KR102249758B1 - Artificial intelligence personal privacy data security system applying case based reasoning technology and block chain method and server thereof - Google Patents

Abstract

The security system according to an embodiment of the present invention generates encrypted data using basic customer information, generates a classification password for the basic customer information, and hash processing the identification password using a prime number to create an encrypted new classification. A terminal configured to generate a password and generate a connection password using a prime number used during hash processing of the customer basic information in the process of encrypting the customer key information; And a server including a main information DB for hashing the password of the basic information DB for storing the basic customer information and storing the encrypted customer main information connected through the connection password.

Description

Artificial intelligence personal privacy data security system applying case based reasoning technology and block chain method and server thereof

The present invention relates to a security system, and more particularly, to an artificial intelligence personal information security system and method to which case-based reasoning technology and a block chain method are applied.

In financial institutions such as banks and cryptocurrency exchanges. The security of various transactions of customers, etc., applies the blockchain method, so that hackers cannot change the contents. However, customer personal information entered at the time of registration at financial institutions such as banks, insurance companies, card companies, or cryptocurrency exchanges is commonly applied to the server DB and stored. In a situation where intelligent crime is developing as time goes by, the security of applying a conventional encryption method is relatively vulnerable to hacking, which can lead to external leakage of personal information or core technology information. Therefore, a more thorough and reliable security device and a security method accordingly are desired.

The present invention is to solve the above-described technical problem, the object of the present invention is to apply a separate blockchain method Hash function to fundamentally prevent the hacking of personal information, and also an artificial intelligence method case-based reasoning technology It is to provide a security system and method to which it is applied.

A security system according to an embodiment of the present invention generates encrypted data using basic customer information, generates a classification password for the basic customer information, and hash processing the identification password using a prime number, thereby encrypting a new classification. A terminal configured to generate a password and generate a connection password using a prime number used during hash processing of the customer basic information in the process of encrypting the customer key information; And a server including a basic information DB for storing the basic customer information and a main information DB for storing the customer main information encrypted through the connection password.
As an embodiment, the terminal may distort the encrypted customer basic information and the encrypted identification code. The server may further include a case information DB for converting a hacking case into a database. The server can analyze the hacking case with big data using the AI system, and perform similarity search and inference of the hacking case by using the CBR system.
The server of the security system according to an embodiment of the present invention generates encrypted data using basic customer information, generates a classification password for the basic customer information, and hashes the identification password using a prime number. A basic information manager generating a new identification password and storing the encrypted data of the customer basic information and the encrypted identification password in a basic information DB; A key information manager that generates a connection password using a prime number used during hashing of the basic customer information in the process of encrypting the key customer information, and stores the key customer information encrypted through the connection password in the key information DB ; And a case information manager that analyzes big data about hacking cases for the data stored in the basic information DB or the main information DB, performs similarity search and inference for the hacking case, and stores the analysis result of the hacking case in the case information DB. Includes.
As an embodiment, the case information manager may analyze big data of a hacking case using an AI system, and perform similarity search and inference of the hacking case using a CBR system.

According to an embodiment of the present invention, in order to further enhance security processing, such as preventing the leakage of personal information of a customer, artificial intelligence technology and case-based reasoning (CBR) technology are applied. More specifically, by applying a hashing processing method and CBR technology, in the case of the present invention, personal information is input, and from registration to external output in the system, even if a hacker invades some data, it is possible to grasp basic customer information such as customer name. It should not be possible. Therefore, according to the security policy of the present invention, it is possible to thoroughly prevent the leakage of important customer information to the outside.

1 is a block diagram schematically showing a security system according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating the terminal illustrated in FIG. 1 by way of example.
FIG. 3 is a conceptual diagram illustrating an operation of managing basic customer information of a control unit illustrated in FIG. 2 by way of example.
FIG. 4 is a conceptual diagram illustrating an operation of managing key customer information of a control unit illustrated in FIG. 2 by way of example.
5 is a block diagram illustrating the server illustrated in FIG. 1 by way of example.
FIG. 6 is a conceptual diagram illustrating an operation method of the main information manager shown in FIG. 5 by way of example.
FIG. 7 is a block diagram illustrating an exemplary operation of reducing main information by the main information manager shown in FIG. 5.
FIG. 8 is a conceptual diagram exemplarily illustrating an operation of managing basic customer information according to a new classification password change of the basic information manager shown in FIG. 7.
9 is a block diagram illustrating an example method of operating the case information manager shown in FIG. 5.
10 is a flowchart illustrating a method of operating the case information manager shown in FIG. 5.

Hereinafter, embodiments of the present invention will be described clearly and in detail to the extent that a person having ordinary knowledge in the technical field of the present invention can easily implement the present invention.
1 is a block diagram schematically showing a security system according to an embodiment of the present invention. Referring to FIG. 1, the security system 1000 includes a terminal 1100 and a server 1200. A customer or a person in charge (hereinafter, referred to as a person in charge) may use the terminal 1100 to input basic customer information 1101 such as a customer name and key customer information 1102 such as a resident registration number, account number, and number of coins.
Basic customer information 1101 and main customer information 1102 may be stored in the storage unit 1220 of the server 1200. The storage unit 1220 of the server 1200 may include a basic information DB and a main information DB. Basic customer information 1101 may be stored in the basic information DB. The control unit 1230 of the server 1200 may derive various information or perform security management by using the basic information DB and the main information DB of the storage unit 1220. For example, the control unit 1230 may perform security management using a block chain system (BCS).
Meanwhile, the security system 1000 may prevent a hacker attack as illustrated in FIG. 1. Hacker 1 may be a contact person in charge of a customer or organization (hereinafter referred to as a person in charge) who can input customer information into the terminal 1100. The person in charge can easily access not only the basic information of the customer, but also key information. Therefore, the person in charge needs special security management or personal authentication management.
Hacker 2 can extract customer information from the terminal 1100. Hacker 2 may steal customer information during wired or wireless communication, or install a hacking means in the terminal 1100 to steal customer information. Therefore, for Hacker 2, it is necessary to divide and input all information such as customer name and password, and connect it with the Hash function.
Hacker 3 may extract customer information from the storage unit 1220 in the server 1200. Therefore, for Hacker 3, it is necessary to block the acquisition of basic customer information from the main information DB of the storage unit 1220 by connecting basic information and main information through a hash function to prevent obtaining the customer name and identification password together. The non-distorted basic customer information stored separately in the storage unit 1220 may be used for re-distortion of basic customer information after a specific customer key information reduction process during computation.
Hacker 4 may extract customer information from the control unit 1230 in the server 1200. For Hacker 4, even if it intrudes into the control unit 1230 and steals key customer information, it is necessary to make it impossible to secure basic information such as a customer name by interlocking basic information and key information with a hash function. Hereinafter, a defense method against attacks by hackers 1 to 4 will be described in more detail.
FIG. 2 is a block diagram illustrating the terminal illustrated in FIG. 1 by way of example. Referring to FIG. 2, the terminal 1100 may include an input unit 1110, a control unit 1120, an output unit 1130, and a power unit 1140. The power supply unit 1140 may provide operating power to the input unit 1110, the control unit 1120, and the output unit 1130 under the control of the control unit 1120.
The person in charge is a security permission person who can access the terminal 1100. However, data (eg, important information of customers) may be leaked through the person in charge. In order to prevent this, the input unit 1110 may allow access after checking the list of security levels of the authorized person or personal authentication. The input unit 1110 may manage a log-file of a person in charge. The log file can be checked only through the security system 1000, and the person in charge may not be able to modify the contents.
The controller 1120 may control the overall operation of the terminal 1100. The control unit 1120 may control an operation between the input unit 1110, the output unit 1130, and the power unit 1140. For example, the control unit 1120 may encrypt the customer name input through the input unit 1110. The control unit 1120 may generate a classification password to identify the encrypted customer name, and may encrypt the classification password. In addition, the controller 1120 may protect customer information from an attack by hacker 2 by distorting the encrypted customer name or identification password.
The output unit 1130 may receive encrypted or distorted customer information from the control unit 1120 and provide the received customer information to a server (refer to FIG. 1, 1200 ). The output unit 1130 may separately transmit an encrypted customer name and a classification password, or encrypted data of key customer information to the server 1200. Here, the encrypted customer name and the identification password may be stored in the basic information DB of the server 1200 by connecting the connection password. And the encrypted customer key information can be stored in the key information DB.
The output unit 1130 may provide data to the server 1200 using wired or wireless communication. When the output unit 1130 uses wireless communication, wireless wide area network (WWAN) communication (eg, RF wireless communication, IEEE 802.20), wireless metropolitan area network (WMAN) communication (eg, IEEE 802.16, IEEE 802.16). WiMAX), wireless local area network (WLAN) communication (e.g., NFC, BLE, WiFi, Ad-Hoc, etc.), and wireless personal area network (WPAN) communication (e.g. IEEE 802.15, Zigbee, Bluetooth, UWB) , RFID, Wireless USB, Z-Wave, Body Area Network) may be implemented to perform wireless communication in at least one method.
FIG. 3 is a conceptual diagram illustrating an operation of managing basic customer information of a control unit illustrated in FIG. 2 by way of example. The control unit 1120 may encrypt basic customer information (see FIG. 1, 1101) input through the input unit 1110. For example, the basic customer information 1101 may be a customer name as shown in FIG. 1. Referring to the example of FIG. 3, the customer name (Mongryong Lee) may be encrypted as 253138. The controller 1120 may distort the encrypted data. For example, the controller 1120 may distort the first and third digits of the encrypted data 253138 to generate data that has been distorted to 752138. That is, the controller 1120 may generate encrypted and distorted data 752138 from the input customer name (Mongryong Lee).
Meanwhile, the control unit 1120 may generate a classification password to distinguish an encrypted or distorted customer name. Referring to FIG. 3, the controller 1120 may generate a classification password 341256 from a customer name (Mongryong Lee) and encrypt the identification password. The control unit 1120 may perform a hash process to encrypt the identification password. The control unit 1120 may obtain a connection password by hashing the encrypted data using a prime number. Here, a prime number means a number divided by 1 and itself.
In the first step, 1972.57 is obtained by dividing the identification code 341256 by the decimal number 173. In step 2, 1972 is obtained by taking only an integer from the result of step 1, and 293828 is obtained by multiplying by the decimal number 149. In FIG. 3, the length of the encrypted data is 6 digits, but when it is actually applied, it is 20 digits, the decimal length is 14 digits, and the integer obtained as a result of the calculation may be 6 digits. Also, the prime number (173 or 149 in the example above) for hashing can be changed for each customer's transaction. Since the control unit 1120 changes the decimal number for each transaction, even if the hacker tracks the transaction details of the customer, the customer name cannot be identified.
Also, the controller 1120 may distort the encrypted identification password. The controller 1120 may determine a change position and change the number using a random number generation algorithm at an appropriate ratio within a certain rule range. For example, the controller 1120 may generate the encrypted and distorted data 193728 by distorting the first and fourth digits of the encrypted identification code data 293828.
In the example of FIG. 3, the length of the data of the encrypted and distorted basic customer information 1101 is 6 digits, but in reality, the security can be further improved by using longer data (eg, 32 to 56). . Meanwhile, according to an embodiment of the present invention, the distortion processing operation may not be performed by the control unit 1120 of the terminal 1100, but may be performed by the control unit 1230 of the server 1200. The security system 1000 according to an embodiment of the present invention encrypts and distorts the basic customer information 1101 inputted to the terminal 1100, thereby protecting customer information from hacker attacks.
FIG. 4 is a conceptual diagram illustrating an operation of managing key customer information of a control unit illustrated in FIG. 2 by way of example. The control unit 1120 may encrypt key customer information (see FIG. 1, 1102) input through the input unit 1110. For example, the customer key information 1102 may be a password, a resident registration number (hereinafter, a resident number), and the number of coins. The password is encrypted with 23518, the social security number is encrypted with 93174, and the number of coins can be encrypted with 48289.
The control unit 1120 may generate each connection password in the main information by hashing the connection password for each key information (password, resident number, etc.) in the classification password of the basic customer information 1102. The control unit 1120 may use a prime number for hash processing. By dividing the encrypted data 23518 of the password by 173 decimal and selecting an integer, it is possible to obtain the password 135 connecting the main information of the password. Similarly, the password 538 for connecting the key information of the social security number and the password 279 for connecting the key information of the number of coins can be obtained by dividing each of the encrypted data 93174 and 48289 by a decimal number 173 and selecting an integer.
Like the basic customer information 1101, the control unit 1120 may lengthen the encrypted data in order to increase security in the main customer information 1102. Meanwhile, the operation of managing key customer information may be performed by the control unit 1230 of the server 1200. The security system 1000 according to an embodiment of the present invention may protect customer information from hacker attacks by encrypting key customer data input to the terminal 1100.
5 is a block diagram illustrating the server illustrated in FIG. 1 by way of example. Referring to FIG. 5, the server 1200 may include a communication unit 1210, a storage unit 1220, and a control unit 1230. The server 1200 provides a management program to the terminal 1100, thereby managing customer information or allowing the customer to execute the program. In addition, the server 1200 may receive customer information from the terminal 1100 and manage basic customer information or key customer information. In addition, the server 1200 may receive case information from various terminals, manage case details, and provide case details when requested by a user.
The communication unit 1210 enables communication with the terminal 1100 by wire or wirelessly. The communication unit 1210 includes code division multiple access (CDMA), global system for mobile communication (GSM), wideband CDMA (WCDMA), CDMA-2000, time division multiple access (TDMA), long term evolution (LTE), and global system for mobile communication (Wimax). Wired and wireless communication such as interoperability for microwave access), wireless LAN (WLAN), ultrawide band (UWB), Bluetooth, wireless display (WI-DI), Internet, LAN, etc. may be supported.
The communication unit 1210 may include an input unit 1211 and an output unit 1212. The input unit 1211 may receive customer information from the terminal 1100. Alternatively, the input unit 1211 may receive basic customer information or key customer information or case information from the terminal 1100. The input unit 1211 may provide customer information, basic customer information, key customer information, or case information to the storage unit 1220 or the control unit 1230. The output unit 1212 may provide a management program to the terminal 1100 and may provide customer information or case information.
The storage unit 1220 may store customer information received through the communication unit 1210. The storage unit 1220 may include a basic information DB 1221, a main information DB 1222, and a case information DB 1223. Basic customer information (see FIG. 1, 1101) and main customer information (see FIG. 1, 1102) may be stored in the storage unit 1220 of the server 1200. The storage unit 1220 of the server 1200 may include a basic information DB 1221 and a main information DB 1222.
The basic information DB 1221 may store encrypted or distorted basic customer information. In addition, basic information DB 1221 may also store basic customer information that is not distorted, which is separately stored. The basic customer information that has not been distorted can be used for re-distortion of basic customer information after the specific customer key information is reduced during computation. The control unit 1230 of the server 1200 may derive various information or perform security management by using the basic information DB 1221 and the main information DB 1222 of the storage unit 1220. For example, the control unit 1230 may perform security management using a blockchain system (BCS).
In the basic information DB 1221, customer information input from the terminal 1100 may be stored, and basic customer information such as customer ID, customer name, terminal ID, and contact information may be stored. The key information DB 1222 may store key information associated with basic information of the customer and related to security of the customer. The case information DB 1223 may store various cases provided by a customer or a person in charge.
The controller 1230 may include a processor 1231, a program manager 1232, a basic information manager 1233, a main information manager 1234, and a case information manager 1235. The control unit 1230 may be implemented in hardware or software. For example, the processor 1231 is implemented as hardware, and the program manager 1232, the basic information manager 1233, the main information manager 1234, and the case information manager 1235 may be implemented as an algorithm or software. .
The processor 1231 may control the overall operation of the server 1200. For example, the processor 1231 accesses the basic information DB 1221, the main information DB 1222, and the case information DB 1223 of the storage unit 1220, and the basic information manager 1233, The control unit 1230 can be driven by executing an algorithm or program command constituting the main information manager 1234 and the case information manager 1235. In addition, the processor 1231 may include controllers, interfaces, graphic engines, etc. that control various components of the server 1200. The processor 1231 may be provided in the form of a system-on-chip (SoC), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or the like.
The program manager 1232 may provide or support installation of a management program to the terminal 1100. The program manager 1232 may execute a separate security program when necessary through the terminal 1100 in which the management program is installed. The basic information manager 1233 may access the basic information DB 1221 of the storage unit 1220 and manage basic information of the customer. When a new customer subscribes through the terminal 1100, the basic information manager 1233 may assign an ID of a new customer and store the new customer ID and a customer name in the basic information DB 1221. The basic information manager 1233 may update basic information stored in the basic information DB 1221 when basic information of an existing customer is changed.
The main information manager 1234 may access the main information DB 1222 of the storage unit 1220 and manage main information of the customer. The main information manager 1234 may update main information stored in the main information DB 1222 when existing main information is changed.
The case information manager 1235 may access the case information DB 1223 of the storage unit 1220 and manage case details and the like. The case information manager 1235 may store the hacking case details in the case information DB 1223 and manage the hacking case details when the hacking case contents are provided through the terminal 1100. The case information manager 1235 may provide case information stored in the case information DB 1223 to the terminal 1100 when there is a request for case details from the terminal 1100.
FIG. 6 is a conceptual diagram illustrating an operation method of the main information manager shown in FIG. 5 by way of example. Referring to FIG. 6, basic customer information of customer A (Mong-ryong Lee) and customer B (Sung Chun-hyang) is a customer name, and major customer information is a password, resident number, and number of coins. Basic customer information may be stored in the basic information DB 1221. Key customer information may be stored in the key information DB 1222 through a connection password as shown in FIG. 6.
Customer A's password and number of coins can be stored in the main information DB 1222 through connection passwords 135 and 279, respectively. Next, the number of coins and resident number of customer B may be stored in the main information DB 1222 through connection passwords 307 and 441, respectively. In addition, the resident number of customer A and the password of customer B may be stored in the main information DB 1222 through connection passwords 538 and 570, respectively.
When hacker 3 tries to hack the main information DB 1222, the connection password in front of each attribute of the main information can be processed as a hash processing result number of the connection password after the basic information classification password. The connection password after the identification password in the basic customer information can be processed with the Hash function. The processing result is recorded in front of the main information so that it is linked from the basic information to the main information attribute. However, even if key information is hacked, it is impossible to infer the customer name because it is not connected to the basic information. Even if the key information attributes of various customers are mixed and hacked, there is no relationship and security can be maintained.
FIG. 7 is a block diagram illustrating an example of a main information reduction operation of the main information manager shown in FIG. 5. Referring to FIG. 7, the controller 1230 of the server 1200 may search for basic customer information through a BCS system when computer processing is required. This BCS system is a CBR (Case-Based Reasoning) system that searches for the similarity of the customer basic information DB that was distorted at the time of registration, accurately finds the customer, returns the relevant main information, and provides it to the terminal 1100. The control unit 1230 of the server 1200 may delete the returned data after performing a search operation using BCS within the server within the shortest time. The terminal 1100 may transmit only the work result to the person in charge after deleting the reduction data.
The CBR system is described in "Storage Media for Installation of Security Server and Security Function Using Case-Based Reasoning Engine" filed on May 15, 2017 filed by the present applicant (application number: 10-2015-0155339). And can be applied to the CBR system of the present application.
The CBR system receives personal information for search and searches the case database. The CBR system calculates the similarity of each attribute in the case of the retrieved personal information, applies a weight to the similarity of each attribute of the personal information for which the similarity calculation has been completed, and calculates a final similarity value for each case to which the weight is applied. The CBR system determines whether matching personal information, that is, basic personal information, is detected based on the calculated final similarity value. In this case, the CBR system may determine the personal information of the case with the highest calculated final similarity value as the matched personal information.
For example, when the CBR system detects personal information of a case with the highest final similarity value, that is, basic personal information, it can extract and provide personal main information mapped in correspondence with the detected basic personal information to the user. However, if the CBR system is less than a preset reference value or if personal information corresponding to the personal information requested for search does not exist, it can be terminated. Meanwhile, the CBR system may extract personal information about two or more cases having a high final similarity value, and detect the personal information requested for a search by determining a predetermined criterion among corresponding personal information. The CBR system can recover the matched basic personal information and decrypt the encrypted personal key information matched with the recovered basic personal information.

FIG. 8 is a conceptual diagram exemplarily illustrating an operation of managing basic customer information according to a new classification password change of the basic information manager shown in FIG. 7. Here, the operation of managing basic customer information according to the change of the new classification password may be performed by the control unit 1120 of the terminal 1100.
The control unit 1230 may distort the second and six digits of the encrypted data 253138 of the customer's name (Mongryong Lee) to generate data that has been distorted to 243139. That is, the basic information manager 1233 of the control unit 1230 may generate new distortion-processed data 243139 from the customer name (Mongryong Lee) stored in the basic information DB 1221.
Meanwhile, the control unit 1230 may generate a new identification password through separate hash processing of the identification password 341256 stored in the basic information DB 1221 twice. In the first step, the identification code 341256 is divided by the prime number 113 to obtain 3019.90. In step 2, only integers from the result of step 1 are taken to obtain 3019, and the decimal point 179 is multiplied to obtain 540573.
The control unit 1230 changes a new identification password for each transaction, and the identification password in the server 1200 is used as it is. The connection part for each key information attribute that is linked to the classification password in the basic customer information is not newly hashed. In addition, the control unit 1230 can increase security by using a sufficiently long hash processing number. The basic information may be stored in the basic information DB 1221 after re-distortion processing.
9 is a block diagram illustrating an example method of operating the case information manager shown in FIG. 5. Referring to FIG. 9, the case information manager 1235 may include a self-evolving security system 1236, an artificial intelligence system 1237, and a case search inference system 1238.
The Self Evolving Security system (SES) 1236 can collect existing hacking cases and processing items using the case information DB 1223 when hacking occurs. The self-evolving security system 1236 can analyze and pattern a hacker's intrusion content and results into a big day. The self-evolving security system 1236 can continuously evolve itself whenever a new hacking occurs by using the AI system 1237 or the CBR system 1238. The self-evolving security system 1236 can respond to all existing hacking through self-evolution.
The self-evolving security system 1236 uses an artificial intelligence system (AI system, 1237), analyzes a large number of collected hacking cases with big data, and can analyze, classify, and form patterns using deep learning. In addition, the self-evolving security system 1236 may model hacking cases using the CBR system 1238, form a database, and systematically store them. The CBR system 1238 may search for and infer hacking cases stored in the case information DB 1223 when a hacker invades, and provide the most appropriate solution. When hacking is performed using computer power, standardized classification is processed quickly, and when hacking is performed, standardized cases are quickly searched.
The self-evolving security system 1236 may gradually become smarter and better reasoning ability due to the learning effect as the number of hacker intrusions increases. By sharing hacking case DB and source, we promote smarter security processing through joint research with engineers around the world. Analyze hackers' intrusion propensity, prepare countermeasures using AI technology and CBR technology, and promote optimal countermeasures.
10 is a flowchart illustrating a method of operating the case information manager shown in FIG. 5. Referring to FIG. 10, assuming that hacking has occurred in step S110, in step S120, the AI system 1237 analyzes the hacking content and classifies the hacking pattern using deep learning technology. In step S130, the CBR system 1238 models the hacking case data and searches for the degree of similarity of the hacking case. In step S140, it is determined whether the case search is successful based on the result of the similarity of the hacking case. If the hacking case search is successful, the hacking case is provided in step S150 and automatic action is taken. When the hacking case search fails, in step S160, the CBR system 1238 stores the hacking case, so as to prepare for a case where a similar case occurs next.
The present invention applies artificial intelligence technology and case-based reasoning (CBR) technology in order to further strengthen security processing such as preventing the leakage of customer's personal information. More specifically, in the case of the present invention by applying a hashing processing method, even if a hacker invades some data from the time of inputting and registering personal information and outputting it to the outside of the system, it is not possible to identify the customer name. Therefore, according to the security policy of the present invention, it is thoroughly prevented that important information of the customer is leaked to the outside.
In particular, security is required to prevent external leakage of certain confidential information including personal information of bank customers as well as personal medical information or information including key technologies of companies. To this end, the present invention restricts access to important customer information to a considerable level. For example, an approach can be made through a similarity search using a case-based reasoning engine.
The security of the present invention basically applies the hash function of the blockchain method. Furthermore, the security of the present invention prevents external leakage of personal important information that may occur during the information registration process. To this end, a case-based reasoning engine of artificial intelligence is used, and a hashed blockchain technology is also applied to the connection of personal information properties. Therefore, the security of key customer information is thoroughly maintained throughout the entire transaction process from the initial registration of customer information.
In the present invention, upon initial registration, basic customer information attributes (customer name, customer identification password, etc.) are hashed and stored in different addresses. In addition, the encrypted customer name, which is the basic customer information, and the hashed customer identification password are distorted and stored in the basic information DB. In addition, the customer identification password and the customer key information attributes are also connected with the hashing process by applying blockchain technology. In addition, when searching for customer key information, the similarity of the BCS (Block Chain Case Search) security system, which saw basic customer information case data, is linked to the customer key information only through case search.
In the end, even if a hacker invades key information data, all connections are hashed and reverse search is not possible. In other words, since it is impossible to expose the customer name, the customer's sensitive and important information is not leaked to the outside.
The server of the security system according to an embodiment of the present invention includes a communication unit that receives encrypted information from a terminal, a control unit that outputs the encrypted information to a case-based reasoning engine in the server, and a storage unit that stores the encrypted information converted to a case database. Can include. The security system of the present invention may include an artificial intelligence case-based reasoning engine. The encrypted information received from the control unit can be divided into basic information and main information. In particular, the classification password, which is one of the attribute information in the basic information, is separately hashed to increase security.
The basic information attribute information is distorted using a random number, and the encrypted main information is classified for each attribute. Also, one attribute in the main information is subdivided as needed. Classification of basic information By utilizing the result of Hashing processing of the connection password, the contents of the main information are stored at the location of the connection password address in the main information case base.
When working in the security system, the search target information is checked through the storage unit of the server and then encrypted. After encryption input, among basic information cases distorted from the case information DB, a similarity search may be performed using case-based reasoning technology. Basic information cases are searched and selected through similarity search, and personal key information connected with the hashing process is decrypted for confirmation. Accordingly, necessary information is extracted and output from the system.
The printed information is applied to the computer processing work of the system. The customer identification password in the encrypted basic information stored in the DB in the server is separately hashed by utilizing other prime numbers. Basic information properties may be distorted again and stored in the storage unit. Therefore, unlike the existing encryption-only data security method, in the present invention, main information can be extracted only through case search of encrypted and distorted basic information. Therefore, it can fundamentally prevent hacking inside and outside the organization.
The present invention can be applied to personal information security systems required by financial systems and government agencies through search for distorted case data. In addition, it can be applied to fin tech security systems such as virtual currency applied to mobile banking in the financial sector. In addition, the present invention can be applied to a security system for personal specific information, such as a security system for key technology information and personal medical information, etc. of a company.
The above-described contents are specific examples for carrying out the present invention. In addition to the above-described embodiments, the present invention will include simple design changes or embodiments that can be easily changed. In addition, the present invention will also include techniques that can be easily modified and implemented using the embodiments. Therefore, the scope of the present invention is limited to the above-described embodiments and should not be defined, and should be determined by the claims and equivalents of the present invention as well as the claims to be described later.

Claims (6)

delete delete delete delete In the server of a security system that receives basic customer information and key customer information from a terminal,
Generate encrypted data using the customer basic information input from the terminal, generate a classification password for the basic customer information, and hash the identification password using a prime number to generate an encrypted new identification password, and the A basic information manager for storing encrypted data of basic customer information and the encrypted new classification password in a basic information DB;
In the process of encrypting the basic customer information, a connection password for the main customer information input from the terminal is generated using a prime number used during hash processing of the basic customer information, and the main customer information encrypted through the connection password A key information manager that stores data in the key information DB And
A case information manager that analyzes big data about hacking cases for the data stored in the basic information DB or the main information DB, performs similarity search and inference for hacking cases, and stores the analysis results of the hacking cases in the case information DB. Including,
When a hacker attempts to hack the main information DB, the main information manager treats the connection password in front of each attribute of the main information as a hashing result number of the connection password after the basic information classification password, and in the customer basic information The server of a security system that processes the connection password after the classification password with a hash function and records the result of the process in front of the main information so that it is connected from the basic information to the main information attribute. . The method of claim 5,
The case information manager is a server of a security system that analyzes big data of hacking cases using an AI system, and performs similarity search and inference of hacking cases using a CBR system.

Images