A method for encrypting and decrypting user privacy data on an Internet e-commerce platform

Abstract

The invention discloses a method for encrypting privacy data of users on an Internet e-commerce platform, wherein a ciphertext key is encrypted and stored, comprising the following steps: generating a vector iv according to incoming original user data; The key is decrypted into a plaintext ciphertext key; through the plaintext ciphertext key and vector iv, the original user data byte stream is encrypted with the AES256 / CFB8 / NOPADDING algorithm to obtain the first encrypted string; base64 encoding to obtain the second encrypted string; concatenate E-, iv, and the second encrypted string in sequence to obtain the third encrypted string, and store the third encrypted string as encrypted data in the database. The invention encrypts the user privacy data, prevents leakage of the user privacy data information of the database system and improves processing efficiency.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for encrypting and decrypting user privacy data of an Internet e-commerce platform. Background technique [0002] In the process of providing services on the Internet e-commerce platform, a large number of private information such as names, ID cards and phone numbers of users are involved, and most of the private information of users is often stored in the database in plain text. Encrypted storage of user privacy data has become an important means to protect user privacy data from being leaked. At the same time, the newly promulgated network security law and the new regulations on information security level protection clearly require that users' private data be encrypted and stored. [0003] Currently, data encryption and storage methods include (1) purchasing hardware-level encryption equipment for deployment; (2) deploying software-level encryption methods. Existi...

AI Technical Summary

Problems solved by technology

This method of extending the database access method is relatively simple and feasible for open source databases, but for commercial databases, it needs to be supported by the manufacturer's code, and it is difficult to upgrade and maintain

In addition, since the key for encryption / decryption is arranged on the database side or locally, the data is stored encrypted when stored in the database and when the data is extracted to decrypt the data to be returned to the user, there is a risk that the software-level encryption method is from the outside Information leakage caused by intrusion into the database system, improper behavior of the database administrator, or operation error

Moreover, identity authentication and access control functions generally adopt simple encryption mechanisms such as password authentication or primary encryption; encrypted keys are generally stored locally or in databases, and are easy to be obtained or illegally operated by authorized users; keys are held by services And perform encryption and decryption operations, does not support encrypted data sharing, and service expansion is not flexible

Images