文献类型：期刊文献

中文题名：基于数字签名和HSM的数据库篡改检测机制

英文题名：A Tamper Detection Mechanism for Database Based on Digital Signature and HSM

作者：殷腾飞[1];谢晓玲[1];梅雪莲[2]

机构：[1]华东理工大学计算机科学与工程系,上海200237;[2]英特尔亚太研发中心,上海200241

年份：2014

卷号：40

期号：3

起止页码：376

中文期刊名：华东理工大学学报（自然科学版）

外文期刊名：Journal of East China University of Science and Technology

收录：CSTPCD;;Scopus;北大核心:【北大核心2011】；CSCD:【CSCD2013_2014】；

语种：中文

中文关键词：数据库安全;篡改检测;HSM;数字签名

外文关键词：database security; tamper detection; HSM; digital signature

摘要：随着电子商务、电子政务的迅速发展,越来越多的敏感数据被存储于数据库,数据库的安全面临着前所未有的挑战。提出了一种结合数字签名和硬件安全模块(Hardware Security Module,HSM)的数据库篡改检测机制。利用数字签名技术对数据库表进行横向和纵向两种签名,确保表内数据在遭到任意的修改后均能通过签名检测。同时利用HSM保护签名所用的私钥提供高效的签名运算能力,使其具有非常高的安全性和非常优越的性能。
With the rapid development of E-commerce and E-government, more and more sensitive data are stored into databases. Hence, the security of database is confronting unprecedented challenges. This paper presents a tamper detection mechanism for database by integrating digital signature with HSM （Hardware Security Module）. The proposed algorithm uses digital signature technology to sign the tables in database from both vertical and horizontal such that any modification on this table can be detected. Moreover, HSM is utilized to protect the private key of signature and improve the calculation efficiency, which can also make the mechanism more secure and efficient.