KR102055706B1 - Method for Generating Log Data Relating to Process of Personal Information and Method for Detecting Personal Information Leakage Using the Same - Google Patents

Abstract

The present invention relates to a method for generating log data for personal information processing performed on a personal information processing screen provided in a computer. The method for generating log data for personal information processing comprises: a first step of collecting a plurality of pieces of collection item data allocated with a fixed length; and a second step of generating log data including the collection item data collected in the first step and a delimiter inserted between adjacent collection items.

Description

Method for Generating Log Data Relating to Process of Personal Information and Method for Detecting Personal Information Leakage Using the Same}

The present invention relates to a method of generating log data related to personal information processing and a method of detecting leakage of personal information by using log data generated by the method.

Application software running on a PC or mobile device has a number of screens, each with different behavior. Among the screens, there may be screens for handling or processing personal information. An important issue is that the personal information processing history and the leakage of personal information can be quickly identified on the screen related to personal information.

Log data generation according to the prior art is difficult to grasp personal information processing history or personal information leakage, so it is difficult to meet the aforementioned requirements.

An object of the present invention is to provide a log data generation method for quickly identifying personal information leakage by standardizing the generation of log data related to the processing details when processing personal information on a screen provided by an application.

The present invention relates to a method for generating log data of a personal information processing operation performed on a personal information processing screen provided by a computer, the method comprising: collecting a plurality of pieces of collection item data each having a fixed length; And a second step of generating log data including collection item data collected in the first step and a separator inserted between adjacent collection items.

The collection item data may include processing history information in which information on the processed personal information details is arranged.

The processing history information may be information in which an indicator indicating each of a plurality of personal information assigned with a sequence is arranged based on the sequence, and set to a value indicating that the indicator of the sequence is processed personal information with respect to the processed personal information. .

According to a preferred embodiment of the present invention, when the collection item data except for the processing history information is a character string, if the length of the collection data is smaller than the fixed length, the collection item data except the processing history information is set to a blank from the beginning of the fixed length. If is a number, if the length of the collected data is smaller than the fixed length, it may be set to zero from the beginning of the fixed length.

The collected item data includes work time information, screen identification information, transaction code information, worker identification information, work position information, system operator identification information, work subject identification information, work subject identification information, information processing history information, The personal information processing system may include at least one of identification information, inquiry type information, inquiry number information, and identification code information of the processed personal information.

The present invention also provides a personal information leakage detection method using the log data generated by the above-described log data generation method, and the personal information leakage detection method according to the present invention includes an indicator of a sequence of personal information allowed for processing, A third step of generating and storing permission log data by setting a value indicating the processed personal information; And a fourth step of determining that the personal information is leaked when the value indicating the processed personal information included in the log data is not included in the value indicating the processed personal information included in the allowed log data of the third step. .

Generating log data in a standard format according to the present invention has an effect of easily grasping information related to personal information processing.

According to the present invention, it is possible to easily and quickly determine whether the type of personal information designated as being allowed to be inquired or processed in advance can be easily and quickly determined by simply contrasting the allowed log data with the actual job log data.

1 is a conceptual diagram of an environment to which a log data generation method according to the present invention is applied;
2 is an example of log data generated by the present invention.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

Encryption / decryption may be applied to the information (data) transmission / reception process performed in this specification as necessary, and the expressions describing the information (data) transmission process in this specification and claims are all encrypted / It should be interpreted as including the case of decoding. In this specification, expressions of the form "transfer from A to B (transfer)" or "A receives from B" include those that are transmitted (transmitted) or received with other mediators in between, and directly from A to B. It does not represent only transmission (delivery) or reception. In the description of the present invention, the order of each step is to be understood without limitation unless the preceding step is to be performed logically and temporally prior to the later step. In other words, except in the exceptional case described above, even if the process described in the following step is performed in advance of the process described in the preceding step, the nature of the invention is not affected, and the scope of rights should be defined regardless of the order of the steps. In this specification, “A or B” is defined to mean not only selectively indicating any one of A and B, but also including both A and B. In addition, the term "comprising" in this specification has the meaning encompassing further including other elements in addition to the elements listed as containing.

In the present specification, only essential components necessary for the description of the present invention are described, and components not related to the nature of the present invention are not mentioned. It should not be construed in an exclusive sense including only the components mentioned, but in a non-exclusive sense, which may exclude certain components that are not essential or may include other components.

The present invention is performed by an electronic computing device such as a computer capable of electronic operations, and the mathematical operations and calculations of the steps of the present invention described later are suitable for the known coding method and / or the present invention for performing the operations or calculations. It can be implemented by computer operation by means of coding designed to be.

1 is a conceptual diagram of an environment in which a log data generation method according to the present invention is performed.

The application software runs on the work system 10 and displays a work screen 12 on which a user can work. The user performs various tasks through the work screen 12. The present invention relates to generating log data related to personal information processing among such various tasks. In the present specification, the term “processing” is defined to include all kinds of tasks performed by the user through the work screen 12 such as inquiry, change, correction, deletion, and input.

According to the present invention, log data of processing details on a screen in which personal information is processed among the work screens 12 is generated, which is generated by the standard format log 14 according to the present invention.

The format of log data according to the present invention is as follows. For convenience, the following example is given.

Collection item Field length (fixed) Explanation Working time 14 Information Processing Time (yyyyMMddHHmmss) Screen number 11 Screen identification code where personal information processing occurred Transaction code 60 Code to identify transaction type User identification 10 Unique number of the employee who performed the information processing Position at work (IP) 15 IP address of the terminal requesting personal processing Customer unique number 8 Customer unique identification number for each system Resident registration number 14 Social Security Number (includes "-") Information processing history One Code according to information processing Processing system 3 Personal Information Processing System Identification Code View Type One Single Lookup Identification Code Views 11 Number of hits if there are multiple hit types * Personal Information Type 29 Personal Information Identification Code Processed

An example of standardizing log data relating to personal information processing performed on the work screen 14 for processing personal information is shown in FIG. 2.

Each collection item is assigned a field length, and each collection item information is identified by a delimiter 60. Log data related to personal information processing includes work time information 21, screen number information 22, transaction code information 23, user identification information 24, and work position information (e.g., IP information). 25), customer specific identification information 26 of each work system 10, social security number information 27 of the subject, information processing history information 28, and identification information of a processing system that processes personal information ( 29), the personal information inquiry type information 30 (single item inquiry presence or absence identification code), the inquiry count information 31, and the information about the processed personal information type 50 may be included. The type of the above information is merely an example for convenience of description, and may further include other types of information or exclude some of the above information.

If the collected item data is a string, the first part can be treated as blank if there is a remaining field length. If the collected item data is numeric, the first part is treated as 0 to adjust the field length.

Next, a method of detecting the leakage of personal information by using the information 50 on the processed personal information type will be described. For convenience, the following types of personal information are taken as examples.

division turn Classification List Unique identification number One Resident registration number Household Resident Registration Number, Contractor Resident Registration Number, Cardholder Resident Registration Number, Account Holder Resident Registration Number, Insured Resident Registration Number, Contractor Resident Registration Number, Debtor Resident Registration Number, Beneficiary Resident Registration Number 2 Other Passport number, alien registration number, etc. General personal information 3 name Customer name, contractor, insured person, householder's name, cardholder, depositor, heir, remitter, English name, short-term beneficiary, designated representative, pension beneficiary, attractee, remitter, creditor, debtor, etc. 4 date of birth Date of Birth Insured Date of Birth, Date of Contractor's Birth, etc. 5 Phone number Mobile number, home number, work number, mobile number, home contact, work contact, etc. 6 address Postal address, address of residence, etc. 7 Other Email, fax number, job name, marital status, health information, etc. Financial information 8 Account Number Loan payment account, insurance payment account, cancellation refund payment account, customer return account, registration account, automatic transfer account, attracted automatic transfer account, pension payment account 9 name of bank Insurance payment bank, dividend payment bank, loan payment bank, pension payment bank, cancellation refund payment bank, transfer bank, transaction bank, group deposit amount, partner bank, remittance bank, bank branch 10 product name Name of subscription product (fund, insurance product, etc.) 11 Other Card number, card name, credit rating, etc. Transaction Information 12 Price The amount of the withdrawal, the amount billed by the company, the total amount of tax incentives, the total amount of tax incentives, the amount of insurance payments, the total amount of payments, the amount of refunds, the amount due, the amount of voting, the amount of the initial deposit, the amount of pension, the balance after processing, the balance of the previous month , Change amount, etc. 13 tax Other income tax, termination tax, termination tax, refund resident tax, special agricultural tax, refund income tax, additional tax 14 premium Prepaid premiums, monthly conversion premiums, net premiums, general account income premiums, unpaid premiums, risk premiums, actual premiums by insurance, transfer premiums, monthly premiums, mid-added premiums, etc. 15 Other Expenses, Dividends, Contract Fees, Percentages, Loans, Interest, Fees, etc.

The personal information type according to the above example can be represented by 29 characters including each code and separator.

The indicators of each personal information can be arranged in the order given in the above table to form information 50 on the personal information processing details. For example, when the worker inquires (processes) the phone number and address of the customer, the information 50 regarding the personal information processing details may be generated as follows.

0-0-0-0-1-1-0-0-0-0-0-0-0-0-0

When the worker inquires the customer's social security number and account number, the information 50 regarding the personal information processing details may be generated as follows.

1-0-0-0-0-0-0-1-0-0-0-0-0-0-0

According to this generation method, when the personal information of each sequence number is inquired (processed), the value of the indicator of the sequence number is "1" which indicates that the sequence number has been inquired (processed), and "0" when not inquired (processed). By setting, only the information 50 regarding the personal information processing history can be checked very easily what personal information has been processed.

In the above example, 0 and 1 indicate whether the personal information of the corresponding order has been processed, but the indicator of the corresponding order may be set more variously. For example, in case of inquiring other information which is 11th personal information, such as card number, card company name, credit rating, etc., each specific information is given a specific code, and the code corresponding to the actually processed personal information is indicated by the 11th order indicator. Can be set on For example, card number A, card company B, credit rating C, card number and card company lookup D, card number and credit rating lookup E, card name and credit rating lookup F, If G is given when all three pieces of information are referred to, and if the worker inquires the customer's social security number, account number, and card number and credit rating, the information 50 regarding the personal information processing details is generated as follows. Can be.

1-0-0-0-0-0-0-1-0-0-E-0-0-0-0

As such, generating log data in a standard format according to the present invention has an effect of easily grasping information related to personal information processing.

Next, a method of detecting the leakage of personal information by using the log data generated by the present invention will be described.

First, allow log data displaying personal information that is allowed to be processed by each screen, each worker, or a specific situation is set and stored. For example, only the social security number and the account number inquiry can be set as the personal information that can be processed in the specific work screen 12. In this case, allow log data can be created and saved as follows.

1-0-0-0-0-0-0-1-0-0-0-0-0-0-1

However, if the log data according to the worker's personal information processing result is 1-0-0-0-0-0-0-1-1-0-0-0-0-0-0, the personal information that is not allowed is inquired. It can be judged that it has been processed.

That is, according to the present invention, it is possible to easily and quickly determine whether the type of personal information designated as previously allowed to be inquired or processed is easily and quickly determined by simply comparing contrast log data with actual work log data.

While the invention has been described above with reference to the accompanying drawings, the scope of the invention is determined by the claims that follow, and should not be construed as limited to the embodiments and / or drawings described above. And it should be clearly understood that improvements, changes and modifications apparent to those skilled in the art of the invention described in the claims are included in the scope of the present invention.

10: work system
12: Work screen
14: Standard Format Log
40: log collection device

Claims (6)

In the method for generating log data of the personal information processing operation performed on the personal information processing screen provided by the computer,
A first step of collecting a plurality of collection item data each having a fixed length;
A second step of generating log data including collection item data collected in the first step and a separator respectively inserted between two collection item data adjacent to each other;
The collected item data includes processing history information in which information on the processed personal information history is arranged.
Processing history information,
Indicators indicating each of the plurality of personal information assigned to the order are arranged based on the order,
Regarding processed personal information, the information of which the indicator of the sequence is set to a value indicating that the processed personal information is
How to generate log data.
delete delete The method according to claim 1,
If the length of collected data is less than the fixed length when the collected item data except processing history information is a string, it is set to blank from the beginning of the fixed length.
If the collected item data except the processing history information is a number, if the collected data length is smaller than the fixed length, the collection item data is set to 0 from the beginning of the fixed length.
How to generate log data.
The method according to claim 1,
Collected item data is
Work time information, screen identification information, transaction code information, worker identification information, work position information, system operator identification information, work subject identification information, work subject identification information, information processing history information, personal information processing system identification At least one of information, inquiry type information, inquiry number information, and identification code information of the processed personal information,
How to generate log data.
In the personal information leakage detection method using the log data generated by the log data generation method of claim 1,
A third step of generating and storing permission log data by setting an indicator of the order of the personal information allowed to be processed to a value indicating that the personal information is processed;
And a fourth step of determining that the personal information is leaked when the value indicating the processed personal information included in the log data is not included in the value indicating the processed personal information included in the allowed log data of the third step. ,
Privacy leak detection method.

Images