Method and apparatus for using an external security device to secure data in a database

• US 7,639,819 B2
• Filed: 06/16/2005
• Issued: 12/29/2009
• Est. Priority Date: 06/16/2005
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Lei, Chon, Wong, Daniel ManHung, Ho, Min-Hank, Youn, Paul
• Primary Examiner(s): Simitoski; Michael J
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US11/156,307
• Publication Number:
  US 20060288232A1
• Time in Patent Office: 1,657 Days
• Field of Search: None
• US Class Current: 380/277
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

One embodiment of the present invention provides a system that facilitates using an external security device to secure data in a database without having to modify database applications. The system operates by receiving a request at the database to perform an encryption/decryption operation, wherein the encryption/decryption operation is performed with the assistance of the external security module in a manner that is transparent to database applications. In response to the request, the system passes a wrapped (encrypted) column key (a key used to encrypt data within the database) to an external security module, wherein the wrapped column key is a column key encrypted with a master key that exists only within the external security module. The system then unwraps (decrypts) the wrapped column key in the external security module to retrieve the column key. Next, the system returns the column key to the database. The system then performs an encryption/decryption operation on data in the database using the column key. Finally, the system erases the column key from memory in the database.

Claims

1. A method for using an external security module to secure data in a database without having to modify database applications, the method comprising:

generating a column key in the database;

passing the column key to the external security module;

receiving a wrapped column key corresponding to the column key from the external security module, wherein the wrapped column key is obtained by encrypting the column key using a master key;

storing the wrapped column key in the database;

receiving a request at the database to perform an encryption/decryption operation;

in response to the request, passing the wrapped column key to the external security module, thereby allowing the external security module to decrypt the wrapped column key using the master key to obtain the column key;

receiving the column key from the external security module;

performing the encryption/decryption operation on data in the database using the received column key; and

erasing the column key from memory in the database.

2. The method of claim 1, further comprising generating the master key by:

sending a request to the external security module to create a random key with a data key type to be used as the master key;

flagging the master key as non-exportable; and

receiving a handle from the external security module at the database that facilitates referencing the master key during subsequent database transactions.

3. The method of claim 1, further comprising:

generating a random number in the database for use as the column key;

flagging the wrapped column key as exportable;

and

storing the wrapped column key in a column key metadata table.

4. The method of claim 1, wherein the external security module can be a hardware security module or a software security module.

5. The method of claim 1, further comprising storing data in the external security module.

6. The method of claim 1, wherein the external security module is authenticated to the database via at least one of:

a direct attachment to the database;

a username and a password; and

a strong authentication method, including a security token or a smart card.

7. The method of claim 1, wherein the encryption can be either symmetric encryption or asymmetric encryption.

8. The method of claim 1, wherein the master key only exists in the external security module.

9. A method for using an external security module to secure data in a database without having to modify database applications, the method comprising:

generating a column key in the database;

passing the column key to the external security module;

receiving a wrapped column key corresponding to the column key from the external security module, wherein the wrapped column key is obtained by encrypting the column key using a master key;

storing the wrapped column key in the database;

receiving a request at the database to perform an encryption/decryption operation;

in response to the request, passing the wrapped column key and data to the external security module, thereby allowing the external security module to decrypt the wrapped column key using the master key to obtain the column key and to encrypt/decrypt the data using the column key;

receiving the encrypted/decrypted data at the database from the external security module.

10. The method of claim 9, further comprising generating the master key by:

sending a request to the external security module to create a random key with a wrapper key type to be used as the master key;

flagging the master key as non-exportable; and

receiving a handle from the external security module at the database that facilitates referencing the master key during subsequent database transactions.

11. The method of claim 9, further comprising:

generating a random number for use as the column key;

flagging the wrapped column key as exportable and sensitive, wherein the wrapped column key is only exportable in an encrypted state;

and

storing the wrapped column key in a column key metadata table.

12. The method of claim 9, wherein the external security module can be a hardware security module or a software security module.

13. The method of claim 9, further comprising storing data in the external security module.

14. The method of claim 9, wherein the external security module is authenticated to the database via at least one of:

a direct attachment to the database;

a username and a password; and

a strong authentication method, including a security token or a smart card.

15. The method of claim 9, wherein the encryption can be either symmetric encryption or asymmetric encryption.

16. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for using an external security module to secure data in a database without having to modify database applications, the method comprising:

generating a column key in the database;

passing the column key to the external security module;

receiving a first wrapped column key corresponding to the column key from the external security module, wherein the wrapped column key is obtained by encrypting the column key using a master key;

storing the wrapped column key in the database;

receiving a request at the database to perform an encryption/decryption operation;

in response to the request, passing the wrapped column key to the external security module, thereby allowing the external security module to decrypt the wrapped column key using the master key to obtain the column key

receiving the column key from the external security module to the database;

performing the encryption/decryption operation on data in the database using the received column key; and

erasing the column key from memory in the database.

17. The computer-readable storage medium of claim 16, wherein the method further comprises generating the master key by:

sending a request to the external security module to create a random key with a data key type to be used as the master key;

flagging the master key as non-exportable; and

receiving a handle from the external security module at the database that facilitates referencing the master key during subsequent database transactions.

18. The computer-readable storage medium of claim 16, wherein the method further comprises:

generating a random number in the database for use as the column key;

flagging the wrapped column key as exportable;

and

storing the wrapped column key in a column key metadata table.

19. The computer-readable storage medium of claim 16, wherein the external security module can be a hardware security module or a software security module.

20. The computer-readable storage medium of claim 16, wherein the method further comprises storing data in the external security module.

21. The computer-readable storage medium of claim 16, wherein the external security module is authenticated to the database via at least one of:

a direct attachment to the database;

a username and a password; and

a strong authentication method, including a security token or a smart card.

22. The computer-readable storage medium of claim 16, wherein the encryption can be either symmetric encryption or asymmetric encryption.

23. The computer-readable storage medium of claim 16, wherein the master key only exists in the external security module.

24. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for using an external security module to secure data in a database without having to modify database applications, the method comprising:

generating a column key in the database;

passing the column key to the external security module;

receiving a wrapped column key corresponding to the column key from the external security module, wherein the wrapped column key is obtained by encrypting the first column key using a master key;

storing the wrapped column key in the database;

receiving a request at the database to perform an encryption/decryption operation;

in response to the request, passing the wrapped column key and data to the external security module, thereby allowing the external security module to decrypt the wrapped column key using the master key to obtain the column key and to encrypt/decrypt the data using the column key

and

receiving the encrypted/decrypted data at the database from the external security module.

25. The computer-readable storage medium of claim 24, wherein the method further comprises generating the master key by:

sending a request to the external security module to create a random key with a wrapper key type to be used as the master key;

flagging the master key as non-exportable; and

receiving a handle from the external security module at the database that facilitates referencing the master key during subsequent database transactions.

26. The computer-readable storage medium of claim 24, wherein the method further comprises:

generating a random number for use as the column key;

flagging the wrapped column key as exportable and sensitive, wherein the wrapped column key is only exportable in an encrypted state;

and

storing the wrapped column key in a column key metadata table.

27. The computer-readable storage medium of claim 24, wherein the external security module can be a hardware security module or a software security module.

28. The computer-readable storage medium of claim 24, wherein the method further comprises storing data in the external security module.

29. The computer-readable storage medium of claim 24, wherein the external security module is authenticated to the database via at least one of:

a direct attachment to the database;

a username and a password; and

a strong authentication method, including a security token or a smart card.

30. The computer-readable storage medium of claim 24, wherein the encryption can be either symmetric encryption or asymmetric encryption.