CN104517058A

CN104517058A - Method for achieving safe information storage by encrypting and storing information into corresponding side tables

Info

Publication number: CN104517058A
Application number: CN201310444313.1A
Authority: CN
Inventors: 翟朝霞
Original assignee: JIANGSU ZHIRUAN INFORMATION TECHNOLOGY Co Ltd
Current assignee: JIANGSU ZHIRUAN INFORMATION TECHNOLOGY Co Ltd
Priority date: 2013-09-26
Filing date: 2013-09-26
Publication date: 2015-04-15

Abstract

The invention relates to practical application of the information security technology to software systems of banking industry, particularly to a method for achieving safe information storage by encrypting and storing information into corresponding side tables. The method comprises the corresponding side tables with one field each for the key table of an information system; encrypting every record information of the key table into a character string through DES (data encryption standard) and storing the data string into the corresponding side table. Therefore, when the record information changes, the information system can correct the encrypted record information of the corresponding side table to ensure the consistency of data information of the main table and the side tables; when a database (DBA) user corrects and deletes information background, due to the fact that the user cannot find corresponding records in the side tables for corresponding correction and deleting, the information system can find out the corrected or deleted records through comparison and timely restore data. The information system designed through the method for achieving safe information storage by encrypting and storing the information into the corresponding side tables can prevent legal or illegal DBA users from directly correcting and deleting the data of the key table in a database, thereby greatly improving the safety performance and achieving the effect that data cannot be corrected and deleted even being visible.

Description

A kind of information encryption be stored in corresponding subtabulation realize information security preserve method

Technical field

The present invention relates to practical application in the software systems of information security technology in bank's industry, close key table to infosystem and set up the corresponding subtabulation only having a field, the each recorded information of key table of checking on becomes a character string to be stored in corresponding subtabulation by des encryption, when recorded information changes, infosystem can revise scrambled record information in corresponding subtabulation, ensure major-minor table data message consistance like this, if database DBA user is in backstage amendment with when deleting information record, corresponding amendment and deletion is made due to corresponding record cannot be found in subtabulation, will find after infosystem comparison to be modified or deleted record, data can be recovered in time.The infosystem designed by this method can prevent legal or illegal database D BA user from directly revising in a database and delete the data of closing key table, greatly improve the security performance of infosystem, reach timely visible data, the effect also revised and do not delete.

Background technology

Computer utility is along with the development of information networking; concept and the practice of information security deepen constantly, continuation; from the communication security that the military, government after World War II specially enjoy; develop into the data protection of the twentieth century seventies; to the information security of twentieth century nineties until current Information Assurance; the concept of safety has been not limited to the protection of information; people are it is desirable that to the protection of whole information security and defence; comprise the protection to information, detection, reaction and recovery capability etc., be beneficial to the social development of security information.

1, the content information of information security comprises safely the content of following several respects:

1.1 confidentiality: the illegal leakage of anti-locking system internal information;

1.2 integralities: in anti-locking system, software and data are illegally revised and destroyed;

1.3 validity: require that information and system resource can continuous and effective, and authorized user can whenever and wherever possible with the form accessing resource that he likes.

The computer information system of a safety is all supported these 3 targets, in other words, its information of the computer information system of safety protection and computational resource not by unauthorized access, distort and Denial of Service attack.

2, the threat of information security threaten be enemy for abusing, any ability of harm information or system, intention and attack method, it can be subdivided into two classes: passive-type, i.e. monitoring but do not destroy data; Active, namely deliberately destroy data.Threatening and be called threat consequence to the negative effect of the safe operation of infosystem, is below the definition of 4 kinds of common threat consequences:

2.1 divulge a secret: information or data are divulged to unwarranted people;

2.2 deceptions: the information of company is modified in an unauthorized manner;

2.3 destroy: the resource of company can not be used and maybe can not use for authorized user;

2.4 distort: the resource of company is abused by unwarranted people.

Threat behavior and threaten consequence to be cause-effect relationship, such as, the invader penetrating into security of system region may cause divulging a secret of private information, in this case, infiltrates the threat behavior just representing a kind of this threat consequence that may cause divulging a secret.Finally, main body is threatened to be used to attack infosystem, the source of the behavior of leak of operation or equipment, method or element, such as, the operator, natural disaster, human engineering etc. of outside hostile person, mandate.

3, the fragility fragility of system derives from the security breaches of system, due to the mankind's being familiar with and the limitation of application power the natural law, the electronic information of social application is provided at present, objectively also there is many incomplete places, also have the performance of various fragility, wherein how taking precautions against database DBA user is the problem comparing headache.

Summary of the invention

The object of the invention is to: can prevent legal or illegal database D BA user from directly revising in a database by using the method design of this major-minor table schema infosystem out and delete the data of closing key table, greatly improve the security performance of infosystem, reach the effect that timely visible data are also revised and do not deleted.

Claims

1. information is realized in corresponding subtabulation a method for the safer preservation of information by cryptographic storage, it is characterized in that:

Create corresponding subtabulation and one by one corresponding for master meter recording of encrypted leaving in subtabulation is combined into a character string all fields of master meter information record by permanent order one by one, and then by DES method encrypting storing in the subtabulation only having a field.

2. in corresponding subtabulation, realized the method for the safer preservation of information according to claim 1 with information in key table of checking on by cryptographic storage, it is characterized in that: realize the safer preservation of data of information system by the Design Mode of major-minor table.