SM4 algorithm encryption and associate object identification;Original image is enlarged and divided into checkerboard, to generate random perturbation parameter with encryption seed, the dot matrix in specified grid is controlled in direction, amplitude and is adjusted with grey scale, and generates the anti-fake dot matrix containing secret micro perturbation;According to material, select corresponding process coding and solidification, extract the code in image and micro perturbation characteristics when verifying, compare with database encryption record.This application has the advantages that: based on dot matrix code micro perturbation anti-fake method adapts to a variety of materials and scene, generates unique micro perturbation seed by SM4 encryption, realizes hidden difficult-to-copy perturbation characteristics, combined with core coding and micro perturbation characteristics double check, realize accurate anti-fake and whole-process closed loop, practicality and security are outstanding.

The embodiment of the invention provides a database encryption method and device, equipment, a storage medium and a program product, and relates to the field of distribution. The method comprises the following steps: determining a database type of a to-be-encrypted database, and determining a target encryption algorithm corresponding to data in the database according to the database type; and when an encryption instruction sent based on the to-be-encrypted database is received, performing encryption processing on data in the database according to first identity information carried by the encryption instruction and the target encryption algorithm to obtain an encrypted target database. According to the method, the database is encrypted through the identity information and the encryption algorithm, the purpose of preventing original data in the database from being leaked is achieved, tracing can be conducted according to the identity information even if data leakage occurs in the encrypted database, and the effect of improving data security is achieved.

This invention belongs to the research field of data privacy protection and efficient secret computation in secret databases, particularly relational secret databases. Specifically, it relates to a multi-table join method supporting Boolean queries in secret databases. The method comprises the following steps: Step 1: The client executes a secret database initialization protocol (including four modules: plaintext data parsing, Boolean attribute orthogonalization, index construction, and database encryption); Step 2: The client and server interact to implement a search protocol (including the client generating a "query message" and sending it to the server, and the server generating a "response message" and sending it to the client); Step 3: The client decrypts the response and obtains matching results for plaintext row identifiers that meet the query criteria.