【摘要】 通过引入中心加密服务器的方式对现有的数据库加密体系结构进行了改造，实现了加密数据与加密密钥的分离，有效防止了攻击者对系统数据的窃取。并且针对数据库加密密钥管理及用户存取权限控制，提出了一种用户鉴别码模型，能有效地提高系统加密密钥管理的强度，同时在一定程度上防范了目前系统在存取权限控制方面的很多漏洞。更多还原

【Abstract】 This paper builds a center encryption server to provide centralized encryption services for entire database environment. This solution separates encryption keys from the encrypted data stored in the database and prevents intruders from stealing the crucial information. In order to offer a better key management strategy and a better access control scheme, a user identity code model is developed. By introducing the model into the encryption system, the encryption key management can be enhanced,and many problems in access control can be prevented effectively.更多还原