• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

Computer Engineering & Science

Previous Articles     Next Articles

A format preserving encryption scheme
for sensitive information
 

ZHANG Yu-lei1,LUO Guang-ping1,ZHANG Yong-jie2,ZHANG Xue-wei1,LIU Xiang-zhen1,WANG Cai-fen3
  

  1. (1.College of Computer Science and Engineering,Northwest Normal University,Lanzhou 730070;
    2.Gansu Health Vocational College,Lanzhou 730000;
    3.Shenzhen Technology University,Shenzhen 518000,China)
     
  • Received:2019-04-28 Revised:2019-08-16 Online:2020-02-25 Published:2020-02-25

Abstract:

Format preserving encryption has the characteristics of unchanged data format and data length after encryption, and does not destroy the data format constraints, thereby reducing the cost of modifying the data format. The existing format preserving encryption schemes for sensitive information are based on the symmetric encryption system, which has problems such as low key transmission security and high key management cost. This paper proposes a format preserving encryption scheme for sensitive information in identity cryptosystems. Compared with the existing format preserving encryption schemes, the two parties do not need to transmit a key, and the key derivation function is used to generate an encryption key and a decryption key. The use of hybrid encryption improves the security of sensitive information transmission. It is proved that the scheme satisfies the security of identity-based pseudo-random permutation. At the same time, the scheme has cipher text indistinguishability under adaptive selective plaintext attack.

 

 

 

Key words: format preserving encryption, sensitive information, identity-based, key derivation, hybrid encryption