数据库加密方案及应用场景研究

Research on Database Encryption Scheme and Application Scenarios

实现数据存储加密有2种方案,密码机加密和数据库透明加密。其中,数据库透明加密又分为库加密、表加密、应用系统侧加密、网关透传加密以及数据库侧扩展加密。通过分析关系型数据库的不同加密方案及国产密码算法应用的实现,对不同加密方案的原理、优缺点和应用场景进行概括性的总结和对比。同时,总结涉及密文的索引、模糊查询、数值比较、聚合函数运算等数据库操作的实现方式。

There are two schemes to implement data storage encryption,cipher machine encryption and database transparent encryption,in which database transparent eneryption is classified whole database file encryption,table encryption,application system side encryption,gateway through-pass encryption and database side extension encryption.By analyzing different encryption schemes for relational databases and the implementation of domestic cryptographic algorithm application,the principles,advantages,disadvantages and application scenarios of different encryption schemes are briefly summarized and compared.At the same time,the implementation methods of database operations such as ciphertext index,ciphertex fuzzy query,ciphertex numerical comparison and ciphertex aggregation function operation are summarized.