Database processing method, apparatus, device, and medium

An electronic device, comprising:

• a processor;
• and
• a memory configured to store instructions that are operable, when executed by the processor, to cause the electronic device to perform operations comprising:
• receiving an access request for a database, wherein the access request carries a user identifier of an access party and a data processing instruction, the data processing instruction is used to indicate processing of specified data in the database to obtain target data, and the database is deployed in a separated secure execution environment;
• querying an authorization information table in the database based on the user identifier of the access party to detect whether the access party is an authorized user for the specified data and/or the target data in response to the specified data and/or the target data being subset data in encrypted data, wherein the encrypted data comprises data stored in the database in an encrypted form, and the authorization information table is used to record authorized user information configured by a data party for the encrypted data and to record subset information that does not require authorized access and is configured by the data party for the encrypted data;
• detecting whether the subset data belongs to the subset information in the specified data and/or the target data that does not require authorized access in response to the access party being not the authorized user for the specified data and/or the target data;
• and
• in response to the subset data belonging to the subset information in the specified data and/or the target data that does not require authorized access, executing the data processing instruction to process the specified data to obtain target data, and returning the target data in response to the access request.

A non-transient computer-readable storage medium, is configured to store a computer program that, when executed by one or more computers, cause a device to perform operations comprising:

• receiving an access request for a database, wherein the access request carries a user identifier of an access party and a data processing instruction, the data processing instruction is used to indicate processing of specified data in the database to obtain target data, and the database is deployed in a separated secure execution environment;
• querying an authorization information table in the database based on the user identifier of the access party to detect whether the access party is an authorized user for the specified data and/or the target data in response to the specified data and/or the target data being subset data in encrypted data, wherein the encrypted data comprises data stored in the database in an encrypted form, and the authorization information table is used to record authorized user information configured by a data party for the encrypted data and to record subset information that does not require authorized access and is configured by the data party for the encrypted data;
• detecting whether the subset data belongs to the subset information in the specified data and/or the target data that does not require authorized access in response to the access party being not the authorized user for the specified data and/or the target data;
• and
• in response to the subset data belonging to the subset information in the specified data and/or the target data that does not require authorized access, executing the data processing instruction to process the specified data to obtain target data, and returning the target data in response to the access request.