数据库加密方案及应用场景研究  

Research on Database Encryption Scheme and Application Scenarios

作　　者：艾永琦 李伟良 贾真 张鑫一 商晴庆 刘文婷 AI Yongqi;LI Weiliang;JIA Zhen;ZHANG Xinyi;SHANG Qingqing;LIU Wenting(State Grid Information&Telecommunication Branch,Beijing 100761,China)

机构地区：[1]国家电网有限公司信息通信分公司,北京100761

出　　处：《微型电脑应用》2024年第7期93-96,101,共5页Microcomputer Applications

摘　　要：实现数据存储加密有2种方案,密码机加密和数据库透明加密。其中,数据库透明加密又分为库加密、表加密、应用系统侧加密、网关透传加密以及数据库侧扩展加密。通过分析关系型数据库的不同加密方案及国产密码算法应用的实现,对不同加密方案的原理、优缺点和应用场景进行概括性的总结和对比。同时,总结涉及密文的索引、模糊查询、数值比较、聚合函数运算等数据库操作的实现方式。There are two schemes to implement data storage encryption,cipher machine encryption and database transparent encryption,in which database transparent eneryption is classified whole database file encryption,table encryption,application system side encryption,gateway through-pass encryption and database side extension encryption.By analyzing different encryption schemes for relational databases and the implementation of domestic cryptographic algorithm application,the principles,advantages,disadvantages and application scenarios of different encryption schemes are briefly summarized and compared.At the same time,the implementation methods of database operations such as ciphertext index,ciphertex fuzzy query,ciphertex numerical comparison and ciphertex aggregation function operation are summarized.

关 键 词：数据库透明加密 库加密 表加密 应用系统侧加密 网关透传加密 数据库侧扩展加密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]