保留格式加密技术在民航信息系统数据处理中的应用研究
|
摘要
采用保留格式加密技术加密航班信息、旅客信息、客票信息等民航信息系统数据,选取简单、有效的FF1算法和FF3算法以及更为灵活的混合格式加密算法IFX,采取高位偏移、变长格式、数值间接映射、以数据库的id号为随机因子等策略优化扩展算法功能。在保证信息安全性、完整性和真实性的同时,保留民航信息系统数据的内在格式,支持在不解密数据的条件下实现对数据的统计分析,降低数据泄露的风险。
The usage of format-preserving encryption technology in the encryption of flight information,passenger information and ticket information was studied by choosing simple and effective algorithms such as FF1 algorithm,FF3 algorithm and a more flexible hybrid format encryption algorithm IFX.The functions of high bit offset,forward expansion,numerical indirect mapping,and using ID of database as random factors are used to optimize the function of the extended algorithm.While ensuring security,integrity and authenticity of the information,the internal format of flight data is kept,and the statistical analysis of civil aviation information is implemented without decryption,so as to reduce the risk of data leakage.
The usage of format-preserving encryption technology in the encryption of flight information,passenger information and ticket information was studied by choosing simple and effective algorithms such as FF1 algorithm,FF3 algorithm and a more flexible hybrid format encryption algorithm IFX.The functions of high bit offset,forward expansion,numerical indirect mapping,and using ID of database as random factors are used to optimize the function of the extended algorithm.While ensuring security,integrity and authenticity of the information,the internal format of flight data is kept,and the statistical analysis of civil aviation information is implemented without decryption,so as to reduce the risk of data leakage.
引文
[1] 么轶堃.浅谈民航电子商务及其信息安全[J].民航经济与技术,2000(6):60-62.
[2] PCI Security Standards Council.Payment Card Industry Data Security Standard[S].2006.
[3] 刘哲理,贾春福,李经纬.保留格式加密模型研究[J].通信学报,2011,32(6):184-190.
[4] DWORKIN M.NIST Special Publication 800-38G,Recommen- dation for Block Cipher Modes of Operation:Methods for Format-Preserving Encryption[OL].https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38G.pdf.
[5] BELLARE M,RISTENPART T,ROGAWAY P.Format-Pre- serving encryption[C]//Proc.of the Selected Areas in Cryptography (SAC 2009).LNCS 5867,Calgary:Springer-Verlag,2009:295-312.
[6] BLACK J,ROGAWAY P.Ciphers with arbitrary finite domains[C]//Proc.of the Topics in Cryptology-CT-RSA 2002.LNCS 2271,San Jose:Springer-Verlag,2002:114-130.
[7] HOANG V T,ROGAWAY P.On generalized Feistel networks [C]//Advances in Cryptology-CRYPTO 2010.LNCS 6223,Santa Barbara:Springer-Verlag,2010:613-630.
[8] 王鹏.多类型数据保留格式加密技术的研究与实现[D].北京:北京邮电大学,2017.
[9] 刘华宁.一类伪随机二进制数列的碰撞与雪崩效应[J].数学学报,2013,56(6):907-914.
[10] LIU Z L,JIA C F,LI J W,et al.Format-Preserving encryption for datetime[C]//Proc.of the Intelligent Computing and Intelligent Systems 2010.Xiamen:IEEE Press,2010:201-205.
[11] SCHROEPPEL R.Hasty Pudding Cipher specification [OL].http://richard.schroeppel.name:8015/hpc/hpc-spec.
[12] LISKOV M,RIVEST R,WAGNER D.Tweakable block ciphers[C]//Advances in Cryptology—CRYPTO2002,Lecture Notes in Computer Science 2442.Berlin:Springer,2002:31-46.
[13] 姚远.信息系统数据遮蔽实现方式[J].软件导刊,2014,13(5):156-158.
[2] PCI Security Standards Council.Payment Card Industry Data Security Standard[S].2006.
[3] 刘哲理,贾春福,李经纬.保留格式加密模型研究[J].通信学报,2011,32(6):184-190.
[4] DWORKIN M.NIST Special Publication 800-38G,Recommen- dation for Block Cipher Modes of Operation:Methods for Format-Preserving Encryption[OL].https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38G.pdf.
[5] BELLARE M,RISTENPART T,ROGAWAY P.Format-Pre- serving encryption[C]//Proc.of the Selected Areas in Cryptography (SAC 2009).LNCS 5867,Calgary:Springer-Verlag,2009:295-312.
[6] BLACK J,ROGAWAY P.Ciphers with arbitrary finite domains[C]//Proc.of the Topics in Cryptology-CT-RSA 2002.LNCS 2271,San Jose:Springer-Verlag,2002:114-130.
[7] HOANG V T,ROGAWAY P.On generalized Feistel networks [C]//Advances in Cryptology-CRYPTO 2010.LNCS 6223,Santa Barbara:Springer-Verlag,2010:613-630.
[8] 王鹏.多类型数据保留格式加密技术的研究与实现[D].北京:北京邮电大学,2017.
[9] 刘华宁.一类伪随机二进制数列的碰撞与雪崩效应[J].数学学报,2013,56(6):907-914.
[10] LIU Z L,JIA C F,LI J W,et al.Format-Preserving encryption for datetime[C]//Proc.of the Intelligent Computing and Intelligent Systems 2010.Xiamen:IEEE Press,2010:201-205.
[11] SCHROEPPEL R.Hasty Pudding Cipher specification [OL].http://richard.schroeppel.name:8015/hpc/hpc-spec.
[12] LISKOV M,RIVEST R,WAGNER D.Tweakable block ciphers[C]//Advances in Cryptology—CRYPTO2002,Lecture Notes in Computer Science 2442.Berlin:Springer,2002:31-46.
[13] 姚远.信息系统数据遮蔽实现方式[J].软件导刊,2014,13(5):156-158.