KR20170053056A - Security server using case based reasoning engine and storage medium for installing security function - Google Patents

Abstract

The present invention provides a security server, comprising: a transmitting and receiving unit receiving encrypted personal information; a control unit outputting the encrypted personal information to a case based inference engine; a database storing the encrypted personal information into a case database; and the case based inference engine discriminating the encrypted personal information received from the control unit into basic personal information and main personal information, distorting the basic personal information using random numbers, storing the encrypted main personal information into the case database through connection with the basic personal information, and if encrypted search target personal information is inputted, searching for the basic personal information with the highest similarity via similarity search among distorted basic personal information cases from the case database, and checking and decrypting the main personal information connected thereto to output the related personal information into a restoring system. The present invention makes a system apply the outputted personal information to a computer process work, encrypt and distort the main personal information immediately, and store the information at the case database, thereby basically blocking internal and external hacking.

Description

TECHNICAL FIELD [0001] The present invention relates to a security server and a storage medium for installing security functions using a case-based inference engine,

The present invention relates to a security system, and more particularly, to a security system capable of preventing external leakage of personal information and a storage medium for installing a security server and a security function using a case-based reasoning engine.

Generally, financial institutions such as insurance companies, banks, and government agencies require personal information related to each individual in order to provide various services. Such personal information may be encrypted or stored or archived, but the security processing for protecting personal information may be easily leaked to the outside through a hacker or the like.

To this end, although personal information is encrypted through complex encryption, hackers are constantly hacking to respond to complex encryption through decryption. In recent years, a large amount of personal information has been leaked by a manager of a system for managing personal information. As a result, the government is considering an attempt to change personal information, such as the introduction of a new resident registration number system. However, it is impossible to solve the problem of leakage of personal information from hackers and system administrators even if it is changed to new personal information.

As a result, there has been a need for security techniques that can prevent personal information from being leaked to unauthorized persons, such as hackers or administrators, in a system for managing personal information.

An object of the present invention is to provide a security server capable of preventing the leakage of personal information and a storage medium for installing security functions.

Another object of the present invention is to provide a security server that can protect personal information by utilizing case-based reasoning technology, and a storage medium for installing security functions.

The security server includes a transmission / reception unit for receiving encrypted personal information, a controller for decoding the encrypted personal information and outputting the decrypted personal information to a case-based reasoning engine, a database for storing personalized information in a case database, And dividing the personal information received from the control unit into personal basic information and personal key information, distorting the personal basic information and encrypting the personal key information in a preset manner to form a case database, And a case-based reasoning engine for outputting personal main information related to personal basic information having the highest degree of similarity through retrieval of similarity with the distorted personal basic information from the database when the personal information to be searched is input Including a security server All.

In this embodiment, the case-based inference engine extracts the individual basic information from among the decoded personal information by attribute, outputs the extracted individual basic information for each attribute, and searches for the personalized information in the case database A random number generator for generating a random number; a random number generator for replacing some of the extracted personal basic information with the random number to distort the personal basic information; The personal information corresponding to the information is encrypted by matching the distorted personal basic information and stored in the database, and when the personal information to be searched is inputted, The degree of similarity for calculating the degree of similarity for each attribute of the personal basic information A weight applying unit for applying a weight to each of the personal basic information for which the degree of similarity is calculated, a weight applying unit for applying a weight to each of the personal basic information corresponding to the personal basic information, And a matching information detecting unit for detecting the individual information by decoding.

In this embodiment, when the matching information detecting unit outputs the detected personal information, the matching information detecting unit outputs the personal information to the attribute extracting unit, and generates the personal basic information corresponding to the outputted personal information through the generation of the new random number Distortion is processed again to make a case database.

In this embodiment, the information distorting unit replaces the attribute cipher data of the individual basic information at an arbitrary position randomly set for each attribute of the individual basic information with the random number.

In this embodiment, the case-based reasoning engine is installed in the form of a PCIe security card.

In this embodiment, the personalized information in the case database is stored in the case database, which is a preset area within the database.

The storage medium for installing a security function according to the present invention stores data for installing a case-based reasoning engine, and the case-based reasoning engine receives personal information including personal basic information and personal key information, An attribute extraction unit for extracting information by attribute, outputting the extracted individual basic information for each of the attributes, separating the individual basic information by the attribute through the search of the personalized information in the case database, and outputting a random number , And replacing some of the extracted pieces of the basic basic information with the random number to distort the personal basic information corresponding to the distorted basic basic information, When information distortion is stored in a space and personal information to be searched is input, A weight applying unit for applying a weight to each of the personal basic information for which the degree of similarity is calculated; and a weight applying unit for applying a weight to each of the personal basic information, And a matching information detecting unit for detecting individual information by decrypting the personal basic information having the highest final similarity value calculated through the weighting application and the personal key information corresponding to the personal basic information.

In this embodiment, when the matching information detecting unit outputs the detected personal information, the personal information is output to the attribute extracting unit, and the personal basic information is again subjected to distortion processing through generation of a new random number to convert it into a case database .

In this embodiment, the information distorting unit replaces the attribute cipher data of the individual basic information at an arbitrary position randomly set for each attribute of the individual basic information with the random number.

In this embodiment, when the use of the installation is completed according to the input of the unique product number and the unique installation / operation password input for the first installation or the first operation of the case-based reasoning engine, the inherent installation password stored therein is deleted.

According to the present invention, since the security server has the private key information reduced to the personal basic information search result in a short period of time in the system by distorting and storing personal information by using the case-based reasoning engine, It is possible to prevent external leakage of personal information.

FIG. 1 illustrates an exemplary security system including a security server using a case-based reasoning engine according to the present invention.
2 is a diagram illustrating an example of a personal information input terminal according to the present invention,
FIG. 3 is a flowchart showing the operation of the personal information input terminal shown in FIG. 2,
FIG. 4 is an exemplary diagram illustrating a security server including a case-based reasoning engine according to the present invention.
FIG. 5 is an exemplary illustration of the case-based reasoning engine shown in FIG. 4,
FIG. 6 is an exemplary diagram illustrating an operation of converting personal information into a case database in the case-based reasoning engine according to the present invention.
FIG. 7 is an exemplary diagram illustrating an operation for reducing personal information in the case-based reasoning engine according to the present invention.
8 is a diagram exemplarily showing distortion processing of case data of personal basic information distorted in a case-based reasoning engine according to the present invention, and Fig.
FIG. 9 is an exemplary diagram illustrating personal information detection through calculation of a final similarity value in a case-based reasoning engine according to the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description, only parts necessary for understanding the operation according to the present invention will be described, and the description of other parts will be omitted so as not to obscure the gist of the present invention.

The security server according to the present invention retrieves personal information using a case-based reasoning engine to which case based reasoning (CBR) technology is applied. Accordingly, the security server stores personal basic information in a distorted form for thorough security, searches for a distorted personal basic information case database through a case search (that is, a case-based reasoning engine) By utilizing the system in a short time in the derivation system and distorting the basic personal information again, personal information is not exposed to the system administrator.

Hereinafter, the security server to which the above-described case-based reasoning technology is applied will be described. The proposed security server is a personal information management system that is used in a variety of fields that utilize and manage personal information such as banks, insurance companies, credit card companies, e- It can be used for security.

1 is a diagram illustrating an exemplary security system according to the present invention.

Referring to FIG. 1, the security system 10 may include personal information input terminals 110 and 120, a security server 200, and a storage medium 300. The security system 10 may further include an application server 400.

The personal information input terminals 110 and 120 are terminals for inputting personal information and may include a user equipment including a smart phone, a tablet, a notebook, and a personal computer (PC). Also, the personal information input terminals 110 and 120 may include terminals implemented to have a dedicated function for receiving personal information.

The personal information input terminals 110 and 120 may be connected to the security server 200 by wire or wirelessly and may have a function of registering the personal information input by the user into the security server 200. [ At this time, the transmitted personal information may include personal basic information and personal essential information.

The personal information input terminals 110 and 120 encrypt personal information input by the security server 200 in such a manner as to be decryptable. The personal information input terminals 110 and 120 transmit the encrypted data to the security server.

The security server 200 may receive the encrypted personal information from the personal information input terminals 110 and 120. At this time, the security server can decrypt the personal information using the decryption method corresponding to the encrypted method at the personal information input terminals 110 and 120. [ Accordingly, the security server 200 can securely receive the information input and transmitted by the personal information input terminals 110 and 120 without external leakage.

Security server 200 includes a case based reasoning (CBR) engine. The security server 200 may distort and store personal information through a case-based reasoning engine. The security server 200 retrieves the distorted individual basic information through the case-based reasoning engine according to the request for personal information, extracts the personal main information connected thereto, and if the use of the extracted personal information is completed, . Accordingly, the security server 200 can retrieve or utilize the personal information only through the case search using the case-based reasoning engine, thereby enabling security of personal important information.

The security server 200 can construct the case database by dividing the personal information, that is, the personal basic information and the personal key information, using the case-based reasoning engine, and can return the personal important information only by the case search. At this time, the security server 200 can acquire the personal information through calculation of similarity through the case-based inference engine. Thereafter, when the use of personal information is completed, the security server 200 directly uses the stored personal information by using the case-based reasoning engine.

In this case, it is impossible to search the case base of distorted personal basic information by using the general search engine, and since the reduced personal basic information is immediately encrypted and distorted, the system operator can not confirm the contents within a short time, .

Also, the security server 200 can mount the case-based reasoning engine in the form of a peripheral component interconnect (PCI) security card.

The storage medium 300 stores information for applying the case-based reasoning engine to the inside of the security server. The storage medium 300 may store installation data related to the case-based reasoning engine, and may include a unique product number of the case-based reasoning engine for initial installation or initial operation of the case-based reasoning engine, For example. If the initial installation of the case-based reasoning engine is completed through the storage medium 300, the unique installation password is discarded through the storage medium 300. (Also, when the hacker attempts to duplicate or change the case-based reasoning engine, The corresponding unique setup password can not be applied and is not duplicated or changed). In other words, the case-based reasoning engine uses unique product numbers and unique installation passwords only for the initial installation, so that it can not be installed after the original installation password is destroyed on the storage media. In addition, the manufacturer server providing the case-based reasoning engine does not have a unique setup password, thereby making it impossible to duplicate the case-based reasoning engine. For example, the storage medium 300 may include a USB memory, an SD card, a Micro SD card, an MMC card, a CD / DVD, an external hard disk drive And a storage medium capable of transferring data through connection or insertion to the security server 200. [

The application server 400 may be a server that utilizes personal information and is managed by, for example, a financial institution, an insurance company, a securities company, a government agency, or the like. In addition, the function of the application server 400 may be included in the security server 200. The application server 400 can provide various services using the restored personal information by utilizing the case-based reasoning engine.

As described above, the security server 200 proposed in the present invention uses a case-based reasoning engine and performs thorough security through distortion of the encrypted personal basic information and decryption of search and decryption through a case-based reasoning engine , It is impossible to retrieve distorted personal basic information with other search engines, and it is impossible to leak personal important information. In addition, since the case-based reasoning engine discards the inherent installation password after completion of the initial installation or operation using the unique product number and the installation password stored in the storage medium, Since information can not be hacked, it is impossible to leak private information.

FIG. 2 is a diagram exemplarily showing a personal information input terminal according to the present invention.

2, the personal information input terminal 110 includes a personal information input unit 111, an encryption processing unit 112, and a transmission unit 113.

The personal information input unit 111 receives personal information from a user of the personal information input terminal 110. For example, the personal information input unit 111 may include various input devices such as a keypad, a button, a keyboard, a mouse, a touch pad, and an electronic pen. Here, the personal information includes personal basic information and personal essential information. Personal basic information includes general information for identifying an individual, and may include, for example, information such as an individual's name, age, address, occupation, height, weight, blood type, family relationship and the like. The personal important information includes personal important information, and may include information such as a resident registration number, a password, a telephone number, a mobile phone number, and an account number as an example. The personal information input unit 111 outputs the inputted personal information to the encryption processing unit 112. [

The encryption processing unit 112 encrypts the personal information. The encryption processing unit 112 encrypts the personal information in a preset manner. The encryption processing unit 112 may be connected to a security token (for example, a USB token) or may use a security token for encrypting personal information. When the security token is used, the personal information input terminal 110 may have a port (for example, a USB port or the like) to which the security token is connected. The encryption processing unit 112 transmits the encrypted personal information to the transmission unit 113. [

The transmission unit 113 transmits the encrypted personal information to the security server 200.

Here, for convenience of description, the personal information input terminal 110 describes only components for transmitting personal information through encryption, but may further include other components than the above-described components.

Here, the structure of the personal information input terminal 1 (110) is exemplarily described, but the personal information input terminal 120 may have a similar structure to the personal information input terminal 1 (110).

3 is a flowchart showing the operation of the personal information input terminal shown in FIG.

Referring to FIG. 3, the personal information input terminal 110 determines whether to transmit personal information (step S110).

If the personal information input terminal 110 transmits personal information, the process proceeds to step S120.

The personal information input terminal 110 receives personal information for transmission of personal information (step S120).

The personal information input terminal 110 encrypts the inputted personal information and proceeds to step S140 (step S130). The encryption operation of the personal information in the personal information input terminal 110 can be selectively performed by the user's choice. Therefore, when the personal information input terminal 110 is set not to encrypt by the user, the encryption operation of the personal information may be omitted. The personal information input terminal 110 may use a security token for encrypting personal information.

The personal information input terminal 110 transmits the encrypted personal information to the security server 200 and terminates (step S140).

If the personal information input terminal 110 does not transmit personal information, the process proceeds to step S150. The personal information input terminal 110 performs a corresponding operation requested by the terminal and terminates the corresponding operation when the operation is completed (operation S150).

FIG. 4 is an exemplary diagram illustrating a security server using a case-based reasoning engine according to the present invention.

4, the security server 200 includes a transmission / reception unit 210, a control unit 220, a database 230, a case based reasoning engine 240, a search target personal information input unit 250, (260).

The transmission / reception unit 210 may be connected to the personal information input terminal 100 or the application server 400 by wire or wirelessly. The transceiver 210 can receive the encrypted personal information. The transmission / reception unit 210 outputs the encrypted personal information to the control unit 220.

The control unit 220 outputs the encrypted personal information to the case-based reasoning engine 240. In addition, the control unit 220 controls the operations of the modules included in the security server 200 as a whole. The control unit 220 may process the personal information received from the case-based reasoning engine 240 or store personal information in a database. The control unit 220 may output the personal information acquired through the case-based reasoning engine 240 to the transmission / reception unit 210 for transmission to the application server 400 that requires it.

The database 230 may store data provided by the control unit 220 or may provide the requested data to the control unit 220. In addition, the database 230 may include a case database 231 in which distorted data is stored through the case-based reasoning engine 240. The case database 231 may operate in conjunction with the case based reasoning engine 240. The case database 231 may provide the stored data at the request of the case based reasoning engine 240. The case database 231 may be physically separated and located separately from the database 230, or may include logically divided areas within the database 230.

Therefore, the personal basic information, which is encrypted in the personal information input terminal and then distorted and stored through the case-based reasoning engine 240, can be stored in the case database 231 through case database conversion, Personal information data (encrypted at the personal information input terminal) that does not need to be distorted through the database 240 can be stored in the internal storage area of the database 230 outside the case database 231. Meanwhile, among the personal information data stored in the database 230, the individual key information data is connected to the distorted individual basic information, and the encrypted private key information connected after the encrypted personal basic information is retrieved by the case-based reasoning engine 240 Should be able to do.

The case-based reasoning engine 240 can decrypt the received personal information upon receipt of the personal information encrypted by the control unit 220. Here, the decryption operation restores the personal information through the decryption processing operation corresponding to the encryption of the personal information input terminals 110 and 120. However, the decoding operation of the personal information received through the transmission / reception unit 210 may be performed through the control unit 220. For example, the case-based reasoning engine 240 replaces some data in the personal baseline information case database with a random number generated by a random number generator (RNG). At this time, the case-based reasoning engine 240 may arbitrarily and randomly set the number of the random numbers or the positions where the random numbers are replaced with respect to the case data. In this way, the case-based reasoning engine 240 can distort the personal basic information. Accordingly, the personal information data is divided into the distorted individual basic information data and the undistorted individual main information data to be stored in the case database 230. For this reason, the distorted personal basic information case data is not searched using the general search engine but is retrieved using the case-based reasoning engine 240 only.

The case-based reasoning engine 240 calculates similarity through searching the personal basic information data in the case database if the personal information to be searched is requested through the search target personal information input unit 250. The case-based reasoning engine 240 selects the data with the highest degree of similarity as the requested basic basic information, confirms the personal essential information connected thereto, decodes it, and reduces it. The case-based reasoning engine 240 outputs the reduced personal information to the control unit 220.

In this way, the case-based reasoning engine 240 can reduce (i.e., decode) the personal information based on the ratio of the degree of similarity. However, in the normal search engine, the data that does not match exactly (for example, Is excluded from the search target, it is impossible to retrieve the personal information. In addition, since the operation using the reduced personal information is performed in the system instantaneously and the personal basic information re-distortion processing is performed immediately, it is possible to prevent the leakage of the personal information due to the leakage by the manager managing the security server 200, As the leakage of personal information is prevented, complete security of personal information is possible.

The storage medium 300 associated with the case-based reasoning engine 240 can be installed in a unique installation mode when the utilization of the unique product number and the unique installation password (or unique drive password) Automatically delete the password. The search target personal information input unit 250 searches the personal information through the case based reasoning engine 240 to search personal information through the search of the personal basic information stored in the case database 231, ) Can be directly input by the user or manager of the server. The search target personal information input unit 250 outputs the search target personal information to the case based reasoning engine 240. Meanwhile, the search target personal information input unit 250 may receive personal information for a search target provided from the application server 400 through the transmission / reception unit 210. [

FIG. 5 is an exemplary diagram illustrating the case-based reasoning engine shown in FIG.

5, the case-based reasoning engine 240 includes an attribute extraction unit 241, an information distortion unit 242, a similarity calculation unit 244, a weight application unit 245, and a matching information detection unit 246 .

The attribute extraction unit 241 extracts the personal information according to the attribute of the inputted personal information. The attribute extracting unit 241 divides the input personal information according to the attribute and outputs it to the information distortion unit 242. [ Here, the attribute is a criterion for distinguishing personal information such as name, age, address, occupation, height, weight, blood type, family relationship, and the like.

When the distorted personal information is received from the case database 231, the attribute extracting unit 241 classifies the personal information according to the attribute to apply the weight according to the attribute matching, and outputs it to the similarity calculating unit 244. [

The information distorting unit 242 can store and store personal information classified according to attributes. At this time, the information distortion unit 242 distorts the individual basic information (e.g., name, age, address, occupation, height, weight, blood type, family relationship) among the personal information. To this end, the information distortion section 242 may be provided with a random number generated from the random number generator 243. [

The information distortion unit 242 can distort the basic basic information by providing a random number, distort a part of the basic basic information into a random number, It can be set at random.

The information distorting unit 242 can classify individual key information among personal information, and match the distorted individual basic information to a case database. At this time, the information distortion unit 242 encrypts the private key information with a preset encryption algorithm. The information distortion unit 242 may store the distorted individual basic information and the encrypted individual key information in the case database 231.

The random number generator 243 generates a random number for distortion of the personal information, and outputs the generated random number to the information distortion section 242.

The similarity calculation unit 244 receives the search target individual information, and receives the encrypted data, that is, the distorted individual basic information and the encrypted individual key information through the attribute extraction unit 241. The similarity calculation unit 244 calculates the similarity with the distorted individual basic information based on the search target individual information. The similarity calculation unit 244 may calculate the similarity for each of the attributes of the search target personal information. The similarity calculation unit 244 may use a similarity function to calculate the similarity through comparison between the search target personal information and the retrieved personal information in order to calculate the similarity. The similarity calculation unit 244 outputs the personal information for which the degree of similarity is calculated to the weight application unit 245. [

The weight applying unit 245 applies the weight to the similarity calculated for each attribute. The weight applying unit 245 applies a weight according to a predetermined weight level for each attribute. The weight application unit 245 may obtain the final similarity value for each case that is searched according to the weighting application, that is, for each case of the candidates for the search target. The weight applying unit 245 outputs the final similarity value searched for each case to the matching information detecting unit 246. [

The matching information detection unit 246 detects individual information corresponding to the case corresponding to the search target individual information based on the final similarity value calculated for each case through the weight application. At this time, the matching information detector 246 may restore the encrypted private key information corresponding to the individual basic information together. The matching information detection unit 246 outputs the detected personal information in association with the search target individual information.

When the output of the personal information is completed, the matching information detection unit 246 may distort the personal information that has been searched by the attribute extraction unit 241 and re-store the personal information in the case database 231. [ At this time, the information distorting unit 243 may provide a new random number for the detected personal information, and may store the basic personal information in a distorted manner. The information distortion unit 243 may generate a random number by using a random number generator 243 for storing the personal information through rapid distortion, and may use a random number stored in a memory (not shown) or the like. Alternatively, the matching information detection unit 246 may delete the detected personal information when the distorted individual information is held in the case database 231. [

The matching information detection unit 246 removes or distortly stores the detected personal information within the shortest time (for example, about 0.001 second) when the utilization of the searched personal information is completed or the output of the searched personal information is completed, Detecting, that is, preventing the restored personal information from being exposed to the system administrator.

The case-based reasoning engine 240 may include a GPS module. If the location-based reasoning engine 240 changes its position through a constant interval or constant comparison with the position information according to the initial driving, To check whether the server location is moved or used by an authorized user. In addition, the case-based reasoning engine 240 may switch the operation to disable state when it detects a change of position through position comparison so as to prevent hacking, which is attempted at the time of movement, through server theft or the like.

FIG. 6 is a diagram illustrating an example of converting the personal information into a case database in the case-based reasoning engine according to the present invention.

Referring to FIG. 6, the case-based reasoning engine 240 receives personal information for case databaseization and proceeds to step S220 (step S210). Here, the personal information may include personal basic information and personal essential information.

The case-based reasoning engine 240 determines personal basic information on the inputted personal information (step S220).

If the inputted personal information is personal basic information, the case-based reasoning engine 240 proceeds to step S230.

The case-based reasoning engine 240 generates a random number for distortion of the individual basic information (step S230).

The case-based reasoning engine 240 uses the random number to distort the basic personal information, and proceeds to step S260 (step S240).

If the inputted personal information is not personal basic information, the case-based reasoning engine 240 proceeds to step S250. At this time, the case-based reasoning engine 240 acquires personal information by selecting personal main information, not personal basic information.

The case-based reasoning engine 240 encrypts the private key information with a predetermined encryption method, and proceeds to step S260.

In step S260, the case-based reasoning engine 240 stores the distorted individual basic information and the encrypted individual basic information on the private key information in the case database from the input personal information, and proceeds to step S270. At this time, the case-based reasoning engine 240 matches the distorted individual basic information with the encrypted individual basic information to create a case database and stores the case database in the case database.

The case-based reasoning engine 240 determines whether the case databaseization operation is complete. The case based reasoning engine 240 terminates when the case database making operation is completed. However, the case-based reasoning engine 240 proceeds to step S210 if the case database making operation is not completed.

FIG. 7 is an exemplary diagram illustrating an operation for reducing personal information in the case-based reasoning engine according to the present invention.

Referring to FIG. 7, the case-based reasoning engine 240 receives personal information for searching and proceeds to step S320 (step S310).

The case-based reasoning engine 240 searches the case database and proceeds to step S330 (step S320).

The case-based reasoning engine 240 calculates the degree of similarity for each of the attributes in the case of the retrieved personal information, and proceeds to step S340 (step S330).

The case-based reasoning engine 240 calculates the similarity value for each of the cases to which the weights are applied by applying weights to the similarities of the attributes of the personal information for which the similarity calculation is completed (S340).

Based on the calculated final similarity value, the case-based reasoning engine 240 determines whether matching personal information, that is, individual basic information, has been detected (step S350).

At this time, the case-based reasoning engine 240 can determine the personal information of the case in which the calculated final similarity value is the highest as matching personal information. The case-based reasoning engine 240 proceeds to step S360 when the matching personal information is detected. For example, when the case-based reasoning engine 240 detects the personal information of the case having the highest final similarity value, that is, the individual basic information, the personal principal information mapped in correspondence with the detected individual basic information is extracted together with the user . However, the case-based reasoning engine 240 terminates if the final similarity value is less than a preset reference value or the personal information corresponding to the personal information requested to be retrieved does not exist.

On the other hand, the case-based reasoning engine 240 may extract personal information about two or more cases having a high final similarity value, and may detect the personal information requested to be searched by determining a predetermined criterion among the corresponding personal information.

The case-based reasoning engine 240 recovers the matched individual basic information and decrypts the encrypted private key information matched to the recovered individual basic information. In this way, the case-based reasoning engine 240 can provide the requested personal information. At this time, the requested personal information may be transmitted to the security server 200 or the application server 400 and utilized.

FIG. 8 is an exemplary diagram illustrating a distortion process of case data of personal basic information distorted in the case-based reasoning engine according to the present invention.

Referring to FIG. 8, personal information of three persons Kim Cheol Soo, Kim Youngja and Koh Soo Soo are exemplarily shown.

The first personal basic case data 310 may be divided into attributes for name, age, and address of Kim, and attribute password data for distortion is written.

At this time, the name Kim Cheol Soo can be coded as "A0EJ3DG7". The case-based reasoning engine 240 can distort "EJ" to "BI", "7" to "2", and "A0EJ3DG7" to "A0BI3DG2". The age of 27 can be coded as "BG". The case-based reasoning engine 240 may distort "B" to "C" and distortion "BG" to "CG". The address, Dongsung Dong, can be coded as "C5HG7H". The case-based reasoning engine 240 may distort "H" to "B", "7" to "3" and distortion "C5HG7H" to "C5BG3H".

The second personal basic case data 320 can be divided into attributes for name, age, and address of Kim Young-ja, and attribute cryptographic data for distortion is written.

At this time, the name Kim Young-ja can be coded as "A0EH4HI1". The case-based reasoning engine 240 can distort "OE" to "1H", "H" to "D", and "A0EH4HI1" to "A1HH4DI1". The age of 38 can be coded as "CH". The case-based reasoning engine 240 can distort "H" to "E" and distortion "CH" to "CE". The address Daechi-dong can be coded as "C10J0". The case based reasoning engine 240 may distort "J0" to "G7" and distort "C10J0" to "C10G7".

The third personal basic case data 330 can be divided into attributes for the name, age, and address of the strong withdrawal, and attribute password data for distortion is written.

At this time, the name, Koh, can be coded as "A5J3DG7". The case-based reasoning engine 240 can distort "5" to "7", "G" to "A", and "A5J3DG7" to "A7J0DA7". The age 57 can be coded as "EG". The case-based reasoning engine 240 may distort "E" to "A" and distortion "EG" to "AG". The address, Samsung-dong, may be coded as "G1EG3H". The case based reasoning engine 240 can distort "E" to "H", "3H" to "1B", and "G1EG3H" to "G1HG1B".

Information distorted in the first to third basic case data 310, 320 and 330 is indicated by an underline at the bottom.

Here, although the attribute names, the ages, and the addresses are exemplarily described, the attributes may further include attributes that can be included in the personal basic information other than the attributes described above. In addition, each attribute value (i.e., attribute data) may be implemented in various forms.

In this way, the case-based reasoning engine 240 can generate distorted personal basic information by converting randomly selected portions of the attribute cipher data into random numbers.

FIG. 9 is an exemplary diagram illustrating personal information detection through calculation of a final similarity value in a case-based reasoning engine according to the present invention.

Referring to FIG. 9, search target personal information 410 is illustratively shown. At this time, the personal information to be searched is personal basic information for Kim, and the attribute password data includes " A0EJ3DG7, BG, C5HG7H ".

Here, the case-based reasoning engine 240 calculates the degree of similarity by comparing it with the individual basic case data shown in FIG.

In addition, we will briefly describe the calculation of the similarity of this case based inference engine. The unit similarity calculation for each attribute is calculated by applying the similarity function set for each attribute in advance, and the weight can be finally calculated by applying the weight to each attribute. In this example, the similarity is calculated by a simple string search method. That is, we calculated the similarity (the number of characters to be matched / the total number of characters) and weights were all the same.

The case-based reasoning engine 240 calculates the similarity by comparing the search target individual basic information (A0EJ3DG7, BG, C5HG7H) with the distorted information "A0BI3DG2, CG, C5BG3H" of the first individual basic case data 310 . According to the similarity calculation method, the case-based reasoning engine 240 calculates the similarity ((5/8) * 2 + (1/2) * 1 + (4/6) * 3) / 6 = 48/24 * 6 = 90/144 = 0.625 (62.5%)).

The case-based reasoning engine 240 calculates the similarity by comparing the pieces of personal information (A0EJ3DG7, BG, C5HG7H) and the distorted information "A1HH4DI1, CE, C10G7" of the second individual base case data 320 . The case-based reasoning engine 240 calculates the similarity (2/8) * 2 + (0/2) * 1 + (3/6) * 3/6 = (12 + 0 + 36 / (24 * 6) = 48/144 = 0.333 (33.3%)).

The case-based reasoning engine 240 calculates the similarity by comparing the personal information A0EJ3DG7, BG, C5HG7H of the search object with the distorted information "A7J0DA7, AE, G1HG1B" of the third individual base case data 330 . The case-based reasoning engine 240 calculates the degree of similarity ((4/8) * 2 + (1/2) * 1 + (2/6) * 3) / 6 = (24 + 12 + 24) / (24 * 6) = 60/144 = 0.417 (41.7%)).

In this case, the calculation result 420 of the final similarity value through comparison with the search target personal information is shown, and the case-based reasoning engine 240 searches the case 1 based on the first similarity value Data 310) can be detected (430) as search target personal information, and personal main information in the case database mapped (or linked) to the personal basic information related to Case 1 can be output together.

The restored data is stored in the case database immediately after the necessary work is done in the server and the personal basic information is distorted so that internal and external hacking are prevented.

In addition, a random number generation algorithm or a hardware device necessary for distortion can be arbitrarily determined, and a range of the highest similarity can be determined according to a random number application ratio.

While the invention has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made therein without departing from the spirit and scope of the invention. Therefore, the scope of the present invention should not be limited to the above-described embodiments, but should be determined by the equivalents of the claims of the present invention as well as the claims of the following.

10: security system 110, 120: personal information input terminals
200: security server 300: storage medium
400: application server 111: personal information input unit
112: encryption processing unit 113:
210: Transmitting / receiving unit 220:
230: Database 231: Case Database
240: Case-based reasoning engine 250: Search target personal information input unit
260: personal information providing unit 241:
242: information distortion section 243: random number generator
244: similarity calculation unit 245: weight application unit
246:

Claims (10)

In a security server using a case-based reasoning engine,
A transmission / reception unit for receiving the encrypted personal information;
A controller for decoding the encrypted personal information and outputting the decrypted personal information to a case based reasoning engine;
A database for storing personalized database information; And
Wherein the control unit divides the personal information received from the control unit into personal basic information and personal key information, and transforms the personal basic information into a case database by encrypting the personal principal information and the personal key information in a preset manner, And a case-based reasoning engine for outputting personal main information related to personal basic information having the highest degree of similarity through retrieval of similarity with the distorted personal basic information from the database when the personal information to be searched is input, Security server. The method according to claim 1,
The case-based reasoning engine
Extracting the individual basic information from among the decrypted individual information for each attribute, outputting the extracted individual basic information for each attribute, and outputting the individual basic information classified by the attribute through the search of the personalized information of the case database An extraction unit;
A random number generator for generating a random number;
The personal principal information corresponding to the distorted personal basic information is encrypted and stored in the database by matching with the distorted personal basic information by replacing some of the personal basic information extracted by the attribute with the random number Information distortion;
A similarity calculator for calculating a similarity for each attribute of the personal basic information by searching the personal basic information in the case database through the attribute extracting unit when the search target personal information is input;
A weight applying unit for applying a weight to each of the personal basic information for which the degree of similarity is calculated; And
And a matching information detector for detecting individual information by decrypting the personal basic information having the highest final similarity value calculated through the weight application and the individual key information corresponding to the individual basic information. 3. The method of claim 2,
The matching information detecting unit outputs the detected personal information to the attribute extracting unit, and further performs distortion processing on the personal basic information corresponding to the outputted personal information through generation of a new random number, Security server. 3. The method of claim 2,
Wherein the information distorting unit replaces the attribute cipher data of the private basic information at an arbitrary position randomly set for each attribute of the personal basic information with the random number. The method according to claim 1,
The case based reasoning engine is installed in the form of a PCIe security card. The method according to claim 1,
Wherein the personalized case database is stored in a case database, which is a preset area within the database. A storage medium for installation of a security function,
Store the data for installing the case-based reasoning engine,
The case-based reasoning engine
Extracts the individual basic information by each of the attributes, outputs the extracted individual basic information for each of the attributes, and searches the personal basic information by searching the personalized information in the case database An attribute extracting unit for outputting the classified attributes;
A random number generator for generating a random number;
Wherein the personal main information corresponding to the distorted individual basic information is encrypted by using the random basic number, and the personal main information corresponding to the distorted individual basic information is encrypted by the random number, Information distortions stored in the memory;
A similarity calculation unit for calculating a similarity for each attribute of the individual basic information through search of the individual basic information made into the case database through the attribute extraction unit when the search target individual information is inputted;
A weight applying unit for applying a weight to each of the personal basic information for which the degree of similarity is calculated; And
And a matching information detector for detecting the individual information by decoding the individual basic information having the highest final similarity value calculated through the weight application and the individual key information corresponding to the individual basic information. 8. The method of claim 7,
Wherein the matching information detecting unit outputs the detected personal information to the attribute extracting unit and generates a case database by generating a new random number. 8. The method of claim 7,
Wherein the information distorting unit replaces the attribute encryption data of the private basic information at an arbitrary position randomly set for each attribute of the personal basic information with the random number. 8. The method of claim 7,
Wherein the inherent installation password is deleted when the use of the installation is completed according to the input of the unique product number and the unique installation / drive password input for the first installation or the first drive of the case-based reasoning engine.

Images