1. Introduction

The database security gateway can transparently encrypt the ORACLE database. It uses the national crypto algorithm and has higher security. To use the gateway, users first need to initialize a unique secure user on the ORACLE database server, then use the secure user to connect to the database, select the column to be encrypted, and then use the national crypto algorithm to encrypt the data, and then the secure user gives the ORACLE user read/write permission for decentralized access to ORACLE encrypted data. Even if user has the highest privilege in ORACLE, if the security user does not give read or write permission, the encrypted table cannot be read or written. For the application system, the encryption and decryption of the stored data of the ORACLE database can be realized without changing the original structure of ORACLE database.

2.Feature

Database management: Includes database connection settings and user table permission settings

Log management: Including the log level settings, download, empty, and other operations related to the accessed database logs.

Key management:  Including key generation, deletion, and analyzing key usage data.

Rights Management: Perform operations related to DBSec gateway operators

System management: Perform DBSec gateway server initialization configuration, data backup recovery, dual-system hot backup configuration, system upgrade, etc.

3.Features

Support encryption database type: ORACLE;

Support encryption management for connecting multiple databases;

Support encryption of all field types;

Support SM1 and SM4 national crypto algorithm. Mode: ECB, CBC. Key number: 0 to 1023, Support index;

support unique Security management account: FISEC_MGR;

Support for transparent encryption and decryption. The application system does not need to change the original system structure, and can realize ORACLE encryption and decryption

support integrated encryption and decryption, read and write permission operations

Supports changing encryption algorithms, changing encryption modes, changing encryption key numbers, and adding and deleting index identifiers of encrypted data.