Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ System Administrator Operation Guide/ Data Integrity Check/ Integrity Check Configuration
Updated on 2026-09-24 GMT+08:00
View PDF
Share

Integrity Check Configuration

To comply with data security and compliance management requirements, it is necessary to validate data integrity to prevent intentional or accidental tampering with data in the database.

Procedure

  1. Logging In to the Database Encryption System using the system administrator (sysadmin) account .
  2. Select Project Management from the left navigation tree.
  3. Select the item for which you need to configure integrity checks; hover your mouse over the item, and the relevant buttons will appear on the item card. Click Enter to access the item.
  4. In the left navigation tree, select Encryption Settings > Integrity Check Settings.
  5. Select the table that needs to be validated, then click the Data Structure tab, as shown in Figure 1.

    Figure 1 Integrity check configuration
    • Generate a digest: Generate a digest for the data column using SM3 HMAC.
    • Reset Digest: Remove the digest setting from a column that already has a digest configured.
    • Data integrity check: Perform an integrity check on the data in the current table.
    • Cache Metadata: This is a security control measure for cloud-based products, designed to cache metadata from the asset database to prevent certain spoofing attacks; it is generally not deployed.

Generating a Digest

  1. Select the columns for which you want to generate summaries, then click Generate Digest; the system will automatically generate summaries for the selected columns, as shown in Figure 2.

    Figure 2 Integrity check configuration

  2. The result after generating the digest is shown in Figure 3.

    Figure 3 After generating the digest

    The chart generates digest information for the `contract` and `phone` columns and saves it to the `contract__` and `phone__` columns, respectively. These two columns with an underline are automatically generated by the system.

    You can view the relevant digest information using SQL tools.

Resetting the Summary

Unset the digest setting for a column that already has a digest assigned, and then delete the summary column.

Click Reset Digest. The summary column (a column with an underlined "_" automatically generated by the system after the original column) will be deleted, as shown in Figure 4.

After resetting the digest, the digest column is automatically deleted and restored to its initial state.

Figure 4 Resetting the digest

Performing a Data Integrity Check

  1. When you need to perform data integrity validation on the current table, click Data Integrity Check; the system will then validate the data integrity.
  2. If an integrity issue is detected, the system will report a failed integrity check.
  3. If the verification is successful (indicating that no data has been tampered with), the system will display the message "Verification successful."

Caching Metadata

This is a security control measure for cloud-based products, designed to cache the metadata of the Asset Database and prevent certain spoofing attacks.

About the Digtest

A data integrity digest generated using the SM3 national cryptographic hash algorithm. It enables rapid comparison and verification to determine whether data has been tampered with or lost. Built upon domestic cryptographic standards, this digest offers secure, compliant, and manageable security – serving as a rapid proof of data integrity and trustworthiness, and meeting industry compliance requirements such as the Cybersecurity Protection Level (CPL) and Cryptographic Security Assessment frameworks.

  • Generate Digest: Create a digest column based on the selected column data, and integrate the data from the verification column into this digest column for encrypted storage.
  • Data integrity check: Click this button to see a system prompt indicating whether the integrity check column for this table has been intentionally or unintentionally tampered with.
  • Reset Digest: The Reset Digest will delete the checksum column and revert the system to a state without any digest data.
  • Click Data Integrity Check – the system will automatically perform the check.
  • The system will perform a comprehensive data audit to identify and verify that all data originates from the business system and has not been subject to unauthorized modification.
  • If the data is complete and unaltered, the validation will be successfully passed.
  • If any data that was not generated by the system or has been altered is detected, the validation will be deemed failed, and the user will be prompted to take appropriate action.
  • Ensure that all data is correctly encrypted and securely stored before performing data integrity checks.
  • Regular data integrity checks help promptly identify potential data security risks, ensuring the continuity of business processes and the reliability of data.
Parent Topic: Data Integrity Check