KR20080028198A - Method and system for secure management of personal digital assets - Google Patents

Abstract

A method and a system of safety management of digital individual information are provided to manage content of electronic record stored in an electronic record depository without reporting to a manager by encoding the electronic record as a public key of owner and encoding again the electronic record as the public key of the manager. An electronic record storage(100), which is an ERR(Electronic Record Repository) for storing invisible values, stores electronic records by classifying the records according to possessor. The electronic records are digital assets and electronic documents such as an audio clip, a video clip, licenses and security certifications. A meta storage(200) stores the meta data that is a list about the electronic record. The electronic record list includes allocated identifiers. The meta storage stores public keys. A possessor processing unit(300) and a manager processing unit(400) are realized in a program code. A possessor terminal device is connected with a server computer of the manager through the internet. The electronic record storage and the meta storage are connected with the possessor terminal device and the server computer.

Description

Method and system for secure management of digital personal information

1 is a reference diagram of a distributed security model,

2 is a block diagram of a secure management system of digital personal information according to the present invention;

3 is a flowchart illustrating a process of storing a locked electronic record in an electronic archive according to a preferred embodiment of the present invention;

4 is a flowchart illustrating a process of storing a sealed electronic record in an electronic archive according to a preferred embodiment of the present invention;

5 is a flowchart for explaining a process of taking out a sealed or locked electronic record from the electronic archive.

The present invention relates to the safe management of digital personal information, and more particularly to a method and system for more secure storage and retrieval of entities or entities required to handle digital information, electronic documents and the like.

In general, when a customer uses a bank's safe deposit box to store valuables offline, no one but himself knows what is in the bank's safe. Even the customer may have a personal safe at the bank. In the off-line, personal assets such as valuables can be safely stored using a safe deposit box.

On the other hand, in today's information society, it is desirable that a lot of new information is obtained in digital format, and that existing information is converted into digital format to facilitate archiving, use, updating, and sharing. In modern society, it is very important to know who holds this information more securely.

Therefore, digital assets such as audio clips, video clips, photos, etc. and electronic documents such as various licenses, security certificates, etc., are securely stored like a safe deposit box offline. Not only the contents of assets or electronic documents, but also the places where they are stored, or even the fact that they exist, need not be known.

Accordingly, the technical problem to be achieved by the present invention is to provide a method and system for safe management of digital personal information that can safely store and use digital personal assets and electronic documents.

According to the present invention, a) encrypting the electronic record with the owner's public key; b) encrypting the encrypted electronic record with a public key of an administrator; c) storing the double-encrypted electronic record in a storage unit.

Wherein the method further comprises digitally signing the electronic record encrypted by step a) between the steps a) and b), and between the steps b) and c) Decrypting the record with the administrator's private key; Verifying an electronic record by confirming a digital signature obtained through the decryption; Encrypting the verified electronic record with the administrator's public key.

The method further comprises assigning an identifier to the verified electronic record; And updating the identifier in the metadata of the owner's electronic record.

On the other hand, according to another field of the present invention, the technical problem and the electronic record storage unit for storing the electronic record for each owner; A meta storage unit for storing meta data on the electronic records for each owner; An owner processor for encrypting and digitally signing the electronic record with the owner's public key, digitally signing it with the administrator's public key, and updating the transmitted identifier to the metadata; The electronic record decrypted by the owner electronic record processing unit with the private key of the administrator, the digital signature is verified to verify the electronic record, and the verified electronic record is encrypted with the public key of the administrator and stored in the electronic record storage unit. And an administrator processor for allocating an identifier to the verified electronic record and delivering the identifier to the owner processor.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a reference diagram of a distributed security model.

1 is a conceptual security structure having a plurality of lines and defense levels to block intrusion from the outside, policy access control based on identity or role, and security for the purpose of preventing intrusion from the inside. It is a figure which shows a structure.

Conventional computer security methods that physically secure a computer or block access from the outside are no longer effective due to the emergence of powerful portable computers and high-speed communication networks. Thus, security policy in information technology systems requires not only traditional physical security (locks on buildings, badge access to security rooms), but also logical security (passwords on computers or networks, smart cards), operational policies and procedures.

On the other hand, it is necessary to hide not only the content of personal information, but also the fact that specific information exists. In the former case, information about, for example, an adopted child, his or her birth and birth mother, is sufficient only to protect its contents. In the latter case, it is necessary to protect information related to personal information of the individual, for example. For example, in order to protect witnesses who have witnessed any crimes, it is necessary to protect the personal information of the witnesses, as well as the personal information of the agents performing the confidentiality of the state. In such cases, the fact that the information itself exists must be hidden.

In this specification, not only the content of the information but also the record that itself is protected is called a sealed record, and the fact that the information exists is known to a certain group of people but the content Defines a protected record as a locked record.

In the present invention, the offline bank safe deposit box is applied to the safe storage of digital information. Asymmetric encryption techniques, such as public key cryptography, are used to manage sealed or locked records. Asymmetric encryption is a case where the key used to encrypt data and the key used to decrypt data are different. Therefore, if only the decryption key is securely managed, the encryption key can be shared with others. Similar ones are locks and keys. In other words, if only the key is stored securely, multiple locks can be used. In this asymmetric encryption technique, the lock is called the public key, and the key for the lock is called the private key.

The key used to encrypt data in asymmetric or public key cryptography is known to everyone, while the key used to decrypt the encrypted data is known only to the owner of the data. Using this public key-based encryption method, the data sender can encrypt the data with the recipient's public key, but cannot decrypt it, but can only decrypt the receiver with the private key. do.

Conversely, a message can be encrypted with a private key and a message can be decrypted with a public key. This ensures that the sender of the message must be the sender.

Meanwhile, in the present invention, a digital signature technique is additionally used for safe storage of digital information. As is known, a digital signature is a fixed length hash code generated by executing a hash function on an electronic document. The hash code here typically has a value of 128 bits and acts like a fingerprint. Electronic documents and digital signatures are transmitted encrypted with the recipient's public key.

The receiver receiving the electronic document decrypts it with its own private key, and executes the same hash function as the sender on the electronic document to generate a hash code. The authenticity of the digital signature can be checked by comparing the hash code transmitted from the transmitter with the generated hash code.

This digital signature technique proves that the electronic document was created by the author, and that the contents of the electronic document were not forged or altered in the process of sending and receiving, and that the author could later deny the creation of the electronic document. It plays a role of getting rid of.

2 is a block diagram of a secure management system of digital personal information according to the present invention.

The electronic record storage unit 100 stores electronic records classified by owners. That is, the electronic record storage unit 100 may be referred to as an electronic record repository (ERR) that stores intangible values. The electronic record stored in the electronic record storage unit 100 is, for example, a digital asset such as an owner's audio clip, a video clip, a photo, and the like, an electronic document such as various licenses, a security certificate, or the like. .

The meta storage unit 200 stores meta data, that is, a list of electronic records. The electronic record list includes an identifier assigned for each electronic record. In addition, the meta storage unit 200 stores public keys of owners and managers.

The owner processor 300 and the manager processor 400 may be implemented by program code. The owner processor 300 is preferably installed and executed in the owner's terminal, and the manager processor 400 is preferably installed and executed in the server computer of the manager. The owner's terminal and the administrator's server computer may be connected via a network, for example, may be connected through an internet network.

In addition, the electronic record storage unit 100 and the meta storage unit 200 may be implemented in the server computer of the administrator, or may be implemented as a separate database server or each clustered database server, and the owner terminal and It can also be networked to the administrator's server computer.

Hereinafter, specific embodiments for safely managing digital personal information in a system including the above-described configuration will be described with reference to FIGS. 3, 4, and 5, respectively.

3 is a block diagram illustrating a process of storing a locked record in an electronic archive according to a preferred embodiment of the present invention.

The manager processing unit 400 registers the manager's public key in the meta storage unit 200 (step S302) to disclose the manager's public key. The owner processing unit 300 registers the owner's public key in the meta storage unit 200 (step S304) to disclose the owner's public key, and obtains the manager's public key stored in the meta storage unit 200 (step S304). S306).

The owner processor 300 first encrypts the electronic record with the owner's public key (step S308), and digitally signs the primary encrypted electronic record (step S310). Then, the owner processor 300 encrypts the primary encrypted electronic record once again with the manager's public key obtained in step S206 (step S312), and then stores the message for the double encrypted electronic record in the electronic record. It transfers to the manager processing part 400 (step S314).

In this way, the electronic record is encrypted twice. That is, it is encrypted with the public key of the owner of the electronic record and encrypted with the public key of the manager of the electronic record.

The manager processing unit 400 receives a message on the electronic record transmitted from the owner processing unit 300 and obtains an owner public key from the meta storage unit 200 to decrypt the received electronic record (step S316). Next, the manager processing unit 400 first decrypts the received electronic record using the manager's private key (step S318). According to the primary decryption of the electronic record, the manager processing unit 400 obtains an electronic record encrypted with the owner's public key and a digital signature thereof.

The manager processing unit 400 digitally signs the electronic record encrypted with the owner's public key, and compares it with the digital signature transmitted from the owner processing unit 300 and verifies whether it matches (step S320). After verifying whether the owner who delivered the message is genuine and the integrity of the message, the manager processing unit 400 assigns an identifier to the received electronic record (step S322).

The manager processing unit 400 then encrypts the primary decrypted electronic record information once again with the manager's public key (step S324) and stores it in the electronic record storage unit 100 (step S326). The manager processor 400 first encrypts the identifier assigned to the electronic record with the manager's private key (step S328) and secondly encrypts it with the owner's public key (step S330), and then transfers the identifier to the owner processor 300 (step S330). Step S332).

The owner processor 300 receives the electronic record identifier transmitted from the manager processor 400, first decrypts the double encrypted identifier with the owner's private key (step S334), and secondly decrypts the identifier with the manager's public key to obtain the identifier. (Step S336). The owner processing unit 300 extracts a list of locked records from the meta storage unit 200 (step S338), and decrypts the electronic record list extracted with the owner's public key (step S340). The owner processing unit 300 updates the identifier in the decrypted electronic record list (step S342), encrypts the electronic record list with the owner's private key (step S344), and stores it in the meta storage unit 200 (step S346).

In the present embodiment, the electronic record to be stored is encrypted with the owner's public key and again encrypted with the administrator's public key and stored, thereby completely hiding the contents of the electronic record from others including the administrator. Thus, owners can collaborate with administrators to decrypt double-encrypted electronic records.

In addition, in the present embodiment, by encrypting the electronic record list with the owner's private key, a person having access to the meta storage 200 obtains the owner's electronic record list and the owner's public key for decrypting the owner's electronic key. It allows you to know information about the record itself.

However, the contents of the electronic record are encrypted by the electronic record owner's public key and the electronic record manager's public key, so that neither the manager nor the other person knows. In order to know the contents, the private key of the electronic record owner and the private key of the electronic record manager must be known because they are directly managed by the electronic record owner and the electronic record manager.

4 is a flowchart illustrating a process of storing a sealed record in an electronic archive according to a preferred embodiment of the present invention.

Steps S402 to S436 of FIG. 4 are the same as those of steps S302 to S336 of FIG. 3, and thus descriptions thereof will not be repeated.

After step S336, the owner processing unit 300 extracts a list of sealed records from the meta storage unit 200 (step S438), and decrypts the electronic record list extracted with the owner's private key (step S440). ). The owner processing unit 300 updates the identifier in the decrypted electronic record list (step S442), encrypts the electronic record list with the owner's public key (step S444), and updates the meta storage unit 200 (step S446).

As can be seen from the above, the process of storing the sealed record in the electronic archive is similar to the process of storing the locked electronic record. Only the electronic record list of the sealed electronic record is encrypted by the owner's public key, while the locked electronic record list is encrypted by the owner's private key. Thus, the decryption of the list of sealed electronic records requires the owner's private key, thus providing complete protection against others. That is, even the owner of the electronic record, except the owner of the electronic record, cannot see the list of electronic records.

Since it is encrypted with the electronic record owner's public key and then encrypted again with the electronic record manager's public key, no one can access the contents of the electronic record. In order to view the contents of the electronic record, both the private key of the electronic record owner and the private key of the electronic record manager are required. These private keys are secure because they are secret keys managed secretly by the electronic record owner and the electronic record manager.

5 is a flowchart for explaining a process of taking out a sealed or locked record from the electronic archive.

In order to take out the sealed or locked record, the owner processing unit 300 reads the list for the electronic record from the meta storage unit 200 (step S502). At this time, the sealed list of electronic records is encrypted by the electronic record owner's public key, while the locked list of electronic records is encrypted by the electronic record owner's private key. Therefore, the owner processing unit 300 decrypts the sealed list of electronic records using the private key, and decrypts the locked list of electronic records using the public key (step S504).

Next, the owner processing unit 300 selects an identifier of the electronic record to be read from the electronic record list (step S506), first encrypts the selected identifier with the owner's private key (step S508), and then publishes it again to the manager. Second encryption with the key (step S510) is transmitted to the manager processing unit 400 (step S512).

The manager processing unit 400 receives the double-encrypted identifier and first decrypts it with the manager's private key (step S514), and secondly decrypts it with the owner's public key to obtain the identifier (step S516). Then, the manager processing unit 400 retrieves the electronic record corresponding to the obtained identifier from the electronic record storage unit 100 (step S518), extracts it (step S520), and decrypts it with the manager's private key (step S522). This is encrypted again with the owner's public key (step S524) and transmitted to the owner processing unit 300 (step S526).

The owner processing unit 300 receives the double-encrypted electronic record and first decrypts it with the owner's private key (step S528). After the first decryption, the owner processor 400 verifies the digital signature (step S530) and decrypts it with the owner's private key to retrieve the contents of the electronic record (step S532).

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

As described above, according to the present invention, the electronic record is encrypted with the owner's public key and once again encrypted with the electronic record manager's public key, and in order to decrypt it, both the private key of the electronic record manager and the private key of the electronic record owner are required. By doing so, the contents of the electronic records stored in the electronic archives can be managed without the knowledge of the administrator.

In addition, by encrypting and storing the metadata of the electronic record with the public record of the electronic record owner, and requiring the electronic record owner's private key to decrypt it, the existence of the electronic record can be protected.

Claims (10)

a) encrypting the electronic record with the owner's public key; b) encrypting the encrypted electronic record with a public key of an administrator; c) storing the double encrypted electronic record in a storage unit; Safe management method of digital personal information comprising a. The method of claim 1 wherein between steps a) and b): Digitally signing the electronic record encrypted by step a); Between steps b) and c) above: Decrypting the double encrypted electronic record with a private key of an administrator; Verifying an electronic record by confirming a digital signature obtained through the decryption; Encrypting the verified electronic record with an administrator's public key; Safe management method of the digital personal information, characterized in that it further comprises. The method of claim 2, Assigning an identifier to the verified electronic record; Updating the identifier in metadata for the owner's electronic record; Safe management method of the digital personal information, characterized in that it further comprises. The method of claim 3, wherein And the metadata is encrypted with an owner's private key. The method of claim 3, wherein And the meta data is encrypted with the owner's public key. The method according to any one of claims 3 to 5, Obtaining metadata about an owner's electronic record; Extracting from the storage unit an electronic record corresponding to at least one identifier among the obtained metadata; Decrypting the extracted electronic record with an administrator's private key and encrypting the extracted electronic record with an administrator's private key; Decrypting the electronic record encrypted with the owner's public key and encrypted with the manager's private key with the manager's private key; Verifying the digital signature obtained through decryption with the administrator private key and extracting the electronic record by decrypting with the owner's private key; Safe management method of the digital personal information, characterized in that it further comprises. An electronic record storage unit for storing electronic records for each owner; A meta storage unit for storing meta data on the electronic records for each owner; An owner processor for encrypting and digitally signing the electronic record with the owner's public key, digitally signing it with the administrator's public key, and updating the transmitted identifier to the metadata; The electronic record decrypted by the owner electronic record processing unit with the private key of the administrator, the digital signature is verified to verify the electronic record, and the verified electronic record is encrypted with the public key of the administrator and stored in the electronic record storage unit. An administrator processor for allocating an identifier to the verified electronic record and transmitting the identifier to the owner processor; Safe management system of digital personal information comprising a. The method of claim 7, wherein And said meta data is encrypted with the owner's private key. The method of claim 7, wherein And said meta data is encrypted with the owner's public key. The method according to any one of claims 7 to 9, The owner processor: Extract the meta data of the owner's electronic record from the meta storage unit and transmit at least one identifier included therein to the manager processing unit to request a corresponding electronic record, and request the electronic record transmitted from the manager processing unit according to the request. After verifying the digital record obtained by decrypting with the administrator's public key, verifying the electronic record, and extracting the electronic record by decrypting with the owner's private key, The manager processing section: Extracting the double encrypted electronic record corresponding to the identifier provided from the owner processor from the electronic record storage unit, decrypting the extracted electronic record with the private key of the administrator, and encrypting the extracted electronic record with the private key of the administrator to transfer the electronic record to the owner processor; Management system of digital personal information.

Images