Iyini i-Data Masking Technology nesixazululo ku-Network Packet Broker?

1. Umqondo wokufihla idatha

Ukufihla idatha kubuye kwaziwe ngokuthi imaski yedatha.Kuyindlela yobuchwepheshe yokuguqula, ukuguqula noma ukumboza idatha ebucayi njengenombolo yocingo lukamakhalekhukhwini, inombolo yekhadi lasebhange nolunye ulwazi lapho sinikeze imithetho nezinqubomgomo zokufihla ubuso.Le nqubo isetshenziswa ngokuyinhloko ukuvimbela idatha ebucayi ukuthi isetshenziswe ngokuqondile ezindaweni ezingathembekile.

Umgomo Wokufihla Idatha: Ukufihlwa kwedatha kufanele kugcine izici zedatha zangempela, imithetho yebhizinisi, nokuhambisana kwedatha ukuze kuqinisekiswe ukuthi ukuthuthukiswa okulandelayo, ukuhlola, nokuhlaziywa kwedatha ngeke kuthikamezeke ngokufihla.Qinisekisa ukuvumelana kwedatha nokuba semthethweni ngaphambi nangemva kokufihla ubuso.

2. Ukuhlukaniswa Kwedatha

Ukufihla idatha kungahlukaniswa kube ukufihla idatha okumile (SDM) kanye ne-dynamic data masking (DDM).

Imaski yedatha emile (SDM): Ukufihlwa kwedatha okuqinile kudinga ukusungulwa kwesizindalwazi esisha semvelo esingakhiqizi ukuze sihlukaniswe nemvelo yokukhiqiza.Idatha ebucayi ikhishwa kusizindalwazi sokukhiqiza bese igcinwa kusizindalwazi esingakhiqizi.Ngale ndlela, idatha esuswe ukuzwela ihlukaniswa endaweni yokukhiqiza, ehlangabezana nezidingo zebhizinisi futhi iqinisekisa ukuvikeleka kwedatha yokukhiqiza.

I-SDM

Ukufihla idatha yeDynamic (DDM): Ivamise ukusetshenziswa endaweni yokukhiqiza ukuze kuthuntubeze idatha ebucayi ngesikhathi sangempela.Kwesinye isikhathi, amazinga ahlukene okufihla ayadingeka ukuze kufundwe idatha efanayo ebucayi ezimeni ezahlukene.Isibonelo, izindima ezihlukene nezimvume zingasebenzisa izikimu zokufihla ubuso ezihlukene.

I-DDM

Uhlelo lokusebenza lokufihla idatha nemikhiqizo yedatha

Izimo ezinjalo ikakhulukazi zihlanganisa imikhiqizo yangaphakathi yokuqapha idatha noma ibhodi lokukhangisa, imikhiqizo yedatha yesevisi yangaphandle, nemibiko esekelwe ekuhlaziyweni kwedatha, njengemibiko yebhizinisi nokubuyekezwa kwephrojekthi.

ukufihla idatha yomkhiqizo

3. Data Mask Solution

Izikimu ezijwayelekile zokufihla idatha zifaka: ukungavumeleki, inani elingahleliwe, ukushintshwa kwedatha, ukubethela kwe-symmetric, inani elimaphakathi, i-offset ne-rounding, njll.

Ukungavumelekile: Ukungavumelekile kubhekisela ekubetheleni, ekunqanyulweni, noma ekufihlweni kwedatha ebucayi.Lolu hlelo luvamise ukufaka esikhundleni sedatha yangempela ngezimpawu ezikhethekile (ezifana *).Ukusebenza kulula, kodwa abasebenzisi abakwazi ukwazi ifomethi yedatha yoqobo, okungase kuthinte izinhlelo zokusebenza zedatha ezilandelayo.

Inani elingahleliwe: Inani elingahleliwe libhekisela ekushintshweni okungahleliwe kwedatha ebucayi (izinombolo zishintsha amadijithi, izinhlamvu zibuyisela izinhlamvu, nezinhlamvu esikhundleni sezinhlamvu).Le ndlela yokufihla izoqinisekisa ifomethi yedatha ebucayi ngokwezinga elithile futhi yenze kube lula ukusetshenziswa kwedatha okulandelayo.Ukufihla izichazamazwi kungase kudingeke ukuze uthole amagama anengqondo, njengamagama abantu nezindawo.

Ukushintshwa Kwedatha: Ukushintshwa kwedatha kufana nokuvalwa kwamanani angenalutho nangahleliwe, ngaphandle kokuthi esikhundleni sokusebenzisa izinhlamvu ezikhethekile noma amanani angahleliwe, idatha yokufihla ithathelwa indawo ivelu ethile.

Ukubethela kwe-Symmetric: Ukubethela kwe-Symmetric kuyindlela ekhethekile yokufihla ubuso ebuyiseleka emuva.Ibhala ngemfihlo idatha ebucayi ngokhiye bokubethela nama-algorithms.Ifomethi ye-ciphertext ihambisana nedatha yangempela emithethweni enengqondo.

Isilinganiso: Isikimu esimaphakathi sivamise ukusetshenziswa ezimeni zezibalo.Ngedatha yezinombolo, siqala sibala isilinganiso sazo, bese sisabalalisa ngokungahleliwe amanani angazweli eduze nencazelo, ngaleyo ndlela sigcine isamba sedatha singashintshi.

I-Offset kanye ne-Rounding: Le ndlela ishintsha idatha yedijithali ngokushintsha okungahleliwe.Ukufinyezwa kwe-offset kuqinisekisa ukulinganiselwa kobuqiniso bobubanzi kuyilapho kugcinwa ukuvikeleka kwedatha, okuseduze nedatha yangempela kunezinhlelo zangaphambilini, futhi kunokubaluleka okukhulu esimweni sokuhlaziywa kwedatha enkulu.

I-ML-NPB-5660-数据脱敏

Imodeli Enconyiwe "I-ML-NPB-5660"ye-Data Masking

4. Amasu Okufihla Idatha Asetshenziswa Kaningi

(1).Amasu Ezibalo

Ukusampula kwedatha nokuhlanganiswa kwedatha

- Ukusampula kwedatha: Ukuhlaziywa nokuhlolwa kwedatha yoqobo esethwe ngokukhetha iqoqo elincane elimele isethi yedatha kuyindlela ebalulekile yokuthuthukisa ukusebenza kahle kwamasu okususa ukuhlonza.

- Ukuhlanganiswa kwedatha: Njengeqoqo lamasu ezibalo (afana nokufinyeza, ukubala, isilinganiso, ubuningi kanye nobuncane) asetshenziswa kuzibaluli ze-microdata, umphumela umelela wonke amarekhodi kusethi yedatha yasekuqaleni.

(2).I-Cryptography

I-Cryptography iyindlela evamile yokuqeda ukungezwani noma ukuthuthukisa ukusebenza kahle kokususa ukuzwela.Izinhlobo ezahlukahlukene zama-algorithms wokubethela zingafinyelela imiphumela ehlukile yokususa ukuzwela.

- Ukubethela okunqunyiwe: Ukubethela okungahleliwe kwe-symmetric.Ngokuvamile icubungula idatha ye-ID futhi ingasusa ukubethela futhi ibuyisele umbhalo we-ciphertext ku-ID yasekuqaleni uma kudingeka, kodwa ukhiye udinga ukuvikelwa ngendlela efanele.

- Umbhalo oyimfihlo ongenakuhlehliswa: Umsebenzi we-hashi usetshenziselwa ukucubungula idatha, ngokuvamile esetshenziselwa idatha ye-ID.Angeke kususwe ukubethela ngokuqondile futhi ubudlelwano bemephu kufanele bulondolozwe.Ngaphezu kwalokho, ngenxa yesici somsebenzi we-hashi, ukushayisana kwedatha kungenzeka.

- Ukubethela kwe-Homomorphic: Kusetshenziswa i-algorithm ye-ciphertext homomorphic.Isici sayo siwukuthi umphumela wokusebenza kwe-ciphertext uyafana nalowo wokusebenza kwemibhalo engenalutho ngemva kokuchithwa kwekhodi.Ngakho-ke, ngokuvamile isetshenziselwa ukucubungula izinkambu zezinombolo, kodwa ayisetshenziselwa kakhulu izizathu zokusebenza.

(3).Ubuchwepheshe Besistimu

Ubuchwepheshe bokucindezela bususa noma buvikele izinto zedatha ezingahlangabezani nokuvikelwa kobumfihlo, kodwa obungazishicileli.

- Ukufihla ubuso: kubhekisela endleleni evame kakhulu yokususa ukungezwani komzimba ukuze kufihlwe inani lemfanelo, njengenombolo yesitha, ikhadi le-ID limakwe ngenkanyezi, noma ikheli lincishisiwe.

- Ukucindezelwa kwendawo: kusho inqubo yokususa amanani ezibaluli ezithile (amakholomu), kususwa izinkundla zedatha ezingabalulekile;

- Ukucindezelwa kwamarekhodi: kubhekisela kwinqubo yokususa amarekhodi athile (imigqa), ukususa amarekhodi edatha angabalulekile.

(4).I-Pseudonym Technology

I-pseudomanning iwuhlelo lokungahlonzi olusebenzisa igama-mbumbulu ukuze limiselele isihlonzi esiqondile (noma esinye isihlonzi esibucayi).Izindlela zamagama mbumbulu zidala izihlonzi ezihlukile zesihloko ngasinye solwazi, esikhundleni sezihlonzi eziqondile noma ezibucayi.

- Ingakwazi ukukhiqiza amanani angahleliwe ngokuzimela ukuze ahambisane ne-ID yokuqala, igcine ithebula lemephu, futhi ilawule ngokuqinile ukufinyelela kuthebula lemephu.

- Ungasebenzisa futhi ukubethela ukuze ukhiqize amagama angelona iqiniso, kodwa udinga ukugcina ukhiye wokubhala ngendlela efanele;

Lobu buchwepheshe busetshenziswa kabanzi endabeni yenani elikhulu labasebenzisi bedatha abazimele, njenge-OpenID esimeni seplathifomu evulekile, lapho onjiniyela abahlukene bethola ama-Openids ahlukile kumsebenzisi ofanayo.

(5).Amasu Okujwayelekile

Indlela yokwenza okuvamile isho indlela yokungahlonzi eyehlisa ubumbudumbudu bezibaluli ezikhethiwe kusethi yedatha futhi inikeze incazelo evamile nengacacile yedatha.Ubuchwepheshe obujwayelekile busebenziseka kalula futhi bungavikela ubuqiniso bedatha yezinga lerekhodi.Ivamise ukusetshenziswa emikhiqizweni yedatha noma emibikweni yedatha.

- Ukuzungezisa: kuhlanganisa ukukhetha isisekelo sokuzungeza sesibaluli esikhethiwe, njenge-forensics eya phezulu noma eya phansi, ukuveza imiphumela 100, 500, 1K, kanye no-10K

- Amasu okubhala amakhodi aphezulu naphansi: Faka esikhundleni amanani ngenhla (noma ngezansi) i-threshold nge-threshold emelela ileveli ephezulu (noma ephansi), okuletha umphumela "ngaphezulu kuka-X" noma "ngezansi kuka-X"

(6).Amasu Okungahleliwe

Njengohlobo lwesu lokungahlonzi, ubuchwepheshe be-randomization bubhekisela ekuguquleni inani lesibaluli ngokwenza okungahleliwe, ukuze inani ngemva kokungahleliwe lihluke kunani langempela langempela.Le nqubo inciphisa ikhono lomhlaseli lokuthola inani lesibaluli kwamanye amanani esibaluli kurekhodi elifanayo ledatha, kodwa ithinta ubuqiniso bedatha ewumphumela, ovamile ngedatha yokuhlola yokukhiqiza.


Isikhathi sokuthumela: Sep-27-2022