Role-Based Static Desensitization Protection Method for Privacy Data
Wenting Wang, Jianfei Chen, Tan Hu, Hao Zhang, Hao Yu · 2019
One of the major and serious threats on the Internet today is privacy disclosure. This paper studies the role-based static desensitization method of sensitive data. The method can set different fields and different desensitization methods for different roles to meets different protection requirements. The application submits the database operation request to the server. Then the server will desensitize the operation field value in the request according to the type of the request (INSERT, UPDATE, SELECT) and user's role, and submit the desensitized request to database. Since the database stores the desensitized data, and multiple desensitization functions and desensitization parameters are used in the desensitization process, the malicious destroyer cannot obtain the raw data even if he can access the database.