KR102245886B1 - Analytics center and control method thereof, and service providing device and control method thereof in co-operational privacy protection communication environment - Google Patents

Abstract

The present invention discloses a method of operating an analysis server and an analysis server, a service providing device, and a method of operating the service providing device in a communication environment that protects personal information in a cooperative manner. That is, in the present invention, when providing a service using encrypted personal information, it is possible to provide a service by acquiring only some personal information in a cooperative manner through an operation between encrypted personal information.

Description

Operation method of analysis server and analysis server in a communication environment that protects personal information in a cooperative manner, and operation method of service providing device and service providing device {ANALYTICS CENTER AND CONTROL METHOD THEREOF, AND SERVICE PROVIDING DEVICE AND CONTROL METHOD THEREOF IN CO- OPERATIONAL PRIVACY PROTECTION COMMUNICATION ENVIRONMENT}

The present invention relates to a technology for reinforcing security for personal information, and more particularly, when providing a service using encrypted personal information, only some personal information can be obtained in a cooperative manner through an operation between encrypted personal information to provide a service. It relates to a method of operating an analysis server and an analysis server, a service providing device, and a method of operating a service providing device in a communication environment protecting personal information in a cooperative manner.

In recent years, with the development of communication technologies including mobile communication, various services using communication technologies have been provided in all fields of society, such as finance, medical care, real estate, and media.

In the case of a service using such communication technology, it is common to use personal information of a user who has requested a service for the purpose of improving service quality, such as a targeting service.

Boil, in order to use these services to all personal information of the user one intermediate server process of the:: (3 ^rd Party Service Provider example) delivered and the public (for example, the service server) is collected by service providers principal service providing device Required.

In other words, since the intermediary server has exclusive distribution and use rights for all personal information of the user, personal information is easily exposed to the administrator who manages the intermediary server according to transparency, causing problems such as malicious theft and illegal use. There is.

To solve this problem, encryption was performed before personal information was delivered to the service providing device, and then the encrypted personal information was delivered.

However, in order to provide a service using encrypted personal information, a decryption process must be performed on the encrypted personal information. That is, since the service providing device directly decrypts the encrypted personal information using the public key or the private key, there is a problem in that all personal information of the user is disclosed to the service providing device.

Therefore, in the present invention, when providing a service using encrypted personal information, analysis in an environment that protects personal information in a cooperative type capable of providing a service by acquiring only some personal information through an operation between encrypted personal information. The purpose of this study is to propose a method of operating a server and analysis server, a service providing device and a service providing device.

The present invention was created in consideration of the above circumstances, and the problem to be solved in the present invention is to obtain a service by obtaining only some personal information in a cooperative manner through an operation between encrypted personal information when providing a service using encrypted personal information. It is to provide an operation method of an analysis server and an analysis server in a communication environment that protects personal information in a cooperative type that can be provided, a service providing device and a method of operating a service providing device.

In addition, the problem to be solved of the present invention is not limited to those mentioned above, and another problem to be solved that is not mentioned will be clearly understood by those of ordinary skill in the art from the following description. .

The analysis server according to the first aspect of the present invention for achieving the above object comprises: a receiving unit for receiving encrypted data obtained by encrypting personal information from a collection device; When receiving an information request message requesting information on a specific user from a service providing device that provides a service related to the encrypted data, a collection of detecting encrypted data related to the information request message and decrypting the detected encrypted data A generator for generating an encrypted operation result including information for identifying the device; And a providing unit that provides the encrypted operation result to the service providing device, and enables the service providing device to obtain a decryption result for the detected encrypted data by using the encrypted operation result. do.

Preferably, the information request message includes a search condition for searching for information on the specific user, and the detected encrypted data satisfies the search condition among two or more element encryption data included in the encrypted data. It is characterized in that the element encryption data.

Preferably, the generation unit is characterized in that generating the encrypted operation result by performing an operation between encrypted information without a decryption process for the detected encrypted data.

The encryption algorithm applied to the encrypted data is the same, and it is characterized in that it is based on a homomorphic encryption technique capable of calculating between encrypted information.

A service providing apparatus according to a second aspect of the present invention for achieving the above object includes: a generator for generating an information request message requesting information for a specific user in order to provide a service using encrypted data encrypted with personal information; Upon receiving an encrypted operation result including information for detecting encrypted data related to the information request message and identifying a collection device for decrypting the detected encrypted data, the detected encryption using the encrypted operation result An acquisition unit that obtains a result of decoding the data; And a service providing unit that provides a service related to the specific user by using the decryption result.

Preferably, the information request message includes a search condition for searching for information on the specific user, and the detected encrypted data satisfies the search condition among two or more element encryption data included in the encrypted data. It is characterized in that the element encryption data.

Preferably, the acquisition unit is characterized in that receiving a decryption result of the element encryption data satisfying the search condition by transmitting the encrypted operation result to the collection device.

In order to achieve the above object, a method of operating an analysis server according to a third aspect of the present invention comprises: a receiving step of receiving encrypted data by encrypting personal information from a collection device; When receiving an information request message requesting information on a specific user from a service providing device that provides a service related to the encrypted data, a collection of detecting encrypted data related to the information request message and decrypting the detected encrypted data A generating step of generating an encrypted operation result including information identifying the device; And a providing step of providing the encrypted operation result to the service providing device so that the service providing device can obtain a decryption result for the detected encrypted data by using the encrypted operation result. It is done.

Preferably, the information request message includes a search condition for searching for information on the specific user, and the detected encrypted data satisfies the search condition among two or more element encryption data included in the encrypted data. It is characterized in that the element encryption data.

In order to achieve the above object, a method of operating a service providing apparatus according to a fourth aspect of the present invention is to generate an information request message requesting information for a specific user in order to provide a service using encrypted data encrypted with personal information. Generation step; Upon receiving an encrypted operation result including information for detecting encrypted data related to the information request message and identifying a collection device for decrypting the detected encrypted data, the detected encryption using the encrypted operation result An acquisition step of obtaining a result of decoding the data; And a providing step of providing a service related to the specific user by using the decryption result.

Accordingly, the method of operation of the analysis server and the analysis server in a communication environment that protects personal information in a cooperative type of the present invention, and when providing a service using encrypted personal information, only some personal information is cooperatively typed through calculations between encrypted personal information It is possible to obtain and provide services, thereby preventing exclusive distribution and use rights for personal information, and to derive the effect of providing services with enhanced privacy and security of users.

1 is an exemplary diagram showing a communication environment in which personal information is protected in a cooperative manner according to an embodiment of the present invention.
2 is a block diagram showing the configuration of an analysis server according to an embodiment of the present invention.
3 is a block diagram showing the configuration of a service providing apparatus according to an embodiment of the present invention.
4 is a flowchart showing a flow of providing a service according to an embodiment of the present invention.
5 is a diagram showing an example of personal information according to an embodiment of the present invention.
6 is a flowchart showing an operation flow of an analysis server according to an embodiment of the present invention.
7 is a flowchart showing an operation flow of a service providing apparatus according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

First, a communication environment for protecting personal information in a cooperative type of the present invention will be described with reference to FIG. 1.

As shown in Figure 1, the communication environment for protecting personal information in a cooperative type to which the present invention is applied, includes a terminal 100, a collection device 200, an analysis server 300, and a service providing device 400. I can.

The terminal 100 is a device that transmits personal information and uses a service provided by the service providing apparatus 400, and may be a wired terminal or a wireless terminal.

For example, the terminal 100 may correspond to a smartphone, a desktop, a laptop computer, a tablet PC, and a PDA used by the user, and is not limited thereto, and is capable of communicating with the collection device 200 for storing personal information. Any device can be included.

_{The collecting device 200 is an information collecting device 200 1} -provided in at least one company (eg, hospital, financial institution, telecommunication company, etc.) that has personally visited or left personal information online using at least one user. 200 _n ), and at least one user agrees to collect in the process of using the services provided by each company (medical records, residence, age, gender, name, location, salary details, property, communication charges, etc.) ) Can be saved. Hereinafter, it is assumed that the user transmits personal information through the terminal 100 and will be described.

That is, the information collection device 200 ₁ -200 _n stores personal information reflecting the characteristics of services provided by each company.

For example, assuming that the data collection device _{(200: 1)} provided in hospitals, data collection devices (200 _1), the basic personal information for each user (such as age, gender, name, etc.) In addition to this user In the process of using the services provided by the hospital, specialized personal information (e.g. medical records, chronic diseases, drugs, health checkup results, etc.) are stored.

In the following, basic personal information about users (eg, age, gender, name, etc.) and specialized personal information collected in the process of using the services provided by each company (eg, salary details, property, communication charges, medical records, chronic diseases, etc.) , Drugs, health checkup results, etc.)

The analysis server 300 receives the encrypted data encrypted personal information from the collection device 200 for each user, and at the request of the service providing device 400, the encrypted data for a specific user is calculated and encrypted without a decryption process. After generating the result of the calculation, it is transmitted to the service providing device 400.

The service providing apparatus 400 receives an encrypted operation result from the analysis server 300 and provides a service by acquiring only partial personal information for a specific user by using the encrypted operation result.

In the above, the analysis server 300 and the service providing device 400 have been described as separate configurations, but if the functions of the analysis server 300 and the service providing device 400 can be maintained identically, one device or It can also be implemented as a server.

In the following, first, the terminal 100 and the collection device 200 will be described in more detail with reference to FIG. 1.

Referring to FIG. 1, the terminal 100 according to an embodiment of the present invention encrypts personal information generated in the process of using a service provided by at least one company (eg, hospital, financial institution, communication company, etc.) Generate encrypted data.

That is, the terminal 100 generates encrypted data by applying the first encryption algorithm to encrypt personal information.

Here, the first encryption algorithm may be an encryption algorithm based on a symmetric key encryption (Data Encryption Standard) technique in which an operation between encrypted information is impossible.

More specifically, the terminal 100 generates a secret key (k) for the first encryption algorithm. Subsequently, the terminal 100 generates encrypted data (hereinafter, symmetric key encrypted data) by encrypting personal information using the secret key k.

In addition, the terminal 100 generates a homogeneous decryption function (hereinafter, a homogeneous decryption function) by applying a second algorithm to encrypt the decryption function for the secret key k.

Here, the second encryption algorithm is an encryption algorithm based on a Homomorphic Encryption (HE) technique in which an operation between encrypted information is possible.

At this time, the collection device 200 to be described later uses a homogeneous decryption function as a parameter that performs an operation between encrypted information using the characteristics of the second algorithm, so unlike the symmetric key encrypted data, the second encryption algorithm is applied to the homomorphic decryption function. It is desirable to do it.

As described above, if personal information is encrypted and transmitted, and the decryption function itself for decrypting the encrypted personal information is encrypted and transmitted, the collection device 200 receives the encrypted personal information and the decryption function. Even if information leakage or hacking occurs in the device 200, damage can be minimized.

The collection device 200 receives the symmetric key encrypted data and the homomorphic decryption function from the terminal 100.

That is, the collection device 200 generates encrypted data (hereinafter, isomorphic encrypted data) by applying the second encryption algorithm to the symmetric key encrypted data and the homomorphic decryption function. The process of generating the homomorphic encrypted data will be described in more detail in FIG. 4 to be described later.

Thereafter, the collection device 200 transmits the isomorphic encrypted data to the analysis server 300.

Hereinafter, a configuration of an analysis server according to an embodiment of the present invention will be described in detail with reference to FIG. 2.

As shown in FIG. 2, the analysis server 300 according to the present invention includes a receiving unit 310, a generating unit 320, and a providing unit 330.

The receiving unit 310 receives isomorphic encrypted data generated by applying a second encryption algorithm to personal information from the collection device 200. The homomorphic encrypted data received as described above may be classified and stored for each user.

Here, each of the isotype encrypted data classified for each user includes two or more element encryption data. For example, if user A's isomorphic encrypted data includes medical records, salary details, communication charges, age, gender, name, etc., medical records, salary details, communication charges, age, gender, etc. that constitute the isomorphic encrypted data Names, etc. correspond to element encryption data.

When receiving an information request message requesting information on a specific user from a service providing device that provides a service using the isomorphic encrypted data, the generation unit 320 detects and detects isomorphic encrypted data related to the information request message. When the generated isomorphic encrypted data is later transmitted to the collection device, an encrypted operation result including information that can identify the corresponding collection device that decrypts the element-encrypted data of the isomorphic encrypted data is generated.

More specifically, when receiving an information request message requesting information on a specific user from the service providing device 400, the generation unit 320 detects isomorphic encrypted data related to the information request message.

In this case, the information request message, the search criteria for retrieving information for a particular user, the detected encrypted data, that is collected to perform decoding for the element data encrypted information device that meet the criteria of the same type encrypted data (200 ₁ -200 _n ) can be included in the form of a function. In the following, the function included in the information request message will be described by referring to it as an analysis function.

That is, the generation unit 320 generates an encrypted operation result by performing an operation between encrypted information without a decryption process for the element encrypted data that satisfies the search condition among isomorphic encrypted data for a specific user by using the analysis function. .

Thereafter, the generation unit 320 transmits the encrypted operation result to the providing unit 330.

The providing unit 330 provides the encrypted operation result to the service providing device 400 so that the decryption result for the element encrypted data can be obtained by using the encrypted operation result in the service providing device 400.

Hereinafter, a configuration of a service providing apparatus according to an embodiment of the present invention will be described in detail with reference to FIG. 3.

As shown in FIG. 3, the service providing apparatus 400 according to the present invention includes a generating unit 410, an acquisition unit 420, and a service providing unit 430.

The generation unit 410 generates an information request message for requesting information on a specific user in order to provide a service using encrypted data that encrypts personal information, that is, isomorphic encrypted data.

_{That is, the generation unit 410 is an information collection device (200 1} -200 _n ) that decrypts element-encrypted data that satisfies a search condition among homomorphic encrypted data and a search condition for searching for information on a specific user. An information request message including an analysis function is generated so that it can be checked.

Here, the search condition is a condition for detecting elemental encrypted data necessary to provide a service among isomorphic encrypted data for a specific user, and the condition may vary according to the type and characteristic of the service provided by the service providing apparatus.

The acquisition unit 420, when the analysis server 300 detects the isomorphic encrypted data related to the information request message, and when the detected isomorphic encrypted data is later transmitted to the collection device, decrypts the element encryption data of the isomorphic encrypted data. When an encrypted operation result including information for identifying a corresponding collecting device to be performed is transmitted, a decryption result for the element encryption data is obtained by using the encrypted operation result.

More specifically, the acquisition unit 420, upon receiving the encrypted calculation result from the analysis server 300, transmits the encrypted calculation result to the information collection device 200 ₁ -200 _{n in the collection device 200} Requests the decoding of the element encryption data that can be decoded by the collection device.

That is, as mentioned above, since the encrypted operation result contains information on the corresponding information collecting device that decrypts the element encrypted data, each information collecting device that has received the encrypted operation result is included in the isomorphic encrypted data. Among the element-encrypted data, the element-encrypted data that can be decrypted by itself is identified and decrypted.

Accordingly, the acquisition unit 420 does not transmit the decrypted data for the entire isomorphic encrypted data for a specific user as long as the encrypted operation result is transmitted to the information collecting device 200 ₁ -200 _{n, but the encrypted operation} Only the decoding result of the element encryption data included in the result is partially obtained from the corresponding information collection device.

At this time, since the information collection device (200 ₁ -200 _n ) generated encrypted data by applying the second encryption algorithm, the public key (hereinafter, HE public key) and the secret key (hereinafter, HE secret) for the second encryption algorithm It is desirable to store the key).

Accordingly, the information collection apparatus 200 ₁ -200 _n can perform decryption on the element encrypted data using the HE secret key and transmit it. Thereafter, the acquisition unit 420 informs the service provider 430 that the decoding result for the element encryption data has been received.

The service providing unit 430 provides a service related to a specific user by using a result of decoding the element encrypted data.

That is, the service providing unit 430 generates recommendation information on a service to be provided by applying the decoding result of the element encryption data to the service determination function. Thereafter, the service providing unit 430 transmits the recommended information to a terminal of a specific user.

Hereinafter, with reference to FIGS. 4 and 5, when providing a service using encrypted personal information according to an embodiment of the present invention, a method of providing a service by acquiring only some personal information in a cooperative manner through an operation between encrypted personal information It will be described in detail. Hereinafter, for convenience of description, reference numerals mentioned in FIGS. 1 to 3 will be referred to.

First, with reference to FIG. 4, when providing a service using encrypted personal information according to an embodiment of the present invention, the entire flow of providing a service by acquiring only some personal information in a cooperative manner through an operation between encrypted personal information will be described. .

For reference, the parameters shown in FIG. 4 may be defined as shown in Table 1.

[Table 1]

The terminal 100 generates encrypted data by encrypting personal information (d1, ..dn) generated in the process of using a service provided by at least one company (eg, hospital, financial institution, communication company, etc.).

Here, the first encryption algorithm may be an encryption algorithm based on a symmetric key encryption (Data Encryption Standard) technique in which an operation between encrypted information is impossible.

...

)를 생성한다(S110). 이때, Ek 와 Dk 는k 를 사용한 암호화와 복호화부이다.More specifically, the terminal 100 generates a secret key (k) for the first encryption algorithm (S100). Subsequently, the terminal 100 encrypts the personal information using the secret key k to encrypt data (hereinafter, symmetric key encrypted data) (

...

) To generate (S110). At this time, Ek and Dk are encryption and decryption units using k.

In addition, the terminal 100 generates a homogeneous decryption function (hereinafter, isomorphic decryption function) Cpk by applying a second algorithm to encrypt the decryption function for the secret key k (S120).

Here, the second encryption algorithm is an encryption algorithm based on a Homomorphic Encryption (HE) technique in which an operation between encrypted information is possible.

At this time, the collection device 200 to be described later uses a homogeneous decryption function as a parameter that performs an operation between encrypted information using the characteristics of the second algorithm, so unlike the symmetric key encrypted data, the second encryption algorithm is applied to the homomorphic decryption function. It is desirable to do it.

As described above, if personal information is encrypted and transmitted, and the decryption function itself for decrypting the encrypted personal information is encrypted and transmitted, the collection device 200 receives the encrypted personal information and the decryption function. Even if information leakage or hacking occurs in the device 200, damage can be minimized.

) 및 동형 복호화 함수(

)를 수집장치(200)로 전달한다(S130).Thereafter, the terminal 100, the symmetric key encrypted data (

) And homomorphic decoding function (

) To the collection device 200 (S130).

) 및 동형 복호화 함수(

)를 전달받는다. 수집장치(200)는, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)에 제2 암호화 알고리즘을 적용하여 암호화 데이터(이하, 동형 암호화 데이터)(

)를 생성한다(S140).Collection device 200, symmetric key encrypted data from the terminal 100 (

) And homomorphic decoding function (

) Is delivered. Collection device 200, symmetric key encrypted data (

) And homomorphic decoding function (

) By applying a second encryption algorithm to encrypted data (hereinafter, homomorphic encrypted data) (

) Is generated (S140).

)는, 동형 복호화 함수(

)의 ENCpk 에 대하여 대칭키 암호화 데이터(

)를 수행하여 생성된다. In other words, homomorphic encrypted data (

) Is the homomorphic decoding function (

For ENCpk of ), symmetric key encrypted data (

) To be created.

)와 동형 복호화 함수(

)를 전달받게 되므로 수집장치(200)에서의 정보유출 또는 해킹이 발생하더라도 피해를 최소화할 수 있게 되는 것이다.As described above, when the personal information is encrypted and transmitted, and the decryption function itself for decrypting the encrypted personal information is encrypted and transmitted, the collection device 200 transmits the encrypted symmetric key encrypted data (

) And the homomorphic decoding function (

) Is transmitted, so even if information leakage or hacking occurs in the collection device 200, damage can be minimized.

Thereafter, the collection device 200 transmits the isomorphic encrypted data to the analysis server 300 (S150).

)를 수신한다.Analysis server 300, isomorphic encrypted data generated by applying a second encryption algorithm to personal information from the collection device 200 (

) Is received.

Here, each of the isotype encrypted data classified for each user includes two or more element encryption data. For example, if user A's isomorphic encrypted data includes medical records, salary details, communication charges, age, gender, name, etc., medical records, salary details, communication charges, age, gender, etc. that constitute the isomorphic encrypted data Names, etc. correspond to element encryption data.

Subsequently, when the analysis server 300 receives an information request message (analysis function F) requesting information on a specific user from a service providing device that provides a service using isomorphic encrypted data (S160), the information request message ( Includes information that detects the isomorphic encrypted data related to the analysis function F), and identifies the collection device that decrypts the elemental encryption data of the isomorphic encrypted data when the detected isomorphic encrypted data is later transmitted to the collection device. The encrypted operation result (C) is generated (S170).

More specifically, the analysis server 300, upon receiving an information request message (analysis function F) requesting information for a specific user from the service providing device 400, isomorphic encryption related to the information request message (analysis function F) Detect data.

At this time, the information request message (analysis function F) includes a search condition for searching for information on a specific user, and information for decrypting the detected encrypted data that satisfies the search condition among homomorphic encrypted data, that is, element encryption data. Information identifying the collection device 200 ₁ -200 _n may be included in the form of a function.

That is, the analysis server 300 uses the analysis function F to perform an operation between encrypted information without a decryption process for element encryption data (c1, c2, ... cn) that satisfies the search condition among isomorphic encrypted data for a specific user. To generate an encrypted operation result (C).

Here, the encrypted operation result C means collected group encryption data that satisfies a search condition among homomorphic encrypted data for a specific user.

Thereafter, the analysis server 300 transmits the encrypted operation result (C) to the service providing device 400 (S180).

The service providing device 400 detects the isomorphic encrypted data related to the information request message (analysis function F) from the analysis server 300, and when the detected isomorphic encrypted data is later transmitted to the collection device, the element of the isomorphic encrypted data Upon receiving the encrypted operation result (C) including information that can identify the corresponding collection device that decrypts the encrypted data (c1, c2,...cn), element encryption is performed using the encrypted operation result (C). The decoding results b1, …, bn for the data are obtained.

More specifically, the service providing device 400, upon receiving the encrypted calculation result (C) from the analysis server 300, collects the encrypted calculation result (C) in the information collecting device 200 _1- 200 _n ) to request decryption of the element encryption data (c1, c2, ... cn) that can be decrypted in the corresponding collection device (S190a).

That is, as mentioned above, since the encrypted operation result contains information on the corresponding information collecting device that decrypts the element encrypted data, each information collecting device that has received the encrypted operation result is included in the isomorphic encrypted data. Among the element-encrypted data, the element-encrypted data that can be decrypted by itself is identified and decrypted.

Accordingly, the service providing device 400 does not transmit the decrypted data for the entire isomorphic encrypted data for a specific user simply by transmitting the encrypted operation result C to the information collecting device 200 ₁ -200 _n. , Only the decryption result of the element encryption data included in the encrypted operation result is obtained from the corresponding information collection device.

At this time, since the information collection device 200 ₁ -200 _n generates encrypted data by applying the second encryption algorithm, the public key (hereinafter, HE public key pk) and the secret key (hereinafter, HE It is desirable to store the secret key ski).

Accordingly, the information collection device 200 ₁ -200 _n decrypts the element encryption data c1, c2, ... cn using the HE secret key (ski) to obtain the decryption results b1, …, bn. Generate.

Thereafter, the information collection device 200 ₁ -200 _{n transmits} the decoding results b1, …, bn for the element encrypted data c1, c2, ... cn to the service providing device 400 (S190b).

The service providing unit 430 provides a service related to a specific user by using the decryption results b1, …, bn for the element encryption data c1, c2, ... cn.

That is, the service providing unit 430 applies the decoding results (b1, …, bn) of the element encryption data (c1, c2, ... cn) to the service determination function (G) and recommends information on the service to be provided ( m). Thereafter, the service providing unit 430 provides a service by transmitting the recommended information m to a terminal of a specific user.

Hereinafter, an example of providing a service by acquiring only some personal information in a cooperative manner through an operation between encrypted personal information when providing a service using encrypted personal information (eg, real estate service) will be described with reference to FIG. 4. .

In FIG. 4, personal information on a user who has requested real estate service, that is, personal information (d1,..dn) generated in the process of using a service provided by at least one company (eg, hospital, financial institution, telecommunication company, etc.) Let's start with the process of being encrypted and stored.

More specifically, the terminal 100 of the user who requested the real estate service, personal information (d1, ..dn) generated in the process of using the service provided by at least one company (eg, hospital, financial institution, telecommunication company, etc.) ) Is encrypted and then transmitted to the collection device 200 in at least one company (eg, hospital, financial institution, telecommunication company, etc.).

Here, the personal information (d1,..dn) is (d1=location), (d2=health), which should be obtained in order to provide real estate services as shown in FIG. It may be information such as (dn=financial information).

At this time, the information collection device 200 ₁ for receiving information of (d1=location) may be a telecommunication company, and the information collection device 200 ₂ for receiving information of (d2=health) may be a hospital, and ( _{The information collection device 200 n} for receiving information of dn=financial information) may be a financial institution.

…

)를 생성하며, 비밀키(k)에 대한 복호화 함수를 암호화하기 위해 제2 알고리즘을 적용하여 동형 복호화 함수(이하, 동형 복호화 함수)(Cpk)를 생성한다(S100-S120). 이후, 단말(100)은, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)를 수집장치(200)로 전달한다(S130). That is, the terminal 100 converts personal information (d1, ..dn) into symmetric key encrypted data (

…

), and by applying a second algorithm to encrypt the decryption function for the secret key k, a homogeneous decryption function (hereinafter, isomorphic decryption function) Cpk is generated (S100-S120). Thereafter, the terminal 100, the symmetric key encrypted data (

) And homomorphic decoding function (

) To the collection device 200 (S130).

) 및 동형 복호화 함수(

)를 전달받는다. 수집장치(200)는, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)에 제2 암호화 알고리즘을 적용하여 동형 암호화 데이터(

)를 생성한다. 이후, 수집장치(200)는, 동형 암호화 데이터(

)를 분석서버(300)로 전달한다(S140, S150).The collection device 200 includes symmetric key encrypted data for personal information (d1 = location, d2 = health, ... dn = finance) required to receive real estate services from the terminal 100 (

) And homomorphic decoding function (

) Is delivered. Collection device 200, symmetric key encrypted data (

) And homomorphic decoding function (

) By applying a second encryption algorithm to the homomorphic encrypted data (

). Thereafter, the collection device 200, isomorphic encrypted data (

) To the analysis server 300 (S140, S150).

)를 수신한다. 한편, 분석서버(300)는, 동형 암호화 데이터를 이용하여 서비스를 제공하는 서비스제공장치(400)로부터 부동산 서비스를 요청한 사용자에 대한 정보를 요청하는 정보요청메시지(분석함수 F)를 수신한다(S160).Analysis server 300, isomorphic encrypted data generated by applying a second encryption algorithm to personal information from the collection device 200 (

) Is received. Meanwhile, the analysis server 300 receives an information request message (analysis function F) requesting information on a user who has requested real estate service from the service providing device 400 that provides a service using isomorphic encrypted data (S160). ).

Then, the analysis server 300 is encrypted information without a decryption process for element encryption data (c1, c2, ... cn) that satisfies the search condition among isomorphic encrypted data for a user who has requested the real estate service using the analysis function F. An encrypted operation result (C) is generated by performing an operation between the two. The analysis server 300 transmits the encrypted operation result (C) to the service providing device 400 (S170, S180).

The service providing apparatus 400 obtains decryption results b1, …, bn for element encryption data by using the encrypted operation result C in order to provide a real estate service.

That is, when the service providing device 400 receives the encrypted operation result (C) from the analysis server 300, the encrypted operation result (C) is sent to the information collecting device 200 ₁ (eg, a communication company), and information Collection device (200 ₂ ) (eg hospital)... It transmits to the information collection device 200 _n (eg, a financial institution) and requests decryption of the element encryption data (c1, c2, ... cn) that can be decrypted in the corresponding collection device (S190a).

At this time, since the information collection device 200 ₁ -200 _n generates encrypted data by applying the second encryption algorithm, the public key (hereinafter, HE public key pk) and the secret key (hereinafter, HE It is desirable to store the secret key ski).

Accordingly, the information collection device 200 ₁ -200 _n decrypts the element encryption data c1, c2, ... cn using the HE secret key (ski) to obtain the decryption results b1, …, bn. Generate.

That is, the information collection device (200 ₁ -200 _n ), (d1 = location), (d2 = health), which should be acquired in order to provide real estate services,... The element encryption data (c1, c2,...cn) corresponding to (dn=financial information) is decrypted to generate the decryption results (b1, …, bn).

Thereafter, the information collection device 200 ₁ -200 _{n transmits} the decoding results b1, …, bn for the element encrypted data c1, c2, ... cn to the service providing device 400 (S190b).

The service providing apparatus 400, the decryption result (b1, ..., bn), that is, (d1 = location), (d2 = health), ... to be obtained in order to provide real estate services. (dn=financial information) is applied to the real estate service recommendation function (G) to generate recommended property information (m). Thereafter, the service providing apparatus 400 provides the service by transmitting the recommended property information m to the terminal 100 of the user who requested the real estate service.

Hereinafter, a method of operating an analysis server and a service providing apparatus according to an embodiment of the present invention will be described in detail with reference to FIGS. 6 and 7.

First, a method of operating the analysis server will be described in detail with reference to FIG. 6. In FIG. 6, it is assumed that the collection device 200 generates and stores isomorphic encrypted data for a specific user by applying a second encryption algorithm to the symmetric key encrypted data transmitted from the terminal 100 and the isomorphic decryption function. I'll explain.

4 and 6, the receiving unit 310 of the analysis server 300 according to an embodiment of the present invention, isomorphic encrypted data generated by applying a second encryption algorithm to personal information from the collection device 200 Receive. The homomorphic encrypted data received as described above may be classified and stored for each user.

Here, each of the isotype encrypted data classified for each user includes two or more element encryption data. For example, if user A's isomorphic encrypted data includes medical records, salary details, communication charges, age, gender, name, etc., medical records, salary details, communication charges, age, gender, etc. that constitute the isomorphic encrypted data Names, etc. correspond to element encryption data.

When receiving an information request message requesting information on a specific user from a service providing device that provides a service using the isomorphic encrypted data (S310), the generation unit 320 detects isomorphic encrypted data related to the information request message. And, when the detected isomorphic encrypted data is later transmitted to the collecting device, an encrypted operation result including information for identifying a corresponding collecting device that decrypts the element-encrypted data of the isomorphic encrypted data is generated (S320).

More specifically, when receiving an information request message requesting information on a specific user from the service providing device 400, the generation unit 320 detects isomorphic encrypted data related to the information request message.

In this case, the information request message, the search criteria for retrieving information for a particular user, the detected encrypted data, that is collected to perform decoding for the element data encrypted information device that meet the criteria of the same type encrypted data (200 ₁ -200 _n ) can be included in the form of a function. In the following, the function included in the information request message will be described by referring to it as an analysis function.

That is, the generation unit 320 generates an encrypted operation result by performing an operation between encrypted information without a decryption process for the element encrypted data that satisfies the search condition among isomorphic encrypted data for a specific user by using the analysis function. .

Thereafter, the generation unit 320 transmits the encrypted operation result to the providing unit 330.

The providing unit 330 may transmit the encrypted operation result to the service providing device 400 (S330), and obtain a decryption result for the element encryption data by using the encrypted operation result in the service providing device 400. To be there.

Next, an operation method of the service providing apparatus will be described in detail with reference to FIG. 7. In FIG. 7, it is assumed that the analysis server 300 generates and stores isotype encrypted data for a specific user by using the symmetric key encryption data and the isotype decryption function transmitted from the collection device 200.

4 and 7, the generation unit 410 of the service providing apparatus 400 according to an embodiment of the present invention requests information for a specific user in order to provide a service using isomorphic encrypted data. Generate a message (S400).

That is, the generation unit 410 includes a search condition for searching for information on a specific user and an information collection device 200 ₁ -200 _n capable of decrypting element encrypted data that satisfies the search condition among homomorphic encrypted data. It generates an information request message including an analysis function so that it can be checked.

Here, the search condition is a condition for detecting elemental encrypted data necessary to provide a service among isomorphic encrypted data for a specific user, and the condition may vary according to the type and characteristic of the service provided by the service providing apparatus.

On the other hand, the acquisition unit 420, when the analysis server 300 detects the isomorphic encrypted data related to the information request message, and when the detected isomorphic encrypted data is later transmitted to the collection device, the element encryption data of the isomorphic encrypted data When an encrypted operation result including information for identifying a corresponding collection device performing decryption is transmitted, the decryption result for the element encryption data is obtained using the encrypted operation result after receiving the encrypted operation result.

More specifically, the acquisition unit 420, upon receiving the encrypted operation result from the analysis server 300 (S410), the encrypted operation result to the information collecting device 200 ₁ -200 _{n in the collection device 200} Decryption of element-encrypted data that can be decoded by the corresponding collection device is requested (S420).

That is, as mentioned above, since the encrypted operation result contains information on the corresponding information collecting device that decrypts the element encrypted data, each information collecting device that has received the encrypted operation result is included in the isomorphic encrypted data. Among the element-encrypted data, the element-encrypted data that can be decrypted by itself is identified and decrypted.

Accordingly, the acquisition unit 420 does not transmit the decrypted data for the entire isomorphic encrypted data for a specific user as long as the encrypted operation result is transmitted to the information collecting device 200 ₁ -200 _{n, but the encrypted operation} Only the result of decoding the element encryption data included in the result is obtained from the corresponding information collection device.

At this time, since the information collection device (200 ₁ -200 _n ) generated encrypted data by applying the second encryption algorithm, the public key (hereinafter, HE public key) and the secret key (hereinafter, HE secret) for the second encryption algorithm It is desirable to store the key).

Accordingly, the information collection apparatus 200 ₁ -200 _n can perform decryption on the element encrypted data using the HE secret key and transmit it. Thereafter, the acquisition unit 420 informs the service provider 430 that the decoding result for the element encryption data has been received.

The service providing unit 430 provides a service related to a specific user by using a result of decoding the element encrypted data (S430).

That is, the service providing unit 430 generates recommendation information on a service to be provided by applying the decoding result of the element encryption data to the service determination function. Thereafter, the service providing unit 430 transmits the recommended information to a terminal of a specific user.

As described above, according to the present invention, one exclusive intermediary server does not exclusively distribute or allocate all personal information of users to provide services, but analyzes encrypted personal information without a decryption process. When the encrypted operation result is received from the server, it is related by using the result of partially decrypting only some personal information for the provision of services rather than the overall decryption of personal information through cooperation with a number of information collection devices. By providing the service, it is possible to prevent the exclusive right to personal information, and since the service using personal information can be provided only through cooperation of a number of devices, the effect of maximizing security can be derived.

Embodiments of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and usable to those skilled in computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -A hardware device specially configured to store and execute program instructions such as magneto-optical media, and ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operation of the present invention, and vice versa.

Until now, the present invention has been described in detail with reference to preferred embodiments, but the present invention is not limited to the above-described embodiments, and the technical field to which the present invention belongs without departing from the gist of the present invention claimed in the following claims. Anyone of ordinary skill in the art will say that the technical idea of the present invention extends to the range in which various modifications or modifications are possible.

According to the operation method of the analysis server and the analysis server in a communication environment that protects personal information in a cooperative manner according to the present invention, and the operation method of the service providing device and the service providing device, an encrypted individual when providing a service using encrypted personal information In that the service is provided by acquiring only some personal information in a cooperative manner through the operation between information, the possibility of marketing or sales of the applied device is sufficient as it exceeds the limitations of the existing technology. Rather, it is an invention that has industrial applicability because it can be implemented clearly in reality.

100: terminal 200: collection device
300: analysis server
310: receiving unit 320: generating unit
330: providing unit
400: service providing device
410: generation unit 420: acquisition unit
430: service provider

Claims (10)

A receiving unit for receiving encrypted data obtained by encrypting personal information from a collection device;
When receiving an information request message requesting information on a specific user for service provision from the service providing device, the encrypted data related to the information request message is detected among all encrypted data for the specific user, and the detected encrypted data is A generator for generating an encrypted operation result including information for identifying a collection device capable of performing decryption on the data; And
Decryption result of the detected encrypted data from a corresponding collection device capable of providing the encrypted operation result to the service providing device and allowing the service providing device to decrypt the detected encrypted data using the encrypted operation result Provides that enable you to acquire
Analysis server comprising a. The method of claim 1,
The information request message includes a search condition for searching for information on the specific user,
The encrypted data for the specific user includes two or more element encryption data,
The detected encrypted data,
Analysis server, characterized in that the element encryption data satisfying the search condition among two or more element encryption data included in the encrypted data for the specific user. The method of claim 2,
The generation unit,
And generating the encrypted operation result by performing an operation between encrypted information without a decryption process for the detected encrypted data. The method of claim 3,
An analysis server, characterized in that the encryption algorithm applied to the encrypted data is the same, and is based on a Homomorphic Encryption technique in which an operation between encrypted information is possible. delete delete delete A receiving step of receiving encrypted data obtained by encrypting personal information from a collection device;
When receiving an information request message requesting information on a specific user for service provision from the service providing device, encrypted data related to the information request message is detected among all encrypted data for the specific user, and the detected encrypted data is A generating step of generating an encrypted operation result including information identifying a collection device capable of performing decryption on the data; And
Decryption result of the detected encrypted data from a corresponding collection device capable of providing the encrypted operation result to the service providing device and allowing the service providing device to decrypt the detected encrypted data using the encrypted operation result The provision stage that enables you to acquire
Operating method of the analysis server comprising a. The method of claim 8,
The information request message includes a search condition for searching for information on the specific user,
The encrypted data for the specific user includes two or more element encryption data,
The detected encrypted data,
The method of operating the analysis server, characterized in that the element encryption data satisfying the search condition among two or more element encryption data included in the encrypted data for the specific user.
delete

Images