TW201301077A - Database data management method and system - Google Patents

Abstract

The present invention provides a database data management method and system. The method includes: receiving a client computer's needs to access the database in the host; verifying the client computer's permission, to determine whether the client computer has access permission, when the client computer has access license, selecting the client computer's needs, if the client computer want to encrypt the data in the database, then encrypting the sensitive database information, receiving the client computer's operation on the database and having the same data manipulation corresponding to the database; if the client computer need to decrypt the data in the database, then decrypting the sensitive database information. The present invention can protect sensitive data, to achieve data security for database encryption and decryption process.

Description

Database data management method and system

The invention relates to a database data management method and system.

At present, the maintenance of computer systems mainly includes the following methods: (1) handing it over to the professional IT department within the company for maintenance, (2) outsourcing it to the organization outside the company for maintenance, and (3) asking the professional DBA for maintenance, DBA. Fully referred to as DataBase Administrator, refers to the database administrator.

These three maintenance methods will bring the following shortcomings:

(1) For some computer systems that store sensitive data, because of the maintenance of IT personnel, some sensitive information is easily stolen by IT personnel and illegally traded, which not only leaks personal privacy, but also brings information security to the company. A serious potential threat.

(2) The maintenance of the database requires extremely high system license and database permission, so that the DBA can view, modify or even delete the sensitive data, so that the database can be maintained and the IT staff may disclose the information. , resulting in the loss of property of the company.

In view of the above, it is necessary to provide a database data management method and system, which can protect sensitive data and realize the process of encrypting and decrypting the data of the database.

The data base data management method is applied to the management of the database data, and the method comprises the following steps: receiving the step of: receiving the access requirement of the user computer to the database in the host, wherein the user terminal computer is connected to the host through the network; Verification step: verify the permission of the client computer, determine whether the client computer has access permission, and when the client computer has access permission, perform the selection step; otherwise, directly terminate the process, and verify the process to the client computer. The computer name, IP address and client key are verified; the selection step is: selecting the access requirement of the host computer to the host, and when the client computer needs to encrypt the data of the database, the encryption step is performed, when the user computer needs to decrypt When the data of the database is used, the decryption step is performed; the encryption step: encrypting the sensitive data in the database; and the processing step: receiving the data operation of the database by the client computer, and performing the same data operation in the database, The operation of the data in the database is to add, delete, and modify the data in the database. Action query; decryption step: decrypting database of sensitive information.

The database data management system is run in a host, the system includes: a receiving module, configured to receive a user terminal computer to access a database in the host, the client computer is connected to the host through a network; The group is used to verify the permission of the client computer, determine whether the client computer has access permission, verify the computer name, IP address and client key of the client computer during the verification process; select the module for When the client computer has access permission, select the access requirement of the client computer to the host, determine whether the client computer needs to encrypt the data of the database, or need to decrypt the data of the database; the encryption module is used as the client computer. When the data of the database needs to be encrypted, the sensitive data in the database is encrypted; the processing module is configured to receive the data operation of the database by the client computer, and perform the same data operation in the database, the pair of databases The data operation is to add, delete, modify, and query the data in the database; the decryption module is used to be used as the user terminal. To decrypt data from a database, the database decryption of sensitive information.

Compared with the prior art, the data base data management method and system of the present invention enable a staff member with maintenance permission to see the real data, and can protect the sensitive data, thereby realizing the security of the database data. Encryption and decryption process.

1 is an architectural diagram of a preferred embodiment of a database material management system of the present invention.

The database material management system 10 runs in the host 1, and the host 1 further includes a database 11, which is connected to the client computer 3 via the network 2. There may be more than one client computer 3, and only one is shown in FIG. The network 2 can be an intranet or an Ethernet, or an Internet or other type of communication network.

As shown in FIG. 2, it is a functional module diagram of a preferred embodiment of the database material management system of the present invention.

The database management system 10 includes a receiving module 100, a verification module 101, a selection module 102, an encryption module 103, a decryption module 104, and a processing module 105.

The receiving module 100 is configured to receive an access requirement of the client computer 3 to the database 11 in the host 1.

The verification module 101 is configured to verify the permission of the client computer 3 and determine whether the client computer 3 has access permission. During the verification process, the computer name, IP address and client key of the client computer 3 are verified. Only when the three are completely correct can the client computer 3 be a user whose security administrator has added the user trust certificate. Only certain sensitive data in the database 11 can be encrypted and decrypted. The client key is a key for encrypting and decrypting the computer name and IP address of the client computer 3.

The security administrator is the user in the database 11, and is mainly responsible for the authorized work. By adding the user trust credentials to the database material management system 10, the access permission of the sensitive data is authorized to a certain client computer 3. The security administrator has the largest permission, and only the security administrator can directly view the encrypted and decrypted information of all sensitive data in the database 11. Security administrators can encrypt and decrypt all sensitive data.

The security administrator in the host 1 randomly generates a master key, which is a key for encrypting and decrypting sensitive data in the database 11. Master Key is very important in the database data management system 10. If someone gets the Master Key, then all the encrypted data in the database 11 can be cracked. Therefore, in order to protect the Master Key, the Master Key is required. A string of strings is re-encrypted so that the Master Key is a string of ciphertext even if it is taken. Therefore, the security administrator generates a User Key, which is stored in the system file of the host 1, uses the User Key as a key to perform MD5 irreversible encryption on the Master Key, and stores the encrypted key Table Key in the database 11. To sum up: the management of the master key Master Key adopts irreversible MD5 encryption, so that only the security administrator knows the password and enhances the security of the master key Master Key. The security administrator can generate multiple User Keys, and different User Keys can have access permissions for different sensitive materials of the database 11. When the host 1 adds the user trust credential to the client computer 3, the user key is assigned to the client computer 3 corresponding to different access permissions, and the user key is the client key. That is, there is only one Master Key in the host 1, but multiple User Keys can exist at the same time. Different User Keys correspond to different sensitive data access rights. Different User Keys can be assigned to different user computers 3, and each User Key is A Table Key can be generated with the Master Key and stored in the database 11.

The selection module 102 is configured to select the access requirement of the client computer 3 to the host 1 when the client computer 3 has the access permission, determine whether the client computer 3 needs to encrypt the data of the database 11, or need to decrypt the database. 11 information.

The encryption module 103 is configured to encrypt sensitive data in the database 11 when the client computer 3 needs to encrypt the data of the database 11.

The encryption module 103 encrypts the sensitive data by the following steps: obtaining the data type of the field to be encrypted from the ALL_TABLES, and calling the corresponding processing method according to different data types, where the encrypted field is the field of the sensitive data. The ALL_TABLES is a set of all the tables in the database 11, and the processing method refers to different encryption processing methods corresponding to different data types. If the data type is a character or a numeric type, the corresponding encryption processing method is used. Different; obtain the relevant information of the field to be encrypted from the data dictionary of the database 11 and remove the relevant constraints on the field to be encrypted, such as a preset value, etc., the data dictionary stores the encryption to be encrypted Relevant attribute information of the field, such as preset value, related constraints, etc., the relevant constraint refers to the constraint condition on the field to be encrypted. If the field is gender, the constraint condition is that only "male" or " Female"; add a temporary field in the table where the encrypted field is required, and copy the data in the encrypted field to the temporary field; the encrypted field will be cleared, and the encrypted column will be needed. The data type is changed to the RAW type; the data in the temporary field is encrypted, and the encrypted data is copied into the required encryption field, and the encryption is performed by using the Master Key generated by the security administrator in the host 1 as a key. The encryption algorithm is used to encrypt the data in the temporary field, and the encryption algorithm is one of three encryption algorithms: AES256, AES, and 3DES-2KEY; recording the encrypted related information into a record table, and deleting the temporary field The record table includes the type of the data field to be encrypted, the relevant constraints on the field to be encrypted, the related information of the field to be encrypted obtained from the data dictionary, and the encryption algorithm adopted.

Before the encryption, the sensitive data is visible. After the encryption module 103 encrypts the sensitive data, the name of the sensitive data table is changed to “E$+ original table name”, and the sensitive data is hidden, and the user computer 3 The user does not see the sensitive data. At this time, in the database 11, a view having the same name as the original table name is generated for the user of the client computer 3, and the sensitive data in this view is hidden.

The processing module 105 is configured to receive the data operation of the database 11 by the client computer 3, and perform the same data operation in the database 11. The data operation on the database 11 is an operation of adding, deleting, modifying, and querying the data in the database 11.

When the user of the client computer 3 needs to perform operations related to adding, deleting, modifying and querying the data in the database 11, the receiving module 100 receives the User Key input by the client computer 3 and calls the stored in the database. After the corresponding Table Key, the user of the client computer 3 performs the data operation on the view with the same name as the original table name, and corresponds to the data operation in the view, the processing module 105 corresponds to the data library 11 Do the same data operation.

At this time, if the user of the client computer 3 inputs the User Key and directly accesses the "E$+ original table name" table, the returned text is the encrypted text, and the same user does not input the User Key but directly accesses the original table. A view with the same name will return empty text. Thereby, the transparent operation of the sensitive data by the client computer 3 is realized, and the user operates the sensitive data.

The decryption module 104 is configured to decrypt sensitive data in the database 11 when the client computer 3 needs to operate on the data of the database 11.

The decryption module 104 decrypts the sensitive data by acquiring the data of the field to be decrypted from the record table, and adding a temporary field of the RAW type in the table where the field to be decrypted is added, and the field to be decrypted is The field where the sensitive data is located; the field to be decrypted is copied to the temporary field, and the field to be decrypted is cleared; the type of the data to be decrypted is converted to the original data type; the temporary field data is decrypted, and the data is decrypted. The data is copied to the field to be decrypted, and the decryption is an encryption algorithm obtained by the record table to obtain a decryption field, and the master key is used as a key, and the relevant decryption algorithm is used for reverse decryption; Decrypt the preset value of the field and the field constraint; remove the encrypted related information from the record table, and delete the temporary field. The original data type, the preset value of the field to be decrypted, and the field constraint are obtained from the record table.

In the decryption process, the receiving module 100 first needs to receive the user key User Key of the client computer 3, and calls the corresponding Table Key stored in the database 11, and the decryption module 104 can decrypt the relevant sensitive data.

The invention protects sensitive data, and the maintenance personnel can not see the real data for the purpose, using the client key management (enhance the management and protection of the encryption operator password), IP and host management (restricting the user who logs in to the encryption operator) The end computer 3 and the unique IP address), the operation flow log monitoring (the recording table described in the present invention, and the detailed operation of any action performed by the encryption operator) are characterized, thereby forming a unique data encryption. And the decryption process.

As shown in FIG. 3, it is a flowchart of a preferred embodiment of the data management method of the database of the present invention.

In step S100, the receiving module 100 receives the access requirement of the client computer 3 to the database 11 in the host 1.

In step S101, the verification module 101 verifies the permission of the client computer 3, and determines whether the client computer 3 has access permission. When the client computer 3 has the access permission, step S102 is performed; otherwise, the flow is directly ended.

During the verification process, the computer name, IP address and client key of the client computer 3 are verified. Only when the three are completely correct can the client computer 3 be a user whose security administrator has added the user trust certificate. Only the sensitive data in the database 11 can be encrypted and decrypted. The client key is a key for encrypting and decrypting the computer name and IP address of the client computer 3.

In step S102, the selection module 102 selects the access requirement of the client computer 3 to the host 1, determines whether the client computer 3 needs to encrypt the data of the database 11, or needs to decrypt the data of the database 11. When the client computer 3 needs to encrypt the data of the database 11, the process proceeds to step S103. When the client computer 3 needs to decrypt the data of the database 11, the process proceeds to step S104.

In step S103, the encryption module 103 encrypts the sensitive data in the database 11. The encryption process will be described in detail in FIG.

Before the encryption, when the sensitive data is visible, after the encryption module 103 encrypts the sensitive data, the name of the table where the sensitive data is located is changed to “E$+ original table name”, and the user of the user computer 3 cannot see For sensitive data, in the database 11, a view having the same name as the original table name is generated for the user of the client computer 3 to operate, and the sensitive data is also hidden in the view.

In step S105, the processing module 105 receives the data operation of the database 11 by the client computer 3. The data operation on the database 11 is an operation of adding, deleting, modifying, and querying the data in the database 11.

When the user of the client computer 3 needs to perform operations related to adding, deleting, modifying and querying the data in the database 11, the receiving module 100 receives the User Key input by the client computer 3 and calls the stored in the database. After the corresponding Table Key, the user of the client computer 3 performs the data operation on the view with the same name as the original table name, and the processing module 105 performs the same operation in the database 11 corresponding to the data operation on the view. Data operation.

In step S104, the decryption module 104 decrypts the sensitive data in the database 11. The decryption process will be described in detail in FIG.

In the decryption process, first, the receiving module 100 needs to receive the user key User Key of the client computer 3, and calls the corresponding Table Key stored in the database 11, and the decryption module 104 can decrypt the relevant sensitive data.

As shown in FIG. 4, it is a cipher sub-flow diagram of a preferred embodiment of the data management method of the present invention.

In step S1030, the encryption module 103 obtains the data type of the field to be encrypted from the ALL_TABLES, and invokes a corresponding processing method according to different data types. The required encryption field is a field in which the sensitive data is located, and the ALL_TABLES is A set of all the tables in the database 11, the processing method refers to different encryption processing methods corresponding to different data types. If the data type is a character or a numeric type, the corresponding encryption processing method is different.

Step S1031, the encryption module 103 obtains related information of the field to be encrypted from the data dictionary of the database 11, and removes related constraints on the field to be encrypted, such as a preset value, etc. The data dictionary stores related attribute information of the field to be encrypted, such as a preset value, a related constraint, etc., and the related constraint refers to a constraint condition on the field to be encrypted. If the field is gender, the constraint condition is only Can enter "male" or "female".

In step S1032, the encryption module 103 adds a temporary field in the table where the field to be encrypted, and copies the data in the field to be copied into the temporary field.

In step S1033, the encryption module 103 clears the field to be encrypted, and converts the data type in the field to be RAW into a RAW type.

In step S1034, the encryption module 103 encrypts the data in the temporary field, and copies the encrypted data into the field to be encrypted. The encryption is performed by using the master key generated by the security administrator in the host 1 as a key. The encryption algorithm is used to encrypt the data in the temporary field, and the encryption algorithm is one of three encryption algorithms: AES256, AES, and 3DES-2KEY.

Step S1035, the encryption module 103 records the encrypted related information into a record table, and deletes the temporary field, where the record table includes the type of the data field to be encrypted, the relevant constraint on the field to be encrypted, and the data. The dictionary obtains information about the fields to be encrypted and the encryption algorithm taken.

As shown in FIG. 5, it is a decryption sub-flow chart of a preferred embodiment of the database material management method of the present invention.

In step S1040, the decryption module 104 obtains the field to be decrypted from the record table, and adds a RAW type temporary field in the table where the field needs to be decrypted, and the field to be decrypted is the field where the sensitive data is located. .

In step S1041, the decryption module 104 copies the field to be decrypted to the temporary field, and clears the field to be decrypted.

In step S1042, the decryption module 104 converts the type of the data to be decrypted into the original data type. The original data type is obtained from the record table.

Step S1043, the decryption module 104 decrypts the temporary field data, and copies the decrypted data to the field to be decrypted, and the decryption is an encryption algorithm obtained by the record table to obtain a field to be decrypted, and The master key generated by the security administrator in the host 1 is used as a key, and the relevant decryption algorithm is used for reverse decryption.

In step S1044, the decryption module 104 restores the preset value and the field constraint of the field to be decrypted. The preset value and the field constraint of the field to be decrypted are obtained from the record table.

In step S1045, the decryption module 104 removes the encryption related information from the record table, and deletes the temporary field.

In summary, the present invention complies with the requirements of the invention patent and submits a patent application according to law. The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited to the above-described embodiments, and equivalent modifications or variations made by those skilled in the art in light of the spirit of the present invention are It should be covered by the following patent application.

1. . . Host

10. . . Database data management system

11. . . database

2. . . network

3. . . Client computer

100. . . Receiving module

101. . . Verification module

102. . . Selection module

103. . . Cryptographic module

104. . . Decryption module

105. . . Processing module

S100. . . Receiving access requirements of the client computer to the database in the host

S101. . . Verify the permissions of the client computer and determine if the client computer has access permissions.

S102. . . Encrypt data in the database or decrypt the data in the database

S103. . . Encrypt sensitive data in the database

S104. . . Decrypt sensitive data in the database

S105. . . Receiving data operations of the client computer on the database, and performing the same data operation in the database

1 is a block diagram of a preferred embodiment of a database material management system of the present invention.

2 is a functional block diagram of a preferred embodiment of the database material management system of the present invention.

3 is a flow chart of a preferred embodiment of a database management method of the present invention.

4 is a cipher sub-flow diagram of a preferred embodiment of the data repository management method of the present invention.

FIG. 5 is a flowchart of a decryption subroutine of a preferred embodiment of the data management method of the database of the present invention.

S100. . . Receiving access requirements of the client computer to the database in the host

S101. . . Verify the permissions of the client computer and determine if the client computer has access permissions.

S102. . . Encrypt data in the database or decrypt the data in the database

S103. . . Encrypt sensitive data in the database

S104. . . Decrypt sensitive data in the database

S105. . . Receiving data operations of the client computer on the database, and performing the same data operation in the database

Claims (10)

A database data management method, wherein the method comprises the steps of:
Receiving step: receiving the access requirement of the client computer to the database in the host, the client computer connecting to the host through the network;
Verification step: verify the permission of the client computer, determine whether the client computer has access permission, and when the client computer has access permission, perform the selection step; otherwise, directly terminate the process, and verify the process to the client computer. Verify the computer name, IP address and client key;
Selection step: selecting the access requirement of the host computer to the host. When the client computer needs to encrypt the data of the database, the encryption step is performed. When the user computer needs to decrypt the data of the database, the decryption step is performed;
Encryption step: encrypt sensitive data in the database;
Processing step: receiving the data operation of the database by the client computer, and performing the same data operation in the database, wherein the data operation of the database is to add, delete, modify, and query the data in the database. operating;
Decryption step: Decrypt sensitive data in the database. The method for managing data in a database according to claim 1, wherein the encrypting step comprises:
Obtaining the data type of the field to be encrypted from ALL_TABLES, and calling the corresponding processing method according to different data types, wherein the required encryption field is a field in which the sensitive data is located, and the ALL_TABLES is a collection of all the tables in the database;
Obtain the attribute information of the field to be encrypted from the data dictionary of the database, and remove the constraint on the field to be encrypted;
Add a temporary field in the table where the encrypted field is to be added, and copy the data in the encrypted field to the temporary field;
Clear the field to be encrypted and convert the data type in the encrypted field to RAW type;
Encrypting the data in the temporary field, and copying the encrypted data into the field to be encrypted, the encryption is to use the master key generated by the host, and the encryption algorithm is used to encrypt the data in the temporary field. The master key is a key generated by the security administrator for encrypting and decrypting sensitive data in the database, and the security administrator is a user in the database;
Recording the encrypted related information into a record table, and deleting the temporary field, the record table includes the type of the data field to be encrypted, the constraint on the field to be encrypted, and the attribute to be encrypted from the data dictionary. Information and the encryption algorithm taken. The method for managing data in a database according to the second aspect of the invention, wherein the encrypting step further comprises:
A view with the same name as the original table name is generated in the database for the user of the user computer to perform data operations. The method for managing data in a database according to claim 1, wherein the decrypting step comprises:
Obtaining the field information to be decrypted from the record table, and adding a RAW type temporary field in the table where the field to be decrypted is located, where the decrypted field is a field in which the sensitive data is located;
Copy the field to be decrypted to the temporary field and clear the field to be decrypted;
Converting the need to decrypt the field data type to the original data type, the original data type being obtained from the record table;
Decrypting the temporary field data, and copying the decrypted data to the field to be decrypted, the decryption is an encryption algorithm obtained by the record table to decrypt the field, and using the master key to take relevant Decryption algorithm for reverse decryption;
Restoring a preset value and a field constraint condition for decrypting the field, and the preset value and the field constraint condition of the field to be decrypted are obtained from the record table;
The encryption related information is removed from the record table and the temporary field is deleted. The method for managing data in the database according to claim 1, wherein before the decrypting step or the processing step, the method further comprises:
Receiving the client key input by the user of the user computer, and calling the Table Key corresponding to the client key stored in the database, wherein the Table Key is generated by using the client key to perform MD5 irreversible encryption on the master key. Key. A database material management system, wherein the system comprises:
a receiving module, configured to receive a user terminal computer to access a database in the host, and the client computer is connected to the host through a network;
The verification module is used to verify the permission of the client computer, determine whether the client computer has the access permission, and verify the computer name, IP address and client key of the client computer during the verification process;
The selection module is configured to select the access requirement of the client computer to the host when the client computer has the access permission, determine whether the client computer needs to encrypt the data of the database, or need to decrypt the data of the database;
The encryption module is configured to encrypt sensitive data in the database when the client computer needs to encrypt the data of the database;
The processing module is configured to receive data operations of the user computer on the database, and perform the same data operation in the database, wherein the data operation of the database is to add, delete, and modify data in the database. , the operation of the query;
The decryption module is configured to decrypt sensitive data in the database when the client computer needs to decrypt the data of the database. The database management system of claim 6, wherein the encryption module encrypts the sensitive data in the database comprises:
Obtaining the data type of the field to be encrypted from ALL_TABLES, and calling the corresponding processing method according to different data types, wherein the required encryption field is a field in which the sensitive data is located, and the ALL_TABLES is a collection of all the tables in the database;
Obtain the attribute information of the field to be encrypted from the data dictionary of the database, and remove the constraint on the field to be encrypted;
Add a temporary field in the table where the encrypted field is to be added, and copy the data in the encrypted field to the temporary field;
Clear the field to be encrypted and convert the data type in the encrypted field to RAW type;
Encrypting the data in the temporary field, and copying the encrypted data into the field to be encrypted, the encryption is to use the master key generated by the host, and the encryption algorithm is used to encrypt the data in the temporary field. The master key is a key generated by the security administrator for encrypting and decrypting sensitive data in the database, and the security administrator is a user in the database;
Recording the encrypted related information into a record table, and deleting the temporary field, the record table includes the type of the data field to be encrypted, the constraint on the field to be encrypted, and the attribute to be encrypted from the data dictionary. Information and the encryption algorithm taken. The database management system of claim 7, wherein the encryption module is further configured to:
A view with the same name as the original table name is generated in the database for the user of the client computer to operate. The database management system of claim 6, wherein the decryption module decrypts the sensitive data in the database includes:
Obtaining the field information to be decrypted from the record table, and adding a RAW type temporary field in the table where the field to be decrypted is located, where the decrypted field is a field in which the sensitive data is located;
Copy the field to be decrypted to the temporary field and clear the field to be decrypted;
Converting the need to decrypt the field data type to the original data type, the original data type being obtained from the record table;
Decrypting the temporary field data, and copying the decrypted data to the field to be decrypted, the decryption is an encryption algorithm obtained by the record table to decrypt the field, and using the master key to take relevant Decryption algorithm for reverse decryption;
Restoring a preset value and a field constraint condition for decrypting the field, and the preset value and the field constraint condition of the field to be decrypted are obtained from the record table;
The encryption related information is removed from the record table and the temporary field is deleted. The database management system of claim 6, wherein the receiving module is further configured to:
When the processing module needs to perform data operation or the decryption module needs to be decrypted, the user terminal key input by the user computer is received, and the Table Key corresponding to the user key stored in the database is called, and the Table Key is The key generated by MD5 irreversible encryption of the master key using the client key.