What Is Rule Management

Rule Management is a configuration module for the foundational capabilities of a database encryption system, used to configure and manage basic business objects, including:

• Data Domain: In English, it is referred to as "Data Domain" and denotes a single data object; within a data security platform, it refers to a sensitive data object, also known as a sensitive data domain. Examples include names, phone numbers, ID cards, etc.
• Discovery Rule: A sensitive data discovery rule designed for automating the identification of sensitive data. The discovered sensitive data is tagged as a sensitive data domain. This rule assists in configuring encryption or supports automated encryption configuration processes.
• Encryption Key: Used to configure the source and key for encryption. Depending on the security level and use case, either a local key or a KMS service from Huawei Cloud can be used.
• Encryption Rule: An encryption rule is a combination of an encryption algorithm and an encryption mode; for example, the GCM operation mode used with the SM4 algorithm.
• Knowledge Base: In a database encryption system, the knowledge base primarily supports sensitive data discovery rules, enabling these rules to be more accurate, flexible, and easier to adjust according to business requirements.
• Masking Algorithm: Refers to a dynamic data domain Masking Algorithm.
• Data domain encryption: Primarily designed to support the integration of the encryption process with the results of sensitive data discovery, enabling the linkage between sensitive data discovery outcomes and configured encryption rules or keys, thereby facilitating the rapid automation of large-scale encryption process configurations.