KR102388280B1 - Server of artificial intelligence personal privacy data security system - Google Patents

Abstract

The security system according to an embodiment of the present invention generates encrypted data using customer basic information, generates a division password for the customer basic information, and hashes the division password using a decimal number to separate encrypted new a terminal for generating a password and generating a connection password using a prime number used during hash processing of the customer basic information in the process of encrypting the customer main information; and a server including a main information DB for storing encrypted main customer information connected through the connection password by hashing the password of the basic information DB for storing the customer basic information.

Description

Server of artificial intelligence personal information security system {Server of artificial intelligence personal privacy data security system}

The present invention relates to a security system, and more particularly, to a server of an artificial intelligence personal information security system to which case-based reasoning technology and block chain method are applied.

In financial institutions such as banks and cryptocurrency exchanges. The security of the customer's various transactions can be prevented by applying the block chain method to hackers from changing the contents. However, personal information such as customer information entered during registration at financial institutions such as banks, insurance companies, and credit card companies or at cryptocurrency exchanges is stored by applying encryption to the server DB. In a situation where intelligent crimes are developing day by day, the security of the usual encryption method is relatively weak to hacking, which can lead to the leakage of personal information or core technical information to the outside. Accordingly, there is a need for a more thorough and reliable security device and thus a security method.

The present invention is to solve the above technical problem, and an object of the present invention is to apply a separate block chain method Hash function to fundamentally prevent hacking of personal information, and also an artificial intelligence method case-based reasoning technology It is to provide a server of the security system applied.

The security system according to an embodiment of the present invention generates encrypted data using customer basic information, generates a division password for the customer basic information, and hashes the division password using a decimal number to separate encrypted new a terminal for generating a password and generating a connection password using a prime number used during hash processing of the customer basic information in the process of encrypting the customer main information; and a server including a basic information DB for storing the customer basic information and a primary information DB for storing customer important information encrypted through the connection password.

As an embodiment, the terminal may distort the encrypted basic customer information and the encrypted identification password. The server may further include a case information DB for converting hacking cases into a database. The server may analyze big data of hacking cases using an AI system, and may perform similarity search and inference for hacking cases using a CBR system.

The server of the security system according to an embodiment of the present invention generates encrypted data using customer basic information, generates a division password for the customer basic information, and hashes the division password using a decimal number. a basic information manager for generating a new division password and storing the encrypted data of the customer basic information and the encrypted division password in a basic information DB; A key information manager that generates a connection password using a prime number used during hash processing of the customer basic information in the process of encrypting the customer key information, and stores the encrypted key customer information in the key information DB ; and a case information manager that analyzes big data on hacking cases for data stored in the basic information DB or the main information DB, performs similarity searches and inferences for hacking cases, and stores the analysis results on the hacking cases in the case information DB includes

As an embodiment, the case information manager may analyze big data of a hacking case using an AI system, and may perform a similarity search and inference of a hacking case using a CBR system.

According to an embodiment of the present invention, artificial intelligence technology and Case Based Reasoning (CBR) technology are applied to further strengthen security processing such as prevention of leakage of personal information of customers. More specifically, in the case of the present invention, by applying the hashing processing method and CBR technology, from the time of inputting personal information and outputting it to the outside of the system, even if a hacker invades some data, basic customer information such as customer name can be identified. make it impossible Therefore, according to the security policy of the present invention, it is possible to thoroughly prevent leakage of customer's main information to the outside.

1 is a block diagram schematically showing a security system according to an embodiment of the present invention.
FIG. 2 is a block diagram exemplarily showing the terminal shown in FIG. 1 .
FIG. 3 is a conceptual diagram for exemplarily explaining an operation of managing basic customer information of the controller shown in FIG. 2 .
FIG. 4 is a conceptual diagram for exemplarily explaining an operation of managing customer main information of the controller shown in FIG. 2 .
FIG. 5 is a block diagram exemplarily showing the server shown in FIG. 1 .
6 is a conceptual diagram for exemplarily explaining an operation method of the main information manager shown in FIG. 5 .
7 is a block diagram exemplarily showing the main information reduction operation of the main information manager shown in FIG. 5 .
FIG. 8 is a conceptual diagram for exemplarily explaining an operation of managing customer basic information according to a new classification password change of the basic information manager shown in FIG. 7 .
9 is a block diagram for exemplarily explaining an operation method of the case information manager shown in FIG. 5 .
FIG. 10 is a flowchart illustrating an operation method of the case information manager illustrated in FIG. 5 .

Hereinafter, embodiments of the present invention will be described clearly and in detail to the extent that those skilled in the art can easily practice the present invention.

1 is a block diagram schematically showing a security system according to an embodiment of the present invention. Referring to FIG. 1 , a security system 1000 includes a terminal 1100 and a server 1200 . A customer or a person in charge (hereinafter referred to as a person in charge) may input basic customer information 1101 such as a customer name and customer main information 1102 such as a resident registration number, account number, and number of coins by using the terminal 1100 .

The customer basic information 1101 and the customer main information 1102 may be stored in the storage unit 1220 of the server 1200 . The storage unit 1220 of the server 1200 may include a basic information DB and a main information DB. Customer basic information 1101 may be stored in the basic information DB. The control unit 1230 of the server 1200 may derive various information or perform security management using the basic information DB and the main information DB of the storage unit 1220 . For example, the control unit 1230 may perform security management using a block chain system (BCS).

Meanwhile, the security system 1000 may prevent an attack by a hacker as shown in FIG. 1 . The hacker 1 may be a customer or a customer service representative (hereinafter referred to as a representative) who can input customer information into the terminal 1100 . The person in charge can easily access not only basic customer information, but also important information. Therefore, the person in charge requires special security management or personal authentication management.

Hacker 2 may steal customer information from the terminal 1100 . Hacker 2 may extract customer information during wired or wireless communication, or install hacking means in the terminal 1100 to extract customer information. Therefore, for Hacker 2, it is necessary to divide and input all information such as customer name and password, and connect it with the Hash function.

Hacker 3 may steal customer information from the storage unit 1220 in the server 1200 . Therefore, for Hacker 3, it is necessary to block the securing of customer basic information from the main information DB of the storage unit 1220 by linking the basic information and the main information through the Hash function so that the customer name and the identification password are not obtained together. The non-distorted customer basic information stored separately in the storage unit 1220 may be utilized when the customer basic information is re-distorted after a specific customer main information reduction process during computerized work.

Hacker 4 may steal customer information from the control unit 1230 in the server 1200 . With respect to Hacker 4, even if it invades the control unit 1230 and steals customer main information, it is necessary to make it impossible to secure basic information, such as a customer name, by interlocking basic information and main information with a hash function. Hereinafter, the defense method against the attacks of hackers 1 to 4 will be described in more detail.

FIG. 2 is a block diagram exemplarily showing the terminal shown in FIG. 1 . Referring to FIG. 2 , the terminal 1100 may include an input unit 1110 , a control unit 1120 , an output unit 1130 , and a power supply unit 1140 . The power supply unit 1140 may provide operating power to the input unit 1110 , the control unit 1120 , and the output unit 1130 under the control of the control unit 1120 .

The person in charge is a security grantor who can access the terminal 1100 . However, data (eg, key customer information) may be leaked through the person in charge. In order to prevent this, the input unit 1110 may allow access after checking the list of allower security levels or after personal authentication. The input unit 1110 may manage a log file in charge. The log file can be checked only through the security system 1000, and the person in charge may not be able to modify the contents.

The controller 1120 may control the overall operation of the terminal 1100 . The controller 1120 may control operations between the input unit 1110 , the output unit 1130 , and the power supply unit 1140 . For example, the control unit 1120 may encrypt the customer name input through the input unit 1110 . The control unit 1120 may generate a division password to distinguish the encrypted customer name and encrypt the division password. In addition, the control unit 1120 can protect customer information from the hacker 2 attack by distorting the encrypted customer name or identification password.

The output unit 1130 may receive encrypted or distorted customer information from the control unit 1120 , and provide the received customer information to the server (see FIG. 1 , 1200 ). The output unit 1130 may separately transmit the encrypted customer name and identification password, or encrypted data of customer main information to the server 1200 . Here, the encrypted customer name and identification password may be stored in the basic information DB of the server 1200 by connecting the connection password. And the encrypted customer key information may be stored in the key information DB.

The output unit 1130 may provide data to the server 1200 using wired or wireless communication. When the output unit 1130 uses wireless communication, wireless wide area network (WWAN) communication (eg, RF wireless communication, IEEE 802.20), wireless metropolitan area network (WMAN) communication (eg, IEEE 802.16, WiMAX), wireless local area network (WLAN) communications (eg, NFC, BLE, WiFi, Ad-Hoc, etc.), and wireless personal area network (WPAN) communications (eg, IEEE 802.15, Zigbee, Bluetooth, UWB) , RFID, Wireless USB, Z-Wave, Body Area Network) may be implemented to perform wireless communication in at least one method.

FIG. 3 is a conceptual diagram for exemplarily explaining an operation of managing basic customer information of the controller shown in FIG. 2 . The control unit 1120 may encrypt the basic customer information (refer to FIG. 1 , 1101 ) input through the input unit 1110 . For example, the customer basic information 1101 may be a customer name as shown in FIG. 1 . Referring to the example of FIG. 3 , the customer name (Mongryong Lee) may be encoded as 253138. The controller 1120 may distort the encrypted data. For example, the controller 1120 may distort the first and third digits in the encrypted data 253138 to generate the distorted data as 752138. That is, the controller 1120 may generate encrypted and distorted data 752138 from the input customer name (Mongryong Lee).

On the other hand, the control unit 1120 may generate a classification password to distinguish the encrypted or distorted customer name. Referring to FIG. 3 , the controller 1120 may generate a division password 341256 from the customer name (Mong-ryong Lee) and encrypt the division password. The control unit 1120 may perform a hash process to encrypt the division password. The controller 1120 may obtain a connection password by hashing the encrypted data using a decimal number. Here, a prime number means a number that is divisible only by 1 and itself.

In step 1, the division code 341256 is divided by the prime number 173 to get 1972.57. In step 2, from the result of step 1, only integers are taken to get 1972, and by multiplying by 149 decimals, 293828 is obtained. In FIG. 3, the length of the encrypted data is 6 digits, but in actual application, it is 20 digits, the decimal length is 14 digits, and the integer obtained as a result of the calculation may be 6 digits. In addition, the prime number for hash processing (173 or 149 in the above example) may be changed for each transaction of the customer. Since the control unit 1120 changes the prime number for every transaction, even if the hacker tracks the customer's transaction details, the customer name cannot be confirmed.

Also, the control unit 1120 may distort the encrypted division password. The controller 1120 may determine a change position and change the number by using a random number generation algorithm at an appropriate ratio within a certain rule range. For example, the control unit 1120 may generate the encrypted and distorted data 193728 by distorting the first and fourth digits of the encrypted separated encryption data 293828.

In the example of FIG. 3, the length of the data of the encrypted and distorted customer basic information 1101 is 6 digits, but in reality, the security can be further improved by using longer data (eg, 32 to 56). . Meanwhile, according to an embodiment of the present invention, the distortion processing operation may not be performed by the control unit 1120 of the terminal 1100 , but may be performed by the control unit 1230 of the server 1200 . The security system 1000 according to an embodiment of the present invention encrypts and distorts the customer basic information 1101 input to the terminal 1100, thereby protecting customer information from hacker attacks.

FIG. 4 is a conceptual diagram for exemplarily explaining an operation of managing customer main information of the controller shown in FIG. 2 . The control unit 1120 may encrypt the customer main information (see FIG. 1 , 1102 ) input through the input unit 1110 . For example, the customer main information 1102 may be a password, a resident registration number (hereinafter referred to as a resident number), and the number of coins. The password can be encrypted with 23518, the social security number can be encrypted with 93174, and the number of coins can be encrypted with 48289.

The control unit 1120 may generate each connection password in the main information by hashing the connection password for each main information (password, resident number, etc.) in the division password of the customer basic information 1102 . The controller 1120 may use a decimal number for hash processing. By dividing the encrypted data of the password 23518 by the decimal number 173 and selecting an integer, the password 135 for connecting the main information of the password can be obtained. Similarly, the main information connection password 538 of the resident number and the main information connection password 279 of the number of coins can be obtained by dividing the respective encrypted data 93174 and 48289 by a decimal number 173 and selecting an integer.

The control unit 1120 may also lengthen the encrypted data in order to increase security in the customer main information 1102 as in the customer basic information 1101 . Meanwhile, the operation of managing customer main information may be performed by the controller 1230 of the server 1200 . The security system 1000 according to an embodiment of the present invention can protect customer information from hacker attacks by encrypting key customer data input to the terminal 1100 .

FIG. 5 is a block diagram exemplarily showing the server shown in FIG. 1 . Referring to FIG. 5 , the server 1200 may include a communication unit 1210 , a storage unit 1220 , and a control unit 1230 . The server 1200 provides a management program to the terminal 1100 , so that customer information can be managed or the customer can execute the program. In addition, the server 1200 may receive customer information from the terminal 1100 and manage basic customer information or customer main information. In addition, the server 1200 may receive case information from various terminals, manage case details, and provide case details upon a user's request.

The communication unit 1210 enables communication with the terminal 1100 by wire or wirelessly. The communication unit 1210 is a code division multiple access (CDMA), global system for mobile communication (GSM), wideband CDMA (WCDMA), CDMA-2000, time division multiple access (TDMA), long term evolution (LTE), worldwide (Wmax) Wired/wireless communication such as interoperability for microwave access), wireless LAN (WLAN), ultrawide band (UWB), Bluetooth, wireless display (WI-DI), the Internet, and LAN may be supported.

The communication unit 1210 may include an input unit 1211 and an output unit 1212 . The input unit 1211 may receive customer information from the terminal 1100 . Alternatively, the input unit 1211 may receive basic customer information or customer main information from the terminal 1100 or may receive case information. The input unit 1211 may provide customer information, basic customer information, customer main information, or case information to the storage unit 1220 or the control unit 1230 . The output unit 1212 may provide a management program to the terminal 1100 and provide customer information or case information.

The storage unit 1220 may store customer information received through the communication unit 1210 . The storage unit 1220 may include a basic information DB 1221 , a main information DB 1222 , and a case information DB 1223 . Basic customer information (see FIG. 1 , 1101 ) and customer main information (see FIG. 1 , 1102 ) may be stored in the storage unit 1220 of the server 1200 . The storage unit 1220 of the server 1200 may include a basic information DB 1221 and a main information DB 1222 .

The basic information DB 1221 may store encrypted or distorted customer basic information. In addition, the basic information DB 1221 may store customer basic information that is not distorted, which is separately stored. Basic customer information that has not been processed for distortion can be used to re-distort customer basic information after the specific customer information is returned during computerized work. The control unit 1230 of the server 1200 may derive various information or perform security management using the basic information DB 1221 and the main information DB 1222 of the storage unit 1220 . For example, the control unit 1230 may perform security management using a block chain system (BCS).

Customer information input from the terminal 1100 is stored in the basic information DB 1221 , and basic customer information such as customer ID, customer name, terminal ID, and contact information may be stored. The main information DB 1222 may store main information related to the customer's basic information and related to the customer's security. The case information DB 1223 may store several cases provided by a customer or a person in charge.

The control unit 1230 includes a processor 1231 , a program managing unit 1232 , a basic information managing unit 1233 , a sensitive information managing unit 1234 , and a case information manager (case). information managing unit, 1235). The controller 1230 may be implemented as hardware or software. For example, the processor 1231 may be implemented as hardware, and the program manager 1232 , the basic information manager 1233 , the main information manager 1234 , and the case information manager 1235 may be implemented with an algorithm or software. .

The processor 1231 may control the overall operation of the server 1200 . For example, the processor 1231 accesses the basic information DB 1221 , the main information DB 1222 , and the case information DB 1223 of the storage unit 1220 , and the basic information manager 1233 , By executing an algorithm or program command constituting the main information manager 1234 and the case information manager 1235 , the controller 1230 may be driven. In addition, the processor 1231 may include controllers, interfaces, a graphic engine, and the like for controlling various components of the server 1200 . The processor 1231 may be provided in the form of a system-on-chip (SoC), an application specific integrated circuit (ASIC), or a field programmable gate array (FPGA).

The program manager 1232 may support to provide or install a management program to the terminal 1100 . The program manager 1232 may execute a separate security program when necessary through the terminal 1100 in which the management program is installed. The basic information manager 1233 may access the basic information DB 1221 of the storage unit 1220 to manage basic information of the customer. When a new customer is signed up through the terminal 1100 , the basic information manager 1233 may assign the new customer ID and store the new customer ID and customer name in the basic information DB 1221 . When the basic information of the existing customer is changed, the basic information manager 1233 may update basic information stored in the basic information DB 1221 .

The main information manager 1234 may access the main information DB 1222 of the storage unit 1220 to manage the customer's main information. The main information manager 1234 may update main information stored in the main information DB 1222 when existing main information is changed.

The case information manager 1235 may access the case information DB 1223 of the storage unit 1220 to manage case details and the like. When hacking case contents are provided through the terminal 1100 , the case information manager 1235 may store the hacking case contents in the case information DB 1223 and manage the case details of the hacking. The case information manager 1235 may provide case information stored in the case information DB 1223 to the terminal 1100 when there is a case history request from the terminal 1100 .

6 is a conceptual diagram for exemplarily explaining an operation method of the main information manager shown in FIG. 5 . Referring to FIG. 6 , basic customer information of customer A (Mongryong Lee) and customer B (Chunhyang Seong) is a customer name, and main customer information is a password, resident number, and number of coins. The customer basic information may be stored in the basic information DB 1221 . The customer main information may be stored in the main information DB 1222 through a connection password as shown in FIG. 6 .

Customer A's password and number of coins may be stored in the main information DB 1222 through connection passwords 135 and 279, respectively. Next, the number of coins and social security number of customer B may be stored in the main information DB 1222 through connection passwords 307 and 441, respectively. In addition, customer A's social security number and customer B's password may be stored in the main information DB 1222 through connection passwords 538 and 570, respectively.

When Hacker 3 tries to hack the main information DB 1222, the connection password in front of each attribute of the main information can be processed as a hash processing result number of the connection password behind the basic information classification password. The connection password behind the identification password in the customer's basic information can be processed as a hash function. The result of processing is recorded in front of the main information so that it is linked from the basic information to the main information attribute. However, even if the main information is hacked, the customer name cannot be inferred because the basic information cannot be connected. By mixing key information attributes of several customers, security can be maintained even if hacking is irrelevant.

7 is a block diagram exemplarily showing the main information reduction operation of the main information manager shown in FIG. 5 . Referring to FIG. 7 , the controller 1230 of the server 1200 may search for basic customer information through the BCS system when computerized processing is required. This BCS system is a CBR (case-based reasoning) system, and it is possible to accurately find the customer by performing a similarity search on the customer basic information DB that was distorted during registration, return the corresponding main information, and provide it to the terminal 1100 . The control unit 1230 of the server 1200 may delete the reduction data after performing a search operation using the BCS within the server within the shortest time. The terminal 1100 may deliver only the work result to the person in charge after deletion of the reduction data.

Regarding the CBR system, it is described in "Storage medium for installation of security server and security function using case-based reasoning engine" filed on May 15, 2017, filed by the present applicant (application number: 10-2015-0155339) and can be applied to the CBR system of the present application.

The CBR system receives personal information for search and searches the case database. The CBR system calculates the similarity for each attribute in the searched case of personal information, applies a weight to the similarity for each attribute of the personal information for which the similarity calculation is completed, and calculates the final similarity value for each case to which the weight is applied. The CBR system determines whether matching personal information, ie, basic personal information, is detected based on the calculated final similarity value. In this case, the CBR system may determine the personal information of the case having the highest calculated final similarity value as the matched personal information.

For example, when the CBR system detects personal information of a case having the highest final similarity value, that is, basic personal information, it can extract personal main information mapped in response to the detected basic personal information and provide it to the user. However, if the CBR system is less than a preset reference value or there is no personal information corresponding to the search-requested personal information, it may be terminated. Meanwhile, the CBR system may extract personal information for two or more cases with a high final similarity value, and detect personal information requested for search by determining a predetermined criterion among the corresponding personal information. The CBR system can recover the matched personal basic information and decrypt the encrypted personal key information matched with the restored basic personal information.

FIG. 8 is a conceptual diagram for exemplarily explaining an operation of managing customer basic information according to a new classification password change of the basic information manager shown in FIG. 7 . Here, the customer basic information management operation according to the new classification password change may be performed by the control unit 1120 of the terminal 1100 .

The controller 1230 may distort the second and six-digit numbers in the encrypted data 253138 of the customer name (Lee Mong-ryong) to generate the distorted data as 243139. That is, the basic information manager 1233 of the control unit 1230 may generate newly distorted data 243139 from the customer name (Mongryong Lee) stored in the basic information DB 1221 .

On the other hand, the control unit 1230 may generate a new differentiated password by performing two separate hashing of the divided password 341256 stored in the basic information DB 1221 . In step 1, the division cipher 341256 is divided by the prime number 113 to get 3019.90. In step 2, only integers are taken from the results of step 1 to get 3019, and multiplied by a decimal number 179 to get 540573.

The control unit 1230 changes the new division password for each transaction, and uses the division password in the server 1200 as it is. In the customer basic information, the connection part by key information attribute that is linked with the classification password is not newly hashed. In addition, the control unit 1230 may increase security by using a sufficiently long hash processing number. The basic information may be stored in the basic information DB 1221 after re-distortion processing.

9 is a block diagram for exemplarily explaining an operation method of the case information manager shown in FIG. 5 . Referring to FIG. 9 , the case information manager 1235 may include a self-evolving security system 1236 , an artificial intelligence system 1237 , and a case search inference system 1238 .

The self-evolving security system (SES) 1236 may collect data on existing hacking cases and processing items by using the case information DB 1223 when hacking occurs. The self-evolving security system 1236 may analyze and pattern the hacker's intrusion contents and results as big data. The self-evolving security system 1236 may continuously self-evolve whenever a new hacking occurs by using the AI system 1237 or the CBR system 1238 . The self-evolving security system 1236 can respond to all existing hacking through self-evolution.

The self-evolving security system 1236 uses an artificial intelligence system (AI system, 1237), analyzes many collected hacking cases into big data, and can analyze, classify, and formalize patterns using deep learning. In addition, the self-evolving security system 1236 may use the CBR system 1238 to model hacking cases and store them in a database and systematically. The CBR system 1238 may suggest the most appropriate solution by searching for and inferring hacking cases stored in the case information DB 1223 when a hacker invades. In case of hacking using computer power, standardize and classify it quickly, and in case of hacking, search for standardized cases quickly.

The self-evolving security system 1236 may gradually become smarter and have better reasoning ability due to the learning effect as the number of hacker intrusions increases. By sharing the hacking case DB and sources, we promote smarter security processing through joint research with engineers around the world. Analyze the intrusion tendency of hackers, prepare countermeasures using AI technology and CBR technology, and promote optimal countermeasures.

FIG. 10 is a flowchart illustrating an operation method of the case information manager illustrated in FIG. 5 . Referring to FIG. 10 , assuming that hacking has occurred in step S110 , in step S120 , the AI system 1237 analyzes the hacking content and classifies the hacking pattern using deep learning technology. In step S130, the CBR system 1238 models the hacking case data, and searches for the hacking case similarity. In step S140, it is determined whether the case search is successful as a result of the hacking case similarity search result. If the hacking case search is successful, the hacking case is provided in step S150 and automatic actions are taken. If the hacking case search fails, in step S160, the CBR system 1238 stores the hacking case, to prepare for a similar case next time.

The present invention applies artificial intelligence technology and Case Based Reasoning (CBR) technology to further strengthen security processing such as prevention of leakage of personal information of customers. More specifically, in the case of the present invention by applying a hashing processing method, from the time of inputting and registering personal information to the time of outputting to the outside of the system, even if a hacker invades some data, the customer name cannot be identified. Therefore, according to the security policy of the present invention, it is thoroughly prevented from leaking the customer's main information to the outside.

In particular, security that can prevent leakage of personal information of bank customers as well as specific confidential information including personal medical information or information containing key technologies of the company is required. To this end, the present invention limits access to customer key information to a significant level. For example, the access may be through a similarity search using a case-based inference engine.

The security of the present invention basically applies a hash function of the block chain method. Furthermore, the security of the present invention prevents leakage of personal key information that may occur in the information registration process. To this end, an artificial intelligence-based case-based reasoning engine is used, and a hashing-processed blockchain technology is also applied to the connection of personal information properties. Therefore, from the initial customer information registration to the entire transaction process, the security of key customer information is thoroughly maintained.

According to the present invention, the customer basic information attributes (customer name, customer identification password, etc.) are hashed during initial registration and stored in different addresses. In addition, the encrypted customer name, which is the customer basic information, and the hashing-processed customer identification password are distorted and stored in the basic information DB. In addition, by applying blockchain technology to customer identification passwords and customer key information attributes, hashing processing is also connected. In addition, when searching for customer main information, the customer basic information case data is connected to customer main information only through the similarity case search of the BCS (Block Chain Case Search) security system.

In the end, even if a hacker invades the main information data, all connections are hashed and reverse search is not possible. In other words, since it is impossible to expose the customer name, the sensitive main information of the customer is not leaked to the outside.

The server of the security system according to an embodiment of the present invention includes a communication unit that receives encrypted information from a terminal, a control unit that outputs the encrypted information to a case-based reasoning engine in the server, and a storage unit that stores the encrypted information into a case database may include The security system of the present invention may include an artificial intelligence case-based reasoning engine. The encrypted information received from the control unit may be divided into basic information and main information. In particular, the identification password, which is one of the attribute information in the basic information, is separately hashed to enhance security.

Basic information attribute information is distorted using a random number, and encrypted main information is divided by attribute. In addition, one attribute in the main information is also subdivided if necessary. Basic information classification password attribute By utilizing the hashing processing result of the connection password, the main information content is stored in the connection password address location in the main information case base.

When working in the security system, the search target information is checked through the server's storage and then encrypted. After encryption input, from among the cases of basic information distorted from the case information DB, a similarity search can be made using case-based reasoning technology. Basic information cases are searched and selected through similarity search, and personal key information connected with hashing processing is decrypted for verification. Accordingly, necessary information is extracted and output from the system.

The output information is applied to the computer processing of the system. The customer identification password in the encrypted basic information stored in the DB in the server is hashed using different prime numbers. It may be stored in the storage unit by distorting the basic information properties again. Therefore, unlike the existing data security method only through encryption, in the present invention, main information can be extracted only through case search of encrypted and distorted basic information. Therefore, it is possible to fundamentally prevent hacking inside and outside the organization.

The present invention can be applied to a personal information security system necessary for financial systems and government institutions through distorted case data search. In addition, it can be applied to fintech security systems such as virtual currency applied to mobile banking in the financial sector. In addition, the present invention can be applied to personal information security systems such as major core technology information security systems and personal medical information in companies, etc.

The above are specific embodiments for carrying out the present invention. In addition to the above-described embodiments, the present invention will include simple design changes or easily changeable embodiments. In addition, the present invention will include techniques that can be easily modified and implemented using the embodiments. Therefore, the scope of the present invention should not be limited to the above-described embodiments, and should be defined by the claims and equivalents of the claims of the present invention as well as the claims to be described later.

Claims (2)

In the server of the security system that receives basic customer information and customer main information from a terminal,
Generates encrypted data using the customer basic information input from the terminal, generates a division password for the customer basic information, and generates an encrypted new division password by hashing the division password using a decimal number, and A basic information manager (basic information managing unit) for storing the encrypted data of the customer basic information and the encrypted new division password in the basic information DB; and
In the process of encrypting the basic customer information, a connection password for the customer primary information input from the terminal is generated using a decimal number used during hash processing of the customer basic information, and the main customer information encrypted through the connection password including a sensitive information managing unit that stores in the main information DB,
When a hacker tries to hack the main information DB, the main information manager processes the connection password in front of each attribute of the main information as a hash processing result number of the connection password behind the basic information classification password, and By processing the connection password after the division password as a hash function, and recording the processing result in front of the main information, so that the main information is linked from the basic information to the main information attribute, even if the main information is hacked, it is not connected to the basic information,
The customer basic information includes a customer ID and customer name,
The customer main information is a server of a security system including a password and resident number related to the customer's security. The method of claim 1,
A server of the security system that further includes a case information managing unit that analyzes hacking cases with big data and performs similarity searches and inferences for hacking cases.

Images