LGPD Compliance: A security persistence data layer

• Paulo E. B. Pitta CEFET-RJ
• Elder Costa CEFET-RJ
• João P. L. de Siqueira CEFET-RJ
• Nilson M. Lazarin CEFET-RJ

DOI: https://doi.org/10.5753/errc.2020.15200

Abstract

Recent data protection laws define rules for the treatment of personal information of Internet users and oblige technology companies to implement security techniques in new or pre-existing information systems. Through an integrity breach algorithm, this article addresses possible techniques for converting a clear database to a ciphered database in order to provide greater protection to databases and lower the design costs to comply with such adaptations. At the end of the experiments, it was also possible to notice a brief improvement in performance in relation to other approaches, since it uses access to volatile memory.

References

Deshpane, A., Patil, A., Joshi, S., and Botara, S. (2012). DBCrypto: A Database Encryption System using Query Level Approach. International Journal of Computer Applications. Vomue 45 - N 08.

Dias, J. M. F., de Cássia M. C. Rodrigues, R., and Pires, D. F. (2012). A Segurança de Dados na Computação em Nuvens nas Pequenas e Médias Empresas. RESIGeT Revista Eletrônica de Sistemas de Informação e Gestão Tecnológica. Vol. 02, Mr. 1.

Lorey, K., Buchann, E., and Böhm, K. (2016). TEAL: Transparent Encryption for the Database Abstraction Layer. Fórum CAiSE16 na 28 Conferência Internacional de Engenharia de Sistemas de Informação, Ljubljana, Eslovênia.

Rapôso, C. F. L., de Lima, H. M., de Oliveira Junior, W. F., Silva, P. A. F., and de Souza Barros, E. E. (2019). Lgpd-lei geral de proteção de dados pessoais em tecnologia da informação: Revisão sistemática. RACE-Revista da Administração, 4:58–67.

Rijmen, V. and Daemen, J. (2001). Advanced encryption standard. Proceedings of Federal Information Processing Standards Publications, National Institute of Standards and Technology, pages 19–22.