随着电子商务的高速发展,快递信息安全成为快递行业中面临的重要问题.目前,快递行业个人信息存在2种情况:一种是流通的快递单数据信息;另一种是快递数据库存储的数据信息(发布).针对后者的隐私信息泄露问题,提出了面向快递信息的个性化隐私保护方法.首先,在寄件时,客户选择敏感属性的敏感决策值;然后,快递企业根据敏感决策值计算敏感约束值;最后,根据敏感约束值对敏感属性进行概化处理.实验表明,相比于k-匿名方法,实现了个体选择隐私约束的权利,满足了个性化隐私保护需求,能够有效防止一致性攻击.
With the rapid development of e-commerce,express information security has become an important issue.Currently,there are two kinds of personal information in the express industry,one stored in the express sheet,the other stored in the express database.The leakage problem of express database privacy information is discussed in the paper.This paper presents a method of personalized privacy protection for express information.First,in mailing,customers choose sensitive decision value.Then,according to the sensitive decision value express company calculates a sensitive constraint value.Finally,it generalizes the sensitive attribute based on the sensitive constraint values.Compared to the k-anonymous method,experiments here show that the method realizes the right of individuals to determine the privacy constraints,meet the needs of personalized privacy protection and effectively prevents the consistency of attacks.
[1] 中国互联网络信息中心.2015年中国网络购物市场研究报告[EB/OL].(2016-06-22)[2016-06-30] http://www.cnnic.net.cn/hlwfzyj/hlwxzbg/dzswbg/201606/P020160622616579052961.pdf..
[2] 国务院.部署加快发展农村电商促进快递业发展[EB/OL].(2015-10-14)[2015-10-21].http://money.163.com/15/1014/18/B5TJ062H00252G50.html.
[3] 公安部.全面落实寄递物流活动实名登记[EB/OL].(2015-10-22)[2015-10-25].http://news.sina.com.cn/c/nd/2015-10-22/doc-ifxizwsi5513351.shtml..
[4] VIKTOR M S,KENNETH C.Big Data:a revolution that will transform how we live,work,and think[M].Boston:Houghton Mifflin Harcourt,2013.
[5] MAYUR S D,THOMAS C R,KIRAN J D.E-commerce policies and customer privacy[J].Information Management & Computer Security,2003,11(1):19-27.DOI:10.1108/09685220310463696.
[6] MUBARAK A I,ZYNGIER S,HODKINSON C.Privacy by design and customers’ perceived privacy and security concerns in the success of e-commerce[J].Journal of Enterprise Information Management,2013,26(6):702-718.DOI:10.1108/JEIM-07-2013 -0039.
[7] 郝增亮,张燃燃.民营快递服务中消费者信息泄漏风险与防范研究[J].物流技术,2012,31(9):55-63.DOI:10.3969/j.issn.1005-152X.2012.05.018. HAO Z L,ZHANG R R.Study on risk of consumer information disclosure of private express services and its prevetion[J].Logistics Technology,2012,31(9):55-63.DOI:10.3969/j.issn.1005-152X.2012.05.018.
[8] 肖锭.快递行业客户个人信息安全防范研究[J].物流科技,2013,36(5):61-63. XIAO D.Safe guard research on customer information in express industry[J].Logistics Sci-Tech,2013,36(5):61-63.
[9] 钱莹.电子商务背景下快递业的信息泄漏问题及对策探究[J].电子技术,2013,42(7):27-29.DOI:10.3969/j.issn.1000-0755.2013.07.009. QIAN Y.Information disclosure problem and countermeasures in express industry under electronic commerce background[J].Electronic Technology,2013,42(7):27-29.DOI:10.3969/j.issn.1000-0755.2013.07.009.
[10] 韦茜,李星毅.基于K-匿名的快递信息隐私保护应用[J].计算机应用研究,2014,31(2):555-557.DOI:103969/j.issn.1001- 3695.2014.02.056. WEI Q,LI X Y.Express information protection application based on K-anonymity[J].Application Research of Computers,2014,31(2):555-557.DOI:103969 /j.issn.1001-3695.2014.02.056.
[11] 周水庚,李丰,陶宇飞,等.面向数据库应用的隐私保护研究综述[J].计算机学报,2009,32(5):847-861.DOI:10.3724/ SP.J.1016.2009.00847. ZHOU S G,LI F,TAO Y F,et al.Privacy preservation in database applications:a survey[J].Chinese Journal of Computer,2009,32(5):847-861.DOI:10.3724/ SP.J.1016.2009.00847.
[12] 韦茜,王晨,李星毅.基于RSA算法的快递信息隐私保护应用[J].电子技术应用,2014(7):58-60.DOI:10.16157/j.issn.02587998.2014.07.029. WEI Q,WANG C,LI X Y.Express information privacy protection application based on RSA[J].Application of Electronic Tech-nique,2014(7):58-60.DOI:10.16157/j.issn.02587998.2014.07.029.
[13] 严璞.基于手机二维码的物流管理信息系统设计与实现[D].武汉:华中科技大学,2011. YAN P.Design and implementation of a logistics management system based on 2D barcode[D].Wuhan:Huazhong University of Science and Technology,2011.
[14] SWEENEY L.K-anonymity:a model for protecting privacy[J].International Journal of Uncertainty,Fuzziness and Knowledge- Based Systems,2002,10(05):557-570.
[15] 杨晓春,王雅哲,王斌,等.数据发布中面向多敏感属性的隐私保护方法[J].计算机学报,2008,31(4):574-587. YANG X C,WANG Y Z,WANG B.Privacy preserving approaches for multiple sensitive attributes in data publishing[J].Chinese Journal of Computers,2008,31(4):574-587.
[16] 兰丽辉,鞠时光,金华,等.数据发布中的隐私保护研究综述[J].计算机应用研究,2010,27(8):2823-2827.DOI:10.3969/j.issn.1001-3695.2010.08.004. LAN L H,JU S G,JIN H.Survey of study on privacy-preserving data publishing [J].Application Research of Computers,2010,27(8):2823-2827.DOI:10.3969/j.issn.1001-3695.2010.08.004.
[17] 刘明,叶晓俊.个性化K-匿名模型[J].计算机工程与设计,2008,29(2):282-286. LIU M,YE X J.Personalized k-anonymity[J].Computer Engineering and Design,2008,29(2):282-286.
[18] 王平水,王建东.匿名化隐私保护技术研究综述[J].小型微型计算机系统,2011,32(2):248-252. WANG P S,WANG J D.Survey of research on anonymization privacy-preserving techniques [J].Journal of Chinese Computer Systems,2011,32(2):248-252.
