基于门限秘密共享的入侵容忍数据库设计方案  

Design scheme of intrusion tolerance database based on threshold secret share

作　　者：孙玉海[1] 王辉[1] 周霖[2] 赵成旺[1] 

机构地区：[1]炮兵指挥学院,河北廊坊065000 [2]山东经济学院燕山学院学生管理办公室,山东济南250104

出　　处：《计算机工程与设计》2007年第19期4631-4633,共3页Computer Engineering and Design

摘　　要：传统的入侵容忍数据库较好解决了数据的可用性和完整性,但是不能保证数据的机密性。门限密码学提供了建立入侵容忍应用的新方法。基于门限秘密共享的入侵容忍数据库由策略调节及冗余的DB Proxy、DB Agent、异构数据库服务器等组成,通过采用(n,t+1)门限秘密共享方案,不仅实现数据的可用性和完整性,而且能保证机密性,可以有效抵御来自内外的篡改、DDOS等恶意攻击。The traditional intrusion tolerance database resolves the availability and the integrity of the data. But it can not ensure the confidentialityofthedate. Thethreshold cryptography provides a new approach to building intrusion tolerance applications. The intrusion tolerance database based threshold secret share makes up of strategy adjustor and redundant DB Proxys, DB Agents, isomerous datebase servers. It adopts （n, t＋1） threshold secret share scheme, not only realize the availability of database and the integrity of the data, but also ensure the confidentiality of sensitive data. And it can effectively resist malicious attacks, such as sophisticating which comes from inside or outside, DDOS, etc.

关 键 词：数据库安全 入侵 容忍 冗余 秘密共享 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]