JP2015207205A - data management system, data management method, and data management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data management system capable of safely storing personal information on the Internet.SOLUTION: In a data management system, encryption key information to be encrypted when a user registers personal information on a Web server that the user accesses and decryption key information for referring to the stored personal information is respectively allowed to exist on the Web server only when registering or referring to the personal information, and not allowed to exist otherwise. Thus, it is possible to achieve high security in the data management system.

Description

  The present invention relates to a data management system, a data management method, and a data management program.

  In recent years, services such as shopping and banking transactions are rapidly spreading using networks such as the Internet. One example of these services is online banking, which allows users to make deposit / withdrawal requests (transfers) to accounts on the Internet without using ATMs (Automated Teller Machines) at bank branches and convenience stores. is there. In this online banking, when starting use, a user ID and password are registered in advance in a computer system of a financial institution, and identity authentication is performed with the registered user ID and password.

  Such authentication using an information system such as a computer includes message authentication that guarantees the identity of a message, time authentication that guarantees the occurrence time of a specific event, in addition to personal authentication. Among these authentications, in the user authentication, where there are many use opportunities as a user, there is authentication data (ID and password, public key and private key) for associating with the person to be authenticated, and these authentication data are managed appropriately. This prevents spoofing and information leakage.

  With the development and popularization of the Internet, user convenience has greatly improved, but on the other hand, improvement of authentication technology has become a very important issue. This is not followed by a leak of personal information, but there is also an increased risk that authentication information itself such as an authentication method will be leaked. In a system having an authentication function, if authentication information or personal information stored in a database is leaked, it is necessary to take measures such as changing a conventional authentication method. As a technique related to these, there is a technique described in Patent Document 1.

  Japanese Patent Application Laid-Open No. 2004-228561 discloses a method for continuing the operation of an authentication system without changing the authentication method even if data stored in a database is stolen. Specifically, the authentication system includes an authentication information generation device and an authentication device. The authentication key generation unit of the authentication information generation device generates an authentication key composed of the authentication ID and the search SQL sentence generated by the search SQL generation unit. The authentication information generation unit generates authentication information including an authentication ID included in the authentication key and search result information acquired by searching a search database using the search SQL sentence. The authentication apparatus holds the authentication information generated by the authentication information generation unit, and is based on the search result information included in the authentication information, the authentication ID included in the authentication key input for authentication, and the search SQL statement It is determined whether or not the search information acquired by searching the search database completely matches. If the search information completely matches, it is determined that the authentication is successful.

Japanese Published Patent No. 2013-222213

  In the prior art, encryption processing by a program or database function has been performed, but due to leakage of the program itself or encryption parameters, the encrypted account and database storage information can be decrypted. Similarly, database storage information encrypted due to leakage of a database account (user ID, password) can be decrypted. Accordingly, the present invention is to provide a data management system that can safely store personal information on the Internet.

  In order to solve the above-described problems, in the present invention, encryption key information to be encrypted when registering personal information on a Web server accessed by a user and decryption key information for referring to stored personal information are respectively stored. It is characterized in that it exists on the Web server only when registering or referencing, and does not exist otherwise.

  In the data management system of the present invention, the key information is present in the service providing system such as the Web server only when encryption or decryption is performed, and the others are not present, thereby preventing leakage of the encryption method and increasing security. Can be realized. Problems, configurations, and effects other than those described above will be clarified by the following description of embodiments.

FIG. 1 is a diagram showing the concept of the data management system of the present invention. FIG. 2 is a block diagram showing the overall configuration of a system to which the present invention is applied. FIG. 3 is a block diagram showing the internal configuration of the Web server. FIG. 4 is a block diagram showing an internal configuration of the user terminal. FIG. 5 is a diagram illustrating a configuration example of personal information. FIG. 6 is a diagram illustrating a configuration example of a key generation management table for generating an encryption key / decryption key. FIG. 7 is a flowchart showing encryption / decryption processing.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, various types of information may be described using an expression such as “management table”, but the various types of information may be expressed using a data structure other than a table. Further, the “management table” can be referred to as “management information” to indicate that it does not depend on the data structure.

  Further, the process may be described with “program” as the subject. The program is executed by a processor, for example, an MP (Micro Processor) or a CPU (Central Processing Unit), and performs a predetermined process. Note that the subject of processing may be a processor because the storage resource (for example, a memory) and a communication interface device (for example, a communication port) are used as appropriate. The processor may have dedicated hardware in addition to the CPU. The computer program may be installed on each computer from a program source. The program source may be provided by, for example, a program distribution server or a storage medium.

  Each element, for example, the controller can be identified by a number or the like, but other types of identification information such as a name may be used as long as the information can be identified. In the drawings and description of the present invention, the same reference numerals are given to the same parts, but the present invention is not limited to the present embodiment, and any application examples that meet the idea of the present invention are technical. Included in the range. Further, unless specifically limited, each component may be plural or singular.

<Invention Summary>
FIG. 1 is a diagram showing the concept of the data management system of the present invention. The present invention proposes a method for performing encryption and decryption using session information at the time of authentication. The concept of the method will be described with reference to FIG. In order to receive the service provided by the above-mentioned Internet shopping, it is necessary to register personal information such as the recipient of the product and payment conditions with the service provider. The service provider encrypts the registered personal information and stores it in a personal information database to provide advanced security to prevent information leakage.

  First, plaintext personal information (information such as name, address, transaction financial institution / credit company) 111 for the user to receive services from the user terminal 12 to the Web server 11 is registered. At that time, login is performed using the authentication ID provided in advance by the service provider and the password account information set by the user for the authentication ID. When the personal information 111 is registered in the Web server 11, the personal information (plain text) 111 is encrypted using the password 1 115 of the session information at the time of login as the encryption key (key) 1151, and the personal information (encrypted) 113. To do. The encrypted personal information (encrypted) 113 is stored in the personal information database 114 of the Web server 11.

  When the user confirms / changes the personal information registered in the Web server 11, the personal information in an encrypted state is read from the personal information database 114 and decrypted with the above-described session information.

  Note that the session information is deleted when the use of the Web server 11 by the user ends. Therefore, even if the personal information database 114 itself or the encrypted personal information stored in the personal information database 114 is stolen, the key information for decryption does not exist on the Web server 11, so the personal information is decrypted. It is impossible to do.

  As described above, high security can be realized by making the key information exist only in the service providing system such as the Web server and not in the other cases only when encrypting or decrypting.

<Applicable system overall configuration>
FIG. 2 is a block diagram showing the overall configuration of a system to which the present invention is applied. The system 21 includes a service provider Web server a 211, a Web server n 212, a user terminal a1 215 to a user terminal ax 216, and a user terminal n1 217 to a user terminal nx 218, which are connected to each other via networks 213 and 214, respectively. Connected. With such a configuration, the user can receive a predetermined service provision from the service provider using the user terminal.

  For example, the web server a211 of the service provider is a server for net banking service, and the web server a211 is a server for Internet shopping. Since these servers perform remittance, withdrawal, transfer, settlement, etc., personal information such as name, address, account number, credit number, and password is encrypted and stored in the personal information database 114 for each individual. The

<Server internal configuration>
FIG. 3 is a block diagram showing the internal configuration of the Web server.

  The Web server 211/212 includes a CPU 31, a memory 32, a storage unit 33, an input unit 34, an output unit 35, a display unit 36, and a communication unit 37.

  The CPU 31 is a processor that controls the entire Web server 211/212. The memory 32 is a device that temporarily stores various programs and various data to be described later. The storage unit 33 is a device that permanently stores various programs and various data that will be described later, and is, for example, an HDD (Hard Disk Drive) or an SSD (Solid State Drive). The input unit 34 is a device that accepts input, and is, for example, a keyboard.

  The output unit 35 is a device that outputs information and data, and is, for example, a speaker or a printer. The display unit 36 is a device that displays information and data, and is, for example, a liquid crystal display. The communication unit 37 is a device that connects a user terminal, another server, or another device via the network 213/214. The above components are connected to each other via an internal bus. Note that the web server 211/212 may not include any of the input unit 34, the output unit 35, and the display unit 36 indicated by dotted lines.

<User terminal function block diagram>
FIG. 4 is a block diagram showing an internal configuration of the user terminal.

  The user terminal 215/216/217/218 includes a CPU 41, a memory 42, a storage unit 43, an input unit 44, an output unit 45, a display unit 46, and a communication unit 47.

  The CPU 41 is a processor that controls the entire user terminal. The memory 42 is a device that temporarily stores various programs and various data described below. The storage unit 43 is a device that permanently stores various programs and various data to be described later, and is, for example, an HDD or an SSD. The input unit 44 is a device that accepts input, and is, for example, a keyboard.

  The output unit 45 is a device that outputs information and data, and is, for example, a speaker or a printer. The display unit 46 is a device that displays information and data, and is, for example, a liquid crystal display. The communication unit 47 is a device that connects to a server via the network 213/214. The above components are connected to each other via an internal bus.

<Information structure>
FIG. 5 is a diagram illustrating a configuration example of personal information. The personal information 50/51 is composed of items 501 and contents 502 corresponding thereto. The item 501 includes an item of information for identifying an individual such as a name and sex in addition to an ID and a password as shown in the figure. The content 502 stores user information for each item. FIG. 5A shows the personal information 50 before being encrypted, and FIG. 5B shows the personal information 51 after being encrypted. The difference between the personal information 50 and the personal information 51 is whether or not the content 502 corresponding to an item other than the item 501 is encrypted. All information including the ID may be encrypted.

<Management table>
FIG. 6 is a diagram illustrating a configuration example of a key generation management table for generating an encryption key / decryption key. The key generation management table 60 is a management table for selecting one or more authentication information used for encryption and decryption to generate an encryption key / decryption key. The key generation management table 60 includes a case number 602 representing a combination of encryption / decryption key information 601 that is information for generating a key used for encryption and decryption, and encryption / decryption key information 601. Have.

  For example, when the case number 602 is “1”, the encryption / decryption key is generated from the “password 1” as the encryption / decryption key information 601. Similarly, when the case number 602 is “5”, it is generated by a combination of “password 1” and “password 2”. When the case number 602 is “8”, an encryption key and a decryption key are generated with information obtained by adding biometric information (fingerprint, iris, finger vein, etc.) to “password 1” and “password 2”. . The encryption key is generated with information (password 1 and biometric information) whose case number 602 is “7”, and the decryption key is generated with information (password 1, password 2 and biometric information) whose case number 602 is “8”. It may be generated. Encryption methods include RSA cryptography that makes use of difficulty in factoring large integers, ELGamal cryptography that makes use of difficulty in releasing discrete logarithm problems, elliptic curve cryptography that makes use of discrete logarithm problems on elliptic curves, and the like. is there. In this embodiment, encryption is performed using these encryption methods as appropriate, but the present invention is not limited to these encryption methods.

  Also, encryption is performed by combining user-side information (authentication ID, password 1, password 2, biometric information, etc.) with unique information (administrator key information, etc.) set by the service provider (administrator side). A key or decryption key can also be generated.

<Encryption / decryption processing>
FIG. 7 is a flowchart showing encryption / decryption processing. This process starts when the user accesses the Web server 11 to register personal information and refers to the personal information to receive service provision. In addition, although the main subject of the processing is the CPU 31, the Web server 11 itself may be used. Further, it is assumed that session information (authentication ID, password 1) at the time of login is stored in the memory 32.

  In step S <b> 701, the CPU 31 acquires information (key generation information) for generating an encryption key or a decryption key from the user terminal 12. The key generation information is information shown in the item 601 of the key generation management table 60, and is session information (authentication ID and password 1), a second password (password 2), and biometric information.

  In S <b> 702, the CPU 31 determines whether all key generation information has been acquired. If it can be acquired (Yes), the CPU 31 executes S703, and if it is not acquired (No), the CPU 31 executes S701 again. For example, when the case number 602 is “1” in the key generation management table 60, only “password 1” is required as the key generation information. Therefore, if the CPU 31 acquires “password 1” in step S701, the CPU 31 Step S703 is executed. The same applies to the case number 602 of “4”, and only “password 2” needs to be acquired as key generation information.

  On the other hand, when the case number 602 is “3”, since the key generation information needs “password 1” and “authentication ID”, the CPU 31 acquires “password 1” and “authentication ID” in step S701. Since “password 1” and “authentication ID” are session information and are temporarily stored in the memory 32, the CPU 31 acquires “password 1” and “authentication ID” from the memory 32. When the case number 602 is “5”, the key generation information requires “password 1” and “password 2”, so the CPU 31 obtains “password 1” from the memory 32 and “password 2” from the user terminal 21. To do.

  In S703, the CPU 31 determines whether to encrypt the personal information. If encryption is to be performed (Yes), the CPU 31 executes the processing after S704 to encrypt personal information. When encryption is not performed (No), since the decryption process is performed on the personal information, the CPU 31 executes the processes after S714.

  In step S <b> 704, the CPU 31 acquires personal information to be encrypted from the user terminal 12.

  In step S705, the CPU 31 generates an encryption key 1151 using the key generation information acquired in step S701. After completing the generation of the encryption key 1151, the CPU 31 deletes the key generation information. This erasure can reduce the risk of decryption of the encryption key due to unauthorized access.

  In step S <b> 706, the CPU 31 performs encryption processing 112 on the personal information (plain text) 111 using the encryption key 1151 generated in step S <b> 705, and generates encrypted personal information (encryption) 113. Immediately after the generation of the personal information (encryption) 113 is completed, the CPU 31 deletes the encryption key 1151. This erasure can reduce the possibility of leakage of the encryption key due to unauthorized access.

  In S707, the CPU 31 stores the encrypted personal information (encrypted) 113 in the personal information DB (database) 114. As described above, the personal information (plain text) 111 in the plain text state can be encrypted by the processing from S 704 to S 707 and stored as the personal information (encrypted) 113 in the personal information DB 114. In the present invention, since the encryption key is deleted immediately after the completion of the encryption process, it is possible to reduce the risk of being decrypted even if the encrypted personal information leaks.

  In S714, the CPU 31 acquires the personal information (encrypted) 118 to be decrypted from the personal information DB 114.

  In step S715, the CPU 31 generates a decryption key 1152 using the key generation information acquired in step S701. After the generation of the decryption key 1152 is completed, the CPU 31 deletes the key generation information. This erasure can reduce the risk of decryption key leakage and decryption due to unauthorized access.

  In S716, the CPU 31 performs decryption processing 117 on the personal information (encryption) 118 with the decryption key 1152 generated in processing S715, and decrypts the encrypted personal information (encryption) 118 to decrypt the personal information (encryption) 118. Plaintext) 116 is generated. Thereby, the user can refer to and change his / her own personal information. After completing the generation of the personal information (plain text) 118, the CPU 31 deletes the decryption key 1152. This erasure can reduce the possibility of leakage of the encryption key due to unauthorized access.

  In step S <b> 717, the CPU 31 controls the communication unit 37 to transmit the decrypted personal information (plain text) 116 to the user terminal 12. The personal information (encrypted) 118 that has been encrypted in the processes of S714 to S717 can be decrypted and sent to the user terminal 12 as personal information (plain text) 116. In the present invention, since the decryption key is erased immediately after the decryption process is completed, the risk of decryption when personal information is leaked can be reduced.

  As described above, in the data management system of the present invention, the encryption key information encrypted when registering the personal information on the Web server accessed by the user and the decryption key information for referring to the stored personal information, respectively. It is characterized in that it exists on the Web server only when registering or referencing, and does not exist otherwise. Thereby, in the data management system of this invention, high security is realizable.

  In addition, this invention is not limited to an above-described Example, Various modifications are included. The above-described embodiments have been described in detail for easy understanding of the present invention, and are not necessarily limited to those having all the configurations described. Further, a part of the configuration of one embodiment can be replaced with the configuration of another embodiment, and the configuration of another embodiment can be added to the configuration of one embodiment. Further, it is possible to add, delete, and replace other configurations for a part of the configuration of each embodiment. Each of the above-described configurations, functions, processing units, processing means, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Each of the above-described configurations, functions, and the like may be realized by software by interpreting and executing a program that realizes each function by the processor.

  Information such as programs, tables, and files for realizing each function may be stored in a recording device such as a memory, a hard disk, and an SSD, or a recording medium such as an IC card, an SD card, and a DVD. Further, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

11: Web server 12: User terminal 31, 41: CPU
32, 42: Memory 33, 43: Storage unit 34, 44: Input unit 35, 45: Output unit 36, 46: Display unit 37, 47: Communication unit 111, 116: Personal information (plain text)
112: Encryption processing 113, 118: Personal information (encryption)
114: Personal information database 115: Session information 117: Decryption processing 211, 212: Web server 213, 214: Network 215, 216, 217, 218: User terminal 1151: Encryption key 1152: Decryption key

Claims (13)

A data management system having a server device for storing information from a user terminal,
The server device
A control unit for controlling the entire apparatus;
A storage unit for storing received information;
A communication unit that transmits and receives information to and from the outside,
The controller is
The information received by the communication unit is encrypted and stored in the storage unit as a personal information database, the encrypted personal information in the storage unit is decrypted and transmitted from the communication unit to the user terminal,
The data management system, wherein the encryption or decryption is performed with session information for using the server device. The data management system according to claim 1, wherein the session information includes user ID information and password information for uniquely identifying a user of the user terminal. 3. The data management system according to claim 2, wherein the encryption or decryption is performed using the password information or the user ID information, or information combining the password and the user ID information. Management system. 4. The data management system according to claim 3, wherein the encryption or decryption is performed with authentication information different from the session information, and the authentication information is deleted from the server device after the encryption or decryption is completed. A data management system characterized by 5. The data management system according to claim 4, wherein the authentication information includes second password information or biometric authentication information different from the password information. 6. The data management system according to claim 5, wherein the encryption or decryption is performed by combining the session information and the authentication information. A data management method for a data management system having a server device for storing information from a user terminal,
The server device
A control unit for controlling the entire apparatus;
A storage unit for storing received information;
A communication unit that transmits and receives information to and from the outside,
The controller is
The information received by the communication unit is encrypted and stored in the storage unit as a personal information database, the encrypted personal information in the storage unit is decrypted and transmitted from the communication unit to the user terminal,
A data management method for a data management system, wherein the encryption or decryption is performed with session information for using the server device. 8. The data management method of the data management system according to claim 7, wherein the session information includes user ID information and password information for uniquely identifying a user of the user terminal. System data management method. The data management method of the data management system according to claim 8, wherein the encryption or decryption is performed with the password information or the user ID information, or information combining the password and the user ID information. A data management method for a data management system. 10. The data management method of the data management system according to claim 9, wherein the encryption or decryption is performed using authentication information different from the session information, and the authentication information is stored after the encryption or decryption is completed. A data management method for a data management system, comprising: deleting from a server device. The data management method of the data management system according to claim 10, wherein the authentication information includes second password information or biometric authentication information different from the password information. The data management method of the data management system according to claim 11, wherein the encryption or decryption is performed by combining the session information and the authentication information. A data management program of a data management system having a server device for storing information from a user terminal,
The server device
A control unit for controlling the entire apparatus;
A storage unit for storing received information;
A communication unit that transmits and receives information to and from the outside,
The data management program operating in the control unit is:
A function of encrypting information received by the communication unit and storing it as a personal information database in the storage unit; a function of decrypting encrypted personal information of the storage unit and transmitting the information from the communication unit to the user terminal;
A data management program for a data management system, comprising: a function of performing encryption or decryption with session information for using the server device.

Images