Database-based data processing method and device

A computer device comprising a processor and a non-transitory memory, wherein the non-transitory memory is configured to store machine-readable instructions executable by the processor, the processor is configured to execute the machine-readable instructions stored in the memory, wherein the machine-readable instructions, when executed by the processor, cause the processor to

• receive a data processing request to a database, wherein the data processing request carries a user identification of an accessing party and a data processing instruction for indicating a processing of designated data to obtain target data;
• when the designated data is secret state data, query an authorization information table in the database based on the user identification of the accessing party to detect whether the accessing party is an authorized user of the designated data, wherein the secret state data refers to data stored by the database in decrypted form, and the authorization information table is used for recording authorized user information of the secret state data configured by a data party;
• when the accessing party is an authorized user of the designated data, decrypt the designated data based on a key of the data party in an isolated security environment and execute the data processing instruction based on decrypted data to obtain the target data, and encrypt the target data based on a key of the accessing party to obtain a target data ciphertext;
• and
• return a response message carrying the target data ciphertext in response to the data processing request.

A non-transitory computer-readable storage medium storing instructions that cause at least a processor to:

• receive a data processing request to a database, wherein the data processing request carries a user identification of an accessing party and a data processing instruction for indicating a processing of designated data to obtain target data;
• when the designated data is secret state data, query an authorization information table in the database based on the user identification of the accessing party to detect whether the accessing party is an authorized user of the designated data, wherein the secret state data refers to data stored by the database in decrypted form, and the authorization information table is used for recording authorized user information of the secret state data configured by a data party;
• when the accessing party is an authorized user of the designated data, decrypt the designated data based on a key of the data party in an isolated security environment and execute the data processing instruction based on decrypted data to obtain the target data, and encrypt the target data based on a key of the accessing party to obtain a target data ciphertext;
• and
• return a response message carrying the target data ciphertext in response to the data processing request.