Method and apparatus for processing failure of cipher change of ciphertext in database
AssigneeAdvanced New Technologies Co., Ltd.
InventorLi Li
Life of this patent
Estimating the term…
Abstract
A method for processing cipher change failure comprises: storing a record's error information when a cipher change of ciphertext data in the record fails, the error information comprising an identifier of the record and a failure cause; determining a retry strategy based on the stored failure cause; and employing the retry strategy to reperform the cipher change of the ciphertext data in the record having the identifier.
Claims20
A method for processing cipher change failure, comprising:
- storing a record's error information when a cipher change of ciphertext data in the record fails, the error information comprising an identifier of the record, a failure cause, an old key version number, and a new key version number;
- determining a retry strategy based on the stored failure cause, the determining a retry strategy comprising determining whether to implement an automatic retry or a manual retry based on whether the failure cause comprises at least one of:
- database inaccessibility, database jitter, database read/write errors, a state anomaly of a field value access system that performs the cipher change, or an execution anomaly of a cipher change execution component that calls the field value access system;
- and
- employing the retry strategy to reperform the cipher change of the ciphertext data in the record having the identifier by decrypting the ciphertext data with a key corresponding to the old key version number to obtain plaintext data, and encrypting the obtained plaintext data using a key corresponding to the new key version number.
An apparatus for processing cipher change failure, the apparatus comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the apparatus to perform operations comprising:
- storing a record's error information when a cipher change of ciphertext data in the record fails, the error information comprising an identifier of the record, a failure cause, an old key version number, and a new key version number;
- determining a retry strategy based on the stored failure cause, the determining a retry strategy comprising determining whether to implement an automatic retry or a manual retry based on whether the failure cause comprises at least one of:
- database inaccessibility, database jitter, database read/write errors, a state anomaly of a field value access system that performs the cipher change, or an execution anomaly of a cipher change execution component that calls the field value access system;
- and
- employing the retry strategy to reperform the cipher change of the ciphertext data in the record having the identifier by decrypting the ciphertext data with a key corresponding to the old key version number to obtain plaintext data, and encrypting the obtained plaintext data using a key corresponding to the new key version number.
A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:
- storing a record's error information when a cipher change of ciphertext data in the record fails, the error information comprising an identifier of the record, a failure cause, an old key version number, and a new key version number;
- determining a retry strategy based on the stored failure cause, the determining a retry strategy comprising determining whether to implement an automatic retry or a manual retry based on whether the failure cause comprises at least one of:
- database inaccessibility, database jitter, database read/write errors, a state anomaly of a field value access system that performs the cipher change, or an execution anomaly of a cipher change execution component that calls the field value access system;
- and
- employing the retry strategy to reperform the cipher change of the ciphertext data in the record having the identifier by decrypting the ciphertext data with a key corresponding to the old key version number to obtain plaintext data, and encrypting the obtained plaintext data using a key corresponding to the new key version number.
Dependencies are inferred from the claim text.