From February 23rd to 24th, 2023, the "2023 China Network and Data Security Industry Summit Forum" with the theme of "New Journey, New Ideas and High-Quality Development" jointly hosted by the Ministry of Industry and Information Technology and the Sichuan Provincial People's Government was held in Chengdu. held. Industry and Information Security Center's first high-growth network security enterprise "Bravely Climb Star" was officially announced. Lianshi was successfully listed with high growth and high innovation. This selection activity aims to tap innovative advantages and High-growth network security companies, combined with quantitative indicators such as economic benefits and qualitative indicators such as social influence, will eventually form a list of domestic network security companies with high development potential for support. The Ministry of Industry and Information Technology's "First National Commercial Encryption Application Excellent Cases" selection results were officially released. The "Commercial Encryption Solutions for Important Data and Personal Information Protection" jointly created by Lianshi Network and Shaanxi Mobile, relying on the advantages of technology and products without modification, from hundreds of Selected as a breakout case.
The first high-growth network security enterprise "Climbing Star" award (third from left)
Awarded for the First National Excellent Case of Commercial Cryptography Application (second from the right)
Lianshi won the "Star of Brave Climbing" of high-growth enterprises
As an innovative manufacturer of data security technology, Lianshi has successively completed multiple rounds of financing such as Antiy Technology, Anyun Capital, Guoke Jiahe, Tencent, and Chongqing Science and Technology Achievement Transformation Fund. Lianshi combines the actual protection needs of enterprises with new compliance requirements such as the "Data Security Law" and "Personal Information Protection Law", and is oriented to business scenarios such as personal information protection, business secret protection, data security compliance transformation, and national secret compliance transformation , providing data security products with innovative features of "no modification", as well as professional data security services.
Based on the aspect-oriented data security technology, Lianshi decouples security and business in technology, but integrates and interweaves in capabilities. Through the fine-grained data security protection method that avoids development and transformation of applications and implements agilely, it realizes the main body to the user in the application, Object-to-field-level protection complements the missing security capabilities of established application systems and ensures that business operations are not affected. Lianshi created a matrix of self-developed "transformation-free" data security protection products, including "one platform": the main data security platform, and "multi-modules": security capability modules such as identification, protection, detection/response, recovery, auditing/traceability, etc. The transformation-free control points of data in different processing links realize the practical protection system of horizontal coverage and wide application, and vertical superposition of multi-level security capabilities.
At the same time, as data security construction enters the deep-water area, users need comprehensive data security planning, construction, operation and other services. Lianshi combines the compliance and actual requirements of different industries such as government, finance, operators, transportation, education, medical tourism, and industry. , providing professional data security supporting services, including data security strategic planning, data security compliance consulting, data security governance system design, etc., to fully meet the demands of corporate development strategies, compliance requirements, and risk governance.
Commercial encryption solutions for important data and personal information protection
Lianshi's "commercial encryption solution for the protection of important data and personal information" is based on data security technology without modification, and has unique advantages such as fast delivery, wide compatibility, complete protection, accurate management and control, and high performance. While adapting to complex application architectures, Build a data protection system that integrates password data security and precisely controls business flow. The solution builds data security capabilities such as passwords into the business system, and ingeniously supports scenarios such as system sensitive data protection, data synchronization and sharing with peripheral systems, and full encryption of large data scales. The fields anchoring important data and personal information are protected from modification, encryption and de-identification, which greatly enhances customers' control over core data assets.
In response to the actual needs of enterprise data security and protection difficulties, Lianshi combines national laws and regulations and data security industry regulatory requirements, centering on "data" and focusing on "business applications", based on data security technology that does not require development and modification of applications, high-level Performance domestic encryption and de-identification technology, forming a high-coverage data control point, horizontally covering applications such as marketing and service, business development and operation, resources and basic functions, and partner relationship management, and vertically stacking to find identification, encryption, and de-identification , detection/response, audit and traceability and other security capabilities to achieve centralized control and distributed protection. The solution can be quickly implemented and launched without affecting the business of the enterprise, so as to realize the effective protection of sensitive fields.
As the core system of the enterprise, the business support system has intertwined business, large amount of data, intensive communication, contains a lot of sensitive personal information, and is closely connected with external multi-level systems. Therefore, the Lianshi solution focuses on commercial encryption technology, complements and comprehensively enhances data security capabilities for key scenarios, and ensures the security of business systems.
01 Sensitive data without modification security protection
The business system has accumulated a large amount of sensitive personal information and important data, and there are threats of data leakage in the system storage layer, application layer, data distribution, access control, cloud access and other links. The Lianshi solution uses data security technology without modification, and puts the data security module into the application in the form of a plug-in. It can set policies for dozens of fields in hundreds of application service nodes without modifying the system, and realize sensitive fields. fine-grained protection, and integrate functions such as data desensitization, key management, and policy management to improve system data security protection capabilities.
02 Data high-performance interactive decryption processing
A large amount of data will be transmitted to analysis systems at all levels. In order to ensure the normal use of subsequent data, it is necessary to decrypt the data during the transmission process. The analysis system after the national secret transformation, the decryption program adopts multi-thread and multi-task processing methods, which can decrypt hundreds of millions or even billions of massive data in half an hour, realize high-performance decryption processing, and achieve a breakthrough in the encryption and decryption speed of the national secret SM4 on a single CPU At 140Gbps, it only takes 20 seconds for a single CPU to encrypt 1 billion mobile phone numbers (that is, 50 million records/second). At the same time, it also has the advantages of not changing the original business process during the decryption process, supporting AVL file types, high availability, and configurability. The realization of on-demand encryption and decryption can also effectively alleviate the "drag library" attack by external personnel and unauthorized access by internal personnel.
03 Full encryption processing of large data scales
Full encryption of existing historical plaintext data in the database will inevitably affect the normal operation of the business support system. How to minimize the impact of system cutover requires full encryption of large data tables. Various database brands and versions used in the decoupling system of Lianshi Solution, such as Oracle, SQL Server, MySQL, NPC Jincang, Dameng and other databases, as well as JAVA, .Net, PHP, C and other languages; at the same time, it supports multiple concurrent, Multi-threaded data encryption is suitable for data encryption at the level of hundreds of millions of records in a single table, full encryption of historical data in batches, etc., to minimize system impact.
This time, Lianshi received double happiness at the "2023 China Network and Data Security Industry Summit Forum" and was awarded the "Climbing Star" and was selected as the "Excellent Case of the First National Commercial Encryption Application". It is also an affirmation of the innovation and practical effect of smelting technology. In the future, Lianshi will continue to innovate around "reform-free data security technology", superimpose data discovery and identification, pre-event, in-process and post-event protection capabilities, and build a data-centric security system to make data sharing safer and more valuable.