基于泛化FPE加密的民航旅客信息动态脱敏方法研究

随着电子客票和生物特征安检的发展,民航业务系统保存了大量旅客信息,这些信息为“智慧民航”发展奠定了数字基础,但同时也给民航的数据安全保护带来了新的挑战。为解决内部人员恶意或无意泄露旅客信息的情况,文章提出在内部人员访问旅客信息时,采用泛化FPE加密方式对旅客敏感信息进行实时脱敏,在保留旅客信息原始格式特征的基础上,确保旅客信息安全。实验结果表明,该方法可以高效、安全地处理旅客信息查询请求,从而在满足内部人员查询旅客信息的同时,保证旅客信息的安全。

Research on Dynamic Desensitization Method of Civil Aviation Passenger Information Based on Generalized FPE Encryption

With the development of e-tickets and biometric security inspection,the civil aviation business system keeps a large number of passenger information,which has laid a digital foundation for the development of"intelligent civil aviation",but also brought new challenges to the data security protection of civil aviation.In order to solve the situation of malicious or unintentional disclosure of passenger information by insiders,this paper proposed to use generalized FPE encryption to desensitize the sensitive information of passengers in real time,and to ensure the security of passenger information on the basis of preserving the original format features of passengers.The experimental results show that this method can efficiently and safely process the passenger information query request,so as to ensure the passenger information security while the internal personnel query the passenger information.