Research And Implementation Of Database Encryption System Model

The Internet is becoming more and more open, which results in the gradually serious problems to the network information security. Network database server, as a host for information of this information society, also began to attract hackers. The database is so frequently hacked that the traditional firewall protection as well as other shielding software is insufficient to guarantee the security of enterprise database. Database encryption technology, as the last database protection procedure, has gradually been attached great importance by enterprise database administrators.Database encryption technology encrypts the data in the database, so that the important data in the database work in a form of cipher text. Consequently, the data information is ensured not to be leaked and the database is thus ensured security even if the database data is stolen. Mainstream database management system (Database Management System, DBMS), such as Oracle, SQL Server, etc., has provided simple data encryption, but with a limited encryption performance. And the DBMS's own encryption method used to encrypt data, make data migration between different DBMS more difficult. As the DBMS manufacturers may not publicize source code of their products, the tactic of modifying the DBMS kernel to enhance the database encryption is more difficult. The approach of this paper is designing a cryptographic system in the external DBMS, which take the mission of encryption storage, decryption and key management, as a result, ensures the security of the database.This paper first introduces the background of database encryption technology, as well as domestic and foreign research status,and discusses the necessity for database encryption. Then the relevant theories of database encryption technology is introduced, including those related concept of database security, information security evaluation criteria, data encryption algorithm, database encryption system encryption level, and so on. Furthermore, through analyzing the database encryption based model structure and database application system structure, a design project of database encryption solution is proposed, based on which, an integrated database encryption system is divided into five logical modules: key storage module, key engine module, key information module, key management module and data storage module. Individual module and the details for realization between modules are deeply analyzed. Finally, the program for the devised encryption system has been implemented. The performance and functional testing of the encryption system have been carried out on an online examination system to confirm the effectiveness of the system.