Crypto DB by Aladdin-RD is a certified system for preventing information leaks from Oracle, Microsoft SQL Server, PostgreSQL, and Postgres Pro database management systems (DBMS). It is recommended for protecting personal data stored in databases in accordance with Federal Law 152-FZ 'On Personal Data'. Crypto DB provides reliable access restriction for database administrators to stored information and meets critical requirements of the PCI DSS standard for systems using bank cards. It complements standard database security tools and can be used to protect personal data in cloud environments. Crypto DB is registered in the registry of Russian software for computers and databases and is certified by the FSB of Russia as a means of cryptographic protection of information class KС1 and KС2, allowing its use for protecting information that does not contain state secrets. To prevent information leaks, Crypto DB uses a composite protection method: encryption of database tables with Russian cryptographic algorithms GOST 28147-89 or GOST R 34.12-2015, complemented by strict two-factor user authentication using USB tokens or JaCarta smart cards. For unauthorized users, protected data is masked, while the actions of all authorized users are personalized and logged, allowing for audits and security incident investigations. Crypto DB includes integrity control of its own libraries, as well as database management system modules and the operating system, ensuring that the executable code cannot be replaced by the database administrator. It addresses the problem of protecting confidential information in both commercial and government structures using DBMS for high-load systems. Selective encryption of data table columns allows for avoiding total encryption, saving server computational resources and reducing costs. Deployment of Crypto DB does not require modifications or significant changes to existing information systems due to the principle of transparent integration. Applications that worked with unencrypted data do not require any modifications after encrypting tables with Crypto DB, neither on the client software side nor on the database server. Crypto DB is a software-hardware complex for ensuring the confidentiality and integrity of information in DBMS through cryptographic data protection. It enables selective encryption of information stored in the logical structure of database tables, significantly reducing the load on hardware resources compared to encrypting all database files. As a layered information protection tool, Crypto DB does not interfere with the standard information processing mechanisms of the database. It also provides additional access control to protected data and logs all operations with them, regardless of the user's privilege level. The system consists of Crypto DB server components, a security administrator management console, and optional audit collectors. It operates on various platforms of popular DBMS: Oracle, Microsoft SQL Server, PostgreSQL, Postgres Pro, and Jatoba. The client software runs on Microsoft Windows XP/Vista/7/8/8.1 (32- and 64-bit). Advantages of using Crypto DB compared to information protection methods built into DBMS include selective encryption of individual columns in DB tables, enhanced user authentication for access to protected data using USB tokens or smart cards, auditing and monitoring of access events to encrypted data, flexible centralized management of encryption keys to prevent unauthorized actions by DB administrators, and ease of implementation. Integration into existing information systems without code changes is possible. Use of Crypto DB in cloud environments for protecting personal data in cloud service systems is also possible. For cloud infrastructure (IaaS), such as database hosting, the application of Crypto DB is similar to traditional methods. For SaaS services, an additional component—a encrypting proxy—is required.
