基于改进保留格式加密的民航旅客数据脱敏方法  

The Masking Method of Civil Aviation Passenger Data Based on Improved Format-preserving Encryption

作　　者：顾兆军[1,2] 蔡畅 王明 GU Zhaojun;CAI Chang;WANG Ming(Information Security Evaluation Center,Civil Aviation University of China,Tianjin 300300,China;College of Computer Science and Technology,Civil Aviation University of China,Tianjin 300300,China;TravelSky Technology Limited,Beijing 101318,China)

机构地区：[1]中国民航大学信息安全测评中心,天津300300 [2]中国民航大学计算机科学与技术学院,天津300300 [3]中国民航信息网络股份有限公司,北京101318

出　　处：《信息网络安全》2021年第5期39-47,共9页Netinfo Security

基　　金：国家自然科学基金[61601467,U1533104];民航科技项目[MHRD20140205,MHRD20150233];民航安全能力建设项目[PESA170003,PESA2018079,PESA2018082,PESA2019073,PESA2019074]。

摘　　要：文章提出逆推检验法和瑕疵度指标,以量化和检验脱敏后数据的关联性。同时提出消除基于保留格式加密的数据关联性敏感子段模型,通过计算各个子段之间的关联性并设置阈值消除关联性,筛选合理的脱敏子段。理论分析和实验结果表明,改进后保留格式加密方法脱敏的数据的瑕疵度降低,在有效降低数据泄露风险的同时保证了数据的可用性。In order to quantify and test the correlation of desensitization data,this paper proposes the inverse test method and defect index.A sensitive sub-segment model is proposed to eliminate the data relevance based on format-preserving encryption.By calculating the relevance of each sub-segment and setting a threshold to eliminate the relevance,reasonable sub-segments of desensitization are screened.Theoretical analysis and experimental results show that the improved format-preserving encryption scheme reduces the defect degree of the desensitized data,reduces the risk of data leakage effectively,and maintains the availability of civil aviation passenger data.

关 键 词：数据脱敏 保留格式加密 关联性 瑕疵度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]