KR20160016157A - Method of distributing original data with recovery data - Google Patents

Abstract

Disclosed is a data distribution method using data for recovery. The present invention encrypts original data using an encryption key and destroys the original data at least by replacing a partial section with dummy data. The encrypted and destroyed original data are distributed via a cloud or the like. Meanwhile, data for recovery are separately stored and managed in a separate server to recover the original data. The recovery of the original data is conducted temporarily on a memory. The recovery is conducted by restoring the destroyed regions of the original data to original states with the destroyed original data and the data for recovery loaded on the memory and decryption is conducted using a decryption key. The recovered original data can be installed in a space on a network having sufficient security and afterward the allocated memory is released without being stored locally. According to the security method, damage caused by the leakage of original data or a decryption key can be completely prevented as the original data are not stored in a perfect state in the whole process of distribution.

Description

[0001] The present invention relates to a method of distributing data using recovery data,

The present invention relates to security technology for data using a cryptographic key. More specifically, the present invention relates to a security technique for destroying and distributing original data, and maintaining separate recovery data for recovering the original data.

In the process of distributing data through the network, data that should be kept secure is leaked by attacking a path that is vulnerable to security.

Network security technologies are being developed to prevent data leakage by hacking and other methods, and to allow only authorized users to access data.

Among them, an encryption method is widely used in which data is encrypted and distributed, and a decryption key is provided to a user to decrypt the data, so that only authorized users can access the data.

However, in the case of using the symmetric key encryption method, since the end user stores and uses the key in the distribution process, it is difficult to monitor the key destruction.

In addition, there is a possibility that the key may be exploited for various reasons such as hacking or your doctor.

If a key is leaked, all packages using the same symmetric key can decrypt it as soon as a third party obtains it, and even the key and package can not be recovered. It can be a result without results.

This can be an important security hole in symmetric key cryptography.

Therefore, in the process of distributing data through a network, it is necessary to provide a technique to prevent the damage from spreading even if the key or original data package is leaked by a hacker or a holder's intention.

Literature 1. Korea Intellectual Property Office, Patent Registration No. 10-1220166 "Data Access Authority Management Method" Document 2: Korean Intellectual Property Office, Patent Publication 10-2009-0042624 "Symmetric Key Cryptographic Processing Device and Method" Literature 3. Korea Intellectual Property Office, Patent Registration 10-0853182 'Symmetric Key-based Authentication Method and Apparatus in Multiple Domains' Literature 4. Korea Intellectual Property Office, Patent Registration No. 10-0808774 "Information Protection Method Using Symmetric Key Algorithm"

Disclosure of Invention Technical Problem [8] The present invention has been developed in order to solve the problems of the related art as described above, and it is an object of the present invention to provide a method and system for distributing data in a state of being destroyed, It is an object of the present invention to provide a security method of a cryptographic key method that greatly reduces the possibility of unauthorized circulation and distribution of original data by providing recovery data and restoring original data temporarily destroyed only in the memory.

It is another object of the present invention to enable authentication of user authority in data access for recovery for recovery of original data and management of access attempts for data regardless of distribution or distribution of original data by recording log It is in the provision of the security method.

It is another object of the present invention to provide a security method for blocking a data security loophole caused by a hacking by restricting the destruction of data temporarily in a memory but restricting it from being stored locally in a restored state.

Various embodiments described below relate to a data security method for distributing original data in a state of being destroyed, and separately maintaining recovery data for restoring the original data.

According to another aspect of the present invention, there is provided a data distribution method using data for restoration, the method including: encrypting original data using an encryption key;

Destructing encrypted original data, and generating recovery data for recovery;

Uploading encrypted and destroyed original data to the distribution server; And

And uploading the restoration data and the decryption key to the restoration control server.

At this time, in the step of destroying the original data, the destruction period of the original data may be determined according to the encryption technique used in the encryption step.

Meanwhile, in the step of destroying the original data, the original data is destroyed by filling at least a part of the encrypted data with dummy data,

It is possible to generate the restoration data including the information of the section in which the dummy data is filled and the pre-destruction data of the section in which the dummy data is filled.

According to another aspect of the present invention, there is provided a data distribution method using data for restoration according to the present invention, the method comprising the steps of: loading a original data encrypted and destroyed by a computing device in a memory by executing a loader program;

Connecting to the restoration control server, receiving the restoration data for authentication, and loading the restoration data into the memory;

Restoring the original data on a memory using the restoration data through a loader program;

The loader program decrypting the restored original data on a memory using a decryption key; And

Installing the original data decoded in the memory in the install server, and ending the loader program without locally storing the original data.

At this time, in the step of restoring the original data, the loader program temporarily retrieves the recovery period information of the original data and then restores at least a part of the recovery data in the recovery period of the original data, can do.

According to another aspect of the present invention, there is provided a data distribution method using data for restoration, the method comprising: receiving data for restoring original data encrypted and destroyed from a client connected through a network; Providing data for restoring the original data after the authentication process, if requested; And

And providing a decryption key for decrypting the original data to the client.

At this time, in the step of providing the restoration data, the restoration data includes the information of the section in which the dummy data on the original data is filled, and the data of the section in which the dummy data is filled.

According to the present invention, even if original data is unauthorizedly leaked due to hacking of the distribution server by distributing original data in a state of being destroyed in a distribution server that distributes data, the illegal Can be blocked.

In addition, when the user who receives the original data through the distribution server authenticates the authority through the separate restoration control server, the data for restoration is provided to the user, and the destroyed original data is recovered Thereby making it possible to improve manageability for the user.

In particular, by allowing the authenticated user to temporarily recover the original data only in memory in the final process of data distribution, the problem of security loopholes caused by leakage of original data can be prevented at the source.

1 is a view for explaining a connection relationship between a distribution server and a restoration control server,
2 is a diagram for explaining a process of a data distribution method using restoration data according to the present invention by network elements,
3 is a view for explaining the concept of data destruction process and data for restoration,
FIG. 4 is a diagram illustrating a screen in which decoding of original data fails;
5 is a diagram illustrating a screen in which original data destroyed in a memory is temporarily restored using restoration data,
6 is a flowchart describing a data distribution method using restoration data according to an embodiment of the present invention from the viewpoint of the original data owner,
7 is a flowchart describing a data distribution method using restoration data according to an embodiment of the present invention from the point of view of a distribution intermediary,
FIG. 8 is a flowchart describing a data distribution method using data for restoration according to an embodiment of the present invention from the viewpoint of a restoration control server.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT Hereinafter, the present invention will be described in detail with reference to preferred embodiments of the present invention and the accompanying drawings, wherein like reference numerals refer to like elements.

It is to be understood that when an element is referred to as being "comprising" another element in the description of the invention or in the claims, it is not to be construed as being limited to only that element, And the like.

Also, in the description of the invention or the claims, the components named as "means", "parts", "modules", "blocks" refer to units that process at least one function or operation, Each of which may be implemented by software or hardware, or a combination thereof.

Hereinafter, the encryption may use a known symmetric key or an asymmetric key encryption scheme. Accordingly, the encryption key and the decryption key may be a public key or a private key, and the encryption key and the decryption key may be the same key.

Hereinafter, a computing device refers to means for processing digital data.

Hereinafter, the server refers to a subject that is connected to a network such as the Internet network, establishes a communication session with a remote client, performs data processing according to a request from the client, and returns the result.

A client refers to means for uploading or downloading original data to or from a server over a network. For example, a personal computer, a laptop computer, a smart phone, a tablet computer, or the like.

The server and the client are classified according to the connection relationship, and all belong to the computing device.

Hereinafter, the original data owner refers to a user who uploads original data such as contents held by the user to the server, and may be interpreted to mean a computing device used by the user when described as a subject of the action in the present invention. That is, it may refer to a client that accesses a server through a network and performs processing such as data uploading.

Hereinafter, the distribution broker refers to a user who downloads original data from a server and then obtains recovery data and temporarily restores the original data in the memory. In the present invention, when described as a subject of an act, Can be interpreted to mean a device. In other words, it refers to a client that connects to a server through a network and performs processes such as data downloading and data recovery.

Hereinafter, the present invention will be described on the assumption that data that is owned by the original data owner is distributed freely through the network in a state of being destroyed, but the original data is distributed only to the final destination through the authorized distribution broker .

1 is a diagram for explaining a connection relationship between a distribution server and a restoration control server.

1, the original data owner 10 is connected to the distribution server 30 and the restoration control server 40 via a network, respectively.

The distribution broker 20 is also connected to the distribution server 30, the restoration control server 40, and the install server 50 via the network.

The distribution server 30 is a server for distributing and distributing data through a network. For example, data may be distributed in the form of a cloud service.

When the destroyed original data is uploaded to the distribution server 30, the restoration control server 40 receives the restoration data and the decryption key for restoring the original data, and stores Server.

There may be more than one distribution server 30, and various technical means for security may be used in distributing the destroyed original data to clients, but it is also possible to provide original data destroyed by unspecified clients You may.

The restoration control server 40 strictly monitors and manages the restoration and decryption processes of the destroyed original data.

The install server 50 means a space on the network where the original data is finally installed through the distribution broker 20.

It is assumed that the install server 50 itself has sufficient security devices. In the present invention, it is possible to supplement the security vulnerability predicted in the distribution process up to the step of installing the original data in the install server 50 by the distribution broker 20 It deals mainly.

The present invention described below can be executed in the original data owner 10, the distribution broker 20, and the restoration control server 40 as described above.

2 is a block diagram illustrating an example of a configuration of a network using the data for restoration according to an embodiment of the present invention by the network elements including the original data owner 10, distribution broker 20 and restoration control server 40, Describes the process in which the data distribution method is processed.

As shown in Fig. 2,

First, the original data owner 10 encrypts the original data and then destroys the encrypted original data.

As a data encryption method, there is a technique of encrypting a file by dividing each section, and there is a method of modulating the entire file by using a specific key value.

Depending on the encryption method, the amount of data or the interval to destroy the original data may be set differently.

In the present invention, encryption and decryption means encryption and decryption techniques according to known technologies, and known technologies can be used.

In the present invention, destruction of data means replacing at least a part of the original data with dummy data. At this time, the original data before being replaced with the dummy data and the section in which the dummy data is filled are separately separated to generate recovery data.

Both encryption and data destruction are data tampering in that they change the original data to something else,

Cryptography performs encryption or decryption using a key that is independent of the original data and differs from data destruction in that the integrity of the original data is maintained before and after encryption.

In the case of destruction of data, instead of filling meaningless data of some section of original data, original data is separated into data for recovery. Unlike encryption key, data for restoration is dependent on original data. There is also a dependency on the encryption technique because of the difference in the amount of destruction and the amount of destruction.

On the other hand, the biggest difference is that the integrity of the original data is not maintained when the data is destroyed. Since the destroyed data contains dummy data in some places, it is impossible to recover by itself.

3 is a diagram for explaining the concept of data destruction process and data for restoration.

As shown in FIG. 3, in the process of destroying data, data for restoration is generated. The data for restoration includes the location of the section where the original data is destroyed (that is, replaced with dummy data) and the data before destruction.

Preferably, the original data is distributed freely through the network in a state of being destroyed, but it is desirable to keep the size of restoration data to a minimum so as to be easily recoverable by a distribution intermediary who is an authorized user in the final process of distribution.

To do this, it performs encryption and then destroys the original data.

Since it is theoretically possible to recover at least a part of the original data without the recovery data according to the encryption technique, if the encryption is performed for each section such as block encryption, It can be destroyed in such a manner that it is replaced with dummy data by a byte.

The data destruction interval or size can be set and adjusted so that even partial recovery of data is not possible even with a minimum amount of recovery data according to the encryption technique used. This setting may be performed by the operator, but if the encryption method is selected, the corresponding data destruction interval and size may be automatically selected.

When the original data owner 10 encrypts and destroys the original data, the original data owner 10 uploads the encrypted and destroyed original data to the distribution server 30.

Thereafter, the restoration control server 40, which is separate from the distribution server 30, uploads restoration data for restoring the original data.

At this time, the decryption key can be uploaded together.

For example, if a symmetric key is used, the encryption key can be uploaded together with the data for restoration.

The distribution broker 20 downloads the original data encrypted and destroyed through the distribution server 30.

However, even if the downloaded original data has a decryption key, decryption is not performed.

This is because some or all of the original data has been destroyed since it was encrypted. That is, in order to decode the original data, the original data must be restored to the original state.

FIG. 4 is a diagram illustrating a screen in which decoding of original data fails. FIG.

Even if a user or a hacker who is not authorized to the original data obtains original data that is accidentally encrypted and destroyed, even if a decryption key for decryption is obtained, the original data is not decrypted.

According to the known technology, when encryption and decryption are handled by a symmetric key method, the leakage of the key effectively results in the security of the corresponding data being completely released, but this risk is eliminated by the processing as described above.

The same is true for the user having the authority to the original data, and if the data is not restored, the decoding fails as shown in FIG.

Therefore, the distribution broker 20 connects to the restoration control server 40 and requests restoration data before decryption.

Preferably, the distribution broker 20 executes the loader program, and then loads the downloaded original encrypted and destroyed original data into the memory.

Thereafter, the information of the encrypted and destroyed original data may be provided to the restoration control server 40, and the restoration control server 40 may request restoration data for restoration of the file.

The restoration data is an important element for enhancing security, and the restoration control server 40 may provide restoration data to the distribution intermediary 20 through a separate authentication process.

For example, a method of authenticating with the recipient's user information, authenticating with the connection IP address of the distribution broker 20, or counting the number of times of restoration of the original content and authenticating with the remaining number of times Can be used.

When authentication is performed through this process, the restoration control server 40 provides the restoration data to the distribution broker 20.

The distribution intermediary 20 loads the received restoration data into the memory using the loader program being executed and restores the original data on the memory.

The restoration of the original data is performed by confirming the information of the section filled with the dummy data of the original data and then returning the section to the original data by using the restoration data.

Thus, the original data is returned to the state before the destruction.

Thereafter, the distribution intermediary 20 receives the decryption key from the decryption control server 40 and decrypts the decrypted original data.

FIG. 5 is a diagram illustrating an example of recovery of destroyed original data using recovery data. FIG.

This series of processes is temporarily performed only in memory through the loader program being executed.

The distribution broker 20 uses the decrypted original data to install the data in the install server 50, which is the final installation place on the network.

When the installation is completed, the distribution broker 20 terminates the loader program and releases the memory allocated for restoration and decoding of the original data. The restored original data or the original data which has been decoded is not stored locally.

That is, during the process until data is installed and distributed to the install server 50, the original data is always present only in a destroyed state, and is not stored as a file in a state in which integrity is maintained.

Hereinafter, the present invention will be described in terms of the original data owner 10 with reference to FIG.

FIG. 6 is a flowchart showing one aspect of a data distribution method using data for restoration according to the present invention, and the present invention will be described from the viewpoint of the original data owner.

6, the original data owner 10 encrypts the original data using the encryption key (S11).

Then, the encrypted original data is destroyed. The destruction of the encrypted original data is handled by destroying all or part of the original data so as not to be recognized as normal data.

At this time, the original data owner 10 destroys the original data but generates recovery data for recovery (S12).

Without recovery data, destroyed original data can not be recovered by itself.

It is possible to restore at least a part or all of the original data by estimating the file format and kind of the file when the header of the file is damaged or the FAT is damaged in the known technology.

However, in the present invention, since the original data is destroyed corresponding to the encryption technique used after encryption, even partially restoring the original data is not theoretically possible.

On the other hand, recovery data is separately generated for restoration of original data. In the case of the above example, the restoration data may be data including information about which section of the original data has been destroyed and data including original data before the destruction of the section.

As shown in FIG. 3, the original data before the destruction may be included as it is, or the information about the difference between the data before and after the destruction may be included.

When the original data is encrypted and destroyed in this manner, the original data owner 10 uploads the encrypted and destroyed original data to the distribution server 30 (S13).

And, separately from this, the restoration data is uploaded to the restoration control server 40. At this time, the decryption key may also be uploaded to the restoration control server 40 (S14).

On the other hand, the access right to the original data of the distribution broker 20 can be separately set.

In the present invention, the access right to the data for restoration is handled, rather than the access right to the original data file itself is set and processed.

For example, the original data owner 10 can set an ID of an account of the restoration control server 40 from which recovery data can be downloaded, a downloadable area, a downloadable IP address, or a downloadable number of times.

The original data owner 10 sets the authority for the data for restoration and uploads it to the restoration control server 40 together.

Hereinafter, the present invention will be described in terms of the distribution broker 20 with reference to FIG.

FIG. 7 is a flowchart showing one aspect of a data distribution method using restoration data according to the present invention, and the present invention will be described from the viewpoint of a distribution intermediary.

The distribution broker 20 first accesses the distribution server 30 and downloads the encrypted and destroyed original data (S21).

The downloaded original data is destroyed, and as described above, it is impossible to recover without the separate recovery data.

Accordingly, in order to recover the downloaded original data, the distribution broker 20 accesses the restoration control server 40, processes the authentication procedure, and downloads the restoration data (S22).

The authentication process may be performed by explicitly inputting the authentication information (for example, the account ID and the password of the restoration control server 40), but instead of the explicit input of the user, the connection area or IP address of the distribution broker 20, Or may be implicitly processed by the number of downloads of recovery data.

At least a part of the downloaded encrypted data and the destroyed original data are loaded into a memory in the loader program, and the received restoration data is loaded together into the memory, and the restoration is temporarily performed in the memory (S23).

The expression of performing a recovery temporarily means that the recovery is performed only in memory without storing it locally.

Of course, a paging file or temporary file, such as a lack of memory capacity, may be created during the recovery process. They are not intended to store recovered data locally, but merely to be deleted when the recovery is done.

On the other hand, the recovery of the original data can be performed by combining the recovery data with the original data destroyed by a predetermined algorithm.

Thus, the original data is restored to the state before the destruction. In other words, it goes back to the encrypted state.

On the other hand, the distribution intermediary 20 receives the decryption key and temporarily decrypts the restored original data in the memory (S24).

For this, the decryption key may be received from the restoration control server 40. The decryption key may be provided to the distribution intermediary 20 via a path separate from the recovery data.

On the other hand, after the corrupted data is recovered, the distribution intermediary 20 can recognize the original data normally by proceeding with the decryption.

Thereafter, the distribution broker 20 ends the distribution process by installing the restored and decrypted original data in the install server 50, which is the final distribution destination of the original data (S25).

Thereafter, the memory allocated for restoration or decryption of the original data is released, and the loader program is terminated. In other words, although the original key data or the decryption key may exist locally in the distribution intermediary 20, there is no original data that has been restored or original data that has been decrypted.

Hereinafter, the present invention will be described in terms of the restoration control server 40 with reference to FIG.

8 is a flowchart showing an aspect of a data distribution method using data for restoration according to the present invention, and the present invention will be described from the viewpoint of a restoration control server.

8, when there is a request for restoration data from the distribution broker 20, the restoration control server 40 judges whether the restoration control server 40 has received the restoration data from the distribution broker 20, .

Then, the distribution broker 20 authenticates whether or not it has authority for the requested recovery data.

The authentication can be made according to the setting of the original data owner 10.

For example, the downloading may be allowed only when the connection IP address of the distribution broker 20 matches a predetermined IP, or vice versa, and the specific IP address may be blacklisted to not allow downloading.

Or the access right of the data for restoration from the account information of the restoration control server 40 of the distribution broker 20, or the distribution broker 20 may download the restoration data for the number of times already permitted It is possible to decide whether or not to allow the downloading of the data for restoration according to whether or not the data is downloaded.

When the authentication is completed, the restoration control server 40 allows the distribution broker 20 to download the restoration data (S31).

At this time, the provided restoration data corresponds to the data that can be restored by combining the original data with the encrypted and destroyed data by a predetermined algorithm.

Thereafter, when it is confirmed that restoration of the original data from the distribution broker 20 is completed, the restoration control server 40 provides the decryption key to the distribution broker 20 (S32). The decryption key may be provided to the distribution broker 20 via a separate path without passing through the restoration control server 40. [

On the other hand, the restoration control server 40 confirms that the decoding of the original data has been completed by the distribution broker 20, so that the number of downloads of the restoration data, the number of restoration of the original data, One or more pieces of information among the number of times of restoration by the client are updated and stored (S33).

The data distribution method using data for restoration according to the present invention can be implemented in the form of software, which is a set of instructions readable by a computer, and can be recorded on a recording medium.

In this case, the recording medium may include any type of medium readable by a computer, such as DVD-ROM, CD-ROM, hard disk, USB memory, and flash memory.

On the other hand, the expression to be recorded on the recording medium includes not only the case of being recorded on the recording medium of this type but also the case of being provided through a communication line in the form of an intangible carrier wave (Carrier Wave).

The technical idea of the present invention has been described through several embodiments.

It will be apparent to those skilled in the art that various changes and modifications may be made to the embodiments described above from the description of the present invention. Further, although not explicitly shown or described, those skilled in the art can make various modifications including the technical idea of the present invention from the description of the present invention Which is still within the scope of the present invention. The above-described embodiments described with reference to the accompanying drawings are for the purpose of illustrating the present invention, and the scope of the present invention is not limited to these embodiments.

The present invention can be applied to the field of data security technology.

10: Original data owner
20: Distribution broker
30: Distribution Server
40: Restoration control server
50: Install Server

Claims (12)

A computing device,
Encrypting original data using an encryption key;
Destructing encrypted original data, and generating recovery data for recovery;
Uploading encrypted and destroyed original data to the distribution server; And
And uploading the recovery data and the decryption key to the restoration control server. The method according to claim 1,
The data distribution method using recovery data for determining a destruction period of original data according to the encryption technique used in the encryption step in destroying the original data. The method according to claim 1,
Wherein the step of destroying the original data destroys the original data by filling at least a part of the encrypted data with dummy data,
Wherein the restoration data is generated by using the information of the section in which the dummy data is filled and the data before the destruction of the section in which the dummy data is filled. The method according to claim 1,
Wherein the uploading step further includes uploading rights setting information for restoration data including at least one of an IP address, a restoration frequency, and user information in the step of uploading to the restoration control server. A computing device,
Loading the original data encrypted and destroyed in the memory by executing the loader program;
Connecting to the restoration control server, receiving the restoration data for authentication, and loading the restoration data into the memory;
Restoring the original data on a memory using the restoration data through a loader program; And
And the loader program decrypting the restored original data on the memory using the decryption key. 6. The method of claim 5,
After the decrypting step,
And installing the original data decrypted in the memory in the install server, but terminating the loader program without locally storing the original data. 6. The method of claim 5,
Wherein the loader program obtains the recovery period information of the original data and then loads at least a part of the recovery data into the recovery period of the original data to restore the original data, Data distribution method. The server,
Providing data for recovery of the original data after authentication processing if there is a recovery data request for recovery of original data that is encrypted and destroyed from a client connected through a network; And
And providing a decryption key for decrypting the original data to the client. 9. The method of claim 8,
A data distribution method using recovery data for providing recovery data after authenticating at least one of a connection IP address of the client, a number of times of restoration of the original data, and user information of the client in the step of providing the recovery data . 9. The method of claim 8,
Wherein the restoration data includes restoration data including information of an interval in which dummy data on the original data is filled and data of the interval in which the dummy data is filled. 9. The method of claim 8,
The method according to claim 1, further comprising: after the step of providing the decryption key, confirming completion of restoration and decryption of the original data from the client, the number of times of downloading of the restoration data, And updating and storing at least one piece of information among the number of times of restoration by the user. A computer-readable recording medium having stored thereon instructions for executing on a computer a data distribution method using the recovery data according to any one of claims 1 to 11.

Images