KR20220054919A - Cloud-based SaaS type personal information protection apparatus and method - Google Patents

Abstract

Suggested are an apparatus and a method for cloud-based SAAS type personal information protection, capable of protecting personal information of a company (client) by dividing and storing original data in a plurality of tables when storing and managing the personal information in a cloud DB with encryption. The suggested apparatus includes: a first table generation part deidentifying personal information data, and generating a first table in which the deidentified personal information data is recorded; a second table generation part encrypting the personal information data, and generating a second table in which the encrypted personal information data is recorded; a database storing the first and second tables; a list generation part converting the deidentified personal information data in the first table into a list in accordance with a request for a personal information opening service; a search part searching the first table for personal information data corresponding to a request for a search for a specific search target in accordance with the same request, and searching the second table for personal information data corresponding to a request for opening personal information of the specific search target in accordance with the same request; and a decryption part decrypting the encrypted personal information data of the specific search target searched for based on the second table.

Description

Cloud-based SaaS type personal information protection apparatus and method

The present invention relates to a cloud-based SaaS-type personal information protection device and method, and more particularly, to a cloud-based SaaS-type personal information protection that can store and manage personal information of a company (customer company) in a cloud DB. It relates to an apparatus and method.

Due to the recent enforcement of the Personal Information Protection Act, small and medium-sized enterprises (SMEs) are also required to take measures to prevent leakage of personal information. Security services that are relatively cheaper than software construction costs are also required.

In addition, if package-based personal information protection software and hardware are used when introducing personal information leakage prevention security software, purchase and build expensive security software and hardware equipment, and secure security and computer-related personnel necessary to operate them. Therefore, SMEs and individual users are burdened with cost problems.

In addition, since each company has a different personal information leakage prevention policy, a security policy suitable for the characteristics of each company is required, but it is difficult to introduce a customized security policy in small and medium-sized enterprises due to the high cost problem.

Prior art 1: Republic of Korea Patent Registration No. 10-2148937 (cloud server and cloud-based image file processing method) Prior art 2: Republic of Korea Patent Registration No. 10-1321408 (Cloud-based SaaS-type security service providing system and method for protecting personal information)

The present invention has been proposed to solve the above conventional problems, and when storing and encrypting personal information of a company (customer company) in a cloud DB and managing it, it is possible to protect personal information by dividing the original data into a plurality of tables and storing it. The purpose is to provide a cloud-based SARS-type personal information protection device and method.

In order to achieve the above object, a cloud-based SARS-type personal information protection device according to a preferred embodiment of the present invention de-identifies personal information data, and a first table in which de-identified personal information data is recorded. a first table generating unit that generates a second table generation unit for encrypting the personal information data and generating a second table in which the encrypted personal information data is recorded; a database storing the first table and the second table; a list generator for listing de-identified personal information data in the first table according to a request for a personal information viewing service; a search unit for retrieving corresponding personal information data from the first table according to a specific search target search request, and searching for corresponding personal information data from the second table according to the specific search target personal information viewing request; a decryption unit for decrypting the encrypted personal information data of the specific search target searched based on the second table; and a control unit.

The personal information data of the company may be composed of a character string, and the first table generating unit may convert any one of an odd-numbered character and an even-numbered character in the character string into a special character.

The second table generating unit may encode the personal information data of the company after encrypting it with a symmetric key encryption algorithm.

When the control unit receives the personal information viewing service request, it can control the list generation unit to generate the list and output the generated list to the user, and a specific search target search request from the user who has confirmed the list If there is, the search unit is controlled to search for the specific search target based on the first table and output to the user, and if there is a request to view personal information of the specific search target, the search unit is controlled to enter the second table The encrypted personal information data of the specific search target may be searched and the decrypted data may be output to the corresponding user through the decryption unit.

On the other hand, the cloud-based SARS-type personal information protection method is a personal information protection method performed in a cloud-based SARS-type personal information protection device, which de-identifies personal information data and records de-identified personal information data. creating a first table; encrypting the personal information data and generating a second table in which the encrypted personal information data is recorded; storing the first table and the second table; listing de-identified personal information data in the first table according to a request for a personal information viewing service; searching for personal information data corresponding thereto in the first table according to a specific search target search request; searching for personal information data corresponding thereto in the second table according to the request for viewing personal information of the specific search target; and decrypting the encrypted personal information data of the specific search target searched based on the second table.

According to the present invention having such a configuration, there are the following effects.

1. In the existing case, even if encrypted and stored, the administrator could identify personal information on the list because it was decrypted on the list and displayed on the screen. can not be identified, so existing vulnerabilities can be supplemented.

2. The present invention can increase the level of personal information protection because it is necessary to press and confirm the personal information only when necessary, and the history of personal information confirmation (reading) can be used as evidence (eg, evidence for audit). .

3. In the existing case, when the personal information list is viewed after being encrypted, the decryption processing cost and time are required because it is decrypted. However, in the present invention, the personal information shown in the list is not encrypted but de-identified Therefore, when retrieving from the personal information list, there is no need for a separate decryption process. Accordingly, compared to the existing process, processing cost and time are not required.

4. Currently, most SaaS cloud services do not charge a fee for data storage, receive a fee only when data is retrieved, and additionally receive an additional cost for data encryption/decryption. An effect can also be obtained from the human side.

1 is a system configuration diagram to which a cloud-based SARS-type personal information protection device according to an embodiment of the present invention is applied.
2 is a flowchart illustrating an operation of distributing and storing personal information in a cloud-based SARS-type personal information protection device according to an embodiment of the present invention.
3 is a flowchart for explaining an example of using encrypted personal information.
4 to 6 are examples of screens employed in the description of FIG. 3 .

Since the present invention can have various changes and can have various embodiments, specific embodiments are illustrated in the drawings and described in detail.

However, this is not intended to limit the present invention to specific embodiments, and it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification exists, but one or more other features It should be understood that this does not preclude the existence or addition of numbers, steps, operations, components, parts, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. In describing the present invention, in order to facilitate the overall understanding, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted.

1 is a system configuration diagram to which a cloud-based SARS-type personal information protection device according to an embodiment of the present invention is applied.

The system of FIG. 1 may include user terminals 10a to 10n , a network 20 , a SARS server 30 , and a database 50 .

The user terminals 10a to 10n are terminals used by users (eg, administrators) as enterprise-side terminals.

A user (eg, an administrator) manipulates any one of the user terminals 10a to 10n to access the SARS server 30 through the network 20 and then can view (read), write, delete personal information, etc. there is. Accordingly, each administrator may be given a predetermined authority in advance. For example, manager 1 may only be able to read personal information, manager 2 may not be able to access the SARS server 30 , and manager 3 may be able to read, write, and delete personal information all.

The user terminals 10a to 10n may be implemented as a fixed computer (eg, PC), a portable terminal, or a portable computer. Here, the portable terminal is a wireless communication device that guarantees portability and mobility, and includes a Personal Communication System (PCS), a Global System for Mobile communications (GSM), a Personal Digital Cellular (PDC), a Personal Handyphone System (PHS), and a Personal Digital (PDA). Assistant), International Mobile Telecommunication (IMT)-2000, Code Division Multiple Access (CDMA)-2000, W-Code Division Multiple Access (W-CDMA), Wireless Broadband Internet (Wibro) terminals, etc. ) based wireless communication device. Portable computers may include notebook computers, laptops, and the like.

In addition, the user terminals 10a to 10n may be various smart devices such as a smart phone, a smart note, a tablet PC, and a wearable computer.

The network 20 may be implemented as a wired network such as a local area network (LAN), a wide area network (WAN), or a value added network (VAN). On the other hand, the network 20 is a mobile communication network (mobile radio communication network), satellite communication network, Bluetooth (Bluetooth), Wibro (Wireless Broadband Internet), HSDPA (High Speed Downlink Packet Access), LTE (Long Term Evolution), such as all It can be implemented as a kind of wireless network. If necessary, the network 20 may be a network in which wired and wireless are mixed.

When the SaaS (Software as a Service) server 30 stores personal information data (referred to as the original or original data) of the company (customer company) in the database 50, the original data is divided into two tables and the database 50 can be stored in In this case, original data converted in different ways may be recorded in the two tables.

In addition, when there is a personal information viewing service request, a specific search target search request, a specific search target personal information viewing request, etc. from the user terminals 10a to 10n, the SARS server 30 is based on the two tables described above. Information corresponding to the content requested by the corresponding user terminal may be provided.

Meanwhile, the SARS server 30 may manage a history (record) of a user (administrator) reading personal information through the user terminals 10a to 10n.

The above-described SARS server 30 may also be referred to as a SARS platform. The SARS server 30 may be an example of a cloud-based SaaS type personal information protection device described in the claims of the present invention.

In detail, the SARS server 30 includes an interface unit 32 , a first table generating unit 34 , a second table generating unit 36 , a list generating unit 38 , a search unit 40 , and a decoding unit 42 . ), and a control unit 44 .

The interface unit 32 receives predetermined information (eg, a personal information viewing service request, a specific search target search request, and a specific search target personal information viewing request) from the enterprise-side user terminals 10a to 10n through the network 20 . etc.), and may output corresponding information to the enterprise-side user terminals 10a to 10n through the network 20 .

Accordingly, the interface unit 32 includes a receiver (not shown) for receiving input information from the enterprise-side user terminals 10a to 10n, and a transmitter for outputting output information to the enterprise-side user terminals 10a to 10n ( not shown) may be included.

The first table generation unit 34 de-identifies the personal information data (referred to as the original or original data) of the company (customer company), and creates a first table in which the de-identified company personal information data is recorded. can

For example, in the case of de-identification processing, an even-numbered character in a character string may be converted into a predetermined special character (eg, "*"). Accordingly, in the case of a name, "Hong Gil-dong" may be converted into "Hong*dong", and in the case of a phone number, "01012345678" may be converted into "0*0*2*4*6*8". For email "honggildong@naver.com" can be converted to "h*n*g*l*o*g*n*v*r*c*m", for date of birth "19931108" is "1* 9*1*0*", and in the case of GPS information, "37.12345, 128.12345" may be converted into "3*.*2*4*, *2*.*2*4*".

Of course, if necessary, an odd-numbered character may be converted into a predetermined special character instead of an even-numbered character, and other characters (eg, #, etc.) may be used other than the above-described "*".

The second table generating unit 36 encrypts the personal information data (referred to as the original or original data) of the company (customer company) with a symmetric key encryption algorithm, and generates a second table in which the encrypted personal information data of the company is recorded. can

For example, in the case of encryption, a plaintext string (eg, JSON) may be encrypted using a symmetric key encryption algorithm such as Advanced Encryption Standard (AES), and then encoded using an encoding method such as Base64. Accordingly, in the case of a name, "Gildong Hong" may be encrypted as "6rO97Zi466a8", and in the case of a phone number, "01012345678" may be encrypted as "MDEwMTIzNDU2Nzg=". For email, "honggildong@naver.com" can be encrypted with "aG9uZ2dpbGRvbmdAbmF2ZXIuY29t", for date of birth "19931108" can be encrypted with "MTk5MzExMDg=", for GPS information "37.12345, 128.12345" can be "MzcuMTIzNDUscuMTIzNDUN It can be encrypted with =".

The list generator 38 may list the personal information data (ie, de-identified personal information data) of the first table stored in the database 50 .

The search unit 40 may search the database 50 for personal information data corresponding thereto based on a request (or search request) of a user (administrator) to view personal information data through the user terminals 10a to 10n.

In other words, when the manager of the company (customer company) accesses the SARS server 30 through the user terminal (any one of 10a to 10n) and the network 20 to view personal information and requests a personal information viewing service, First, the list generator 38 may generate and provide a list (that is, including a plurality of de-identified personal information data). In this case, since the list generator 38 lists all personal information data (ie, non-identified personal information data) of the first table, a plurality of de-identified personal information data is loaded on the list and the corresponding user terminal will be sent to

Thereafter, when there is a specific search target search request from the user who has checked the list, the search unit 40 first searches the specific search target based on the first table. In this case, if "Hong Gil-dong" is input as a specific search target, the search unit 40 replaces "Hong*dong" with "Hong*dong" and then all individuals matching "Hong*dong" among the de-identified personal information data in the first table. Information data can be retrieved.

Afterwards, if there is a request to view the personal information of the specific search target to see more accurate personal information of the specific search target, the search unit 40 searches for the personal information data of the specific search target encrypted in the second table. It is provided to the decoding unit 42 . In this case, for a request to view personal information of a specific search target, accurate information such as ID, email, name, nickname, gender, date of birth, and mobile phone number of the specific search target will be input from the user terminal. The decoding unit 42 decodes the received data and outputs it.

The above-described list generation, search, and decoding operations may be sequentially performed under the control of the controller 44 .

The decryption unit 42 may decrypt the personal information data encrypted and recorded in the second table.

In particular, the decryption unit 42 may decrypt the encrypted personal information data provided from the search unit 40 .

Here, the decryption proceeds in the reverse order of encryption in the second table generating unit 36 . For example, after decoding using the method used when encoding with Base64, etc., it is decrypted with a symmetric key encryption algorithm such as AES to extract a plaintext string (eg, JSON).

The controller 44 controls the overall operation of the SARS server 30 .

That is, the control unit 44 can control the generation of the first table and the second table as described above, control the generation of the above-described list, control the above-described search, and perform the above-described decoding. can be controlled

Also, the controller 44 may store the first table generated by the first table generator 34 and the second table generated by the second table generator 36 in the database 50 .

The database 50 may store the uploaded personal information data (referred to as original or original data) of the company (customer company).

Also, the database 50 may store the first table and the second table.

Meanwhile, the database 50 may store a history (record) of a user (administrator) reading personal information data.

Accordingly, the database 50 includes an original data storage unit for storing the original data, a first table storage unit (not shown) for storing the first table, a second table storage unit for storing the second table (not shown), And it may include a reading history information storage unit (not shown) for storing the personal information data reading history.

In addition, each of the original data stored in the original data storage unit may be matched one-to-one with each of the personal information data recorded in the first table and the second table.

Although the SARS server 30 and the database 50 are configured separately in the above, it can be seen that the database 50 is included in the SARS server 30 .

2 is a flowchart illustrating an operation of distributing and storing personal information in a cloud-based SARS-type personal information protection device according to an embodiment of the present invention.

First, the SARS server 30 receives one or more personal information data of one or more companies to be uploaded through the user terminals 10a to 10n of one or more companies ( S10 ). For example, the interface unit 32 of the SARS server 30 may receive one or more personal information data of one or more companies through the network 20 . One or more personal information data (original or original data) of the uploaded company is stored in the original data storage unit of the database 50 .

Thereafter, the first table generating unit 34 of the SARS server 30 de-identifies the personal information data (referred to as the original or original data) of the company (customer company), and the de-identified personal information data of the company After the recorded first table is created, the first table is stored in the database 50 (S20). For example, the first table generating unit 34 may convert an even-numbered character in a character string into a predetermined special character (eg, “*”) when de-identification is performed. Accordingly, in the case of a name, "Hong Gil-dong" may be converted into "Hong*dong", and in the case of a phone number, "01012345678" may be converted into "0*0*2*4*6*8". For email "honggildong@naver.com" can be converted to "h*n*g*l*o*g*n*v*r*c*m", for date of birth "19931108" is "1* 9*1*0*", and in the case of GPS information, "37.12345, 128.12345" may be converted into "3*.*2*4*, *2*.*2*4*".

Then, the second table generating unit 36 of the SARS server 30 encrypts the personal information data (referred to as the original or original data) of the company (customer company) with a symmetric key encryption algorithm, and the encrypted personal information data of the company is After the recorded second table is created, the second table is stored in the database 50 (S30). For example, when performing encryption, the second table generator 36 encrypts a plaintext string (eg, JSON) with a symmetric key encryption algorithm such as AES (Advanced Encryption Standard) and encodes it using an encoding method such as Base64. there is. Accordingly, in the case of a name, "Gildong Hong" may be encrypted as "6rO97Zi466a8", and in the case of a phone number, "01012345678" may be encrypted as "MDEwMTIzNDU2Nzg=". For email, "honggildong@naver.com" can be encrypted with "aG9uZ2dpbGRvbmdAbmF2ZXIuY29t", for date of birth "19931108" can be encrypted with "MTk5MzExMDg=", for GPS information "37.12345, 128.12345" can be "MzcuMTIzNDUscuMTIzNDUN It can be encrypted with =".

3 is a flowchart for explaining an example of using encrypted personal information, and FIGS. 4 to 6 are examples of screens employed in the description of FIG. 3 .

First, the SARS server 30 receives a personal information viewing service request from the company side (S40). That is, the manager of the company (customer company) operates the user terminal (any one of 10a to 10n) to receive the personal information viewing service, connects to the SARS server 30 through the network 20, and provides the personal information viewing service. request. Accordingly, the SARS server 30 may receive a personal information viewing service request.

Accordingly, the SARS server 30 generates a list including a plurality of de-identified personal information data and provides it to the corresponding user terminal (S42). In this case, the list generating unit 38 in the SARS server 30 lists all personal information data (ie, de-identified personal information data) in the first table under the control of the control unit 44 . Thus, a plurality of de-identified personal information data may be loaded on the list and transmitted to the corresponding user terminal. In this case, an example of the list shown in the user terminal may be as illustrated in FIG. 4 . Conventionally, even if it is encrypted and stored, it is decrypted on the list and displayed on the screen, so that the administrator can identify personal information on the list. Accordingly, in the prior art, personal information of people who appeared on the list when taking a picture or capturing the list screen could be easily leaked. However, according to the embodiment of the present invention as described above, even when the list is viewed, the personal information data on the list is de-identified, so that the administrator cannot identify the personal information, so the existing weakness can be supplemented. Of course, it is possible to prevent leakage of photos, screenshots, copies, etc. On the other hand, in the conventional case, since it is decrypted when the personal information list is viewed after encryption, the decryption processing cost and time are required. Therefore, when retrieving from the personal information list, there is no need for a separate decryption process, so the process cost and time are not required compared to the existing one.

Next, after the administrator checks the list on the user terminal, a specific search target search request may be made. Accordingly, when the SARS server 30 receives a specific search target search request from the user terminal (“Yes” in S44), the SARS server 30 selects a specific search target from among the personal information data de-identified in the first table in the database 50. Matching personal information data is searched (S46). For example, if "Hong Gil-dong" is input as a specific search target, the search unit 40 in the SARS server 30 replaces "Hong * Dong" with "Hong * Dong" and then de-identified personal information in the first table in the database 50 Search all personal information data matching "Hong*Dong" among the data.

If there are "Honggil-dong", "Hongniil-dong", "Hongdil-dong", and "Hongil-dong" as the original name, since they are all "Hong*dong", the search unit 40 of the SARS server 30 provides the personal information data of four people. is sent to the corresponding user terminal through the interface unit 32 and the network 20 (S48). Accordingly, all four personal information data (eg, as non-identified information, including ID, e-mail, name, nickname, gender, date of birth, mobile phone number, etc.) is displayed in the corresponding user terminal.

Thereafter, in order for the user (administrator) to accurately find the specific search target (eg, Hong Gil-dong) exemplified above, the user (administrator) will search for the specific search target by pressing the four corresponding people one by one. Since this is to confirm (read) personal information only when necessary, the level of personal information protection can be increased, and the history of personal information verification can be used as evidence (eg, evidence for audit).

Alternatively, in order for the user to accurately find the specific search target (eg, Hong Gil-dong) exemplified above, detailed information (eg, ID, email, name, nickname, gender, date of birth, mobile phone number) of the specific search target as in FIG. 5 . ) can be entered correctly.

As shown in FIG. 5 , when detailed information of a specific search target (eg, Hong Gil-dong) is accurately input, a request for viewing personal information of a specific search target based on this is transmitted to the SARS server 30 through the network 20 .

As such, when receiving a request for viewing personal information of a specific search target (eg, including detailed information of a specific search target) (“Yes” in S50), the search unit 40 of the SARS server 50 2 The personal information data of the specific search target encrypted in the table is searched and provided to the decryption unit 42 . The decoding unit 42 decodes the received data and outputs it. At this time, the decryption unit 42 decrypts only one piece of personal information of a specific search target as a target.

Accordingly, the personal information data (decrypted) of a specific search target that the administrator wants to view is accurately displayed on the user terminal (S52).

And, since the record read by the administrator is stored as a history (see FIG. 6 ) in the database 50 under the control of the control unit 44 , it can be utilized as a personal information reading trace (evidence for audit) later.

In addition, the cloud-based SARS-type personal information protection method of the present invention described above can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, and optical data storage device. In addition, the computer-readable recording medium is distributed in a computer system connected through a network, so that the computer-readable code can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the method can be easily inferred by programmers in the art to which the present invention pertains.

As described above, the best embodiment has been disclosed in the drawings and the specification. Although specific terms have been used herein, they are only used for the purpose of describing the present invention and are not used to limit the meaning or scope of the present invention described in the claims. Therefore, it will be understood by those skilled in the art that various modifications and equivalent other embodiments are possible therefrom. Accordingly, the true technical protection scope of the present invention should be defined by the technical spirit of the appended claims.

10a ~ 10n: user terminal 20: network
30: SARS server 32: interface unit
34: first table generating unit 36: second table generating unit
38: list generation unit 40: search unit
42: decoding unit 44: control unit
50: database

Claims (7)

a first table generation unit for de-identifying personal information data and generating a first table in which de-identified personal information data is recorded;
a second table generation unit for encrypting the personal information data and generating a second table in which the encrypted personal information data is recorded;
a database storing the first table and the second table;
a list generator for listing de-identified personal information data in the first table according to a request for a personal information viewing service;
a search unit for retrieving corresponding personal information data from the first table according to a specific search target search request, and searching for corresponding personal information data from the second table according to the specific search target personal information viewing request;
a decryption unit for decrypting the encrypted personal information data of the specific search target searched based on the second table; and
including; a control unit;
A cloud-based SARS-type personal information protection device. The method of claim 1,
The company's personal information data consists of character strings,
The first table generating unit converts any one of an odd-numbered character and an even-numbered character in the character string into a special character,
A cloud-based SARS-type personal information protection device. The method of claim 1,
The second table generation unit,
Encoding after encrypting the personal information data of the company with a symmetric key encryption algorithm,
A cloud-based SARS-type personal information protection device. The method of claim 1,
The control unit is
Upon receiving the personal information viewing service request, the list generation unit is controlled to generate the list and output the generated list to the user,
If there is a specific search target search request from the user who has checked the list, the search unit is controlled to search for the specific search target based on the first table and output to the corresponding user,
When there is a request to view personal information of the specific search target, controlling the search unit to search for the personal information data of the specific search target encrypted in the second table, and outputting the decrypted data to the user through the decryption unit,
A cloud-based SARS-type personal information protection device. A personal information protection method performed in a cloud-based SARS-type personal information protection device, comprising:
de-identifying the personal information data and generating a first table in which the de-identified personal information data is recorded;
encrypting the personal information data and generating a second table in which the encrypted personal information data is recorded;
storing the first table and the second table;
listing de-identified personal information data in the first table according to a request for a personal information viewing service;
searching for personal information data corresponding thereto in the first table according to a specific search target search request;
searching for personal information data corresponding thereto in the second table according to the request for viewing personal information of the specific search target; and
Decrypting the encrypted personal information data of the specific search target searched based on the second table;
A cloud-based SARS-type personal information protection method. 6. The method of claim 5,
The company's personal information data consists of character strings,
The de-identification in the step of generating the first table converts any one of the odd-numbered characters and the even-numbered characters into a special character in the character string,
A cloud-based SARS-type personal information protection method. 6. The method of claim 5,
Creating the second table comprises:
Encoding after encrypting the personal information data of the company with a symmetric key encryption algorithm,
A cloud-based SARS-type personal information protection method.

Images