Method for local desensitization of data

Abstract

The invention discloses a method for local desensitization of data. The method comprises the steps of determining local data needing desensitization according to sensitive data format and significance; determining a desensitization key; performing a Hash message authentication code (HMAC) according to the desensitization key and the local data needing desensitization, and obtaining desensitized data. According to the method, the data format and part of significance are reserved while data protection strength is improved, and data is subject to analysis, statistics and processing easily.

Description

technical field [0001] The invention relates to a data desensitization method, in particular to a partial data desensitization method. Background technique [0002] At present, the mobile business analysis system stores a large amount of data, including a large amount of customer sensitive data. In order to effectively protect the sensitive data of customers, it is necessary to desensitize the data; however, it is often necessary to do some statistics and analysis on user data. How to It is currently a technical problem to meet the needs of analysis and protect data. At present, encryption algorithms are generally used for data protection, and Hash is usually calculated for private data, and then the obtained Hash value is used to replace the original private data for desensitization. For example, the private data is Email address user3@example.com, calculate MD5 for the above email address, get 97d6d9441ff85fdc730e02a6068d267b, replace the email address with the above value...

AI Technical Summary

Problems solved by technology

[0002] At present, the mobile business analysis system stores a large amount of data, including a large amount of customer sensitive data. In order to effectively protect the sensitive data of customers, it is necessary to desensitize the data; however, it is often necessary to do some statistics and analysis on user data. How to It is currently a technical problem to meet the needs of analysis and protect data. At present, encryption algorithms are generally used for data protection, and Hash is usually calculated for private data, and then the obtained Hash value is used to replace the original private data for desensitization. For example, the private data is Email address user3@example.com, calculate MD5 for the above email address, get 97d6d9441ff85fdc730e02a6068d267b, replace the email address with the above value; this method makes the format and meaning of the data completely lost after desensitization, and becomes a string of hexadecimal numbers characters; it is impossible to know that the data is an Email address, which makes it difficult to do analysis and statistics; and the protection strength is not enough. For example, given the MD5 value of a mobile phone number, all mobile phone numbers can be exhausted quickly on the current CPU, so as to find Provide the corresponding mobile phone number; even many websites provide the function of querying the data corresponding to the MD5 value, so the protection strength is not enough

Images