Research On Key Technology Of Database Encryption And Its Application

With the continuous improvement of the national informatization level, particularly the rapid development of Internet technology, database systems are used more widely.Howerver, the contradiction between data centralized storage and wide sharing makes the security problem of database system very outstanding. Currently, database system’s own security mechanism can not completely solve the difficult security challenges. So research on database encryption technology has great realistic significance. Database encryption technology applies the principle of modern cryptography to database system and improves the database security architecture further. It effectively guards against the risk that the privileges of super administrator in DBMS are too high, and resists the attacks of illegal invaders in the application layer. In shor, database encryption technology may ensure information system security.In this thesis, we have an in-depth analysis on current security threats faced by database system and the development status of database system security technology. Using data obfuscation and encryption technology, we put forward a database encryption algorithm based on generated sub-keys supporting ciphertext index and several data obfuscaton algorithms such as character scrambling, repeating character masking etc. In the database encryption algorithm, key management is simple and field-level encryption is supported. This algorithm gives consideration to both data encryption strength and processing efficiency. Using the former database data obfuscation and encryption algorithms, we design and implement a database encryption prototype system located between application and database system. With the characteristics of rapid development, abundant interface, powerful function in the Microsoft.Net Framework, the database encryption prototype system is designed by C#language. It supports most mainstream relational database systems with ODBC interface. That greatly improves the applicability of database encryption prototype system. Through analyzing SQL data request and using its own encryption engine, it sets up a security bridge between application and database system.Each module of the system was tested at last. The test result shows the sensitive information in database is protected and the security of database system is enhanced.