KORAIL_STORE

[ADMIN] / [API] 

1.config.properties
  1) dev
    #db encryption flag
    db.encrypt.proc=N
  2) prod
    #db encryption flag
    db.encrypt.proc=Y

2.Target DB (table/column)

  - apply DB encrypt/decrypt into target DB

  1) st_order (6 colmns)
    - orderer_phone / receiver_name / receiver_phone / delivery_zipcode / delivery_address / delivery_sub_address
  2) st_order_payment (3 colmns)
    - holder_name / refund_account_number / refund_holder_name
  3) st_user (7 colmns)
    - username / hp / email / zipcode / address / sub_address / company_email
  4) st_withdraw_user (7 colmns)
    - username / hp / email / zipcode / address / sub_address / company_email

3.TO-DO : apply logic (Mapper.xml)

  1) INSERT / UPDATE Target DB (table/column)
    - when INSERT INTO VALUES
    a) if db.encrypt.proc is 'Y'
      - scp.enc_b64('KEY1',{value})
    b) else
      - same as current
  2) SELECT Target DB (table/column)
    - when SELECT 
    a) if db.encrypt.proc is 'Y'
      - scp.dec_b64('KEY1',{encryptValue})
    b) else
      - same as current

[Review Source]

1.properties

  - apply with "KEY1"
  db.encrypt.key=KEY1

2.DB function

  - scp is applied ??

  scp.enc_b64
  scp.dec_b64

3.EncryptSQLInterceptor

  - apply into just target Mapper (or Mapper > sql) to avoid unnecessary process

  1) logic (my idea)
    - define target Mapper (or Mapper > sql) as constant
    - check it

[Test Issue]

EncryptSQLInterceptor

 1) as-is: INSERT/UPDATE/SELECT SQL: you checked if all target SQL has encryptField (findEncryptFields())
 2) to-be: add target mapper check logic to avoid non-related SQL execution

[운영 DB 암호화 테스트]

1.암화화 테스트 DB

• database: korail_store_encrypt

2.테스트 URL

  1) ADMIN

• http://211.188.68.209/admin/

  2) APP

• http://211.188.68.209/

3.기타

• 업로드 파일 복사 안된 관계로 이미지 출력 안되는 것 고려