基于敏感数据加密的分布式安全数据库服务研究*

针对目前基于数据加密技术的安全数据库服务不能有效平衡数据处理性能与数据隐私保护的不足，提出一种新的基于分布式安全数据库服务的隐私保护方法，通过引入准标志属性集的自动检测技术，采用对部分敏感属性加密和分解准标志属性集的方式实现数据的垂直分解，通过基于元数据的查询分解实现分布式查询处理。实验结果表明，该方法能较好地平衡查询性能与隐私保护之间的矛盾。

Distributed secure database service based on sensitive data encryption

This paper proposed a distributed architecture for secure database service which could provide both efficient privacy protection and query processing. Based on the algorithms of automatic quasi-identifiers detection, partitioned the client data across many logically independent database servers vertically, while only encrypted few sensitive data. The client executed queries by transmitting appropriate sub-queries to different databases based on metadata. The experimental results show that this method is well-balanced on dealing with the contradiction between data privacy protection and efficient query processing.