KR20100003380A

KR20100003380A - How to query encrypted database information

Info

Publication number: KR20100003380A
Application number: KR1020080063241A
Authority: KR
Inventors: 이진협
Original assignee: 주식회사 사람인
Priority date: 2008-07-01
Filing date: 2008-07-01
Publication date: 2010-01-11

Abstract

The present invention is designed to enable a member to query an encrypted database. When a member encrypts and stores his or her personal information in a database, separate personal information is stored in an encryption server located at a separate location on the network. It is to configure the redundancy of information by storing it. Separately stored information is recorded by encrypting a combination of a virtual alias, member's personal information for target marketing, a decryption key and a member's key for searching personal information, and important information such as social security number, telephone number, address, and email. It is characterized by not recording. All database inquiries are made by separately storing member information to ensure the performance and processing speed of the database server.

Through the present invention, it is possible to encrypt and store the member information in the database, and the purpose is to reinforce the best security level with the security equipment and DB security policy.

Description

How to query encrypted database information {omitted}

In order to maintain the security of the member information, the member information in the database may be encrypted and registered using a patient method or other encryption technology, not a general ASCII code. At this time, encrypted database information cannot be read as it is by standard inquiry technology. However, if the decryption key is the same for all members, there is no problem, but if each member has the decryption key, there will be a problem in the inquiry.

The present invention devised a method for inquiring member information of a database when a member has a decryption key for each member. The present invention is a method that can be inquired while maintaining the highest security level without any processing speed.

The present invention does not mean a replica (aka WIEW) based on a database original. When a member registers the member information, the information is based on an encrypted table and virtual member important information, and a table for inquiry including detailed information is created and used. The practice of the present invention is that the original information is placed on the database server, and the member information that can be viewed normally is placed on an encryption server with a higher level of security, thereby making it impossible to decrypt the database only by hacking the database.

In the present invention, when the member information is encrypted and recorded in the database, it is difficult or impossible to directly query the encrypted and recorded database when querying the member information in the operation module of the site. In this case, we devised an easy way to query the database. The main contents of the present invention are to place the member information of the encrypted database in the encryption server with the duplicated information recorded in the normal ASCII code, query it, obtain the member information, and pass it to the database operation module. To deal with.

The first object of the present invention is to provide a method for easily inquiring a database in which member information is recorded as a cipher text, and in the worst case, by encrypting and processing member information and member transaction information on a network, the encrypted member information and normal transaction Even if information is leaked, the purpose of protecting personal information is to maintain the highest level of security as well as to provide quick database search.

In order to achieve this purpose, when the member encrypts his information in the database and stores it, the encryption server stores it separately in normal ASCII code. The information stored in the encryption server should not be stored as key information on personal identity, such as social security number, telephone number, email address, etc., and the name should be stored using a virtual name rather than a real name. In addition, the database is to encrypt and store the membership number and decryption key for linkage with the original member information. In this way, except for important information of personal information, only general information, that is, information necessary for site activity and transaction, is used to create an unencrypted table.

The present invention is designed and created to easily access the encrypted recorded database to quickly look up, and in addition to the database security policy, it is easy to encrypt the stored information of the database itself, as well as to the security level of the site. The external reliability can be shown. The effect will be great.

In order to explain a method for querying an encrypted database applied to the present invention, the representative diagram 1 and the specification diagram 1 are referred to. . In the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. The following terms are terms set in consideration of functions in the present invention, which may vary depending on the intention or custom of the producer, and their definitions should be made based on the contents throughout the specification.

Representative FIG. 1 shows a relationship in which an encryption server communicates with a database server, and specification FIG. 1 shows a difference and configuration method of original encrypted member information of a database from normal member information of an encryption server.

Representative diagram 1 is as follows.

A member accesses a web site and performs an activity, and the web server calculates a series of activities and records them in a database. In this case, the web server divides the general member inquiry and personal information inquiry into the database and requests the encryption server. When the general member information is requested, the database requests the general membership information to the encryption server through the general inquiry module (1.0). The encryption server receiving the information request passes the member information to the database server through the general member information coordination module (1.1), and the database server processes this information and expresses it. When requesting personal member information (2.0), the encryption server decrypts the encrypted member information of the database server with the decryption key of the desired member (2.1) to process it into normal information and returns it to the personal transaction activity module (2.0) of the database server. will be. Therefore, this series of routines is done through the replicated member information of the encryption server.

Referring to Figure 1 as follows.

When a member saves his / her personal information in a database, the encrypted member information is stored in the member table and the unencrypted information is stored in a separate table at the same time. In this case, the separate information stored in the encryption server does not store the main items of personal information, namely, real name, social security number, mobile phone number, address, etc., and store information necessary for operating the site, that is, information necessary for target marketing. Will be. However, in order to decrypt the original data of the database, the decryption key is encrypted and stored together with the member key. This duplicated table is not a virtual table (aka VIEW), but a created table. When the original table is changed, the system automatically updates the membership table of the encryption server. In this way, all the member information needed in the database is inquired in the replicated member information table of the encryption server, and information requiring personal identity is decrypted in the encrypted database server through the encryption member's personal member inquiry module, and the normal member information is again restored. It is processed and returned. This system configuration not only enables encrypted database information query but also guarantees the performance and processing speed of the database.

The present invention enables a general and individual inquiry of encrypted member information, and is created in consideration of the processing speed and the performance of the database, and provides a method for enabling the recording of encrypted information in the database itself for the best security. By strengthening the security level of each site, it is possible to securely decode the member's important personal information and transaction details in the event of database leakage caused by hacking or internal action, and improve the security of the site. In other words, it is likely to be used industrially by supplementing the weaknesses of the Internet and encouraging members to conduct safe Internet activities.

1. Representative figure 1: Dataflow diagram showing how to inquire between database server and encryption server

2. Specification Figure 1: Entity table information showing difference between encrypted information in database and unencrypted information in encryption server

Claims

In searching encrypted member information,

When a member saves his or her information, it is encrypted and stored in the database server, and at the same time, the encryption server stores the detailed information necessary for the target marketing together with the virtual alias in a separate table, and uses the information of the encryption server at the time of inquiry. To query compiled database information

The method according to claim 1

When storing the member information separately in the encryption server, using a virtual alias, and how to query the encrypted member information, characterized in that does not store important personal information such as phone number, social security number, email.

The method according to claim 1

When storing the member information separately in the encryption server, a method of querying the encrypted member information characterized in that the combination of the decryption key and the member key in the encryption server and stored in order to identify the main personal details of the individual.