外包数据库系统安全机制研究.pdfVIP

2007Vol34 2 * ) 1, 2 1 1 1 1 2 ( 东华大学信息科学与技术学院 上海200051) ( 南通大学计算机科学与技术学院 南通226019) 在外包数据库系统模式下, 组织将数据库业务外包给外部数据库服务器运行,外包服务提供者为数据拥有者 及数据库用户提供 程的数据库创建存储更新与查询服务由于外包服务器本身并非完全可信,外包数据库系统 带来了一系列安全问题本文讨论了数据库安全体系的分类, 探讨了外包数据库的基本结构,综述了外包数据库在数 据加密密文查询策略隐私保护数据完整性验证及基于数据库水印技术的数据库版权保护等安全机制方面的研究 现状,介绍了其研究进展, 并展望了安全外包数据库系统的发展方向研究认为, 整合多种安全机制, 兼顾安全性和可 用性两方面的合理需求, 是构建外包数据库系统的技术关键 外包数据库, 数据库安全, 数据库加密, 数据完整性, 数据库水印 Research on Security Mechanisms of Outsourced Database 1, 2 1 1 1 ZHU Qin U ShouJian LE JiaJin LUO iShu ( College of Information Science and T echnology, Donghua University, Shanghai 200051) 1 ( College of Computer Science and T echnology, Nantong University, Nantong, Jiangsu 226019) 2 Abstract In the outsourced database model, organizations outsource their data management needs to an external serv ice provider. The service provider offers mechanisms to create, store, update and query the database for the organiza tions. Since a server is almost never fully trusted, this model introduces several research issues related to data security. This paper discusses the classification of database security system, studies the architecture of outsourced database, o verviews the stateoftheart in database encryption, query policy of encrypted database, privacy protection, data integ rity verification, and database copyright protection based on database watermarking, introduces the latest progress in security mechanisms of outsourced database, and looks ahead its future development. A conclusion is drawn at the end of this paper that it