Transparent Data Encryption – Solution for Security of Database Contents

Abstract— The present study deals with Transparent Data Encryption which is a technology used to solve the problems of security of data. Transparent Data Encryption means encrypting<br>databases on hard disk and on any backup media. Present day global business environment presents numerous security threats and compliance challenges. To protect against data thefts and<br>frauds we require security solutions that are transparent by design. Transparent Data Encryption provides transparent, standards-based security that protects data on the network, on disk and on backup media. It is easy and effective protection of<br>stored data by transparently encrypting data. Transparent Data Encryption can be used to provide high levels of security to columns, table and tablespace that is database files stored on<br>hard drives or floppy disks or CD’s, and other information that requires protection. It is the technology used by Microsoft SQL Server 2008 to encrypt database contents. The term encryption<br>means the piece of information encoded in such a way that it can only be decoded read and understood by people for whom the information is intended. The study deals with ways to create<br>Master Key, creation of certificate protected by the master key, creation of database master key and protection by the certificate and ways to set the database to use encryption in Microsoft SQL<br>Server 2008.

摘要— 本研究聚焦于透明数据加密（Transparent Data Encryption）——一种用于解决数据安全问题的技术。透明数据加密指对硬盘及各类备份介质上的数据库实施加密。当今全球商业环境面临诸多安全威胁与合规挑战。为防范数据窃取与欺诈行为，亟需设计上具备透明性的安全解决方案。透明数据加密可提供基于标准的透明安全防护，覆盖网络、磁盘及备份介质上的所有数据。其通过对数据进行透明加密，实现对存储数据的便捷高效防护。透明数据加密可用于为存储于硬盘、软盘、光盘及其他需保护的信息的数据库文件（包括列、表与表空间）提供高等级安全防护。该技术是Microsoft SQL Server 2008用于加密数据库内容的核心方案。加密（encryption）这一术语指将信息以特定方式编码，仅信息的授权受众方可对其进行解码、读取与理解。本研究阐述了在Microsoft SQL Server 2008环境中，创建主密钥（Master Key）、创建受主密钥保护的证书、创建数据库主密钥并通过证书实现保护，以及配置数据库启用加密的具体方法。