煤矿安全监控系统数据加密存储方案设计  

Design of data encryption storage scheme for coal mine safety monitoring system

作　　者：张翼 于林 卢向明 ZHANG Yi;YU Lin;LU Xiangming(China Coal Technology&Engineering Group Chongqing Research Institute,Chongqing 400039,China;State Key Laboratory of Gas Disaster Emergency Information Technology,Chongqing 400039,China)

机构地区：[1]中煤科工集团重庆研究院有限公司,重庆400039 [2]瓦斯灾害应急信息技术国家重点实验室,重庆400039

出　　处：《煤矿安全》2023年第10期196-200,共5页Safety in Coal Mines

摘　　要：针对煤矿安全监控系统数据加密与防篡改手断逐渐被人破解,已加密的监控系统数据有着较大被篡改风险的问题;通过分析当前主要防篡改技术、数据篡改手段以及系统主要数据特征,从数据访问用户加密管理、数据加密存储,以及数据被篡改后的恢复等方面通盘考虑,结合系统数据的实际应用场景,设计了数据加密存储的总体架构和基于关系数据库与文件存储的数据加密存储方案;方案通过在关系数据库存储中引入可搜索数据混淆、数据加密、数据检验和用户管理外壳等数据加密与防篡改手段,以及对关键数据进行文件加密备份的方式进行数据加密存储。应用该方案的煤矿安全监控系统,可有效防范目前常见的置换法、删除法等数据篡改手段,在煤矿安全监控、人员定位等系统数据加密与防篡改设计上有着较大的借鉴意义。Aiming at the problem that data encryption and tamper-proof data of the coal mine safety monitoring system are gradually being cracked,and the encrypted monitoring system data has a greater risk of being tampered,by analyzing the current main antitampering technologies,main data tampering methods and main data characteristics of the system,considering overall data access user encryption management,data encrypted storage,and data recovery after tampering,combined with the actual and application scenarios of system data,the overall architecture of data encrypted storage and data encrypted storage based on relational database and file storage are designed.The scheme introduces data encryption and anti-tampering methods such as searchable data obfuscation,data encryption,data inspection,and user management shell in relational database storage,and encrypts and stores key data in the form of file encryption backup.The coal mine safety monitoring system with this scheme can effectively prevent data tampering methods such as the replacement method and the deletion method,which are common at present,and has great reference significance in the data encryption and tamper-proof design of coal mine safety monitoring,personnel positioning and other systems.

关 键 词：煤矿安全监控系统 数据加密存储 防篡改 可搜索数据混淆 用户管理外壳 

分 类 号：TD76[矿业工程—矿井通风与安全]