Identity-Based Hybrid Format-Preserving Encryption Scheme

The format-preserving encryption has the characteristics of the encrypted data format and the same data length, and does not break the data format constraints, thereby reducing the cost of modifying the data format. The analysis of existing sensitive information format-preserving encryption schemes is based on a symmetric encryption system, which has problems such as low key transmission security and high key management cost. This paper proposes an identity-based format-preserving encryption scheme. Compared with the existing format-preserving encryption scheme, the communication parties do not need to transmit a key, and the encryption key and the decryption key are generated by the key derivation function, and the hybrid encryption is used. The way to improve the security of sensitive information transmission. It is proved that the scheme satisfies the identity-based pseudo-random permutation security, and at the same time, the scheme satisfies the adaptive selection of ciphertext indistinguishability under plaintext attack.