一种数据库加密及密钥管理方法  

A METHOD OF DATABASE ENCRYPTION AND KEY MANAGEMENT

作　　者：秦军[1] 王正飞[1] 谈子敬[1] 汪卫[1] 施伯乐[1] 

机构地区：[1]复旦大学计算机与信息技术系,上海200433

出　　处：《计算机应用与软件》2006年第12期5-7,27,共4页Computer Applications and Software

基　　金：国家自然科学基金重点项目(69933010);国家863计划(2002AA4Z3430)。

摘　　要：数据库中敏感数据的防窃取和防篡改问题是信息安全的一个重要方面,在数据库管理系统(DBMS)中加入安全特性已迫在眉睫。提出一种方法,对DBMS实现进行修改,在不影响DBMS功能的情况下使其支持数据库加密,并且对DBMS性能的影响也很小。给出了一个与之相关的密钥管理体系结构,使得密钥的管理既安全又高效。最后,在TPC-H数据集上对数据库加密后的性能进行了评估。The protection of sensitive data in database is an important aspect on information security. It becomes more and more exigent to incorporate security features into DBMS. In this paper,a methed is presented that makes DBMS support database encryption by modifying the implementation of DBMS. This method doesn＇t affect the functionality of DBMS and decreases the performance of DBMS little. This paper also presents correlative key management architecture that makes the management of key secure and effective. Finally, the performance of database eneryption is assessed by experimenting on TPC-H data set.

关 键 词：数据库 块加密 密钥管理 安全字典 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]