KR102502903B1 - System and method for preventing people from doing Personal information leakage by using encryption/decryption technologies - Google Patents

Abstract

The present invention relates to a system and method for preventing personal information leakage using encryption and decryption technology. The system for preventing personal information leakage, according to the present invention, comprises: a plate-shaped member made of metal material; an adhesion member; an object image recognition medium; and a personal information management server. According to the present invention, privacy related damage can be prevented.

Description

System and method for preventing people from doing personal information leakage by using encryption/decryption technologies}

The present invention relates to a personal information protection system and method using encryption/decryption technology, and more particularly, to prevent personal information leakage damage, bidirectional encryption/decryption algorithm (symmetric key, asymmetric key algorithm) to prevent visual identification. 2D code (PDF417, Maxi Code, Aztec Code, Data Matrix, or QR code) shape and pattern printed on a metal plate member with personal information encrypted using image recognition medium (CMOS image sensor) Or recognize video and image through a device including a CCD camera and a camera module (smartphone camera, digital camera, or IoT device equipped with a camera module), and use camera image recognition, image processing, and encryption/decryption algorithms to A system and method for preventing leakage of personal information using an encryption/decryption technology in which personal information is decrypted and the decrypted personal information is recognized.

Encryption/decryption algorithms are composed of a two-way method with confidentiality in which information is disclosed to authorized persons for information security and a one-way method with integrity in which data accuracy, consistency, and validity are maintained.

In the case of two-way encryption, it is classified into a symmetric key and an asymmetric key. A symmetric key (private key) has the same encryption key and a decryption key, and an asymmetric key (public key) has an encryption key and a decryption key. different. Symmetric key algorithms are used for data encryption, and asymmetric keys are used for exchanging symmetric keys. Asymmetric key algorithms (public key algorithms) are used to exchange session keys or to digitally sign messages or documents.

1 is a diagram explaining a symmetric key/asymmetric key encryption/decryption algorithm.

2 is a system for encrypting/decrypting an original text using a symmetric key method.

Symmetric Key Algorithm is a secret key algorithm in which the encryption key and decryption key are the same, DES (Data Encryption Standard), AES (Advanced Encryption Standard), IDEA (International Data Encryption Algorithm), Blowfish There are Rivest Cipher 4 (RC4), Rivest Cipher 5 (RC5), Rivest Cipher 6 (RC6), and ARIA and SEED developed in Korea. Symmetric key algorithms are classified into a block cipher method that divides a message into a certain size and encrypts each divided part equally, and a stream cipher method that encrypts one bit at a time in bit units. do. DES, AES, IDEA, Blowfish, RC5, RC6, ARIA, and SEED are block cipher algorithms, and RC4 is a stream cipher algorithm.

The DES algorithm has a Peistel structure with a block size of 64 bits and a key length of 56 bits, and is a 1975 National Institute of Standards and Technology (NIST) encryption algorithm.

AES was developed to improve the performance of DES, and has a block size of 128 bits and is classified into 128, 192, and 256 bits according to the key length, and is a 2001 National Institute of Standards and Technology (NIST) encryption algorithm.

The 3DES algorithm is 3DES with 3 keys, and DES with 3 identical keys.

Symmetric key algorithms are used in payment applications, such as card transactions, where personally identifiable information must be protected, and validation to verify that the sender of a message is himself.

Block cipher structures include a Feistel structure and a Substitution-Permutation Network (SPN) structure.

- Feistel structure: Encryption and decryption processes are the same. In addition, the plaintext is divided into left and right parts and reversed, and a process such as XOR is performed.

- SPN (Substitution-Permutation Network) structure: Parallel operation is executed using substitution and permutation. The SPN structure is capable of parallel operation and has a higher calculation speed than the Feistel structure, but requires a separate implementation of a decoding routine during decoding.

A stream cipher is an encryption algorithm that sequentially processes a stream, which is a data flow, bit by bit, and was developed for the purpose of practically implementing a One Time Pad. Unlike block ciphers that are encrypted and decrypted in units of one-time blocks, ciphertext is generated by an exclusive OR (XOR) operation of a binarized plaintext stream and a binary key stream. A stream cipher is an encryption algorithm that sequentially processes a stream (data flow) bit by bit. The two modes of block cipher, CFB (Cipher Feedback) and OFB (Output Feedback), act like streams. CFB implements cipher text by performing an XOR operation on the plain text after encrypting the initial vector. After re-encrypting the ciphertext, XOR operation is performed with the plaintext to generate the ciphertext. OFB encrypts the initial vector and then performs an XOR operation with the plaintext to create ciphertext. The encrypted value of the initial vector is re-encrypted and XOR operation is performed with the next plaintext to complete the ciphertext. LSFR can be implemented in either software or hardware, but it is much easier to implement in hardware. Stream ciphers are divided into two types depending on whether they are synchronized or not.

- Synchronous Stream Cipher: The random number sequence of the stream cipher is generated independently of the input value to be encrypted. Mutual synchronization is absolutely necessary in encryption and decryption. Subsequent ciphertext is impervious to errors, even if tampered with during transmission. Detection is impossible in the intentional modulation/decoding step.

- Asynchronous Stream Cipher: Also called self-synchronous stream cipher, self-synchronization is possible even if the ciphertext is changed during transmission.

Since the altered ciphertext is not used for decryption in subsequent ciphertext, error propagation is limited.

3 is a system for encrypting/decrypting an original text using an asymmetric key method.

4 is a diagram illustrating a Diffie-Hellman key exchange procedure of an asymmetric key encryption/decryption algorithm and a Diffie-Hellman algorithm.

Asymmetric Key Algorithm is an encryption/decryption algorithm in which the encryption key and the decryption key are different. Hellman, DH) algorithm and the asymmetric key algorithm first established by Diffie-Hellman developed into the RSA algorithm using the difficulty of prime factorization.

Asymmetric key encryption/decryption algorithms include Diffie-Hellman (DH) algorithm, RSA (Rivest-Shamir-Adleman) algorithm, DSA (Digital Signature Standard), ECC (Elliptic Curve Cryptosystem), Rabin, DSS (Digital Signature Standard, US digital signature standard), ElGamal algorithm, and Korea KCDSA (Korea Certification-based Digital Signature Algorithm, Korean digital signature standard). The ElGamal algorithm is an extension of the Diffie-Hellman algorithm and is used as a public key algorithm for digital signatures, encryption, and key exchange.

An asymmetric key encryption/decryption algorithm is an encryption/decryption algorithm in which the encryption key used for encryption and the encryption key and decryption key used for decryption are different. An asymmetric key algorithm using a public key and a private key is also called a public key algorithm. Generally, asymmetric key algorithms are used to exchange session keys or electronically sign messages or documents. Asymmetric key algorithms are slower than symmetric key algorithms, and encryption and decryption speeds may differ from each other. The RSA encryption/decryption algorithm is mainly used for digital signatures in web browsers using the SSL protocol, PGP, and government systems using public key encryption systems.

The RSA encryption/decryption algorithm was developed by researchers at Stafford University in 1976 and is a cipher that uses the difficulty of prime factorization. The length of the ciphertext is determined by the length of modulus mod n, and is mainly used for key encryption or electronic signature. Explain.

The RSA algorithm (asymmetric key) is an asymmetric key algorithm that generates and uses a public key and a secret key (private key) before RSA encryption/decryption. , mainly used for small amounts of 1024-bit data or mainly for digital signatures.

[RDA encryption]

However, M: plaintext, C: ciphertext, e: public key, n modulus (product of prime numbers)

[RSA decryption]

,

,

When decrypting an encrypted message (M) of RSA encryption,

Plaintext is generated when the ciphertext is squared with the private key.

However, M: plain text, C: cipher text, d: secret key (private key), n modulus (product of prime numbers)

Since the length of the ciphertext C is determined by the length of n, it is impossible to encrypt more than n plaintext. Because of the mod operation (remainder operation), the resulting value ranges from 0 to n-1.

The remainder of dividing the square of the public key (e) of the plaintext (M) by n is decrypted into plaintext (M).

The RSA algorithm (asymmetric key) requires a public key and a private key (private key) to be generated before RSA encryption/decryption.

1) Prime factorization of n in the RSA algorithm, choose two large prime numbers p and q.

2) Calculate n = p q.

3) Calculate Φ(n) = (p-1)(q-1).

4) Select a public key with the greatest common divisor, gcd(e,Φ(n)) = 1.

5) Find d that satisfies d·e = 1 mod Φ(n).

The Rabin asymmetric key encryption/decryption algorithm is a Rabin encryption method in which e of the public key (n, e) is replaced with b in the RSA encryption method, and the Rabin asymmetric key encryption/decryption algorithm is a "smart card" with limited data capacity memory is used for

However, with the development of the Internet and communication technology, personal information leakage damage is increasing, and personal information leakage damage can cause personal information leakage accidents such as data abuse damage by malicious users and voice phishing, and personal information security threats. In order to respond to this, personal information protection technology is needed, and companies need personal information leakage security accident prevention measures.

As a prior art related to this, in Patent Registration No. 10-1189683, "Personal Information Protection Document Encryption Transmission System, Apparatus and Method" is registered, and a document for document distribution by detecting personal information recorded in a document to be transmitted online. Masking before format conversion, encrypting the document with an encryption key and transmitting it to the document receiver, and sending the one-time encryption key generated by the user key and the encryption key that encrypts the document to the mobile communication terminal of the document receiver to receive the document Provided is a personal information encryption document transmission system, apparatus and method for transmitting and decrypting a document encrypted by a user key and a one-time encryption key.

Personal information protection document encryption transmission system

In the personal information protection document encryption transmission system for transmitting the document to a mobile communication terminal of a document receiver after detecting and masking personal information of at least one document to be transmitted,

a document providing terminal for encrypting and transmitting the document with an encryption key, generating and transmitting a one-time encryption key using the encryption key and a user key of a document receiver;

The one-time encryption key is received and displayed, the encrypted document is received and stored, an encryption key is generated based on the one-time encryption key and the user key input from the document receiver, and the encrypted document is generated by the encryption key. Including a mobile communication terminal that decrypts the document,

The document providing terminal,

A storage unit for storing documents, and a control unit for masking personal information of selected documents and controlling operations related to encryption and transmission of documents to be transmitted,

the storage unit,

A personal information protection DB for storing a plurality of masking patterns and storing masking pattern information set among the plurality of masking patterns,

The control unit receives one of the plurality of masking patterns selected by a manager or a document receiver, sets the masking pattern information, and transmits the detected personal information of the document to the masking pattern set in the personal information protection DB when the document is transmitted. It is characterized by masking with information.

However, when a masking method is applied to a document containing personal information to protect personal information, the personal information is masked in a uniform pattern because the method of masking the personal information is applied by the administrator after being converted into an electronic document in the form of an image. , there was a problem that the document looked messy due to this.

Patent Registration No. 10-1189683 (registration date: December 04, 2012), "Personal Information Protection Document Encryption Transmission System, Apparatus and Method", Secuve Co., Ltd.

An object of the present invention to solve the above problem is to use a two-way encryption / decryption algorithm (symmetric key, asymmetric key algorithm) so that it is impossible to identify with the eyes in order to prevent damage from leaking personal information in a state where the user intends or does not intend. 2D code (PDF417, MaxiCode, AztecCode, Data Matrix, or QR code) type shape and pattern printed on a plate-shaped member made of metal, in which personal information is encrypted, as an image recognition medium (CMOS image sensor or CCD camera) Recognize video and images through a device including a camera module (smartphone camera, digital camera, or IoT device equipped with a camera module), and personal information is encrypted using camera image recognition, image processing, and encryption/decryption algorithms Provided is a system for preventing leakage of personal information by using encryption/decryption technology that decrypts personal information that has been decrypted and recognizes the decrypted personal information.

Another object of the present invention is to provide a method for preventing leakage of personal information using encryption/decryption technology.

One of the objects of the present invention is to prevent damage from leakage of personal information when the user intends or unintentionally, encrypts the user's personal information with an encryption key (symmetric key), that is, in a flexible form. method, for example, DES, 3-DES with a Festel structure, or AES with a SPN structure, or a combination method, or an asymmetric key such as RSA, DSA, DH, Robin, etc. for message authentication and non-repudiation, that One of the methods is applied and stored, and it is used as a single or multiple server, that is, a distributed server, and provides a method of using collected and stored personal information so that it can be provided to the user or a third party for the necessary purpose under the consent of the user. .

Another object of the present invention is a point, line, plane. For example, a CMOS image sensor or camera that recognizes and reads the form of a two-dimensional code such as Data Matrix or QR code or the shape of a pattern using straight lines or curves It includes a method of interpreting specific information of personal information collected through IoT devices in a different form and providing it to a third party with the consent of the individual user.

In addition, one of the results required for the purpose of the present invention is not limited to a specific form, and in addition to minor metals such as titanium, vananium, and cobalt that can be reused and recycled, base metals such as nickel, copper, zinc, lead, gold, silver, It is manufactured using precious metal materials such as iridium and platinum.

In order to achieve the object of the present invention, a system for preventing leakage of personal information using encryption/decryption technology is designed so that a two-dimensional code form in which personal information is encrypted is printed in a metal material to prevent damage from leakage of personal information. , a plate-shaped member made of metal material produced by incision, bending, and fusion; an adhesive member for adhering the plate-shaped member made of metal; An image recognition medium of an object that recognizes images and images through image recognition of a metal plate member printed with a two-dimensional code form in which the personal information is encrypted, and transmits target information in which the personal information is encrypted to a server ; and

It interworks with the web and app of the user terminal, and interworks with a recognition device equipped with the encryption/decryption algorithm to decrypt target information in which the personal information is encrypted using an encryption/decryption algorithm to provide decrypted personal information. Including a personal information management server in which unresolved personal information and two-dimensional codes are stored,
The two-dimensional code form is composed of a polygon with n number of corners within a range where a specific width and length are not determined, and a shape composed of a rhombus, triangle, ellipse, rounded corner or circle, a shape of a two-dimensional code form, and Patterns or patterns utilizing straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include forms made of dots, lines, and planes.

In order to achieve another object of the present invention, a method for preventing leakage of personal information using encryption/decryption technology includes (a) a metal material printed with a two-dimensional code in which personal information is encrypted in order to prevent damage from leakage of personal information. Obtaining target information in which the personal information is encrypted through image recognition of an image recognition medium of an object using a plate-shaped member of the object, and transmitting the obtained object information to a server; (b) The server receives a transmission standby request in the user standby state, switches to the reception standby state with the current timestamp information encrypted, transmits a standby completion signal to the recognition device, and the object to which the personal information has been encrypted receiving information and decrypting it using an encryption/decryption algorithm using a recognizing device; and (c) transmitting the personal information in which the two-dimensional code form in which the personal information is encrypted is decoded to an image recognition medium of the object of the user so that the personal information visible to the eyes is displayed,
The two-dimensional code form is composed of a polygon with n number of corners within a range where a specific width and length are not determined, and a shape composed of a rhombus, triangle, ellipse, rounded corner or circle, a shape of a two-dimensional code form, and Patterns or patterns utilizing straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include a form consisting of points, lines, and planes,
An adhesive member for bonding the plate-shaped member made of metal is provided.

The system and method for preventing leakage of personal information using the encryption/decryption technology of the present invention is a situation in which personal information of persons in charge of public or private institutions, including individuals, including, for example, the phone number of the borrower outside or inside the vehicle must be exposed. can prevent the indiscriminate leakage of personal information, and even if a third party who needs the user's personal information or uses the user's personal information with consent, even if it does not directly or indirectly fulfill the obligation to protect personal information, encryption / decryption Through this, privacy-related damage can be prevented.

1 is a diagram explaining a symmetric key/asymmetric key encryption/decryption algorithm.
2 is a system for encrypting/decrypting an original text using a symmetric key method.
3 is a system for encrypting/decrypting an original text using an asymmetric key method.
4 is a diagram illustrating a Diffie-Hellman key exchange procedure of an asymmetric key encryption/decryption algorithm and a Diffie-Hellman algorithm.
5 is a screen showing encryption and decryption verification results of a mobile phone number using an AES (Advanced Encryption Standard) algorithm using a symmetric key.
6 is a screen showing a result of verifying encryption and decryption of a mobile phone number using an RSA (Rivest, Sharmir, Adleman) algorithm using an asymmetric key.
7 is a system configuration diagram for preventing leakage of personal information using encryption technology according to the present invention.
8 is a diagram showing types of two-dimensional codes (PDF417, QR Code, Data Matrix Code, Maxi Code, Aztec Code).
9 is a flowchart illustrating a method of preventing leakage of personal information using encryption technology according to the present invention.
10 is a product in which personal information is encrypted according to an embodiment of the present invention: (left) a plate member made of metal printed with a two-dimensional code containing encrypted personal information (bimetal metal-gold, silver, copper); (Right) commercially available vehicle holders with phone numbers; and (Bottom) a picture showing another encrypted product (two-dimensional special code containing personal information encrypted with letters/numbers/special characters).

Hereinafter, the configuration and operation of a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

The present invention is not limited to the disclosed embodiments, but can be implemented in a variety of different forms by those skilled in the art. In the description of the present invention, if it is determined that a detailed description of a related known technology or known configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, the attached drawing numbers refer to the same drawing numbers in other drawings when indicating the same configuration.

It should be understood that it is not limited to a specific embodiment through this research and development, and includes all conversions, equivalents, or substitutes included in the spirit and technical scope of the present invention.

The personal information protection system and method using the encryption technology of the present invention uses a two-way encryption/decryption algorithm (symmetric key algorithm or asymmetric key algorithm) to prevent personal information leakage damage so that it cannot be identified with the naked eye. 2D code (PDF417, Maxi Code, Aztec Code, Data Matrix code, or QR code) type shape and pattern are printed on a plate-shaped member made of metal with an image recognition medium (CMOS image sensor or CCD camera) Recognize video and images through a device including a camera module (smartphone camera, digital camera, or IoT device equipped with a camera module), and personal information is encrypted using camera image recognition, image processing, and encryption/decryption algorithms This is to prevent leakage of personal information by using encryption technology that decrypts personal information that has been decrypted and recognizes the decrypted personal information.

The shape of the plate member made of metal printed with a two-dimensional code in which personal information is encrypted does not specify a specific range of width and length, and is a polygon with n number of corners, for example, a rhombus, a triangle, an ellipse, and a rounded corner. Or, it can be used in the form of a circle, etc., and specific information of personal information contained therein, including shapes and patterns in the form of two-dimensional codes such as PDF417, MaxiCode, AztecCode, Data Matrix, and QR codes, or patterns utilizing straight lines or curves. In order to identify images, images, letters, numbers, and special characters are captured, CMOS image sensors or cameras are used as object image recognition media to acquire information through image recognition of objects, and encrypted target information is sent to the server. transmit,

The server interworks with the recognition device equipped with the encryption/decryption algorithm to decrypt the encrypted target information and provide personal information.

The plate-like member made of metal is a material that is not composed of a synthetic resin material of at least one of polyethylene terephthalate, polyethylene, polypropylene, and polyvinyl chloride, and the plate-like member made of various metal materials is, for example, reusable/recyclable titanium ( In addition to minor metals such as Ti), vananium (V), and cobalt (Co), base metals such as nickel (Ni), copper (Cu), zinc (Zn), and lead (Pb), gold (Au), and silver ( As a precious metal such as Ag), iridium (Ir), or platinum (Pt), personal information is encrypted and a two-dimensional code form can be printed and displayed.

The adhesive member uses an adhesive material such as double-sided tape that can be attached from a small area to a wide area in order to attach the two-dimensional code in which personal information is encrypted to the plate-shaped member made of metal, or to be attached to various materials. It can be used by being mounted on a cradle suitable for the embodiment of the present invention, and can be used by placing it on a material that prevents slipping.

In addition, the most important personal information in the present invention is encryption / decryption technology ( It is used to prevent indiscriminate leakage of personal information by maintaining confidentiality (confidentiality) and providing non-repudiation by multiple application/application of symmetric key and asymmetric key encryption/decryption algorithm.

(Example)

In the embodiment, a mobile phone number and a vehicle owner's mobile communication phone number have been described as examples, but are not limited thereto and may be applied to various embodiments.

7 is a system configuration diagram for preventing leakage of personal information using encryption technology according to the present invention.

A system for preventing leakage of personal information using the encryption technology of the present invention

In order to prevent damage from leakage of personal information, the shape and pattern in the form of a two-dimensional code in which personal information is encrypted are printed on a metal material, and a plate member made of metal material produced by processing, cutting, bending, and fusion;

an adhesive member for adhering the plate-shaped member made of metal;

An image recognition medium of an object that recognizes images and images through image recognition of a metal plate member printed with a two-dimensional code form in which the personal information is encrypted, and transmits target information in which the personal information is encrypted to a server ; and

It interworks with the web and app of the user terminal, and interworks with a recognition device equipped with the encryption/decryption algorithm to decrypt target information in which the personal information is encrypted using an encryption/decryption algorithm to provide decrypted personal information. It includes a personal information management server in which unresolved personal information and shapes and patterns in the form of two-dimensional codes are stored.

The personal information management server may be configured as a single server or a distributed system composed of multiple servers such that each regional server is installed in geographically dispersed regions.

A smartphone having a camera and a communication unit was used as the medium for recognizing the image of the object.

As another embodiment, in Embodiment 2, when decryption is not used through the server and a separate recognition device, the smartphone itself image-recognizes the target information in which personal information is encrypted, and has an encryption / decryption program, Image processing and encryption/decryption can be executed and used.

The plate-like member made of metal is not composed of at least one synthetic resin material selected from polyethylene terephthalate, polyethylene, polypropylene and polyvinyl chloride,

The plate-like member made of the metal material includes a minor metal including titanium (Ti), vananium (V), and cobalt (Co), as well as nickel (Ni), copper (Cu), zinc (Zn), and lead (Pb). It is made of base metal containing gold (Au), silver (Ag), iridium (Ir), and precious metal including platinum (Pt).

It is manufactured using equipment and facilities for installing fixtures or accessories to process the metal material.

The adhesive member uses an adhesive material of a double-sided tape to attach the two-dimensional code in which the personal information is encrypted to the plate-shaped member made of metal, or is mounted on a cradle to attach to various materials, and It is used by placing it on a material that prevents slipping. For example, a material that does not conduct electricity as an elastic hydrocarbon polymer is used for the cradle.

8 is a diagram showing types of two-dimensional codes (PDF417, QR Code, Data Matrix Code, Maxi Code, Aztec Code).

The two-dimensional code form is composed of polygons with n number of corners within a range where a specific width and height are not determined, and forms composed of rhombuses, triangles, ellipses, rounded corners, or circles, two-dimensional codes (PDF417, MaxiCode , AztecCode, Data Matrix code, or QR code) forms and patterns, or patterns utilizing straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include forms made of dots, lines, and planes, ,

The two-dimensional code uses any one of PDF417, MaxiCode, AztecCode, Data Matrix code, and QR code.

The personal information is characterized in that it is information for identifying an individual including at least one of a name, a resident registration number, a borrower's mobile communication phone number, an e-mail address, a home address, and a company address.

The image recognition medium of the object is

A device including a CMOS image sensor or a CCD camera and a camera module, comprising: a smart phone camera having a communication unit, a control unit, and a storage unit interworking with the server; digital camera; Alternatively, an IoT device equipped with a camera module having a communication unit, a control unit, and a storage unit interlocked with the server is used.

To help explain the implementation of this technology, example images of how it was actually implemented were included.

(1) Symmetric key encryption/decryption algorithm (secret key algorithm) has the same encryption key/decryption key, DES (Data Encryption Standard), AES (Advanced Encryption Standard), IDEA (International Data Encryption Algorithm), RC4 (Rivest Cipher) 4), RC5 (Rivest Cipher 5), RC6 (Rivest Cipher 6), domestically developed ARIA and SEED algorithms can be used.

However, among the symmetric key encryption methods, the Feistel structure is a structure in which half of the block is converted in the first round with the same logic for encryption and decryption keys. DES (Data Encryption Standard) and 3DES (Triple Data Encryption Standard) are available. ,

The Substitution-Permutation Network (SPN) structure belongs to the Advanced Encryption Standard (AES).

(2) Asymmetric key encryption/decryption algorithm (public key algorithm) has different encryption key/decryption key, DH (Diffie-Hellman) algorithm, RSA (Rivest-Shamir-Adleman) algorithm, DSA (Digital Signature Standard, digital signature algorithm) ), Rabin, and ELGamal algorithms, any one of the asymmetric key algorithms may be used.

5 is a screen showing encryption and decryption verification results of a mobile phone number using an AES (Advanced Encryption Standard) algorithm using a symmetric key.

6 is a screen showing a result of verifying encryption and decryption of a mobile phone number using an RSA (Rivest, Sharmir, Adleman) algorithm using an asymmetric key.

The encryption/decryption algorithm encrypts/decrypts the personal information using a symmetric key encryption/decryption algorithm,

The symmetric key encryption/decryption algorithm is DES (Data Encryption Standard), which uses a structure in which half of a block is converted in the first round with the same logic as the encryption key and the decryption key in the Feistel structure among symmetric key encryption methods, or Triple Data Encryption Standard (3-DES), or

It uses AES (Advanced Encryption Standard) encryption/decryption algorithm using SPN (Substitution-Permutation Network) structure.

In addition, the encryption / decryption algorithm encrypts / decrypts the personal information using an asymmetric key encryption / decryption algorithm,

The asymmetric key encryption/decryption algorithm may use any one of a Diffie-Hellman (DH) algorithm, RSA algorithm, DSA algorithm, Rabin, and ELGamal algorithm.

9 is a flowchart illustrating a method of preventing leakage of personal information using encryption/decryption technology according to the present invention.

A method for preventing leakage of personal information using the encryption/decryption technology of the present invention

(a) In order to prevent damage from leakage of personal information, the shape of a two-dimensional code in which invisible personal information is encrypted and a plate-shaped member made of metal printed with patterns are visually identified through image recognition of an object's image recognition medium. Acquiring the target information encrypted with the personal information that does not become the target information and transmitting it to the server;

(b) The server receives a transmission standby request in the user standby state, switches to the reception standby state with the current timestamp information encrypted, transmits a standby completion signal to the recognition device, and the object to which the personal information has been encrypted Receiving information, decrypting it using an encryption/decryption algorithm through a recognition device, comparing the received full-text decryption and personal information pre-stored in a server, and re-recognizing and decrypting the transmitted information to the recognition device when inconsistent; and

(c) When the decrypted personal information is compared with the personal information pre-stored in the server, the two-dimensional code form in which the personal information is encrypted transmits the decrypted personal information to the image recognition medium of the user's object, so that the eyes can see Including the step of enabling visible personal information to be displayed;
The two-dimensional code form is composed of a polygon with n number of corners within a range where a specific width and length are not determined, and a shape composed of a rhombus, triangle, ellipse, rounded corner or circle, a shape of a two-dimensional code form, and Patterns or patterns utilizing straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include a form consisting of points, lines, and planes,
An adhesive member for bonding the plate-shaped member made of metal is provided.

In the above step (a), the shape of the plate member made of metal printed with the form of a two-dimensional code in which personal information is encrypted does not determine the width and length of a specific range, and is a polygon with n number of corners, for example, a rhombus. , which can be used in the form of a triangle, ellipse, rounded corner or circle, etc., shapes and patterns in the form of two-dimensional codes (PDF417, MaxiCode, AztecCode, Data Matrix code, or QR code), or patterns using straight lines or curves; Or letters/numbers/special characters are encrypted in a specific form and include a form consisting of dots, lines, and planes,

Encrypted target information that cannot be identified with the naked eye uses a CMOS image sensor or camera to capture images, images, letters, numbers, and special characters to identify specific information of personal information contained in it. Acquire information through image recognition of objects.

When processing sequentially in a time-sequential manner in the server, when checking whether or not there is an error in the transmission and reception data from the image recognition medium of the object to the server, the error content, error occurrence time, and error processing history are transmitted to the manager terminal to check and process errors and record it in the error handling history and store it on the server.

The personal information is information for identifying an individual including at least one of a name, a resident registration number, a borrower's mobile communication phone number, an e-mail address, a home address, and a company address.

The image recognition medium of the object is

A device including a CMOS image sensor or CCD camera and a camera module, comprising a smartphone camera, a digital camera, or a camera having a communication unit, control unit, and storage unit interlocking with the server, and having a communication unit, control unit, and storage unit interworking with the server Use an IoT device equipped with a module.

As Example 2, the image recognition medium of the object uses a smartphone having a camera and a communication unit,

If decryption is not used through a recognition device separate from the server, the smartphone itself recognizes the target information in which personal information is encrypted as an image, has an encryption/decryption program, and executes image processing and encryption/decryption to be used. may be

The plate-like member made of metal is not composed of at least one synthetic resin material selected from polyethylene terephthalate, polyethylene, polypropylene and polyvinyl chloride,

The plate-like member made of the metal material includes a minor metal including titanium (Ti), vananium (V), and cobalt (Co), as well as nickel (Ni), copper (Cu), zinc (Zn), and lead (Pb). It is made of base metal containing gold (Au), silver (Ag), iridium (Ir), and precious metal including platinum (Pt).

It is manufactured using equipment and facilities for installing fixtures or accessories to process the metal material.

The two-dimensional code form is composed of polygons with n number of corners within a range where a specific width and height are not determined, and forms composed of rhombuses, triangles, ellipses, rounded corners, or circles, two-dimensional codes (PDF417, MaxiCode , AztecCode, Data Matrix code, or QR code) forms and patterns, patterns using straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include dots, lines, and planes,

The two-dimensional code uses any one of PDF417, MaxiCode, AztecCode, Data Matrix code, and QR code.

The encryption/decryption algorithm encrypts/decrypts the personal information using a symmetric key encryption/decryption algorithm,

The symmetric key encryption/decryption algorithm is DES (Data Encryption Standard) or 3DES (Triple Data Encryption Standard) having a Feistel structure, or

It uses AES (Advanced Encryption Standard) encryption/decryption algorithm using SPN (Substitution-Permutation Network) structure.

The encryption/decryption algorithm encrypts/decrypts the personal information using an asymmetric key encryption/decryption algorithm,

The asymmetric key encryption/decryption algorithm uses any one of a Diffie-Hellman (DH) algorithm, RSA algorithm, DSA algorithm, Rabin, and ELGamal algorithm.

The plate-shaped member made of metal is characterized in that it is a flexible member having elasticity.

The adhesive member uses an adhesive material of double-sided tape to attach the two-dimensional code form in which the personal information is encrypted to the plate-shaped member made of metal, or is mounted on a cradle to attach to various materials, and the cradle It is used by placing it on a material that prevents slipping, for example, a material that does not conduct electricity as an elastic hydrocarbon polymer is used for the cradle.

The server may be composed of a single server or a distributed system having multiple servers.

10 is a product in which personal information is encrypted according to an embodiment of the present invention: (left) a plate member made of metal printed with a two-dimensional code in which encrypted personal information is encrypted (bimetal metal-gold, silver, copper); (Right) commercially available vehicle holders with phone numbers; and (Bottom) a picture showing another encrypted product (two-dimensional special code containing personal information encrypted with letters/numbers/special characters).

It relates to a manufacturing method, a process including a method of producing in the form of a metal material desired by a user, a process of utilizing a design that does not infringe on a third party's intellectual property rights, and is a registered trademark, design registration, or free or paid service on the Internet, etc. The copyright form of the image being circulated, such as art work, photographic work, video work, graphic work, editorial work, joint work, etc.

The process of distributing through production in advance, the shape of the work object is mainly in the form of a metal material, and includes a manufacturing process that can be manufactured using equipment and facilities, which means equipping the device with fixtures or accessories to process metal. do.

Environmental pollution is a social and economical problem, so to reduce environmental pollution, metal plate members are heat-resistant and easy to process. Manufacture was considered as a kind, but was excluded from the present invention,

It includes the process of using materials including titanium harmless to the human body, and it is a physical process of collecting and toll processing or phase transition of the collected material from a solid to a liquid state, melting and remaking it, or bonding it with heat and pressure. Including the step of using a method of saving material using welding,

In addition to minor metals such as titanium, vananium, and cobalt that can be recycled or reused, base metals such as nickel, copper, zinc, and lead, and precious metals such as gold, silver, iridium, and platinum are used in the manufacturing process, Products are manufactured and used in consideration of the tastes of various users.

In order to protect the most important personal information in the present invention,

Personal information can be input from various software including web and app by users. However, the entered personal information (name, resident registration number, mobile phone number, information that can identify individuals including e-mail, etc.) is entered and stored by the user, and a one-way encryption algorithm using Hash; It includes a process of applying encryption by applying a bidirectional encryption algorithm classified as a private key and a public key singly (once) or multiple times (2 to n times),

Furthermore, for example, the form of personal information entered for the first time regarding important personal information, such as resident registration number (790811-1xxxxxx), mobile phone number (010-0000-0000), name, e-mail address, home address, etc. are encrypted and no longer visible. No, and the displayed phrase at this time can be displayed in the length of n characters such as 0x3920bx..... as a result after encryption, and if necessary, decryption to decrypt encryption after going through single or multiple authentication in the server Personal information is expressed and provided again only on volatile memory, which is deleted when there is no power supply, and does not store any information about it in storage space, such as hard disks (HDD, SSD, etc.) or other storage media. and

In using this, a direct method for selecting and providing only the information to be shown to a third party with the consent of the individual user; Among the information to be displayed, only specific information is not in its original form. For example, in the case of a mobile phone number, it includes a process of indirectly providing the form of a virtual phone number,

However, in the present invention, the form of personal information is a process of recombination by changing the location swap (swap) n times for each string, that is, if the first input is abc, the first input is a process of changing to acb, etc. at the first location swap, and the second location During the exchange, acb becomes bac, and this process is passed n times, and the first form of personal information is encrypted and includes a form in which personal information can no longer be completely identified.

The method includes the steps of displaying personal information in a form of encrypted personal information in a state where accurate personal information is no longer noticeable; Each information includes a process that can be divided and stored in a single server or n distributed servers,

As a method for recombining them, a process of generating an encryption key (symmetric key, asymmetric key) by dividing one or more pieces of information and using a date stamp and a time stamp on the divided information includes

The method includes the steps of combining by utilizing encryption (symmetric key or asymmetric key); Regarding the generation and use of a specific key, a method of encrypting personal information for an encryption key (symmetric key), for example, a method using one of DES, 3DES, or AES with a Festel structure, or message authentication or denial To prevent this, encryption is applied by combining one of the asymmetric keys such as RSA, DSA, DH, and Robin, one of the methods and other methods other than the selected method, or 1 to n times of encryption of that method.

However, when multiple combinations of specific encryption algorithms are performed during execution, there may be cases in which encryption is no longer possible depending on the length of the string and the type of included string (numbers, English, Korean, special characters, etc.). selected encryption algorithm.

An example in which personal information including the mobile communication phone number of the vehicle owner is encrypted in the form of a two-dimensional code and used for a plate-shaped member made of metal has been presented, but it is not limited thereto and can be applied in various ways, and a resident registration card used online. /passport/driver's license number, which can be applied to various fields of personal information protection.

The system and method for preventing leakage of personal information using the encryption/decryption technology of the present invention is a situation in which personal information of persons in charge of public or private institutions, including individuals, including, for example, the phone number of the borrower outside or inside the vehicle must be exposed. can prevent the indiscriminate leakage of personal information, and even if a third party who needs the user's personal information or uses the user's personal information with consent, even if it does not directly or indirectly fulfill the obligation to protect personal information, encryption / decryption Through this, privacy-related damage can be prevented.

Embodiments according to the present invention are implemented in the form of program instructions that can be executed through various computer means, and can be recorded in a computer readable recording medium. The computer readable recording medium may include program instructions, data files, and data structures alone or in combination. Computer-readable recording media include storage, hard disks, magnetic media such as floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. - A hardware device configured to store and execute program instructions in storage media such as magneto-optical media, ROM, RAM, flash memory, storage, and the like may be included. Examples of program instructions may include those produced by a compiler, machine language codes as well as high-level language codes that can be executed by a computer using an interpreter. The hardware device may be configured to operate as one or more software modules to perform the operations of the present invention.

As described above, the method of the present invention is implemented as a program and can be read using computer software on a recording medium (CD-ROM, RAM, ROM, memory card, hard disk, magneto-optical disk, storage device, etc.) ) can be stored in

Although described with reference to specific embodiments of the present invention, the present invention is not limited to the same configuration and operation as the specific embodiments to illustrate the technical idea as described above, and within the limit that does not deviate from the technical spirit and scope of the present invention It can be implemented with various modifications, and the scope of the present invention should be determined by the claims described later.

Claims (25)

In order to prevent damage from leakage of personal information, the form of a two-dimensional code in which personal information is encrypted is printed on a metal material, and a plate member made of metal material produced by processing, cutting, bending, and fusion;
an adhesive member for adhering the plate-shaped member made of metal;
an object image recognition medium that recognizes images and images of a plate-shaped member made of metal on which the two-dimensional code form in which the personal information is encrypted is printed and transmits the object information in which the personal information is encrypted to a server by recognizing an image of the object; and
It interworks with the web and app of the user terminal, and interworks with a recognition device equipped with the encryption/decryption algorithm to decrypt target information in which the personal information is encrypted using an encryption/decryption algorithm to provide decrypted personal information. Including a personal information management server in which unresolved personal information and two-dimensional code form are stored,
The two-dimensional code form is composed of a polygon with n number of corners within a range where a specific width and length are not determined, and a shape composed of a rhombus, triangle, ellipse, rounded corner or circle, a shape of a two-dimensional code form, and A system that uses encryption and decryption technology to prevent leakage of personal information, including patterns using patterns or straight lines or curves, or letters/numbers/special characters encrypted in a specific form and composed of dots, lines, and planes. According to claim 1,
The plate-like member made of metal is not composed of at least one synthetic resin material selected from polyethylene terephthalate, polyethylene, polypropylene and polyvinyl chloride,
The plate-like member made of metal is a minor metal including titanium (Ti), vananium (V), and cobalt (Co) that can be recycled or reused, as well as nickel (Ni), copper (Cu), and zinc (Zn). , It is made of base metal including lead (Pb) and precious metal including gold (Au), silver (Ag), iridium (Ir), and platinum (Pt),
A system for preventing leakage of personal information using encryption and decryption technology, which is manufactured using equipment and facilities for installing fixtures or accessories to process the metal material. According to claim 1,
The two-dimensional code uses any one of PDF417, MaxiCode, AztecCode, Data Matrix code, or QR code, a system for preventing leakage of personal information using encryption and decryption technology. According to claim 1,
The personal information is information for identifying an individual including at least one of name, resident registration number, borrower's mobile communication phone number, e-mail, home address, and company address. system to prevent. According to claim 1,
The image recognition medium of the object is
As a device including a CMOS image sensor or CCD camera and a camera module,
Using encryption/decryption technology including an IoT device equipped with a smartphone camera, a digital camera, or a camera module having a communication unit, control unit, and storage unit interlocked with the server, having a communication unit, control unit, and storage unit interlocked with the server A system that prevents leakage of personal information. According to claim 1,
The image recognition medium of the object uses a smartphone having a camera and a communication unit,
If decryption is not used through a recognition device separate from the server, the smartphone itself recognizes the target information in which personal information is encrypted as an image, has an encryption/decryption program, and executes image processing and encryption/decryption for use. A system that uses encryption and decryption technology to prevent leakage of personal information. According to claim 1,
The encryption/decryption algorithm encrypts/decrypts the personal information using a symmetric key encryption/decryption algorithm,
The symmetric key encryption/decryption algorithm is DES (Data Encryption Standard) or 3DES (Triple Data Encryption Standard) having a Feistel structure, or
A system that uses an AES (Advanced Encryption Standard) encryption/decryption algorithm that uses a Substitution-Permutation Network (SPN) structure to prevent leakage of personal information using encryption/decryption technology. According to claim 1,
The encryption/decryption algorithm encrypts/decrypts the personal information using an asymmetric key encryption/decryption algorithm,
The asymmetric key encryption/decryption algorithm uses an asymmetric key algorithm of any one of the DH (Diffie-Hellman) algorithm, RSA algorithm, DSA algorithm, Rabin, and ELGamal algorithm. A system for preventing leakage of personal information using encryption/decryption technology . According to claim 1,
The system for preventing leakage of personal information using encryption and decryption technology, characterized in that the plate-like member of the metal material is a flexible member having elasticity. According to claim 1,
The adhesive member uses an adhesive material of a double-sided tape to attach the two-dimensional code in which the personal information is encrypted to the plate-shaped member made of metal, or is mounted on a cradle to attach to various materials, and A system for preventing leakage of personal information using encryption and decryption technology, which is used by placing it on a material that prevents slipping and using a material that does not conduct electricity with an elastic hydrocarbon polymer for the cradle. According to claim 1,
The system for preventing leakage of personal information using encryption and decryption technology, which may be configured as a single server or a distributed system having multiple servers. (a) In order to prevent damage from leakage of personal information, the target information in which the personal information is encrypted is acquired through image recognition of a metal plate member printed with a two-dimensional code form in which personal information is encrypted through image recognition of an object image recognition medium sending it to the server;
(b) The server receives a transmission standby request in the user standby state, switches to the reception standby state with the current timestamp information encrypted, transmits a standby completion signal to the recognition device, and the object to which the personal information has been encrypted receiving information and decrypting it using an encryption/decryption algorithm using a recognizing device; and
(c) transmitting the personal information in which the two-dimensional code form in which the personal information is encrypted is decoded to an image recognition medium of the object of the user so that the personal information visible to the naked eye is displayed;
The two-dimensional code form is composed of a polygon with n number of corners within a range where a specific width and length are not determined, and a shape composed of a rhombus, triangle, ellipse, rounded corner or circle, a shape of a two-dimensional code form, and Patterns or patterns utilizing straight lines or curves, or letters/numbers/special characters are encrypted in a specific form and include a form consisting of points, lines, and planes,
A method of preventing leakage of personal information using encryption/decryption technology, comprising an adhesive member for bonding the plate-shaped member made of metal. According to claim 12,
The plate-like member made of metal is not composed of at least one synthetic resin material selected from polyethylene terephthalate, polyethylene, polypropylene and polyvinyl chloride,
The plate-like member made of metal is a minor metal including titanium (Ti), vananium (V), and cobalt (Co) that can be recycled or reused, as well as nickel (Ni), copper (Cu), and zinc (Zn). , It is made of base metal including lead (Pb) and precious metal including gold (Au), silver (Ag), iridium (Ir), and platinum (Pt),
A method of preventing leakage of personal information using encryption and decryption technology, which is manufactured using equipment and facilities for installing fixtures or accessories to process the metal material. According to claim 12,
The two-dimensional code uses any one of PDF417, MaxiCode, AztecCode, Data Matrix code, or QR code, a method for preventing leakage of personal information using encryption and decryption technology. According to claim 12,
The personal information is information for identifying an individual including at least one of name, resident registration number, borrower's mobile communication phone number, e-mail, home address, and company address. how to avoid it. According to claim 12,
In order to protect the personal information, the personal information can be input by the user in various software including the Web and App, and the entered personal information (including name, resident registration number, mobile phone number, and e-mail) information that can identify individuals, etc.) is input and stored by the user, and a one-way encryption algorithm that uses Hash at the same time; It includes a process of applying encryption by applying a bidirectional encryption algorithm classified as a private key and a public key singly (once) or multiple times (2 to n times),
Regarding important personal information, for example, the form of personal information entered for the first time is in the form of resident registration number (790811-1xxxxxx) and mobile number (010-0000-0000), name, e-mail address, and home address information are no longer visible. The displayed phrase can be displayed as the length of n characters, such as 0x3920bx..... as a result after being encrypted, and if necessary, power is supplied through decryption that decrypts encryption after going through single or multiple authentication in the server. If there is none, personal information is displayed again only on the volatile memory to be deleted, and using encryption/decryption technology, including the process of not storing and leaving any information about it in storage space, that is, hard disk (HDD, SSD) or other storage media How to prevent leakage of personal information. According to claim 16,
In using the encrypted personal information, a direct method for selecting and providing only information to be shown to a third party with the consent of the individual user; Among the information to be displayed, only specific information is not in its original form. For example, in the case of a mobile phone number, it includes a process of indirectly providing the form of a virtual phone number,
The form of personal information is a process of recombination by changing the positional swap (swap) n times for each character string. That is, if the initial input is abc, the process of changing position to acb at the first positional swap, and acb at the second positional swap is bac. The process of becoming, including the process of going through this process n times so that the first form of personal information is no longer completely identifiable with the naked eye,
Including displaying the personal information in the form of encrypted personal information in an inconspicuous way, and including a process of dividing and storing each personal information on a single server or n distributed servers,
As a method for recombining them, a process of generating an encryption key (symmetric key, asymmetric key) by dividing one or more pieces of information and using a date stamp and a time stamp on the divided information Including, how to prevent leakage of personal information using encryption and decryption technology. According to claim 12,
The image recognition medium of the object is
As a device including a CMOS image sensor or CCD camera and a camera module,
Using encryption/decryption technology including an IoT device equipped with a smartphone camera, a digital camera, or a camera module having a communication unit, control unit, and storage unit interlocked with the server, having a communication unit, control unit, and storage unit interlocked with the server How to prevent leakage of personal information. According to claim 12,
The image recognition medium of the object uses a smartphone having a camera and a communication unit,
If decryption is not used through a recognition device separate from the server, the smartphone itself recognizes the target information in which personal information is encrypted as an image, has an encryption/decryption program, and executes image processing and encryption/decryption for use. How to prevent leakage of personal information using encryption and decryption technology. According to claim 12,
The encryption/decryption algorithm encrypts/decrypts the personal information using a symmetric key encryption/decryption algorithm,
The symmetric key encryption/decryption algorithm is DES (Data Encryption Standard) or 3DES (Triple Data Encryption Standard) having a Feistel structure, or
A method of preventing leakage of personal information using encryption/decryption technology using AES (Advanced Encryption Standard) encryption/decryption algorithm using SPN (Substitution-Permutation Network) structure. According to claim 12,
The encryption/decryption algorithm encrypts/decrypts the personal information using an asymmetric key encryption/decryption algorithm,
The asymmetric key encryption/decryption algorithm uses an asymmetric key algorithm of any one of DH (Diffie-Hellman) algorithm, RSA algorithm, DSA algorithm, Rabin, and ELGamal algorithm. Method for preventing leakage of personal information using encryption/decryption technology . According to claim 12,
The method of preventing leakage of personal information using encryption and decryption technology, characterized in that the plate-shaped member made of a metal material is a flexible member having elasticity. According to claim 12,
The adhesive member uses an adhesive material of a double-sided tape to attach the two-dimensional code in which the personal information is encrypted to the plate-shaped member made of metal, or is mounted on a cradle to attach to various materials, and A method of preventing leakage of personal information using encryption and decryption technology, in which a non-conductive material made of an elastic hydrocarbon polymer is used for the cradle. According to claim 12,
The server may be configured as a single server or a distributed system having multiple servers, a method for preventing leakage of personal information using encryption and decryption technology. According to claim 12,
When processing sequentially in time series in the server, when checking whether or not there is an error in the data transmitted and received from the image recognition medium of the object to the server, the error content, error occurrence time, and error processing history are transmitted to the manager terminal to check the error and error A method for preventing leakage of personal information using encryption/decryption technology, wherein processing is performed, recorded in an error processing history, and stored in the server.

Images