Java实现加密传输与匿名化的实战指南

import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;
import java.security.Key;
import java.util.Base64;

public class AESEncryption {
    // 密钥长度必须为 16/24/32 字节
    private static final String AES_ALGORITHM = "AES";
    private static final String AES_MODE = "AES/ECB/PKCS5Padding";

    /**
     * 加密方法
     * @param data 明文数据（如JSON格式的交通记录）
     * @param key 密钥（16字节）
     * @return Base64编码的密文
     */
    public static String encrypt(String data, String key) throws Exception {
        Key secretKey = new SecretKeySpec(key.getBytes(), AES_ALGORITHM);
        Cipher cipher = Cipher.getInstance(AES_MODE);
        cipher.init(Cipher.ENCRYPT_MODE, secretKey);
        byte[] encryptedBytes = cipher.doFinal(data.getBytes());
        return Base64.getEncoder().encodeToString(encryptedBytes);
    }

    /**
     * 解密方法
     * @param encryptedData Base64编码的密文
     * @param key 密钥（需与加密时一致）
     * @return 明文数据
     */
    public static String decrypt(String encryptedData, String key) throws Exception {
        Key secretKey = new SecretKeySpec(key.getBytes(), AES_ALGORITHM);
        Cipher cipher = Cipher.getInstance(AES_MODE);
        cipher.init(Cipher.DECRYPT_MODE, secretKey);
        byte[] decryptedBytes = cipher.doFinal(Base64.getDecoder().decode(encryptedData));
        return new String(decryptedBytes);
    }

    // 测试用例
    public static void main(String[] args) throws Exception {
        String sensitiveData = "{\"plate\": \"粤A12345\", \"location\": {\"lat\": 23.1234, \"lng\": 113.5678}, \"time\": \"2024-03-20T08:30:00\"}";
        String secretKey = "1234567890123456"; // 16字节密钥

        String encrypted = encrypt(sensitiveData, secretKey);
        System.out.println("加密后: " + encrypted);

        String decrypted = decrypt(encrypted, secretKey);
        System.out.println("解密后: " + decrypted);
    }
}

import javax.crypto.Cipher;
import java.security.*;
import java.security.spec.PKCS8EncodedKeySpec;
import java.security.spec.X509EncodedKeySpec;
import java.util.Base64;

public class RSAEncryption {
    private static final String RSA_ALGORITHM = "RSA";

    /**
     * 生成RSA密钥对
     */
    public static KeyPair generateKeyPair() throws Exception {
        KeyPairGenerator keyGen = KeyPairGenerator.getInstance(RSA_ALGORITHM);
        keyGen.initialize(2048); // 密钥长度
        return keyGen.generateKeyPair();
    }

    /**
     * 公钥加密
     * @param data 待加密的AES密钥
     * @param publicKey 公钥
     * @return Base64编码的密文
     */
    public static String encryptWithPublicKey(String data, PublicKey publicKey) throws Exception {
        Cipher cipher = Cipher.getInstance(RSA_ALGORITHM);
        cipher.init(Cipher.ENCRYPT_MODE, publicKey);
        return Base64.getEncoder().encodeToString(cipher.doFinal(data.getBytes()));
    }

    /**
     * 私钥解密
     * @param encryptedData Base64编码的密文
     * @param privateKey 私钥
     * @return 明文AES密钥
     */
    public static String decryptWithPrivateKey(String encryptedData, PrivateKey privateKey) throws Exception {
        Cipher cipher = Cipher.getInstance(RSA_ALGORITHM);
        cipher.init(Cipher.DECRYPT_MODE, privateKey);
        return new String(cipher.doFinal(Base64.getDecoder().decode(encryptedData)));
    }

    // 测试用例
    public static void main(String[] args) throws Exception {
        KeyPair keyPair = generateKeyPair();
        String aesKey = "1234567890123456"; // 假设这是AES密钥

        String encryptedAesKey = encryptWithPublicKey(aesKey, keyPair.getPublic());
        System.out.println("RSA加密后的AES密钥: " + encryptedAesKey);

        String decryptedAesKey = decryptWithPrivateKey(encryptedAesKey, keyPair.getPrivate());
        System.out.println("RSA解密后的AES密钥: " + decryptedAesKey);
    }
}

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.time.LocalDateTime;
import java.time.format.DateTimeFormatter;
import java.util.Random;

public class DataAnonymizer {
    /**
     * 哈希车牌号（SHA-256）
     * @param plate 车牌号
     * @return 哈希值（16进制前8位）
     */
    public static String anonymizePlate(String plate) {
        try {
            MessageDigest digest = MessageDigest.getInstance("SHA-256");
            byte[] hashBytes = digest.digest(plate.getBytes());
            StringBuilder hex = new StringBuilder();
            for (byte b : hashBytes) {
                hex.append(String.format("%02x", b));
            }
            return hex.toString().substring(0, 8); // 取前8位
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException("SHA-256 not supported", e);
        }
    }

    /**
     * 模糊时间戳到15分钟粒度
     * @param timestamp 原始时间（ISO 8601格式）
     * @return 模糊后的时间
     */
    public static String anonymizeTimestamp(String timestamp) {
        LocalDateTime dateTime = LocalDateTime.parse(timestamp);
        int minutes = dateTime.getMinute();
        // 将分钟数向下取整到最近的15的倍数
        int roundedMinutes = (minutes / 15) * 15;
        return dateTime.withMinute(roundedMinutes).format(DateTimeFormatter.ISO_LOCAL_DATE_TIME);
    }

    /**
     * 扰动坐标（±500米）
     * @param lat 原始纬度
     * @param lng 原始经度
     * @return 扰动后的坐标（保留4位小数）
     */
    public static String[] anonymizeLocation(double lat, double lng) {
        Random random = new Random();
        double deltaLat = random.nextDouble() * 0.0005 - 0.00025; // ±0.00025° ≈ 28米
        double deltaLng = random.nextDouble() * 0.0005 - 0.00025;
        return new String[]{
            String.format("%.4f", lat + deltaLat),
            String.format("%.4f", lng + deltaLng)
        };
    }

    // 测试用例
    public static void main(String[] args) {
        String plate = "粤A12345";
        String timestamp = "2024-03-20T08:30:00";
        double lat = 23.1234, lng = 113.5678;

        System.out.println("原始车牌: " + plate);
        System.out.println("匿名化后: " + anonymizePlate(plate));

        System.out.println("原始时间: " + timestamp);
        System.out.println("匿名化后: " + anonymizeTimestamp(timestamp));

        String[] location = anonymizeLocation(lat, lng);
        System.out.printf("原始坐标: %.4f, %.4f%n", lat, lng);
        System.out.printf("匿名化后: %s, %s%n", location[0], location[1]);
    }
}

[原始数据]
   ↓ 加密
[加密数据] 
   ↓ HTTPS传输
[服务端接收]
   ↓ 解密
[解密数据]
   ↓ 匿名化处理
[匿名数据]
   ↓ 存储/分析

import java.io.FileWriter;
import java.io.IOException;
import java.time.LocalDateTime;

public class AuditLogger {
    private static final String LOG_FILE = "security_audit.log";

    /**
     * 记录操作日志
     * @param action 操作类型（加密/解密/匿名化）
     * @param status 状态（成功/失败）
     * @param detail 附加信息
     */
    public static void log(String action, String status, String detail) {
        try (FileWriter writer = new FileWriter(LOG_FILE, true)) {
            String timestamp = LocalDateTime.now().format(DateTimeFormatter.ISO_LOCAL_DATE_TIME);
            String logEntry = String.format("[%s] [ACTION=%s] [STATUS=%s] %s%n",
                    timestamp, action, status, detail);
            writer.write(logEntry);
        } catch (IOException e) {
            System.err.println("日志记录失败: " + e.getMessage());
        }
    }

    // 示例调用
    public static void main(String[] args) {
        log("ENCRYPT", "SUCCESS", "AES加密完成，密文长度: 128");
        log("ANONYMIZE", "WARNING", "车牌号哈希冲突，已重新计算");
    }
}

// 伪代码示意
HomomorphicEncryptedData encryptedData = encryptWithHomomorphic(data);
AnalysisResult result = performAnalysis(encryptedData); // 密文分析
String clearResult = decrypt(result); // 最终结果解密

// 伪代码示意
Blockchain.blockchain.add(
    new AuditEvent(
        "2024-03-20T09:00:00",
        "admin",
        "ANONYMIZE",
        "成功匿名化10万条交通数据"
    )
);