GBase and E-Tech Infoseal Joint Trade Secret Protection Solution
Today, the digital economy, with its extensive coverage and strong penetration, is deeply integrated with various industries, gradually leading new economic development. On the other hand, data security has been elevated to a national strategy, with the central government successively issuing policy documents to strengthen data security, trade secret, and personal privacy protection, and enhance cybersecurity capabilities. As data is a core production factor of the digital economy and a vital asset for enterprise development, safeguarding it is of great significance. To this end, GBase (General Data Technology) and data security expert E-Tech Infoseal jointly launched a trade secret protection joint solution to safeguard enterprise data security.
The joint trade secret protection solution built around the GBase database focuses on trade secrets, leveraging multi-dimensional core technologies such as trade secret labeling, document security, unified authentication, watermarking and tracing, and mobile device protection, enabling classified and tiered management of data and full lifecycle data protection.
As an enterprise-grade distributed transactional database based on openGauss, GBase 8c offers high performance, high availability, elastic scalability, and robust security, providing strong momentum for enterprise digital transformation from the data perspective. Meanwhile, the E-Tech Infoseal trade secret protection solution serves as a security shield for industry digital transformation at the data application level.
The solution fully leverages the security features of the GBase database, combined with E-Tech Infoseal's deep understanding and extensive practice in information security, enhancing security functions in the following areas: identity authentication and verification, data encryption, security auditing, separation of duties, dynamic data masking, and fully encrypted databases:
Identity Authentication and Verification
Each database user has a unique, non-repeatable identifier. User passwords are stored after being processed with encryption algorithms, and the encryption is irreversible.
Data Encryption
Data encryption and decryption are implemented within the database kernel storage engine, completely transparent to users.
Supports storage encryption at different data granularities such as database, table, and field. Different data objects can use different encryption keys to prevent single points of failure.
Security Auditing
An independent auditing system is provided for relevant audit analysis and automatic alerting.
A dedicated security auditor is assigned for audit management, achieving independent auditing and ensuring system security.
Separation of Duties
Through security administrators, audit administrators, and data administrators, the database implements separation of duties with clear roles and responsibilities, working together to achieve security management.
Dynamic Data Masking
Supports dynamic data masking, which, without altering source data, flexibly protects sensitive data by configuring masking policies for specific user scenarios, designated sensitive column labels, and corresponding masking methods.
When unauthorized users access data configured with dynamic data masking policies, the database returns masked data, thereby protecting sensitive information.
Fully Encrypted Database
The fully encrypted database aims to address data privacy protection throughout the entire data lifecycle, ensuring that data remains in ciphertext during transmission, computation, and storage under any business scenario or environment. After the data owner encrypts the data at the client side and sends it to the server, even if an attacker exploits system vulnerabilities to steal user data, they still cannot obtain meaningful information, thereby protecting data privacy.
To further meet diverse user application scenarios, the trade secret protection solution is compatible with both Windows and domestic IT innovation (Xinchuang) environments, and supports interoperability between the two, facilitating hybrid deployment and helping users smoothly complete upgrades and migrations to Xinchuang systems.
At the same time, the solution employs Chinese national cryptographic algorithms, meeting the requirements for cryptographic application security evaluation and classified protection, and realizes a three-in-one protection network covering terminal, backend, and mobile device security, establishing a visible, manageable, and controllable trade secret protection system for users.
Currently, the solution has been deployed at scale and is running stably across telecom, finance, energy, healthcare, and other industries.
The joint solution developed by GBase and E-Tech Infoseal helps protect users' trade secrets from infringement, making data security simpler. Going forward, the two parties will continue to deepen cooperation in the field of data security protection, empowering the digital transformation of users in key sectors such as finance, telecom, energy, government, and transportation.