Pki Encrypted File System Based Database

With the rapid development of information technology, database applications are very extensive and in-depth into various fields, and gradually become the core of the information system. Encryption technology implementation are essential to ensure that confidential information, you can make some important data is stored on a computer on unsafe or insecure transmission network environment. File system at any operating system at the center of almost all. To this end, together with PKI to enable file system to become a database on the Encrypting File System, when the storage server physical security can not be guaranteed under the conditions, we can still ensure data security.This article first analyzes the characteristics of the database file system, a file system security analysis, put forward a PKI-based encrypted file system, and introduce the PKI system, analysis of the production of certificates issued, renewed, revoked certificates and other certificates operation. Secondly, the use of OpenSSL development tools, at Windows 2000 Server environment, focusing on implementation of the PKI encrypted file system EE, CA and RA functions, in-depth study of encryption and certificate service provider module and signature verification and implementation of encryption and decryption modules.Finally the whole system safety analysis, which verifies an encrypted file system can withstand a high degree of malicious attacks, protection of data security.