Creating a Project

Prerequisite

• To add the required Asset Database for this project to the system, please refer to the Asset Database section for detailed instructions on how to add an Asset Database.
• Identify the fields to be encrypted, the key source, the encryption algorithm, etc.

Procedure

1. Logging In to the Database Encryption System using the system administrator (sysadmin) account.
2. Select Project Management from the left navigation tree.
3. In the top-right corner, click Add Project, as shown in Figure 1.
   Figure 1 Creating a project
   

4. After clicking Add Project, enter the project name, project notes, and Plugin SDK cache in the pop-up window.
5. Click Next, as shown in Figure 2. The parameter descriptions for adding items are listed in Table 1.
   Figure 2 Adding an Item
   

   Table 1 Project parameter specifications

   Parameter	Description
   Project name	Required field: Custom characters. Please enter the actual business system name, e.g., CRM.
   Project Notes	This field is optional; you may enter additional notes or explanatory information for the item.
   Plugin SDK Cache	Used to control whether the plugin caches database metadata. Select: Check this checkbox; when the Application-Plugin is integrated into the business system, it will cache database metadata information, consuming memory resources from the business system. Not selected: If this checkbox is not checked, the plugin (Application-Plugin) will not cache database metadata. This means that SQL statements such as `SELECT * FROM table` cannot be parsed to retrieve column information from the table. If the business system does not execute SQL statements of the form `SELECT * FROM table`, you may leave this option unchecked.

6. Select the available database on the left and add it to the Selected Data Sources list on the right, as shown in Figure 3. Then click Next.
   Figure 3 Selecting the database that needs to be encrypted
   

   When the asset inventory contains a large number of managed databases, two filtering options are provided, as shown in Figure 3.

   • Database type (e.g., select MySQL).
   • Search by data source (Asset Database) name.
   

   • Select a valid database – that is, a database managed within the Asset Database.

   • This database has already been assigned to another project management system and cannot be selected again.

7. Select the required Schema, then click Next, as shown in Figure 4.
   Figure 4 Selecting the schema or database that needs to be encrypted
   

   As shown in Figure 4, the left side displays the asset database (database) selected in the previous step.

   The SCHEMA on the right indicates which schema or database contains the specific table that needs to be encrypted.

8. Select the data fields that need to be identified or encrypted for automatic sensitive data recognition, then add them to the right-hand list, as shown in Figure 5.

   The Data Domain is used for automated discovery of sensitive data, selection of encryption rules, encryption algorithms, etc.; the project must select at least one Data Domain. For example: add an ID card number to the Selected Data Domain.

   Add method:

   1. Add a data field to the project: In the left-hand operation window, click on the data field you wish to add to the project – for example, ID Card.
   2. Add all data fields to the project: In the left-hand operation window, click Select All to add all data fields to the project.

   Removal method:

   1. Reduce data fields in the project: Click the operation window on the right, then select the data field you wish to clear (e.g., ID card).
   2. Clear all data fields from the project: Click the Operation Window icon on the right, then click Clear to remove all data fields.
   Figure 5 Selecting data fields
   

   This feature has two typical uses:

   • It is known which data fields are encrypted (e.g., ID card number, email address), but it is unclear which specific table and field these two types of data are stored in.
   • It is known which data fields are encrypted and which production tables or fields store these data fields; however, the system also contains temporary tables that may contain this sensitive data.

   The Data Field can be used to automate sensitive data discovery.

9. Click Confirm to save the item.