KR101208771B1 - Method and system for protecting individual information based on public key infrastructure and privilege management infrastructure - Google Patents

Abstract

The present invention discloses a method and system for protecting personal information. According to the method and system for protecting personal information according to the present invention, by providing selective / discriminatory personal information for each user in terms of users, it is possible to prevent companies from unnecessarily utilizing their own personal information or misusing them. In addition, by providing a notification function for the use of personal information, it is possible to prevent abuse from others or organizations, and to improve the level of awareness of the importance of personal information from users. In addition, in the social aspect, since personal information is systematically defined by strong domestic laws, it is effective to immediately respond to misuse and theft of personal information, and not only sporadic personal information management but also unified personal information management. By granting limited personal information collection authority through the trust level, it is possible to prevent illegal personal information collection. In addition, the present invention deficiencies PKI and PMI, and can store and verify the user's proper attributes according to the privacy policy after strong identification based on encryption through X.509 v3.0 certificate. By adding an attribute authentication function to an existing certificate, access control is possible using attribute information such as authority and payment as well as user identification. In addition, after confirming the user's identity, by storing the user's attribute information together, it is possible to efficiently control and manage the purpose and adequacy of the personal information. In addition, by providing responsibility tracking function in case of an accident by using monitoring and logging, it is effective to improve the efficiency of personal information management.

Description

Method and system for protecting individual information based on public key infrastructure and privilege management infrastructure

The present invention relates to a method and system for protecting personal information, and more particularly, to a method and system for protecting personal information based on a public key infrastructure and a rights management infrastructure.

Personal information is "information about surviving individuals, such as names, dates of birth, resident registration numbers, etc., such as code, text, voice, sound, and video that can identify the individual (other information, even if that information alone cannot be identified). It can be easily recognized by combining with). "

An open network environment has accelerated the development of the information society, and as a result, more companies are doing business based on the Internet, making e-business a necessity rather than a choice. In particular, a large number of service organizations, companies, and organizations are now able to collect, store, and distribute personal information directly through the Internet. As a result, the damage caused by the theft and leakage of illegally acquired personal information is continuously occurring, and the invasion of privacy is emerging as an important risk of the information society.

Figure 1 shows a survey of personal information damages by type from 2005 to 2007. "Unauthorized collection and use of personal information for telemarketing or unauthorized membership" was the highest at 61.9%, and second, "personal information." "Theft" type accounts for 58% of the total. As such, the damage level has increased significantly compared to last year.

Table 1 below shows the types of improperly collected privacy breaches and their future problems.

In addition, due to the rapid growth of e-business environment, companies are trying to provide differentiated services using information of customers who have market choice. However, the illegal use and leakage of personal information is increasing by requiring collection of personal information as a condition of service use and contract conclusion.

2 is a view showing a result of a survey on the purpose of providing personal information for domestic general users to utilize the Internet service, referring to FIG. 2 for the purpose of providing personal information online, Membership is required to be provided with information, accounting for 67.3%, and second, for purchasing goods or services (23.3%).

 As described above, in order to use and receive services on most websites in Korea, the user can use the desired contents only by providing his or her personal information. In addition, in the case of large portal sites, the integration of personal information with the same affiliated companies is required along with the user information by including them in part of the subscription agreement. In addition, some sites are required to be informed of the sign-up procedure to share personal information with outsourced service providers for the purpose of providing useful additional services and affiliate services.

In order to prevent misuse of such personal information, conventionally, personal information protection methods using a public key infrastructure have been proposed.

PKI uses public key certificates to provide confidentiality, integrity, authentication, and revocation functions that are essential security elements in electronic commerce. However, since public key certificates provide only authentication information such as a user's private key ownership certificate, it is difficult to directly use them in many applications that require access control services by using user's attribute information such as status, mission, and credit information. have. However, since most information security application services require not only identification information but also user's attribute information such as system access authority, duty, status, and credit status, personal information cannot be faithfully protected by the PKI method. Existed.

The problem to be solved by the present invention is to provide a method and system for protecting personal information that can protect personal information based on the current privacy law by combining PKI and PMI schemes that are well known in the art.

The personal information protection method of the present invention for achieving the above object, (a) the personal information protection system receives the registration request information combined with the PKI certificate and PMI certificate from the individual user terminal and the enterprise server, respectively, the registration request information Reading and registering personal and attribute information of the user and the enterprise from the user; (b) the personal information protection system issuing a cyber ID including the PKI certificate information and the PMI certificate information to the personal user terminal and the enterprise server; (c) the personal information protection system receives a cyber ID and a request for personal information from the enterprise server, authenticates the identity and attributes of the enterprise by using the cyber ID, the attributes of the enterprise and the predefined personal information Comparing the protection policy to determine whether the enterprise has access to the personal information requested by the enterprise server; And (d) if the enterprise has the right to access the requested personal information, the personal information protection system transmitting the legal provisions relating to the penalty for misuse of the requested personal information and personal information to the corporate server. It includes.

In addition, in the above-described step (a), (a1) the personal user terminal combines the extended field of the PKI certificate and the PMI certificate attribute field in which the user's attribute information is recorded, and encrypts the personal information with the user's personal information to request personal information registration information. Transmitting to the privacy system; (a2) the personal information protection system decrypts the personal information registration request information, extracts user property information from the PKI certificate extension field and the PMI certificate property field, and converts the personal information into the property information and the personal information. Classifying and storing according to a protection policy; And (a3) the corporate server combining the extended field of the PKI certificate and the PMI certificate attribute field in which the attribute information of the enterprise is recorded, and encrypting together with the basic information of the enterprise to transmit the enterprise information registration request information to the personal information protection system. step; And (a4) the personal information protection system decrypts the enterprise information registration request information, extracts attribute information of an enterprise from the PKI certificate extension field and the PMI certificate attribute field, and converts the enterprise information into the attribute information and the individual. The method may include classifying and storing the information according to the information protection policy.

In addition, the above-described method, (e) when there is no access to the personal information requested by the enterprise, the personal information protection system notifies the enterprise server of the denial of personal information provision, and the basis of the denial of personal information provision is The method may further include transmitting a legal rule.

On the other hand, the personal information protection system of the present invention for achieving the above object is a user information DB for storing the personal information of the individual user and the basic information of the enterprise; A privacy policy DB for storing the access and control policy for the personal information and a law-based rule for the policy;

An authentication unit for authenticating the cyber ID of the individual user and the cyber ID of the enterprise, respectively, received from the personal user terminal and the corporate server; PKI certificate included in the enterprise's attribute information read from the extended field of the PKI certificate included in the enterprise's cyber identity and the PMI certificate combined with the extended field of the PKI certificate, and the individual's cyber ID requested by the enterprise. Comparing the property information of the individual read from the PMI certificate combined with the extended field of the PKI certificate with the privacy policy to determine whether the enterprise has access to the personal information requested by the enterprise. An attribute policy comparison unit; And an information providing unit for transmitting, to the enterprise server, a legal regulation on punishment when the personal information protection system misuses the requested personal information and personal information when the company has access to the personal information requested by the enterprise. do.

In addition, when the above-described information providing unit does not have the right to access the personal information requested by the enterprise, the personal information protection system notifies the enterprise server of the rejection of the personal information provision, and provides a legal rule on which the personal information provision is rejected. Can be sent together.

In addition, when it is determined that the enterprise can provide the requested personal information, the information requested by the enterprise is read from the user information DB, expressed in APPEL, which is a policy setting language of P3P, and output to the information providing unit, and the personal information protection. When the policy is changed, the policy setting converter may further include a policy setting converter configured to register the changed policy in the privacy policy DB.

According to the method and system for protecting personal information according to the present invention, by providing selective / discriminatory personal information for each user in terms of users, it is possible to prevent companies from unnecessarily utilizing their own personal information or misusing them. In addition, by providing a notification function for the use of personal information, it is possible to prevent abuse from others or organizations, and to improve the level of awareness of the importance of personal information from users.

In addition, in the social aspect, since personal information is systematically defined by strong domestic laws, it is effective to immediately respond to misuse and theft of personal information, and not only sporadic personal information management but also unified personal information management. By granting limited personal information collection authority through the trust level, it is possible to prevent illegal personal information collection.

In addition, the present invention deficiencies PKI and PMI, and can store and verify the user's proper attributes according to the privacy policy after strong identification based on encryption through X.509 v3.0 certificate. By adding an attribute authentication function to an existing certificate, access control is possible using attribute information such as authority and payment as well as user identification.

In addition, after confirming the user's identity, by storing the user's attribute information together, it is possible to efficiently control and manage the purpose and adequacy of the personal information. In addition, by providing responsibility tracking function in case of an accident by using monitoring and logging, it is effective to improve the efficiency of personal information management.

Prior to describing the preferred embodiment of the present invention, basic concepts and terms generally used in the privacy method and system of the present invention will be described.

Public Key Infrastructure (PKI)

Public key infrastructure, or Public Key Infrastructure (PKI), is a procedure created to enable users to implement public key cryptography, usually in large (and often distributed) environments. PKI provides a number of services to each user, which are related to identification and access control.

? PKI generates certificates that associate user identity with a (public) cryptographic key.

? PKI retrieves the certificate from the database.

? PKI adds credibility to the authenticity of certificates by signing them.

Private Management Infrastructure (PMI)

PMI is an infrastructure that controls the issuance, storage, and distribution of attribute certificate technology and attribute certificate technology that enables the management of authority by providing attribute information for users in the certificate structure. If the PKI is a passport that provides only a user's identity verification, the PMI acts like a visa, which allows various access controls through the user's attribute information. In order to use such an attribute certificate as an information protection mechanism, the issuance, storage, and distribution of the attribute certificate should be able to operate smoothly in the attribute certificate generating authority, the attribute certificate owner, and the application service system. 3 is a diagram illustrating an operation structure of a PMI. Since the operation method of PMI is well known, its detailed description is omitted.

MS Crypto API

Cryptographic library provided as an OS level API in Microsoft's operating system. The actual cryptographic functionality is provided by a cryptographic service provider called CSP (Cryptographic Service Provider), but they all must provide a standard CryptoAPI interface so that any CSP can access it with a common CryptoAPI. Windows has built-in CSP provided by Internet Explorer, so you can use it. You can check the encryption level by looking at Help → About Internet Explorer in the Internet Explorer menu.

Platform for Privacy Preferences (P3P)

The Platform for Privacy Preferences (P3P) is a standard technology platform established by the World Wide Web Consortium (W3C) in 2002 to protect privacy when using websites. Individual users are given their privacy preferences. It is specified through a program or editor, and the user's browser is a technology that prevents the leakage of personal information in advance by blocking the web server that does not comply with this protection policy.

A P3P Preference Exchange Language (APPEL)

The World Wide Web Consortium (W3C) proposes to specify user privacy preferences through the A P3P Preference Exchange Language (APPEL) language when using Web sites. APPEL is not a language officially proposed by the W3C, but it functions to protect privacy through Privacy Bird and P3P user agents. APPEL can also control and evaluate P3P policy and user agent performance, and define privacy preferences based on XML language according to rules.

On the other hand, as described above, the present invention manages the attribute authority of individuals and companies requesting personal information in accordance with the law on personal information protection. The privacy policy based on these laws established the privacy policy by arranging the contents of the laws related to the protection of personal information in accordance with the OECD's eight principles of privacy protection as shown in Table 2 below. The contents of each are as follows.

The discussion of privacy has already begun in the 1978s at the OECD. As a result of these discussions, in 1980, it adopted a guideline, "BOD Recommendations on the Protection of Privacy and the International Distribution of Personal Data," and adopted a guideline to protect the privacy of personal information, encourage the free distribution of information, and comply with the National Privacy Act. Table 8 below shows the eight principles of the guideline, which aim to prevent unreasonable restrictions on the free distribution of information and to harmonize with relevant national laws and regulations.

Meanwhile, legislation of personal information protection is being promoted to facilitate the collection and handling of a large amount of personal information using an information and communication network, and to guarantee the self-information control rights of users of information and communication services. Table 3 below describes domestic privacy laws.

On the other hand, based on the OECD's eight principles of personal information protection, a table of personal information policy classification is generated using domestic law as shown in Table 4 below. These classification tables are designed to present regulations and penalties in accordance with the policies defined below when the process of collecting, sharing, distributing, and distributing personal information occurs.

Tables 5 to 7 below show personal information based on the law when a general user or a company registers the information of the personal information protection system of the present invention or when personal information is used for activities such as payment and marketing. Based on the collection principle, the following guidelines have been presented so that the user trust level registered in the system of the present invention can be confirmed. In addition, when requesting unauthorized collection or collection of personal information more than necessary, personal information inspection can prevent illegal collection and use of personal information.

In the above table, the related legislation refers to "Act on the Promotion of Information and Communication Network Utilization and Information Protection".

Policy Parser (Policy Settings Conversion Module)

This section sets up and parses privacy policies according to the OECD-based classification scheme. In other words, the policy for privacy protection and management is systematically represented, and when requesting access to personal information such as companies, the requestor information, the purpose of use of personal information, and the personal information to be requested are expressed in APP3, which is a policy setting language of P3P. The policy defined by the Policy Parser is reset when the policy of the present invention manages the privacy protection system policy and the policy change of the personal information protection system administrator and personal information provider (owner) of the present invention.

4 is a diagram illustrating an example of a policy expression of a personal information provider.

Policy Enforcement

If an enterprise server or the like (abbreviated as "ISP") complies with the policy defined in the personal information protection system of the present invention, the purpose of using the personal information and the method of using the personal information are allowed to the ISP based on privacy protection. . When the information is available, a warning message is sent to the personal information provider (owner) to provide personal information according to the owner's response. At this time, the requested personal information is converted into XML and transmitted.

5 and 6 illustrate an example of converting personal information into XML.

Meanwhile, in order to implement the law-based personal information protection system and method of the present invention, as described above, the PKI method and the PMI method are combined. Described in that manner, the present invention is a mechanism that can store and verify basic attributes for user identification. After verifying the identity based on encryption through the X.509 v3.0 certificate, the user's attributes based on the privacy policy are applied by using the PKI's extension field and PMI, and the overall configuration is shown in FIG.

Referring to Figure 7 describes the operation process as follows.

① The user applies for the certificate to the certification body according to the prescribed procedure.

② The certification authority verifies the applicant's identity, registers the user's certificate with the directory server, and issues it to the user along with the private key. At this time, the hash value of the user's security level and attribute information is stored in the certificate and issued to the user.

③ When the server receives the user's request for authentication, it requests the user's certificate from the certification authority.

(4) The server compares the value of the Privilege extension in the user's certificate to confirm that the security level and attribute information sent by the user are the rights granted to the actual user. If the security level and attribute information sent by the user are the same, the security level and attribute information signed by the user are decrypted with the public key of the certificate received from the certification authority. If the result of decryption is equal to the hash value of the security value and the attribute information, the identity of the user can be verified because only the paired private key is decrypted with the public key. If the comparison value is the same, the sent security level and attribute information are set to the user.

Meanwhile, in the above-described scheme, the present invention associates PKI extension fields with PMI-based attribute information. For the strong identity of the user, the AC (Attribute Certificate) which manages only the user's attribute information separately from the user's public key certificate and the user's attributes such as system access authority, duty, status, and credit status The information needs to be generated in AC and managed.

PKI and PMI consist of certificate basic fields and extended fields, respectively. In the present invention, the user's attribute information is managed using each extension field, and the extension fields applied to the system are shown in Tables 8 and 9 below.

PKI Extended field name Whether or not to use  Authority Key Identifier ×  Subject Key Identifier ×  Key usage ×  Private Key Usage Period ×  Certificate Policies ○  Policy Mappings △  Subject Alternative Names ○ Issuer Alternative
Names ×  Subject Directory Attributes △  Basic Constraints △  Name Constraints △  Policy Constraints ○  Extended Key Usage △  CRL Distribution Points ×  Authority Information Access ×  Procuration ○

PMI Attribute Fields and Extended Field Names Whether or not to use Service Authentication Information ○ Access Identity ○ Charging identity △ Group ○ Role ○ Clearance ○ Audit Identity ○ AC Tageting △ Authority Key Identifier × Authority Information Access △ CRL Distribution Points × No Revocation Available ×

Table 8 described above describes extended fields applied to PKI, and Table 9 lists extended fields applied to PMI, and indicates whether ○: used, △: scheduled use, and ×: unused, respectively.

In order to efficiently link PKI and PMI, PKI serial number fields and PMI holder fields are used. The Holder part of the PMI represents the owner of the attribute certificate. The value of this field may be set to baseCertificateID, which is the ID of the default public key certificate, entityName, which is the name of the certificate owner or authority, or objectDigestInfo, which is the hash value of the certificate or public key. The default public key certificate represents an identification value for the public key certificate corresponding to the owner of the attribute certificate, and is composed of the issuer and serial number of the public key certificate. Therefore, in the Holder part of the PMI profile, a connection relationship is established and found using the baseCertificatedID field consisting of Serial Number, which is the ID of the base public key certificate. 7 is a diagram illustrating an interworking scheme of a PKI and a PMI according to a preferred embodiment of the present invention.

According to the present invention described above, an example of a scheme for protecting personal information is as follows. Table 10 is a table summarizing terms used in examples to be described later.

U : Personal information provider (owner) U_ID : Personal Information Provider ID ISP : Service Provider ISP_ID : Service Provider ID ISP_PWD : Service Provider Password U_INFOB : Basic personal information requested U_INFOS : Requested payment personal information PIPE : Privacy system of the present invention ( Privacy Information  Protection Engine ) PTisp : Policy class tag of ISP User_DB : User Authentication DB Action : Request / Notice / Send / Response R : Defined Authority of ISP

1. The service provider " ISP " makes an authentication request to the PIPE system.

1.1 For service provider " ISP ", enter <ISP_ID, ISP_PWD> .

1.2 PIPE checks <ISP_ID, ISP_PWD> in User_DB .

1.3 If so, the policy level " PTisp " is assigned to the service provider " ISP "< ISP_ID , PTisp, Action >.

2. PIPE authorizes the service provider " ISP " for authentication and access to the PIPE system.

3. The service provider " ISP " requests payment personal information < U_INFOS > with the basic information <U_ID, U_INFOB> of the user " U " who applied for payment to the PIPE system.

4. The service provider " ISP " verifies its own policy class " PTisp ".

4.1 Check the trust rating of the service provider " ISP ".

4.2 Verify service provider " ISP " authority "R" via PTisp .

5. Confirm the purpose of using the personal information requested by the service provider " ISP ".

5.1 Check that the payment purpose policy set by the service provider " ISP " conforms to the policy provided by PIPE .

5.2 If verified, allow the service provider " ISP " limited rights to use personal information.

6. If allowed, send a warning message to the personal information provider " U " with the Notice function.

6.1 Service Provider "Personal Information Provider" U "who requested payment to ISP " chooses to allow the provision of his information < U_INFOS >.

7. Request information of service provider " ISP " is systematically provided through Policy Parser according to the above eight principles.

8. Convert to XML and provide personal information < U_ID , U_INFOS, Action > to service provider " ISP ".

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

8 is a diagram illustrating an overall configuration of a personal information protection system connected to a personal user terminal and a corporate server according to an exemplary embodiment of the present invention. Referring to FIG. 8, the personal information protection system 900 of the present invention is mutually connected with individual user terminals 850 and a server (hereinafter, referred to as an "enterprise server 800") through a wired / wireless communication network and a company, a public office, or the like. Connected.

The personal user terminals 850 are implemented as a personal computer, PDA, mobile phone, etc., access the personal information protection system 900 of the present invention to register the user's personal information, and each item of the user's personal information will be described later. It sets attribute information such as whether to disclose its information within the scope of the privacy policy, and whether to require prior consent or only post notification in case of disclosure.

In addition, the personal user terminal 850 registers personal information, receives a cyber ID encrypted with the user's PKI authentication information and attribute information from the personal information protection system 900, and accesses the online shopping center by accessing the corporate server 800 or the like. When performing a payment or accessing a server of a government office or a financial institution to perform a payment, it transmits its cyber ID to the corporate server 800.

The enterprise server 800 is a term that collectively refers to a server of an enterprise that operates an online shopping mall, a server of a mobile communication company, a public office server, a financial company server, and the like, and the enterprise server 800 stores its information as described below. A cyber ID that registers with the personal information protection system 900 and includes property information about the property of the information that can be provided by the user according to the privacy policy stored in the personal information protection system 900 and his PKI authentication information. Get issued.

In addition, when the corporate server 800 requires payment in the process of accessing the personal user terminal 850 to perform online shopping, the cyber ID of the individual user received from the personal user terminal 850 and his cyber ID To request the user's payment information by transmitting to the personal information protection system 900, and when the payment information is received from the personal information protection system 900 to perform the payment using the information.

In addition, when the corporate server 800 is required for personal information, such as for marketing of the corporate entity, the corporate server 800 requests the necessary information while transmitting its cyber ID to the personal information protection system 900, and the information requested by the individual is the personal information. When it is possible to read according to the privacy policy stored in the protection system 900, the requested personal information is received from the personal information protection system 900.

On the other hand, the personal information protection system 900 is provided with a privacy policy DB set in accordance with Tables 5 to 7 described above.

Thereafter, when the personal user terminal 850 accesses, the personal information is received from the personal user terminal 850 and stored in the user information DB, and whether or not the disclosure of the personal information input by the user and prior consent or Set matters related to the post notification. In addition, the personal user terminal 850 issues a cyber ID including the user's PKI authentication information and attribute information.

In addition, when the corporate server 800 connects, the corporate information is received from the corporate server 800, stored in the user information DB, and the attribute information about the information that can be viewed by the corporate entity according to the privacy policy. It sets up and issues a cyber ID that contains PKI authentication information and attribute information of the enterprise.

In addition, when the personal information protection system 900 receives the cyber ID of the enterprise and the cyber ID of the user from the corporate server 800 together with the payment information request, the personal information of the individual is authenticated by the personal PKI public key. The user's PKI public key to authenticate the company's PKI public key to view the property information of the company, etc., to identify the property information including the business type and business status of the company, and to view the personal information requested by the company having the property. Inquires whether the user can check the privacy policy DB, and if the viewing authority is set, investigate whether or not the individual has set prior consent or post notification on his or her information requested by the corporate server 800. After obtaining the approval from the personal user terminal 850 according to the user's setting, the enterprise server 800 After the transmission, or sent to the enterprise server 800 and notifies post to the individual user terminals (850).

At this time, the personal information protection system 900 registers the user's information history provided to the corporate server 800 in conjunction with the user information DB, and the penalty policy for misuse of the information privacy policy DB (948) Can be read from and sent to enterprise server 800.

On the other hand, when the personal information requested by the corporate server 800 is determined according to the property information and the privacy policy of the enterprise and cannot be viewed, the personal information protection system 900 informs the corporate server 800 of the inability to read. Notice, and read the provisions of the penalty for accessing personal information outside the scope of his / her authority from the privacy policy DB 948 to transmit to the enterprise server 800 and register in the user information DB, 850) notify the user of illegal access to personal information.

On the other hand, when the corporate server 800 requests the personal information of the public for marketing purposes, the personal information protection system 900 receives the cyber ID and the request information of the enterprise, and performs the PKI authentication of the enterprise When attribute information is read and the information requested by the corporate server 800 according to the attribute information and the privacy policy is determined based on the privacy policy, the information is transmitted to the corporate server 800 when the enterprise is viewable. In addition, the information providing history can be stored in the user information DB, and if the reading is impossible, the information can be notified of the information provision, and the legal information on which the information is provided can be notified from the personal information policy DB.

When the personal information protection system 900 of the present invention notifies the corporate server 800 of providing personal information or refusing to provide personal information, the personal information protection system 900 always provides information on the grounded legal regulations and the punishment rules for misuse of personal information. By providing them together and storing them as personal information fact-finding information, it clarifies the basis for protecting personal information and prevents misuse of personal information.

9 is a block diagram showing the detailed configuration of a personal information protection system 900 according to a preferred embodiment of the present invention. 9, the personal information protection system 900 includes an authentication unit 910, an authentication DB 920, an attribute policy comparator 930, a policy setting converter 950, an information provider 960, and a main server. DB 940 is included.

The main DB 940 also includes a user information DB 942, a PKI information DB 944, a PMI information DB 946, and a privacy policy DB 948. It may be configured to include a personal information DB for storing personal user information and a corporate information DB for storing corporate information.

First, the authentication DB 920 stores PKI authentication information such as individuals and businesses that are users, and the authentication unit 910 is a PKI certificate such as individuals and companies included in the cyber ID received from the enterprise server 800 The authentication is performed using the certificate information stored in the authentication DB 920. When the authentication is completed, the PKI extension field stored in the cyber ID and the PMI certificate are linked to the stored property information to the attribute policy comparison unit 930.

On the other hand, the user information DB 942 stores the personal information and corporate information of the individual user. The personal information stored in the user information DB 942 is stored according to the importance (policy level) of the individual's ID, name, social security number, address, mobile phone number, work name, work phone number, credit card number, card expiration date, etc., For each piece of information, it is set whether the user has pre-approved or post-notified.

In addition, as the enterprise information, information such as a company ID, a company name, a company phone number, a company type, and a company type is stored in the user information DB 942.

The PKI information DB 944 stores the PKI certificate information granted for each of the users and the information set in the extension field of the corresponding certificate. The PMI information DB 946 stores the attribute information of the PMI certificate granted for each of the users. Save it.

The personal information protection policy DB 948 stores legal information related to personal information protection, and according to the personal information protection policies shown in Tables 5 to 7, according to the type of business and the type of business for each item of personal information, etc. We store privacy policies that indicate the level of accessibility and the level of disclosure.

The attribute policy comparing unit 930 determines attribute information included in the cyber IDs of individuals and companies input from the authentication unit 910, and compares the attribute information of the personal information and the attribute information of the enterprise with the privacy policy DB 948. Compared to the personal information protection policy stored in the), it is determined whether the personal information requested by the enterprise can be provided and outputs the result to the policy setting conversion unit 950.

If the policy setting conversion unit 950 determines that the property policy comparison unit 930 can provide the personal information requested by the enterprise, the information requested by the enterprise is read from the user information DB 942 and used as a P3P policy setting language. It is expressed as APPEL and output to the information provider 960. In addition, when the policy is changed, the policy setting converter 950 reflects the changed policy in the privacy policy DB 948.

The information provider 960 converts the personal information requested by the corporate server 800 and related policy information (eg, the law punishment regulations when misusing user information) into XML and transmits the converted XML to the corporate server 800. In addition, the information provider 960 notifies the corporate server 800 of the denial when the enterprise requests the information that is out of the authority range set in its attribute information and is refused to provide the personal information. The relevant ground policy information (legal regulations, etc.) is transmitted to the enterprise server 800.

So far, the configuration of the personal information protection system 900 according to the preferred embodiment of the present invention has been described. Hereinafter, a personal information protection method according to the present invention will be described with reference to FIGS. 10 to 12.

10 is a flowchart illustrating a process of registering personal information and corporate information according to a preferred embodiment of the present invention.

Referring to FIG. 10, the personal user terminal 850 must first register his or her personal information in the personal information protection system 900 in order to be protected with personal information according to the present invention. To this end, the personal user terminal 850 records the attribute information in the PKI extended attribute field and the PMI attribute field (S1000).

After the attribute information is recorded, as described with reference to FIG. 7, the PKI extension field and the PMI attribute field are combined (S1010), and the combined attribute information is encrypted using the PKI authentication key together with its own personal information. The personal information registration system is requested while transmitting to the personal information protection system 900 (S1020).

The personal information transmitted to the personal information protection system 900 in step S1020 may be variously applied, for example, as shown in Table 11 below.

The personal information protection system 900 authenticates the identity of the user by decrypting the registration information of the individual user received from the personal user terminal 850 using the PKI certificate information of the user (S1030). ).

If the user's identity is authenticated, the privacy protection system 900 extracts the user's attribute information from the user's PKI extension field and the PMI attribute field, and stores the received personal information in the privacy policy DB 948 together. Personal information is classified for each item and stored in the user information DB 942 (S1040).

The personal information protection system 900 inquires of the personal user terminal 850 about whether the user's personal information requires prior approval within the scope of the privacy policy or needs post notification, and the personal user terminal ( 850 receives the setting information on the content of the inquiry and stores it in the user information DB 942 (S1050).

Thereafter, the personal information protection system 900 issues a cyber ID including the PKI authentication information and the attribute information of the user to the personal user terminal 850 (S1060), and the personal user terminal 850 internally stores the cyber ID. Store in (S1070).

On the other hand, the process of registering their information in the personal information protection system 900 by a company or the like is the same as the process of registering the information of the individual user described above. However, in the above Table 11, the information items applicable only to natural persons are excluded, and if the example of the registered enterprise information is listed from the low importance information, the company ID, company name, policy disclosure level, company name, industry type and business type , Phone number, address, email, corporate registration number, bank, transaction account number, credit card company name, credit card number, credit card expiration date and the like.

When the personal information and the corporate information are registered through the above-described process, the individual user uses the cyber ID given from the personal information protection system 900 in the process of making a payment in a general e-commerce process or in registering in a portal site. .

In addition, when a company makes a payment online, receives membership information, or needs information of the general public for marketing purposes, the corporation transmits its cyber ID to the privacy protection system 900 within the scope of its attributes. The necessary information can be provided.

11 is a diagram illustrating a process of a user performing payment and payment according to the privacy method of the present invention. Referring to FIG. 11, the personal user terminal 850 accesses an enterprise server 800 implemented as an online shopping mall server and performs a login (S1100). In the login process, the personal user terminal 850 transmits an ID and password to the corporate server 800 to log in. The ID and password may be a unique ID and password registered by the user in the corporate server 800. have.

When the login is performed, the corporate server 800 and the personal user terminal 850 perform an electronic commerce or the like according to a general method, and when a payment is required in the process, the corporate server 800 moves to the personal user terminal 850. Request a payment (S1110).

The personal user terminal 850 received the payment transmits the cyber ID received from the personal information protection system 900 to the corporate server 800 to the corporate server 800 (S1115).

The corporate server 800 transmits the cyber ID and its cyber ID received from the personal user terminal 850 to the personal information protection system 900 together with payment request information (including price information and information usage purpose). Request payment information (S1120).

The personal information protection system 900 authenticates the corporate cyber ID received from the corporate server 800 using the corporate PKI authentication information, reads attribute information from the corporate cyber ID, and checks the business type and business status of the corporate enterprise. The same basic information is read (S1130).

In addition, the personal information protection system 900 authenticates the individual's cyber ID received from the corporate server 800 using the individual's PKI authentication information, reads the individual's attribute information from the individual's cyber ID, and the personal information. It is read (S1135).

Thereafter, the personal information protection system 900 compares the property information of each individual, the property information of the enterprise, and the personal information requested by the enterprise with the privacy policy stored in the privacy policy DB 948, whereby the property of the enterprise is individual. The requirements of the corporate server 800 are determined by determining whether the information is applicable to the type of business and the type of business that can request the payment information such as the credit card number and the expiration date, and whether the company is authorized to request such information. It determines whether it is in compliance with the protection policy (S1140). If it is not in compliance with the policy, it notifies the denial of provision of personal information, and transmits policy information (legal information) based on this to the enterprise server 800 (S1145). ).

On the other hand, if the personal information protection policy is appropriate, the personal information protection system 900 investigates whether the personal information requested by the enterprise server 800 requires the user's prior approval (S1150), and if the item requires prior approval There is a request for prior approval by transmitting information such as information request company name, payment request amount, etc. to the personal user terminal (850) (S1155), the personal user terminal 850 personal information received from the personal information protection system 900 If the approval for the offer approval request (S1160), the personal information protection system 900 provides payment information to the enterprise server 800 (S1165), the enterprise server 800 performs the payment using the payment information. (S1170).

Meanwhile, after providing personal information, the personal information protection system 900 transmits the personal information providing details to the personal user terminal 850 (S1180).

12 is a diagram illustrating a processing process when the enterprise server 800 requests general personal information according to a preferred embodiment of the present invention. Referring to FIG. 12, when the corporate server 800 needs information of the general public (for example, the number of residents living in women in their 20s for each region) for marketing purposes, the corporate server 800 personalizes its cyber ID. It transmits to the information protection system 900 and attempts to access the system (S1200).

The personal information protection system 900 authenticates the corporate cyber ID received from the corporate server 800 by using the PKI authentication information of the corporate body, reads the attribute information of the corporate body from the corporate cyber ID, The same basic information is read and notified to the enterprise server 800 of the successful authentication (S1210).

When notified that the authentication is successful, the enterprise server 800 transmits the necessary information (including a list of necessary information and the purpose of use) for marketing, etc. to the personal information protection system (S1220).

The personal information protection system 900 compares the request information and the attribute information of the company read from the cyber ID with the privacy policy, and verifies whether the company has the authority to receive the requested information (S1230).

As a result of the verification, if the policy does not comply (S1240), if the requested information cannot be provided to the relevant company, the information cannot be provided and the policy policy (including statutory information) on which it is based is transferred to the corporate server 800. Transmit and display (S1245).

As a result of the verification, if the policy is appropriate, the enterprise server 800 reads the requested information from the user information DB 942 and provides the information to the enterprise server 800, and stores the fact as history information (S1250). When providing personal information in step S1250, the personal information protection system 900 reads the punishment provisions for misuse of the information from the personal information protection policy DB 948 and transmits them together.

Thereafter, the personal information protection system 900 notifies the users provided with the information that a specific item of their personal information is provided to the enterprise server 800 (S1260).

The present invention can also be embodied as computer-readable codes on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like, which are also implemented in the form of a carrier wave (for example, transmission over the Internet). It also includes. The computer readable recording medium may also be distributed over a networked computer system so that computer readable code can be stored and executed in a distributed manner.

So far I looked at the center of the preferred embodiment for the present invention. It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims. Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is defined by the appended claims rather than by the foregoing description, and all differences within the scope of equivalents thereof should be construed as being included in the present invention.

1 is a diagram showing the results of a survey on the status of personal information damage by type during 2005-2007.

2 is a diagram showing a result of a survey on the purpose of providing personal information for domestic general users to use the Internet service.

3 is a diagram illustrating an operation structure of a PMI.

4 is a diagram illustrating an example of a policy expression of a personal information provider.

5 and 6 illustrate an example of converting personal information into XML.

7 is a diagram illustrating an example in which a user attribute according to a privacy policy is applied by using an extended field of a PKI and a PMI.

8 is a diagram illustrating an overall configuration of a personal information protection system connected to a personal user terminal and a corporate server according to an exemplary embodiment of the present invention.

9 is a block diagram showing the detailed configuration of a personal information protection system 900 according to a preferred embodiment of the present invention.

10 is a flowchart illustrating a process of registering personal information and corporate information according to a preferred embodiment of the present invention.

11 is a diagram illustrating a process of a user performing payment and payment according to the privacy method of the present invention.

12 is a diagram illustrating a processing process when the enterprise server 800 requests general personal information according to a preferred embodiment of the present invention.

Claims (8)

(a) The personal information protection system receives registration request information combined with a PKI certificate from a personal user terminal, and receives registration request information combined with a PMI certificate from an enterprise server, and the user and the individual of the enterprise from the registration request information. Reading and registering the information and the attribute information; (b) the personal information protection system issuing a cyber ID including the PKI certificate information and the PMI certificate information to the personal user terminal and the enterprise server; (c) the personal information protection system receives a cyber ID and a request for personal information from the enterprise server, authenticates the identity and attributes of the enterprise by using the cyber ID, the attributes of the enterprise and the predefined personal information Comparing the protection policy to determine whether the enterprise has access to the personal information requested by the enterprise server; And (d) transmitting legal information related to the access right of the personal information to the enterprise server according to whether the company has access to the personal information requested by the company, The step (d) If the company does not have the right to access the personal information requested by the company, the personal information protection system is the legal information related to the right of access to the personal information with the notification of the denial of the provision of personal information to the corporate server, the basis of the denial of the personal information provision is Transmitting legal information, and notifying the personal user terminal of illegal personal information access, If the company has access to the personal information requested by the company, the personal information protection system relates to a punishment for misuse of the requested personal information and personal information as legal information related to the access right of the personal information to the corporate server. When the legal information is transmitted to the corporate server, but the personal information requested to the corporate server is transmitted, the personal information is obtained after acquiring prior consent from the personal user terminal according to whether the personal information is sent in advance or not. And post notification to the personal user terminal after transmitting to the corporate server or transmitting the personal information to the corporate server. The method of claim 1, wherein step (a) (a1) The personal user terminal combines the extended field of the PKI certificate and the PMI certificate attribute field in which the user's attribute information is recorded, and encrypts the personal information together with the user's personal information to transmit the personal information registration request information to the personal information protection system. step; (a2) the personal information protection system decrypts the personal information registration request information, extracts user property information from the PKI certificate extension field and the PMI certificate property field, and converts the personal information into the property information and the personal information. Classifying and storing according to a protection policy; (a3) the corporate server combining the extended field of the PKI certificate and the PMI certificate attribute field in which the attribute information of the enterprise is recorded, and encrypting together with the basic information of the enterprise to transmit the enterprise information registration request information to the personal information protection system; ; And (a4) the personal information protection system decrypts the enterprise information registration request information, extracts attribute information of an enterprise from the PKI certificate extension field and the PMI certificate attribute field, and converts the enterprise information into the attribute information and the personal information. And classifying and storing the data according to a protection policy. delete delete A user information DB for storing personal information of an individual user and basic information of an enterprise; A privacy policy DB for storing the access and control policy for the personal information and a law-based rule for the policy; An authentication unit for authenticating the cyber ID of the individual user and the cyber ID of the enterprise, respectively, received from the personal user terminal and the corporate server; PKI certificate included in the enterprise's attribute information read from the extended field of the PKI certificate included in the enterprise's cyber identity and the PMI certificate combined with the extended field of the PKI certificate, and the individual's cyber ID requested by the enterprise. Comparing the property information of the individual read from the PMI certificate combined with the extended field of the PKI certificate with the privacy policy to determine whether the enterprise has access to the personal information requested by the enterprise. An attribute policy comparison unit; And It includes an information providing unit for transmitting the legal information related to the access rights of the personal information to the enterprise server, depending on whether the company has access to the personal information requested by the company, The providing unit, If the company does not have the right to access the personal information requested by the company, the personal information protection system is the legal information related to the right of access to the personal information with the notification of the denial of the provision of personal information to the corporate server, the basis of the denial of the personal information provision is Transmitting legal information, and notifying the personal user terminal of illegal personal information access, If the company has access to the personal information requested by the company, the personal information protection system relates to a punishment for misuse of the requested personal information and personal information as legal information related to the access right of the personal information to the corporate server. When the legal information is transmitted to the corporate server, but the personal information requested to the corporate server is transmitted, the personal information is obtained after acquiring prior consent from the personal user terminal according to whether the personal information is sent in advance or not. Personal information protection system for the post-notification to the personal user terminal after transmitting to the enterprise server or the personal information to the enterprise server. delete delete 6. The method of claim 5, When the company has access to the personal information requested by the company, the information requested by the company is read from the user information DB, expressed in APPEL, which is a policy setting language of P3P, and output to the information provider, and the privacy policy is If changed, the personal information protection system further comprises a policy setting conversion unit for registering the changed policy in the privacy policy DB.

Images