CN104517073A

CN104517073A - Method for realizing safe information preservation by combining, encrypting and preserving key field information

Info

Publication number: CN104517073A
Application number: CN201310444314.6A
Authority: CN
Inventors: 翟朝霞
Original assignee: JIANGSU ZHIRUAN INFORMATION TECHNOLOGY Co Ltd
Current assignee: JIANGSU ZHIRUAN INFORMATION TECHNOLOGY Co Ltd
Priority date: 2013-09-26
Filing date: 2013-09-26
Publication date: 2015-04-15

Abstract

The invention relates to actual application in a software system of an information safety technology in bank industry. A main field in a key table is combined, encrypted into a character string by using DES (Data Encryption Standard) and then stored in a certain specific field; when recorded information changes, an encrypted character string is newly generated by an information system, so the consistency in data information is guaranteed; for example, when an information record is corrected on the background by a database DBA (Database Administrator) user, the corrected record is discovered after comparison of the information system since the encrypted field cannot be amended, and the data can be restored timely. The information system designed through the method can prevent that the legal or illegal database DBA user directly amends the key field data of the table in the database, so the safety performance of the information system is greatly improved, and the effect that the data cannot be amended even though the data is seen is achieved.

Description

Critical field information is merged the method that encrypting storing realizes information security preservation

Technical field

The present invention relates to practical application in the software systems of information security technology in bank's industry, primary fields in key table of checking on carries out merging and uses des encryption to become a character string to be stored in a certain specific fields, when recorded information changes, infosystem can regenerate encrypted characters string, ensure data message consistance like this, as database DBA user backstage amendment information record time, due to cannot encrypted fields be revised, the record of this amendment will be found after infosystem comparison and data can be recovered in time.The infosystem designed by this method can prevent the critical field data of legal or illegal database D BA user direct amendment table in a database, greatly improve the security performance of infosystem, reach the effect that timely visible data are not revised yet.

Background technology

Computer utility is along with the development of information networking; concept and the practice of information security deepen constantly, continuation; from the communication security that the military, government after World War II specially enjoy; develop into the data protection of the twentieth century seventies; to the information security of twentieth century nineties until current Information Assurance; the concept of safety has been not limited to the protection of information; people are it is desirable that to the protection of whole information security and defence; comprise the protection to information, detection, reaction and recovery capability etc., be beneficial to the social development of security information.

1, the content information of information security comprises safely the content of following several respects:

1.1 confidentiality: the illegal leakage of anti-locking system internal information;

1.2 integralities: in anti-locking system, software and data are illegally revised and destroyed;

1.3 validity: require that information and system resource can continuous and effective, and authorized user can whenever and wherever possible with the form accessing resource that he likes.

The computer information system of a safety is all supported these 3 targets, in other words, its information of the computer information system of safety protection and computational resource not by unauthorized access, distort and Denial of Service attack.

2, the threat of information security threaten be enemy for abusing, any ability of harm information or system, intention and attack method, it can be subdivided into two classes: passive-type, i.e. monitoring but do not destroy data; Active, namely deliberately destroy data.

Threatening and be called threat consequence to the negative effect of the safe operation of infosystem, is below the definition of 4 kinds of common threat consequences:

2.1 divulge a secret: information or data are divulged to unwarranted people;

2.2 deceptions: the information of company is modified in an unauthorized manner;

2.3 destroy: the resource of company can not be used and maybe can not use for authorized user;

2.4 distort: the resource of company is abused by unwarranted people.

Threat behavior and threaten consequence to be cause-effect relationship, such as, the invader penetrating into security of system region may cause divulging a secret of private information, in this case, infiltrates the threat behavior just representing a kind of this threat consequence that may cause divulging a secret.Finally, main body is threatened to be used to attack infosystem, the source of the behavior of leak of operation or equipment, method or element, such as, the operator, natural disaster, human engineering etc. of outside hostile person, mandate.

3, the fragility fragility of system derives from the security breaches of system, due to the mankind's being familiar with and the limitation of application power the natural law, the electronic information of social application is provided at present, objectively also there is many incomplete places, also have the performance of various fragility, wherein how taking precautions against database DBA user is the problem comparing headache.

Summary of the invention

The object of the invention is to: by the data using this method design to critical field cryptographic check pattern infosystem out can prevent legal or illegal database D BA user direct amendment table in a database, greatly improve the security performance of infosystem, reach the effect that timely visible data are not revised yet.

Claims

1. primary fields in key table of checking on carries out merging and uses des encryption to become a character string to be stored into the method realizing the safer preservation of information in a certain specific fields, it is characterized in that:

Create check field---deposit the character string after des encryption

---primary fields information is combined into a character string by permanent order, and then by DES method encrypting storing in check field.

2. carrying out merging with primary fields in key table of checking on according to claim 1 uses des encryption to become a character string to be stored into the method realizing the safer preservation of information in a certain specific fields, it is characterized in that: realize the safer preservation of data of information system by the pattern of design verification field.