KR101218496B1 - System for protection and management of personal information, and method thereof - Google Patents

Abstract

Disclosed are a personal information protection management system and a personal information protection management method. The personal information protection management system according to the present invention receives a personal information protection related law classification system and parses the personal information law items on the classification system, and receives the related personal information law items from the parsing unit. Natural language interpreter that analyzes the personal information protection policy prescribed by relevant personal information laws and regulations, and personal information that corresponds to the personal information protection policy analyzed by receiving the policy related to personal information analysis analyzed from natural language interpreter Receives the privacy policy technical document generated by the policy generation unit and the policy execution unit that generate the protection policy technical document, and can provide personal information in response to a request for personal information from the user of the personal information based on the privacy policy technical document. Make a decision about whether or not to offer and based on that decision It may be configured to include a policy execution unit for responding to the personal information request. Thus, using the system and method according to the present invention, the availability and scope of provision of personal information is clearly defined by standard technical documents, thereby providing usefulness of immediate response in case of misuse and theft of personal information.

Description

System for protection and management of personal information, and method

The present invention relates to a personal information protection management system and a personal information protection management method, and more specifically, to a user's privacy by applying a systematically defined privacy policy within a service company, a company, or a portal site dealing with personal information. The present invention relates to a personal information protection management system and a personal information protection management method that provide enhanced security and secure services.

Personal information is information about surviving individuals such as codes, letters, voice, sound, and video that can identify the individual by name, resident registration number, etc. (Even if this information alone does not recognize a specific individual, it can be easily combined with other information. (Including those that can be identified) (as defined in the Act on the Promotion and Protection of Information and Communication Network Utilization). In addition, any personal information that may affect the well-being and interests of the information subject (or party) when used against the person's intention or without the knowledge of the person can be said to be personal information.

On the other hand, it is increasingly important that information and communication service providers who collect, store, manage, and use such personal information securely and efficiently manage personal information of customers, which is an important business condition, and sometimes directly related to the survival of a company. have.

At this time, the information and communication service provider performs life cycle management at all stages of collection, storage, management, and use of personal information existing in the system. It consists of the steps of storage and management, use and provision of personal information, and destruction of personal information.

1 is a conceptual diagram for explaining the flow of personal information storage and management in the general personal information management system.

Referring to FIG. 1, the storing and managing of personal information corresponds to a step in which the information communication service provider stores and manages personal information of the personal information owner.

The personal information owner 10 requests a change / addition of personal information to the personal information management system 110 operated by the information communication provider 100, and the personal information management system 110 is responsible for managing personal information 130. ) To approve the personal information change / addition request requested by the personal information owner 10. At this time, the personal information manager 130 is given to the personal information management system 110 to approve the personal information change / addition request requested by the personal information management system 110. The personal information management system 110, which has received the approval of the personal information change / addition request from the personal information manager 130, performs the personal information change / addition to the personal information storage database 120.

For example, the collected personal information is stored in a database or the like, and authority management is performed such that only authorized persons can access the data according to the privacy policy. At the request of the owner of the personal information, the management of the stored personal information is managed, such as changing, adding or destroying the personal information with the approval of the manager.

2 is a conceptual diagram for explaining the flow of personal information use and provision in a general personal information management system.

Referring to FIG. 2, the personal information user 20 requests the use of personal information to the personal information management system 110 operated by the information communication provider 100, and the personal information management system 110 requests personal information. The management officer 130 requests the approval of the personal information use request of the personal information user 20. At this time, the personal information manager 130 is given to the personal information management system 110 to approve the request for use of personal information requested by the personal information management system 110. The personal information management system 110, which has received the approval of the personal information use request from the personal information manager 130, reads the personal information requested by the personal information user 20 to the personal information storage database 120, and then uses the personal information user. To 20.

In other words, the use and provision of personal information is a step of providing personal information collected and managed by an information and communication service provider to a third party such as a consignment company or an affiliated company under the approval of the manager in charge. For example, static personal information is used for basic services such as service user authentication or internet shopping, and additional services such as events, and may be provided to third-party service providers other than the service providers specified in the privacy policy as necessary. . Therefore, in this step, the personal information owner uses or provides a part of the personal information stored and managed by the information communication service provider from the subscription of the service to the withdrawal.

As described above, in the management step of the personal information illustrated in FIG. 1 and the use and provision of the personal information illustrated in FIG. Determining whether the information can be viewed and provided is an important issue. In other words, the important issue in the protection of personal information is the appropriateness of the policy regarding the management, use and provision of such personal information and how the enforcement of such policy can be carried out. .

In the above personal information protection management system, laws for the protection of personal information or information privacy, which is the basis of the above-mentioned policy in protecting personal information systematically, have been enacted in Korea. However, this is partly enacted and interspersed in various fields, and there is a conflict between legal gaps and regulations.

For example, current privacy laws consist of dual legal systems in the public and private sectors. The current personal information protection law has been amended into additional provisions, and has become a system of public laws, major laws such as the information and communication sector and the credit sector among the private sector, and other individual laws. In addition, the international privacy guidelines are the most representative of the OECD's "Guidelines on Privacy Protection and the International Distribution of Personal Information", which recommends efforts to protect personal information and establish national legislation. However, in Korea, there are no legislative complementary measures in place of the basic system with the scattered personal information protection legal measures.

In other words, decentralized laws do not have a systematic basic system, and therefore, it is necessary to establish a personal information protection system. In addition, the information protection technology that establishes and determines the policy for privacy protection is inconvenient to use and utilize between different groups because various solutions exist.

An object of the present invention for solving the problems described above, receiving a privacy policy technical document, the result of interpreting the privacy laws and regulations listed on the policy technical document, and defined on the privacy policy technical document The present invention provides a personal information protection management system that generates a personal information protection policy based on the personal information items and access authority values, and performs the created policy.

Another object of the present invention for solving the above problems is to receive a privacy policy technical document, the result of interpreting the privacy laws and regulations listed on the policy technical document, and on the privacy policy technical document The present invention provides a personal information protection management method for generating a personal information protection policy based on defined personal information items and access authority values, and executing the generated policy.

The present invention for achieving the above object is, a parsing unit for receiving the personal information protection related law classification system and parsing the personal information law items on the classification system, receiving the related personal information law items from the parsing unit related personal information Natural language interpreter analyzing natural language by analyzing laws and regulations related to personal information protection provided by the relevant personal information law, and receiving personal information protection policy analyzed by the natural language interpreter. Receives a policy generation unit for generating a privacy policy description document corresponding to a policy and a privacy policy description document generated by the policy execution unit, and receives personal information from a personal information user based on the privacy policy description document. On the basis of the availability and extent of personal information It provides a personal information protection management system comprising a policy performing unit for making a decision on, and responding to the request for personal information based on the decision.

Here, the privacy policy document is a document based on at least one privacy policy standard technology of A P3P Preference Exchange Language (APPEL), Enterprise Privacy Authorization Language (EPAL), and eXtensible Access Control markup Language (XACML). Can be.

Here, the privacy policy description document may be a document based on XML (eXtensible Markup Language).

The personal information protection management system further includes a legal database, and the natural language interpreter receives the relevant personal information law items from the parser, reads the related personal information law from the legal database, and interprets the natural language. It may be configured to analyze the policies relating to privacy protection provided by relevant privacy legislation.

Herein, the policy generation unit further includes a rule-base, and the personal information prescribed by the related personal information law received from the natural language analysis unit by applying rules included in the rule base. It may be configured to generate a privacy policy statement corresponding to a policy relating to protection.

In accordance with another aspect of the present invention, a parsing step of receiving a personal information protection related law classification system and parsing the personal information law items on the classification system receives the related personal information law items parsed by the parsing step. Natural language interpretation step of analyzing the relevant personal information law natural language analysis policy related to the protection of personal information prescribed by the relevant personal information law, the received personal information protection policy analyzed in the natural language interpretation step received the analyzed personal information A policy generation step of generating a privacy policy description document corresponding to a policy related to protection, receiving a request for using personal information from a user of personal information, and receiving a privacy policy description document generated in the policy generation step, The dog based on the privacy statement Making a decision on whether or not to provide personal information with respect to a request for personal information from an information user, and performing a policy of responding to the request for personal information based on the determination. To provide.

Here, the privacy policy document is a document based on at least one privacy policy standard technology of A P3P Preference Exchange Language (APPEL), Enterprise Privacy Authorization Language (EPAL), and eXtensible Access Control markup Language (XACML). Can be.

Here, the privacy policy description document may be a document based on XML (eXtensible Markup Language).

According to the present invention, users who provide their information through the use of a systematic privacy protection system can be legally protected, and by providing limited personal information collection on their information, unnecessary use of personal information and misuse To prevent. In addition, other persons or organizations that request and use personal information may use and use the personal information under legal protection. According to an embodiment of the present invention, standard technologies such as APPEL (A P3P Preference Exchange Language), which protects privacy, can be used to apply policies to various users in different groups and organizations, and to control access and use personal information. This provides security flexibility and convenience when requesting and using information. According to the present invention, as personal information is systematically defined by a strong domestic law, it provides usefulness of immediate response in case of misuse and theft of personal information.

1 is a conceptual diagram for explaining the flow of personal information storage and management in the general personal information management system.
2 is a conceptual diagram for explaining the flow of personal information use and provision in a general personal information management system.
3 is a block diagram illustrating an embodiment of a personal information protection management system according to the present invention.
4 is a conceptual diagram illustrating an example of a privacy classification regulation system applicable to a personal information protection management system according to the present invention.
5 is a diagram illustrating an APPEL document which is an example of a privacy policy technical document applied to a personal information protection management system according to the present invention.
6 is a flowchart illustrating an embodiment of a personal information protection management method according to the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

The personal information protection management system and the personal information protection management method according to the present invention described below are the personal information management system 110 and personal information manager in charge operated by the information communication provider 100 described with reference to FIGS. 1 and 2. It corresponds to a system performing the role of 130 and its operation method.

Personal information protection management system according to the present invention

3 is a block diagram illustrating an embodiment of a personal information protection management system according to the present invention.

Referring to FIG. 3, the personal information protection management system 300 according to the present invention may include a parser 310, a natural language interpreter 320, a policy generator 330, and a policy performer 340. Can be.

First, the parsing unit 310 is a component that receives a personal information protection related law classification system and parses the personal information law items on the classification system. Here, the legal classification system related to personal information protection may mean a classification system that systematically classifies domestic and international regulations and laws on the collection, sharing, distribution, and distribution of personal information.

4 is a conceptual diagram illustrating an example of a privacy classification regulation system applicable to a personal information protection management system according to the present invention.

Referring to FIG. 4, collection limitation 401, data quality 402, purpose specification 403, openness 404, individual participation 405, and use A classification criteria table is provided which classifies laws and regulations existing in Korea according to a classification system such as use limitation (406).

Such privacy-related legal classification system may be stored in text data or a predetermined database form, and may be changed and modified according to a situation by a system administrator and input into a personal information protection management system according to the present invention. In addition, according to the revision or new legislation of the law, the classification scheme related to privacy protection may be updated.

Next, the natural language interpreter 320 receives the related personal information law item from the parser 310 and analyzes the related personal information law in natural language to analyze the policy related to personal information protection prescribed by the related personal information law. It is a component.

That is, the natural language interpreter 320 is a component that interprets the relevant legal phrases by referring to the personal information protection-related legal phrases specified by the relevant personal information law items parsed and provided by the parser 310. Therefore, the personal information protection management system 300 according to the present invention further includes a legal database 321 which reads the relevant legal provisions and provides them to the natural language interpreter 320 at the request of the natural language interpreter 320. Can be configured. However, since the necessary legal provisions may be downloaded through a legal provision providing web site providing an open API, the legal database 321 may be required for the personal information protection management system 300 according to the present invention. It may not be a component.

Therefore, the natural language interpreter 320 decodes the specified privacy related laws and regulations and collects the generalized policies for the personal information prescribed by the relevant privacy laws and delivers them to the policy generator 330. Will perform. To this end, the natural language interpreter 320 may be configured to include a natural language analysis engine capable of analyzing natural language based on the laws and regulations (WWH) of the laws and regulations described in natural language.

Next, the policy generator 330 receives the policy related to the protection of personal information analyzed from the natural language interpreter 320, and the privacy policy technical document 332 corresponding to the analyzed policy related to the protection of personal information. The component that creates the.

Here, the privacy policy technical document 332 will be described first.

Currently, representative technologies for privacy are the Platform for Privacy Preference Project (P3P), an industry standard that describes privacy policies developed by the World Wide Web Consoritium (W3C), and intra-company customer information jointly developed by IBM and ZKS. As a technology for determining policy establishment and exchange for privacy information such as EPAL (Enterprise Privacy Authorization Language) and XML information protection technology, XML that controls access to resources through authorization of resources or access request entities As a base language, there is an eXtensible Access Control markup Language (XACML) that proposes a policy language model, defines XML request, response, and policy grammar. In addition, there is a Privacy Policy Statements Generator developed by the OECD.

On the other hand, the proposed technology for the user to express their policies and exchange P3P policy is APPEL (A P3P Preference Exchange Language), and the privacy policy technical document 332 according to the present invention is preferably the APPEL document. Can be.

However, the privacy policy technical document 332 according to the present invention is a document conforming to a predetermined form of the protocol that can describe the policy of privacy protection and exchange with each other. It can be used without limitation. For example, the privacy policy description document 332 is preferably APPEL, but may also be a document such as the above-described EPAL, XACML.

Hereinafter, an embodiment of the present invention has been described assuming that the privacy policy description document 332 is an APPEL document, but the privacy policy description document is a document that conforms to a prescribed form of a protocol and conforms to a specific standard. It can be used without being limited to the document. In this case, the policy description document 332 may be generally configured in the form of an XML (eXtensible Markup Language) document.

5 is a diagram illustrating an APPEL document which is an example of a privacy policy technical document applied to a personal information protection management system according to the present invention.

Referring to FIG. 5, the item 410 of the APPEL document exemplifying that the law on the protection of personal information prescribed in the corresponding privacy policy technical document is a law on the promotion of information communication network use and information protection, etc. is applicable. The law on the protection of personal information prescribed in the technical documents shall be designated as the Act on the Promotion of Information and Communication Network Utilization and Information Protection.

In addition, the tags of the items 420 in the privacy policy description document specify the types and access rights of the corresponding privacy information items defined by the privacy statement. That is, by defining the types of items and the access rights for the items in the privacy policy description document, the policy execution unit 340 to be described later provides a standard for executing the policy.

For example, the APPEL document of the privacy policy technical document basically applies the standard tags provided by the W3C, and provides basic information, role, purpose of use, and requesting information by providing an XML-based language to apply the policy in the present invention. It may be configured using the XML extension tag. This XML-based language enables interoperability and future expansion.

That is, the policy generation unit 330 is based on the principle of the general item-specific access rights for the personal information proposed by the laws related to personal information protection analyzed by the natural language interpreter 320, for the personal information items and access rights values A component that creates a privacy policy statement that defines a policy.

For example, the policy generator generates a privacy policy description document such as the APPEL document illustrated in FIG. 5.

Referring back to FIG. 5, the privacy policy description document sets the requestor's information with the <DATA-GROUP> contained in the <ENTITY> item, and the request type and the user's access with the <ACCESS> and <ACCESSCONTROL> tags. Control authority will be defined.

In addition, you can define what is defined for the purpose of using personal information through <PURPOSE> item, and know the law and information retention period applied through <DISPUTES-GROUP> and <RETENTION>. What information is requested can be defined in the <DATA-GROUP>.

At this time, the personal information is analyzed based on the “Personal Information Protection Policy Setting and Negotiation Standards (Korea Information and Communication Technology Association, 2007)” reflecting the obligations of the electronic communication of the information and communication service provider prescribed in the relevant laws of Korea. do. In addition, the permissions applied according to the user's information, role, purpose of use, etc. are classified differently.

Accordingly, the policy generator 330 further includes a rule-base, and applies the rules included in the rule base to receive the policy from the natural language interpreter 320. It may be configured to generate a privacy policy technical document corresponding to a policy relating to privacy protection provided by relevant privacy laws.

Finally, the policy executor 340 serves to enforce the policy specified in the privacy policy description document received through the policy executor 330 described above. That is, the request for personal information from the personal information user 20 is received, and the policy established through the policy execution unit 330 is applied to the request to determine the limit of personal information that can be provided and the limit. By providing personal information within the third party to a third party to enforce the privacy policy.

That is, the policy execution unit 340 reads and provides the personal information to the personal information user based on the type of personal information and the range of personal information that can be provided based on the policy in the personal information storage database 120. It can be configured to perform. At this time, the personal information storage database 120 may be a component existing in the personal information protection management system 300 according to the present invention, but the present invention is a database operated by a third operating entity to maintain confidentiality of information. It may also exist as an external component to the privacy management system in accordance with

Privacy management method according to the present invention

6 is a flowchart illustrating an embodiment of a personal information protection management method according to the present invention.

Referring to FIG. 6, the personal information protection management method according to the present invention includes a parsing step (S510), a natural language interpretation step (S520), a policy generation step (S530), a personal information use request receiving step (S540), and a policy performing step ( S550) may be configured to include.

The parsing step (S510) corresponds to a step in which the personal information protection management system according to the present invention receives the personal information protection related law classification system and parses the personal information law items on the classification system. Referring to FIG. 3 in parallel, the step S510 corresponds to a process in which the parsing unit 310 of the personal information protection management system 300 refers to a privacy classification rule.

At this time, the law classification system related to personal information protection may mean a classification system that systematically classifies domestic and foreign regulations and laws for the collection, sharing, distribution, and distribution of personal information, as illustrated in FIG. It may be stored in a predetermined database form, and may be changed and modified according to a situation by a system administrator and input into a personal information protection management system according to the present invention. In addition, according to the revision or new legislation of the law, the classification scheme related to privacy protection may be updated.

Next, the natural language interpretation step (S520) receives the related personal information law items parsed in the parsing step (S510) and interprets the relevant personal information laws in natural language by analyzing the related personal information laws and policies related to personal information protection prescribed by the related personal information law. It is a step of analyzing.

That is, natural language interpretation step (S520) receives the legal provisions parsed in the parsing step (S510) from components such as the legal database (321) to implement a generalized policy for personal information prescribed by the relevant privacy laws and regulations. It will play the role of collecting. To this end, the natural language interpretation step S520 may be performed using a natural language analysis engine capable of analyzing natural language based on laws and regulations written in natural language based on the sixth principle (5W1H).

Next, the policy generation step (S530) receives the policy related to the privacy protection analyzed in the natural language interpretation step (S520) to generate a privacy policy technical document corresponding to the analyzed privacy policy Step.

As mentioned above, a privacy policy statement is a document that follows a set of conventions that allow for the description and interchange of policies of privacy. It can be used without being limited to the accompanying document. For example, the privacy policy technical document is preferably APPEL, but may also be a document such as EPAL or XACML.

An example of the privacy policy technical document is the same as in FIG. 5 described above, and thus, further description thereof will be omitted.

Next, a step of receiving a personal information use request (S540) is a step of receiving a request for using personal information from a user of personal information.

In this case, the user of the personal information may be a third party such as a consignment company or an affiliated company that receives the personal information collected and managed by the information communication service provider under various management's approvals. That is, the personal information user may correspond to a third party that requires the use of personal information for basic services such as service user authentication or Internet shopping and additional services such as events.

Finally, the policy execution step (S550) is based on the privacy policy technical document generated in the policy generation step (S530) for the personal information use request requested by the personal information user in the step S540 of receiving the personal information use request. Determining whether the personal information is provided to the personal information user and the scope of the personal information based on the application policy on the protection of personal information, and browsing the personal information storage database to provide the corresponding personal information to the personal information user. Corresponds to

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

20: personal information user 120: personal information storage database
300: privacy management system
310: parser 320: natural language analysis unit
321: legal database
330: policy generator 331: rule base
332: Privacy Policy Article
340: Policy execution unit

Claims (8)

Legal database;
A parsing unit receiving a personal information protection law classification system and parsing the personal information law items on the classification system;
A natural language interpreter which receives the related personal information law item from the parsing unit, reads the related personal information law from the legal database, interprets the natural language, and analyzes the policy related to the protection of personal information prescribed by the related personal information law;
A policy generator configured to receive a policy related to privacy protection analyzed from the natural language interpreter and to generate a privacy policy description document corresponding to the analyzed privacy policy; And
Receiving a personal information protection policy description document generated by the policy execution unit and determining whether to provide personal information and a range of the provision of the personal information in response to a request for personal information from a user of personal information based on the privacy policy description document. And a policy execution unit for responding to the request for personal information based on the determination. The method of claim 1,
The privacy policy technical document is a document based on at least one privacy policy standard technology of A P3P Preference Exchange Language (APPEL), Enterprise Privacy Authorization Language (EPAL), and eXtensible Access Control markup Language (XACML). Personal information protection management system. The method of claim 1,
The privacy policy description document is a privacy management system, characterized in that the XML-based document (eXtensible Markup Language). delete The method of claim 1,
The policy generator further includes a rule-base,
By applying rules included in the rule base to generate a privacy policy technical document corresponding to a policy relating to the protection of personal information prescribed by the relevant personal information law received from the natural language analysis unit. Privacy Management System. A parsing step of receiving a personal information protection related legal classification system and parsing the personal information legal items on the classification system;
A natural language interpretation step of receiving the related personal information law item parsed in the parsing step and analyzing the related personal information law in a natural language to analyze a policy related to personal information protection prescribed by the related personal information law;
Policy generation step of generating a privacy policy technical document, which is an XML (eXtensible Markup Language) based document corresponding to the analyzed personal information protection policy by receiving the policy related to personal information analysis analyzed in the natural language interpretation step. ;
Receiving a request for using personal information from the personal information user; And
Receiving the privacy policy description document generated in the policy generation step, and based on the privacy policy description document for the availability and the scope of the provision of the personal information to the request for personal information from the user of the personal information And making a decision and responding to the request for personal information based on the decision. delete delete

Images