Identity-based Format Preserving Encryption of Data Desensitization Program

Data masking is the core technology to eliminate privacy sensitive information in finance, power and other industries. FPE (Format Preserving Encryption) is used for data desensitization due to the reason that its ciphertext and plaintext are in the same message space. Both the ciphertext and plaintext have the same format characteristics. Based on the traditional format-preserving encryption desensitization scheme, this paper proposes a general model for the application of identity-based format pre-encryption (IB-FPE) in data desensitization technology. Firstly, the solution preserves the traditional format retention encryption scheme and maintains data integrity efficiently. Secondly, by improving the key generation function, the identity information is associated with the master key, thereby locating and limiting the damage caused by the key exposure to the format retention encryption. Finally, by increasing the processing opinion of segmented data, the efficiency of the format-preserving encryption desensitization scheme is improved and the data desensitization process of the specific example is analyzed, and the security and efficiency of the scheme are analyzed.