Abstract:CryptDB is a typical cloud ciphertext database,which acts as an intermediate by an intermediary agent,allowing users to issue plaintext semantic query requests on the frontend,and the backend directly performed query processing on encrypted data.Aiming at the problem of plain text storage key and unauthenticated user identity of CryptDB system proxy server,a scheme of encrypting key information using user password is proposed,which realizes the purpose of enhanced key management security and agent indirect authentication of user identity.The experiments prove the safety and effectiveness of the proposed scheme.