KR20220084626A - Data analysis service system and data analysis service method using the system - Google Patents

Abstract

Disclosed are a data analysis service system capable of performing data analysis while protecting original information, and a data analysis service method using the same. This data analysis service system includes a blockchain system and a data analysis service server. The block chain system includes a plurality of nodes storing at least one cipher text formed by encrypting at least one piece of original information using a homomorphic encryption method, and at least one decryption key capable of decrypting the cipher text. . The data analysis service server receives the ciphertext from any one of the nodes (hereinafter referred to as a 'target node'), analyzes the ciphertext to generate an analysis result, and uses the analysis result to create a service As described above, as data analysis proceeds through the encrypted text of the original information rather than the original information itself, data analysis may proceed while protecting the original information.

Description

Data analysis service system and data analysis service method using the same

The present invention relates to a data analysis service system and a data analysis method using the same, and to a data analysis service system capable of providing a service by analyzing collected data and a data analysis method using the same.

Currently, enormous amounts of information are being generated and accumulated in various databases. With the development of big data technology, useful information for any purpose can be extracted from such accumulated information. For example, Korean Patent Registration No. 10-1831959 (published on February 26, 2018) discloses a 'cloud service system that provides a big data analysis environment immediately with a big data analysis module'.

However, in the existing big data analysis system, as the analysis service is performed using the original data as it is, the security problem of the original data may arise. That is, when the original data contains personal information or important information that requires security, it should be possible to conduct analysis while protecting such information.

Accordingly, an object of the present invention is to provide a data analysis service system capable of performing data analysis while protecting original information.

In addition, another object to be solved by the present invention is to provide a data analysis service method using the data analysis service system.

A data analysis service system according to an embodiment of the present invention includes a block chain system and a data analysis service server. The block chain system includes a plurality of nodes storing at least one cipher text formed by encrypting at least one original information using a homomorphic encryption method, and at least one decryption key capable of decrypting the cipher text. . The data analysis service server receives the cipher text from any one of the nodes (hereinafter referred to as a 'target node'), analyzes the cipher text to generate an analysis result, and uses the analysis result to create a service

Any one of the nodes (hereinafter referred to as an 'information receiving node') receives the original information from the information providing terminal, encrypts the received original information using a homomorphic encryption method, and then encrypts the ciphertext and after generating the decryption key, the cipher text and the decryption key may be propagated to the nodes. The nodes may store the cipher text and the decryption key propagated from the information receiving node.

The information receiving node receives the original information from the information providing terminal, encrypts the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, and then generates the cipher text and the decryption key. The key and information identification information corresponding to the original information may be propagated to the nodes.

The nodes may store the cipher text and the decryption key propagated from the information receiving node, and store the information identification information propagated from the information receiving node in their respective original information books.

The information identification information may include information extracted from the original information.

The data analysis service server may transmit an information request signal including the information identification information to the target node. The target node may compare the information identification information included in the information request signal with the original information book, extract the cipher text corresponding to the information identification information, and then transmit the cipher text to the data analysis service server.

The data analysis service server receives a service request signal for requesting the service from the user terminal, generates the information request signal in response to the service request signal, and transmits it to the target node, and then from the target node The received encrypted text may be analyzed to generate the analysis result, and the service may be generated using the analysis result and then transmitted to the user terminal.

Next, in the data analysis service method according to an embodiment of the present invention, at least one ciphertext formed by encrypting at least one original information in a block chain system including a plurality of nodes using a homomorphic encryption method, and the storing at least one decryption key capable of decrypting the ciphertext; receiving, by a data analysis service server, the encrypted text from any one of the nodes (hereinafter referred to as a 'target node'); and generating, by the data analysis service server, an analysis result by analyzing the encrypted text, and generating an arbitrary service by using the analysis result.

Storing the cipher text and the decryption key may include: receiving, by any one of the nodes (hereinafter, referred to as an 'information receiving node') the original information from an information providing terminal; generating, by the information receiving node, the received original information by using a homomorphic encryption method to generate the cipher text and the decryption key, and then propagating the cipher text and the decryption key to the nodes; and storing, by the nodes, the cipher text and the decryption key propagated from the information receiving node.

In the step of propagating the cipher text and the decryption key to the nodes, the information receiving node encrypts the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, The cipher text, the decryption key, and information identification information corresponding to the original information may be propagated to the nodes.

In the step of storing the cipher text and the decryption key, the nodes store the cipher text and the decryption key propagated from the information receiving node, and store the information identification information propagated from the information receiving node into their original information books can be stored in

The information identification information may include information extracted from the original information.

In the step of propagating the cipher text and the decryption key to the nodes, the information receiving node encrypts the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, and After generating the information identification information using the information, the cipher text, the decryption key, and the information identification information may be propagated to the nodes.

Receiving the encrypted text may include: transmitting, by the data analysis service server, an information request signal including the information identification information to the target node; extracting, by the target node, the cipher text corresponding to the information identification information by comparing the information identification information included in the information request signal with the original information book; and receiving, by the data analysis service server, the extracted ciphertext from the target node.

The transmitting of the information request signal to the target node may include: receiving, by the data analysis service server, a service request signal for requesting the service from a user terminal; and generating, by the data analysis service server, the information request signal in response to the service request signal, and transmitting the generated information request signal to the target node.

In the step of generating the service, the data analysis service server analyzes the ciphertext received from the target node to generate the analysis result, and generates the service using the analysis result and transmits it to the user terminal. have.

As described above, according to the data analysis service system and data analysis method using the data analysis service system according to the present invention, after the data analysis service server receives the cipher text in which the original information is encrypted by the homomorphic encryption method from the block chain system, the cipher text is As an arbitrary service is created by analyzing it while it is encrypted, data analysis of the original information may be performed while protecting the original information.

1 is a conceptual diagram illustrating a data analysis service system according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating a data analysis method performed by the data analysis service system of FIG. 1 .
FIG. 3 is a conceptual diagram illustrating a data analysis method performed by the data analysis service system of FIG. 1 .

Since the present invention can have various changes and can have various forms, specific embodiments are illustrated in the drawings and described in detail in the text.

However, this is not intended to limit the present invention to the specific disclosed form, it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention. Terms such as first, second, etc. may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. In the present application, terms such as “comprise” or “have” are intended to designate that a feature, number, step, operation, component, part, or combination thereof described in the specification is present, and includes one or more other features or It should be understood that the existence or addition of numbers, steps, operations, components, parts, or combinations thereof does not preclude in advance the possibility of addition.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings.

1 is a conceptual diagram illustrating a data analysis service system according to an embodiment of the present invention.

Referring to FIG. 1 , the data analysis service system according to this embodiment is a block chain system 10 including a plurality of nodes 12 , an information providing terminal 20 , a data analysis service server 30 and a user terminal (40) may be included.

The block chain system 10 transmits the block generated in any one of the nodes 12 to other nodes and then connects it with other blocks in a chain form to share information with high security. It may be an information sharing system. For example, if any one of the nodes 12 collects or generates arbitrary information, generates a block through verification, and then propagates the block to the nodes 12 including itself, the node Each of the blocks 12 can be stored by linking the received block to a previously stored block chain to form a new block chain.

The information providing terminal 20 is connected to at least one of the nodes 12 through a wired/wireless network, for example, the Internet, and can transmit information desired to be shared in a secure manner to the corresponding node. The information providing terminal 20 may be a smart device such as a smart phone or a tablet PC, or a computer system such as a desktop, a notebook computer, or a server.

The data analysis service server 30 may be connected to at least one of the nodes 12 through a wired/wireless network, for example, the Internet, and exchange signals with each other. For example, the data analysis service server 30 may receive various data by requesting information required from any one of the nodes 12 . In addition, the data analysis service server 30 may be connected to at least one user terminal 40 to provide various information or services. In this case, the user terminal 40 may be a smart device such as a smart phone or a tablet PC, or a computer system such as a desktop or a laptop computer.

Hereinafter, an information comparison verification method using the information comparison verification system described above will be described in detail.

FIG. 2 is a flowchart illustrating a data analysis method performed by the data analysis service system of FIG. 1 , and FIG. 3 is a conceptual diagram illustrating the data analysis method performed by the data analysis service system of FIG. 1 .

2 and 3 , first of all, any one of the nodes 12 (hereinafter, referred to as an 'information receiving node') is at least one which is securely shared from the information providing terminal 20 . It is possible to receive the original information of (S10). That is, after generating the original information, the information providing terminal 20 may connect to the information receiving node and transmit the original information.

Subsequently, the information receiving node may generate at least one ciphertext and at least one decryption key capable of decrypting the ciphertext by encrypting the original information using a homomorphic encryption method (S20). In this case, the information receiving node may further generate information identification information for the original information by using the original information. In this case, the information identification information may include information extracted from the original information, for example, keyword information or summary information.

Next, the information receiving node may propagate the cipher text, the decryption key, and the information identification information to the nodes 12 (S30).

Subsequently, the nodes 12 may store the cipher text and the decryption key propagated from the information receiving node, and store the information identification information propagated from the information receiving node in their respective original information books (S40). ).

Subsequently, the data analysis service server 30 may receive a service request signal for requesting a service from the outside, for example, from the user terminal 40 (S50). That is, the user terminal 40 may provide the service request signal to the data analysis service server 30 .

Subsequently, the data analysis service server 30 may transmit an information request signal including the information identification information to any one of the nodes 12 (hereinafter, referred to as a 'target node') (S60). For example, the data analysis service server 30 may generate the information request signal in response to the service request signal and transmit it to the target node. Specifically, for example, the data analysis service server 30 extracts information including the information identification information, for example, keyword or summary information, from the information request signal, and then extracts the information including the information identification information. A request signal may be generated and transmitted to the target node.

Next, the target node may compare the information identification information included in the information request signal with the original information book to extract the ciphertext corresponding to the information identification information (S70).

Subsequently, the data analysis service server 30 may receive the ciphertext from the target node (S80). That is, the target node may transmit the extracted ciphertext to the data analysis service server 30 .

Next, the data analysis service server 30 may generate an analysis result by analyzing the ciphertext received from the target node, and then may generate the service using the analysis result (S90). In this case, the data analysis service server 30 may generate the analysis result by analyzing the encrypted text while it is encrypted.

Subsequently, the data analysis service server 30 may transmit the service to the user terminal 40 (S100).

As a result, the user terminal 40 can perform the service. For example, when the original information is medical information, the service may be a service using the medical information, for example, a disease analysis service. Alternatively, when the original information is financial information, the service may be a service utilizing the financial information, for example, a financial analysis service.

As described above, according to this embodiment, after the data analysis service server 30 receives the cipher text in which the original information is encrypted by the homomorphic encryption method from the block chain system 10, the cipher text is encrypted As the service is created by analyzing the original information, data analysis on the original information may be performed while protecting the original information.

In the foregoing detailed description of the present invention, although it has been described with reference to preferred embodiments of the present invention, those skilled in the art or those having ordinary knowledge in the art will have the spirit of the present invention described in the claims to be described later. And it will be understood that various modifications and variations of the present invention can be made without departing from the technical scope.

10: Blockchain system 12: Node
20: information providing terminal 30: data analysis service server
40: user terminal

Claims (14)

A block chain system including at least one cipher text formed by encrypting at least one piece of original information using a homomorphic encryption method, and a plurality of nodes storing at least one decryption key capable of decrypting the cipher text; and
Data analysis that receives the cipher text from any one of the nodes (hereinafter referred to as a 'target node'), analyzes the cipher text to generate an analysis result, and generates an arbitrary service using the analysis result A data analysis service system comprising a service server. According to claim 1,
Any one of the nodes (hereinafter referred to as 'information receiving node')
After receiving the original information from the information providing terminal, encrypting the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, the cipher text and the decryption key are propagated to the nodes make it,
the nodes are
and storing the cipher text and the decryption key propagated from the information receiving node. 3. The method of claim 2,
The information receiving node
After receiving the original information from the information providing terminal, encrypting the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, the cipher text, the decryption key and the original information are propagating corresponding information identification information to the nodes;
the nodes are
and storing the encrypted text and the decryption key propagated from the information receiving node, and storing the information identification information propagated from the information receiving node in respective original information books. 4. The method of claim 3,
The information identification information is
Data analysis service system comprising information extracted from the original information. 5. The method of claim 4,
The data analysis service server
Transmitting an information request signal including the information identification information to the target node,
The target node is
Comparing the information identification information included in the information request signal with the original information book, extracting the cipher text corresponding to the information identification information, and then transmitting the cipher text to the data analysis service server service system. 6. The method of claim 5,
The data analysis service server
receiving a service request signal for requesting the service from the user terminal, generating the information request signal in response to the service request signal, and transmitting the information request signal to the target node;
The data analysis service system, characterized in that by analyzing the ciphertext received from the target node, the analysis result is generated, and the service is generated using the analysis result and then transmitted to the user terminal. Storing, by a blockchain system including a plurality of nodes, at least one cipher text formed by encrypting at least one piece of original information using a homomorphic encryption method, and at least one decryption key capable of decrypting the cipher text ;
receiving, by a data analysis service server, the encrypted text from any one of the nodes (hereinafter referred to as a 'target node'); and
and generating, by the data analysis service server, an analysis result by analyzing the ciphertext, and generating an arbitrary service by using the analysis result. 8. The method of claim 7,
The step of storing the cipher text and the decryption key is
receiving, by any one of the nodes (hereinafter, referred to as an 'information receiving node'), the original information from an information providing terminal;
generating, by the information receiving node, the received original information by using a homomorphic encryption method to generate the cipher text and the decryption key, and then propagating the cipher text and the decryption key to the nodes; and
and storing, by the nodes, the cipher text and the decryption key propagated from the information receiving node. 9. The method of claim 8,
In the step of propagating the cipher text and the decryption key to the nodes,
After the information receiving node encrypts the received original information in a homomorphic encryption method to generate the cipher text and the decryption key, the information identification information corresponding to the cipher text, the decryption key and the original information is obtained. propagate to the nodes,
In the step of storing the cipher text and the decryption key,
The data analysis service method, characterized in that the nodes store the cipher text and the decryption key propagated from the information receiving node, and store the information identification information propagated from the information receiving node in their respective original information books. 10. The method of claim 9,
The information identification information is
Data analysis service method comprising information extracted from the original information. 11. The method of claim 10,
In the step of propagating the cipher text and the decryption key to the nodes,
The information receiving node encrypts the received original information using a homomorphic encryption method to generate the cipher text and the decryption key, and after generating the information identification information using the original information, the cipher text; The data analysis service method, characterized in that propagating the decryption key and the information identification information to the nodes. 8. The method of claim 7,
Receiving the encrypted text is
transmitting, by the data analysis service server, an information request signal including the information identification information to the target node;
extracting, by the target node, the cipher text corresponding to the information identification information by comparing the information identification information included in the information request signal with the original information book; and
and receiving, by the data analysis service server, the extracted ciphertext from the target node. 13. The method of claim 12,
Transmitting the information request signal to the target node
receiving, by the data analysis service server, a service request signal for requesting the service from a user terminal; and
and transmitting, by the data analysis service server, to the target node after generating the information request signal in response to the service request signal. 14. The method of claim 13,
In the step of creating the service,
Data analysis service method, characterized in that the data analysis service server analyzes the encrypted text received from the target node to generate the analysis result, and generates the service using the analysis result and transmits it to the user terminal .

Images