Patent ID: 9349023
Filing Date: 2016-05-24
CPC Classification: G06F,H04L

Claim Text:
1. A database encryption system, comprising: a database computer apparatus that comprises a database, and a database controller that controls execution of database operation; and a user computer apparatus that is connected to the database controller via a network, wherein the user computer apparatus further comprises: a key usage logic that manages key information for encryption and decryption; and an application response logic that receives a database operation command issued to the database computer apparatus; wherein: the application response logic transmits to the database controller, as data and/or metadata of the database operation command, encrypted data and/or encrypted metadata that has been encrypted according to key information of the key usage logic to cause the database controller to execute the database operation, the application response logic receives a database processing result transmitted by the database controller, and returns a result of performing conversion or the decryption according to key information of the key usage logic, to an issuing source of the database operation command as a response to the database operation command; the user computer apparatus comprises: a security configuration logic that configures information related to configuration of security of data and/or metadata stored in the database, and a first storage of a computer that stores information related to the configuration of security; and the application response logic: receives a database operation command issued to the database computer apparatus, and, by referring to the information of the first storage, transmits to the database controller, as data and/or metadata of the database operation command, encrypted data and/or encrypted metadata that has been encrypted according to key information of the key usage logic by using an encryption algorithm corresponding to the security of the data and/or metadata, to cause the database controller to execute the database operation.