密文数据库系统的设计

Design of Encrypted Database System

文章基于目前常用的PKI体系,在不改变数据库管理系统内部运行机制的前提下,通过程序逻辑实现了密文数据库,并在一定程度上保持了数据库原有的查询检索功能。为了保证密文数据在不解密的情况下能够被检索出来,日期、数字类型的数据需要按照一定的规则转换成字符,并且加密使用的分组密码算法需要进行一些改造。文章最后对密文数据库的密钥管理提出了一个建议性的解决方案。

Based on PKI,without change of internal mechanism of database management system,the encrypted database system is set up only with technology of program logic ,and the search and index function is reserved in the meantime. In order to enable query on ciphertext,date and numeric typed data must be transformed according some rules,and the grouping cipher arithmetic must be changed a little.A suggested solution is put forward about the management of encrypt key of encrypted database.