基于三层次的数据库加密应用系统  

Three-layer application system for database encryption

作　　者：陈铁英[1] 陈华[1] 刘瑜[1] 

机构地区：[1]华中科技大学控制科学与工程系,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2005年第7期41-43,46,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：传统的数据库保护方式存在安全漏洞:系统管理人员可以查看任何数据;黑客侵入网络后可以毫不费力地盗窃数据库服务器中的数据和破坏数据完整性.针对这些问题,在数据库加密理论基础上,设计了一种三层次的数据库加密应用系统,对该系统的框架结构、系统的数据库加脱密引擎和加密字典管理程序进行了讨论,给出了这两大部件中的各个模块的设计.该系统在客户端实现数据加密,数据在网上和在数据库中都是密文,不但增加了数据在网络传输时的安全,而且包括系统管理员在内的无关人员都不能见到明文,即使黑客窃取了数据库中的数据,仍然难以得到所需的信息.大大提高了数据的安全性.Insecurity and vulnerability exist in the traditional database protection procedures, including that the system administrator could get everything from database and hacker could steal and destroy data in computer system when they intrude the network. In view of these facts, this paper developed a three-layer application system of database encryption based on the classic theory of database encryption and current information system. Its framework and structure were also described. And two key components of the system, encryption (decryption) engine and management software of encryption dictionary, including the development of all modules to realize the system described and analyzed. Since the data on client, and on network and in database were encrypted in this system, those who are not accredited can not get any information from accredited data on network in database.

关 键 词：系统安全 数据库加密 加密字典 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]