SINSIWAY | Database Security Specialist - Solution

a database encryption solution

PETRA CIPHER

Petra Cipher is a database encryption solution that protects the asset and brand value of companies and
prevents the loss of important data through encryption. It complies with security-related legislations and
compliances including the Personal Information Protection Act and the Standards for Measures to Secure Safety of Personal Data.

Petra Cipher also ensures the availability of the system by analyzing possible issues from encryption in
advance and supports highly confidential, integrity, and stable services through advanced technology such as
triple redundant key servers and prevention of double encryption.

Related Legislations & Compliance

Personal Information Protection Act
Article 24 (Limitation to Processing of Personally Identifiable Information)	③ A personal data controller who processes personally identifiable information pursuant to each subparagraph of paragraph (1) shall take measures necessary to ensure safety, including encryption, as prescribed by Presidential Decree so that personally identifiable information is not lost, stolen, exposed, forged, altered, or damaged.
Article 24-2(Limitation to Processing of Resident Registration Numbers)	② Notwithstanding Article 24(3), a personal data controller shall take measures necessary to ensure safety, including encryption, as prescribed by Presidential Decree so that resident registration numbers are not lost, stolen, exposed, forged, altered, or damaged.

Standards for Measures to Secure Safety of Personal Data
Article 7 (Encryption of Personal Data)	①A personal data controller shall encrypt and save personally identifiable information, passwords, and biometrics information when transmitting and receiving via a telecommunications network or sending via external memory.
	②A personal data controller shall encrypt and save passwords and biometrics information: Provided, that passwords shall be one-way encrypted and saved to prevent decryption.
	③A personal data controller shall encrypt and save personally identifiable information in the internet section and the demilitarized zone (DMZ) of the internal network and internet section.
	④ A personal data controller shall determine the application and scope of encryption for the following subparagraphs when saving personally identifiable information in the internal network: 1. The result of the privacy impact assessment, if the government institution is subject to the privacy impact assessment pursuant to Article 33 of the Personal Information Protection Act; and 2. The result of risk analysis when not encrypted
	⑤ A personal data controller shall encrypt and save personal data pursuant to paragraphs (1), (2), (3), or (4) of these Standards using a safe encryption algorithm.
	⑥ A personal data controller shall encrypt and save personally identifiable information using a safe encryption algorithm or commercial encryption software when saving and managing them on a work computer or mobile device.
	⑦ A personal data controller shall encrypt and save personally identifiable information using a safe encryption algorithm or commercial encryption software when saving and managing them on a work computer.

Standards for Administrative and Technical Measures of Personal Data
Article 6(Encryption of Personal Data)	①The information and communication service provider shall one-way encrypt passwords and save them to prevent decryption. ②The information and communication service provider shall encrypt and save the following data using a safe encryption algorithm: 1. Resident registration number 2. Passport number 3. Driver’s license number 4. Alien registration number 5. Credit card number 6. Account number 7. Biometrics information

Standards for Administrative and Technical Measures of Personal Data

Article 6(Encryption of Personal Data)

①The information and communication service provider shall one-way encrypt passwords and save them to prevent decryption.

②The information and communication service provider shall encrypt and save the following data using a safe encryption algorithm:

1. Resident registration number

2. Passport number

3. Driver’s license number

4. Alien registration number

5. Credit card number

6. Account number

7. Biometrics information

Key Features

Safe key generation and management

Generates safe initial keys, and encrypts and saves generated data keys
Safely manages keys by setting expiration dates

Strict access control and log management

Applies access control with multiple conditions such as database accounts, IPs, and system names
Provides log management and query screen on the history of decryption and encryption

Perfect linkage with database access control (Petra)

Provides integrated UI for consistent rule management of database user control
Controls decryption and encryption based on the user’s IP if the user passes through database access control

Prevents query of large data decryption

Prevents large data exposure by controlling the volume of data decryption

Full encryption and partial encryption in the unit of a column

Encryption setting in the unit of a column
Partial encryption with just a column of a specific position

Dual redundant key management servers and local key management

Maintains the service through dual redundant key servers even during active server failure

Strengths

High-performance and high-functioning APIs
- Ensures efficient management after encryption by providing separate APIs for session settings and saving logs
Stable deployment support
- Supports triple redundant key management servers (dual redundant key servers + Local key management)
- Uses pre-apply mode verified at numerous clients
Database access control and encryption linkage
- Provides integrated UI for consistent rule management of database user control

Petra Cipher Configuration Diagram

Plug-In

Installs encryption/decryption libraries in the database server
Encrypts without modifying the application
Maximizes performance using C-based formulas and minimizes PL/SQL logic

API

Installs encryption/decryption libraries in the application server
Provides various APIs such as Java, C, JAVA, and PL/SQL to be compatible with applications and batch processing
Provides encryption for heterogeneous DBMS independent of DBMS

Petra Cipher

Related Legislations & Compliance

Key Features

Safe key generation and management

Strict access control and log management

Perfect linkage with database access control (Petra)

Prevents query of large data decryption

Full encryption and partial encryption in the unit of a column

Dual redundant key management servers and local key management

Strengths

High-performance and high-functioning APIs

Stable deployment support

Database access control and encryption linkage

Petra Cipher Configuration Diagram

Plug-In

API

Deployment Cases