GBASE & TIMESYST Jointly Build a Combined Solution for Trade Secret Protection

2023-06-28

As the digital economy continues to lead new economic development through its broad coverage and deep penetration across industries, data security has been elevated to a national strategy. The central government has issued a series of policy documents to strengthen data security, trade secret and personal privacy protection, and improve network security capabilities. Meanwhile, data, as the core production factor of the digital economy, represents a vital asset for enterprises, making its protection critical. To address this, GBASE (General Data Technology Co., Ltd.) has partnered with data security expert Times Yixin to launch a Joint Trade Secret Protection Solution that safeguards enterprise data security.

 

 

Built around the GBase database, this Joint Trade Secret Protection Solution centers on trade secret protection. Leveraging core technologies such as trade secret labeling, document security, unified authentication, watermark traceability, and mobile device protection, it enables tiered and classified data control and full lifecycle data protection.

 

As an enterprise-grade distributed transactional database built on openGauss, GBase 8c from General Data Technology delivers high performance, high availability, elastic scalability, and robust security, empowering digital transformation from the data layer. Meanwhile, Times Yixin's Trade Secret Protection Solution serves as a security shield at the data application level for industry digitalization.

 

 

The solution fully leverages the security features of the GBase database and Times Yixin's deep expertise in information security. It provides enhanced security functions in the following areas:

· Authentication and Identification

Each database user has a unique, non-repeatable user identifier. User passwords are stored using irreversible encryption algorithms.

 

· Data Encryption

Data encryption and decryption are implemented in the database kernel storage engine, completely transparent to users.

It supports storage encryption at different granularities—databases, tables, and columns—with separate encryption keys for different data objects to prevent single-point breakthroughs.

 

· Security Auditing

An independent auditing system performs audit analysis and triggers automatic alarms.

A dedicated security auditor manages audits independently, ensuring system security.

 

· Segregation of Duties

Security management is distributed among security administrators, audit administrators, and data administrators, with clearly defined responsibilities and collaborative security enforcement.

 

· Dynamic Data Masking

Dynamic data masking protects sensitive data without altering source data. By configuring masking policies for specific user scenarios, designated sensitive column labels, and corresponding masking methods, privacy is flexibly safeguarded.

When unauthorized users access data covered by dynamic masking policies, the database returns masked results, ensuring privacy protection.

 

· Fully Encrypted Database

A fully encrypted database addresses privacy protection throughout the entire data lifecycle. Under any business scenario or environment, data remains encrypted during transmission, computation, and storage. Once the data owner encrypts data on the client side and sends it to the server, even if an attacker exploits system vulnerabilities to steal data, they cannot derive meaningful information, effectively protecting data privacy.

 

To meet diverse application scenarios, the trade secret protection solution is compatible with both Windows and China’s indigenous IT innovation (Xinchuang) environments, and supports interoperability between the two. This enables hybrid deployment and helps users smoothly transition and upgrade to the domestic IT ecosystem.

Additionally, the solution employs domestic cryptographic algorithms, meeting requirements for cryptographic application security assessments and China’s Classified Protection (MLPS) standards. It delivers a tripartite protection network covering endpoints, backend, and mobile devices, establishing a visible, manageable, and controllable trade secret protection system.

Currently, the solution is running stably at scale across telecom, financial services, energy, healthcare, and other sectors.

 

The joint solution built by GBASE and Times Yixin helps protect user trade secrets from infringement, making data security simpler. Moving forward, both parties will deepen their collaboration in data security protection, continuously empowering digital transformation for users in key sectors such as finance, telecom, energy, government, and transportation.