KR102611451B1 - Intelligent gateway-based personal information impact assessment automatic management system - Google Patents

Abstract

In order to provide a technology that allows a gateway-type system to automatically detect the inflow and management status of data related to personal information among the data managed on the server and automatically perform a personal information impact assessment on each server, the present invention The intelligent gateway-based automatic personal information impact assessment management system according to one embodiment is connected to the target server, monitors the analysis target data transmitted and received from the target server, and selects data containing personal information among the analysis target data as candidates. Candidate data selection unit that selects data; Server selection that selects the target server subject to personal information impact assessment as the evaluation target server according to the number of candidate data flowing into the server through monitoring the transmission and reception history of the candidate data selected by the candidate data selection department. government; And, connects to the evaluation target server selected by the server selection department, analyzes the collection and management status of personal information, and generates report information on the personal information impact assessment based on the personal information impact assessment data generated as a result of the analysis. and a monitoring result management unit that transmits the results to the administrator terminal of the server being evaluated.

Description

Intelligent gateway-based personal information impact assessment automatic management system {INTELLIGENT GATEWAY-BASED PERSONAL INFORMATION IMPACT ASSESSMENT AUTOMATIC MANAGEMENT SYSTEM}

The present invention relates to an automatic management system for personal information impact assessment that determines whether various servers handling personal information are efficiently managing personal information. Specifically, it relates to personal information-related data among the data managed on the servers. It concerns a technology that allows a gateway-type system to automatically detect the inflow and management status of data, automatically perform a personal information impact assessment on each server, and return the results.

A personal information impact assessment is an evaluation to analyze risk factors and derive improvements when there is concern about a violation of the personal information of the information subject due to the operation of personal information files in accordance with the Personal Information Protection Act ((Personal Information Protection Committee) Refers to Article 2, Paragraph 1 of the Notice on Personal Information Impact Assessment.

Personal information is a concept that collectively refers to information that can identify an individual or prove that the individual is an individual and can be used for financial or various services. It includes personal identification information such as resident registration number, and various types of confidential information due to the risk of serious damage to the information subject if leaked. Along with information, security is very necessary, and at the same time, it is mandatory for servers that manage this information to manage personal information efficiently in accordance with the law.

Basically, personal information is usually required to register as a member when using services provided by a website or a specific server. Personal information is temporarily stored for member management and marketing and deleted immediately upon completion of use, or for a certain period of time ( It is managed by storing it on a server for (for example, one year, etc.) and then discarding it.

Among these servers, servers that manage more than a certain number of personal information data (for example, 50,000 pieces) are subject to the above-mentioned personal information impact assessment, and accordingly, intensive monitoring of data management, security, and disposal is required. becomes the subject of

Such automated systems for personal information impact assessment include, for example, Korea Registered Patent No. 10-2183192. In the relevant prior art, technology is posted that automatically collects input data through monitoring of membership registration web pages, etc., automatically determines whether it is personal information through analysis in the form, and requests a personal information impact assessment on this. I'm doing it.

However, these technologies only determine whether each piece of data contains personal information. In the end, the technology automatically selects servers subject to personal information impact assessment and automatically performs all areas of personal information impact assessment on servers. It is not being posted.

In particular, in a reality where personal information security is becoming very common and the number of servers handling personal information is increasing, automated personal information impact assessment on all servers cannot be performed with the above-mentioned technology alone, so technology that can solve this problem is needed. The need for is increasing.

Accordingly, the present invention was derived in response to the problems of the existing technologies described above and the need for technology derived therefrom. Specifically, the server that is the subject of personal information impact assessment using data flowing into or managed by the server. By automatically selecting personal information and automatically monitoring the management and security of the server's personal information in accordance with laws and regulations, we automatically perform a personal information impact assessment on each server, thereby conducting a separate personal information impact assessment on servers that have increased rapidly. The purpose is to provide technology that can be performed automatically without dispatching human resources or building a system.

In order to achieve the above purpose, the intelligent gateway-based automatic personal information impact assessment management system according to an embodiment of the present invention is connected to the target server, monitors the analysis target data transmitted and received from the target server, and analyzes the target server data. A candidate data selection unit that selects data containing personal information as candidate data; Server selection that selects the target server subject to personal information impact assessment as the evaluation target server according to the number of candidate data flowing into the server through monitoring the transmission and reception history of the candidate data selected by the candidate data selection department. government; And, connects to the evaluation target server selected by the server selection department, analyzes the collection and management status of personal information, and generates report information on the personal information impact assessment based on the personal information impact assessment data generated as a result of the analysis. and a monitoring result management unit that transmits the results to the administrator terminal of the server being evaluated.

The candidate data selection unit includes: a first data selection unit that selects analysis target data having an online address corresponding to an interface where personal information is used as a target address among a plurality of online addresses corresponding to a target server; And a unit that analyzes the text information of the analysis target data selected by the first data selection unit according to a natural language processing algorithm, determines whether it contains personal information, and selects the analysis target data including personal information as candidate data. 2. It is possible to include a data selection unit.

The candidate data selection unit and the server selection unit may further include a server management unit that sets servers included in the server list already registered in the database as target servers and manages the server list for the database according to external input. do.

When constructing a server, if the server management unit determines that the server includes at least one of a member management process and a service process through personal information, the server management unit records the administrator account of the server established through the administrator terminal of the control server. It is possible to request the addition of a server built into the server list and add a server to the server list according to return data from the administrator account of the server that received the request.

The server management unit is capable of matching and managing policies related to personal information management of target servers included in the server list and regulations related to personal information impact assessment of administrative agencies for each server.

The server selection unit calculates the number of information subjects of personal information for the candidate data based on the personal identification information included in the text information included in the candidate data, and when the calculated number of information subjects reaches a preset threshold number, The function is to select the target server as the evaluation target server.

The preset threshold number is a ratio set based on historical data on the personal information management ratio of existing servers with respect to the personal information management ratio, which is the ratio of the number of stored personal information to the inflow, and is a preset threshold ratio for each type of server. It is possible to calculate it by applying the personal information impact assessment standard to the number of personal information collected.

The monitoring result management unit includes an access permission setting unit that receives access permission to a memory storing personal information as internal data of the evaluation target server from an administrator account of a server; A security situation detection unit that determines the security situation of the memory where personal information is stored using the issued access authority; An information management monitoring unit that uses the issued access rights to identify information on the personal information management process, such as the storage period of personal information, disposal criteria, and configuration information of the interface where personal information is input; And an information disposal detection unit that uses the issued access authority to determine whether the disposal process for personal information subject to disposal is normally performed in accordance with the policy of the server being evaluated and the personal information disposal standards under the Personal Information Protection Act. It is possible.

Monitoring data generated as a result of performing the functions of the security situation detection unit, the information management monitoring unit, and the information disposal detection unit, and a data management process that is inconsistent with the policy of the server being evaluated as a result of the generation of the monitoring data is detected, or a security situation is detected. It is possible to further include a report management unit that generates at least one of the threat notification data generated when a threat is detected as the report information and transmits it to the administrator terminal of the evaluation target server.

The report management unit is capable of generating the threat notification data when the non-installation of the security agent that is the installation target set according to the server to be evaluated or an abnormal access attempt to the memory where the personal information of the server to be evaluated is detected is detected. .

According to the present invention, data flowing into the server is monitored in the form of an intelligent gateway, data corresponding to personal information is selected from this, and a server subject to evaluation that is subject to a personal information impact assessment is selected based on the number of data inflow, etc. Through this, it is possible to automatically identify servers subject to personal information impact assessment without consuming human resources such as separate personal information impact assessors, and through automatic evaluation of personal information management, etc., personal information impact An evaluation is performed.

According to this, personal information impact assessments on servers, which have rapidly increased, can be automatically performed without separate manpower dispatch or system construction, thereby establishing security for personal information without blind spots in various network environments that handle personal information. There is an effect of being able to perform monitoring.

Figure 1 is a configuration diagram of an intelligent gateway-based automatic personal information impact assessment management system according to an embodiment of the present invention.
Figure 2 is a diagram for explaining the specific configuration and functional performance of a candidate data selection unit according to an embodiment of the present invention.
3 and 4 are diagrams for explaining the function of managing a server list in a server management unit according to the implementation of an embodiment of the present invention.
Figure 5 is a diagram for explaining specific functions of a server selection unit according to an embodiment of the present invention.
Figure 6 is a diagram illustrating the specific configuration and functional performance of a monitoring result management unit according to an embodiment of the present invention.
7 is an example of report information generated according to implementation of an embodiment of the present invention.
8 is an example of the internal configuration of a computing device according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS Various embodiments and/or aspects are now disclosed with reference to the drawings. In the following description, for purposes of explanation, numerous specific details are set forth to facilitate a general understanding of one or more aspects. However, it will also be appreciated by those skilled in the art that this aspect(s) may be practiced without these specific details. The following description and accompanying drawings set forth in detail certain example aspects of one or more aspects. However, these aspects are illustrative and some of the various methods in the principles of the various aspects may be utilized, and the written description is intended to encompass all such aspects and their equivalents.

As used herein, “embodiment,” “example,” “aspect,” “example,” etc. may not be construed to mean that any aspect or design described is better or advantageous than other aspects or designs. .

Additionally, the terms "comprise" and/or "comprising" mean that the feature and/or element is present, but exclude the presence or addition of one or more other features, elements and/or groups thereof. It should be understood as not doing so.

Additionally, terms containing ordinal numbers, such as first, second, etc., may be used to describe various components, but the components are not limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, a first component may be referred to as a second component, and similarly, the second component may be referred to as a first component without departing from the scope of the present invention. The term and/or includes any of a plurality of related stated items or a combination of a plurality of related stated items.

In addition, in the embodiments of the present invention, unless otherwise defined, all terms used herein, including technical or scientific terms, are as commonly understood by a person of ordinary skill in the technical field to which the present invention pertains. It has the same meaning. Terms defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and unless clearly defined in the embodiments of the present invention, have an ideal or excessively formal meaning. It is not interpreted as

Figure 1 is a configuration diagram of an intelligent gateway-based automatic personal information impact assessment management system according to an embodiment of the present invention, and Figure 2 is a diagram illustrating the specific configuration and function performance of the candidate data selection unit according to an embodiment of the present invention. Figures 3 and 4 are diagrams for explaining the function of managing the server list in the server management unit according to the implementation of an embodiment of the present invention, and Figure 5 is a diagram for explaining the specific function of the server selection unit according to an embodiment of the present invention. Figure 6 is a diagram for explaining the specific configuration and functional performance of the monitoring result management unit according to an embodiment of the present invention, and Figure 7 is an example of report information generated according to the implementation of an embodiment of the present invention. In the following description, a number of drawings will be referred to together for explanation of various embodiments and detailed technical features (components) of the present invention.

Referring to the above drawings together, the intelligent gateway-based automatic personal information impact assessment management system 10 (hereinafter referred to as 'system of the present invention') according to an embodiment of the present invention includes a candidate data selection unit 11 and a server. It is characterized by including a selection unit (12) and a monitoring result management unit (13). The system 10 of the present invention may further include a server management unit 14 according to another embodiment of the present invention.

The candidate data selection unit 11 is connected to the target server, monitors analysis target data transmitted and received from the target server, and performs the function of selecting data containing personal information among the analysis target data as candidate data.

In the present invention, the target server becomes a unit for providing a service or a unit for performing a function, and transmits and receives various data to and from the network 40, and through this, processes and manages (stores, modifies and deletes) the data. It refers to nodes on the network 40 that provide services implemented through process applications stored on a server to users or perform specific functions.

The target server is the same as or included in the computing device shown in FIG. 8, which will be described later, including a computing device in which an application or program that specifically performs a specific process is stored or executed, and a memory in which processed and managed data is stored. It may consist of groupware that combines multiple computing devices.

Data subject to analysis refers to all data transmitted from or received by the target server, and especially refers to all data that may include personal information, for example, by including encrypted text information.

The candidate data selection unit 11 is implemented as an intelligent gateway-type device connected to the server 20, and analyzes all data transmitted and received through the server 20 to determine personal information among the contents contained therein. It performs the function of selecting and analyzing data including as candidate data.

In order to perform this specific function, the candidate data selection unit 11 can perform a specific process by including a detailed configuration as shown in FIG. 2.

Referring to FIG. 2, the candidate data selection unit 11 may be configured to include a first data selection unit 111 and a second data selection unit 112. The first data selection unit 111 performs a function of selecting data to be analyzed whose target address is an online address corresponding to an interface where personal information is used among a plurality of online addresses corresponding to the target server.

As shown in FIG. 3, data flowing into the server 20 through the network 40 has one of a plurality of addresses assigned to the server 20 as the destination address, and is transmitted to the server 20 on the network 40. It is transported towards (20). This address information may be stored, for example, in a header file (H) of daily unit data, or may be configured as information (addr1, addr2) linked thereto.

The first data selection unit 111 aims to select the online address (addr1) corresponding to the interface or memory where personal information is used or stored, among the plurality of data flowing into the server, by identifying the address information of such data. The data subject to analysis, which is an address, is selected primarily on the assumption that it may contain personal information.

In other words, interfaces, programs, websites, etc. with various addresses can be managed on the server. Among the data flowing in, there may be data that does not contain personal information, and such data is transmitted to the address where personal information is used. Since this will not be the case, the first data selection unit 111 filters this data and efficiently determines whether personal information is included in the data.

The second data selection unit 112 analyzes the text information of the analysis target data selected by the first data selection unit 111 according to a natural language processing algorithm, determines whether it contains personal information, and determines whether the text information of the analysis target data selected by the first data selection unit 111 contains personal information. It performs the function of selecting data subject to analysis as candidate data.

The second data selection unit 112 selects the content of data primarily selected by the second data selection unit 111 and transmitted toward the online address where personal information is used, that is, contents (C1, C2, C3). Through detailed analysis, it is determined whether the data contains actual personal information, and the data containing personal information (C3) is selected as the candidate data described above.

When candidate data is selected, the second data selection unit 112 transmits at least the counting number of the candidate data and the contents (C3) of the candidate data as information about this to the server selection unit 12, to be described later. Ensure that the function of (12) can be performed.

In the present invention, the natural language processing algorithm collectively refers to an algorithm that analyzes data about specific content and determines whether the data contains personal information. For example, by analyzing text data included in the content through morphological analysis, it is possible to determine whether personal identification information, such as a resident registration number, a person's real name, or an address, is included. Alternatively, the content is restored through decryption of the content, and through analysis thereof, it is determined whether the data contains personal information.

That is, in the present invention, the second data selection unit 112 can determine the contents by performing decryption of the encrypted data at the source of personal information as personal information is included, and at this time, the decrypted and decrypted data As described above, the deletion process can be carried out through a process such as determining whether personal information is included and immediately deleting it. On the other hand, as will be described later, if the criterion for judging the number of personal information management is the number of subjects of personal information, the contents may be re-encrypted and transmitted to the server selection unit 12, or the contents may be sent to the server selection unit 12 in an unencrypted state. The transmission process may proceed. At this time, if the process of transmitting to the server selection unit (!2) is carried out in an unencrypted state, the candidate data selection unit 11 and the server selection unit 12 are managed separately as one device through an external security network. It can be implemented.

The server selection unit 12 monitors the transmission and reception history of the candidate data selected by the candidate data selection unit 11 to the target server 20, and determines the subject of personal information impact assessment according to the number of candidate data flowing into the server. It performs the function of selecting the target server as the evaluation target server.

That is, the server selection unit 12 is a history of transmission and reception of data selected as candidate data on a specific server 20 basis by the candidate data selection unit 11, for example, candidate data flowing into the specific server 20. By monitoring the number of inflows, it is determined which servers are subject to personal information impact assessment based on the number of inflows, and a process is performed to select the server as the server subject to evaluation, that is, the server subject to personal information impact assessment.

At this time, the candidate data selection unit 11 and the server selection unit 12 may proceed with the above-described process for all servers existing on the network 40, but the performance of the system 10 of the present invention and the network 40 Depending on the size of the system 10 of the present invention, a plurality of systems 10 may be deployed according to the configuration of the network 40.

In this case, the server on which the system 10 of the present invention performs its function may be determined, and the specific system 10 will be implemented to perform an efficient personal information impact assessment by only monitoring the servers. You can.

To this end, a specific database (not shown) can be connected to the system 10 of the present invention, and the database includes target servers 20 that perform the functions of the candidate data selection unit 11 and the server selection unit 12. A list of servers can be managed.

In other words, the candidate data selection unit and the server selection unit set servers included in the server list already registered in the database as target servers, analyze the analysis target data transmitted and received thereto, select them as candidate data, and count the number of inflows. It can be analyzed.

In this environment, the system 10 of the present invention may further include a server management unit 14 as shown in FIG. 3. The server management unit 14 first manages the server list for the database according to external input.

In the present invention, external input refers to input related to accessing and editing the server list managed in the database from an account or terminal authorized to access and edit the server list managed in the database. For example, from the administrator terminal 50 of the system 10 of the present invention or the administrator terminal (not shown) of an administrative agency, the administrator terminal 30 of each specific server 20, or an account authorized for use at each terminal. Input data may be included in external input.

As shown in FIG. 3, the server list 100 includes identification information for the servers (S1 and S2) and unit units (I1 to I6) corresponding to unit addresses (addr1 to addr6) as described above for each server. Information about and the address of each unit may be included.

At this time, when the construction of a server is detected in the network area managed by the unit system 10 of the present invention, or a signal notifying that the server is built is received from the manager terminal 30 of the server, the server management unit (14) determines whether the server includes at least one of a member management process and a service process through personal information.

The determination process automatically determines the configuration of the server based on detectable information on the network 40, analyzes data received from the manager terminal 30, or receives information from the manager terminal 30. It can be judged based on data about the server’s attribute information.

As a result of the judgment, if it is determined that the server is utilizing personal information, the control server, that is, the administrator account of the server established through the administrator terminal 50 or the server established in the server list on the administrator terminal 30 You can request to add a server and add a server to the server list according to return data from the administrator account of the server that received the request.

At this time, requesting to add a server will be understood as requesting to return information about the server stored in the database 100 managed by the server management unit 14, and the return data is the request above. This is information received from the manager terminal 30 in response to a signal, and will be understood as data containing all information about the above server.

Meanwhile, administrative agencies, etc. can manage the above-mentioned personal information protection policies through laws and regulations, and these personal information protection policies may be applied differently depending on the functions or characteristics of each server.

In this case, separate rules for personal information impact assessment must be applied to each server, and as a result, the periodically updated personal information protection policy and rules for personal information impact assessment are provided to the monitoring result management department (13), which will be described later. There will be a need to transmit information.

To this end, the server management unit 13, as shown in FIG. 4, adds personal information impact assessment-related regulations (CR1) as information received from administrative agencies, etc. to the information on the target servers (S1) included in the above-mentioned server list. ) can be managed by matching each server. At the same time, policies related to the management of personal information defined by each server in accordance with laws and regulations can also be matched and managed.

Under this environment, the server selection unit 12 determines whether the corresponding server 20 is an evaluation server subject to a personal information impact assessment through the number of candidate data inflows, as described above. Specifically, the server subject to the personal information impact assessment can be defined as a server with, for example, 50,000 or more pieces of personal information managed as described above, and the server selection unit 12 also uses this to collect personal information. Determine whether it is subject to impact assessment.

That is, the server selection unit 12 calculates the number of information subjects of personal information for the candidate data based on the personal identification information included in the text information included in the candidate data, and the calculated number of information subjects is equal to the preset threshold number. When it reaches , the target server 20 can be selected as the server to be evaluated.

Meanwhile, candidate data containing personal information is data flowing into the target server 20 as described above. In other words, the number of candidate data flowing in may generally be proportional to the number of personal information stored in the memory 21 where the personal information of the corresponding server 20 is managed, but the number of personal information managed in the memory 21 is exactly the same. does not mean This is because personal information coming from the server through candidate data is simply stored temporarily and deleted immediately, or is deleted from the memory 21 after being stored for a certain period of time.

In order to reflect these characteristics, in the present invention, the above-described critical number is determined from the number of incoming data in relation to the number of personal information managed in the actual memory 21, so that the evaluation target that is the subject of the personal information impact assessment is more accurate. You can choose a server.

For this purpose, in one embodiment of the present invention, the preset threshold number is, as shown in FIG. 5, the number of existing servers with respect to the personal information management ratio, which is the ratio of the number of personal information inflow (IPI) to the number of storage (PI). It is a ratio set based on historical data on the personal information management ratio, and can be calculated by applying the threshold ratio preset for each server type to the number of personal information collected based on the personal information impact assessment.

Since personal information management rules and applicable personal information protection laws may vary depending on the type of server, average storage is based on incoming (IPI) data and deleted (DPI) data depending on the type of server. A function (201, API) for the number of personal information can be built, and the function can use the type (S), inflow (IPI), and number of deletions (DPI) of each server as variable values according to the above-mentioned characteristics. there is.

When these function values are constructed according to the type of each server, the server selection unit 12 uses them to select the evaluation target server according to the number of data inflows.

When a server subject to evaluation is selected by the server selection unit 12, the monitoring result management unit 13 connects to the server subject to evaluation, analyzes the collection and management status of personal information, and personal information impact assessment data generated as a result of the analysis. Based on this, it performs the function of generating report information on personal information impact assessment and transmitting it to the administrator terminal 30 of the server subject to evaluation.

Specifically, personal information impact assessment refers to the process of monitoring personal information management rules, security, and actual management processes to determine whether accurate policies for personal information protection are established and applied.

To this end, the monitoring result management unit 13 may be implemented to include detailed components as shown in FIG. 6 according to the performance of each function. The detailed configuration of the monitoring result management unit 13 is approached as shown in FIG. 6. It includes a permission setting unit 131, a security situation detection unit 132, an information management monitoring unit 133, an information disposal detection unit 134, and may optionally include a report management unit 135.

The access permission setting unit 131 performs a function of issuing access permission to the memory 21 in which personal information is stored, which is internal data of the server to be evaluated, from the administrator account 30 of one server. This will be understood as a process performed when a security agent, etc. is installed, or when specific authority is required to access the memory 21 according to the operating policy of each server.

The security situation detection unit 132 uses the issued access authority to access the memory 21 where personal information is stored and performs a function of determining the security situation thereof. For example, by analyzing the data stored in the memory 21, header files, etc. can be analyzed to determine whether the data has been encrypted by a specific security agent, or the network situation for the memory 21 can be determined to determine the memory ( 21) Determine whether a specific security agent is installed and running on the access path.

Meanwhile, the information management monitoring unit 133 uses the issued access authority to determine the storage period of personal information, disposal criteria, and configuration information of the interface where personal information is input as information about the personal information management process. Perform.

In other words, it is determined whether the security policy being applied in the server 20 is applied, whether the security policy complies with the regulations set for each server, and whether regulations regarding the use of personal information are applied in the configuration of each interface. It is to determine whether or not. For example, it is determined whether information on the use and management of personal information is normally displayed on the membership registration page, and whether the content complies with the correct policy is determined through text analysis.

The information disposal detection unit 134 uses the issued access authority to determine whether the disposal process for personal information subject to disposal is normally performed in accordance with the policy of the server being evaluated and the personal information disposal standards under the Personal Information Protection Act. performs its function.

In other words, the management policy for input personal information may be implemented differently depending on the type of server and the interface or API operated on the server, and in this case, the storage and disposal policy after use of personal information may be applied. In this case, proper disposal of personal information is a key process in managing personal information.

The information disposal detection unit 134 is a component that detects the above process and detects whether the personal information disposal policy on the server is being implemented according to regulations. This can be implemented through monitoring log data for storing and deleting data for each memory 21.

Meanwhile, if monitoring, or personal information impact assessment, is performed according to the performance of the functions of each of these detailed components, the results will be derived. Accordingly, a situation such as a dangerous situation is detected or a personal information impact assessment of the relevant server occurs. If a determination is made as to whether normal operation of the server is being performed, it is necessary to transmit this to the administrator of each server to provide guidance on the management of personal information or to submit it to administrative agencies to enable smooth operation of the server. There is.

To this end, in one embodiment of the present invention, the monitoring result management unit 13 may further include a report management unit 135 as described above. The report management unit 135 determines the monitoring data generated as a result of performing the functions of the security situation detection unit 132, the information management monitoring unit 133, and the information disposal detection unit 134, and the policy of the server being evaluated as a result of the generation of the monitoring data. When an inconsistent data management process is detected or a threat to the security situation is detected, at least one of the generated threat notification data is generated as report information and transmitted to the administrator terminal 30 of the server being evaluated.

At this time, in particular, the threat notification data transmitted from the report management unit 135 is generated when the non-installation of the security agent that is the installation target set according to the server to be evaluated or an abnormal access attempt to the memory where the personal information of the server to be evaluated is detected is detected. It may be transmitted to the manager terminal 30.

This report information may be configured, for example, as the screen 300 shown in FIG. 7. It can be generated as a report for a certain period of time (D1) for a specific server (S1), and includes a menu to check whether the security agent is installed and running, a menu to view the history if a dangerous access is detected, each It may include a menu where you can check the management status of the server's policy and detailed information about it, a menu where you can check whether the policy is being properly implemented and information on the necessary management process, etc., and the managed individual The number (N) of information (PI) is also confirmed, allowing you to determine whether the server you are operating is subject to a personal information impact assessment.

In addition, it displays the number of managed personal information (PI) and data (discarded PI) deleted during the relevant period (D1), as well as personal information that should be deleted but has not been properly disposed of, and informs that deletion is necessary, so that accurate personal information is displayed. It is possible to provide guide information to enable information management.

According to various embodiments of the present invention as described above, data flowing into the server is monitored in the form of an intelligent gateway, data corresponding to personal information is selected from this, and personal information impact assessment is performed based on the number of data inflows. By selecting the target server for evaluation, it is possible to automatically identify the server subject to the personal information impact assessment without consuming human resources such as a separate personal information impact assessor, and automatically provide information on the management of personal information, etc. Through personal evaluation, a personal information impact assessment is performed.

According to this, personal information impact assessments on servers, which have rapidly increased, can be automatically performed without separate manpower dispatch or system construction, thereby establishing security for personal information without blind spots in various network environments that handle personal information. There is an effect of being able to perform monitoring.

FIG. 8 illustrates an example of the internal configuration of a computing device according to an embodiment of the present invention. In the following description, descriptions of unnecessary embodiments that overlap with the description of FIGS. 1 to 7 described above will be omitted. Do this.

As shown in FIG. 8, the computing device 10000 includes at least one processor 11100, a memory 11200, a peripheral interface 11300, and an input/output subsystem ( It may include at least an I/O subsystem (11400), a power circuit (11500), and a communication circuit (11600). At this time, the computing device 10000 may correspond to a user terminal (A) connected to a tactile interface device or the computing device (B) described above.

The memory 11200 may include, for example, high-speed random access memory, magnetic disk, SRAM, DRAM, ROM, flash memory, or non-volatile memory. there is. The memory 11200 may include software modules, instruction sets, or various other data necessary for the operation of the computing device 10000.

At this time, access to the memory 11200 from other components such as the processor 11100 or the peripheral device interface 11300 may be controlled by the processor 11100.

The peripheral interface 11300 may couple input and/or output peripherals of the computing device 10000 to the processor 11100 and the memory 11200. The processor 11100 may execute a software module or set of instructions stored in the memory 11200 to perform various functions for the computing device 10000 and process data.

The input/output subsystem 11400 can couple various input/output peripheral devices to the peripheral interface 11300. For example, the input/output subsystem 11400 may include a controller for coupling peripheral devices such as a monitor, keyboard, mouse, printer, or, if necessary, a touch screen or sensor to the peripheral device interface 11300. According to another aspect, input/output peripheral devices may be coupled to the peripheral interface 11300 without going through the input/output subsystem 11400.

Power circuit 11500 may supply power to all or some of the terminal's components. For example, power circuit 11500 may include a power management system, one or more power sources such as batteries or alternating current (AC), a charging system, a power failure detection circuit, a power converter or inverter, a power status indicator, or a power source. It may contain arbitrary other components for creation, management, and distribution.

The communication circuit 11600 may enable communication with another computing device using at least one external port.

Alternatively, as described above, if necessary, the communication circuit 11600 may include an RF circuit to transmit and receive RF signals, also known as electromagnetic signals, to enable communication with other computing devices.

This embodiment of FIG. 8 is only an example of the computing device 10000, and the computing device 11000 omits some components shown in FIG. 8, further includes additional components not shown in FIG. 8, or 2 It may have a configuration or arrangement that combines more than one component. For example, a computing device for a communication terminal in a mobile environment may further include a touch screen or a sensor in addition to the components shown in FIG. 8, and may include various communication methods (WiFi, 3G, LTE) in the communication circuit 1160. , Bluetooth, NFC, Zigbee, etc.) may also include a circuit for RF communication. Components that may be included in the computing device 10000 may be implemented as hardware, software, or a combination of both hardware and software, including one or more signal processing or application-specific integrated circuits.

Methods according to embodiments of the present invention may be implemented in the form of program instructions that can be executed through various computing devices and recorded on a computer-readable medium. In particular, the program according to this embodiment may be composed of a PC-based program or a mobile terminal-specific application. The application to which the present invention is applied can be installed on a user terminal through a file provided by a file distribution system. As an example, the file distribution system may include a file transmission unit (not shown) that transmits the file according to a request from the user terminal.

The device described above may be implemented with hardware components, software components, and/or a combination of hardware components and software components. For example, devices and components described in embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA), It may be implemented using one or more general-purpose or special-purpose computers, such as a programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions. A processing device may execute an operating system (OS) and one or more software applications that run on the operating system. Additionally, a processing device may access, store, manipulate, process, and generate data in response to the execution of software. For ease of understanding, a single processing device may be described as being used; however, those skilled in the art will understand that a processing device may include multiple processing elements and/or multiple types of processing elements. It can be seen that it may include. For example, a processing device may include a plurality of processors or one processor and one controller. Additionally, other processing configurations, such as parallel processors, are possible.

Software may include a computer program, code, instructions, or a combination of one or more of these, which may configure a processing unit to operate as desired, or may be processed independently or collectively. You can command the device. Software and/or data may be used by any type of machine, component, physical device, virtual equipment, computer storage medium or device to be interpreted by or to provide instructions or data to a processing device. It can be embodied permanently or temporarily. Software may be distributed over networked computing devices and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be specially designed and configured for the embodiment or may be known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

As described above, although the embodiments have been described with limited examples and drawings, various modifications and variations can be made by those skilled in the art from the above description. For example, the described techniques are performed in a different order than the described method, and/or components of the described system, structure, device, circuit, etc. are combined or combined in a different form than the described method, or other components are used. Alternatively, appropriate results may be achieved even if substituted or substituted by an equivalent. Therefore, other implementations, other embodiments, and equivalents to the claims also fall within the scope of the claims described below.

Claims (10)

An intelligent gateway-based automatic personal information impact assessment management system implemented as a computing device including one or more processors and one or more memories that store instructions executable by the processor,
a candidate data selection unit that is connected to the target server, monitors analysis target data transmitted and received from the target server, and selects data containing personal information among the analysis target data as candidate data;
Server selection that selects the target server subject to personal information impact assessment as the evaluation target server according to the number of candidate data flowing into the server through monitoring the transmission and reception history of the candidate data selected by the candidate data selection department. government; and
By accessing the evaluation target server selected by the above server selection department, analyzing the collection and management status of personal information, and generating report information on the personal information impact assessment based on the personal information impact assessment data generated as a result of the analysis, It includes a monitoring result management unit that transmits to the administrator terminal of the evaluation target server,
The monitoring result management department,
As internal data of the server subject to evaluation, an access authority setting unit that receives access authority to a memory storing personal information from an administrator account of a server;
A security situation detection unit that determines the security situation of the memory where personal information is stored using the issued access authority;
An information management monitoring unit that uses the issued access rights to identify information on the personal information management process, such as the storage period of personal information, disposal criteria, and configuration information of the interface where personal information is input; and
An information destruction detection unit that uses the issued access rights to determine whether the destruction process for personal information subject to destruction is normally performed in accordance with the policy of the server being evaluated and the personal information destruction standards under the Personal Information Protection Act. Features an intelligent gateway-based automatic personal information impact assessment management system.
According to paragraph 1,
The candidate data selection unit,
a first data selection unit that selects analysis target data having as a destination address an online address corresponding to an interface where personal information is used among a plurality of online addresses corresponding to the target server; and
A second part that analyzes the text information of the analysis target data selected by the first data selection unit according to a natural language processing algorithm, determines whether it contains personal information, and selects the analysis target data including personal information as candidate data. An intelligent gateway-based automatic personal information impact assessment management system comprising a data selection unit.
According to paragraph 1,
The candidate data selection unit and server selection unit,
Set the server included in the server list already registered in the database as the target server,
An intelligent gateway-based automatic personal information impact assessment management system further comprising a server management unit that manages the server list for the database according to external input.
According to paragraph 3,
The server management department,
When building a server, if it is determined that the server includes at least one of a member management process and a service process through personal information, the server list is established in the administrator account of the server established through the administrator terminal of the control server. An intelligent gateway-based personal information impact assessment automatic management system that requests the addition of a server and adds the server to the server list according to return data from the administrator account of the server that received the request.
According to paragraph 3,
The server management department,
An intelligent gateway-based automatic personal information impact assessment management system that matches and manages policies related to personal information management of target servers included in the server list and personal information impact assessment-related regulations of administrative agencies for each server.
According to paragraph 1,
The server selection unit,
The number of information subjects of personal information for the candidate data is calculated based on the personal identification information included in the text information included in the candidate data, and when the calculated number of information subjects reaches a preset threshold number, the target server is sent to the above. An intelligent gateway-based personal information impact assessment automatic management system that selects servers for evaluation.
According to clause 6,
The preset critical number is,
The personal information management ratio, which is the ratio of the number of stored personal information to the inflow of personal information, is a ratio set based on historical data on the personal information management ratio of existing servers. An intelligent gateway-based personal information impact assessment automatic management system that is calculated by applying the number of information collected.
delete According to paragraph 1,
Monitoring data generated as a result of performing the functions of the security situation detection unit, the information management monitoring unit, and the information disposal detection unit, and a data management process that is inconsistent with the policy of the server being evaluated as a result of the generation of the monitoring data is detected, or a security situation is detected. An intelligent gateway-based personal information impact assessment further comprising a report management unit that generates at least one of the threat notification data generated when a threat is detected as the report information and transmits it to the administrator terminal of the evaluation target server. Automatic management system.
According to clause 9,
The report management department,
An intelligent gateway-based system that generates the threat notification data when the non-installation of the security agent that is the installation target set according to the server to be evaluated or an abnormal access attempt to the memory storing the personal information of the server to be evaluated is detected. Automatic personal information impact assessment management system.