# 閫忔槑鏁版嵁鍔犲瘑

## 閫忔槑鏁版嵁鍔犲瘑锛圱DE锛夌畝浠�
閫忔槑鏁版嵁鍔犲瘑锛圱ransparent Data Encryption (绠€绉癟DE)锛夋槸鎸囧彲浠ュ湪鏂囦欢灞傚鏁版嵁鍜屾枃浠惰繘琛屽疄鏃跺姞瀵嗗拰瑙ｅ瘑锛岃惤鐩樼殑鏂囦欢鏄姞瀵嗗悗鐨勫唴瀹癸紝鑰屽浜庝笂灞傚簲鐢ㄧ郴缁熷拰寮€鍙戜汉鍛樿€岃█锛屽姞瑙ｅ瘑杩囩▼鏄棤鎰熺煡鐨勶紝鍐欏叆鍜岃鍙栫殑鍐呭鏄槑鏂囧唴瀹癸紝鎵€浠ュ彨鍋氶€忔槑鏁版嵁鍔犲瘑銆�
TDE鐨勭洰鐨勬槸淇濊瘉纾佺洏鏂囦欢鐨勬満瀵嗘€э紝杩滅鐩存帴浠庢枃浠剁洿鎺ヨ闂暟鎹殑鏀诲嚮鑰呫€俆DE涓昏搴斿浠ヤ笅鐨勫満鏅細
1. 纭洏琚洍瀵艰嚧鏁版嵁娉勯湶
2. 榛戝鍏ヤ镜绯荤粺杩涜鏂囦欢澶嶅埗瀵艰嚧鏁版嵁娉勯湶
3. IT浜哄憳缁曡繃涓氬姟绯荤粺鍜屽鎵规祦绋嬶紝杩涜鏃犺褰曠殑瓒婃潈鏁版嵁鏌ョ湅鎴栦慨鏀�
鍦ㄦ病鏈夊惎鐢═DE鐨勬儏鍐典笅锛屼换浣曚汉鍙鑾峰緱浜嗘暟鎹簱鏂囦欢锛屽嵆鍙洿鎺ユ祻瑙堟暟鎹簱涓殑鎵€鏈夊唴瀹癸紝浣嗗鏋滃湪鏁版嵁搴撲笂鍚敤浜員DE锛屾暣涓暟鎹瀹夊叏鍔犲瘑浜嗭紱娌℃湁瀵嗗寵鐨勮瘽锛屽氨涓嶈兘璁块棶鍒版暟鎹€�

## TDE濡備綍宸ヤ綔
TDE闇€瑕佷竴涓瘑閽ユ潵鍔犲瘑鍜岃В瀵嗘暟鎹紝杩欎釜瀵嗛挜鍙互閫氳繃閰嶇疆椤圭殑褰㈠紡浼犲叆ChainMaker锛屼篃鍙互浣跨敤鐙珛鐨勬枃浠舵潵淇濆瓨锛屽悓鏃朵篃鏀寔纭欢鍔犲瘑鏈鸿繖绉嶇墿鐞嗛殧绂婚珮瀹夊叏鐨勫瘑閽ユ墭绠″拰鍔犺В瀵嗘柟妗堛€�
浠ラ厤缃负瀵嗙爜鏈鸿繘琛岄€忔槑鏁版嵁鍔犲瘑鐨勯暱瀹夐摼涓轰緥锛屽瓨鍌ㄦā鍧楀湪鏀跺埌瀛樺偍KeyValue閿€煎鐨勮姹傛椂锛屽厛灏哣alue鍐呭浠ヤ簩杩涘埗褰㈠紡鍙戦€佸埌瀵嗙爜鏈猴紝瀵嗙爜鏈轰娇鐢ㄥ唴缃殑瀵嗛挜瀵规敹鍒扮殑鏁版嵁杩涜瀵圭О鍔犲瘑锛屽苟灏嗗瘑鏂囪繑鍥炵粰闀垮畨閾惧瓨鍌ㄦā鍧椼€傞暱瀹夐摼瀛樺偍妯″潡灏嗗師鏉ョ殑Key鍜屽姞瀵嗗悗鐨刅alue浣滀负鏂扮殑閿€煎锛屽彂閫佺粰搴曞眰鐨勭粺涓€鏁版嵁搴撴湇鍔℃帴鍙B Provider锛岀敱搴曞眰鏁版嵁搴撴湇鍔℃帴鍙ｈ皟鐢ㄥ叿浣撶殑鏁版嵁搴撳紩鎿庡瓨鍌ㄦ敹鍒扮殑閿€煎銆�

<img loading="lazy" src="../images/TDE-GetData.png" style="zoom:100%;" />

鍦ㄩ暱瀹夐摼杩涜鏁版嵁鏌ヨ鏃跺垯鎵ц绫讳技鐨勮В瀵嗚繃绋嬨€傚湪瀛樺偍妯″潡鏀跺埌澶栭儴鏌ヨ鏁版嵁鐨勮姹傚悗锛屽皢璇锋眰鐨勬煡璇㈡潯浠讹紙姣斿Key鏌ヨ锛夌洿鎺ュ彂閫佺粰搴曞眰鐨凞B Provider锛岃幏寰楁暟鎹簱涓搴旂殑鏁版嵁锛岃繖鏃舵暟鎹殑Key鏄槑鏂囷紝Value鏄姞瀵嗙殑銆傛帴涓嬫潵灏嗗瘑鏂嘨alue鍙戦€佺粰鍔犲瘑鏈猴紝鐢卞姞瀵嗘満鐢ㄨ嚜宸卞唴閮ㄧ殑瀵嗛挜杩涜鏁版嵁瑙ｅ瘑锛屽苟灏嗚В瀵嗗悗鐨勫唴瀹硅繑鍥炵粰闀垮畨閾惧瓨鍌ㄦā鍧椼€傞暱瀹夐摼灏嗚В瀵嗙殑鍐呭浣滀负Value锛岀粨鍚堜箣鍓嶇殑Key锛屽舰鎴愭柊鐨勯敭鍊煎杩斿洖缁欏閮ㄨ皟鐢ㄨ€呫€�

<img loading="lazy" src="../images/TDE-PutData.png" style="zoom:100%;" />

## 闀垮畨閾綯DE鐨勫眬闄愭€�
### TDE鍚敤鐘舵€佸拰瀵嗛挜涓嶅彲闅忔剰鍙樻洿
鐢变簬TDE鏄鎵€鏈夊尯鍧楁墍鏈変氦鏄撹繘琛岀粺涓€鐨勫姞瑙ｅ瘑锛屾墍浠DE鐨勫惎鐢ㄦ垨鑰呬笉鍚敤蹇呴』鍦ㄦ病鏈夊啓鍏ヤ换浣曟暟鎹殑鏂拌妭鐐逛笂锛屼竴鏃﹀惎鐢ㄤ簡TDE骞惰繘琛屼簡鏁版嵁鍚屾锛屽氨涓嶈兘鍙樻洿瀵嗛挜锛屼篃涓嶈兘鐢卞惎鐢ㄦ敼涓轰笉鍚敤銆傚鏋滆鍙樻洿瀵嗛挜鎴栬€呭彉鏇村惎鐢ㄧ姸鎬侊紝閭ｄ箞灏卞彧鑳藉皢涔嬪墠宸茬粡鍚屾鐨勬墍鏈夋暟鎹叏閮ㄥ垹闄わ紝閲嶆柊鍚屾锛岄噸鏂板啓鍏ャ€�
### TDE鍙姞瀵嗛敭鍊煎锛圞ey-Value锛変腑鐨刅alue閮ㄥ垎
鍥犱负闀垮畨閾惧瓨鍌ㄦā鍧楀澶栨彁渚涗簡鎸塊ey鑼冨洿鏌ヨ鍜屽墠缂€鏌ヨ鐨勭壒鎬э紝鎵€浠ヤ笉鑳藉Key杩涜鍔犲瘑锛屽鏋滃Key涔熻繘琛屼簡鍔犲瘑锛岄偅涔堟瘡娆″墠缂€鏌ヨ灏嗕笉寰椾笉鎵弿鏁翠釜鏁版嵁搴撴墍鏈塊ey杩涜瑙ｅ瘑鍚庡尮閰嶏紝鎬ц兘涓婃槸鏃犳硶鎺ュ彈鐨勩€傛墍浠ュ湪纭洏鏁版嵁琚洍鎴栬€呴潪娉曡闂殑鎯呭喌涓嬶紝鐢ㄦ埛铏界劧鏃犳硶鑾峰緱Value鍊硷紝浣嗘槸浠嶇劧鍙互鑾峰緱Key鐨勫唴瀹癸紝鎵€浠ュ湪缂栧啓鍚堢害鏃讹紝璇蜂笉瑕佸皢鏈哄瘑淇℃伅鏀惧叆Key涓€�
### TDE涓嶆敮鎸丼QL鍚堢害鐨勬暟鎹姞瀵�
闀垮畨閾綯DE鏄閿€兼暟鎹簱鍦烘櫙涓嬪Value閮ㄥ垎鐨勫姞瑙ｅ瘑锛屽浜嶴QL鍚堢害鐨勫満鏅紝鐢变簬涓氬姟鏁版嵁鏄€氳繃鐢熸垚鐨凷QL璇彞浜х敓鐨勶紝鎵€浠ユ棤娉曞SQL璇彞杩涜鍔犲瘑銆傚鏋滄兂瀵筍QL鏁版嵁搴撹繘琛岃惤鐩樺姞瀵嗭紝寤鸿鍚敤瀵瑰簲鏁版嵁搴撹嚜韬彁渚涚殑TDE鏈嶅姟銆�
### TDE瀵规€ц兘鏈変竴瀹氱殑褰卞搷
鐢卞墠闈㈢殑TDE澶勭悊娴佺▼鎴戜滑鍙互鐪嬪埌锛屽湪鍐欏叆鎴栬€呰鍙朘eyValue鏁版嵁鏃讹紝澶氫簡涓€涓绉板姞瀵嗚В瀵嗙殑鐜妭锛屾墍浠ュ繀鐒朵細瀵规暣浣撴€ц兘鏈変竴瀹氱殑褰卞搷锛屼笉杩囩敱浜庡绉板姞瀵嗙殑鎬ц兘鏋侀珮锛屾墍浠ュ湪澶у鏁板満鏅笅锛孴DE瀵规€ц兘鐨勫奖鍝嶄笉鏄緢澶э紝缁忚繃瀹為檯娴嬭瘯锛屽湪鍚敤TDE鐨勬儏鍐典細涓哄瓨鍌ㄦā鍧楀甫鏉�2%鐨勬€ц兘涓嬮檷銆�

## 鎬荤粨
闀垮畨閾�2.1鐗堢殑鏂扮壒鎬ч€忔槑鏁版嵁鍔犲瘑锛圱DE锛夋槸涓€绉嶆暟鎹簱棰嗗煙甯歌鐨勬暟鎹繚鎶ら槻娉勬紡鏂规锛岃鏂规鍙互鍦ㄧ敤鎴锋棤鎰熺煡鐨勬儏鍐典笅瀹炵幇鏁版嵁钀界洏鍔犲瘑锛屽湪淇濇姢浜嗙鐩樹笂鏁版嵁鐨勯槻姝㈣闈炴硶鏌ョ湅鐨勬儏鍐典笅锛岃鐗规€у浜庣敤鎴峰拰涓婂眰搴旂敤鍙嬪ソ锛屾棤闇€鍋氬嚭浠讳綍淇敼銆傞暱瀹夐摼TDE鏃㈡敮鎸丄ES瀵圭О鍔犲瘑绠楁硶涔熸敮鎸佸浗瀵哠M4瀵圭О鍔犲瘑绠楁硶锛屾棦鏀寔纭欢瀵嗙爜鏈虹殑闆嗘垚涔熸敮鎸佽蒋浠跺姞瀵嗘柟妗堬紝涓轰紒涓氱敤鎴峰甫鏉ヤ簡鏇村鐨勬暟鎹畨鍏ㄦ柊閫夋嫨銆�