KR102224470B1 - Method and system for managing genetic data providing read selectively about personal genetic encryption data - Google Patents

Abstract

The present invention is a genetic information management method and system that provides selective access to personal genetic information encrypted data, in a personal genetic information storage unit in which personal genetic information encrypted with a security key is arranged and stored by nucleotide sequence lines, based on genetic information. A copy generation step of creating a copy by copying the encrypted personal genetic information of the selected viewing section in order to receive a customized service; A reading copy storing step of decrypting the copy with the security key, generating a reading key, encrypting the decrypted copy with the reading key, and storing the encrypted reading copy in the personal genetic information storage unit; And a selective browsing step of providing the browsing key to a personalized service provider based on genetic information to selectively browse a copy for reading that can be decrypted with the browsing key on the personal genetic information storage unit. It is a genetic information management method that provides selective access to genetic information encoded data and a system for providing the same.According to the present invention, personal genetic information is securely provided for personalized services while protecting personal genetic information more powerfully. You can do it.

Description

[Method and system for managing genetic data providing read selectively about personal genetic encryption data}

The present invention relates to a genetic information management method and system that provides selective access to personal genetic information encrypted data, and more specifically, a copy of a partial section necessary for providing customized services among users' personal genetic information is separately encrypted. And, by providing a public key for this to a service provider that provides a customized service, a security method for personal genetic information is proposed so that the service provider can selectively browse only the corresponding section.

In the past, mass-producing a single product or the same service was a key issue in the past, but as the times evolve, a variety of customized products or services taking into account different physical or environmental characteristics are gradually appearing for each individual.

In judging different characteristics of each person and providing customized goods or services accordingly, the person's behavior pattern, personality, and physical condition can be the main factors, but through such factors, the characteristics of different individuals can be accurately determined. It is difficult to judge, and as such, it requires a long-term accumulation of information about the individual, so there is a limit to sufficiently consider the characteristics of each individual.

In meeting the demand for customized services, genetic analysis technology has recently begun to be in the spotlight. Genes are the most important personal information that is determined when a person is born. It becomes possible to infer characteristic information.

Through such personal genetic information, a person can be identified more accurately than any existing personal information, and furthermore, family information to which the person belongs can be identified. If personal genetic information is leaked and used maliciously, the individual Mental, physical, and material damage that cannot be converted numerically occurs.

Therefore, when using personal genetic information to provide customized services only for that individual, security for personal genetic information should be considered first.

As a technology for maintaining the security of genetic information at the same time as a service using personal genetic information, a method of transmitting the encoded genetic information along with a decryption key to a customized service provider by encoding personal genetic information is generally proposed. As an example, FIG. 1 shows a genetic counseling service (Korean Patent Application No. 10-2009-0093474) using personal genetic information encrypted data.

Genetic information experimentation and analysis institutions use the customer's genetic information to encrypt the customer's genetic information so that they can receive phenotypic information services, and store the genetic information in the service provision means provided by the institution. At this time, the genetic counseling group that provides phenotypic information service is provided with a unique generative consultant key from each genetic information experiment and analysis institution, and a generative consultant table is obtained by providing the genetic consultant key to the genetic counseling group. (S10) It becomes. And when the customer provides the record medium containing the genetic information to the genetic counseling group, the encrypted genetic information of the customer is obtained (S20) and the decryption key for decrypting it is obtained (S30) to decrypt the encrypted genetic information. In this case, the genetic information of the customer, which can be disclosed according to the grade of the genetic counselor group, is obtained by referring to the genetic consultant table (S50).

The prior art as described above encrypts personal genetic information and transmits the encrypted personal genetic information itself to a customized service provider so that only a limited portion of the personal genetic information can be disclosed when it is necessary to receive a personalized service.

In the case of such a security method, personal genetic information is encrypted and emphasized the security that only a part of it is disclosed, but in reality, the personal genetic information itself is transmitted to the corresponding customized service provider, so that the customized service provider is not authorized to it. Other parts can be decrypted through hacking, and further, if a malicious hacker or the like intercepts this information in the middle of the transmission of encrypted personal genetic information, the resulting damage can be serious.

Therefore, it is urgent to introduce a security method that can provide more powerful and safer personal genetic information while providing information for customized services.

The present invention aims to solve the problems of the prior art as described above, and its main object is to provide a security method capable of providing information for customized services while protecting personal genetic information more strongly and safely.

In particular, in providing one's own genetic information in order to receive a variety of services based on personal genetic information, the leakage of personal genetic information causes mental, physical, and material damage that cannot be converted numerically to an individual. I want to solve the problem.

Furthermore, in the case of a security method in which personal genetic information is encrypted and only partially disclosed, as the personal genetic information itself is actually transmitted to the corresponding customized service provider, the customized service provider decrypts other parts that are not authorized to them through hacking. There is a problem that can be caused, and a malicious hacker or the like intercepts this information in the middle of the transmission of encrypted personal genetic information, and thus serious damage occurs.

In order to achieve the above technical problem, the genetic information management method for providing selective access to the personal genetic information encrypted data according to the present invention is, in the personal genetic information storage unit where personal genetic information encrypted with a security key is arranged and stored by nucleotide sequence lines. , Copy generation step of creating a copy by copying the encrypted personal genetic information of the selected viewing section to receive a personalized service based on genetic information; A reading copy storing step of decrypting the copy with the security key, generating a reading key, encrypting the decrypted copy with the reading key, and storing the encrypted reading copy in the personal genetic information storage unit; And a selective browsing step of providing the browsing key to a personalized service provider based on genetic information to selectively browse a browsing copy that can be decrypted with the browsing key on the personal genetic information storage unit.

Preferably, a genetic information index including identification information corresponding to each nucleotide sequence line for the encoded personal genetic information is provided, and the step of generating a copy includes a nucleotide sequence location for providing a customized service from the customized service provider. Receiving read request information including information; Determining a reading section for the reading request information by checking a nucleotide sequence line corresponding to the nucleotide sequence location information in the genetic information index; And selecting a reading section from the encrypted personal genetic information stored in the personal genetic information storage unit, and copying the encrypted personal genetic information of the reading section to create a copy.

The step of storing the copy for reading may include: decrypting the copy with the security key, generating a reading key, and then re-encrypting the decrypted copy with the reading key to create a reading copy; And storing the copy for reading in the personal genetic information storage unit by arranging the reading copy by nucleotide sequence line, connecting it to the end of the nucleotide sequence line of the personal genetic information encoded for each line, and storing it in the personal genetic information storage unit.

Furthermore, the selective browsing step may include providing the browsing key to a personalized service provider based on genetic information; Authorizing access to the personal genetic information storage unit to the personalized service provider, and selectively decrypting a copy for reading from among the data stored in the personal genetic information storage unit with the reading key; And reading a copy for reading decoded by the customized service provider to the customized service provider.

Preferably, it may further include a step of destroying the reading copy, which can be decrypted with the reading key, for destroying the reading copy.

More preferably, in the step of storing the browsing copy, the browsing key is generated with a pair key of a private key and a public key, the copy is encrypted with the private key, and in the selective browsing step, a personalized service provider based on genetic information The browsing key provided to the user is the public key, and after performing the selective browsing step, the step of re-encrypting the browsing copy decrypted with the public key of the customized service provider with the private key.

Furthermore, after performing the copy creation step and the reading copy storage step, a profile creation step of generating a profile including information on the reading section of the reading copy and the private key and public key corresponding to the reading copy is further performed. It can also be included.

Taking one step further, receiving access request information including nucleotide sequence location information for providing a customized service from a customized service provider; And searching for a profile corresponding to the nucleotide sequence location information included in the view request information, wherein the selective browsing step may be performed by providing a public key corresponding to the profile to the customized service provider. have.

Preferably, from the copy creation step, the selective browsing step is repeatedly performed to generate a plurality of different profiles, and by determining whether to maintain each of the plurality of profiles, viewing corresponding to the profile determined that maintenance is not necessary It may further include a step of destroying the profile of destroying the copy, private key, and public key.

In addition, the genetic information management system for providing selective access to personal genetic information encrypted data according to the present invention includes: a personal genetic information storage unit in which personal genetic information encrypted with a security key is arranged and stored by base sequence lines; And interlocking with the personal genetic information storage unit, determining a viewing section of encrypted personal genetic information to receive a personalized service based on genetic information, generating a copy and a reading key for this, and a reading copy encrypted with the reading key And a genetic information management device that generates and stores the personal genetic information storage unit, and provides the reading key to a corresponding customized service provider to selectively browse the reading copy on the personal genetic information storage unit. .

Preferably, the personal genetic information storage unit includes: original data in which personal genetic information encrypted with a security key is arranged by nucleotide sequence lines; Copy data stored by arranging the copy for reading by nucleotide sequence line and connecting to the end of the nucleotide sequence line of the personal genetic information encoded for each line; And a genetic information index including identification information corresponding to each nucleotide sequence line for the encoded personal genetic information.

Furthermore, the genetic information management apparatus includes: a reading information management unit determining a reading section of the encrypted personal genetic information based on the genetic information index, and providing the reading key through approval of a corresponding customized service provider; A key management unit generating the reading key; And a reading information generator interlocking with the personal genetic information storage unit, generating a copy for the browsing section, decrypting the copy with the security key, and encrypting the copy with the reading key to generate an encrypted copy for reading. I can.

Here, the browsing information generation unit may include a copy generation unit configured to create a copy by copying the encrypted personal genetic information of the browsing section; And a copy encryption unit that decrypts the copy generated by the copy generation unit with the security key and then encrypts the copy with the access key and stores the encrypted copy for reading in the personal genetic information storage unit.

Furthermore, the reading information management unit may destroy the reading copy after confirming the reading of the reading copy by the customized service provider.

Preferably, the key generation unit generates a pair key of a private key and a public key as the browsing key, and the browsing information generation unit generates an encrypted browsing copy by encrypting the copy with the private key, and the browsing information management unit May provide the public key to the corresponding customized service provider.

More preferably, the reading information management unit may include a profile management unit that creates and manages a profile including information on a reading section of the reading copy and information on a private key and a public key corresponding to the reading copy; And a reading approval unit that receives access request information including nucleotide sequence location information for providing customized service from the customized service provider, determines the reading section of the encrypted personal genetic information, and approves whether or not the customized service provider can read it. May be.

In addition, the profile manager may determine whether to maintain each of a plurality of profiles, and destroy a copy for reading, a private key, and a public key corresponding to the corresponding profile according to the result.

Preferably, the personal genetic information storage unit and the genetic information management device may be installed in a personal terminal.

According to the present invention, it is possible to securely provide personal genetic information for customized services and the like while more powerful and protecting personal genetic information.

In particular, in order to provide a variety of services based on personal genetic information, when a customized service provider decrypts other parts that are not authorized to them through hacking or encrypted individuals in encrypting and providing their personal genetic information Solve the problem of mental, physical, and material damage that cannot be converted numerically to individuals due to the leakage of personal genetic information caused by malicious hackers intercepting this information in the middle of the transmission of genetic information. I can.

Furthermore, the user's personal genetic information itself is encrypted and stored, and is never disclosed or viewed by others, and only a necessary part of the personal genetic information is created as an encrypted copy and a key to decrypt it is provided to others. It is possible to further strengthen the security of personal genetic information because it is not leaked to the outside and is only viewed by the person who owns the key on the genetic information storage unit.

In addition, in the present invention, by providing browsing of personal genetic information through a profile, security can be maintained high through profile management without having to perform the cumbersome process of creating and encrypting a new copy and key every time according to the browsing request of a customized service provider. In addition, it is possible to easily organize unnecessary information through profile management of the copy of personal genetic information for viewing.

1 shows a genetic counseling service using personal genetic information encryption data according to the prior art,
2 is a conceptual diagram of a genetic information management method for providing selective access to personal genetic information encrypted data according to the present invention,
3 is a block diagram of an embodiment of a genetic information management system that provides selective access to personal genetic information encrypted data according to the present invention,
4 shows an embodiment of each configuration of a genetic information management system that provides selective access to personal genetic information encrypted data according to the present invention,
5 is a flowchart illustrating an embodiment of a method for managing genetic information that provides selective access to encrypted personal genetic information data according to the present invention.
6 shows an embodiment in which original encrypted data and copy encrypted data are stored according to the genetic information management method for providing selective viewing of personal genetic information encrypted data according to the present invention,
7 is a flowchart illustrating another embodiment of a method for managing genetic information providing selective viewing of personal genetic information encrypted data according to the present invention,
8 shows an embodiment of a profile in the genetic information management method for providing selective access to personal genetic information encoded data according to the present invention,
9 shows another embodiment of a profile in the genetic information management method for providing selective access to personal genetic information encoded data according to the present invention,
10 shows an embodiment of profile management in the genetic information management method for providing selective access to personal genetic information encoded data according to the present invention.

In order to explain the present invention and the operational advantages of the present invention and the object achieved by the implementation of the present invention, the following describes a preferred embodiment of the present invention and looks at with reference thereto.

First, terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention, and expressions in the singular may include a plurality of expressions unless clearly differently in context. In addition, in the present application, terms such as "comprise" or "have" are intended to designate the existence of features, numbers, steps, actions, components, parts, or a combination thereof described in the specification, but one or more other It is to be understood that the presence or addition of features, numbers, steps, actions, components, parts, or combinations thereof, does not preclude the possibility of preliminary exclusion.

In describing the present invention, when it is determined that a detailed description of a related known configuration or function may obscure the subject matter of the present invention, a detailed description thereof will be omitted.

The present invention proposes a method to enhance the security of personal genetic information for providing customized service based on genetic information. The user's personal genetic information itself is encrypted and stored, without external disclosure or reading, and a necessary part. By creating an encrypted copy of the gulf and providing a key that can decrypt it to a customized service provider, it can be viewed on the personal genetic information storage unit. Specifically, you can destroy the copy and key after viewing the copy only once, or you can create a profile for the copy and key and repeatedly view it with different customized service providers through profile management.

2 shows a conceptual diagram of a genetic information management method for selectively viewing personal genetic information encrypted data according to the present invention.

The user 10 stores his/her personal genetic information 15 in the personal genetic information storage unit 200, wherein the personal genetic information 15 is encrypted with a security key 215 so that the encrypted personal genetic information is personal genetic information. It is stored in the information storage unit 200.

In addition, the genetic information management device 100 manages the personal genetic information of the user 10, and for the customized service based on genetic information for the user 10, the customized service provider 300 In the case of transmitting the genetic information request information 310, a reading key 235 for selectively viewing the personal genetic information of the user 10 on the personal genetic information storage unit 200 to the corresponding customized service provider 300 ).

To this end, in the present invention, the original data encrypted with the security key 215 of the personal genetic information 15 of the user 10 is stored in the personal genetic information storage unit 200 so that it is not leaked to the outside or disclosed or viewed, Of the personal genetic information 15, only a partial section requested by the customized service provider 300 is used as the reading section, and the reading section is copied from the original data, and the reading copy encrypted with the reading key is stored in the genetic information storage unit 200. Then, by providing the reading key 235 to the corresponding customized service provider 300, the customized service provider 300 uses the reading key 235 on the personal genetic information storage unit 200 to obtain a reading copy ( 230) can be decoded and viewed, and through this, a gene-based customized service 350 can be provided to the user 10.

Here, the genetic information management device 100 and the genetic information storage unit 200 may be a configuration installed in a personal genetic information analysis or management service company, but more preferably, a user (such as a mobile communication terminal or a PC) of the user 10 ( 10) may be a part of the configuration included in the personal terminal, or the genetic information management device 100 is installed in a management service company of personal genetic information, and the genetic information storage unit 200 is a storage held by the individual user 10 It could be a device.

In addition, the customized service includes various services that can be provided based on the result of genetic information analysis, for example, medical services that treat or manage the user's 10 disease or health based on the result of analyzing personal genetic information, skin, beauty, baldness. A service for managing the body, such as, etc. may be included, and further, a food and beverage service may be provided to the user 10 by categorizing foods to be careful or foods that need to be consumed.

As described above, in the present invention, the user's personal genetic information itself is encrypted and stored, and is never disclosed or viewed by others, and only a necessary part of the personal genetic information is created as an encrypted copy and a key for decrypting it is provided to others. Furthermore, the security of personal genetic information can be further strengthened since the encrypted copy is not leaked to the outside and is only read by the person who owns the key on the genetic information storage unit.

3 is a block diagram of an embodiment of a genetic information management system that provides selective access to personal genetic information encoded data according to the present invention.

The genetic information management system according to the present invention is schematically composed of a genetic information management device 100 and a personal genetic information storage unit 200, and a customized service provider 300 uses the genetic information management device 100 to provide personal genetic information. Upon transmission of the information requesting to read about 310, the oilfield information management apparatus 100 provides a key for reading the copy for reading stored in the personal oilfield information storage unit 200 to the customized service provider 300 accordingly. .

The genetic information management apparatus 100 may include a reading information generation unit 110, a key management unit 130, a reading information management unit 150, and the like, and the reading information generation unit 110 is a personal genetic information storage unit. In conjunction with 200, a copy for the browsing section requested by the customized service provider 300 is created, the copy is decrypted with the security key, and then encrypted with the browsing key again to create an encrypted browsing copy. .

The key management unit 130 generates and manages a reading key, and the reading information management unit 150 receives reading request information including nucleotide sequence location information for providing a customized service from a customized service provider, and encrypted personal genetics thereof. The viewing section of the information is determined, and the reading key is provided through approval of the corresponding customized service provider. In addition, depending on the situation, the reading information management unit 150 may approve the reading of the reading copy of the customized service provider on a one-time basis, and destroy the reading copy after confirming the reading of the customized service provider.

FIG. 4 shows an embodiment of each configuration of a genetic information management system that provides selective access to personal genetic information encrypted data according to the present invention, and each configuration will be described in more detail with reference to FIG. 4. .

4A shows the configuration of the browsing information generation unit 110, and the browsing information generation unit 110 may include a copy generation unit 111 and a copy encryption unit 115.

The copy generation unit 111 creates a copy by copying the encrypted personal genetic information of the browsing section requested by the customized service provider, and the copy encryption unit 115 decrypts the copy generated by the copy generation unit 111 with a security key. Then, it is encrypted with a reading key and the encrypted reading copy is stored in the personal genetic information storage unit 200. At this time, if the browsing key is generated as a pair key of a private key and a public key, a browsing copy encrypted with the private key is created.

In addition, looking at the form in which the copy for reading encrypted by the reading information generation unit 110 is stored in the genetic information storage unit 200 through the configuration of the genetic information storage unit 200 shown in FIG. 4B, The genetic information storage unit 200 includes a genetic information index 250 including identification information corresponding to each nucleotide sequence line for the encrypted personal genetic information, and personal genetic information encrypted with a security key is stored for each nucleotide sequence line. The sorted original data 210 and the copy data 230 are stored by arranging the copy for reading by nucleotide sequence line and connecting to the end of the corresponding nucleotide sequence line of the personal genetic information encoded for each line. Furthermore, only the original data 210 and the copy data 230 are stored in the genetic information storage unit 200, and the genetic information index 250 matching the original data 210 may be separately stored in another storage unit.

The form in which the genetic information index 250, the original data 210, and the copy data 230 are stored in the genetic information storage unit 200 will be described in more detail through examples later.

4C is a configuration of the key management unit 130, and the key management unit 130 may include a key generation unit 131 and a key storage unit 135.

The key generation unit 131 encrypts the copy to generate a browsing key for generating an encrypted browsing copy, and more preferably, a pair key of a private key and a public key can be generated as a browsing key, and a key storage unit 135 stores and manages the reading key generated by the key generation unit 131.

Next, (d) of FIG. 4 is a configuration of the browsing information management unit 150, and the browsing information management unit 150 may include a browsing approval unit 151 and a profile management unit 155.

The reading approval unit 151 determines the reading section of the encrypted personal genetic information and whether the reading is approved for the customized service provider based on the reading request information transmitted from the customized service provider, and preferably, determining the reading section. In this case, based on the genetic information index 250 on the genetic information storage unit 200, it is possible to determine a reading section of personal oil well information corresponding to the nucleotide sequence location information included in the reading request information. In addition, in determining whether to approve access to the customized service provider, the user may receive permission from the user by transmitting the access request information to the user, or the reliability of the customized service provider may be determined by a separate credit certification authority. When approval for the customized service provider is made, the reading approval unit 151 provides a reading key to the customized service provider. In this case, when the reading key is a pair key of a private key and a public key, the public key is provided to the customized service provider.

In addition, a profile management unit 155 may be configured in the browsing information management unit 150, wherein the profile management unit 155 provides information on the browsing section of the encrypted browsing copy and the private key and public key corresponding to the browsing copy. A profile including a profile is created and managed, and a key generation date may be included in the profile, and further, various information such as a list of customized service providers provided with a key, the number of times the key is provided, and the number of views may be included.

If the profile created by the profile management unit 155 exists, the browsing approval unit 151 first searches for the existence of the corresponding profile in the browsing request information transmitted from the customized service provider, and discloses it according to the information included in the profile. Keys can also be provided to the customized service provider.

Furthermore, the profile management unit 155 may determine whether it is necessary to continue maintenance for each of the plurality of profiles, and destroy the browsing copy, private key, and public key corresponding to the corresponding profile according to the result. For example, if the creation date of the key exceeds a certain period, the number of times of reading or the number of times of providing the key exceeds a certain value, and the case that it is no longer necessary to approve the reading to a specific customized service provider, the corresponding profile You can destroy or add information related to.

Through the genetic information management system that provides selective access to personal genetic information encoded data according to the present invention, security can be enhanced to more safely manage individual genetic information, and furthermore, in the present invention, individual genetic information A method for managing information is presented. Hereinafter, a method for managing genetic information that provides selective access to personal genetic information encoded data according to the present invention will be described through an embodiment of the present invention.

The genetic information management method for providing selective access to personal genetic information encoded data according to the present invention is implemented through a genetic information management system that provides selective access to personal genetic information encoded data according to the present invention as described above. In the embodiment of, reference will be made to the genetic information management system that provides selective access to the personal genetic information encoded data according to the present invention described above.

5 is a flowchart illustrating an embodiment of a method for managing genetic information for selectively viewing personal genetic information encoded data according to the present invention.

When the personalized service provider 300 requires personal genetic information to provide a customized service for a user, the customized service provider 300 provides the genetic information management device 100 with a base sequence location for providing the corresponding customized service. View request information including information is transmitted (S110).

When the reading information management unit 150 of the genetic information management apparatus 100 receives the reading request information of the personal genetic information, the personalized service provider 300 accesses and reads the personal genetic information storage unit 200 as necessary. You can also decide whether to approve it or not. In addition, the browsing information management unit 150 of the genetic information management device 100 determines a corresponding browsing section in the encrypted personal genetic information of the personal genetic information storage unit 200 based on the nucleotide sequence location information included in the browsing request information. It is determined, preferably, as in the personal genetic information storage unit 200 shown in 4(b) above, browsing using identification information corresponding to each nucleotide sequence line included in the genetic information index 250 It is also possible to check the section (S120).

When the reading section is confirmed on the encrypted personal genetic information, the reading information generation unit 110 of the genetic information management device 100 copies the encrypted personal genetic information of the reading section and creates a copy (S130) and secures the copy. It is decrypted with the key. And when the key management unit 130 of the oilfield information management device 100 generates a reading key (S140) and transmits the reading key to the reading information generation unit 110 of the oilfield information management device 100, the genetic information management device The browsing information generation unit 110 of (100) re-encrypts the decrypted copy with the browsing key to generate an encrypted browsing copy. The generated copy for reading is stored in the personal genetic information storage unit 200 (S160), and at this time, it is preferably encrypted reading as in the structure of the personal genetic information storage unit 200 shown in (b) above. A copy of the dragon can be arranged by nucleotide sequence line and stored by connecting to the end of the nucleotide sequence line of the personal genetic information encoded for each line.

When an encrypted copy for reading to be viewed by the customized service provider 300 is prepared, the reading information management unit 150 of the oil field information management device 100 transmits a reading key corresponding to the reading copy to the customized service provider 300. By providing (S170), the customized service provider 300 decrypts and reads the reading copy using the reading key provided on the personal genetic information storage unit 200. Here, the encrypted copy for reading is connected and stored at the end of the personal genetic information encoded for each nucleotide sequence line on the personal genetic information storage unit 200, but the corresponding reading with the reading key provided by the customized service provider 300 Security can be maintained since only the copy is decrypted and the rest is not decrypted.

Furthermore, although not shown in FIG. 5, in the case of allowing the customized service provider 300 to view the corresponding reading copy on a one-time basis, the reading information management unit 150 of the oil field information management apparatus 100 may be configured to provide a customized service provider 300. ) May be destroyed by deleting the copy for reading from the personal genetic information storage unit 200 immediately after reading the copy for reading.

6 shows an embodiment in which original encrypted data and copy encrypted data are stored according to the genetic information management method for providing selective viewing of personal genetic information encrypted data according to the present invention, as shown in FIG. 4(b). As shown in the structure of the personal genetic information storage unit 200, the encrypted personal genetic information 210 is arranged and stored for each nucleotide sequence line, and includes identification information corresponding to each nucleotide sequence line. The information index 250 is matched with the encrypted personal genetic information 210. In addition, the encrypted copy for browsing (230a, 230b, 230c) is arranged by nucleotide sequence line, and is connected to the end of the nucleotide sequence line of the personal genetic information 210 for each line and stored. The first copy for viewing 230a is first connected to the end of the sequence line of the personal genetic information 210 and stored, and the second copy for viewing 230b generated thereafter is corresponding to the personal genetic information 210 They are sequentially connected and stored at the end of the nucleotide sequence line. In addition, the third copy for viewing 230c is also connected and stored at the end of the corresponding nucleotide sequence line of the personal genetic information 210. With this structure, each copy for reading is stored on the personal genetic information 210, and there are different reading keys for each reading copy, and the first reading copy 230a is encrypted with the first reading key. If the second reading copy 230b is encrypted with the second reading key, and the third reading copy 230c is encrypted with the third reading key, the personalized service provider receiving the first reading key Only the first reading copy 230a can be decrypted with the 1 reading key, and other parts cannot be decrypted, so that only the first reading copy 230a can be viewed. Likewise, customized service providers who have been provided with a second or third reading key can decrypt only the corresponding second reading copy (230b) or third reading copy (230c), so that only the corresponding copy can be viewed. It is possible.

Next, as an embodiment of managing information on a copy for reading as a profile, FIG. 7 is a flowchart showing another embodiment of a genetic information management method for selectively viewing personal genetic information encrypted data according to the present invention. do.

The embodiment of FIG. 7 is a case in which a plurality of different copies for browsing are created and a profile for managing each copy for browsing is created accordingly. For example, the execution of the embodiment of FIG. 5 is repeatedly performed. It is presumed that different copies for reading are accumulated, and each profile for managing a plurality of accumulated copies for reading is created. At this time, each copy for reading is generated in correspondence with the pair key of the private key and the public key, and this process will be described with reference to the embodiment of FIG. 7.

When the genetic information management device 100 receives the browsing request information including the nucleotide sequence location information from the customized service provider (S210), the browsing information management unit 150 of the genetic information management device 100 sends an individual to the corresponding customized service provider. It is determined whether to approve the access to the genetic information storage unit 200 to be viewed, which can be performed with the contents discussed in the embodiment of FIG. 5, and furthermore, viewing of the corresponding customized service provider on the profile that manages the copy for viewing. You can also decide whether to approve or not. Here, the profile may include information on which the browsing section is classified by category. For example, the profile is categorized according to the category by field in which genetic information is used, such as food, beauty, and medical care, and a category that allows users to browse is set and customized. It is also possible to determine whether to approve the viewing of the customized service provider based on whether the viewing section requested by the service provider belongs to the category in which viewing is permitted.

If the permission to view the personalized service provider is rejected, a notification (S215) that the access to the personal genetic information has been rejected is sent to the customized service provider.

And when the viewing of the customized service provider is approved, the reading information management unit 150 of the genetic information management apparatus 100 determines whether a profile included in the nucleotide sequence location information included in the reading request information transmitted from the customized service provider exists. Search (S220), and if a profile exists, the profile is extracted and the public key on the profile is checked (S225).

The profile includes a variety of information on the copy for reading, as an example of the profile, an embodiment of the profile in the genetic information management method for selectively viewing the personal genetic information encoded data according to the present invention shown in FIG. Looking at, the profile basically includes information on the browsing range of genetic information corresponding to the copy for browsing, the private key for encrypting the copy for browsing, and the public key for decrypting, and additionally, the key creation date or public key Key provision list information such as the number of times the customized service provider provided, the number of times the public key was provided, and the number of times the copy for viewing was viewed may be included. Such a profile is created and managed by the browsing information management unit 150 of the oilfield information management apparatus 100, and more specifically, is created and managed by the profile management unit 155 of the browsing information management unit 150.

Therefore, since the profile contains information on the browsing section of the copy for browsing and the matching private key and public key, the existence of the profile according to the sequence location information requested by the customized service provider can be searched and disclosed in the searched profile. You can check the key.

When the profile according to the location information of the base sequence requested by the customized service provider is found to exist and the corresponding public key is confirmed (S225), the browsing information management unit 150 of the genetic information management device 100 is the key management unit 130 In step S270, the corresponding public key is extracted and the extracted public key is provided to the customized service provider (S280).

If there is no profile according to the nucleotide sequence location information requested by the customized service provider, and the browsing information management unit 150 of the genetic information management device 100 corresponds to each nucleotide sequence line included in the genetic information index 250 The browsing section according to the nucleotide sequence location information requested by the customized service provider is checked using the identification information (S230).

When the browsing section is confirmed, the browsing information generation unit 110 of the genetic information management device 100 copies the encrypted personal genetic information of the browsing section on the personal genetic information storage unit 200 to create a copy (S231). And decrypts the copy with a security key (S235).

And when the key management unit 130 of the genetic information management device 100 generates a private key and a public key (S240) and transmits the private key to the browsing information generation unit 110 of the genetic information management device 100, the genetic information The browsing information generation unit 110 of the information management device 100 re-encrypts the copy decrypted with the private key (S245) to generate an encrypted browsing copy. When an encrypted copy for reading is created, the private key is stored together with the public key in the key management unit 130 of the genetic information management device 100, and the browsing information management unit 150 of the genetic information management device 100 is A profile including information such as a viewing section of the copy for use, matching private key and public key, etc. is generated (S250) and stored.

In addition, the generated copy for reading is stored in the personal genetic information storage unit 200 (S260). At this time, preferably, the encrypted copy for reading as in the embodiment of FIG. 6 according to the structure of the personal genetic information storage unit 200 shown in (b) of 4 above is arranged by nucleotide sequence line and is encrypted for each line. It is stored by connecting to the end of the corresponding nucleotide sequence line of the generated personal genetic information.

Through such a process, when a newly encrypted copy for reading is created and stored in the personal genetic information storage unit 200 according to the reading request of the customized service provider, and a profile for this is also generated and stored, the genetic information management device 100 The browsing information management unit 150 extracts the public key to be provided to the customized service provider from the key management unit 130 of the genetic information management apparatus 100 (S270) and provides the extracted public key to the customized service provider (S280). )do.

Then, the customized service provider may access the personal genetic information storage unit 200 and read (S290) the required genetic information using the provided public key, and accordingly provide a customized service based on the user's genetic information. .

Since the customized service provider has decrypted the corresponding reading copy with the public key provided for reading the required genetic information, the reading copy exists in the decrypted state on the personal genetic information storage unit 200. Therefore, the browsing information management unit 150 of the oilfield information management device 100 extracts the corresponding private key from the key management unit 130 based on the profile of the browsing copy after the customized service provider reads the browsing copy. Re-encryption (S300) the copy for reading that is in the decrypted state on the genetic information storage unit 200, and the private key is returned to the key management unit 130.

Through the embodiment of the present invention of FIG. 7 as described above, without performing the cumbersome process of generating and encrypting a new copy and key each time according to a request for browsing from a customized service provider, security is maintained through profile management while maintaining high security and is complex and repetitive. It is possible to omit several processes.

In the present invention, a profile for management of a copy for reading of personal genetic information can be created and maintained in various forms. In this regard, FIG. 9 provides selective viewing of personal genetic information encoded data according to the present invention. Another embodiment of a profile in a method for managing genetic information is shown.

In the previous embodiment, the content of creating and maintaining a profile for managing the browsing copy in the browsing information management unit 150 of the oilfield information management device 100 was examined. In FIG. 9, a profile according to a category for each field is presented. Profile 1 is in the food sector, Profile 2 is in the beauty sector, and Profile 3 is in the medical sector, and each of the profiles is categorized into categories by sector.

In addition, a private key and a public key exist for each profile, and in each profile, a viewing section of personal genetic information is classified for each field. In other words, Profile 1 is a food field, and the browsing section that includes genetic information related to food and beverages such as caffeine, milk, and alcohol is classified, and this browsing section can encrypt and decrypt the browsing copy with the No. 1 private key and public key. In addition, Profile 2 is a beauty field, where the browsing section that includes genetic information related to beauty such as baldness, skin, and obesity is classified, and this browsing section can encrypt and decrypt the browsing copy with the 2nd private key and public key.

In the case of managing a profile as in the embodiment of FIG. 9, there is no need to separately generate and manage a copy for reading and a key and a profile matching the copy according to the reading request of different customized service providers. For example, a customized service provider that provides customized services for baldness and a customized service provider that provides customized services for obesity can both perform the browsing process based on the same profile 2, so that personal genetic information can be managed more simply and conveniently. You will be able to.

Further, in the present invention, a copy for reading personal genetic information can be easily managed through profile management. In this regard, FIG. 10 is a genetic diagram that provides selective viewing of personal genetic information encoded data according to the present invention. An embodiment of profile management in an information management method is shown.

The left side of FIG. 10 shows the personal genetic information storage unit 200 in which the copies for reading generated in FIG. 6 are stored, wherein the first copy for reading 230a is through the profile 1, and the second copy for reading ( 230b) is managed through Profile 2, and the third copy for viewing 230c is managed through Profile 3.

Previously, in FIG. 8, various information included in the profile was examined. Based on the various information included in the profile, it is determined whether to keep the profile, and for the corresponding profile that does not need to be maintained, a copy for reading, a private key and a corresponding The public key can be destroyed. For example, if the creation date of the key exceeds a certain period, the number of times of reading or the number of times of providing the key exceeds a certain value, and the case that it is no longer necessary to approve the reading to a specific customized service provider, the corresponding profile is managed through profile management. You can destroy or add information related to.

In FIG. 10, when it is determined that it is not necessary to maintain Profile 1 any more and information related thereto is discarded, the first copy for viewing 230a corresponding to Profile 1 is deleted from the personal genetic information storage unit 200 and remains. The personal genetic information storage unit 200 is arranged as shown on the right side of FIG. 10 by rearranging the available reading copies 230b and 230c.

Accordingly, in the present invention, it is possible to easily organize unnecessary information through profile management of a copy for reading of personal genetic information.

As described above, according to the genetic information management method that provides selective access to the personal genetic information encoded data according to the present invention, it is possible to securely provide personal genetic information for customized services while more powerful and protecting personal genetic information. There will be.

The above description is merely illustrative of the technical idea of the present invention, and those of ordinary skill in the art to which the present invention pertains will be able to make various modifications and variations without departing from the essential characteristics of the present invention. Therefore, the embodiments described in the present invention are not intended to limit the technical idea of the present invention, but to explain the technical idea, and the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be interpreted by the following claims, and all technical ideas within the scope equivalent thereto should be construed as being included in the scope of the present invention.

10: user, 15: personal genetic information,
100: genetic information management device
110: reading information generation unit, 111: copy generation unit,
115: copy encryption unit,
130: key management unit, 131: key generation unit,
135: key storage unit,
150: reading information management department, 151: reading approval department,
155: profile management unit,
200: personal genetic information storage unit,
210: encrypted original data, 230: encrypted copy data,
250: genetic information index,
300: Custom service provider.

Claims (18)

Encryption of the browsing section selected based on the nucleotide sequence location information included in the browsing request information received from a personalized service provider based on genetic information in the personal genetic information storage unit where the personal genetic information encrypted with the security key is arranged and stored by nucleotide sequence lines A copy generation step of copying the generated personal genetic information to create a copy;
Decrypting the copy with the security key, generating a browsing key different from the security key, encrypting the decrypted copy with the browsing key, and storing the browsing copy encrypted with the browsing key in the personal genetic information storage unit Storing a copy for viewing; And
Including a selective browsing step of providing the browsing key to a personalized service provider based on the genetic information to selectively browse a copy for reading that can be decrypted with the browsing key on the personal genetic information storage unit,
The copy generation step includes determining a reading section for the reading request information by checking a nucleotide sequence line corresponding to the nucleotide sequence location information in a genetic information index stored in the personal genetic information storage unit, and the personal genetic information Selective access to the encrypted personal genetic information data comprising the step of selecting a reading section from the encrypted personal genetic information stored in the storage unit, and creating a copy by copying the encrypted personal genetic information of the reading section. Genetic information management method to provide. delete The method of claim 1,
The step of storing a copy for viewing
Decrypting the copy with the security key, generating a reading key, and re-encrypting the decrypted copy with the reading key to create a reading copy; And
And storing the copy for reading in the personal genetic information storage unit by arranging the copy for reading by nucleotide sequence line, connecting to the end of the nucleotide sequence line of the personal genetic information encoded for each line, and storing the personal genetic information in the storage unit. Genetic information management methods that provide a selective approach to The method of claim 1,
The selective viewing step,
Providing the browsing key to a customized service provider based on genetic information;
Authorizing access to the personal genetic information storage unit to the personalized service provider, and selectively decrypting a copy for reading from among the data stored in the personal genetic information storage unit with the reading key; And
Genetic information management method for providing selective access to the personal genetic information encrypted data, characterized in that it comprises the step of reading the copy for reading decrypted by the customized service provider to the customized service provider. The method according to any one of claims 1, 3 and 4,
Genetic information management method for providing selective access to personal genetic information encrypted data, characterized in that it further comprises the step of destroying the browsing copy that can be decrypted with the browsing key. The method according to any one of claims 1, 3 and 4,
In the step of storing a copy for viewing,
The reading key is generated as a pair key of a private key and a public key, and the copy is encrypted with the private key,
In the selective viewing step,
The viewing key provided to a personalized service provider based on genetic information is the public key,
After performing the selective browsing step, providing selective access to personal genetic information encrypted data, further comprising the step of re-encrypting the browsing copy decrypted with the public key of the customized service provider with the private key. How to manage genetic information. The method of claim 6,
After performing the step of creating a copy and storing a copy for viewing,
Selective for personal genetic information encrypted data, characterized in that it further comprises a profile generation step of generating a profile including information on the browsing section of the browsing copy and the private key and public key corresponding to the browsing copy Genetic information management methods that provide access. The method of claim 7,
Receiving access request information including nucleotide sequence location information for providing a customized service from a customized service provider; And
Further comprising the step of searching for a profile corresponding to the nucleotide sequence location information included in the view request information,
The selective viewing step,
Genetic information management method for providing selective access to personal genetic information encrypted data, characterized in that performed by providing a public key corresponding to the profile to the customized service provider. The method of claim 7,
From the copy creation step, the selective browsing step is repeatedly performed to generate a plurality of different profiles,
Personal genetic information encryption data, characterized in that it further comprises a profile destruction step of determining whether to maintain each of the plurality of profiles and destroying the browsing copy, private key, and public key corresponding to the profile determined to be not required to be maintained. Genetic information management methods that provide a selective approach to A personal genetic information storage unit in which personal genetic information encrypted with a security key is arranged and stored by nucleotide sequence lines; And
Based on the nucleotide sequence location information included in the browsing request information received from the genetic information-based personalized service provider, the browsing section of the encrypted personal genetic information is determined, and the encrypted personal genetic information of the browsing section is copied and a copy is made. Generates, decrypts the copy with the security key, generates a browsing key different from the security key, encrypts the decrypted copy with the browsing key, and stores the browsing copy encrypted with the browsing key with the personal genetic information storage unit Including a genetic information management device to be stored in,
The personal genetic information storage unit includes: original data in which personal genetic information encrypted with a security key is arranged by nucleotide sequence lines; Copy data in which the reading copy is arranged by base sequence line; And a genetic information index having identification information corresponding to each nucleotide sequence line for the encoded personal genetic information,
Genetic information management system for providing selective access to personal genetic information encrypted data, characterized in that by providing the reading key to the customized service provider to selectively browse the reading copy on the personal genetic information storage unit. delete The method of claim 10,
The genetic information management device,
A reading information management unit determining a reading section of the encrypted personal genetic information based on the genetic information index, and providing the reading key through approval of a corresponding customized service provider;
A key management unit for generating and managing the reading key; And
In conjunction with the personal genetic information storage unit, including a reading information generation unit for generating a copy for the browsing section, decrypting the copy with the security key, and then encrypting the copy with the reading key to generate an encrypted copy for reading Genetic information management system that provides selective access to personal genetic information encoded data characterized by. The method of claim 12,
The browsing information generation unit,
A copy generation unit for generating a copy by copying the encrypted personal genetic information of the browsing section; And
Personal genetic information encryption comprising a copy encryption unit that decrypts the copy generated by the copy generation unit with the security key and then encrypts the copy with the viewing key and stores the encrypted copy for reading in the personal genetic information storage unit. Genetic information management system that provides selective access to data. The method of claim 12,
The browsing information management unit,
Genetic information management system for providing selective access to personal genetic information encrypted data, characterized in that after confirming the reading of the reading copy by the customized service provider and destroying the reading copy. The method of claim 12,
The key management unit,
Generates and manages a pair key of a private key and a public key as the reading key,
The browsing information generation unit,
Encrypting the copy with the private key to create an encrypted copy for reading,
The browsing information management unit,
Genetic information management system providing selective access to personal genetic information encrypted data, characterized in that providing the public key to a corresponding customized service provider. The method of claim 15,
The browsing information management unit,
A profile management unit that creates and manages a profile including information on a reading section of the reading copy and information on a private key and a public key corresponding to the reading copy; And
Including a reading approval unit for receiving access request information including nucleotide sequence location information for providing customized service from a customized service provider, determining a reading section of the encrypted personal genetic information, and approving whether or not the customized service provider can view it. Genetic information management system that provides selective access to personal genetic information encoded data characterized by. The method of claim 16,
The profile management unit,
Providing selective access to personal genetic information encrypted data, characterized in that it determines whether to maintain each of a plurality of profiles, and destroys the browsing copy, private key, and public key corresponding to the profile according to the result. Genetic information management system. The method of claim 10,
The personal genetic information storage unit and the genetic information management device are genetic information management system for providing selective access to the personal genetic information encrypted data, characterized in that installed in a personal terminal.

Images