数据库敏感信息可变保序加密安全算法研究  

Research on Security Algorithm of Variable Order Preserving Encryption for Database Sensitive Information

作　　者：吕海翠[1] 郭玲 LV Hai-cui;GUO Ling(Haojing College of Shaanxi University of Science&Technology,Xi'an Shanxi 712046,China;Shanxi University of Technology,Hanzhong Shanxi 723000,China)

机构地区：[1]陕西科技大学镐京学院,陕西西安712046 [2]陕西理工大学,陕西汉中723000

出　　处：《计算机仿真》2021年第9期301-305,共5页Computer Simulation

基　　金：咸阳市科技局项目(2019K02-19)。

摘　　要：网络环境日趋复杂给数据库的安全访问提出了严峻挑战,针对敏感数据日益增长的数据库信息,提出了敏感信息可变保序加密安全算法。在保序加密模型分析的基础上,为避免明文顺序相同造成加密效果不佳的问题,引入随机发生函数构建密钥,使明文域与任意数共同影响密钥,并通过对明文域采取等分处理降低密文域大小,从而完成对存入数据库的明文域信息加密。对数据库敏感信息引入量子计算进行二次加密,利用自旋态和模糊态生成密钥,以及加密子空间矩阵。解密时根据密钥特征,结合加密过程中的模糊状态计算出加密传函和传递密钥。通过对Mysql数据库表的实验测试,加密时间、插入时间,以及查询时间均得到显著优化,表明方法具有良好的存储访问效率;方法的抗攻击度明显提升,敏感信息披露率显著降低,表明方法有效提升了数据库以及敏感信息的安全性。The increasing complexity of the network environment poses a serious challenge to the security of database access.Aiming at the increasing database information of sensitive data, this paper proposes a variable order-preserving encryption security algorithm for sensitive information.Based on the analysis of the order-preserving encryption model, in order to avoid the problem of poor encryption effect caused by the same plaintext order, the random generating function was introduced to construct the key which is affected by the domain and any number.In order to reduce the size of the ciphertext field, the plaintext field information stored in the database was encrypted.Quantum computing was introduced to encrypt the sensitive information of the database.The key was generated by using spin state and fuzzy state, and the subspace matrix was encrypted.According to the characteristics of the key and the fuzzy state in the encryption process, the encryption transfer function and the transfer key were calculated.Through the experimental test of the MySQL database table, encryption time, insertion time and query time were significantly optimized.It shows that the method has good storage access efficiency.In addition, the anti-attack degree of the method is significantly improved, and the disclosure rate of sensitive information is significantly reduced.It shows that the method effectively improves the security of database and sensitive information.

关 键 词：数据库敏感信息 可变保序加密 随机发生函数 量子计算 加密算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]