KR101075052B1 - Apparatus and method for abstracting of personal information - Google Patents

Abstract

The present invention relates to an apparatus and method for hierarchically abstracting personal information using a resource description framework and user defined rules.

To this end, in the present invention, the information sensitive to the individual is hierarchically abstracted using a resource description framework and user-defined rules, and when the information is requested, the abstraction is abstracted to the extent necessary according to a policy among the hierarchically abstracted information. A plan was developed to provide informed information.

Privacy, privacy, RDF, resource technology framework, custom rules, information abstraction,

Description

Abstraction device and method of personal information {APPARATUS AND METHOD FOR ABSTRACTING OF PERSONAL INFORMATION}

The present invention relates to an apparatus and method for abstracting personal information, and more particularly, to an apparatus and method for hierarchically abstracting personal information using a resource description framework and user defined rules.

Today, due to the development of information and industry, technology for protecting information has become one of the important concerns, and the demand for information abstraction technology for information protection is increasing.

As a way to protect conventional information, techniques such as k-anonymity can be used to generalize information important to individuals for many samples. In other words, it aims to make the owner of the information unknown by abstracting it using information of several people. This prevents the disclosure of information by making similar numerical data, such as k-anonymity, into a single abstraction.

However, important information for an individual may be centralized, but there may be a case where an individual owns and distributes only when necessary. In such cases, techniques such as k-anonymity cannot be used. As a result, even when information is centralized, anonymized personal information may not be needed depending on a user or a service using the information.

The present invention proposes an apparatus and method for preventing excessive leakage that may occur when storing and distributing personal security information owned by an individual.

In addition, the present invention proposes an apparatus and method for automatically abstracting personal security information to prevent exposure of personal security information stored by the individual.

In addition, the present invention proposes an apparatus and method for differentially providing personal security information hierarchically abstracting personal security information possessed by an individual according to the object to be applied.

In addition, the present invention automatically suppresses the exposure of personal security information and provides necessary information by automatically abstracting and providing personal security information to be kept by the individual in order to prevent excessive exposure of information that may occur when providing sensitive information to the individual. An apparatus and method are provided to provide.

The method for abstracting personal security information stored by an individual according to an embodiment of the present invention uses an abstraction class of a resource description framework corresponding to the personal security information having a type of information, an owner of the information, and a value of the information. Converting the personal security information into the resource description framework format, generating the hierarchical abstraction personal security information using a user defined rule, and converting the personal security information converted into the resource description framework format from the user And providing a layer of abstraction personal security information corresponding to a level accessible by the user among the generated hierarchical abstraction personal security information when a request for security information is requested.

In the present invention, by automating the abstraction of personal security information important to the user, it is possible not only to prevent excessive exposure of personal security information, but also to reduce the cost for automating the abstraction. On the other hand, various other effects will be disclosed directly or implicitly in the detailed description of the embodiments of the present invention to be described later.

In the following description of the present invention, detailed descriptions of well-known functions or configurations will be omitted if it is determined that the detailed description of the present invention may unnecessarily obscure the subject matter of the present invention. Terms to be described later are terms defined in consideration of functions in the present invention, and may be changed according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout this specification.

In the present invention to be described later, information sensitive to an individual (hereinafter referred to as “personal security information”) is abstracted and represented hierarchically using a resource description framework (hereinafter referred to as “RDF”). Among the hierarchically abstracted information, it will be described in detail to provide the abstracted information as required by the policy. This enables the abstraction of information even when individuals have personal security information, and minimizes the exposure of personal security information when provided.

In general, RDF is an XML standard defined by the World Wide Web Consortium (hereinafter referred to as "W3C") to represent resource information on the web. Here, XML is a multipurpose generation language that is recommended for use in creating other special purpose generation languages in the W3C. The XML can be applied to describe a simplified subset of the Standard Generalized Markup Language (SGML) or to describe a large number of kinds of data. In addition, the XML is mainly designed to overcome the limitations of HTML (Hyper Text Markup Language) by allowing data to be easily exchanged between other systems, particularly those connected to the Internet.

To this end, the present invention uses RDF and automates the abstraction of personal security information by applying user-defined inference rules. In other words, by applying different levels of abstraction of necessary information according to the subject who wants to use personal security information, it is intended to prepare a method for abstracting personal security information according to the situation. In addition, by minimizing the exposure of personal security information by allowing new personal security information to be generated as needed.

In the present invention, by using RDF and user-defined rules to dynamically abstract and manage personal security information, a method for delivering personalized security information at an appropriate level according to the user who wants to use the abstracted personal security information I want to prepare. In other words, the appropriate level means an accessible level accessible to the user.

Hereinafter, the above description will be described in more detail with reference to the accompanying drawings.

1 illustrates a configuration of an entire system for providing context information according to an embodiment of the present invention.

Referring to FIG. 1, when the personal security information, which is sensitive information to an individual, is input, the format converter 110 converts the personal security information into an RDF format and outputs the converted personal security information.

The information abstraction unit 112 generates hierarchical abstraction personal security information with dynamic abstraction of the personal security information converted into the RDF format by the format conversion unit 110 by using a user-defined rule. In this case, the information abstraction unit 112 uses a user-defined rule to abstract the personal security information represented by the RDF. In this case, the user-defined rule can be divided into a rule of abstracting personal security information largely existing and a rule of generating a new type of personal security information based on the existing personal security information. Detailed description thereof will be described later.

Meanwhile, the information abstraction unit 112 provides the personal security information abstracted by the user defined rule to the storage medium 114 so that the personal security information hierarchically abstracted can be managed.

The storage medium 114 stores the abstracted personal security information abstracted to the required degree among the abstracted personal security information managed hierarchically by a request from the information extracting unit 116. To pass.

The information extracting unit 116 obtains personal security information of a layer corresponding to the level of the user who requested the personal security information among the hierarchically abstracted personal security information when any personal security information is requested from the user. The storage medium 114 is requested to be provided.

The information extracting unit 116 delivers the abstracted personal security information provided from the storage medium 114 to the user.

2 illustrates a control flow for abstracting personal security information according to an embodiment of the present invention.

Referring to FIG. 2, when personal security information, which is sensitive information to an individual, is input in step 210, the process proceeds to step 212 to convert the personal security information into an RDF format. In operation 214, hierarchical abstraction information with dynamic abstraction is generated using the user-defined rule on the personal security information converted into the RDF format.

As described above, the information expressed in RDF is abstracted using a user defined rule. Here, the user rule is described using RDF, and the user-defined rule used here is a rule that abstracts personal security information largely existing and a rule that creates a new type of personal security information based on existing personal security information and personal security. It can be divided into rules that control access to information. Detailed description thereof will be described later.

Meanwhile, when generation of the hierarchical abstraction information is completed, when any personal security information is requested from the user in step 216, it corresponds to the level of the user who requested the personal security information among the hierarchically abstracted personal security information. Extract the abstracted personal security information of the layer. In operation 218, the extracted abstracted personal security information is provided to the user.

According to the above-described embodiments of the present invention, it is possible to provide abstracted personal security information corresponding to an abstraction step of necessary information according to a subject who wants to use the personal security information.

A representative example of a user-defined rule for abstraction according to an embodiment of the present invention is summarized as follows.

First, a rule for generating personal security information in RDF may be defined as Table 1 below.

Referring to <Table 1>, the information owner (? UserName) and the information type (? MathDataType) are the owner name (? OwnerName) and information type (? DataType). ), Find (equal (? OwnerName? UserName), equal (? DataType? MathDataType) unabstracted (? MathAbstractor foat: Level "1" ^^ xsd: integer) abstraction class (? MathAbstractor) Enter (? MathAbstractor foat: MinValue? MathDataValue).

A rule for abstracting secondly quantified personal security information may be defined as Table 2 below.

Referring to Table 2 above, the abstraction class (? MathAbstractorA) with quantified personal security information is an abstraction specified by the abstraction class for the more abstract (? MathAbstractorB foat: isAbstractionOf? MathAbstractorA) class (? MathAbstractorB). Compute (product (? TempMinValue? Scope? MinValueResult)) using the range of values (? MathAbstractorB foat: Scope? Scope). The minimum value abstracted by the calculation is obtained (? MathAbstractorB foat: MinValue? MinValueResult), and the private security information is abstracted through this value and the range value (? Scope).

Third, a rule for abstracting information having an inclusion relationship between personal security information may be defined in Table 3 below.

Referring to <Table 3>, the abstraction class (? HierarchicalAbstractorB) having the containment relation between personal security information is more abstract than the level of the class (? HierarchicalAbstractorA foat: isAbstractionOf? HierarchicalAbstractorB). (? HierarchicalAbstractorA foat: Level? Level) is abstracted by concatenating abstraction information (? PartInformation) that is greater than or equal to (ge (? HierarchicalDataDepth,? Level)).

Fourth, a rule for generating new personal security information (BMI) may be defined by Table 4 below. Table 4 below shows the rules for automatically generating the maximum value among the abstracted BMIs.

Referring to <Table 4>, the minimum information of the key of the owner of the data of the BMI ((? MathAbstractorA foat: dataType "Height" ^^ xsd: string), (? MathAbstractorA foat: MinValue? HeightMinValue)) maximum weight information BMI calculation weight based on ((? MathAbstractorB foat: dataType "Weight" ^^ xsd: string) (? MathAbstractorB foat: MinValue? WeightMinValue) (? MathAbstractorB foat: Scope? WeightScope) sum (? WeightMinValue? WeightScope? WeightMaxValue)) / Key ^ 2 (product (? WeightMaxValue 10000? ProductWeightMaxValue) quotient (? ProductWeightMaxValue? HeightMinValue? TempMaxBMI)

Get quotient (? TempMaxBMI? HeightMinValue? MaxBMI1) quotient (? MaxBMI1? CompositeUnit? MaxBMI2) product (? MaxBMI2? CompositeUnit? MaxBMI3) sum (? MaxBMI3? CompositeUnit? MaxBMI)

Fifth, rules for accessing abstracted personal security information may be defined by Table 5 below.

Referring to <Table 5>, when access is allowed using the access control rule (? AccessControlPolicy) specified by RDF (? AccessControlPolicy foat: Access "Allow" ^^ xsd: string), the information defined in the policy The owner (? AccessControlPolicy foat: Issuer? Issuer), the requestor of the information (? AccessControlPolicy foat: Requester? Requester), the type of information (? AccessControlPolicy foat: Target? Target), and the degree of abstraction (? Abstractor foat: Level? Level) Associate the owner's abstraction class ((? Abstractor foat: OwnerName? OwnerName) (? Abstractor foat: dataType? DataType) (? Abstractor foat: Level? Level)) with the user (? User foat: UserName? UserName) Therefore, only the information provided by the (? User foat: canAccess? Abstractor) policy can be provided.

As can be seen from the above description, in the embodiment of the present invention, rules for abstracting personal security information may be classified into two types according to personal security information.

The first is when personal security information is quantified. At this time, the personal security information is abstracted in a form having a pair of minimum and minimum values or a pair of minimum and maximum values.

The second is when parts of personal security information, such as addresses, have inclusion relationships with each other. In this case, the abstraction is achieved by discarding subordinate information.

In addition, the rules for creating a new type of personal security information using existing personal security information are abstracted by using existing personal security information and an expression converting them, and the abstraction has the form of maximum value and minimum value.

In addition, access to abstracted personal security information is achieved through policies and inference rules expressed in RDF. In this case, access is possible using the name of the accessor, the name of the owner of the information, the type of information, and the level of access.

On the other hand, while the above has been shown and described with respect to the preferred embodiments of the present invention, the present invention is not limited to the specific embodiments described above, the technical field to which the invention belongs without departing from the spirit of the invention claimed in the claims Of course, various modifications can be made by those skilled in the art, and these modifications should not be individually understood from the technical spirit or the prospect of the present invention.

1 is a view showing the configuration of an apparatus for abstracting personal information according to an embodiment of the present invention;

2 is a diagram illustrating a control flow for abstracting personal information according to an embodiment of the present invention.

Claims (9)

In a method of abstracting personal security information held by an individual, Converting the personal security information into a resource description framework format using an abstraction class of a resource description framework corresponding to the personal security information having a type of information, an owner of the information, and a value of the information; Generating hierarchical abstraction personal security information using user-defined rules on the personal security information converted into the resource description framework format; And Providing a layer of abstraction personal security information corresponding to a level accessible by the user among the generated hierarchical abstraction information when a request for personal security information is received from a user. The method of claim 1, The user-defined rule is divided into a rule for abstracting existing personal security information, a rule for generating new personal security information based on the existing personal security information, and a rule for controlling access to the abstracted personal security information. Abstraction method. The method of claim 2, The abstraction rule for generating hierarchical abstraction personal security information may be classified into a case in which personal security information is quantified and a case in which parts of personal security information such as addresses have an inclusion relationship with each other. . The method of claim 3, And when the personal security information is quantified, abstract the data in a form having a minimum value and a minimum value pair or a minimum value and maximum value pair. The method according to claim 3 or 4, When the parts of the personal security information, such as the address has a containment relationship with each other, the abstraction method is characterized in that the abstraction is made by discarding the lower personal security information. The method of claim 3, And an additional rule for generating new personal security information using existing personal security information as an abstraction rule for generating the hierarchical abstraction personal security information. The method of claim 6, The rule for generating new personal security information by using existing personal security information is abstracted using existing personal security information and an expression converting them, and the abstraction forms the form of the maximum value and the minimum value. Abstraction method characterized by having. The method of claim 3, And the access to the abstracted personal security information is based on the resource description framework. The method of claim 3, Access to the abstracted personal security information is an abstraction method, characterized in that using the name of the accessor, the owner of the information, the type of information, the level of access.

Images