JP7190035B2 - Encryption system and method for personal information processing - Google Patents

Description

The present invention relates to encryption/decryption systems and methods for personal information processing. More particularly, the present invention relates to an encryption/decryption system and method that enhances security by encrypting personal information using different versions of encryption keys.

Recently, as computer technology develops, more and more companies are adopting Enterprise Resource Planning (ERP) solution software, which is a computer system for business operations related to corporate management and management. Using such ERP solution software, companies will handle a large amount of data necessary for company management and management, such as finance, production, and inventory.

Data handled in ERP solutions may contain personal information and confidential information.

A common method of processing personal information or confidential information is to store the data in a storage destination (eg, database) after encrypting the data. Most of the encryption/decryption of stored data is performed based on a pre-generated secret key, and unless there are special circumstances, the preset secret key will be used forever. In other words, the normal encryption/decryption method permanently uses a secret key once generated.

According to the conventional encryption/decryption method, there is a problem that all the data stored in the database can be leaked if the private key is leaked.

Therefore, there is a need to provide a method for flexibly managing private keys used for encryption/decryption.

The problem to be solved by the present invention is to improve security by encrypting personal information using encryption keys of different versions in order to solve the problems of the conventional methods. / to provide a decoding system and method.

According to one aspect of the present invention, a secret key management module that manages at least one secret key and version information corresponding to each secret key, and receives an encryption request including predetermined encryption target information from an encryption request terminal. an encryption request receiving module that responds to the encryption request, requests the private key management module to provide a private key, and receives an encrypted private key and version information of the encrypted private key from the private key management module. an encryption module for generating encrypted information corresponding to the encryption target information by encrypting the encryption target information using the received encryption private key; and a cipher corresponding to the encryption target information. a transmission module for transmitting encryption information and version information of the encrypted private key to the user terminal, wherein the private key management module generates a new private key if a predetermined key update condition is met; and Giving new version information to the generated new secret key, storing the new secret key and the new version information given to the new secret key in a key storage destination, and responding to the secret key provision request of the encryption module. and provides the most recently generated latest private key and version information of the latest private key, and the encryption request terminal provides encrypted information corresponding to the encryption target information and version information corresponding to the encrypted information. An encryption system is provided that stores -where the version information corresponding to the encrypted information is the version information of the private key used to generate the encrypted information- in a database.

In one embodiment, the encryption system includes a decryption request receiving module for receiving a decryption request including predetermined decryption target information and version information corresponding to the decryption target information from a decryption request terminal; a decryption module for requesting a decryption private key corresponding to version information corresponding to the decryption target information from the secret key management module, and decrypting the decryption target information using the received decryption private key; may contain.

In one embodiment, the encryption module further generates hash information corresponding to the encryption target information, and the transmission module further transmits hash information corresponding to the encryption target information to the user terminal. , the encryption request terminal may further store hash information corresponding to the encryption target information in the database.

In one embodiment, the encryption system receives a decryption request from a decryption request terminal including predetermined decryption target information, hash information corresponding to the decryption target information, and version information corresponding to the decryption target information. and a decryption private key corresponding to the version information corresponding to the decryption target information is requested from the private key management module, and the decryption is performed using the received decryption private key. The decryption module further includes a decryption module for decrypting the information to be decrypted, wherein the decryption module verifies hash information corresponding to the information to be decrypted, and if verified, decrypts the information to be decrypted. good.

In one embodiment, the encryption target information may be personal information or confidential information.

In one embodiment, the private key management module, in response to a private key provision request from the encryption module, selects the An optimum secret key for the information to be encrypted may be selected, and the selected optimum secret key and version information of the optimum secret key may be provided to the encryption module.

In one embodiment, the private key management module periodically generates a new private key, gives new version information to the generated new private key, and stores it in the key storage destination, or If the generated private key is used more than a certain number of times, a new private key is generated, new version information is given to the generated new private key, and the new private key is stored in the key storage destination. command is input, a new private key may be generated, new version information may be given to the generated new private key, and the new private key may be stored in the key storage destination.

In one embodiment, the private key management module receives key update conditions from a predetermined policy server, generates a new private key if the received key update conditions are met, and New version information may be given and stored in the key storage destination.

In one embodiment, further comprising a re-encryption request receiving module for receiving a re-encryption request for existing encrypted information already stored in the database from the encryption request terminal, wherein in response to the re-encryption request, The secret key management module acquires a substitute secret key having version information different from version information corresponding to the existing encrypted information and version information of the substitute secret key, and the encryption module acquires the substitute secret key. to generate re-encrypted information by re-encrypting the existing encrypted information, and the transmission module transmits the re-encrypted information and version information of the alternative secret key to the user terminal, and the encrypted The encryption request terminal replaces the existing encrypted information and version information corresponding to the existing encrypted information with the re-encrypted information and version information corresponding to the re-encrypted information, and stores them in the database. good.

According to another aspect of the present invention, an encryption system receives an encryption request including predetermined encryption target information from an encryption request terminal; extracting an encrypted private key and version information corresponding to the encrypted private key from a predetermined key storage destination, wherein the encryption system encrypts the information to be encrypted using the encrypted private key; generating encrypted information corresponding to said information to be encrypted, said encryption system transmitting said encrypted information corresponding to said information to be encrypted and version information of said encrypted secret key to said user terminal; and the encryption request terminal transmits encrypted information corresponding to the encryption target information and version information corresponding to the encrypted information-wherein the version information corresponding to the encrypted information is the encrypted version information of the private key used to generate the encryption information in a database, wherein the encryption system generates a new private key if predetermined key update conditions are met; and giving new version information to the new private key thus obtained, and storing the new private key and the new version information given to the new private key in the key storage destination, wherein the encryption system comprises: An encryption method is provided for providing a most recently generated latest private key and version information of the latest private key in response to said request for encryption.

In one embodiment, the encryption system receives from a decryption request terminal a decryption request including predetermined decryption target information and version information corresponding to the decryption target information; A step of extracting a decryption private key corresponding to version information corresponding to the decryption target information and decrypting the decryption target information using the decryption private key may be further included.

In one embodiment, the step of generating encryption information corresponding to the encryption target information includes the step of the encryption system further generating hash information corresponding to the encryption target information, wherein the encryption target the step of transmitting encrypted information corresponding to the information and version information of the encrypted private key to the user terminal further includes transmitting hash information corresponding to the encryption target information to the user terminal; The step of storing encrypted information corresponding to the encryption target information and version information corresponding to the encryption information in a database may further include storing hash information corresponding to the encryption target information in the database. good.

In one embodiment, the encryption system receives a decryption request from a decryption request terminal including predetermined decryption target information, hash information corresponding to the decryption target information, and version information corresponding to the decryption target information. and the encryption system extracting a decryption private key corresponding to version information corresponding to the decryption target information, and decrypting the decryption target information using the decryption private key The encryption system may verify hash information corresponding to the information to be decrypted, and decrypt the information to be decrypted if verified.

In one embodiment, the step of the encryption system extracting an encrypted private key and version information corresponding to the encrypted private key from a predetermined key storage destination in response to the encryption request includes: Selecting an optimal private key (maximizing security) for the information to be encrypted among all private keys already stored in the key storage based on the information.

In one embodiment, the encryption system generates a new private key and gives new version information to the generated new private key if a predetermined key update condition is met, the new private key and the The step of storing new version information given to the new private key in the key storage destination periodically generates a new private key, gives new version information to the generated new private key, and stores the new version information in the key storage destination. if the most recently generated private key has been used more than a certain number of times, generate a new private key, give new version information to the generated new private key, and store it in the key storage destination. or if an explicit command of a key manager is entered, generating a new private key, giving new version information to the generated new private key, and storing it in the key storage destination. good.

In one embodiment, the encryption system generates a new private key and gives new version information to the generated new private key if a predetermined key update condition is met, the new private key and the The step of storing new version information given to the new private key in the key storage destination receives key update conditions from a predetermined policy server, generates a new private key if the received key update conditions are satisfied, and and giving new version information to the generated new private key and storing it in the key storage destination.

In one embodiment, the step of receiving, from the encryption request terminal, a re-encryption request for existing encrypted information already stored in the database by the encryption system, wherein the encryption system responds to the re-encryption request. In response, a substitute secret key having version information different from the version information corresponding to the existing encrypted information, and version information of the substitute secret key are extracted, and the existing encrypted information is reproduced using the substitute secret key. generating encrypted re-encryption information, wherein the transmission module transmits the re-encryption information and version information of the alternative secret key to the user terminal; The method may further include replacing information and version information corresponding to the existing encrypted information with the re-encrypted information and version information corresponding to the re-encrypted information and storing the information in the database.

According to another aspect of the present invention, there is provided a computer-readable recording medium recording a program for performing the above method.

According to another aspect of the present invention, a cryptographic system includes a processor and a memory storing a program, the program being executed by the processor when the cryptographic system performs the above-described A cryptographic system is provided that allows the method to be performed.

According to an embodiment of the present invention, it is possible to provide an encryption/decryption system and method that can enhance security by encrypting personal information using different versions of encryption keys. can.

In order to better understand the drawings cited in the detailed description of the invention, a brief description of each drawing is provided.
1 is a diagram illustrating a working environment of an encryption system according to an embodiment of the invention; FIG. FIG. 4 is a diagram showing the operation of the encryption system according to one embodiment of the present invention; 1 is a block diagram showing a specific configuration of an encryption system according to one embodiment of the present invention; FIG. It is a figure which shows an example of the information preserve|saved at the database. FIG. 4 is a diagram showing the format of data to be saved; FIG. 3 is a diagram for explaining the functions of the encryption system according to one embodiment of the present invention from a management aspect;

As the present invention may take on various transformations and may have various embodiments, specific embodiments are illustrated in the drawings and detailed in the detailed description. However, this is not intended to limit the invention to any particular embodiment, but should be understood to include all transformations, equivalents or alternatives falling within the spirit and scope of the invention. In describing the present invention, if it is determined that a detailed description of related known technologies may obscure the gist of the present invention, the detailed description will be omitted.

The terms first, second, etc. are used to describe various components, but the components should not be limited by the terms. Terms are only used to distinguish one component from another.

The terminology used in this application is only used to describe particular embodiments and is not intended to be limiting of the invention. Singular expressions include plural expressions unless the context clearly dictates a different meaning.

As used herein, terms such as "including" or "having" are intended to specify that the described features, numbers, steps, acts, components, parts, or combinations thereof are present. and does not preclude the presence or addition of one or more different features, figures, steps, acts, components, parts, or combinations thereof.

Also, as used herein, when one component "sends" data to another component, the component may send data directly to the other component, and at least one data may be sent to other components via the On the other hand, when one component "directly sends" data to another component, the data is sent from the component to the other component without going through the other component. means

Preferred embodiments of the present invention will now be described in detail with reference to the accompanying drawings. Identical reference numerals provided in each drawing indicate identical elements.

FIG. 1 is a diagram showing the operating environment of an encryption system according to one embodiment of the present invention.

Referring to FIG. 1, a predetermined encryption system 100 may be provided to implement an encryption/decryption method according to an embodiment of the present invention. Cryptographic system 100 may be a data processing device. In one embodiment, encryption system 100 may be a server.

The encryption system 100 can encrypt predetermined data or decrypt encrypted data in response to a request from the user terminal 10 .

The encryption system 100 can encrypt data with a private key scheme.

In one embodiment, the information subject to encryption may be personal or confidential information.

Personal information is information that can directly or indirectly identify an individual (including information that can be easily combined with other information to identify a specific individual, even if it is not possible to identify a specific individual by itself), such as name, resident number, Date of birth, gender, address, email address, etc. may be included. Alternatively, it may be personal information defined by the Act on Promotion of Information and Communication Network Utilization and Information Protection, etc. or the Act on the Protection of Personal Information.

Confidential information may mean thoughts, beliefs, union or political party membership, withdrawal, political opinions, health or sex life information, or any other personal information that may materially infringe on the private life of the information subject. .

A private key used for encryption/decryption may be stored in the key storage destination 200 . The key storage destination 200 may be embodied in a form included in the encryption system 100, and depending on the embodiment, the key storage destination 200 may be built in a remote location and both may be connected via a network. In the latter case, a security channel may be formed between the key storage destination 200 and the encryption system 100 . Also, the encryption system 100 can access the key storage destination 200 via socket communication.

On the other hand, the user terminal 10 may be an information processing device having a network communication function. For example, the user terminal 10 can be a desktop computer, a laptop computer, a mobile phone, a satellite phone, a wireless phone, SIP (Session Initiation Protocol), a WLL (Wireless Local Loop) station, a smart phone, a tablet PC, a PDA (Personal Digital Assistant). ) and other mobile devices.

The encryption system 100 and the user terminal 10 are connected via a wired/wireless network, and can transmit and receive various information, data and/or signals necessary for embodying the technical idea of the present invention.

A plurality of user terminals 10 and 10-1 may be provided.

The user terminal 10 may be an encryption requesting terminal that requests encryption or a decryption requesting terminal that requests decryption.

The user terminal 10 requests the encryption system 100 to encrypt information to be encrypted, such as personal information or confidential information, and stores the information encrypted by the encryption system 100 in the predetermined database 20. good. That is, the user terminal 10 may convert the information to be encrypted into an encrypted form and store it in the database 20 instead of storing the information to be encrypted in a plaintext form.

On the other hand, the encryption system 100 may update the private key used for encryption, and may manage the updated private key by version. Therefore, the encryption system 100 may perform encryption/decryption using any one of many private keys with different versions.

In one embodiment, cryptographic system 100 may update the private key upon periodic or explicit update commands.

In another embodiment, the cryptographic system 100 may update private keys according to update policies provided by a given policy server 300 .

FIG. 2 is a diagram showing the operation of the encryption system 100. As shown in FIG.

Referring to FIG. 2, the user terminal 10 may be installed with an application requesting data encryption or decryption, and the encryption system 100 includes an encryption/decryption module and a private key management module. may be The encryption/decryption module is a module that performs encryption/decryption according to an application's request, and the private key management module can perform private key generation, inquiry, and deletion functions. At least one private key used for encryption/decryption is stored in the private key storage destination 200 . As described above, the private key management module can access the private key storage destination 200 via a method such as socket communication, and the private key storage destination 200 may be constructed at a remote location.

FIG. 3 is a block diagram showing a specific configuration of the encryption system 100. As shown in FIG.

As shown in FIG. 3, the encryption system 100 includes an encryption request reception module 110, an encryption module 120, a transmission module 130, a decryption request reception module 140, a decryption module 150, a re-encryption request reception module 160, a secret A key management module 170 may also be included. Depending on the embodiment of the present invention, some of the components described above may not necessarily be the components essential to embodying the present invention. Of course, more components than this may be included. For example, the encryption system 100 may include other components included in the encryption system 100 (eg, encryption request receiving module 110, encryption module 120, transmission module 130, decryption request receiving module 140, decryption module 150, It may further include a control module (not shown) capable of controlling the functions and/or resources of the re-encryption request receiving module 160, private key management module 170, etc.).

The encryption system 100 may include hardware resources and/or software necessary for embodying the technical ideas of the present invention, and does not necessarily mean one physical component, or one physical component. It does not imply a device. In other words, the encryption system 100 does not mean a logical combination of hardware and/or software provided for embodying the technical idea of the present invention. and may be embodied as a set of logical configurations for embodying the technical idea of the present invention by performing each function. In addition, the encryption system 100 may mean a set of components separately implemented for each function or role for implementing the technical idea of the present invention. For example, encryption request receiving module 110, encryption module 120, sending module 130, decryption request receiving module 140, decryption module 150, re-encryption request receiving module 160, and private key management module 170 may be different physical devices. and may be located on the same physical device. Also, depending on the implementation, each of the encryption request receiving module 110, the encryption module 120, the sending module 130, the decryption request receiving module 140, the decryption module 150, the re-encryption request receiving module 160, and the private key management module 170. may be located in different physical devices, and the configurations located in different physical devices may be organically combined with each other to implement respective modules.

Also, in this specification, the module may mean a functional and structural combination of hardware for implementing the technical idea of the present invention and software for driving the hardware. For example, a module may mean a logical unit of predetermined code and hardware resources for performing the predetermined code, and does not necessarily mean physically connected code, or a single type of hardware. It can be easily inferred by an expert having average knowledge in the technical field to which the present invention belongs that it does not mean hardware.

The private key management module 170 can manage at least one private key and version information corresponding to each private key. The private key management module 170 can extract a private key used for encryption/decryption from the key storage destination 200, generate a new private key, or delete or update an existing private key. can.

On the other hand, each key stored in the key storage destination 200 may be given a different version. That is, each key stored in the key storage destination 200 may be given a unique version, and the version assignment can also be performed by the private key management module 170 .

The key storage destination 200 may be a DB in which a record having a {private key}/{private key version} format is stored.

The encryption request reception module 110 may receive an encryption request including predetermined encryption target information from the encryption request terminal 10 .

In response to the encryption request, the encryption module 120 requests the private key management module 170 to provide the private key, receives the encrypted private key and version information of the encrypted private key from the private key management module 170, and receives the encrypted private key version information. The encryption target information can be encrypted using the encrypted secret key to generate encrypted information corresponding to the encryption target information.

The private key management module 170 extracts one of the private keys already stored in the key storage destination 200 and provides it to the encryption module 120 in response to the private key provision request of the encryption module 120 . can be done.

For example, private key management module 170 can provide the most recently generated private key.

In another embodiment, the private key management module 170 responds to the private key provision request of the encryption module 120, based on the encryption target information, among all the private keys already stored in the key storage destination 200: A best-fit secret key for the information to be encrypted may be selected, and the selected best-fit secret key and version information of the best-fit secret key may be provided to the encryption module 120 . There are various ways to select the best private key. In one embodiment, private key management module 170 may select a private key that maximizes the security of the information to be encrypted.

The transmission module 130 can transmit the encrypted information corresponding to the information to be encrypted and the version information of the encrypted private key to the encryption requesting terminal 10 .

Then, the encryption request terminal 10 sends encrypted information corresponding to the encryption target information and version information corresponding to the encrypted information--here, the version information corresponding to the encrypted information is used to generate the encrypted information. -, which is the version information of the private key obtained, can be stored in the database 20. FIG.

Meanwhile, in some embodiments, the encryption module 120 further generates hash information corresponding to the encryption target information, the transmission module 130 further transmits the hash information corresponding to the encryption target information to the user terminal, The encryption requesting terminal 10 can also store hash information corresponding to the information to be encrypted in the database 20 . The hash information is later used for data verification.

On the other hand, the private key management module 170 generates a new private key and provides new version information to the generated new private key and new version information to the new private key and to the new private key if predetermined key update conditions are met. The new version information is stored in the key storage destination 200, and the most recently generated latest secret key and version information of the latest secret key can be provided in response to the request for providing the secret key of the encryption module.

Depending on the embodiment, the private key management module 170 periodically generates a new private key, gives new version information to the generated new private key, and stores it in the key storage destination, or stores the recently generated private key. is used a certain number of times or more, a new private key is generated, new version information is given to the generated new private key, and the new private key is stored in the key storage destination 200, or an explicit command from the key manager is input. If so, a new private key may be generated, new version information may be given to the generated new private key, and the new private key may be stored in the key storage destination 200 .

Alternatively, in one embodiment, the private key management module 170 receives key update conditions from a given policy server 300, generates a new private key if the received key update conditions are satisfied, and The key may be given new version information and stored in the key storage destination 200 .

Since the secret key management module 170 updates the secret key used for encryption in this way, when the encryption requesting terminal 10 requests encryption for a plurality of pieces of information, the plurality of pieces of information are all encrypted using the same secret key. Instead of being encrypted, it may be encrypted with a secret key that satisfies certain conditions or is updated periodically.

On the other hand, as described above, encrypted information (i.e., encrypted information) may be stored in database 20 along with the version of the private key used to generate the corresponding encrypted information; Depending on the case, it may be stored together with the hash value.

FIG. 4 is a diagram showing an example of information stored in the database, and FIG. 5 is a diagram showing the format of data stored.

Referring to FIG. 4, a plurality of data are stored in the database 20 in a form encrypted by a total of four secret keys v1, v2, v3 and v4, and the respective encrypted information are shown in FIGS. As shown, it is stored in the form {private key version}/{ciphertext}/{hash}, where the private key version is the private key identifier of the ciphertext performed with the symmetric key algorithm, and the hash value is the ciphertext. Value to check for sentence modulation.

Thus, according to the technical idea of the present invention, encrypted data can be decrypted only with a designated secret key. can be prevented.

On the other hand, depending on the embodiment, instead of storing the version of the private key used to generate the ciphertext in the DB 20, if the ciphertext is input, the secret used to encrypt the input ciphertext is A neural network may be stored that outputs a version of the key. At this time, the neural network may be a neural network having a property of overfitting the learning data.

More specifically, when the encryption requesting terminal 10 receives the encryption information corresponding to the encryption target information and the version information corresponding to the encryption information, the encryption requesting terminal 10 receives the version information corresponding to the encryption information. The neural network can be trained by inputting the encrypted information labeled with to the neural network.

Since the neural network is trained only by learning data input from the encryption requesting terminal 10 (i.e., encrypted information labeled with version information corresponding to encrypted information), it overfits the actual encrypted information. Subsequently, when one of the encrypted information used for learning is input to the neural network after the learning of the neural network is completed, the secret key used to encrypt the input encrypted information is obtained. Version information may be output from the neural network. The private key version information thus output may be used to later decrypt the encrypted information.

Decoding is further described below with reference to FIG.

The decryption request terminal 10-1 can extract at least one of the data stored in the database 20 and make a decryption request to the encryption system 100. FIG.

Then, the decryption request receiving module 140 can receive a decryption request including predetermined decryption object information and version information corresponding to the decryption object information from the decryption request terminal (eg, 10-1). . Depending on the embodiment, the decryption request may further include hash information corresponding to decryption target information.

The decryption module 150 requests the secret key management module 170 for the decryption private key corresponding to the version information corresponding to the decryption target information, and decrypts the decryption target information using the received decryption private key. can do.

Depending on the embodiment, the decryption module 150 may verify hash information corresponding to the decryption target information, and decrypt the decryption target information if the hash information is verified.

On the other hand, the encryption system 100 may re-encrypt existing encrypted information with another secret key, and batch-process re-encryption of all data stored in the database 20 .

Therefore, the re-encryption request receiving module 160 can receive a re-encryption request for existing encrypted information already stored in the database 20 from the encryption request terminal 10 .

Then, in response to the re-encryption request, the secret key management module 170 acquires the alternative secret key having version information different from the version information corresponding to the existing encrypted information and the version information of the alternative secret key, and the encryption module 120 can generate re-encrypted information by re-encrypting the existing encrypted information using the alternate private key. To re-encrypt specific encrypted data, the encryption module 120 may perform a process of decrypting the corresponding encrypted data with the original encryption key and then encrypting it with a new encryption key.

The transmission module 130 transmits the re-encryption information and the version information of the alternative secret key to the user terminal, and the encryption request terminal 10 re-encrypts the existing encryption information and the version information corresponding to the existing encryption information. Version information corresponding to information and re-encryption information can be substituted and stored in the database 20 .

FIG. 6 is a diagram for explaining the functions of the encryption system 100 according to one embodiment of the present invention from a management aspect.

Referring to FIG. 6, the administrator can query, change, delete, and generate the private key via the management tool installed on his/her own terminal. The private key of the data encrypted by the data patching process may be newly generated or replaced with an existing version and re-encrypted after batch decryption, using the hash value, Forgery/falsification verification may be performed on the encrypted personal information.

FIG. 7 is a diagram for explaining an encryption process of an encryption method for personal information processing according to an embodiment of the present invention.

Referring to FIG. 7, the encryption requesting terminal 10 can request the encryption system 100 to encrypt the personal information A (S110).

Then, the encryption system 100 acquires one of the secret keys (secret key k) stored in the key storage destination 200 and the version information V(k) of the secret key k from the key storage destination 200 (S120). , the private information A can be encrypted with the secret key k to generate the encrypted information E (S130).

After that, the encryption system 100 transmits the encrypted information E and the version information V(k) of the private key k used for encrypting the encrypted information E to the encryption requesting terminal 10 (S140). The terminal 10 can store the encryption information E and the version information V(k) in the DB 20 (S150).

Depending on the embodiment, the encryption system 100 may further generate hash information and send it to the encryption requesting terminal 10, and the encryption requesting terminal 10 may store the hash information together.

Also, according to an embodiment, the encryption requesting terminal 10 may perform the process shown in FIG. 8 instead of step 150 of FIG. Referring to FIG. 8, the encryption request terminal 10 stores only the encryption information E in the DB 20 (S151), and instead of storing the version information V(k) of the private key k in the DB 20, The labeled encrypted information E may be input to the neural network 25 as learning data (S152). Then, the neural network is machine-learned with the learning data E (S153).

FIG. 9 is a diagram for explaining a decryption process in an encryption method for personal information processing according to an embodiment of the present invention.

Referring to FIG. 9, the decryption request terminal 10-1 acquires encrypted information E to be decrypted and version information V(k) of the private key k used to encrypt the encrypted information E from the DB 20. (S210), and the encryption system 100 can request the decryption of the encrypted information E (S210). At this time, the decryption request terminal 10-1 can transmit not only the encryption information E but also the version V(k) of the private key k to the encryption system 100. FIG.

Then, the encryption system 100 obtains a secret key (that is, secret key k) corresponding to version V(k) from the key storage destination 200 (S230). , and the private key k to decrypt the encrypted information E to generate the personal information A (S240).

Thereafter, the encryption system 100 can transmit the decrypted personal information A to the decryption request terminal 10-1 (S250).

Meanwhile, the decoding requesting terminal 10-1 may perform the process shown in FIG. 10 instead of step 210 of FIG. 9, depending on the embodiment. Referring to FIG. 10, the decryption request terminal 10-1 acquires the encrypted information E from the DB 20 (S211), inputs the encrypted information E to the learned neural network 25, and predicts the result of the neural network 25. can be requested (S212). Then, the neural network 25 can output version information V(k) of the secret key k used to encrypt the encrypted information E as a prediction result (S213).

Meanwhile, according to an embodiment, the encryption system 100 may include a processor and a memory that stores programs executed by the processor. A processor may include a single-core CPU or a multi-core CPU. The memory may include high speed random access memory and may include non-volatile memory such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid-state memory device. Access to memory by processors and other components may be controlled by a memory controller. Here, the program, when executed by a processor, may cause the encryption system 100 according to the present embodiment to perform the consulting information providing method described above.

Meanwhile, the consulting information providing method according to the embodiment of the present invention may be embodied in the form of computer-readable program commands and stored in a computer-readable recording medium. The control program and target program according to may also be stored in a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording devices on which data readable by a computer system are stored.

The program commands recorded on the recording medium may be those specifically designed and constructed for the purposes of the present invention, or they may be those known and available to those of ordinary skill in the software arts.

Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and floppy disks. magneto-optical media, such as floptical disks, and hardware specifically configured to store and execute program commands, such as ROM, RAM, flash memory, etc. includes hardware devices. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

Examples of program commands include machine language code produced by a compiler, as well as high level language code executed by a device that processes information electronically, such as a computer, using an interpreter or the like.

The hardware devices described above may be configured to act as at least one software module, and vice versa, to perform the operations of the present invention.

The above description of the present invention is for illustrative purposes only, and a person having ordinary skill in the technical field to which the present invention pertains may make other modifications without changing the technical spirit or essential features of the present invention. It should be understood that transformation into a specific form of is easy. As such, the above-described embodiments are to be understood in all respects as illustrative and not restrictive. For example, each component described in a single form may be implemented in a distributed fashion, and similarly, components described as being distributed may also be implemented in a combined form.

The scope of the present application is indicated by the claims set forth below rather than the detailed description, and the meaning and scope of the claims and all modifications or variations derived from the equivalent concepts thereof are deemed to be the scope of the present invention. must be construed to be contained in

The present invention can be used in cryptographic systems and methods for personal information processing.

Claims (13)

a private key management module that manages at least one private key and version information corresponding to each private key;
an encryption request receiving module for receiving an encryption request including predetermined encryption target information from an encryption request terminal;
requesting the secret key management module to provide a secret key in response to the encryption request, receiving the secret key and version information of the secret key from the secret key management module, and using the received secret key an encryption module that encrypts information to be encrypted and generates encrypted information obtained by encrypting the information to be encrypted; including a sending module that sends to the encryption requesting terminal,
The private key management module
generating a new private key and providing new version information to the generated new private key if a predetermined key update condition is satisfied; store in a key storage destination, and provide the most recently generated latest private key and version information of the latest private key in response to a private key provision request of the encryption module;
The encryption request terminal is
encrypted information obtained by encrypting the information to be encrypted and version information corresponding to the encrypted information—here, the version information corresponding to the encrypted information is the secret key used to generate the encrypted information; An encryption system that stores - which is version information - in a database. The encryption system is
A decryption request receiving module for receiving a decryption request containing predetermined decryption target information and version information of a private key used for encrypting the decryption target information from a decryption request terminal, and encryption of the decryption target information a decryption module for requesting the decryption private key corresponding to the version information of the secret key used for decryption from the secret key management module, and decrypting the decryption target information using the received decryption secret key; The encryption system of Claim 1, further comprising: The encryption module is
further generating a hash value of the encryption target information;
The transmission module is
further transmitting a hash value of the encryption target information to the encryption request terminal;
The encryption request terminal is
2. The encryption system according to claim 1, further storing a hash value of said encryption target information in said database. The encryption system is
Decryption request reception for receiving a decryption request including predetermined decryption target information, a hash value of the decryption target information, and version information of a private key used to encrypt the decryption target information from a decryption request terminal requesting the private key management module for a decryption private key corresponding to the version information of the private key used to encrypt the decryption target information; further comprising a decoding module for decoding the subject information;
The decryption module is
4. The encryption system according to claim 3, wherein the hash value of the decryption target information is verified, and if the hash value is verified, the decryption target information is decrypted. 2. The encryption system according to claim 1, wherein said information to be encrypted is personal information or confidential information. The private key management module
optimization for maximizing the security of the encryption target information among all the private keys already stored in the key storage destination, in response to the encryption module's private key provision request, based on the encryption target information; 2. The encryption system of claim 1, wherein a secret key is selected and the selected best secret key and version information of the best secret key are provided to the encryption module. The private key management module
periodically generate a new private key, give new version information to the generated new private key, and store it in the key storage destination;
If the most recently generated private key has been used more than a certain number of times, a new private key is generated, new version information is given to the generated new private key, and the new private key is stored in the key storage destination, or key management 2. The encryption system according to claim 1, wherein when an explicit command from a user is input, a new secret key is generated, new version information is given to the generated new secret key, and the generated new secret key is stored in the key storage destination. . The private key management module
Receiving a key update condition from a predetermined policy server, generating a new private key if the received key update condition is satisfied, giving new version information to the generated new private key, and storing it in the key storage destination The encryption system of Claim 1. further comprising a re-encryption request receiving module for receiving a re-encryption request for existing encrypted information already stored in the database from the encryption request terminal;
In response to said re-encryption request,
The private key management module obtains a replacement private key having version information different from the version information of the private key used to encrypt the existing encrypted information and the version information of the replacement private key;
The encryption module generates re-encrypted information by re-encrypting the existing encrypted information using the alternative secret key,
the transmission module transmits the re-encryption information and version information of the alternative secret key to the encryption request terminal;
The encryption request terminal is
replacing version information of the existing encrypted information and the private key used to encrypt the existing encrypted information with version information of the private key used to encrypt the re-encrypted information and the re-encrypted information 2. The encryption system of claim 1, storing in said database. the step of the encryption system receiving an encryption request containing predetermined encryption target information from an encryption request terminal;
a step in which the encryption system extracts a private key and version information of the private key from a predetermined key storage destination in response to the encryption request;
a step in which the encryption system encrypts the information to be encrypted using the private key to generate encrypted information obtained by encrypting the information to be encrypted;
a step in which the encryption system transmits encrypted information obtained by encrypting the encryption target information and version information of the private key to the encryption request terminal; and a step in which the encryption request terminal transmits the encryption target information. Encrypted encrypted information and version information corresponding to said encrypted information - where the version information corresponding to said encrypted information is version information of a private key used to generate said encrypted information - including a step of saving to a database;
The encryption system generates a new private key and provides new version information to the generated new private key to provide to the new private key and to the new private key if a predetermined key update condition is met. storing the obtained new version information in the key destination;
The encryption method, wherein the encryption system provides a most recently generated latest private key and version information of the latest private key in response to the encryption request. a step in which the encryption system receives from a decryption request terminal a decryption request containing predetermined decryption target information and version information of a private key used to encrypt the decryption target information; and extracting a decryption private key corresponding to version information of the secret key used to encrypt the decryption target information, and using the decryption private key to decrypt the decryption target information. The encryption method according to claim 10. A computer-readable recording medium installed in a data processing apparatus and recording a program for performing the method according to any one of claims 10 to 11. A cryptographic system,
processor,
including memory storing programs,
A cryptographic system, wherein the program, when executed by the processor, causes the cryptographic system to perform the method of any one of claims 10-11.

Images