KR102489574B1 - Method, apparatus and computer program for generating and discriminating a pseudonym information file including a signature embedded in an information set for identifying a pseudonym information file - Google Patents

Abstract

An embodiment of the present invention provides a method performed by a computer device. Provided is a method for generating a pseudonymous information file includes: a process of obtaining an information set for personal information composed of fields and records; and a process of obtaining a pseudonymous information file including an information set for pseudonymous information having a pseudonymous information signature, based on the information set for personal information.

Description

Method, apparatus and computer program for generating and discriminating a pseudonym information file including a signature embedded in a pseudonym information file including a signature embedded in a pseudonym information file an information set for identifying a pseudonym information file}

The present invention relates to a method, apparatus, and computer program for generating and determining a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file.

Through the Personal Information Protection Act, one of the three data laws, the concept of pseudonymous information, which is an intermediate concept between personal information and anonymous information, was introduced. Personal information is information that can identify a specific information subject, and anonymous information is information that cannot identify a specific information subject.

Pseudonymized information is information that cannot identify a specific subject of information without using or combining additional information to restore it to its original state by processing it with a pseudonym.

Pseudonymized information is processed for certain purposes, such as statistical writing, scientific research, and preservation of public records, and the combination of such information is allowed, and it can be used without the consent of the data subject.

The pseudonymous information generated by using personal information should be destroyed when the purpose of use is fulfilled, and managed to limit the possession of unauthorized persons.

However, since the pseudonymous information removes the identity of the information subject, it is impossible to determine the pseudonymous information file existing on the PC using the conventional technique for discriminating personal information. This is because conventional techniques for determining personal information find a normalized form of personal information, but pseudonymous information does not have a normalized form.

Since it is technically impossible to track and manage pseudonymous information files, conventionally, the use of pseudonymous information files is allowed only in closed networks or virtual spaces, or only administrative protection measures are provided after receiving a pledge from the user, but still There was a problem that complete tracking management was difficult.

Republic of Korea Patent Registration No. 10-2318666 (Personal information de-identification method)

In order to solve the above problem, an embodiment of the present invention aims to track and manage a pseudonymous information file in which identification is removed and it is difficult to detect a conventional regular expression expression, and to create a pseudonymous information file that can be traced.

Embodiments of the present invention aim to quickly determine a pseudonymous information file on storage in a computing device that handles pseudonymous information.

An object of an embodiment of the present invention is to drastically reduce the determination time by checking whether a pseudonymous information file exists only by checking a binary even without checking text information of files stored in a storage.

Embodiments of the present invention are aimed at identifying and managing pseudonymous information files that are subject to destruction or possessed by non-imprinters.

An object of an embodiment of the present invention is to track and manage a pseudonymous information file stored on a storage using a management number of pseudonymous information.

In order to solve the above problems, one embodiment of the present invention is a method performed by a computing device, comprising: obtaining an information set about personal information composed of fields and records; and obtaining a pseudonymous information file including an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information, wherein the pseudonymous information signature corresponds to at least one identifier A first Unicode of and at least one second Unicode corresponding to the management number of the pseudonym information for the information set about the pseudonym information, wherein the at least one first Unicode and the at least one second Unicode 2 It is possible to provide a method for generating a pseudonymous information file, characterized in that the length of Unicode text is 0.

In one embodiment of the present invention, the pseudonymous information signature may be composed of the at least one second Unicode disposed between the two first Unicodes.

In one embodiment of the present invention, the pseudonymous information signature may be placed between field names of the fields in the pseudonymous information file.

An embodiment of the present invention may further include obtaining the pseudonymous information signature generated from the management number of the pseudonymous information based on Unicode mapping information, prior to the acquiring of the pseudonymous information file.

In one embodiment of the present invention, the Unicode mapping information may include information about a character code corresponding to the at least one second Unicode.

An embodiment of the present invention may further include storing signature mapping information between a management number of the pseudonymous information and the pseudonymous information signature in a storage or transmitting the signature mapping information to a management server through a communication interface.

One embodiment of the present invention, a processor; network interface; Memory; and a computer program loaded into the memory and executed by the processor, the computer program including instructions for obtaining an information set about personal information composed of fields and records; and instructions for obtaining a pseudonymous information file including an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information, wherein the pseudonymous information signature corresponds to at least one identifier. A first Unicode of and at least one second Unicode corresponding to the management number of the pseudonym information for the information set about the pseudonym information, wherein the at least one first Unicode and the at least one second Unicode 2 It is possible to provide an apparatus for generating a pseudonymous information file, characterized in that the length of Unicode text is 0.

One embodiment of the present invention is coupled with a computing device, obtaining an information set about personal information consisting of fields and records; and a process of obtaining a pseudonymous information file including an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information, stored in a computer-readable recording medium, wherein the The pseudonym information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonym information for the information set about the pseudonym information, and the at least one It is possible to provide a computer program for generating a pseudonymous information file, characterized in that the length of the text of the first Unicode and the at least one second Unicode is 0.

An embodiment of the present invention is a method performed by a computing device, comprising: loading files stored in storage into a memory; reading the files loaded into the memory in a binary format to check the pseudonymous information signature; and when the signature of the pseudonym information is confirmed, transmitting information about the pseudonymous information signature or information about the management number of the pseudonym information determined based on the Unicode mapping information to a management server. can provide.

In one embodiment of the present invention, the process of loading the files stored in the storage into the memory includes the process of loading bytes of a predetermined size of each of the stored files, providing a method for determining a pseudonymous information file there is.

In one embodiment of the present invention, the process of reading the files loaded into the memory in binary format and verifying the pseudonymous information signature may include reading bytes of a predetermined size from each binary of the loaded files to verify the pseudonymous information signature. It is possible to provide a method for determining a pseudonymous information file, including a process.

One embodiment of the present invention, a processor; network interface; Memory; and a computer program loaded into the memory and executed by the processor, the computer program including instructions for loading files (142) stored in storage into the memory; an instruction for reading the files loaded into the memory in a binary format and verifying the pseudonym information signature; and an instruction for transmitting information on the management number of the pseudonym information determined based on information on the signature of the pseudonymous information or Unicode mapping information to a management server when the signature of the pseudonymous information is confirmed. can provide.

One embodiment of the present invention, combined with the computing device, the process of loading the files stored in the storage to the memory; reading the files loaded into the memory in a binary format to check the pseudonymous information signature; and when the signature of the pseudonym information is confirmed, a computer-readable recording medium for executing a process of transmitting, to a management server, information about the management number of the pseudonym information determined based on the information on the signature of the pseudonymous information or the Unicode mapping information. It is possible to provide a computer program for determining the pseudonymous information file stored in .

Through the above solution, an embodiment of the present invention may have the following effects.

An embodiment of the present invention has an effect of tracking and managing a pseudonymous information file in which identification is removed and it is difficult to detect a conventional regular expression expression, and generating a pseudonymous information file that can be traced.

Embodiments of the present invention have an effect of quickly determining a pseudonymous information file on a storage in a computing device that handles pseudonymous information.

Embodiments of the present invention have an effect of dramatically reducing determination time by checking whether a pseudonymous information file exists only through binary verification, even if text information of files stored in a storage is not checked.

An embodiment of the present invention has an effect of identifying and managing a pseudonymous information file that is subject to destruction or possessed by a non-imprinter.

An embodiment of the present invention has an effect of tracking and managing a pseudonymous information file stored on a storage using a management number of pseudonymous information.

1 is a diagram showing a system for generating and discriminating a pseudonymous information file including a signature inserted into an information set for discriminating a pseudonymous information file according to an embodiment of the present invention.
2 is a hardware configuration diagram of an apparatus for generating and determining a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention.
3 is a flowchart of a method for generating a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention.
4 illustrates an information set about personal information according to an embodiment of the present invention.
5 illustrates an information set about pseudonymous information according to an embodiment of the present invention.
6 illustrates a pseudonymous information signature according to an embodiment of the present invention.
7 illustrates Unicode mapping information according to an embodiment of the present invention.
8 illustrates management number information of pseudonym information according to an embodiment of the present invention.
9(a) shows the pseudonymous information file without the pseudonymous information signature inserted in hexacode, FIG. 9(b) shows the pseudonymous information file with the pseudonymous information signature inserted in hexacode, and FIG. 9(c) represents the text of the pseudonymous information file in which the pseudonymous information signature is not inserted, and FIG. 9(d) shows the text of the pseudonymous information file in which the pseudonymous information signature is inserted.
10 is a flowchart of a method for determining a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention.

Since the embodiments of the present invention can be applied with various changes, the embodiments are illustrated in the drawings and described in detail herein. However, this is not intended to limit the embodiments of the present invention to specific forms, and includes all modifications, equivalents, or substitutes included in the spirit and scope of the present invention.

Terminology used herein is for describing the embodiments and is not intended to limit the present invention. In this specification, singular forms also include plural forms unless specifically stated otherwise in a phrase. As used herein, "comprises" and/or "comprising" does not exclude the presence or addition of one or more other elements other than the recited elements. Like reference numerals throughout the specification refer to like elements, and “and/or” includes each and every combination of one or more of the recited elements. Although "first", "second", etc. are used to describe various components, these components are not limited by these terms, of course. These terms are only used to distinguish one component from another. Accordingly, it goes without saying that the first element mentioned below may also be the second element within the technical spirit of the present invention.

Unless otherwise defined, all terms (including technical and scientific terms) used in this specification may be used with meanings commonly understood by those skilled in the art to which the present invention belongs. Alternatively, terms defined in commonly used dictionaries are not interpreted ideally or excessively unless explicitly specifically defined.

The term "unit" or "module" used in the specification means a hardware component such as software, FPGA or ASIC, and "unit" or "module" performs certain roles. However, "unit" or "module" is not meant to be limited to software or hardware. A "unit" or "module" may be configured to reside in an addressable storage medium and may be configured to reproduce one or more processors. Thus, as an example, a “unit” or “module” may refer to components such as software components, object-oriented software components, class components, and task components, processes, functions, properties, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuitry, data, databases, data structures, tables, arrays and variables. Functions provided within components and "units" or "modules" may be combined into fewer components and "units" or "modules" or may be combined into additional components and "units" or "modules". can be further separated.

The spatially relative terms "below", "beneath", "lower", "above", "upper", etc. It can be used to easily describe a component's correlation with other components. Spatially relative terms should be understood as including different orientations of elements in use or operation in addition to the orientations shown in the drawings. For example, if you flip a component that is shown in a drawing, a component described as "below" or "beneath" another component will be placed "above" the other component. can Thus, the exemplary term “below” may include directions of both below and above. Components may also be oriented in other orientations, and thus spatially relative terms may be interpreted according to orientation.

Hereinafter, a method for generating and determining a pseudonymous information file including a signature inserted in an information set for determining a pseudonymous information file according to an embodiment of the present invention, an apparatus and a computer program will be described in detail with reference to the accompanying drawings. .

1 is a diagram showing a system for generating and discriminating a pseudonymous information file including a signature inserted into an information set for discriminating a pseudonymous information file according to an embodiment of the present invention.

Referring to FIG. 1, the system for generating and determining a pseudonymous information file according to an embodiment of the present invention includes at least one of a pseudonymous information file generating device 100 and a pseudonymous information file determining device 200, a management server ( 300), and may further include a manager terminal 500.

The system of FIG. 1 is according to an embodiment, and components thereof are not limited to the embodiment shown in FIG. 1 and may be added, changed, or deleted as necessary.

In one embodiment, the pseudonymous information file generating device 100 is the first computing device 100 that generates the pseudonymous information file. The pseudonymous information file generation device 100 may be communicatively connected to the management server 300 through the network 400 .

Alternatively, the pseudonymous information file generation device 100 generates an information set about personal information, an information set about pseudonymous information, a management number of pseudonym information, Unicode mapping information, and pseudonymous information signature from the management server 300 At least one of them may be received.

Alternatively, the device 100 for generating a pseudonymous information file may generate an information set about pseudonymous information by standardizing an information set about personal information to a certain extent and then subjecting it to pseudonymization. It is possible to create a pseudonymous information file that can be traced and managed.

Alternatively, the pseudonymous information file generation device 100 may generate a management number of pseudonymous information based on an information set related to personal information or an information set related to pseudonymous information. The device 100 for generating a pseudonym information file may convert a management number of pseudonym information into a pseudonym information signature using Unicode mapping information. The pseudonymous information file generating device 100 may generate a pseudonymous information file by inserting a pseudonymous information signature into an information set related to pseudonymous information.

Alternatively, the pseudonymous information file generation device 100 transmits at least one of an information set about pseudonymous information, a pseudonymous information file, a management number of pseudonymous information, and signature mapping information of a pseudonymous information signature to the management server 300. can

In one embodiment, the device 200 for determining the pseudonymous information file is the second computing device 200 for determining the pseudonymous information file. The second computing device 200 may be a handler's electronic device that handles pseudonymous information or an electronic device connected to the handler's electronic device, but is not limited thereto. The device 200 for determining the alias information file may be communicatively connected to the management server 300 through the network 400 .

Alternatively, the apparatus 200 for determining the pseudonymous information file may quickly determine the pseudonymous information file by reading the files 142 stored in the storage 140 in a binary format rather than a text format.

Alternatively, the device 200 for determining the pseudonymous information file may be the computing device 200 of the handler who handles the pseudonymous information or the second computing device 200 connected to the computing device of the handler, but is not limited thereto.

Alternatively, the apparatus 200 for determining the pseudonym information file may receive at least one of Unicode mapping information and signature mapping information from the management server 300 .

Alternatively, the apparatus 200 for determining the pseudonym information file may determine the pseudonymous information file, some data of the information set about the pseudonym information included in the pseudonym information file, the pseudonym information signature included in the pseudonym information file, and the pseudonym information signature At least one of the management numbers of the corresponding pseudonym information may be transmitted to the management server 300 .

In one embodiment, the management server 300 may be communicatively connected to the device 100 for generating the pseudonymous information file through the network 400, and collect information about the pseudonymous information from the device 100 for generating the pseudonymous information file. At least one of the data, the pseudonymous information file, the management number of the pseudonymous information, and signature mapping information of the signature of the pseudonymous information may be received and stored.

Alternatively, the management server 300 may be communicatively connected to the device 200 for determining the pseudonymous information file through the network 400, and the pseudonymous information file and the pseudonymous information file determined from the device 200 for determining the pseudonymous information file At least one of partial data of the information set about the pseudonymous information included in, a pseudonymous information signature included in the pseudonymous information file, and a management number of the pseudonymous information corresponding to the pseudonymous information signature may be received and stored.

Alternatively, the management server 300 may be communicatively connected to the manager terminal 500 . The management server 300 manages the received pseudonymous information file, some data of the information set about the pseudonymous information included in the pseudonymous information file, the pseudonymous information signature included in the pseudonymous information file, and the pseudonymous information corresponding to the pseudonymous information signature Based on at least one of the numbers, it is determined whether the first pseudonymous information file stored in the device 200 for determining the pseudonymous information file is the target of management being managed by the management server 300, and the first pseudonymous information file is the target of management In this case, it is possible to transmit a result of determination on legal compliance to the administrator terminal 500 .

Hereinafter, with reference to FIG. 2, the hardware configuration of the pseudonymous information file generation device 100 or the pseudonymous information file determining device 200 will be described.

2 is a hardware configuration diagram of an apparatus for generating and determining a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention.

Referring to FIG. 2 , an apparatus 100 for generating a pseudonymous information file according to an embodiment of the present invention (hereinafter referred to as “first computing device 100”) is configured by one or more processors 110 and the processor 110. It may include a memory 120 for loading a computer program 141 or file 142 to be executed, a communication interface 130, and a storage 140 for storing the computer program 141 or file 142. can

Here, FIG. 2 shows components related to an embodiment of the present invention. Therefore, those skilled in the art to which the present invention pertains can know that other general-purpose components may be further included in addition to the components shown in FIG. 2 .

In various embodiments, the first computing device 100 refers to all types of hardware devices including at least one processor 110, and also includes software configurations operating in the hardware device according to embodiments. can be understood as For example, the first computing device 100 may be understood as including a smart phone, a tablet PC, a desktop computer, a laptop computer, and user clients and applications running on each device, or is not limited thereto. Although each process described in this specification is described as being performed by the first computing device 100, the subject of each process is not limited thereto, and at least a part of each process may be performed in a different device according to an embodiment. may be

The processor 110 controls the overall operation of each component of the first computing device 100 . The processor 110 includes a Central Processing Unit (CPU), a Micro Processor Unit (MPU), a Micro Controller Unit (MCU), a Graphic Processing Unit (GPU), or any type of processor well known in the art of the present invention. It can be.

Alternatively, the processor 110 may perform an operation for at least one application or program for executing a method according to embodiments of the present invention, and the first computing device 100 may include one or more processors. there is.

Alternatively, the processor 110 may temporarily and/or permanently store signals (or data) processed in the processor 110 (RAM: Random Access Memory, not shown) and ROM (ROM: Read-Only Memory) , not shown) may be further included. Alternatively, the processor 110 may be implemented in the form of a system on chip (SoC) including at least one of a graphic processing unit, RAM, and ROM.

Memory 120 stores various data, commands and/or information. The memory 120 may load a computer program 141 or a file 142 from the storage 140 to execute methods/operations according to various embodiments of the present invention. When the computer program 141 is loaded into the memory 120, the processor 110 may perform the method/operation by executing one or more instructions constituting the computer program 141. When the file 142 is loaded into the memory 120, the processor 110 can read the binary of the file 142 and the text of the file 142 through the computer program 141 that can execute the file 142. can provide. The memory 120 may be implemented as a volatile memory such as RAM, but the technical scope of the present disclosure is not limited thereto.

The bus BUS provides a communication function between components of the first computing device 100 . The bus BUS may be implemented in various forms such as an address bus, a data bus, and a control bus.

The communication interface 130 supports wired and wireless Internet communication of the first computing device 100 . Alternatively, the communication interface 130 may support various communication methods other than internet communication. For example, the communication interface 130 may support at least one of short-distance communication, mobile communication, and broadcast communication. To this end, the communication interface 130 may include a communication module well known in the art. In some embodiments, communication interface 130 may be omitted.

The storage 140 may non-temporarily store the computer program 141 or the file 142. The storage 140 may be a non-volatile memory such as read only memory (ROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, or the like, a hard disk, a removable disk, or a device well known in the art. It may be configured to include any known type of computer-readable recording medium.

Computer program 141 may include one or more instructions that when loaded into memory 120 cause processor 110 to perform methods/operations in accordance with various embodiments of the invention. That is, the processor 110 may perform the method/operation according to various embodiments of the present disclosure by executing the one or more instructions.

In one embodiment, the computer program 141 provides instructions for obtaining a dataset about personal information consisting of fields and records, and based on the dataset about personal information, pseudonymous information having a pseudonymous signature. It may include instructions for acquiring a pseudonymous information file including an information set about.

Processes of a method or algorithm described in connection with an embodiment of the present invention may be directly implemented in hardware, implemented in a software module executed by hardware, or implemented by a combination thereof. A software module may include random access memory (RAM), read only memory (ROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, hard disk, removable disk, CD-ROM, or It may reside in any form of computer readable recording medium well known in the art to which the present invention pertains.

In one embodiment, the computer program 141 is coupled with the first computing device 100 to obtain an information set about personal information consisting of fields and records; and pseudonymous information, stored in a computer-readable recording medium, for executing a process of acquiring a pseudonymous information file including an information aggregation about pseudonymous information having a pseudonymous information signature, based on the information aggregation about personal information. The creation of the file can be a computer program.

Components of the present invention may be implemented as a program (or application) to be executed in combination with a computer, which is hardware, and stored in a medium. Components of the present invention may be implemented as software programming or software elements, and similarly, embodiments may include various algorithms implemented as data structures, processes, routines, or combinations of other programming constructs, such as C, C++ , Java (Java), can be implemented in a programming or scripting language such as assembler (assembler). Functional aspects may be implemented in an algorithm running on one or more processors.

An apparatus 200 for determining a pseudonymous information file according to an embodiment of the present invention (hereinafter referred to as “second computing device 200”) One or more processors 210, and a computer program 241 executed by the processor 210 Alternatively, the memory 220 for loading the file 242, the communication interface 230, and the storage 240 for storing the computer program 241 or the file 242 may be included.

In one embodiment, processor 210, memory 220, communication interface 230, and storage 240 refer to descriptions of processor 110, memory 120, communication interface 130, and storage 140. Since it can be applied as it is, redundant description will be omitted.

In one embodiment, computer program 241 includes instructions for loading files 142 stored in storage into memory; an instruction for reading the files 142 loaded into the memory in a binary format and confirming the pseudonymous information signature; and an instruction for transmitting information on the pseudonymous information signature or information on a management number of the pseudonym information determined based on Unicode mapping information to a management server when the pseudonymous information signature is confirmed.

In one embodiment, the computer program 241 is combined with the second computing device 200, the process of loading the files 142 stored in the storage into the memory; reading the files 142 loaded into the memory in a binary format to verify the pseudonymous information signature; and when the signature of the pseudonym information is confirmed, a computer-readable recording medium for executing a process of transmitting, to a management server, information about the management number of the pseudonym information determined based on the information on the signature of the pseudonymous information or the Unicode mapping information. It may be a computer program for determining pseudonymous information files stored in .

Hereinafter, with reference to FIGS. 3 to 9 , a method of generating a pseudonymous information file performed by the first computing device 100 will be described.

3 is a flowchart of a method for generating a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention. 4 illustrates an information set about personal information according to an embodiment of the present invention. 5 illustrates an information set about pseudonymous information according to an embodiment of the present invention. 6 illustrates a pseudonymous information signature according to an embodiment of the present invention. 7 illustrates Unicode mapping information according to an embodiment of the present invention. 8 illustrates management number information of pseudonym information according to an embodiment of the present invention. 9(a) shows the pseudonymous information file without the pseudonymous information signature inserted in hexacode, FIG. 9(b) shows the pseudonymous information file with the pseudonymous information signature inserted in hexacode, and FIG. 9(c) represents the text of the pseudonymous information file in which the pseudonymous information signature is not inserted, and FIG. 9(d) shows the text of the pseudonymous information file in which the pseudonymous information signature is inserted.

Referring to FIG. 3 , in a process S100, the first computing device 100 may acquire an information set about personal information composed of fields and records.

Here, the first computing device 100 may obtain an information set about personal information from the management server 300 through the storage 140 or the communication interface 130 .

Referring to FIG. 4, an information set on personal information means a set of data on information subjects. An information set refers to a set of data that is systematically arranged or organized according to certain rules so that data can be easily retrieved. Data-set is also called data set or data set.

An information set may mean the contents of a database table or a statistical data matrix. An information set is represented by fields and records. Fields (C1, C2, ?) are referred to as columns displayed in the vertical direction in data, and display individual attribute values for records displayed horizontally. A field name is a name representing a field, and means, for example, name, date of birth, gender, workplace, income, etc.', and a field type can have any one of a plurality of types, such as a category type and a data type. A record (R1, R2, ?) refers to a set of data treated as a unit in data, and is referred to as a row displayed horizontally in data. The number of information sets may match the number of records other than the first record corresponding to the field name.

In step S130 , the first computing device 100 may obtain a pseudonymous information file including an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information.

In an embodiment, the first computing device 100 may generate an information set on pseudonymous information using an information set on personal information, and create a pseudonymous information file using the information set on pseudonymous information. . In this case, the first computing device 100 may include the pseudonymous information signature in the information set about the generated pseudonymous information.

The process of inserting the pseudonymous information signature into the information set of pseudonymous information is performed simultaneously with generating the information set of pseudonymous information, or the pseudonymous information is added to the information set of pseudonymous information after obtaining the information set of pseudonymous information. This can be done by inserting an information signature.

Referring to FIG. 5 , the information set for pseudonymous information has pseudonym information composed of fields and records like the information set for personal information. However, the information set for pseudonymous information is the data that has been pseudonymized so that the information that can identify the information subject is removed from the information set for personal information.

In one embodiment, the pseudonymous information signature may be composed of a combination of a plurality of Unicodes in which the text length is zero. When the pseudonymous information signature is decoded into text, the information set about the pseudonymous information in the data may not be changed because the length of the text is zero.

Referring to FIG. 6, the pseudonymous information signature may include at least one first Unicode (UN1) corresponding to the separator, and furthermore, at least one corresponding to the management number of the pseudonymous information for the information set about the pseudonymous information may further include a second Unicode (UN2) of

Here, the first Unicode (UN1) may be placed at least one of the beginning and end of the pseudonymous information signature. The first Unicode (UN1) may include at least one of 1-1 Unicode (UN1-1) located at the beginning of the pseudonymous information signature and 1-2 Unicode (UN1-2) located at the end. can

In addition, the 1-1 Unicode (UN1-1) and the 1-2 Unicode (UN1-2) may be set identically or differently. Here, the 1-1 Unicode (UN1-1) serves as a separator to determine whether the file is a pseudonymous information file, and the 1-2 Unicode (UN1-2) is the pseudonymous information signature of the pseudonymous information file. plays a role in distinguishing it from other data.

In addition, at least one second Unicode (UN2) may be disposed after the first Unicode (UN1) or between two first Unicode (UN1). At least one second Unicode (UN2) is a set of one or more Unicodes, and may include information corresponding to a management number of pseudonym information for an information set about pseudonym information.

That is, the second Unicode (UN2) is a part corresponding to the management number of the pseudonym information in the pseudonym information signature, and the management number of the pseudonym information is a number assigned to the information set about the household information on a one-to-one basis, and identifies the pseudonym information play a role you can

Referring back to FIG. 3 , in step S120 , the first computing device 100 may obtain a pseudonymous information signature.

Here, the first computing device 100 may itself generate the pseudonymous information signature from the management number of the pseudonymous information based on the Unicode mapping information in order to obtain the pseudonymous information signature. The first computing device 100 may perform step S120 before step S130 or after step S130 of generating an information set about pseudonymous information.

In another embodiment, the first computing device 100 may acquire the pseudonymous information signature stored in the storage 140 or receive the pseudonymous information signature from the management server 300 through the communication interface 130 .

Referring to FIG. 7 , the Unicode mapping information may include information about a character code corresponding to at least one first Unicode UN1 or at least one second Unicode UN2. Alternatively, the Unicode mapping information may include information indicating that at least one first Unicode UN1 is mapped as a delimiter. Alternatively, the Unicode mapping information may include information that each of the at least one second Unicode UN2 is mapped to a character such as a letter or a number. For example, it may be mapped so that the numbers 0 to 9 are assigned to each of at least one second Unicode (UN2).

In one embodiment, the first computing device 100 may obtain Unicode mapping information from the storage 140 or from the management server 300 through the communication interface 130 .

Here, the management number of the pseudonym information is a one-to-one correspondence number to identify the information set about the pseudonym information, and is a combination of characters such as letters or numbers. 8, the management number of pseudonym information for 'loan credit information' is '2022052716...'. 36', the first 8 digits may mean 'year, month and day', and the remaining numbers may mean unique numbers assigned to the information set about the pseudonymous information.

The management number of the pseudonymous information is generated in a one-to-one correspondence with the information set about the pseudonymous information. The management number of the pseudonymous information may be randomly generated by the manager or generated by the first computing device 100 or the management server 300 on a predetermined basis based on data included in the information set about the pseudonymous information. The first computing device 100 may generate a management number of pseudonymous information after generating an information set related to pseudonymous information.

In one embodiment, the first computing device 100 may generate a management number of pseudonymous information on its own using an information set of personal information or an information set of pseudonymous information. In another embodiment, the first computing device 100 acquires the management number of the pseudonymous information corresponding to the information set about the pseudonymous information from the storage 140, or the management server 300 through the communication interface 130 ) can be obtained from

Referring back to FIG. 3 , in step S140, the first computing device 100 may store mapping information of pseudonym information in the storage 140 or transmit the mapping information to the management server 300 through the communication interface 130. . Here, the mapping information of pseudonymous information refers to information obtained by mapping between a management number of pseudonymous information and a signature of pseudonymous information.

The first computing device 100 transmits the mapping information of the pseudonymous information to the management server 300, so that the pseudonymous information received when the management server 300 receives the pseudonymous information signature from the external second computing device 200 By checking whether the signature is included in the mapping information of the pseudonym information, it is possible to find the management number of the pseudonym information corresponding to the pseudonym information signature and confirm the pseudonym information corresponding to the management number of the pseudonym information.

Furthermore, the first computing device 100 may transmit at least one of an information set about pseudonymous information, a pseudonymous information file, a management number of pseudonymous information, and signature mapping information of a pseudonymous information signature to the management server 300 .

Meanwhile, the pseudonymous information signature may be placed between field names of fields in the pseudonymous information file. Alternatively, the pseudonymous information signature may be placed between the field names of fields within the information set about the pseudonymous information. Alternatively, the pseudonymous information signature may be inserted so as to be disposed after any one of the first to last field names among the field names of the fields. Alternatively, the pseudonymous information signature may be divided into a plurality of Unicodes and placed after each field name among field names of fields.

Alternatively, the information set of pseudonymous information is composed of data of the first record corresponding to the field name and data of the remaining records corresponding to the value of the field. In this case, the first record of the collection of pseudonymous information is placed before the rest of the records in the binary. The pseudonymous information signature may be inserted on the first record where the field names are located within the information set about the pseudonymous information of the pseudonymous information file.

The reason for placing the pseudonymous information signature between the field names in the information set about pseudonymous information is that the attributes of all fields of the first record in which the field name is located in the information set about pseudonymous information are in text format, even if the pseudonymous information signature is inserted. The text attribute corresponding to the field name is not changed to other attributes. However, some or all of the fields (columns, columns) of the remaining records other than the first record may have text format or numerical format. The attribute of (column, column) is changed from a numerical format to a text format, which may cause a problem in that the information of the information set about pseudonymous information is changed.

9(a) and 9(b), a pseudonymous information file (F1, see FIG. 9(a)) including an information set about pseudonymous information without a pseudonymous information signature, and a pseudonymous information signature When the binary of the pseudonymous information file (F2, see FIG. 9(b)) including the information set about the pseudonymous information having the pseudonymous information is compared in hex code, the red box corresponding to the field names corresponds to the pseudonymous information signature You can see that the blue box is inserted.

Nonetheless, referring to FIGS. 9(c) and 9(d) , when viewing the F1 and F2 files in text format, the same text information is shown without being changed. Because the pseudonymous information signature has a text length of 0, text information is not changed. That is, since the file (F1) and the file (F2) before and after inserting the pseudonymous information signature have the same text, it is possible to prevent problems such as data type conversion when generating data for scientific research or statistical analysis.

Therefore, the apparatus 100 for generating a pseudonymous information file according to an embodiment of the present invention uses Unicode, which does not affect data in an information set of pseudonymous information (change of digits, etc.), as a pseudonymous information signature, in the part where the field name is located. You can create a pseudonymous information file by inserting it.

Hereinafter, referring to FIG. 10 , a method of determining a pseudonym information file performed by the second computing device 200 will be described.

10 is a flowchart of a method for determining a pseudonymous information file including a signature inserted into an information set for determining a pseudonymous information file according to an embodiment of the present invention.

Referring to FIG. 10 , the second computing device 200 may determine whether a pseudonymous information file exists among files 242 stored in the storage 240 . Through this, it is possible to track and manage the distribution of pseudonymous information that has not been authorized.

In step S210 , the second computing device 200 may load the files 242 stored in the storage 240 into the memory 220 .

Here, the second computing device 200 may load the entirety of each of the files 242 into the memory 220, or load bytes of a preset size of each of the files 242 into the memory 220. can do. In order to reduce the impact on the performance of the second computing device 200 due to IO generated when the second computing device 200 accesses various files, the second computing device 200 stores only a portion of the files in the memory 220 ), it is possible to save time reading the storage 240.

Here, the second computing device 200 may load only text files into the memory 220 among the files 242 stored in the storage 240 . The file to be found in the storage 240 is a pseudonymous information file, and since the format of the pseudonymous information file is a test file, there is no need to load other types of files into the memory 200.

In step S220, the second computing device 200 may read the files 242 loaded in the memory 220 in a binary format to check the pseudonymous information signature. Here, the second computing device 200 checks only the binary of the file rather than the text information of the file to determine whether the file loaded into the memory 220 is related to pseudonymous information, so that the text information is read. You can save time.

That is, the second computing device 200 may determine whether or not it is a pseudonymous information file by checking the pseudonymous information signature inserted into the binary of the file without checking the text by opening the file.

The second computing device 200 may check whether the corresponding file is related to the pseudonymous information by checking whether or not the pseudonymous information signature is present in the binary of the file. In detail, the second computing device 200 may determine whether the file loaded into the memory 220 is the pseudonymous information file by checking the first Unicode UN1 included in the pseudonymous information signature.

Here, the pseudonymous information signature may include at least one first Unicode (UN1) corresponding to the separator, and furthermore, at least one second Unicode corresponding to the management number of the pseudonymous information for the information set about the pseudonymous information A code UN2 may be further included. Descriptions of the pseudonymous information signature, the first Unicode (UN1), and the second Unicode (UN2) are omitted because they overlap with those described above.

Meanwhile, the second computing device 200 may obtain the management number of the pseudonym information of the pseudonym information file loaded in the memory 220 by checking at least one second Unicode (UN2) included in the pseudonym information signature. there is. In detail, the second computing device 200 may obtain a management number of pseudonym information based on Unicode mapping information of at least one second Unicode UN2.

In one embodiment, the second computing device 200 may store Unicode mapping information in the storage 140 or receive it from the management server 300 through the communication interface 230 . Meanwhile, the second computing device 200 may receive at least one of Unicode mapping information and signature mapping information from the management server 300 before step S220. Descriptions of Unicode mapping information and signature mapping information are omitted because they are redundant with the above description.

On the other hand, when the second computing device 200 reads the files 242 loaded into the memory in a binary format and checks the pseudonymous information signature, the binary corresponding to the bytes of the preset size of each of the loaded files 242 is read. You can verify the pseudonymous information signature by reading it.

Since the pseudonymous information signature is inserted between the field names of the pseudonymous information file, the presence or absence of the pseudonymous information signature can be determined by checking only the bytes of the preset size in the binary of the pseudonymous information file where the first record corresponding to the field names is located. there is.

In step S230, if the pseudonymous information signature is not verified in the files loaded into the memory 220, the second computing device 200 performs the process of verifying the pseudonymous information signature in the next file to all the files loaded into the memory 220. s 242 can be performed iteratively.

In step S240, when the pseudonymous information signature is confirmed in the file, the second computing device 200 may transmit information about the pseudonymous information signature to the management server 300 through the communication interface 230. Alternatively, when the pseudonymous information signature is confirmed in the file, the second computing device 200 may transmit information corresponding to the management number of the pseudonymous information determined from the pseudonymous information signature to the management server 300 based on the Unicode mapping information. .

Alternatively, the second computing device 200 sends the management server 300 the determined pseudonymous information file, some data of the information set about the pseudonymous information included in the pseudonymous information file, the pseudonymous information signature included in the pseudonymous information file, and the pseudonym At least one of a management number of alias information corresponding to the information signature and information identifying the second computing device 200 may be transmitted.

Referring back to FIG. 1 , the management server 300 may obtain a management number of the pseudonym information using Unicode mapping information when receiving information on the pseudonym information signature from the second computing device 200 . Alternatively, the management server 300 may receive a management number of pseudonym information from the second computing device 200 .

Here, the management server 300 may check management information on the pseudonym information file stored in the second computing device 200 based on the management number of the pseudonym information, and determine whether management is violated. For example, the management information includes information such as a handler for the pseudonymous information file, an authentication terminal, a handling period, and the like. Management violation can be determined whether the handler of the pseudonymous information file is correct, whether the second computing device 200 is an authenticated terminal, and whether the handling period of the pseudonymous information file has not been exceeded.

Here, when the management server 300 acquires the management number of the pseudonym information, the management server 300 may transmit information about the management number of the pseudonym information or information on whether management is violated to the manager terminal 500 . In this case, the manager of the manager terminal 500 receiving the information on the management number of the pseudonymous information or the information on whether the management is violated can take appropriate measures according to whether the management of the pseudonymous information file is violated.

The above-mentioned method of generating and discriminating the pseudonym information file has been described with reference to the flowchart shown in the drawing. For a brief description, the method for generating and discriminating the pseudonymous information file has been illustrated and described as a series of blocks, but the present invention is not limited to the order of the blocks, and some blocks are performed in a different order from that shown and performed in this specification. or can be performed concurrently. Alternatively, new blocks not described in the present specification and drawings may be added, or some blocks may be deleted or changed.

Although the present invention has been described with reference to the embodiments shown in the drawings, this is only exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the attached claims.

100: first computing device
200: second computing device
300: management server
400: Network
500: administrator terminal

Claims (11)

A method for generating a pseudonymous information file performed by a computing device,
obtaining an information set about personal information composed of fields and records; and
obtaining a pseudonymous information file including an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information;
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0,
How to create pseudonymous information file. According to claim 1,
The pseudonymous information signature is composed of the at least one second Unicode disposed between the two first Unicodes,
How to create pseudonymous information file. According to claim 1,
The pseudonymous information signature is placed between the field names of the fields in the pseudonymous information file.
How to create pseudonymous information file. According to claim 1,
Prior to the process of obtaining the pseudonym information file, further comprising a process of obtaining the pseudonym information signature generated from the management number of the pseudonym information based on Unicode mapping information;
The Unicode mapping information includes information about a character code corresponding to the at least one second Unicode,
Storing the signature mapping information between the management number of the pseudonymous information and the signature of the pseudonymous information in a storage or transmitting it to a management server through a communication interface,
How to create pseudonymous information file. processor;
network interface;
Memory; and
A computer program loaded into the memory and executed by the processor,
The computer program,
instructions for obtaining an information set about personal information consisting of fields and records; and
Based on the information set about the personal information, obtaining a pseudonymous information file including an information set about the pseudonymous information having a pseudonymous information signature.
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0,
A device for creating pseudonymous information files. Combined with a computing device,
obtaining an information set about personal information composed of fields and records; and
Stored in a computer-readable recording medium to execute a process of obtaining a pseudonymous information file containing an information set about pseudonymous information having a pseudonymous information signature, based on the information set about personal information,
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0,
A computer program that creates a pseudonymous information file. A method for determining a pseudonymous information file performed by a computing device,
loading files stored in storage into memory;
reading the files loaded into the memory in a binary format to check the pseudonymous information signature; and
When the signature of the pseudonym information is confirmed, transmitting information about the pseudonymous information signature or information about the management number of the pseudonym information determined based on Unicode mapping information to a management server,
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0,
How to determine pseudonymous information file. According to claim 7,
The process of loading the files stored in the storage into the memory,
Including the process of loading bytes of a preset size of each of the stored files,
How to determine pseudonymous information file. According to claim 7,
The process of reading the files loaded into the memory in binary format and verifying the pseudonymous information signature,
Including the process of reading a preset size of bytes from each binary of the loaded files and verifying the pseudonymous information signature,
How to determine pseudonymous information file. processor;
network interface;
Memory; and
A computer program loaded into the memory and executed by the processor,
The computer program,
an instruction to load files stored in storage into memory;
an instruction for reading the files loaded into the memory in a binary format and verifying the pseudonym information signature; and
When the signature of the pseudonym information is confirmed, an instruction for transmitting information about the pseudonymous information signature or information about a management number of the pseudonym information determined based on Unicode mapping information to a management server,
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0,
Discrimination device of pseudonymous information file. Combined with a computing device,
loading files stored in storage into memory;
reading the files loaded into the memory in a binary format to check the pseudonymous information signature; and
When the signature of the pseudonym information is confirmed, executing a process of transmitting information about the pseudonym information signature or information about the management number of the pseudonym information determined based on Unicode mapping information to the management server;
The pseudonymous information signature includes at least one first Unicode corresponding to a separator and at least one second Unicode corresponding to a management number of the pseudonymous information for the information set about the pseudonymous information,
Characterized in that the length of the text of the at least one first Unicode and the at least one second Unicode is 0, stored on a computer-readable recording medium,
A computer program for determining pseudonymous information files.

Images