基于Sqlite数据库的网络远程操作安全性研究与应用  

Security Study and Application of Network Remote Operation of Sqlite Database

作　　者：李瑞山 包芳 闫文敬 尹丽楠 何涵箐 LI Ruishan;BAO Fang;YAN Wenjing;YIN Linan;HE Hanqing(Xuji Electric Co.,Ltd.,Xuchang 461000,China)

机构地区：[1]许继电气股份有限公司,河南许昌461000

出　　处：《电工技术》2023年第21期233-236,共4页Electric Engineering

摘　　要：数据库Sqlite占用资源少、处理速度快,大量应用于嵌入式设备中,但Sqlite数据库不支持网络操作,无法通过网络远程维护数据库,而对于很多嵌入式设备而言远程维护又是实际需要的。研究通过网络操作Sqlite数据库且保证数据库数据的安全性。针对Sqlite数据库的特性,通过开发基于C/S架构的数据引擎,采用NLV方法编解码数据库数据,兼顾数据传输的健壮性、准确性、完整性;采用用户角色四权机制;网络传输采用基于国密算法的安全机制,增加CA证书、数字签名、数字验证、散列加密等,即通过CA证书颁发私钥证书于数据库服务端,颁发公钥证书于数据库客户端,通过对客户端数字摘要的认证机制保证数据库数据的安全性和可靠性。The Sqlite database occupies fewer resources and handles quickly, and has currently been widely used in embedded devices. However, the Sqlite database does not support remote operation, which is not conducive to the remote maintenance of embedded devices, and also limits the application scope of the Sqlite database. According to the characteristics of Sqlite database, the remote operation of Sqlite database is supported by the C/S architecture adjunct program. The NLV method is used to serialize the data in the database to ensure the robustness, accuracy and completeness of the data transmitted by the network. The method introduces the separation of powers mechanism, in which different user levels have different operating authority. The Chinese commercial cryptographic algorithms are also employed as security mechanisms by introducing tools such as CA certificates, digital signatures, digital verification, hash encryption, etc., issuing private key certificates on the database server through CA certificates, issuing public key certificates on database clients. Thereby security and reliability of remote operation can be ensured owing to the multiple authentication mechanism of digital abstract.

关 键 词：SQLITE数据库 国密算法 三权分立机制 数字摘要 NLV方法 

分 类 号：TM769[电气工程—电力系统及自动化]