KR20160028952A - an apparatus for protecting private information, a method of protecting private information, and a storage medium for storing a program protecting private information - Google Patents

Abstract

According to an embodiment of the present invention, a private information protection method includes the steps of: executing a private information protection program; receiving information regarding a stored electronic document by using the executed program; processing private information in a manner disabling the identification of the private information included in the electronic document; and storing the electronic document with the processed private information.

Description

A device for protecting personal information, a method for protecting personal information, and a storage medium for storing a program for protecting personal information, a method for protecting private information, and a storage medium for storing a program protecting private information information}

The present invention relates to a device for protecting personal information, a method for protecting personal information, and a storage medium for storing a program for protecting personal information.

Recently, personal or industrial damage is increasing due to leakage of personal information. In many cases, a document including personal information among the documents generated previously can be browsed through a communication network such as the Internet.

In many cases, personal information is included in electronic documents or the like in order to identify the authenticity of the document itself or the author or due to the nature of the content handled by the document.

Accordingly, in order to prevent leakage of personal information in the future, it is necessary to completely change the format of the document including the personal information. In such a case, a considerable cost may be incurred.

In addition, when an electronic document is already distributed or viewed, there is a problem in that the damage can be continuously increased since the leakage of personal information can not be prevented by the above measures.

However, if such an entire document is not distributed or browsed, it becomes difficult to share and transmit information in the information age. For example, a method of encrypting an entire document using an encryption key can be used. However, in this case, there is a problem that other information is shared and propagated in order to protect personal information.

An object of the present invention is to provide a device for protecting personal information that can protect personal information, a method for protecting personal information, and a storage medium for storing a program for protecting personal information.

Another object of the present invention is to provide a device for protecting personal information, a method for protecting personal information, and a storage medium storing a program for protecting personal information, which can easily protect personal information with a minimum cost.

It is another object of the present invention to provide a device for protecting personal information, which can protect only the personal information of the document so that other information including the document can be widely used, a method for protecting personal information, The present invention also provides a storage medium for storing a computer readable recording medium.

It is another object of the present invention to provide a device for protecting personal information that can identify only the personal information of the document without error and prevent the identified personal information from being identified in the electronic document after the personal information processing, And a storage medium storing a program for protecting information.

According to an embodiment of the present invention, there is provided an information processing method comprising the steps of: executing a program for protecting private information; Receiving information about a stored electronic document using the executed program; Processing the personal information so that the personal information included in the electronic document is not identified; And storing the electronic document in which the personal information is processed.

The method for protecting personal information may further include providing the user with an electronic document on which the personal information is processed.

The method for protecting personal information may further include selecting a personal information inspection item desired by a user to identify the personal information.

The method of protecting personal information may further include verifying personal information identified according to the selected inspection item.

Wherein the verifying step comprises: identifying personal information in the electronic document according to a personal information inspection item selected by the user; And receiving personal information desired to be protected from the user among the identified personal information.

In the embodiment of the present invention, the identified personal information is provided to the user in a list format, and the step of selecting the personal information desired to be protected from the user includes receiving a user selection request for the personal information desired to be protected in the list . ≪ / RTI >

The method for protecting personal information may further include storing metadata about the processed personal information and document information about the processed personal information according to the metadata.

The step of processing the personal information may convert the personal information on the electronic document or mask the personal information on the electronic document.

According to another aspect of the present invention, there is provided a program for executing a program for protecting private information, receiving information on an electronic document stored using the executed program, Processing the personal information, processing the personal information, and storing the electronic document in which the personal information is processed.

The program for protecting the personal information may further include a step of providing the electronic document on which the personal information is processed to the user and selecting the personal information inspection item desired by the user to identify the personal information.

The program for protecting the personal information may perform the verification of the personal information selected by the user.

In another aspect of the present invention, there is provided an information processing apparatus comprising: an interface unit for receiving a request for setting personal information from a user; And a program for protecting private information, receiving information on an electronic document stored using the executed program according to a setting request for the personal information received from the interface unit, And a personal information processor for processing the personal information so that the personal information included in the personal information is not identified.

The interface unit may receive environment setting information for allowing the user to set the inspection rule for the personal information, set the personal information inspection item, or set the personal information inspection file.

The apparatus for protecting personal information may further include a personal information rule storage unit for storing personal information rules for personal information.

The device protecting the personal information can verify the identified personal information by using the attribute of the personal information.

According to the embodiment of the present invention, personal information can be easily protected.

According to the embodiment of the present invention, personal information can be easily protected at a minimum cost.

According to the embodiment of the present invention, only the personal information in the document is protected, so that other information including the document can be widely used.

According to the embodiment of the present invention, it is possible to identify only the personal information in the document without error, and prevent the identified personal information from being identified in the electronic document after personal information processing.

1 is a block diagram illustrating an embodiment of a method for protecting personal information according to the present invention;
2 is a block diagram illustrating an embodiment of a method for processing personal information protection according to an embodiment of the present invention.
3 is a diagram illustrating an example of a regular expression as an embodiment for detecting personal information
FIG. 4 is a diagram illustrating an example of a program for protecting personal information, which is an interface of a personal information protection program according to an embodiment of the present invention,
5 is a diagram illustrating an execution screen in which a program for protecting personal information is updated according to an embodiment of the present invention
6 is a diagram illustrating a method of setting an environment in a program for protecting personal information according to an embodiment of the present invention
7 is a diagram illustrating screen output when a program for protecting personal information is executed according to an embodiment of the present invention
8 is a diagram illustrating a screen output when personal information is detected by executing a program for protecting personal information according to an embodiment of the present invention
9 is a diagram illustrating a result screen of an electronic document in which personal information is protected according to an embodiment of the present invention
FIG. 10 is a diagram illustrating a verification module for verifying personal information by personal information if the personal information is identified or detected according to an embodiment of the present invention.

Hereinafter, specific embodiments of the present invention will be described with reference to the accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 illustrates a diagram illustrating an embodiment of a method for protecting personal information in accordance with the present invention.

A program for protecting private information is executed (S110). This step is illustrated in FIG.

In step S120, the executed program may open or import an electronic document including personal information in the running program so as to receive information on the electronic document including the personal information. This step is illustrated in FIG.

Personal information is processed so that the personal information included in the electronic document is not identified (S130). This step is illustrated in Fig.

The electronic document processed so that the personal information is not identified may be stored (S140), and the electronic document processed with the personal information may be provided to the user (S150).

The embodiment of the present invention may further include a step of selecting a personal information inspection item desired by the user to identify the personal information to perform step S130. A detailed example of this step is illustrated in FIG.

The embodiment of the present invention can further perform the step of more accurately identifying the personal information and verifying the identified personal information so that the protection processing is not performed on the other information. A detailed example of this step is illustrated in FIGS. 7 and 10. FIG.

The step of verifying personal information according to an embodiment of the present invention includes: identifying personal information in the electronic document according to a personal information inspection item selected by the user; And selecting the personal information desired to be protected from the user among the identified personal information.

In this case, the identified personal information is provided to the list by the user according to the electronic document, and the step of selecting the personal information desired to be protected from the user includes receiving a user selection request for the personal information desired to be protected in the list . ≪ / RTI >

The method of protecting personal information according to an embodiment of the present invention may store metadata about the processed personal information and document information about the processed personal information according to the metadata. The document information according to the metadata is stored in a list format such as a separate Excel file so that the user can confirm the result of processing the personal information.

The metadata may describe the details of the processing of the personal information with respect to the electronic document. An embodiment of the present invention may provide the user with information about the metadata and the personal information processed in the electronic document .

As an example of processing the identified personal information so that it is not identified, it is possible to decode the identified personal information of the electronic document and to display or delete the document so that at least a part of the personal information is not identified.

2 is a diagram illustrating an embodiment of a method for processing personal information protection according to an embodiment of the present invention.

The illustrated embodiment may include an interface unit 110, a personal information rule storage unit 120, and a personal information processing unit 130.

For example, the personal information rule storage unit 120 may include information on the related protection regulations for the personal information to be protected. For example, it may be information about the legal provisions for which the items are referred to as being protected as personal information, and other information protection regulations may be stored for each country. Or various types of personal information that must be protected for privacy protection in the law or identification information of the personal information may be stored.

The update unit 111 of the interface unit 110 may update the personal information rules according to date, region, or country, while interfacing with the personal information rule storage unit 120. The rules for protecting personal information may be changed The personal information to be stored in the personal information rule storage unit 120 can be updated by the update unit 111. [ The update unit 111 is an optional component and the update may proceed according to modification of the artificial individual information. The interface unit 110 may cause the user to display a button for updating and allow the user to update or to update the personal information rule according to a predetermined period.

The environment setting unit 113 of the interface unit 110 may set a personal information rule to be identified in the electronic document, arbitrarily set a personal information inspection item to be identified, or set information on the personal information inspection file.

For example, the environment setting unit 113 may set preferences for personal information protection to change personal information rule settings according to a user or a situation. The environment setting unit 113 may set, for example, to protect only specific personal information from the personal information, or to protect personal information only with respect to a specific file. For example, the user may set a rule for personal information desired to be protected in the environment setting unit 113 or set a personal information item to be protected. In accordance with the environment set by the user through the environment setting unit 113, the user can protect the personal information set by calling a file desired to protect the personal information.

 The user may request to perform personal information protection through the personal information checking unit 115 after updating or setting the environment or by loading a desired file into the personal protection device. The personal information inspection unit 115 may set the personal information inspection area and allow the personal information processing unit 130 to perform processing that can protect personal information in the electronic document.

The personal information processing unit 130 can search personal information in the electronic document according to the personal information inspection request by the personal information inspection unit 115. According to an embodiment of the personal information protection apparatus, if the loaded file is found to have personal information, it is possible to confirm whether the personal information set by the corresponding personal information is correct according to various verification methods.

The personal information processing unit 130 may perform various verification methods for identifying and verifying personal information, which will be described later.

The personal information processing unit 130 processes the personal information in the electronic document so that at least a part of the personal information is not deleted or identified in the loaded electronic document.

Alternatively, for example, the user may be allowed to select a personal information item to be processed and then process the personal information selected by the user.

Then, the personal information processing unit 130 can perform the masking process or the deletion of the personal information in the electronic document. The masking process can prevent the identification of personal information by displaying an unidentified mask on the electronic document at the location of the electronic document where the personal information is located.

The personal information processing unit 130 can transmit the personal information inspection result to the user through the interface. The user can confirm the details of the personal information processed through the interface and separately store the processed electronic document so that the personal information is not identified. The electronic document processed so that the personal information is not identified may be stored in place of the electronic document of the original or may be stored by specifying the name of the electronic document to be stored separately from the original electronic document, It can also be stored with a name that identifies both documents.

The personal information processing unit 130 can verify and delete personal information protection items or process them so as not to be identified in order to detect personal information quickly. To this end, the personal information processor 130 may enable the personal information to be multiplexed and render an electronic document. The personal information processor 130 may filter individual information individually, determine whether to delete personal information items detected in units of files of the electronic document, or delete the personal information items according to a user's instruction.

An embodiment for detecting personal information included in an electronic document will be described below. 3 is a diagram illustrating an example of a regular expression as an embodiment for detecting personal information.

Regular expressions are pattern descriptions made using a meta language to describe special types of strings. Regular expressions describe a pattern of a particular string using metacharacters. In order to detect the personal information existing in the electronic text, the personal information detection items are summarized as below and regular expressions for detecting the corresponding detection items are defined.

In this drawing, a regular expression for a resident registration number, an e-mail, a personal telephone number, a personal address, and personal financial information is illustrated and shown as personal information. Therefore, when the character string pattern of the personal information as illustrated in FIG. 3 is displayed in the electronic document, the embodiment of the present invention can identify the character string pattern as personal information.

If the electronic document is not a text format but a graphic format, the personal information processor can identify the graphic string as text and identify the corresponding string pattern according to the drawing as personal information. In addition, it is possible to visually process the electronic document so as not to identify the personal information by using the location information in which the corresponding character string pattern is located.

4 is a diagram illustrating an example of a program for protecting personal information according to an exemplary embodiment of the present invention.

First, if the program is installed on the personal computer, the program for protecting personal information is executed by selecting the corresponding icon or the like. When a program for protecting personal information is executed, a description of the program can be exemplified as illustrated in this drawing. The program for protecting personal information can provide the user with notice information about the execution of the program as described in the example.

A program that protects personal information can provide the user with update information about the program. Users can update to the latest version when they select update information.

5 is a diagram illustrating an execution screen in which a program for protecting personal information is updated according to an embodiment of the present invention. If the program that protects your privacy does not have anything to update, the message "This is the latest version of the data" will be displayed, and if there is an update, the "You have the latest update version" Optionally, the program can upgrade the test items and program version.

In such a case, as illustrated in FIG. 2, the program may be updated according to the updated personal information related rule in the update database or the latest update executable file for the program.

6 is a diagram illustrating a method of setting an environment in a program for protecting personal information according to an embodiment of the present invention. An embodiment of the program for protecting personal information can display an icon capable of environment setting on the main screen. An embodiment of a program that protects personal information may provide a list from which a user may select from among items of personal information to be checked. For example, this may be resident registration number, e-mail, telephone number, address, and financial information. There may be detailed items for each item.

The user can, for example, check a check box of an item to be inspected and selectively uncheck an item to be excluded from the inspection target to protect personal information.

The user can select the file name in which the electronic document whose personal information check is completed is to be stored. For example, it is possible to easily select a file name by inputting a front / rear word to be stored after personal information is deleted. When the user inputs a save button, the personal information to be protected is stored and the screen on the interface can be moved back to the main screen.

7 is a diagram illustrating screen output when a program for protecting personal information is executed according to an embodiment of the present invention.

Upon receipt of a request for personal information inspection of the main screen from the user, the user can be prompted to select a file or a folder to be inspected for personal information.

For example, if the user selects the browse button, a selection window of "Please select a folder or a file" can be provided.

You can specify the file or folder you want to protect your personal information by selecting the path of the desired file or folder.

Upon receiving the test button from the user, the personal information test can be performed on the file or folder selected by the user. A program that protects personal information can cause a test result to be displayed on a list at the bottom when a file or a folder or a file in the folder is checked or completed.

When the save button of the personal information list displayed on the screen after the completion of the inspection is selected, the entire inspection result can be stored as a separate file, for example, a file in which a list can be easily displayed, such as an Excel file.

At the time of the personal information examination, the personal information list includes a file name to be inspected by the user, a number identifier for the file, personal information to be detected, a type or metadata to which the personal information belongs, Can be sorted into a list.

The user checks the check box of the personal information that he / she wants to be finally protected in the list of detected personal information due to the result of the personal information inspection, and unchecks the object whose personal information is not to be deleted. In this way, it is possible to delete only the personal information that should not be deleted or the personal information to be deleted when the personal information is collectively processed. As described above, according to the embodiment of the present invention, when the personal information is protected, the detected personal information can be verified again so that only desired personal information is protected on the document accurately.

8 is a diagram illustrating screen output when personal information is detected by executing a program for protecting personal information according to an embodiment of the present invention.

When an input is requested to the personal information deletion button from the user, the program protecting the personal information may delete only the personal information selected on the list or perform a process including masking processing so as not to be identified.

Upon receiving a selection request of the delete personal information button from the user, the embodiment of the present invention performs personal information protection processing in the designated document. Once the personal information protection process is completed, the list of screens can be saved as a separate file and the personal information processing result can be saved as an Excel file or the like.

A separately stored personal information processing result file can provide personal information processing details for each file after protection processing for personal information is performed. This information may include information such as a file name, a personal information item, a content, a detection page, and whether or not to delete it.

According to the embodiment of the present invention, verification of the personal information described in the original electronic text such as a report that relies on the existing manual operation can be automatically detected and deleted. In addition, the manager of the electronic document management agency can easily use it, and contributes to enhancement of the personal information of the electronic text to be disclosed in the future.

9 is a diagram illustrating a result screen of an electronic document in which personal information is protected according to an embodiment of the present invention. The embodiment of the present invention can decode an electronic document to delete information corresponding to personal information, replace it with other information, or display it as shown in the example. Even if the electronic document is a graphic document, even if the electronic document is a graphic document, if personal information to be searched in the electronic document is specified, the personal information including the pattern or the personal information without the pattern (for example, the personal name at the bottom of the attached screen) Can be protected.

FIG. 10 is a diagram illustrating a verification module for verifying personal information by personal information if the personal information is identified or detected according to an embodiment of the present invention. As described above, the embodiment of the present invention is characterized by detecting personal information from an electronic document, automatically generating an electronic document for processing personal information only so that personal information is not identified, or altering and storing an existing electronic document .

In this figure, personal information includes a resident registration number, a credit card number, a bank account number, an address, a telephone number, or an e-mail address.

In the case of setting an electronic document for processing personal information (opening or retrieving a document, selecting a document, etc.), personal information can be primarily detected (210) by the regular expression or the like illustrated above.

In order to automatically convert and store the electronic document, it is important to accurately identify the personal information, so that the verification process can be performed as to whether the first detected personal information is authentic. By improving the accuracy and processing, it is possible to reduce errors in generating electronic documents by processing only personal information.

For example, if the detected personal information is recognized as a resident registration number, the 12-digit number obtained by subtracting the last number (the rightmost number) from the value detected as the resident registration number is 2, 3, 4, 5, 6, 7, 8 , 9, 2, 3, 4, and 5, respectively, and then multiply the values. Assuming that the total value obtained by dividing N by 11 is M, and the total value is N, the number obtained by subtracting M from 11 is compared with the last number (the rightmost number) of the resident registration number.

Then, if the two numbers match, it is identified as a resident registration number and the personal information is processed (deletion, masking, conversion to * mark, etc.) for the detected value as described above. If the value of M is 0 or 1, the remaining value obtained by dividing 11 by M is subtracted by 10 and compared with the last number (the rightmost number) of the resident registration number. If the two numbers match, it is identified as a resident registration number And deletion (masking) of the detected value can be performed.

As another example, when the first detected personal information is detected as a credit card number, the number detected by the credit card number is multiplied by 2 to the odd-numbered digits based on the left side, and then all the digits are added (Credit Sum A). If multiplication 2 is greater than 9, add two digits.

And add all the even digits based on the left (Credit Sum B).

When the sum of the credit sum A and the credit sum B is divided by 10, it is determined that the credit card number is detected as personal information, and deletion (masking) of the credit card number can be performed.

As another example, when the first detected personal information is detected as an account number of a bank or the like, it is compared with the account number form stored in the database of the bank transfer service (CMS) of each bank, (Masking) with respect to the detection value.

As another example, when the first detected personal information is detected as an address, the first detected personal information may be compared with the address database of the post office to perform deletion (masking) on the detected value.

In the embodiment of the present invention, the process of verifying the personal information may be processed by the personal information processing unit 130 of FIG.

In this manner, if the attribute of each unique personal information is stored, and if the information primarily detected from the electronic document matches the attribute of the personal information stored therein, only the matching information is treated as personal information and is deleted or masked Processing can be performed. Therefore, the embodiment of the present invention can provide an efficient method for automatically protecting the personal information of the electronic document because the error occurs when the personal information is detected and the probability of processing the information other than the personal information in the electronic document is extremely low.

In the embodiment of the present invention, the module for verifying personal information can select a desired personal information inspection item by the user. Therefore, it is also possible to select a verification item such that all of the information illustrated in this drawing is not verified and only a part of the verification is performed by the user.

In the embodiment of the present invention, the verification item may be provided to the user in the form of a list, such as a primary detection or inspection item, and may be performed according to user selection. The embodiment of the present invention can reaffirm that the personal information is carried out by using the attribute information of each personal information or comparing with an external database with respect to the verification item of the personal information.

The program for protecting personal information according to the embodiment of the present invention may perform the personal information detection and protection processing in a multi-processing manner quickly. Accordingly, when the electronic document is large or the number of electronic documents is large, the personal information of the electronic document can be processed by the parallel / multi-processing method.

110:
120: Personal information rule storage unit
130: Personal Information Processing Department
210: Detection module
220: Verification module

Claims (12)

Executing a program that protects private information;
Receiving information about a stored electronic document using the executed program;
Receiving a personal information inspection item desired by a user to identify the personal information;
Verifying the identified personal information according to the selected inspection item,
Wherein the verifying step comprises: when the identified personal information is a resident registration number, subtracting the remaining value obtained by dividing the sum of values obtained by multiplying the 12 digits excluding the rightmost digit by the predetermined numbers by 11, To the right most digit;
Receiving a personal information rule including a rule related to personal information protection;
Processing the personal information according to the input personal information rule so that the personal information included in the electronic document is not identified;
And storing the electronic document in which the personal information is processed. The method according to claim 1,
A method for protecting personal information includes:
And providing the electronic document with the personal information processed to the user. The method according to claim 1,
Wherein the verifying step comprises:
Identifying personal information in the electronic document according to a personal information inspection item selected by the user; And
And selecting the personal information desired to be protected from the user among the identified personal information. The method of claim 3,
The identified personal information is provided to the user in a list format,
The step of selecting the personal information desired to be protected from the user comprises:
And receiving a user selection request for the personal information desired to be protected in the list. The method according to claim 1,
A method for protecting personal information includes:
And storing document information on the processed personal information in accordance with the processed metadata and the metadata. The method according to claim 1,
Wherein the step of processing the personal information comprises:
Converting the personal information on the electronic document, or masking the personal information on the electronic document to display the personal information on the electronic document. A program for protecting private information is executed, information on an electronic document stored using the executed program is received, a personal information inspection item desired by the user is selected to identify the personal information, And verifying the identified personal information according to the selected test item, and when the identified personal information is a resident registration number, adding the sum of values obtained by multiplying the 12-digit number excluding the rightmost digit in the resident registration number by 11 And compares the value obtained by subtracting 11 from the remainder value divided by 11 and the rightmost digits, inputs a personal information rule including a rule related to personal information protection, and inputs the personal information included in the electronic document Processing the personal information according to the personal information rule, Process of storing; a storage medium storing a program for protecting personal information including. 8. The method of claim 7,
The program for protecting the personal information includes:
Further comprising the step of providing the electronic document with the personal information processed to the user. 8. The method of claim 7,
The program for protecting the personal information includes:
And performs the verification of the personal information selected by the user. 8. The method of claim 7,
The program for protecting the personal information includes:
The identified personal information is provided to the user in a list format,
And verifying the personal information selected as the personal information desired to be protected from the user. 8. The method of claim 7,
Wherein the program for protecting the personal information further comprises a step of storing metadata about the processed personal information and document information about the processed personal information according to the meta data, Saved storage medium. 8. The method of claim 7,
The program for protecting the personal information includes:
Wherein the personal information is converted on the electronic document or the personal information is masked and displayed on the electronic document.

Images