Dynamic data recording system with two step encryption

In today's conditions, various information about thousands of people is accessed every day, both in state institutions and private institutions. This information is easily transferred and processed with the effect of developments in the digital world. Within the scope of the Personal Data Protection Law (KVKK) and information security, it is important to protect data well and to process it only by authorized persons for specific, clear and legitimate purposes. In this context, all institutions and organizations that process personal and sensitive data should take certain precautions. One of the measures that can be taken is to encrypt data. The encryption techniques to be used should be determined by considering the security and performance requirements of the system. While the encryption process increases security, it also reduces the performance of the system. Therefore, when choosing encryption methods, the most secure and fastest technique should be preferred. In this study, a secure, dynamic data recording system has been developed in which encryption is performed twice in succession at different levels. The interaction of the development with the user was provided and information was given about its structure, architecture, algorithms used and the results obtained. The application is set to encrypt twice in succession by default. In the first encryption process, the Advanced Encryption Standard (AES) algorithm, which is one of the symmetric encryption methods, was preferred and the algorithm was realized on the backend. In the second encryption method, the RSA (Rivest-Shamir-Adleman) algorithm, which is one of the asymmetric encryption methods, was preferred and column-level encryption was performed at the database layer. As a result of this operation, it will not be possible to directly read/write on the database. When the attacker wants to read any encrypted data kept in the database, the attacker will not be able to access the clear text. He/she will first need to decode the RSA encryption process done at the database layer, then he/she will need to decrypt the ciphertext performed with the AES algorithm at different level. All of these situations will increase security and make it harder for unauthorized persons to access open data. By means of the developed application, the performance difference between the Electronic Code Book (ECB), Cipher Block Chaining (CBC) and Cipher Feedback (CFB) block models on the AES algorithm was examined, and as a result, the ones with the fastest decryption time were ECB, CFB and CBC, respectively. Among these block models, ECB is the most insecure and CBC is the slowest. Therefore, the CFB model is the best choice among the three block models. When the performance of the data encrypted with AES in one step and encrypted with the RSA algorithm at the database level at the database level in one step is examined, it is observed that RSA reduces the performance more than AES because it uses asymmetric encryption technique.