KR20200045761A - Method and system at third party side for risk identification of personal information - Google Patents

Abstract

Provided are a personal information identification method and a system thereof. According to one embodiment of the present invention, whether a general data protection regulation (GDPR) policy is satisfied is determined in an Internet of Things environment, a framework and a platform for personal information management meeting the GDPR can be provided.

Description

METHOD AND SYSTEM AT THIRD PARTY SIDE FOR RISK IDENTIFICATION OF PERSONAL INFORMATION

The present invention relates to a method and system for personal information risk identification.

In today's data-driven digital economy, user-related information serves as the oil (essential) to run the world. Users are willing or inadvertently providing privacy information to well-known or unknown service providers. Privacy information represents a person's personally identifiable information (PII). Many researchers see mobile apps as a big privacy source leaking out of the digital world. Many mobile apps collect user sensitive information during installation, use, and removal. Questions about app permission authenticity and reliability have been frequently raised by several researchers. It is also reported that by 2019, annual global economic losses from data breaches will exceed $ 2.1 trillion.

In one study, it was reported that 87% of the U.S. population could be identified using only 5-digit postal codes, gender, and date of birth. Nowadays, people recognize personally identifiable information as an asset, but apps require excessive privileges, and some of the requested privileges are unrelated to their primary purpose. In 2018, the total number of Android and Apple users is 2 billion and 1.3 billion, respectively, and the number of apps they use is 2.8 million and 2.2 million, respectively. The Korea Internet & Security Agency (KISA) surveyed a common view of information security, and the app requested two kinds of rights: `` Unwanted and frivolous PII collection is 33.3%, '' and `` Illegal use of collected PII is 27.6%. '' Major concerns were discovered. Technology security company Gemalto's Breach Level Index (BLI) reports that 1.4 million PII evidence is exposed every day, of which 74% are identity theft.

To address this, many countries and organizations have tried to reduce personal data breaches. For example, the European General Data Protection Regulation (GDPR), Australia's Privacy Amendment, Canada's Privacy and Electronic Documents Act, ISO's ISO27001 suggest control of the personal data collection process. Failure to protect PII could result in a fine of 2% or 20 million Euros for all organizations' total revenue. GDPR focuses primarily on notification of violations, access rights, forgotten rights, data mobility, and privacy by design and information security officers. In Android version 8.1 (API level 27 or higher), there are three levels of protection (general, signing, and risk tolerance) that affect the access and collection of third-party app data. According to various studies, personal information leakage occurs through a request to allow privacy by an app. As the amount and source of data is increasing rapidly, preventative measures are needed. As a precaution, personal information leakage due to distribution of data between publishers or groups should be seriously considered for PII collection.

A personal information risk identification method and a computer device performing the personal information risk identification method of a third party who generates and provides a specification for a service and / or application, and collects and manages data related to the service and / or application, In combination with the computer device, a computer program stored in a computer readable recording medium and a computer readable recording medium are provided to execute the method for identifying the personal information risk on the computer device.

Receiving and managing the specifications of services and / or applications from third parties, user consent information from users who use services and / or applications, and storing and processing data in the user's environment or platform environment A personal computer risk identification method of a service / platform provider side that inspects and monitors related processes, and provides a monitoring function for data stored in a data storage of the service / platform provider side, and a computer device performing the personal information risk identification method , A computer program stored in a computer readable recording medium and a computer readable recording medium in combination with the computer device to execute the method for identifying the personal information risk on the computer device.

Individuals on the user's side that store and provide user consent information for third-party services and / or applications, monitor the physical access to the client device's data storage, and provide a query function for the collected data status A method for identifying information risk, a computer device performing the method for identifying personal information risk, a computer program stored in a computer-readable recording medium in combination with the computer device to execute the method for identifying personal information risk, and a computer readable thereof Provide a record carrier.

Generating a specification related to data use for at least one of a third-party service and application; Transmitting the generated specification to a service / platform provider side device through a network; Collect data related to at least one of the services and applications from a user-side device that receives and uses at least one of the services and applications through the service / platform provider-side device or the service / platform provider-side device Storing in a data store; And providing information on the utilization of data stored in the data storage according to a request from the outside.

According to one side, the method of identifying personal information risk may further include deleting data collected in relation to a corresponding user from the data storage according to a request from the user-side device.

According to another aspect, the method of identifying personal information risk may further include transmitting the generated specification to a system of a third-party operator.

According to another aspect, the specifications transmitted to the third-party operator's system may be characterized in that they are distributed and stored on a blockchain associated with the third-party operator.

According to another aspect, the step of providing the information may monitor information on utilization of the data in a statistical form according to at least one request from the user-side device, the service / platform provider-side device, and a government agency. It can be characterized by providing a function.

It provides a computer program stored in a computer-readable recording medium in combination with a computer device to execute the method of identifying personal information risk on the computer device.

It provides a computer-readable recording medium, characterized in that a computer program for executing the personal information risk identification method in a computer device is recorded.

A computer device, comprising: at least one processor, implemented to execute instructions readable by a computer, wherein, by the at least one processor, specifications related to data usage for at least one of services and applications on a third party side; Create, transmit the generated specification to a service / platform provider side device through a network, and receive and use at least one of the services and applications through the service / platform provider side device or the service / platform provider side device Characterized in that it collects data related to at least one of the services and applications from a user-side device and stores it in a data storage through a network, and provides information on utilization of the data stored in the data storage according to an external request. To do Provides a foundation device.

From the perspective of a third party, it is possible to create and provide a specification for a service and / or application, and provide a personal information risk identification technology for collecting and managing data related to the service and / or application.

From the service / platform provider's point of view, receive and manage the specification of the service and / or application from the third party, user consent information from the user using the service and / or application, and manage the user's environment or platform It inspects and monitors processes related to data storage and processing in the environment, and can provide personal information risk identification technology that provides monitoring function for data stored in the data storage of the service / platform provider.

From the user's point of view, it stores and provides user consent information for the service and / or application of the third party, monitors the physical access to the data storage of the client device, and provides a query function for the collected data status To provide personal information risk identification technology.

1 is a diagram showing an example of a network environment according to an embodiment of the present invention.
2 is a block diagram showing an example of a computer device according to an embodiment of the present invention.
3 is a diagram showing an example of a configuration for each major player of the personal information risk identification system in an embodiment of the present invention.
4 is a flowchart illustrating an example of a flow of exposure of user data in a main player-specific configuration of a personal information risk identification system in an embodiment of the present invention.
5 is a diagram illustrating an example of a functional block for each main player of the personal information risk identification system in an embodiment of the present invention.
6 is a block diagram showing an example of the internal configuration of a personal information risk identification system according to an embodiment of the present invention.
7 is a flowchart illustrating an example of a method of identifying personal information risk from the perspective of a third party in one embodiment of the present invention.
8 is a flowchart illustrating an example of a method for identifying personal information risk from the perspective of a service / platform provider in an embodiment of the present invention.
9 is a flowchart illustrating an example of a method for identifying personal information risk from a user's point of view in an embodiment of the present invention.

The present invention can be applied to a variety of transformations and can have various embodiments. Hereinafter, specific embodiments will be described in detail based on the accompanying drawings.

In the description of the present invention, when it is determined that a detailed description of known technologies related to the present invention may obscure the subject matter of the present invention, the detailed description will be omitted.

The personal information risk identification system according to embodiments of the present invention may be implemented by at least one computer device. A computer program according to an embodiment of the present invention may be installed and driven in the computer device, and the computer device may perform a method of identifying personal information risk according to an embodiment of the present invention under control of the driven computer program. . The above-described computer program can be stored in a computer-readable recording medium in combination with a computer device to execute a method for identifying personal information risk on the computer device.

1 is a diagram showing an example of a network environment according to an embodiment of the present invention. The network environment of FIG. 1 shows an example including a plurality of electronic devices 110, 120, 130, 140, a plurality of servers 150, 160 and a network 170. 1 is not limited to the number of electronic devices or the number of servers as an example for describing the invention. In addition, the network environment of FIG. 1 is merely an example of one of the environments applicable to the embodiments, and the environment applicable to the embodiments is not limited to the network environment of FIG. 1.

The plurality of electronic devices 110, 120, 130, and 140 may be a fixed terminal or a mobile terminal implemented as a computer device. For example, a plurality of electronic devices (110, 120, 130, 140), smart phones (smart phone), mobile phones, navigation, computers, notebooks, digital broadcasting terminals, PDAs (Personal Digital Assistants), PMP (Portable Multimedia Player) ), Tablet PC, etc. For example, although the shape of a smartphone is shown as an example of the electronic device 1 110 in FIG. 1, in the embodiments of the present invention, the electronic device 1 110 substantially uses the wireless or wired communication method to connect the network 170. It may mean one of various physical computer devices capable of communicating with other electronic devices 120, 130, 140 and / or servers 150, 160.

The communication method is not limited, and a communication method using a communication network (eg, a mobile communication network, a wired Internet, a wireless Internet, and a broadcasting network) that the network 170 may include may include short-range wireless communication between devices. For example, the network 170 includes a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), and a broadband network (BBN). , Any one or more of the networks such as the Internet. Further, the network 170 may include any one or more of a network topology including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree, or a hierarchical network. It is not limited.

Each of the servers 150 and 160 communicates with a plurality of electronic devices 110, 120, 130, and 140 through a network 170 to provide commands, codes, files, content, services, or the like, or a plurality of computers. It can be implemented with devices. For example, the server 150 is a service (for example, a video call service, a financial service, a payment service, a social network service) with a plurality of electronic devices 110, 120, 130, and 140 accessed through the network 170. , Messaging service, search service, mail service, content provision service, question and answer service, etc.).

2 is a block diagram showing an example of a computer device according to an embodiment of the present invention. Each of the plurality of electronic devices 110, 120, 130, 140 described above or each of the servers 150, 160 may be implemented by the computer device 200 shown through FIG. 2, and an embodiment of the present invention The method according to the field may be performed by the computer device 200.

At this time, as shown in FIG. 2, the computer device 200 may include a memory 210, a processor 220, a communication interface 230, and an input / output interface 240. The memory 210 is a computer-readable recording medium, and may include a non-permanent mass storage device such as random access memory (RAM), read only memory (ROM), and a disk drive. Here, a non-destructive large-capacity recording device such as a ROM and a disk drive may be included in the computer device 200 as a separate permanent storage device separate from the memory 210. In addition, an operating system and at least one program code may be stored in the memory 210. These software components may be loaded into the memory 210 from a computer-readable recording medium separate from the memory 210. Such a separate computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, disk, tape, DVD / CD-ROM drive, and memory card. In other embodiments, software components may be loaded into memory 210 through communication interface 230 rather than a computer-readable recording medium. For example, software components may be loaded into memory 210 of computer device 200 based on a computer program installed by files received over network 170.

The processor 220 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input / output operations. Instructions may be provided to processor 220 by memory 210 or communication interface 230. For example, the processor 220 may be configured to execute a received command according to program code stored in a recording device such as the memory 210.

The communication interface 230 may provide a function for the computer device 200 to communicate with another device (eg, the storage devices described above) through the network 170. For example, requests, commands, data, files, etc. generated by the processor 220 of the computer device 200 according to program codes stored in a recording device such as the memory 210 are controlled by the communication interface 230. 170) to other devices. Conversely, signals, commands, data, files, etc. from other devices may be received through the network 170 to the computer device 200 through the communication interface 230 of the computer device 200. Signals, commands, data, etc. received through the communication interface 230 may be transferred to the processor 220 or the memory 210, and files, etc., may be further stored by the computer device 200 (described above) Permanent storage device).

The input / output interface 240 may be a means for interfacing with the input / output device 250. For example, the input device may include a device such as a microphone, keyboard, camera or mouse, and the output device may include a device such as a display or speaker. As another example, the input / output interface 240 may be a means for interfacing with a device in which functions for input and output are integrated into one, such as a touch screen. The input / output device 250 may be configured as a computer device 200 and a single device.

Also, in other embodiments, the computer device 200 may include fewer or more components than those in FIG. 2. However, there is no need to clearly show most prior art components. For example, the computer device 200 may be implemented to include at least some of the above-described input / output devices 250, or may further include other components such as a transceiver, a database, and the like.

SaaS (Software as a Service), cloud (Cloud), mobile app store (Mobile App. Store) such as make it easy to take advantage of the various services and applications users data to a variety of third-party applications they have (3 ^rd Application ).

1. SaaS (for example, Salesforce)

Variety of services associated with SaaS are provided through the app exchange (appexchange) and the user is using to connect with its own data or service with a third party (3 ^rd Party) service. At this time, data on the sales force of individual users or operators may be provided through a third-party service.

2. Cloud (eg Amazon's Amazon Web Service (AWS) marketplace)

Various applications and instance images that can be used in a cloud service environment are provided as services. When users use a service or application that they want, data related to the service can be provided in connection with a third-party service.

3. Mobile App Store (eg, Google Play store, Apple App Store)

App developers / developers and publishers provide one or multiple apps to the App Store. Users use the app according to their needs, and different information can be provided to developers / developers and publishers through each app. As an example of a mobile app store environment, based on the number of mobile apps provided by the same app developer / developer or publisher, the user installs multiple mobile apps and exposes different information through individual apps. In this case, there is no method for the user to separately recognize or identify the exposure of such information.

3 is a diagram showing an example of a configuration for each major player of the personal information risk identification system in an embodiment of the present invention. 3 is a main player of the personal information risk identification system, a third party (3 ^rd Party Side, 310), a service / platform provider side (Service / Platform Provider Side, 320), and a user side (User Side, 330) Respectively.

The third party side 310 registers at least one application on the service / platform provider side 320 and provides a service to the user side 330 through the application (for example, in FIG. 3) Company # cA) shown. Such a third-party company may substantially correspond to a physical device implementing a service server providing a service to a user's terminal accessing through a network using an application. In FIG. 3, only one company (Company # cA) is shown on the third party side 310, but a substantial number of companies may exist.

The service / platform provider side 320 receives at least one application from at least one company of the third party side 310 and provides a platform to the user side 330 (eg, SaaS, cloud, mobile app) Store, etc.). In the example of FIG. 3, the service / platform provider side 320 receives the first application (App. # 1), second application (App. # 2), and third application (App. # 3) from the company (Company # cA). And a fourth application (App. # 4) can be registered and provided to the user 330. The service / platform provider side 320 shown in FIG. 3 may include multiple service providers and / or multiple platform providers.

The user side 330 receives a desired application from the service / platform provider side 320, and users receiving a service from the third party side 310 through the application (eg, User # uA shown in FIG. 3 and User # uZ). In fact, each of the users may correspond to a user's terminal (eg, PC, smartphone, etc.) that installs and executes the application.

Meanwhile, in FIG. 3, the first application (App. # 1) collects data of data types # 1 to 3, and the second application (App. # 2) collects data of data types # 2 to 4, and 3 It is assumed that the application (App. # 3) collects data of data types # 3 to 5, and the fourth application collects data of data types # 4 to 6. In addition, the first user (User # uA) is the first application (App. # 1), the second application (App. # 2) and the fourth application (App. # 4) of the first user (User # uA) It is installed and used in the terminal, and the second user (User # uZ) uses the first application (App. # 1), the third application (App. # 3), and the fourth application (App. # 4) as the second user. It is assumed that it is installed and used in the terminal of (User # uZ).

In this case, the company (Company # cA) is connected to the first user (User # uA) through the first application (App. # 1), the second application (App. # 2), and the fourth application (App. # 4). All data of data types # 1 to 6 are collected. In addition, the company (Company # cA) for the second user (User # uZ) through the first application (App. # 1), the third application (App. # 3) and the fourth application (App. # 4) All data of data types # 1 to 6 will be collected.

4 is a flowchart illustrating an example of a flow of exposure of user data in a main player-specific configuration of a personal information risk identification system in an embodiment of the present invention.

The first dotted line box 410 registers the app developed by the third party side 310 to the service / platform provider side 320, and reviews and publishes the app registered by the service / platform provider side 320, It shows an example of a process in which the user side 330 downloads and installs the published app through the terminal. Here, the app may collectively refer to an application, service, and mobile app provided by the third party side 310.

The second dotted box 420 is an example of a process in which the service / platform provider side 320 and the third party side 310 each store a user consent as the user side 330 agrees to the user permission. Is showing.

The third dotted box 430 collects app usage and statics information by the service / platform provider side 320 as the user side 330 uses the app installed on the terminal, and a third party The side 310 shows an example of a process of collecting personally identifiable information (PII).

In the fourth dotted box 440, as the user side 330 removes the app installed on the terminal, the service / platform provider side 320 deletes the app usage and statics information, and the third party The side 310 shows an example of a process of deleting personally identifiable information (PII).

5 is a diagram illustrating an example of a functional block for each main player of the personal information risk identification system in an embodiment of the present invention.

The third party side 310 may create a specification related to user data collection in a user, service, or application environment, and may include a data specification generation function 511 and a data management function 512 for this purpose.

The service / platform provider side 320 may review information related to the collection of user data and system data (storage-oriented review) at the time of service and application review (review), and review externally linked API and data flow (network Central review), and can match user agreement items and data collection specification items. To this end, the service / platform provider side 320 includes a data collection specification management function 521, a data storage testing / monitoring function 522, an externally linked API testing / monitoring function 523, and a data tracking management function 524. It can contain.

The client associated with the application (or service) provided to the user side 330, substantially the user side 330, may perform a user consent procedure and check collected data information. To this end, the client may include a user consent management function 531, a data storage monitoring function 532, and a user data query function 533.

The data specification generation function 511 included by the third party 310 has a function for generating a data specification for personal identification information collected and utilized by a service or application developed by the third party 310. It can provide, and can provide a function for creating a workflow for user consent and management. More specifically, the data specification generation function 511 may generate its own specification regarding data use of services and / or applications developed by the third party side 310. The data specification generation function 511 may be implemented to generate a specification for contents that must specify information in accordance with the General Data Protection Regulation (GDPR) or the Personal Information Protection Act, and the generated specification can be provided to the service / platform provider side ( 320). For example, the specification may be generated and provided in the form of XML (eXtensible Markup Language), and the data interface may be implemented in the form of JSON (JavaScript Object Notation). In order to secure the reliability of the data specification generation function 511, the specification of the data to be utilized by providing or adding the specification on the blockchain provided by another third party, other service / platform provider side, or other provider Trust can be secured.

In addition, the data management function 512 included in the third party side 310 may provide an anonymization function through tracking and de-identification of data collected by the third party side 310, and per user. A function for providing data statistics function can be provided. The data management function 512 may provide a management function for data collected directly from the service and / or application by the third party 310 or a profile, statistical information, or the like provided from the service / platform provider 320. . In particular, when a client, service / platform provider side 320 of the user side 330 or a government agency, etc., requires a monitoring function for the use of the collected data, the collected information can be provided in the form of statistics, and it is necessary The collected information can be deleted immediately.

The data collection specification management function 521 included in the service / platform provider side 320 may provide a specification management function related to data usage provided from the third party side 310, and a snap for user consent information It can provide a shot function. At this time, the snapshot data generated through the snapshot function can be distributed and managed in the form of a blockchain to prevent forgery and alteration of data. More specifically, the data collection specification management function 521 may store and manage specification contents related to the use of data provided from the third party side 310 and contract form during the service provision period for the stored contents In addition, separate retention periods and constraints can be added for data utilization. Such contract information may be provided and stored in a separate blockchain or other trusted providers in the form of a snapshot described above. At this time, a supervisory authority such as a client or a government agency of the user 330 may request and confirm contract information. Information that can be requested and confirmed by a client of the user side 330 may be limited to information related to a service and / or application being used by a user of the client.

In addition, the data storage testing / monitoring function 522 included in the service / platform provider side 320 includes security and de-identification of data stored in the data storage of the service and / or application of the third-party side 310, An inspection function for anonymization, etc. may be provided, and a monitoring function for physical access to the data storage may be provided. More specifically, the data storage testing / monitoring function 522 is a user environment or platform environment for services and / or applications provided by the third party 310 (for example, IAAS (Infrastructure as a Service) / PAAS when using the cloud) (Platform as a Service)), processes related to data storage and processing can be inspected and monitored. In this case, the data storage testing / monitoring function 522 may specify information related to security, de-identification, and anonymization related to data processing, and may determine whether to register the service and / or application based on the specified information. have. Further, the data storage testing / monitoring function 522 may provide a function for separately monitoring access from the outside when the corresponding data storage is a service provided in a SaaS form.

In addition, the external interworking API testing / monitoring function 523 included in the service / platform provider side 320 may provide an external interworking API and network monitoring function of the service and / or application of the third party 310. , It can provide inspection function for end-to-end encryption, de-identification, and anonymization for data communication. More specifically, when a service and / or application interoperates with an external service, the service / platform provider side 320 uses an external interworking API testing / monitoring function 523 when inspecting the service and / or application. Through this, it is possible to check information related to external service linkage and register whether to monitor the information on the platform or PaaS on the client side of the user 330. At this time, the external interworking API testing / monitoring function 523 may determine whether a risk is identified based on whether end-to-end encryption, de-identification, or anonymization related to the external interworking. In addition, the external interworking API testing / monitoring function 523 may check communication with a server that uses network information (address) that is not specified or authenticated in the specification.

In addition, the data tracking management function 524 included in the service / platform provider side 320 manages tracking of stored data in the platform (eg, a mobile operating system) of the service and / or application of the third party 310. A function can be provided, and the tracking management function can be linked to a data storage testing / monitoring function. In addition, the data tracking management function 523 may provide a function for storing and tracking specification data when a service is stopped due to the user's withdrawal or expiration of use. More specifically, the data tracking management function 524 may provide a monitoring function for data stored by the service and / or application on the service / platform provider side 320. In addition, the data tracking management function 524 also provides a monitoring function for data (for example, common login information, user profile, payment related profile, tax related profile, etc.) collected for service provision on the service and / or platform. can do. The service / platform provider side 320 should be able to provide a function for separately monitoring the corresponding information to a client of the user side 330, another third party side, or a government agency. When a function for separate monitoring is provided on the blockchain in the form of a snapshot, the service / platform provider side 320 must be able to announce separate information about the monitoring function on the blockchain.

The user consent management function 531 included in the client of the user side 330 provides a function to store a data snapshot of the service / platform provider side 320 or an authorized institution for user consent information when the initial app is executed. You can. More specifically, the user consent management function 531 may store user consent information and provide user consent information to the service / platform provider side 320. It is also possible to provide user consent information to trusted third parties. In one example, the user consent management function 531 may store user consent information in the form of a snapshot in another operator's blockchain. At this time, the user consent information must be additionally notified to the client, and the method of storage and management should also be mentioned. The user consent management function 531 may provide a function for checking user consent information in a separate control window or environment.

In addition, the data storage monitoring function 532 included by the client of the user side 330 may provide a monitoring function for physical access to the data storage, and provide a monitoring function for whether data is completely deleted when an app is deleted. You can. More specifically, in the case of services and / or applications operating in a client environment, the data storage monitoring function 532 should be able to monitor whether the client device (eg, the user's terminal) has physical access to the data storage. To this end, it is possible to provide a sandbox function that can control it in the operating system or service platform of the client device. In addition, the data storage monitoring function 532 may provide a function to completely delete data in the sandbox when deleting services and / or applications (delete on the client device).

In addition, the user data query function 533 included in the client of the user side 330 may provide a query function related to the user's data rights (rights for data modification and deletion, etc.), and separately provided by the platform provider It can provide a link to a function for querying data. For example, a link for linking the information management page of the deleted app on the setting page of the mobile operating system may be provided. More specifically, the user data query function 533 may provide a means (for example, URL, Web form, etc.) for a user and / or a client to inquire about a status related to his data. The user data query function 533 should be able to explicitly provide such means, and query means at the time of service start (eg, application installation and contract) and end (deletion of application or withdrawal of service). Should be able to expose. According to an embodiment, when the service / platform provider side 320 controls the user's terminal (or client device), the service / platform provider side 320 may provide information according to a query through a separate information management page. have.

6 is a block diagram showing an example of the internal configuration of a personal information risk identification system according to an embodiment of the present invention. 6 is a third party side device 610, service / platform provider side 320, which may be included by each of the companies (eg, developers or developers of services and / or applications) belonging to the third party side 310 ), A service / platform provider-side device 620 each of service providers and / or platform providers may include, and a user-side device 630 capable of corresponding to each of terminals of users belonging to the user side 330 , And a third-party trust / accredited system 640.

In this case, each of the modules 611, 612, 621, 622, 623, 624, 631, 632, 633 shown in FIG. 6 is a third-party device 610, a service / platform provider-side device 620, and a user side It may be representations of different functions performed by at least one processor that each device 630 may include. For example, each of the third-party device 610, the service / platform provider-side device 620, and the user-side device 630 may include a computer program for executing a personal information risk identification method on the computer, At least one processor each of the third-party device 610, the service / platform provider-side device 620, and the user-side device 630 may include modules according to a control command according to a program code of a corresponding computer program. (611, 612, 621, 622, 623, 624, 631, 632, 633) of the third-party device 610, service / platform provider-side device 620 or user to process the functions provided by the corresponding module The side device 630 can be controlled. For example, the data specification generation module 611 may be a functional expression for the function of the processor of the third-party device 610 to control the third-party device 610 to generate the data specification. In addition, the modules 611, 612, 621, 622, 623, 624, 631, 632, 633 shown in FIG. 6 are the functions 511, 512, 521, 522, 523, 524, 531 described through FIG. 532, 533). For example, the data specification generation module 611 may be a functional representation of the processor of the third party side device 610 that controls the third party side device 610 to perform the data specification generation function 511.

Meanwhile, the first data storage 613, the second data storage 625, and the third data storage 634 include a third-party device 610, a service / platform provider-side device 620, and a user-side device 630. ). For example, the processor of the third-party device 610 performs the data specification generation function 511 through the data specification generation module 611 to generate the data specification, and the generated specification is generated by the third-party device ( The third-party device 610 may be controlled to be stored in the first data storage 613 which is the physical storage of the 610).

7 is a flowchart illustrating an example of a method of identifying personal information risk from the perspective of a third party in one embodiment of the present invention. The method of identifying personal information risk according to this embodiment may be performed by the computer device 200 implementing the third-party device 610 described with reference to FIG. 6. For example, the processor 220 of the computer device 200 may be implemented to execute control instructions according to code of an operating system included in the memory 210 or code of at least one program. Here, the processor 220 is the computer device 200 to perform the steps (710 to 760) of the method of FIG. 7, the computer device 200 according to the control command provided by the code stored in the computer device 200 Can be controlled.

In operation 710, the computer device 200 may generate a specification related to data use for at least one of services and applications on the third party side. Here, the third party side may correspond to the third party side 310 described with reference to FIGS. 3 to 6 above.

In step 720, the computer device 200 may transmit the generated specification to the service / platform provider side device through the network. Here, the service / platform provider-side device may correspond to the service / platform provider-side device 620 described through FIG. 6, and the transmitted specification may include a second data storage 625 included in the service / platform provider-side device 620 ) Can be stored and managed. The service / platform provider-side device 620 may maintain the content of the specification in the form of a contract during the service provision period, and may add a separate maintenance period and constraints regarding data utilization. The information in the form of a contract may be provided and stored in a system of a third-party provider, which will be described later in a snapshot form.

In step 730, the computer device 200 may transmit the generated specification to a system of a third-party operator. The transmission of the specification to the system of the third-party operator is for securing the trust of the specification, and for higher reliability, the specification transmitted to the system of the third-party operator is distributedly stored on the blockchain associated with the third-party operator. Can be. At this time, the snapshot-type information that the service / platform provider-side device 620 transmits to the third-party provider may also be distributedly stored on the blockchain associated with the third-party provider.

In step 740, the computer device 200 receives at least one of services and applications through the service / platform provider-side device or the service / platform provider-side device and uses at least one of the services and applications through the network. Data related to one can be collected and stored in a data store. For example, the data collected by the computer device 200 in step 740 may include personal identification information of a user related to at least one of services and applications.

In operation 750, the computer device 200 may provide information on the utilization of data stored in the data storage according to an external request. For example, the computer device 200 may provide a function for monitoring information on the utilization of data in the form of statistics according to at least one request from a user-side device, a service / platform provider-side device, and a government agency. .

In operation 760, the computer device 200 may delete data collected in relation to the corresponding user from the data storage according to a request from the user-side device. Deleting the collected data according to the user's request can satisfy the right of erasure required by the General Data Protection Regulation (GDPR).

8 is a flowchart illustrating an example of a method for identifying personal information risk from the perspective of a service / platform provider in an embodiment of the present invention. The personal information risk identification method according to this embodiment may be performed by the computer device 200 implementing the service / platform provider side device 620 described with reference to FIG. 6. For example, the processor 220 of the computer device 200 may be implemented to execute control instructions according to code of an operating system included in the memory 210 or code of at least one program. Here, the processor 220 is the computer device 200 to perform the steps (810 to 850) included in the method of Figure 8, the computer device 200 according to the control command provided by the code stored in the computer device 200 Can be controlled.

In step 810, the computer device 200 may receive a specification related to data usage for at least one of services and applications on the third party side from the third party side device and store the data in a data storage on the service / platform provider side. . Here, the third party side may correspond to the third party side 310 described through FIGS. 3 to 6, and the service / platform provider side may correspond to the service / platform provider side 320 described through FIGS. 3 to 6. have.

In step 820, the computer device 200 may receive the user consent information from the user side using at least one of the service and the application and store it in the data storage of the service / platform provider side. Here, the user side may correspond to the user side 330 described through FIGS. 3 to 6. For example, when an application is installed and operated on the client device of the user side, the client device may receive and store user consent information from the user side under application control, and transmit the user consent information to the service / platform provider side. have. At this time, the computer device 200 may receive the transmitted user consent information and store it in a data storage.

In operation 830, the computer device 200 may inspect and monitor processes related to data storage and processing in a user environment or a platform environment of a user using at least one of services and applications. In this case, the computer device 200 may specify information on security, de-identification, and anonymization related to data storage and processing, and determine whether to register for at least one of services and applications based on the specified information. In addition, when the data storage related to data storage and processing is a service provided in the form of software as a service (SaaS), the computer device 200 may monitor access to the data storage from the outside.

In step 840, the computer device 200 examines at least one of the services and applications to monitor whether at least one of the services and applications interoperates with an external service, and a platform on a client side or a platform as a service (PaaS) on the user side. Whether or not monitoring of related information can be registered. Further, the computer device 200 may check communication with a server using a network address that is not specified or authenticated in the specification received in step 840.

In operation 850, the computer device 200 may provide a monitoring function for data stored in a data storage on the service / platform provider side in connection with at least one of services and applications. For example, the computer device 200 may provide a monitoring function for data that at least one of the services and applications is stored in a data storage on the service / platform provider side or data collected for service provision on the service / platform provider side. You can.

9 is a flowchart illustrating an example of a method for identifying personal information risk from a user's point of view in an embodiment of the present invention. The personal information risk identification method according to the present embodiment may be performed by the computer device 200 implementing the user-side device 630 described with reference to FIG. 6. For example, the processor 220 of the computer device 200 may be implemented to execute control instructions according to code of an operating system included in the memory 210 or code of at least one program. Here, the processor 220, the computer device 200 in accordance with the control command provided by the code stored in the computer device 200, the computer device 200 to perform the steps (910 to 960) included in the method of Figure 9 Can be controlled.

In step 910, the computer device 200 may receive and store user consent information for at least one of the services and applications of the third party from the user. Here, the third party side may correspond to the third party side 310 described with reference to FIGS. 3 to 6 above.

In step 920, the computer device 200 may transmit the user consent information to the service / platform provider side device through the network. Here, the service / platform provider side may correspond to the service / platform provider side 320 described with reference to FIGS. 3 to 6.

In step 930, the computer device 200 may transmit the user consent information to the system of the third-party operator. User consent information transmitted to a third-party operator's system may be distributed and stored on a blockchain associated with a third-party operator in order to increase reliability for storing user consent information.

In operation 940, the computer device 200 may output information on a method of storing and managing user consent information to the user. Therefore, the user can query the user consent information for the service and / or application when desired.

In operation 950, the computer device 200 may monitor whether a client device using at least one of services and applications has physical access to the data storage. For example, the computer device 200 may monitor whether the client device has physical access to the data storage by using a sandbox function provided by the operating system of the client device or a service platform of a service provided to the client device. have. At this time, the computer device 200 may delete data in the sandbox at the request of the user.

In step 960, the computer device 200 may provide a user data query function capable of querying the current status of data related to at least one of services and applications. For example, the computer device 200 may provide a user data query function at at least one of a start time and an end time of at least one of services and applications. As another example, the computer device 200 may receive an information management function including a user data query function from a service / platform provider side device controlling a client device and provide it to the user side.

As described above, according to embodiments of the present invention, a personal information risk identification technology that generates and provides a specification for a service and / or application from a third party's point of view and collects and manages data related to the service and / or application Can provide. In addition, from the perspective of the service / platform provider, the specifications of the service and / or application from the third party and user consent information from the user using the service and / or application are received and managed, and the user environment on the user side Alternatively, a process related to data storage and processing in a platform environment can be inspected and monitored, and a personal information risk identification technology that provides a monitoring function for data stored in a data storage of a service / platform provider may be provided. In addition, from the user's point of view, it stores and provides user consent information for services and / or applications on the third party's side, monitors the physical access to the data storage of the client device, and queries the collected data status Personal information risk identification technology to provide.

The system or device described above may be implemented as a hardware component, a software component, or a combination of hardware components and software components. For example, the devices and components described in the embodiments include, for example, processors, controllers, arithmetic logic units (ALUs), digital signal processors (micro signal processors), microcomputers, field programmable gate arrays (FPGAs). , A programmable logic unit (PLU), microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose computers or special purpose computers. The processing device may perform an operating system (OS) and one or more software applications running on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of the software. For convenience of understanding, a processing device may be described as one being used, but a person having ordinary skill in the art, the processing device may include a plurality of processing elements and / or a plurality of types of processing elements. It can be seen that may include. For example, the processing device may include a plurality of processors or a processor and a controller. In addition, other processing configurations, such as parallel processors, are possible.

The software may include a computer program, code, instruction, or a combination of one or more of these, and configure the processing device to operate as desired, or process independently or collectively You can command the device. Software and / or data may be interpreted by a processing device, or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. Can be embodied in The software may be distributed on networked computer systems, and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, or the like alone or in combination. The medium may be a computer that continuously stores executable programs or may be temporarily stored for execution or download. In addition, the medium may be various recording means or storage means in the form of a single or several hardware combinations, and is not limited to a medium directly connected to a computer system, but may be distributed on a network. Examples of the media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical recording media such as CD-ROMs and DVDs, and magneto-optical media such as floptical disks, And program instructions including ROM, RAM, flash memory, and the like. In addition, examples of other media include an application store for distributing applications, a site for distributing or distributing various software, and a recording medium or storage medium managed by a server. Examples of program instructions include high-level language code that can be executed by a computer using an interpreter, etc., as well as machine language codes produced by a compiler.

As described above, although the embodiments have been described by a limited embodiment and drawings, those skilled in the art can make various modifications and variations from the above description. For example, the described techniques are performed in a different order than the described method, and / or the components of the described system, structure, device, circuit, etc. are combined or combined in a different form from the described method, or other components Alternatively, even if replaced or substituted by equivalents, appropriate results can be achieved.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (11)

Generating a specification related to data use for at least one of a third-party service and application;
Transmitting the generated specification to a service / platform provider side device through a network;
Collect data related to at least one of the services and applications from a user-side device receiving and using at least one of the services and applications through the service / platform provider-side device or the service / platform provider-side device Storing in a data store; And
Providing information on the utilization of data stored in the data storage according to an external request
Personal information risk identification method comprising a. According to claim 1,
Deleting data collected in relation to a corresponding user from the data storage according to a request from the user side device
Personal information risk identification method further comprising. According to claim 1,
Transmitting the generated specification to a third-party operator's system
Personal information risk identification method further comprising. According to claim 3,
A method of personal information risk identification, characterized in that the specifications transmitted to the third-party operator's system are distributed and stored on a blockchain associated with the third-party operator. According to claim 1,
The step of providing the information,
Personal information risk identification method characterized in that it provides a function to monitor the information on the use of the data in the form of statistics according to the request of at least one of the user-side device, the service / platform provider-side device and a government agency . A computer program stored in a computer readable recording medium in combination with a computer device for executing the method of claim 1 on a computer device. A computer-readable recording medium comprising a computer program for executing the method of any one of claims 1 to 5 in a computer device. In the computer device,
At least one processor implemented to execute computer readable instructions
Including,
By the at least one processor,
Create a specification related to the use of data for at least one of the services and applications of the third party,
Transmits the generated specification to a service / platform provider side device through a network,
Collect data related to at least one of the services and applications from a user-side device that receives and uses at least one of the services and applications through the service / platform provider-side device or the service / platform provider-side device. To the data store,
Providing information on utilization of data stored in the data storage according to requests from outside
Computer device characterized in that. The method of claim 8,
By the at least one processor,
Deleting data collected in relation to the user from the data store according to a request from the user side device
Computer device characterized in that. The method of claim 8,
By the at least one processor,
Transmitting the generated specification to a third-party operator's system,
The specifications transmitted to the third-party operator's system are distributed and stored on the blockchain associated with the third-party operator.
Computer device characterized in that. The method of claim 8,
By the at least one processor,
Providing a function to monitor information on utilization of the data in a statistical form according to at least one request from the user-side device, the service / platform provider-side device, and a government agency.
Computer device characterized in that.

Images