IMPROVING PRIVACY IN EDUCATIONAL DATA: DEVELOPING AN ANONYMIZATION ALGORITHM USING AES/GCM AND MIXING METHODS Improving Privacy in Educational Data: Developing an Anonymization Algorithm Using AES/GCM and Mixing Methods

Published in Bulletin of scientific research results · Issue 3, 2026 · Pages 165–187 · Rubric: GENERAL TECHNICAL PROBLEMS AND SOLUTION APPROACH
DOI: https://doi.org/10.20295/2223-9987-2026-3-165-187
Received: 22.05.2026 Accepted: 08.07.2026 Published: 05.10.2026 Language of publication: ENG
Objective: to analyze existing methods and methods of depersonalization of students’ personal data, as well as to develop algorithms for their depersonalization to ensure information security in educational institutions, taking into account the requirements of Russian legislation. Methods: comparison of existing approaches for depersonalization of personal data. A hybrid algorithm for depersonalizing personal data is proposed, which combines the method of changing the composition or semantics and the mixing method based on modern cryptographic standards. A comprehensive algorithm for depersonalization of personal data has been developed. Results: enabling educational organizations to legally transfer information for statistical analysis, validation of methodologies, software testing, or applied research purposes without violating the rights of data subjects, while reducing the risks of unauthorized access. Practical significance: a comprehensive algorithm for de-identification of personal data intended for use in the infrastructure of educational institutions has been created and experimentally substantiated. This algorithm, based on a combination of semantic structure transformation, mixing of records and the use of up-to-date cryptographic protocols and standards, provides the possibility of legitimate processing of students’ personal data in compliance with regulatory requirements that are enshrined in Russian legislation on information, information security and personal data.
depersonalization of personal data, anonymization, information security, cryptography, AES/GCM, PBKDF2, HMAC, SHA‑256, Base64, mixing method, a method of changing composition or semantics
Text References
Text (PDF)
Read Download

1. O personal'nyh dannyh: federal'nyy zakon ot 27.07.2006 № 152-FZ // Konsul'tantPlyus. URL: https://www.consultant.ru/document/cons_doc_LAW_61801/ (data obrascheniya: 24.03.2026).

2. Ob individual'nom (personificirovannom) uchete v sistemah obyazatel'nogo pensionnogo strahovaniya i obyazatel'nogo social'nogo strahovaniya: federal'nyy zakon ot 01.04.1996 № 27-FZ // Konsul'tantPlyus. URL: https://www.consultant.ru/document/cons_doc_LAW_9839/ (data obrascheniya: 21.03.2026).

3. Voprosy Federal'noy sluzhby bezopasnosti Rossiyskoy Federacii: ukaz Prezidenta Rossiyskoy Federacii ot 11.08.2003 № 960 // Garant. URL: https://base.garant.ru/12132066/ (data obrascheniya: 24.03.2026).

4. Voprosy Federal'noy sluzhby po tehnicheskomu i eksportnomu kontrolyu: ukaz Prezidenta Rossiyskoy Federacii ot 16.08.2004 № 1085 // Konsul'tantPlyus. URL: https://www. consultant.ru/document/cons_doc_LAW_14031/ (data obrascheniya: 24.02.2026).

5. O Federal'noy sluzhbe po nadzoru v sfere svyazi, informacionnyh tehnologiy i massovyh kommunikaciy: postanovlenie Pravitel'stva RF ot 16.03.2009 № 228 // Konsul'tantPlyus: URL: https://www.consultant.ru/document/cons_doc_LAW_85889/ (data obrascheniya: 24.02.2026).

6. Ob utverzhdenii perechnya mer, napravlennyh na obespechenie vypolneniya obyazannostey, predusmotrennyh Federal'nym zakonom «O personal'nyh dannyh» i prinyatymi v sootvestvii s nim normativnymi pravovymi aktami, operatorami, yavlyayuschimisya gosudarstvennymi ili municipal'nymi organami: postanovlenie Pravitel'stva Rossiyskoy Federacii ot 21.03.2012 № 211 // Garant. URL: https://base.garant.ru/70152982/ (data obrascheniya: 24.02.2026).

7. Ob utverzhdenii Polozheniya o pasporte grazhdanina Rossiyskoy Federacii, obrazca i opisaniya blanka pasporta grazhdanina Rossiyskoy Federacii: postanovlenie Pravitel'stva RF ot 23.12.2023 g. № 2267 // Konsul'tantPlyus: URL: https://www.consultant.ru/document/ cons_doc_LAW_466454/ (data obrascheniya: 21.03.2026).

8. Ob utverzhdenii Poryadka i usloviy prisvoeniya, primeneniya, a takzhe izmeneniya identifikacionnogo nomera nalogoplatel'schika: prikaz FNS Rossii ot 29.06.2012 № MMV‑7- 6/435@ // Konsul'tantPlyus. URL: https://www.consultant.ru/document/cons_doc_LAW_134082/ (data obrascheniya: 21.03.2026).

9. Ob utverzhdenii trebovaniy i metodov po obezlichivaniyu personal'nyh dannyh: prikaz Roskomnadzora ot 05.09.2013 № 996 // Konsalting.ru. URL: https://docs.cntd.ru/documen t/499043850?marker=64U0IK (data obrascheniya: 24.02.2026).

10. Metodicheskie rekomendacii Roskomnadzora po primeneniyu prikaza Roskomnadzora ot 5 sentyabrya 2013 goda № 996 «Ob utverzhdenii trebovaniy i metodov po obezlichivaniyu personal'nyh dannyh» (utv. Roskomnadzorom 13.12.2013) // Konsalting.ru. URL: https://docs.cntd. ru/document/420281168 (data obrascheniya: 24.02.2026).

11. Osobennosti predstavleniya strahovatelyami v organy PFR otchetnosti, nachinaya s otchetnosti s I kvartala 2013 goda: informacionnoe soobschenie Pensionnogo fonda Rossiyskoy Federacii ot 21.02.2013 g. // Konsul'tantPlyus. URL: https://www.consultant.ru/document/ cons_doc_LAW_142584/ (data obrascheniya: 21.03.2026).

12. DOC 9303. Mashinoschityvaemye proezdnye dokumenty. Chast' 3. Specifikacii, obschie dlya vseh MSPD (data vvedeniya: 01.01.2015) // ICAO. URL: https://www.icao.int/publications/ Documents/9303_p3_cons_ru.pdf (data obrascheniya: 21.03.2026).

13. GOST R 34.13–2015. Informacionnaya tehnologiya. Kriptograficheskaya zaschita informacii. Rezhimy raboty blochnyh shifrov (data vvedeniya: 01.01.2016) // Zaschita. Gosstandart. URL: https://protect.gost.ru/v.aspx?control=7& id=200971 (data obrascheniya: 14.03.2026).

14. Rekomendacii po standartizacii R 1323565.1.040–2022. Informacionnaya tehnologiya. Kriptograficheskaya zaschita informacii. Parol'naya zaschita klyuchevoy informacii (data vvedeniya: 01.05.2023) // Zaschita. Gosstandart. URL: https://protect.gost.ru/document. aspx?control=7& baseC=101& RegNum=53& DocOnPageCount=500& page=1& id=246142 (data obrascheniya: 14.03.2026).

15. Algoritm klyuchevaniya INN // Keysistems. URL: https://helpbks.keysystems.ru/ro/info/ keyinn (data obrascheniya: 21.03.2026).

16. Anohin K. Simmetrichnyy algoritm blochnogo shifrovaniya Advanced Encryption Standart. URL: https://habr.com/ru/articles/534620/ (data obrascheniya: 14.03.2026).

17. Bartov E. Kak rabotaet AES (Advanced Encryption Standard). Ob'yasnenie dlya gumanitariev tipa menya. URL: https://vc.ru/dev/656195‑kak-rabotaet-aes-advanced-encryption-standard-obyasnenie- dlya-gumanitariev-tipa-menya (data obrascheniya: 14.03.2026).

18. Ivanov D. Peremennye okruzheniya dlya nachinayuschih razrabotchikov, ili Ispol'zovanie .env fayla v razrabotke programmnogo obespecheniya. URL: https://habr.com/ru/companies/ gnivc/articles/792082/ (data obrascheniya: 14.03.2026).

19. Realizaciya algoritma SHA‑256. URL: https://habr.com/ru/articles/729260/ (data obrascheniya: 14.03.2026).

20. Krawczyk H., Eronen P. HMAC-based Extract-and-Expand Key Derivation Function (HKDF) RFC 5869 // Internet Engineering Task Force. 2010. URL: https://datatracker.ietf.org/doc/ html/rfc5869