数据库字段安全分级的加密方案

Encryption Scheme of Database Field with Security Classification

将数据库中关键敏感字段根据其安全需求分为不同级别,用对称加密算法对关键敏感字段分级别加密,其数据密钥采用椭圆曲线加密算法保护。该方案将对称加密算法、椭圆曲线公钥加密算法和单向函数有机结合,实现了用户使用权限和关键敏感字段的安全级别的关联。用该方案建立的加密数据库,不仅可以保证敏感数据的机密性和完整性,而且节省大量存储空间和支持分级别权限访问,保证了数据库的高效可用性。

This paper divides sensitive syllable into different rank according to these safe needs, encrypts the confidential information with symmetrical encryption, and encrypts the private keys with asymmetrical encryption. Its security is based on elliptic curve discrete logarithm problem. A cipher-text database model built on this new encryption scheme not only can ensure the security of the information, but also can save large number of space, and provide grading access.