摘要： 讨论了针对如何在数据库加密系统中进行密钥分配，并给出了一种易于实现的密钥分配方案。该方案不要求用户拥有其能访问的所有数据类的密钥，只要求用户掌握由中国剩余定理计算出的用户类密钥。当用户访问系统时，系统可以根据用户类密钥很快计算出其能访问的所有数据类的密钥。在该密钥分配方案中，数据类的增加或删除、用户类的增加或删除和用户权限的变更都变得很容易实现。

关键词: 密钥分配, 中国剩余定理, 用户类密钥, 数据类密钥

Abstract: This paper discusses how keys are distributed in database encryption system and proposes an easily implementing scheme of key distribution which requests an user to own only a key instead of keys of all datum classes which can be accessed by users. When a user accesses the system, it is extremely easy for the system to work out those keys of all secure datum classes which can be accessed according to user,s key. In the scheme, it became easy to add or delete a datum class or a user class and alter a user’s security.

Key words: Key distribution, Chinese remainder theorem, User class keys, Datum class keys

中图分类号: 

• TP309