基于USB Key的数据库细粒度加解密技术研究

A Research of Database Fine-Grained Encryption Based on USB Key

数据库安全是信息系统安全保障的一个重要环节,如何对敏感信息进行加密保护是一有意义的课题。本文提出并实现了基于USB Key的数据库细粒度加解密技术,该技术能在不改变数据库正常运行的情况下,在数据库驱动之上构造一个通用数据库细粒度加解密动态链接库组件,使调用该组件的应用程序可以采用USB Key进行身份认证,使用XML序列化技术对加密粒度进行细致控制,还可以利用AES加密算法对数据进行快速地高强度加解密,以保障数据存取的安全。

Database security is an important part of information system security. How to encrypt sensitive information is a significant issue. This paper proposes and implements a database encryption and decryption technology based on USB key, which can construct a fine-grained encryption and decryption dynamic-hnk library component in the above database-driven without changing the normal operation of the common database. Under the careful control of USB key used for authentication, the encrypt XML serialization granularity technology and AES encryption algorithm, applications called component make data encryption and decryption quick high strength, in order to protect the security of data access.