KR20200047992A - Method for simultaneously processing encryption and de-identification of privacy information, server and cloud computing service server for the same - Google Patents

Abstract

A method for simultaneously processing encryption and de-identification of personal information, a server device, and a cloud computing service server device are provided. The method includes the steps of: collecting plaintext data including personal information regarding a predetermined personal information storage transaction of a first personal information processing application of a web application server; generating encrypted text data by encrypting the plaintext data including the personal information according to a predetermined encryption algorithm; de-identifying the plaintext data including the personal information to generate de-identification data; storing the encrypted text data in encryption storage; generating a de-identification data combining encryption identification key by combining a cryptographic identification key corresponding to the encrypted text data with at least a portion of the de-identification data; and returning the de-identification data combining encryption identification key.

Description

METHOD FOR SIMULTANEOUSLY PROCESSING ENCRYPTION AND DE-IDENTIFICATION OF PRIVACY INFORMATION, SERVER AND CLOUD COMPUTING SERVICE SERVER FOR THE SAME}

The present invention relates to a personal information protection technology, and more particularly, to a method for simultaneously processing encryption and de-identification of personal information, a server device, and a cloud computing service server device.

Personal information refers to information that can identify a specific individual such as name, resident registration number, and address as personal information. In order to prevent infringement, leakage, and theft of personal information, physical and technical safety measures are required. Encryption is the most representative and fundamental method among various technical measures to protect personal information.

In order to revitalize the big data industry, data utilization guides have been presented. Whether or not the data corresponds to personal information should be reviewed first, and if it is not personal information, it can be used freely, but in the case of personal information, de-identification measures are required in advance. De-identification refers to measures that prevent the identification of a specific individual by deleting or replacing some or all of the elements that identify a particular individual.

With the increase and diversification of web and app services that use personal information, the importance of such personal information encryption and de-identification is further emphasized. Companies that use personal information, to encrypt and de-identify personal information, first encrypt the personal information and store it in the personal information storage, and then use the encrypted personal information stored in the personal information storage for big data later. Then, the encrypted personal information must be decrypted and reprocessed for de-identification. Not only is this a waste of time and money, there is a problem that a security vulnerability occurs in the process of decrypting and reverting encrypted personal information from a big data store.

Registered Patent Publication No. 10-1688811, 2016.12.22.

The problem to be solved by the present invention is to provide a method of simultaneously processing encryption and de-identification of personal information, a server device, and a cloud computing service server device.

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

The method according to an aspect of the present invention for solving the above-described problem is a step of collecting plain text data including personal information regarding a predetermined personal information storage transaction of the first personal information processing application of the web application server, the personal Encrypting plaintext data including information according to a predetermined encryption algorithm to generate ciphertext data, de-identifying plaintext data containing the personal information to generate non-identification data, and storing the ciphertext data in a password storage Storing, combining at least a portion of the non-identifying data with a password identification key corresponding to the ciphertext data to generate a non-identifying data combining password identification key, and returning the non-identifying data combining password identification key; Includes.

In some embodiments of the present invention, the non-identifying data combination encryption identification key is stored in a personal information storage.

In some embodiments of the present invention, the method includes: collecting the non-identifying data combination encryption identification key stored in the personal information storage, extracting the non-identification data from the non-identification data combining encryption identification key, and the The method further includes storing the non-identifying data in the big data storage.

In some embodiments of the present invention, the method further includes analyzing the non-identifying data stored in the big data storage and analyzing the big data.

In some embodiments of the present invention, the method includes collecting a non-identifying data combining password identification key for a predetermined personal information inquiry transaction of the second personal information processing application of the web application server, and the non-identifying data combining password Extracting the cryptographic identification key from the identification key, querying the cryptographic data corresponding to the cryptographic identification key stored in the cryptographic storage, and decrypting the cryptographic data according to the cryptographic algorithm to generate the plaintext data And returning the plain text data.

In some embodiments of the present invention, the step of generating the non-identifying data combining encryption identification key further generates data by combining the data regarding the size of at least a portion of the non-identifying data to generate the non-identifying data combining encryption identification key.

In some embodiments of the present invention, the method includes collecting the non-identifying data combination encryption identification key stored in the personal information storage, and using the data regarding the size of at least a portion of the non-identifying data, the non-identifying data The method further includes extracting the non-identifying data from the combined cryptographic identification key, and storing the non-identifying data in a big data storage.

In some embodiments of the present invention, the method further comprises: collecting a non-identifying data combination encryption identification key for a predetermined personal information inquiry transaction of the second personal information processing application of the web application server, at least the non-identifying data Extracting the cryptographic identification key from the non-identifying data combination cryptographic identification key using data on a portion of the size, querying the cryptographic data corresponding to the cryptographic identification key stored in the cryptographic storage, and the cryptographic text And decrypting data according to the encryption algorithm to generate the plain text data, and returning the plain text data.

In some embodiments of the present invention, the step of generating the non-identifying data combining encryption identification key further comprises combining an identification code to indicate the end of the non-identifying data combining encryption identification key, and the non-identifying data combining encryption identification key. Produces

In some embodiments of the present invention, the method of concurrently processing the encryption and de-identification is performed in a cloud computing environment.

A server device according to another aspect of the present invention for solving the above-described problem collects plain text data including personal information regarding a predetermined personal information storage transaction of a personal information processing application of a web application server, and combines non-identifying data An encryption and de-identification agent that returns a password identification key, and encrypts plain text data containing the personal information according to a predetermined encryption algorithm to generate cryptographic text data, and de-identifies the plain text data containing the personal information. An encryption and de-identification processor that generates identification data and combines the cryptographic identification key with at least a portion of the non-identifying data to generate the non-identifying data combination cryptographic identification key, and corresponding to the ciphertext data and the ciphertext data And a password storage for storing a password identification key.

The cloud computing service server device according to still another aspect of the present invention for solving the above-mentioned problems relates to a web application server executing one or more applications, and a predetermined personal information storage transaction of the personal information processing application of the web application server An encryption and de-identification agent that collects plain text data including personal information, returns a non-identifying data combination password identification key, and encrypts the plain text data including the personal information according to a predetermined encryption algorithm to generate cipher text data. , Encryption and ratio to generate the non-identification data by de-identifying the plain text data containing the personal information, and combining the password identification key to at least a portion of the non-identification data to generate the non-identification data combination password identification key Identification processor, the non-identifying data And a personal information store, and the password repository stores the password identification key corresponding to the ciphertext data and the ciphertext data to store the password identification key.

Other specific matters of the present invention are included in the detailed description and drawings.

According to the above-described method, server device and cloud computing service server device of the present invention, it is possible to simultaneously process encryption and de-identification of personal information without the need for post-processing of data for de-identification of personal information.

In addition, according to the above-described method, server device, and cloud computing service server device of the present invention, by simultaneously processing encryption and de-identification of personal information, additional protection of personal information and waste of additional time and money for de-identification And block security vulnerabilities.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a block diagram schematically showing an environment to which a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention is applied.
2 is a block diagram schematically showing a configuration of a server device that simultaneously processes encryption and de-identification of personal information according to an embodiment of the present invention.
FIG. 3 is a diagram schematically showing data processing and exchange in the process of encrypting and decrypting personal information using the server device of FIG. 2.
FIG. 4 is a diagram schematically illustrating data processing and exchange in the process of de-identification and big data analysis of personal information using the server device of FIG. 2.
5 is a flowchart schematically illustrating an encryption process of personal information in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.
6 is a flowchart schematically illustrating a process of decrypting personal information in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.
7 is a flowchart schematically showing a process of analyzing and de-identifying personal information and analyzing big data in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.
8 is a view for explaining data generated by a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention and an example thereof.
9 is a view for explaining the configuration of an example of a non-identifying data combination encryption identification key generated by a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.
10 is a view for explaining that a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention can be performed in a cloud computing environment.

Advantages and features of the present invention, and methods for achieving them will be clarified with reference to embodiments described below in detail together with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be implemented in various different forms, and only the present embodiments allow the disclosure of the present invention to be complete, and are common in the technical field to which the present invention pertains. It is provided to fully inform the skilled person of the scope of the present invention, and the present invention is only defined by the scope of the claims.

The terminology used herein is for describing the embodiments and is not intended to limit the present invention. In the present specification, the singular form also includes the plural form unless otherwise specified in the phrase. As used herein, “comprises” and / or “comprising” does not exclude the presence or addition of one or more other components other than the components mentioned. Throughout the specification, the same reference numerals refer to the same components, and “and / or” includes each and every combination of one or more of the components mentioned. Although "first", "second", etc. are used to describe various components, it goes without saying that these components are not limited by these terms. These terms are only used to distinguish one component from another component. Therefore, it goes without saying that the first component mentioned below may be the second component within the technical spirit of the present invention.

Unless otherwise defined, all terms (including technical and scientific terms) used in the present specification may be used as meanings commonly understood by those skilled in the art to which the present invention pertains. In addition, terms defined in the commonly used dictionary are not ideally or excessively interpreted unless explicitly defined.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram schematically showing an environment to which a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention is applied.

Referring to FIG. 1, the user client 100 communicates with the server device 200. In some embodiments of the present invention, as shown in FIG. 1, the web server 210, the web application server 220, and the database 230 are provided as one server device 200. In some embodiments of the present invention, the web server 210, web application server 220, and database 230 are provided as different server devices.

The user client 100 communicates with the web server 210 through a network. The network is provided by wired, wireless or a combination of wired and wireless. The scale, topology, and communication method of the network may be variously provided according to embodiments. For example, the network may be the Internet.

The user client 100 is used by a user and represents an electronic device capable of communicating through a network. For example, the user client 100 includes an electronic device such as a smartphone, tablet, laptop, desktop, and the like. However, the present invention is not limited thereto, and the user client 100 includes any electronic device capable of communicating through a network such as a smart TV, a smart watch, a wearable band, and an artificial intelligence speaker.

The web server 210 receives and processes an HTTP request from the user client 100. According to the processing result, the web server 210 sends an HTTP response to the user client 100. The web server 210 provides static data processing, such as HTML documents, to the user client 100.

The web application server 220 receives and processes an HTTP request from a user client through the web server 210. The web application server 220 executes one or more applications to process HTTP requests. The application performs one or more transactions. “Transaction” refers to a logical unit of work performed by interacting with the database 230. Transactions are operations related to data processing, processing, storage, or inquiry. A transaction includes one or more queries. The query is performed using a predetermined query language, for example, Structured Query Language (SQL). In the present specification, the 'personal information storage transaction' refers to a job for storing personal information in the database 230, and the 'personal information inquiry transaction' refers to a job for querying personal information stored in the database 230. The web application server 220 provides dynamic data processing and web application services to the user client 100. In some embodiments of the present invention, unlike the one shown in FIG. 1, the web server 210 is omitted, and the web application server 220 performs the functions of the web server 210.

The database 230 organizes and stores various data. In some embodiments of the present invention, the database 230 stores and manages data for providing web or app services. In some embodiments of the present invention, database 230 stores and manages personal information of service users. In some embodiments of the present invention, the database 230 includes a plurality of repositories that are functionally or differentiated according to the data they store. In some embodiments of the invention, database 230 includes a relational database and its management system.

The web application server 220 communicates with the encryption and de-identification server 300 through the network. For example, the network includes the Internet or a virtualized network. As described later, the encryption and de-identification server 300 simultaneously processes encryption and de-identification of data including personal information that is processed, processed, stored, or inquired by the web application server 200.

The database 230 communicates with the big data analysis server 400 through a network. For example, the network includes the Internet, a local network, or a virtualized network. As described later, the big data analysis server 400 collects data stored in the database 230 to extract non-identifying data, and processes the big data analysis.

In some embodiments of the present invention, unlike illustrated in FIG. 1, the encryption and de-identification server 300 and the big data analysis server 400 are provided as one server device. In some embodiments of the present invention, a web server 210, a web application server 220, a database 230, and a big data analysis server 400 are provided as one device.

2 is a block diagram schematically showing a configuration of a server device that simultaneously processes encryption and de-identification of personal information according to an embodiment of the present invention.

Referring to FIG. 2, the web application server 220 includes an HTTP filter 221, a personal information processing application 222, an SQL filter 223, an encryption and de-identification agent 224, and a database 230. Includes a personal information storage 231 and a password storage 232. The encryption and de-identification server 300 includes an encryption and de-identification processor 310 and an encryption key storage 320. The big data analysis server 400 includes a big data collector 410, a big data storage 420, and a big data analyzer 430. Each of the above-described components is provided as a software module.

The HTTP filter 221 filters HTTP requests received from the user client 100 through the web server 210. The HTTP filter 221 filters the HTTP request according to whether it includes an encryption target, or bypasses it to the personal information processing application 222. The HTTP filter 221 determines whether the HTTP request includes an encryption target based on one or more of the URI (including URL and URN) and its parameters (included in the URI or message body). Here, the URI and its parameters are used for processing personal information and are preset by the system administrator. That is, when an HTTP request requests processing of personal information, a value of a specific parameter included in the HTTP request corresponds to an encryption target. When the HTTP request includes an encryption target, the HTTP filter 221 collects and intercepts the value of a specific parameter in the HTTP request. The value of a specific parameter includes personal information and is plain text data before encryption. The HTTP filter 221 transmits the plain text data including the intercepted personal information to the encryption and de-identification agent 224. For example, a Byte Code Instrumentation (BCI) technique may be used to collect the value of a specific parameter in the HTTP request, but is not limited thereto. By using byte code modulation, the complexity and hassle of having to modify the source code of the personal information processing application 222 is avoided.

The personal information processing application 222 represents one or more applications that process or process data including personal information within the web application server 220. Of course, the personal information processing application 222 can also process data that does not contain personal information. That is, the personal information processing application 222 does not only process personal information.

The SQL filter 223 filters the SQL query received from the personal information processing application 222. The SQL filter 223 filters the SQL query according to whether it includes an encryption target, or bypasses it to the personal information storage 231. The SQL filter 223 determines whether the SQL query includes an encryption target based on one or more of an SQL statement (including commands such as SELECT, INSERT, and UPDATE) and its parameters (column name, table name, etc.). Here, the SQL statement and its parameters are used for processing personal information and are preset by the system administrator. That is, when the SQL query requests processing of personal information, the value of a specific parameter included in the SQL query corresponds to the encryption target. When the SQL query includes the encryption target, the SQL filter 223 collects and intercepts the values of specific parameters in the SQL query. The value of a specific parameter includes personal information and is plain text data before encryption. The SQL filter 223 transmits the plain text data including the intercepted personal information to the encryption and de-identification agent 224. For example, a byte code modulation technique may be used to collect values of specific parameters in the SQL query, but is not limited thereto. As described above, by using the byte code modulation, the complexity and hassle of modifying the source code of the personal information processing application 222 is prevented.

The encryption and de-identification agent 224 mediates between the web application server 220 and the encryption and de-identification server 300. Specifically, the encryption and de-identification agent 224 mediates between the HTTP filter 221, the SQL filter 223, and the personal information processing application 222 and the encryption and de-identification processor 310. The encryption and de-identification agent 224 delivers the intercepted data to the encryption and de-identification processor 310 before being transmitted to the personal information processing application 222 or the personal information storage 230, or encrypts and de-identifies The data processed by the processor 310 is transmitted to the personal information processing application 222 or the personal information storage 230.

The HTTP filter 221, the SQL filter 223, and the encryption and de-identification agent 224 are additionally installed in the web application server 220 by the system administrator.

The personal information storage 231 stores a non-identifying data combination encryption identification key that has been encrypted and de-identified. The personal information storage 231 stores plain text data that is not encrypted in the case of non-personal information. That is, the personal information storage 231 does not only store personal information.

The cryptographic storage 232 stores cryptographic text data encrypted by the encryption and de-identification processor 310 and a cryptographic identification key corresponding to the cryptographic data. The password identification key is a key for querying the ciphertext data stored in the password storage 232. The cryptographic storage 232 receives the ciphertext data from the encryption and de-identification processor 310 and returns the ciphertext identification key corresponding to the ciphertext data to the encryption and de-identification processor 310.

The password storage 230 is additionally installed in the database 230 by a system administrator. In some embodiments of the present invention, unlike the one shown in FIG. 2, the cryptographic storage 232 may be provided as a separate server device.

The encryption and de-identification processor 310 performs encryption according to a predetermined encryption algorithm. The encryption and de-identification processor 310 encrypts plaintext data including personal information to generate cryptographic text data. The encryption and de-identification processor 310 performs encryption by applying a one-way or two-way encryption algorithm according to a preset setting. For example, SHA512, AES256, SEED128, ARIA256, and the like may be used as the encryption algorithm, but are not limited thereto, and any encryption algorithm well known in the art to which the present invention pertains may be used. When encryption is complete, the encryption and de-identification processor 310 stores the ciphertext data in the encryption storage 232.

At the same time, the encryption and de-identification processor 310 performs de-identification. The encryption and de-identification processor 310 de-identifies plain text data including personal information to generate de-identification data. The encryption and de-identification processor 310 performs de-identification using a de-identification method according to a preset. For example, anonymization, data deletion, data categorization, and data masking may be used as the de-identification, but is not limited thereto, and any de-identification method well known in the art to which the present invention pertains may be used. have.

In addition, the encryption and de-identification processor 310 generates a non-identification data combination encryption identification key by combining an encryption identification key corresponding to the ciphertext data with at least a portion of the non-identification data. That is, when encryption and de-identification are simultaneously performed and completed by the encryption and de-identification processor 310, a non-identification data combination encryption identification key is generated as a result.

The encryption and de-identification processor 310 performs decryption according to the encryption algorithm. This is the case when a bidirectional encryption algorithm is applied according to a preset. The encryption and de-identification processor 310 extracts an encryption identification key corresponding to the ciphertext data from the non-identification data combination encryption identification key. The encryption and de-identification processor 310 queries the ciphertext data corresponding to the cipher identification key stored in the cryptographic storage 232. The encryption and de-identification processor 310 decrypts the ciphertext data according to the encryption algorithm to generate plaintext data including personal information.

The encryption key storage 320 stores an encryption key used for encryption or decryption by the encryption and de-identification processor 310. For encryption and decryption, a single key may be used as an encryption key, or different keys may be used. It will be apparent to those skilled in the art to which the present invention pertains that the cryptographic key storage 320 of FIG. 2 can be omitted if a cryptographic algorithm that does not use cryptographic keys is used. In some embodiments of the invention, the encryption key is updated periodically (eg, every few months or every few years) according to a preset.

With regard to the handling of data related to encryption, strong security is possible because the password identification key, the encryption key, and the ciphertext data are distributed and stored in different storages. Even if the password identification key stored in the personal information storage 231 is leaked, decryption of personal information is impossible because the ciphertext data is separately stored in the password storage 232.

In some embodiments of the present invention, the encryption and de-identification processor 310 and the encryption key storage 320 are provided to different server devices, as shown in FIG. 2. That is, the encryption and de-identification processor 310 and the encryption key storage 320 are isolated from each other and communicate through the network. In this case, the encryption and de-identification agent 224, the encryption and de-identification processor 310 and the encryption key storage 320 communicate using encryption of the transmission section. For example, Secure Socket Layer (SSL) and Transport Layer Security (TLS) technologies may be used, but are not limited thereto.

The big data collector 410 collects a non-identifying data combination encryption identification key stored in the personal information storage 231. The big data collector 410 accumulates and stores non-identifying data in the big data storage 420.

The big data storage 420 accumulates and stores non-identifying data to form big data. The non-identifying data stored in the big data storage 420 is provided as structured data.

The big data analyzer 430 processes big data analysis of unidentified data accumulated in the big data storage 420. For example, data mining, data mining, machine learning, deep learning, natural language processing, pattern recognition, relevance analysis, regression analysis, social network analysis, etc. may be used, but are not limited thereto. Any method well known in the art can be used.

Meanwhile, the web application server 220, the database 230, the encryption and de-identification server 300, and the big data analysis server 400 may further include other arbitrary components not shown in FIG. 2, respectively. .

FIG. 3 is a diagram schematically showing data processing and exchange in the process of encrypting and decrypting personal information using the server device of FIG. 2.

Referring to FIG. 3, encryption of personal information is performed in the following process.

In response to a request for personal information registration (input or storage, etc.) of the user client 100, the personal information processing application 222 performs a personal information storage transaction. That is, the personal information processing application 222 will receive an HTTP request requesting the processing of personal information, and will generate an SQL query for transmission to the personal information storage 231 to store data including personal information.

The encryption and de-identification agent 224 collects plain text data including personal information before being transmitted to the personal information processing application 222 through the HTTP filter 221. Alternatively, the encryption and de-identification agent 224 includes personal information before data is processed or processed by the personal information processing application 222 and then transmitted to the personal information storage 231 through the SQL filter 223. Collect plaintext data.

For encryption of personal information, the encryption and de-identification agent 224 transmits the plain text data including the collected personal information to the encryption and de-identification processor 310.

The encryption and de-identification processor 310 simultaneously encrypts and de-identifies plain text data including personal information to generate cipher text data, non-identification data, and non-identification data combination encryption identification keys. In some embodiments of the invention, the ciphertext data may include some plaintext. The plaintext range of the ciphertext data follows a preset. The encryption and de-identification processor 310 stores the ciphertext data in the password storage 232 and transmits the non-identification data combination encryption identification key to the encryption and de-identification agent 224. In some embodiments of the present invention, the encryption and de-identification processor 310 is a log (a date and time of processing, information of a web application server, encryption and encryption) of a transaction that collects data including personal information and encryption of the data. Record the information of the de-identification agent, the information of the user client, the unit to be encrypted (URI or SQL statement), the number of processing, etc.

The encryption and de-identification agent 224 returns the non-identification data combination encryption identification key to the personal information storage transaction. Accordingly, plaintext data including personal information is replaced with the non-identifying data combination encryption identification key before being transmitted to the personal information processing application 222 through the HTTP filter 221. Alternatively, after the data is processed or processed by the personal information processing application 222, plain text data including personal information is transmitted to the personal information storage 231 through the SQL filter 223, and the non-identifying data combination password is identified. It is replaced with a key.

Thus, the data including personal information is stored in the personal information storage 231 in the form of an encrypted cipher text rather than plain text.

In some embodiments of the present invention, the HTTP filter 221 collects HTTP requests as well as plain text data including personal information. Also, the SQL filter 223 collects SQL queries as well as plain text data including personal information.

Subsequently, the decryption of the personal information is performed as follows.

According to the personal information inquiry request of the user client 100, the personal information processing application 222 performs a personal information inquiry transaction. That is, the personal information processing application 222 will receive an HTTP request requesting the processing of personal information, and will generate an SQL query for sending to the personal information storage 231 to query data including personal information.

In response to the SQL query, the personal information store 231 will deliver the non-identifying data combination encryption identification key to the personal information processing application 222.

The encryption and de-identification agent 224 collects the non-identification data combination encryption identification key before passing it to the personal information processing application 222 through the SQL filter 223.

For the decryption of personal information, the encryption and de-identification agent 224 delivers the collected non-identification data combination encryption identification key to the encryption and de-identification processor 310.

The encryption and de-identification processor 310 performs decryption on the non-identification data combination encryption identification key to generate plain text data including personal information. The encryption and de-identification processor 310 transmits plain text data including personal information to the encryption and de-identification agent 224. In some embodiments of the present invention, the encryption and de-identification processor 310 is a log (a date and time of processing, information of a web application server, encryption and decryption) of a transaction that collects data including personal information and decryption of the data. Record the information of the de-identification agent, the information of the user client, the unit to be decrypted (URI or SQL statement), the number of processing, etc.

The encryption and de-identification agent 224 returns plaintext data including personal information to the personal information inquiry transaction. Accordingly, the non-identifying data combination encryption identification key is replaced with plain text data including personal information before being transmitted to the personal information processing application 222 through the SQL filter 223.

As a result, data including personal information is transmitted to the user client 100 in the form of plain text rather than encrypted text.

In some embodiments of the present invention, the SQL filter 223 collects SQL queries as well as plain text data including personal information.

FIG. 4 is a diagram schematically illustrating data processing and exchange in the process of de-identification and big data analysis of personal information using the server device of FIG. 2.

Referring to FIG. 4, de-identification of personal information is performed in the following process.

The big data collector 410 collects the non-identifying data combination encryption identification key stored in the personal information storage 231. The big data collector 410 extracts non-identification data corresponding to the non-identification part from the non-identification data combination encryption identification key. The big data collector 410 accumulates and stores non-identifying data in the big data storage 420.

The big data analyzer 430 processes big data analysis of unidentified data accumulated in the big data storage 420. System administrators can use the results of big data analysis processing to improve web or app services.

Meanwhile, functions and operations of encryption, decryption, and de-identification may be turned on or off (start or end) by external control settings, respectively.

In some embodiments of the present invention, for some personal information, only encryption is performed and de-identification may not be performed. This asynchronous processing follows the system administrator's control settings. In this case, the encryption and de-identification processor 310 does not generate the non-identification data and the non-identification data combination encryption identification key, but only the encryption text data. Then, the personal information storage 231 stores an encryption identification key that has been encrypted.

5 is a flowchart schematically illustrating an encryption process of personal information in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.

Referring to FIG. 5, first, in step S510, plaintext data including personal information is collected by the HTTP filter 221 or the SQL filter 223. The plain text data including the personal information is related to the personal information storage transaction of the personal information processing application 222. The plain text data including personal information collected by the HTTP filter 221 or the SQL filter 223 is transmitted to the encryption and de-identification processor 310 through the encryption and de-identification agent 224.

Subsequently, in step S520, the plain text data including personal information is encrypted and de-identified by the encryption and de-identification processor 310. In detail, the plain text data including personal information is encrypted according to a predetermined encryption algorithm to generate the encrypted text data. In addition, plain text data including personal information is de-identified to generate non-identified data. Depending on the embodiment, encryption and de-identification may be performed in the order of de-identification after encryption, in the order of encryption after de-identification, or simultaneously.

Subsequently, in step S530, the ciphertext data is stored in the cryptographic storage 320 by the encryption and de-identification processor 310. At this time, the password storage 320 returns the encryption identification key corresponding to the ciphertext data to the encryption and de-identification processor 310.

Subsequently, in step S540, the encryption and de-identification processor 310 generates a non-identification data combination encryption identification key. The encryption identification key is combined with at least a portion of the non-identification data to generate a non-identification data combination encryption identification key. The non-identifying data combination encryption identification key will be described in more detail with reference to FIGS. 8 to 9. The non-identifying data combination encryption identification key generated by the encryption and de-identification of the encryption and de-identification processor 310 is transmitted to the encryption and de-identification agent 224.

Subsequently, in step S550, by the encryption and de-identification agent 224, the non-identification data combination encryption identification key is returned to the personal information storage transaction. As a result, plaintext data including personal information in the HTTP request or in the SQL query is replaced with a non-identifying data combination encryption identification key. In addition, the personal information storage transaction of the personal information processing application 222 stores the non-identifying data combination password identification key in the personal information storage 231 rather than the plain text data including the personal information.

Meanwhile, in some embodiments of the present invention, unlike that shown in FIG. 5, steps S530 and S540 are performed in reverse order or simultaneously.

6 is a flowchart schematically illustrating a process of decrypting personal information in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.

Referring to FIG. 6, first, in step S610, a non-identifying data combination encryption identification key is collected by the SQL filter 223. The non-identifying data combination encryption identification key relates to a personal information inquiry transaction of the personal information processing application 222. The personal information storage transaction of step S510 of FIG. 5 and the personal information inquiry transaction of step S610 may be the same or different personal information processing applications. The non-identifying data combination encryption identification key collected by the SQL filter 223 is transmitted to the encryption and de-identification processor 310 through the encryption and de-identification agent 224.

Subsequently, in step S620, the encryption identification key is extracted from the non-identification data combination encryption identification key by the encryption and de-identification processor 310.

Subsequently, in step S630, the ciphertext data corresponding to the cipher identification key stored in the cipher storage 232 is inquired by the encryption and de-identification processor 310.

Subsequently, in step S640, the ciphertext data is decrypted by the encryption and de-identification processor 310. In detail, the ciphertext data is decrypted according to a predetermined encryption algorithm to generate plaintext data including personal information. Plain text data including personal information generated by decryption of the encryption and de-identification processor 310 is transmitted to the encryption and de-identification agent 224.

Subsequently, in step S650, the plaintext data including personal information is returned to the personal information inquiry transaction by the encryption and de-identification agent 224. As a result, the non-identifying data combination encryption identification key in the SQL query is replaced with plain text data including personal information. In addition, the personal information inquiry transaction of the personal information processing application 222 transmits plain text data including personal information, not the non-identifying data combination password identification key, to the user client 100 through the web server 210.

7 is a flowchart schematically illustrating a process of de-identifying and analyzing big data of personal information in a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.

Referring to FIG. 7, first, in step S710, a non-identifying data combination encryption identification key is collected by the big data collector 410. The big data collector 410 collects a non-identifying data combination encryption identification key stored in the personal information storage 231. In some embodiments of the present invention, the big data collector 410 also collects non-personal information stored in the personal information storage 231.

Subsequently, in step S720, by the big data collector 410, the non-identifying data is extracted from the non-identifying data combination encryption identification key.

Subsequently, in step S730, one or more of the non-identifying data is stored in the big data storage 420 by the big data collector 410. In some embodiments of the present invention, the big data collector 410 also stores one or more non-personal information in the big data storage 420.

Subsequently, in step S740, the non-identifying data stored in the big data storage 420 is processed by the big data analyzer 430.

8 is a view for explaining data generated by a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention and an example thereof.

Referring to FIG. 8, in the example of the first (a), if the plaintext data “Hong Gil-dong” is encrypted according to a predetermined encryption algorithm, the encrypted text data “ErmdH6cwFOKjTvS2WUzh =” is generated. “B31H2GSP” is assigned as a password identification key corresponding to the ciphertext data “ErmdH6cwFOKjTvS2WUzh =”. The plain text data “Hong Gil-dong” is de-identified by the data masking method, thereby generating the non-identifying data “Hong **”. It can be de-identified by the data deletion method. Combination of non-identification data The encryption identification key is generated as “red B31H2GSP01 $ #!” By combining the encryption identification key “B31H2GSP” with “red” that is part of the “identity data” “red **”.

In the example of the second (b), when the plaintext data “54, 12, Seocho-daero 77-gil, Seocho-gu, Seoul” is encrypted according to a predetermined encryption algorithm, the encrypted text data “Gd9rHK0AN3mZh6edZErmdH6cr ...” is generated. “...” means that the second half is omitted. “A31H3GDX” is assigned as a password identification key corresponding to the ciphertext data “Gd9rHK0AN3mZh6edZErmdH6cr ...”. The plain text data “54, 12, Seocho-daero 77-gil, Seocho-gu, Seoul,” is de-identified by a data masking method to generate non-identifying data “Seocho-gu, Seoul ******”. Similarly, it may be de-identified by a data deletion method. Combination of non-identification data The password identification key is generated by combining the password identification key “A31H3GDX” with “Seoul-si, Seocho-gu,” which is part of “Seoul-si, Seocho-gu, Seoul ******”.

9 is a view for explaining the configuration of an example of a non-identifying data combination encryption identification key generated by a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention.

Referring to FIG. 9, in the example of the first (a), the non-identifying data combination encryption identification key represents one digit of the non-identification part (red), eight digits of the encryption identification key “B31H2GSP”, and the size of the non-identification part. It consists of 2 digits and 3 digits representing the identification code.

In the example of the second (b), the non-identification data combination encryption identification key is 7 digits of the non-identification unit “Seocho-gu, Seoul”, 8 digits of the encryption identification key “A31H3GDX”, 2 digits indicating the size of the non-identification unit, 3 representing the identification code It consisted of seats.

In some embodiments of the present invention, as shown in FIGS. 8 to 9, the encryption and de-identification processor 310 is configured to at least a portion of the non-identification data, a cryptographic identification key, and at least a size of at least a portion of the non-identification data. By combining the related data and the identification code, a non-identifying data combining encryption identification key is generated.

In some embodiments of the present invention, the big data collector 410 extracts only the non-identifying data from the non-identifying data combination encryption identification key by using data regarding the size of at least a portion of the non-identifying data. In the example of the first (a), since the size of the non-identification unit is 1, the big data collector 410 extracts only “red”, which is one digit from the front of “Hong B31H2GSP01 $ #!”, As non-identification data. In the example of the second (b), since the size of the non-identification unit is 7, the big data collector 410 extracts only the seven digits “Seoul-si, Seocho-gu” from the front of “Seoul-si, Seocho-gu A31H3GDX07 $ #!” As non-identification data.

In some embodiments of the present invention, the encryption and de-identification processor 310 extracts only the cryptographic identification key from the non-identifying data combination cryptographic identification key using data regarding the size of at least a portion of the non-identifying data. In the example of the first (a), since the size of the de-identification unit is 1, the encryption and de-identification processor 310 excludes “red”, which is one digit from the front of “red B31H2GSP01 $ #!”, And the following 8 Extract “B31H2GSP” of the seat with the password identification key. In the example of the second (b), since the size of the de-identification unit is 7, the encryption and de-identification processor 310 excludes “Seoul-si, Seo-gu”, which is 7 digits from the front of “Seoul-gu, A31H3GDX07 $ #!” Extract the 8 digits of “A31H3GDX” with the password identification key.

Or, in some embodiments of the present invention, the encryption and de-identification processor 310 is based only on the format of the non-identification data combination encryption identification key and the location of the encryption identification key. To extract. That is, in the given example, the encryption and de-identification processor 310 extracts 8 digits from the 6th digit from the end of the non-identification data combination encryption identification key as the encryption identification key.

The identification code is used to indicate the end of a non-identifying data combination encryption identification key. In some embodiments of the present invention, unlike the ones shown in FIGS. 8 to 9, the identification code is changed to have any value.

On the other hand, in some embodiments of the present invention, when de-identification is not performed, and encryption is performed only, for compatibility of the system, the de-identification unit is not coupled, and a digit indicating the size of the non-identification unit is “00” The ciphertext data is generated to have the value of.

10 is a view for explaining that a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention can be performed in a cloud computing environment.

Referring to FIG. 10, the web application server 220 is provided in the form of cloud computing. Accordingly, an encryption and decryption process of a method of simultaneously processing encryption and de-identification of personal information according to an embodiment of the present invention is performed in a cloud computing environment. In addition, the database 230 is provided in the form of cloud computing. Accordingly, the de-identification and big data analysis process of the method of simultaneously processing the encryption and de-identification of personal information according to an embodiment of the present invention is performed in a cloud computing environment.

In some embodiments of the present invention, the encryption and de-identification server 300 is provided in the form of cloud computing, unlike that shown in FIG. 10. In some embodiments of the invention, the web application server 220 and the encryption and de-identification server 300 are provided by the same cloud computing service operator. In some embodiments of the invention, the encryption and de-identification server 300 is controlled by a cloud computing service operator.

In some embodiments of the present invention, unlike the one shown in FIG. 10, the big data analysis server 400 is provided in the form of cloud computing. In some embodiments of the invention, the big data analysis server 400 is controlled by the system administrator of the web application server 220. In some embodiments of the present invention, the web application server 220, the encryption and de-identification server 300, and the big data analysis server 400 are provided by the same cloud computing service operator. In some embodiments of the invention, the big data analysis server 400 is controlled by a cloud computing service operator.

The steps of a method or algorithm described in connection with an embodiment of the present invention may be implemented directly in hardware, a software module executed by hardware, or a combination thereof. The software modules may include random access memory (RAM), read only memory (ROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), flash memory, hard disk, removable disk, CD-ROM, or It may reside on any type of computer readable recording medium well known in the art.

The embodiments of the present invention have been described above with reference to the accompanying drawings, but a person skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing its technical spirit or essential features. You will understand. Therefore, it should be understood that the above-described embodiments are illustrative in all respects and not restrictive.

Claims (13)

As a method realized by a computer,
Collecting plaintext data including personal information regarding a predetermined personal information storage transaction of the first personal information processing application of the web application server;
Generating encrypted text data by encrypting the plain text data including the personal information according to a predetermined encryption algorithm;
De-identifying the plain text data including the personal information to generate non-identifying data;
Storing the ciphertext data in a cryptographic storage;
Generating a non-identifying data combining password identification key by combining a cryptographic identification key corresponding to the ciphertext data with at least a portion of the non-identifying data; And
And returning the non-identifying data combination encryption identification key.
How to simultaneously process encryption and de-identification of personal information. According to claim 1,
The non-identifying data combination encryption identification key is stored in the personal information storage,
How to simultaneously process encryption and de-identification of personal information. According to claim 1,
Collecting the non-identifying data combination encryption identification key stored in the personal information storage;
Extracting the non-identification data from the non-identification data combination encryption identification key; And
Further comprising the step of storing the non-identifying data in a big data storage,
How to simultaneously process encryption and de-identification of personal information. According to claim 3,
Further comprising the step of analyzing the non-identifying data stored in the big data storage big data analysis,
How to simultaneously process encryption and de-identification of personal information. According to claim 1,
Collecting a non-identifying data combination encryption identification key for a predetermined personal information inquiry transaction of the second personal information processing application of the web application server;
Extracting the cryptographic identification key from the non-identifying data combining cryptographic identification key;
Querying the ciphertext data corresponding to the cipher identification key stored in the cipher store;
Decrypting the ciphertext data according to the encryption algorithm to generate the plaintext data; And
Further comprising the step of returning the plain text data,
How to simultaneously process encryption and de-identification of personal information. According to claim 1,
Generating the non-identifying data combination encryption identification key,
Further combining the data about the size of at least a portion of the non-identifying data to generate the non-identifying data combining encryption identification key,
How to simultaneously process encryption and de-identification of personal information. The method of claim 6,
Collecting the non-identifying data combination encryption identification key stored in the personal information storage;
Extracting the non-identification data from the non-identification data combination encryption identification key by using data regarding the size of at least a portion of the non-identification data; And
Further comprising the step of storing the non-identifying data in a big data storage,
How to simultaneously process encryption and de-identification of personal information. The method of claim 6,
Collecting a non-identifying data combination encryption identification key for a predetermined personal information inquiry transaction of the second personal information processing application of the web application server;
Extracting the cryptographic identification key from the non-identifying data combination cryptographic identification key, using data regarding the size of at least a portion of the non-identifying data;
Querying the ciphertext data corresponding to the cipher identification key stored in the cipher store;
Decrypting the ciphertext data according to the encryption algorithm to generate the plaintext data; And
Further comprising the step of returning the plain text data,
How to simultaneously process encryption and de-identification of personal information. The method of claim 6,
Generating the non-identifying data combination encryption identification key,
The identification code for indicating the end of the non-identification data combination encryption identification key is further combined to generate the non-identification data combination encryption identification key,
How to simultaneously process encryption and de-identification of personal information. According to claim 1,
The method of simultaneously processing the encryption and de-identification is performed in a cloud computing environment,
How to simultaneously process encryption and de-identification of personal information. An encryption and de-identification agent that collects plain text data including personal information related to a predetermined personal information storage transaction of the personal information processing application of the web application server and returns a non-identifying data combination password identification key;
The plaintext data including the personal information is encrypted according to a predetermined encryption algorithm to generate ciphertext data, and the plaintext data containing the personal information is de-identified to generate non-identification data, and at least a portion of the non-identification data is generated. An encryption and de-identification processor that combines the cryptographic identification keys with to generate the non-identifying data-combining cryptographic identification keys; And
And a password storage for storing the ciphertext data and a ciphertext identification key corresponding to the ciphertext data,
A server device that simultaneously processes encryption and de-identification. A web application server running one or more applications;
An encryption and de-identification agent that collects plain text data including personal information regarding a predetermined personal information storage transaction of the personal information processing application of the web application server and returns a non-identification data combination password identification key;
The plaintext data including the personal information is encrypted according to a predetermined encryption algorithm to generate ciphertext data, and the plaintext data containing the personal information is de-identified to generate non-identification data, and at least a portion of the non-identification data is generated. An encryption and de-identification processor that combines the cryptographic identification keys with to generate the non-identifying data-combining cryptographic identification keys;
A personal information store storing the non-identifying data combination encryption identification key; And
And a password storage for storing the ciphertext data and a ciphertext identification key corresponding to the ciphertext data,
A cloud computing service server device that simultaneously processes encryption and de-identification. Combined with the computer,
Collecting plaintext data including personal information regarding a predetermined personal information storage transaction of the personal information processing application of the web application server;
Generating encrypted text data by encrypting the plain text data including the personal information according to a predetermined encryption algorithm;
De-identifying the plain text data including the personal information to generate non-identifying data;
Storing the ciphertext data in a cryptographic storage;
Generating a non-identifying data combining password identification key by combining a cryptographic identification key corresponding to the ciphertext data with at least a portion of the non-identifying data; And
A computer program stored in a computer-readable recording medium to perform a method of simultaneously processing encryption and de-identification of personal information, comprising returning the non-identification data combination encryption identification key.

Images