Sensitive information identification system and sensitive information identification method

Abstract

The invention relates to the field of information security, in particular to an information identification system and an information identification method. The information identification system comprises transaction platforms, a gateway, a payment platform, a secret key management platform, a first FPE (format preserving encryption) encryptor and a second FPE encryptor, wherein each transaction platform is used for acquiring sensitive information and generating and sending a transaction request, the gateway is connected with the transaction platforms and used for providing an access port for the transaction platforms, the payment platform is connected with the gateway and used for achieving payment for the transaction request, the secret key management platform is connected with the payment platform and used for managing and assigning secret key information of the transaction platforms, the first FPE encryptor is connected with the gateway and used for achieving identification of the sensitive information in the transaction request, and the second FPE encryptor is connected with the secret key management platform and used for decrypting the sensitive information subjected to identification. The information identification system centers on the secret key management platform, secret keys are distributed to each transaction platform, and the sensitive information is encrypted by FPE, so that no change on data length during sensitive information transmission is guaranteed, and security of the sensitive information is ensured.

Description

technical field [0001] The present invention relates to the field of information security, in particular to an information marking system and method thereof. Background technique [0002] With the rapid development of computer technology and network technology, the security problem of database information is becoming more and more serious. For example, the leakage of a large amount of sensitive information occurred on the Internet in China at the end of 2011. The fundamental reason is that this information is mostly stored in plain text. security risks. [0003] Especially at present, the popularity of online payment, as the basis of e-commerce, the widespread application of electronic payment has promoted the rapid development of e-commerce, but it has also brought about the leakage of personal sensitive information, especially bank card information, during the entire payment process. . [0004] In practical applications, it is very necessary to encrypt sensitive data suc...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem that the traditional block cipher will expand the data, the length and type of the data change, the present invention takes the key management platform as the center, distributes the key to each trading platform, and uses FPE to encrypt sensitive information at the same time, ensuring Ensure that the data length of sensitive information does not change during transmission, and at the same time ensure the security of sensitive information

Images