JP2005309846A - Database protection system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a database protection system by which personal information in a database is protected, particularly, the personal information is protected against a malicious system developer and a cost required for security is reduced. <P>SOLUTION: A proxy server 3 intercepting data transmitted and received between an application server 1 and client terminal equipment 2 runs: an encryption means encrypting a specified region in request data received from the client terminal equipment 2 based on information on a setting file 3a recorded key information and information on data to be concealed; and a decryption means decrypting a region encrypted by the encryption means in response data received from the application server. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a system for protecting database information accessed by an application server device using a proxy server device, and in particular, a database protection system configured to protect data from a malicious system developer. About.

  Along with the advancement of network technology, for example, in facilities that handle personal information such as hospitals and government offices, a system that provides various information via a network is being adopted. One of the cores of such a network system is an application server apparatus 100 as shown in FIG.

  The application server apparatus 100 of FIG. 5 is configured such that the Web application 103 that accesses the database 102 operates in response to a request from the client terminal apparatus 101, and various types of information are accumulated in the database 102. The database 102 can be browsed from the client terminal device 101. In the example of FIG. 5, the client terminal device 101 transmits request data 104 (HTTP Request) that complies with the specifications of http (Hyper Text Transfer Protocol). Response data 105 (HTTP Response) including the inquiry result is transmitted.

  In such a system using the application server device 100, when personal information registered in the database 102 is leaked to the outside, corporate loss such as loss of social credibility and decrease in customers becomes immeasurable. Therefore, how to protect the information registered in the database 102 from a malicious person who tries to leak the personal information by illegally accessing the database 102 becomes a problem.

  As a simple measure that is often used at present, several types of user IDs and passwords with different access right levels are set by the function of the OS or database, and data including personal information has a strongest access right. There is a method for preventing browsing unless the user has a user ID. In this case, a specific user ID that is permitted to access personal information is often given to a system administrator or a certain system developer.

Further, in the identity authentication using the user ID as described above, the security for the database is high, but the data itself once read does not have a security function and there is a risk of leakage to the outside. 1 proposes a file security system that authenticates whether or not display is possible by embedding authentication data in a database file itself.
JP 2002-149603 A

  In addition, data is encrypted and communicated for the purpose of ensuring confidentiality in data communication. For example, a public key infrastructure (PKI) uses a pair of different keys for encryption and decryption. This pair of keys is called a “secret key” and a “public key”, and data encrypted using one key cannot be decrypted without using the other key paired therewith.

  As a result, if the user keeps his / her private key without publishing it, the confidentiality of the encryption can be ensured, and if he / she has a public key of a certain user, the user can encrypt it. Data can be exchanged. For example, when X and Y communicate with each other, data encrypted by X using its own private key and the public key of the other party (Y) means that Y is the private key of the other party (X) and its own secret. It can be decrypted by using the key.

  For example, a firewall is provided at the boundary between the local area network including the application server device and the Internet, data transmitted and received between the client terminal device and the application server device is encrypted, and the decrypted data is stored in the database. Many systems are also found.

  However, the identity authentication by the user ID as described above can refuse access to the database by a person without access right, but the system developer who has been given access right turns into a malicious person and becomes an individual. It is not effective for cases where information is leaked. In fact, there have been many incidents of malicious system developers leaking personal information recently. In addition, regarding the above file security system and data encryption technology, if a system developer who can access the authentication data and secret key information necessary for decryption becomes a malicious person, the same There's a problem.

  Therefore, conventionally, there has been a situation where there is only a countermeasure against the problem of data leakage by a person who has an access right to personal information by tightening the security policy and thoroughly operating the person. For example, if it is set so that even the system developer cannot access any personal information in the database unless the system department manager comes to the office and inserts an ID card, it is necessary to thoroughly implement the determined operation There is.

  However, in general, in an application server device, a system developer needs to frequently access the system with privileges for the purpose of improving software, collecting backups, and analyzing the cause of failure. Then, for example, when a system developer goes to work on a holiday for the purpose of collecting backups or analyzing the cause of failure, the security policy cannot be maintained unless the general manager is also on holiday. As can be easily imagined from this example, tightening the security policy in the application server device is extremely restrictive in terms of Web application development and database usage, resulting in an increase in security costs. There was a problem.

  In addition, a system that has a firewall and encrypts only the network part is based on the premise that only individuals who intrude from the outside will leak personal information. The problem is not addressed at all. In addition, conventionally, since the application server apparatus side including the database stores authentication data, secret key information, and the like, there is a problem that frequent backup is required.

  A method of encrypting only a specific item when an application writes in a database by encryption software operating on the application server device is known. However, the method using encryption software is the same in that the database cannot be protected from malicious system developers who have access rights to the encryption software, and the processing of existing applications must be significantly changed. There was a problem.

  The present invention has been made in view of the above-described conventional problems, can protect a database from malicious system developers, minimizes changes to existing applications, and is secure. It is an object of the present invention to provide a database protection system, a proxy server device, a database protection program, and a database protection method that can reduce costs.

  The database protection system of the present invention is a system that protects information of a database accessed by an application of the application server device using a proxy server device that intercepts data transmitted and received between the application server device and the client terminal device. The proxy server device is capable of accessing a setting file in which key information and information on data to be concealed are recorded, and in the request data received from the client terminal based on the information recorded in the setting file. Encryption means for encrypting the predetermined area, and decryption means for decrypting the area encrypted by the encryption means in response data to the request data received from the application server device. The The most important feature Rukoto.

  The proxy server device of the present invention is a proxy server device for protecting database information accessed by the application of the application server device, and can access a setting file in which key information and information of data to be kept secret are recorded. And encryption means for encrypting a predetermined area in the request data received from the client terminal based on information recorded in the setting file, and a response to the request data received from the application server device The main feature is that it comprises decryption means for decrypting an area of the data encrypted by the encryption means.

  Further, the database protection program of the present invention performs processing for protecting information in a database accessed by an application of the application server device on a proxy server device that intercepts data transmitted and received between the application server device and the client terminal device. For receiving request data from the client terminal device, accessing a setting file in which key information and data to be concealed are recorded, and information recorded in the setting file An encryption step for encrypting a predetermined area in the request data received from the client terminal, transmitting the request data to the application server device, and the application server. Receiving response data for the request data from the server device, decrypting the encrypted data in the response data, and transmitting the response data to the client terminal. The most important feature is to let the proxy server device perform.

  The database protection method of the present invention is a method for protecting database information accessed by an application of the application server device using a proxy server device that intercepts data transmitted and received between the application server device and the client terminal device. The proxy server device receiving request data from the client terminal device, accessing a setting file in which key information and data to be kept secret are recorded, and recorded in the setting file. Based on the received information, an encryption step for encrypting a predetermined area in the request data received from the client terminal; a step for transmitting the request data to the application server device; and Receiving response data for the request data from the server device, decrypting the region encrypted by the encryption step in the response data, and transmitting the response data to the client terminal The most important feature is that

  According to the present invention, key information necessary for encryption and decryption is recorded in the proxy server device, and data to be concealed is encrypted by the proxy server device and recorded in the database. Even when the system developer having the access right becomes a malicious person, only encrypted data can be browsed, and an effect of preventing leakage of important data can be obtained.

  Further, since the proxy server device does not have an application or a database, there is no need for software improvement, backup, failure analysis, etc., and it becomes easy to tighten security policies. That is, in the present invention, it is not necessary to make the security policy of the application server device stricter than necessary, and as a result, the cost for security can be reduced.

  The database protection system, the proxy server device, the database protection program, and the database protection method of the present invention are configured as described above, but the present invention can adopt the following configurations as a more preferable embodiment.

  First, in the database protection system, the proxy server device, the database protection program, or the database protection method, when encrypting a predetermined area in request data based on information recorded in the setting file, If a tag character string is inserted before and after the area to be encrypted and the decryption means searches the character string of the tag character string to find the encrypted area, the database item It is preferable because an arbitrary area in the request data can be encrypted and decrypted without depending on the unit.

  In the database protection system, the proxy server device, the database protection program, or the database protection method, when the request data is a request for user registration processing, the proxy server device includes a user in the request data. The application server apparatus that has received the request data executes the means or step for storing the signed user information in a signature information recording file, and executes the means or step for recording the signature information for the information. When the proxy server device receives the login processing request data, the proxy server device accesses the signature information recording file to acquire the signed user information, and the login processing request. If it is configured to execute error processing if it does not match, an unauthorized login that has not undergone regular user registration processing will result in an error. Therefore, it is preferable.

  In the database protection system, the proxy server device, the database protection program, or the database protection method, when the request data is a request for login processing, the proxy server device stores user information in a session object. Means for executing the means or step, and when the proxy server apparatus receives a request including data to be concealed next, the proxy server apparatus collates whether or not user information is registered in the session object. Alternatively, it is preferable to execute the step and execute the error processing when it is unregistered, because it is possible to eliminate an illegal operation not properly connected to the session.

  Further, when the proxy server device receives a request including data to be kept confidential and user information is registered in the session object, the proxy server device acquires user information from the session object, and requests When a user ID is given to data to be concealed in data, and then the proxy server device executes the decrypting means or step, the proxy server device acquires user information from the session object and encrypts it. If it matches with the user ID assigned to the received data, and if it does not match, if it is configured to execute error processing, the user at the time of encryption and the use at the time of decryption It is preferable that the unauthorized operation can be eliminated by checking the consistency of the person.

  Further, the proxy server device can access a public partner list file on the application server device, and in the decryption process, the proxy server device is encrypted with the user information acquired from the session object. When the collation result of the user ID given to the data does not match, the proxy server device accesses and matches the public partner list file, and decrypts when the public partner with the matching user ID is found. If it is configured to perform the process, it is possible to publish its own data only to a specific partner existing in the disclosure partner list file.

  In the database protection system or the proxy server device, the proxy server device is installed at a location different from the application server device to increase the security level, while the security level of the application server device is set to the proxy If it is configured to be lower than that of the server device, it is desirable because the security gap becomes clear and the cost for security can be reduced as a whole.

  Further, if the proxy server device does not store user data other than the key information and the setting file, it is preferable that the proxy server device need not be backed up frequently.

  The database protection program can be stored in any computer-readable storage medium such as a CD-ROM, DVD, or magnetic disk device.

  Hereinafter, the present invention will be described in detail based on embodiments shown in the accompanying drawings. FIG. 1 is a conceptual diagram showing the overall configuration of a database protection system, a proxy server device, a database protection program, and a database protection method according to the present invention.

  The application server device 1 is configured such that a Web application 1b that accesses the database 1a is activated in response to a request from the client terminal device 2, and the user registers in the database 1a from the client terminal device 2. Various information can be browsed.

  Reference numeral 3 denotes a proxy server device of the present invention, and the database protection program 3a of the present invention operates on the proxy server device 3. The database protection system and the database protection method of the present invention intercept data transmitted and received between the application server device 1 and the client terminal device 2 using the proxy server device 3, and encrypt and decrypt predetermined data. Is. Reference numeral 3b denotes a setting file that records key information necessary for encryption and decryption, item name information of data to be concealed, and the like.

  In the example of FIG. 1, the client terminal device 2 transmits request data 4a (HTTP Request) that complies with the provisions of http (Hyper Text Transfer Protocol). When the request data 4a is a database update process, the proxy server device 3 that intercepts the request data 4a uses the database protection program 3a to set a predetermined area in the request data 4a as needed based on the information in the setting file 3b. After that, the request data 4b (HTTP Request) is transmitted to the application server device 1. The application server device 1 updates the database 1a and stores the encrypted data in the database 1a.

  Next, when the request data 4a is a reference process, the application server apparatus 1 reads the encrypted data from the database 1a and transmits the response data 4c (HTTP Response). In the proxy server device 3 that intercepts this, the database protection program 3a decrypts the predetermined area encrypted based on the information in the setting file 3b, and then sends the response data 4d (HTTP Response) to the client terminal device 2. Send. Therefore, the data displayed on the client terminal device 2 is in a decrypted state.

  According to the present invention, key information necessary for encryption and decryption is recorded in the setting file 3b of the proxy server device 3, and data to be kept secret such as personal information is encrypted by the proxy server device 3 and stored in the database 1a. Therefore, even if a system developer who has the right to access personal information becomes a malicious person, only encrypted data can be viewed, and leakage of important data can be prevented. can get.

  Further, since the proxy server device 3 does not have an application or a database, it is easy to tighten the security policy. That is, in the present invention, it is not necessary to make the security policy of the application server device 1 stricter than necessary, and as a result, the cost for security can be reduced. In particular, if the proxy server device 3 is installed at a location different from the application server device 1 to increase the security level, the security level of the application server device 1 is configured to be lower than that of the proxy server device 3. The security gap becomes clear and the overall cost of security can be reduced. Since the proxy server device 3 does not store user data other than the setting file 3b, there is an advantage that it is not necessary to make frequent backups.

  Next, processing of the database protection system, proxy server device, database protection program, and database protection method of the present invention will be described in more detail with reference to FIGS.

  The proxy server device 3 receives the request data from the client terminal device 2 (# 1), and acquires a session object in which information of the other party currently connected to the session is stored from Cookie information (# 2).

  The setting file 3a of the proxy server device 3 includes, in addition to key information necessary for encryption, information on a login URL indicating a request for login processing and confidential information indicating that data to be confidential is included. Information of information URL and information of user registration URL indicating user registration processing are recorded (# 3-2). When the database protection program 3a of the proxy server device 3 receives the request data from the client terminal device 2, the database protection program 3a checks whether or not it matches the information of each URL (# 3).

  First, the most basic processing of the present invention will be described. When the request data matches the confidential information URL, the database protection program 3a acquires the key information and the item name information of the data to be confidential from the setting file 3a, and encrypts a predetermined area in the request data. (# 17 (A1) in FIG. 2). At this time, the database protection program 3a inserts a tag character string before and after the area to be encrypted.

  Next, when the proxy server device 3 receives the response data from the application server device 2, the database protection program 3a searches for the tag character string as shown in FIG. 3 (# 20 (A3)), and the tag When there is a character string, since there is encrypted data, decryption means is executed (# 25 (A2)). As described above, in the present invention, since the tag character string is inserted before and after the area to be encrypted, any area in the request data is encrypted and decrypted without depending on the unit of the database item. be able to.

Next, returning to FIG. 2, the processing of the database protection program of the present invention will be described in more detail in time series.
First, when the received request data matches the user registration URL, the request data includes password information necessary for user registration. The setting file 3 records item name information including password data, and the database protection program 3a hashes the password information using a key (# 4).

  In the present invention, after the password is hashed (# 4), the signature data for the user information consisting of the user name and password is added and recorded in the request data (# 5 (B1)), and this signature is added. Is stored in a signature information recording file on the application server device 1 side (# 6 (B2)). As will be described later, these are processes necessary for eliminating a malicious system developer from logging in without going through a regular user registration process.

  Next, a case where the received request data matches the login URL will be described. In this case, the database protection program 3a acquires the signed user information from the application server device 1 (# 7 (B3)). That is, a function for returning the signed user information is added to the application server device 1 (# 7-2).

  Here, in the present invention, the signature of the received request data and the signature stored in the application server device 1 are collated, and if they do not match, error processing (# 9) is executed. In this way, four steps of # 5 (B1), # 6 (B2), # 7 (B3), and # 8 (B4), which are labeled (B1) to (B4) in FIG. 2, are provided. Therefore, in the present invention, an unauthorized login process that has not undergone a regular user registration process is regarded as an error, and the database can be protected from a malicious system developer.

  On the other hand, if the signatures match, the database protection program 3a hashes the password portion in the request data using the key (# 10). Then, it is verified whether or not the passwords match (# 11). If the passwords do not match, error processing is executed (# 9) because it is considered an illegal process.

  In the present invention, when the request data is a login URL, user information is stored in the session object (# 12 (C1)). Next, when the request data matches the confidential information URL, the database protection program 3a checks whether or not user information exists in the session object (# 13 (C2)). Is executed (# 14). This is because the case where the user information does not exist in the session object is considered to be an unauthorized process that has not undergone a normal session connection process.

  As described above, since the two steps # 12 (C1) and # 13 (C2) with reference numerals (C1) to (C2) in FIG. 2 are provided, in the present invention, the malicious system developer Even if unauthorized processing is performed without passing through regular session connection processing, this can be eliminated as an error. Also in the decryption process, as shown in FIG. 3, it is checked whether or not user information exists in the session object (# 22 (C3)), and if it does not exist, error processing is executed. (# 27).

  Also, in # 13 (C2) of FIG. 2, when there is user information in the session object, the database protection program 3a acquires the user information from the session object (# 15 (D1)), and the confidentiality in the request data The user ID is added as an owner to the data to be recorded and recorded (# 16 (D2)). Thereafter, the database protection program 3a encrypts the data area to be concealed with the key (# 17 (A1)), and transmits the request data to the application server apparatus 1 (# 18).

  Next, in FIG. 3, when the proxy server device 3 receives the response data from the application server device 1 (# 19), the proxy server device 3 searches for the tag character string as described above (# 20), and whether there is a tag character string or not. Is determined (# 21). If there is no tag character string, it is data that does not need to be decrypted, so the process jumps to the process of transmitting to the client terminal device 2 (# 26). On the other hand, when the tag character string exists, it is checked whether or not there is user information in the session object prior to execution of the decryption means (# 22 (C3)). As described above, this is a check as to whether or not a normal session connection process has been performed.

  Here, when the user information is registered in the session object, the database protection program 3a acquires the user information from the session object (# 23 (D3)), and this is encrypted by # 16 (D2) in FIG. It is checked whether or not it matches the user ID assigned to the data (# 24 (D4)). If they do not match, error processing is executed (# 27).

  In this way, four steps # 15 (D1), # 16 (D2), # 23 (D3), and # 24 (D4), which are labeled (D1) to (D4) in FIGS. In the present invention, by checking the consistency between the user at the time of encryption and the user at the time of decryption, an unauthorized operation by a malicious system developer can be eliminated.

  In the present invention, if the portion of # 29 in FIG. 3 is expanded as shown in FIG. 4, its own data is disclosed only to a specific partner existing in the public partner list file on the application server device 1. It is also possible. That is, when the user information acquired from the session object is collated with the user ID assigned to the encrypted data and the result is inconsistent (# 29-2), the database protection program 3a The signed user information related to the owner of the confidential information is acquired from the device 1 (# 30), the signature is confirmed (# 31), and if they do not match, error processing is executed (# 35). On the other hand, when the signatures match, the public partner list file is accessed and matched (# 32 (E1)), and when a public partner with a matching user ID is found (# 33 (E2)), decryption is performed. Processing is executed (# 34 (E3)).

  In this way, since the three steps # 32 (E1), # 33 (E2), and # 34 (E3) with the symbols (E1) to (E3) in FIG. 4 are provided, in the present invention, It becomes possible to publish own data only to a specific partner who is registered in the public partner list file in advance.

  As described above, according to the present invention, key information necessary for encryption and decryption is recorded in the proxy server device, and data to be concealed is encrypted by the proxy server device and recorded in the database. Even when a system developer who has access rights to personal information or the like becomes a malicious person, only encrypted data can be viewed, and leakage of important data can be prevented. Also, changes to existing applications can be minimized.

  Further, since the proxy server device does not have an application or a database, there is no need for software improvement, backup, failure analysis, etc., and it becomes easy to tighten security policies. That is, in the present invention, it is not necessary to make the security policy of the application server device stricter than necessary, and as a result, the cost for security can be reduced.

  In this embodiment, an example in which data of one application server device is intercepted is disclosed. However, the database protection system, the proxy server device, the database protection program, and the database protection method of the present invention are one proxy server device. However, the data of a plurality of application server devices may be intercepted, and the same encryption processing may be performed respectively. In this way, if the encryption processing of a plurality of application server devices is consolidated into one proxy server device, the effect of reducing the security cost is further increased.

  The database protection system, proxy server device, database protection program, and database protection method of the present invention are produced and sold by, for example, a system developer and used industrially.

It is a conceptual diagram which shows the whole structure of this invention. It is a flowchart figure of the encryption process of this invention. It is a flowchart figure of the decoding process of this invention. It is a flowchart figure of this invention in the case of using a public partner list. It is a figure explaining the structure of the conventional application server apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Application server apparatus 1a Database 1b Application 2 Client terminal apparatus 3 Proxy server apparatus 3a Setting file

Claims (17)

A system for protecting database information accessed by an application of the application server device using a proxy server device that intercepts data transmitted and received between the application server device and the client terminal device,
The proxy server device
It is possible to access a setting file that records key information and data information that should be kept secret,
An encryption means for encrypting a predetermined area in the request data received from the client terminal based on the information recorded in the setting file;
Decryption means for decrypting an area encrypted by the encryption means in response data to the request data received from the application server device;
A database protection system characterized by comprising: A proxy server device for protecting database information accessed by an application of an application server device,
It is possible to access a setting file that records key information and data information that should be kept secret,
An encryption means for encrypting a predetermined area in the request data received from the client terminal based on the information recorded in the setting file;
Decryption means for decrypting an area encrypted by the encryption means in response data to the request data received from the application server device;
A proxy server device comprising: In the encryption means, when encrypting a predetermined area in the request data based on the information recorded in the setting file, a tag character string is inserted before and after the area to be encrypted,
3. The database protection system according to claim 1, or the proxy server device according to claim 2, wherein the decrypting means searches the tag character string for a character string to find an encrypted area. When the request data is a request for user registration processing,
The proxy server device executes means for recording signature information for user information in the request data, and the application server device that has received the request data stores the signed user information in a signature information recording file. Implement means,
Next, when the proxy server device receives request data for login processing,
The proxy server device obtains the signed user information by accessing the signature information recording file, and executes means for checking whether or not it matches the signature of the request data of the login process. 3. The database protection system according to claim 1, or the proxy server device according to claim 2, wherein error processing is executed. When the request data is a request for login processing,
The proxy server device executes means for storing user information in a session object;
Next, when the proxy server device receives a request including data to be concealed,
2. The database according to claim 1, wherein the proxy server device executes means for checking whether user information is registered in the session object, and executes error processing when the user information is not registered. The proxy server apparatus according to claim 2 or a protection system. The database protection system or the proxy server device according to claim 5, wherein when the proxy server device receives a request including data to be concealed and user information is registered in the session object,
The proxy server device acquires user information from the session object, gives a user ID to data to be concealed in request data,
Next, when the proxy server device executes the decryption means,
The proxy server device acquires user information from the session object, checks whether or not it matches a user ID assigned to the encrypted data, and executes error processing if they do not match A database protection system or a proxy server device. The proxy server device can access a public partner list file on the application server device,
In the decryption process, when the user information acquired from the session object by the proxy server device does not match the verification result of the user ID assigned to the encrypted data,
The database protection system according to claim 6, wherein the proxy server device accesses and matches the public partner list file, and performs decryption processing when a public partner with a matching user ID is found. Or a proxy server device.   2. The proxy server device according to claim 1, wherein the proxy server device is installed at a different location from the application server device to increase a security level, while the security level of the application server device is lower than that of the proxy server device. 8. The database protection system or the proxy server device according to any one of 7.   9. The database protection system or proxy server apparatus according to claim 1, wherein the proxy server apparatus stores no user data other than key information and the setting file. A program for causing a proxy server device that intercepts data transmitted and received between an application server device and a client terminal device to perform processing for protecting database information accessed by an application of the application server device,
Receiving request data from the client terminal device;
A step of accessing a setting file in which key information and information of data to be concealed are recorded; and a cipher for encrypting a predetermined area in the request data received from the client terminal based on the information recorded in the setting file Step,
Transmitting the request data to the application server device;
Receiving response data for the request data from the application server device;
A decryption step of decrypting an encrypted area in the response data;
Transmitting the response data to the client terminal;
A database protection program for causing the proxy server device to perform A method for protecting database information accessed by an application of the application server device using a proxy server device that intercepts data transmitted and received between the application server device and the client terminal device,
In the proxy server device,
Receiving request data from the client terminal device;
A step of accessing a setting file in which key information and information of data to be concealed are recorded; and a cipher for encrypting a predetermined area in the request data received from the client terminal based on the information recorded in the setting file Step,
Transmitting the request data to the application server device;
Receiving response data for the request data from the application server device;
A decryption step of decrypting the region encrypted by the encryption step in the response data;
Transmitting the response data to the client terminal;
A database protection method, characterized by: In the encryption step, when encrypting a predetermined area in the request data based on the information recorded in the setting file, a tag character string is inserted before and after the area to be encrypted,
The database protection program according to claim 10 or the database protection method according to claim 11, wherein in the decryption step, the tag character string is searched for a character string to find an encrypted area. When the request data is a request for user registration processing,
Causing the proxy server device to execute a step of recording signature information for user information in the request data;
When the application server device that has received the request data stores the signed user information in a signature information recording file, and then the proxy server device receives request data for login processing,
When the proxy server device accesses the signature information recording file to acquire signed user information and executes a step of checking whether or not it matches the signature of the request for the login process. 12. The database protection program according to claim 10, or the database protection method according to claim 11, wherein an error processing step is executed. When the request data is a request for login processing,
Causing the proxy server device to execute a step of storing user information in a session object;
Next, when the proxy server device receives a request containing data to be concealed,
11. The proxy server device is caused to execute a step of checking whether or not user information is registered in the session object, and when not registered, an error processing step is executed. The database protection program of Claim 11 or the database protection method of Claim 11. 15. The database protection program or the database protection method according to claim 14, wherein the proxy server device receives a request including data to be concealed and user information is registered in the session object.
Causing the proxy server device to acquire user information from the session object, and to execute a step of assigning a user ID to data to be concealed in request data;
Next, when the proxy server device executes the decryption means,
The proxy server device acquires user information from the session object, and executes a step of checking whether or not the user ID assigned to the encrypted data matches, and if it does not match, an error occurs. A database protection program or a database protection method characterized by causing a processing step to be executed. The proxy server device can access a public partner list file,
In the decryption process, when the user information acquired from the session object by the proxy server device does not match the verification result of the user ID assigned to the encrypted data,
16. The proxy server device according to claim 15, wherein the proxy server device accesses and matches the public partner list file, and executes a step of performing decryption processing when a public partner with a matching user ID is found. Database protection program or database protection method. A computer-readable storage medium in which the database protection program according to any one of claims 10, 12, 13, 14, 15, and 16 is recorded.

Images