Secured Database System with Built-in Antivirus Protection

A method for securing a database system, the method comprising:

• in response to input from a system administrator, provisioning storage from a storage device for storing database information;
• in response to input from a security officer, generating an encryption key so that said database information is stored on the storage device in an encrypted manner;
• in response to input from a database administrator, generating a decryption key for decrypting the database information stored on the storage device, wherein access to said decryption key is controlled by the database system based on user authorization;
• and
• providing access to the database information by decrypting the database information only for authorized users.

A secured database system comprising:

• a relational database management system (RDBMS);
• a storage device for provisioning storage of database information;
• an encryption key for encrypting said database information that is stored on the storage device;
• a decryption key, automatically maintained by the database system, for decrypting the database information stored on the storage device, wherein access to said decryption key is controlled by the database system based on user authorization;
• and
• a module for providing access to the database information by automatically decrypting the database information only for authorized users.

In a database system, a method for providing protection against storage of computer viruses by the database system, the method comprising:

• storing virus definitions, for allowing detection of computer viruses in data;
• receiving an SQL statement specifying storage of particular data in the database system;
• creating an execution plan for carrying out database operations for executing the SQL statement;
• and
• during execution of the execution plan, testing said particular data with said virus definitions, for detecting presence of a computer virus in the particular data.

A database system providing protection against storage of computer viruses, the system comprising:

• a database for storing particular data in response to an SQL statement;
• an execution unit for carrying out database operations for executing the SQL statement;
• and
• a module, operating in conjunction with the execution unit, capable of detecting presence of a computer virus in the particular data before being accepted for storage in the database.