KR20200116231A - Artificial intelligence technical information data security system applying case based reasoning technology and block chain method and server thereof - Google Patents

Abstract

According to an embodiment of the present invention, a security system comprises: a terminal configured to generate encryption data using basic security key information, generate a separate password for the basic security key information, generate a new encrypted separate password by hashing the separate password using a prime number, and generate a connection password using a prime number used during hash processing of the basic security key information in the process of encrypting core information of the security key; and a server which allows to search the basic security key information only through similarity search using a case-based reasoning engine with the basic security key information distorted to search for basic security key information first to use security key data when necessary, and includes core information DB for storing core information of the encrypted security key connected through the connection password by hashing the password of a basic information DB for storing the basic security key information.

Description

{Artificial intelligence technical information data security system applying case based reasoning technology and block chain method and server thereof} applying case-based reasoning security key and block chain method

The present invention relates to a security system, and more particularly, to an artificial intelligence type security key information security system and method to which case-based reasoning technology and a block chain method are applied.

The security key information security method, which is essential for decryption after encryption in a security system, stores the security key in a separate DB of the server and utilizes it when necessary. In a situation where intelligent crime is developing as time goes by, the general security key storage method is relatively vulnerable to hacking, which can lead to external leakage of security key information. Therefore, a more thorough and reliable security key storage method is desired.

In the present invention, the security key data is appropriately divided and stored in a specific DB, and a Hash function is applied to connect each other. In addition, it is not possible to hack security key information without permission to apply the case-based reasoning method, which is an artificial intelligence method.

The present invention is to solve the above-described technical problem, and an object of the present invention is a separate block chain method to fundamentally prevent the hacking of the security key data that is stored separately when encrypting the information contents during personal information security or major document security. It is to provide a security key security system and method that applies the Hash function and applies case-based reasoning technology, which is an artificial intelligence method.

A security system according to an embodiment of the present invention generates encrypted data using basic security key information, generates a classification password for the basic security key information, and hash processing the identification password using a prime number. A terminal generating a connection password using a prime number used during hash processing of the basic security key information in a process of generating a new identification password and storing security key content information; And a server including a basic information DB for storing the basic security key information and a security key content information DB for storing the security key content information encrypted through the connection password.

As an embodiment, the terminal may distort the encrypted security key basic information and the encrypted identification code. The terminal may distort the encrypted security key basic information and the encrypted identification code. In other words, in order to use the security key data contents when necessary, the case-based reasoning engine is used in the case base of the distorted security key basic information to search for the basic information of the security key first. The basic information of the security key can be searched only through similarity search.

The server of the security system according to an embodiment of the present invention generates encrypted data using basic security key information, generates a classification password for the basic security key information, and hashes the identification password using a prime number. A basic information manager that creates an encrypted new identification password, stores the encrypted data of the security key basic information and the encrypted identification password in a basic information DB, and stores the security key basic information in the process of encrypting the security key key information. And a security key content information manager for generating a connection password using a prime number used during hashing, and storing the contents of a security key encrypted through the connection password in a content information DB.

According to an embodiment of the present invention, in order to further enhance security processing such as prevention of leakage of a security key, an artificial intelligence security key and case-based reasoning (CBR) technology are applied. More specifically, by applying a hashing processing method and CBR technology, in the case of the present invention, when security key data information is input, even if a hacker invades some data, the basic information of the security key cannot be grasped. Therefore, according to the present invention, it is possible to thoroughly prevent the leakage of the content information of the security key to the outside.

According to an embodiment of the present invention, in the existing security system, decryption through a security key is essential for security through encryption, but when the security key is hacked, the main contents could be easily leaked, but the contents of this security key are not hacked. The security is thoroughly maintained.

1 is a block diagram schematically showing a security key security system according to an embodiment of the present invention.
FIG. 2 is a block diagram schematically showing the terminal shown in FIG. 1;
3 is a conceptual diagram illustrating an operation of managing basic information of a security key of a control unit illustrated in FIG. 2 by way of example.
FIG. 4 is a conceptual diagram illustrating an operation of managing security key content information of a control unit illustrated in FIG. 2.
5 is a block diagram illustrating the server shown in FIG. 1 by way of example.
FIG. 6 is a conceptual diagram illustrating an exemplary method of operating the security key content information manager illustrated in FIG. 5.
FIG. 7 is a block diagram illustrating an example of a main information reduction operation of the content information manager shown in FIG. 5.
FIG. 8 is a conceptual diagram exemplarily illustrating an operation of managing security key content information according to a new classification password change of the basic information manager shown in FIG. 7.

Hereinafter, embodiments of the present invention will be described clearly and in detail to the extent that a person having ordinary knowledge in the technical field of the present invention can easily implement the present invention.

In the present invention, the security key data is appropriately divided and stored in a specific DB, and a Hash function is applied to connect each other. In addition, the case-based reasoning method, which is an artificial intelligence method, is applied so that security key information cannot be hacked without permission.

1 is a block diagram schematically showing a security system according to an embodiment of the present invention. Referring to FIG. 1, a security key information security system 1000 includes a terminal 1100 and a server 1200. The security key person in charge (hereinafter referred to as the person in charge) uses the terminal 1100 to enter the security key No. Security key basic information 1101 such as a classification password, and security key main information 1102 such as a sender name, a security target file, and details of a security key may be input.

The basic security key information 1101 and the main security key information 1102 may be stored in the storage unit 1220 of the server 1200. The storage unit 1220 of the server 1200 may include a basic information DB and a main information DB. The basic information DB may store security key basic information 1101. The control unit 1230 of the server 1200 may derive various information or perform security management using the basic information DB and the main information DB of the storage unit 1220. For example, the control unit 1230 may perform security management using a block chain system (KCS).

Meanwhile, the security system 1000 may prevent a hacker attack as illustrated in FIG. 1. Hacker 1 may be a person in charge (hereinafter referred to as a person in charge) who can input security key information into the terminal 1100. The person in charge can easily access not only basic information of the security key, but also key information. Therefore, the person in charge needs special security management or personal authentication management.

Hacker 2 can extract security key information from the terminal 1100. Hacker 2 may steal security key information during wired or wireless communication, or install hacking means in the terminal 1100 to extract security key information. Therefore, in order to prevent Hacker 2, it is necessary to divide and input all information such as security key No and identification password, and connect with the Hash function.

Hacker 3 may extract security key information from the storage unit 1220 in the server 1200. Therefore, in order to cope with Hacker 3, by connecting basic information and main information through the Hash function, it is not possible to obtain the security key No and the identification password together, thus preventing the securing of basic security key information from the main information DB of the storage unit 1220. There is a need. The basic information of the non-distorted security key stored separately in the storage unit 1220 can be used when the basic information of the security key is re-distorted after the security key data is returned during computation.

Hacker 4 may extract security key information from the control unit 1230 in the server 1200. For Hacker 4, even if it intrudes into the control unit 1230 and steals key information of the security key, the basic information and the key information are interlocked with the Hash function, so that the security key No. It is necessary to make it impossible to secure basic information such as. Hereinafter, a defense method against attacks by hackers 1 to 4 will be described in more detail.

FIG. 2 is a block diagram schematically showing the terminal shown in FIG. 1; Referring to FIG. 2, the terminal 1100 may include an input unit 1110, a control unit 1120, an output unit 1130, and a power supply unit 1140. The power supply unit 1140 may provide operation power to the input unit 1110, the control unit 1120, and the output unit 1130 under the control of the control unit 1120.

The person in charge is a security permission person who can access the terminal 1100. However, data (eg, key information of the security key) may be leaked through the person in charge. In order to prevent this, the input unit 1110 may allow access after checking the list of security levels of the authorized person or personal authentication. The input unit 1110 may manage a log-file of a person in charge. The log file can be checked only through the security system 1000, and the person in charge may not be able to modify the contents.

The controller 1120 may control the overall operation of the terminal 1100. The controller 1120 may control an operation between the input unit 1110, the output unit 1130, and the power unit 1140. For example, the control unit 1120 may encrypt the security key No input through the input unit 1110. The control unit 1120 may generate a classification password to identify the encrypted security key No and encrypt the classification password. In addition, the control unit 1120 may protect the security key information from the attack of the hacker 2 by distorting the encrypted security key No. or the identification password.

The output unit 1130 may receive encrypted or distorted security key information from the control unit 1120 and provide the received security key information to a server (see FIG. 1, 1200 ). The output unit 1130 may separately transmit the encrypted security key No. and the identification password, or the encrypted data of main information of the security key to the server 1200. Here, the encrypted security key No. and the identification password may be stored in the basic information DB of the server 1200 by connecting the connection password. And the encrypted security key key information can be stored in the key information DB.

The output unit 1130 may provide data to the server 1200 using wired or wireless communication. When the output unit 1130 uses wireless communication, WWAN (wireless wide area network) communication (eg, RF wireless communication, IEEE 802.20), WMAN (wireless metropolitan area network) communication (eg, IEEE 802.16, IEEE 802.16) WiMAX), wireless local area network (WLAN) communication (e.g., NFC, BLE, WiFi, Ad-Hoc, etc.), and wireless personal area network (WPAN) communication (e.g. IEEE 802.15, Zigbee, Bluetooth, UWB) , RFID, Wireless USB, Z-Wave, Body Area Network) may be implemented to perform wireless communication in at least one method.

3 is a conceptual diagram illustrating an operation of managing basic information of a security key of a control unit illustrated in FIG. 2 by way of example. The control unit 1120 may encrypt basic security key information (see FIG. 1, 1101) input through the input unit 1110. For example, the basic security key information 1101 may be a security key No. as shown in FIG. 1.

Referring to the example of FIG. 3, the security key A 121 may be encrypted with 253138. The controller 1120 may distort the encrypted data. For example, the controller 1120 may distort the first and third digits of the encrypted data 253138 to generate data that has been distorted to 752138. That is, the controller 1120 may generate encrypted and distorted data 752138 from the input security key A 121.

Meanwhile, the control unit 1120 may generate a classification password to distinguish the encrypted or distorted security key number. Referring to FIG. 3, the controller 1120 may generate a classification password 341256 from the security key A 121 and encrypt the classification password. The controller 1120 may perform a hash process to encrypt the identification password. The control unit 1120 may obtain a connection password by hashing the encrypted data using a prime number. Here, a prime number means a number divided by 1 and itself.

In the first step, 1972.57 is obtained by dividing the identification code 341256 by the decimal number 173. In step 2, 1972 is obtained by taking only an integer from the result of step 1, and 293828 is obtained by multiplying by the decimal number 149. In FIG. 3, the length of the encrypted data is 6 digits, but when it is actually applied, it is 20 digits, the decimal length is 14 digits, and the integer obtained as a result of the calculation may be 6 digits. Also, the prime number (173 or 149 in the above example) for hash processing may be changed each time the security key is used. Since the control unit 1120 changes the decimal number every time it is used, even if a hacker tracks the transaction details of the security key, the security key number (No.) cannot be confirmed.

Also, the controller 1120 may distort the encrypted identification password. The control unit 1120 may determine a change position and change the number using a random number generation algorithm at an appropriate ratio within a certain rule range. For example, the controller 1120 may generate the encrypted and distorted data 193728 by distorting the first and fourth digits of the encrypted identification code data 293828.

In the example of FIG. 3, the length of the data of the encrypted and distorted basic information 1101 is 6 digits, but in reality, the security can be further improved by using longer data (eg, 32 to 56). have. Meanwhile, according to an embodiment of the present invention, the distortion processing operation may not be performed by the controller 1120 of the terminal 1100, but may be performed by the controller 1230 of the server 1200. The security system 1000 according to an embodiment of the present invention encrypts and distorts the basic security key information 1101 inputted to the terminal 1100, thereby protecting security key information from hacker attacks.

FIG. 4 is a conceptual diagram exemplarily illustrating an operation of managing main information of a security key of a control unit illustrated in FIG. 2. The controller 1120 may encrypt key information of the security key (see FIG. 1, 1102) input through the input unit 1110. For example, the security key data information 1102 may be, sender name, security file name, security key details 1, 2.....n, and the like. The sender name is encrypted with 23518, the secure file name is encrypted with 93174, and the details of the security key are subdivided and can be encrypted with 48289, 36518, 42346... etc.

The control unit 1120 generates each connection password in the main information by hashing the connection password of each data information (Sender name, security file name, security key details) in the classification password of the basic security key information 1102. I can. The controller 1120 may use a prime number for hash processing.

By dividing the encrypted data 23518 of “Sender Name” by 173 decimal and selecting an integer, we can obtain the key information connection password 135 of “Sender Name”. Similarly, the key information connection password 538 of the registration number and the key information connection password 279 of the number of coins can be obtained by dividing each of the encrypted data 93174 and 48289 by a decimal number 173 and selecting an integer.

Like the basic security key information 1101, the control unit 1120 may lengthen the encrypted data in order to increase security, similar to the security key basic information 1102. Meanwhile, the operation of managing key information of the security key may be performed by the controller 1230 of the server 1200. The security system 1000 according to an embodiment of the present invention may protect security key information from hacker attacks by encrypting key data of the security key input to the terminal 1100.

5 is a block diagram illustrating the server shown in FIG. 1 by way of example. Referring to FIG. 5, the server 1200 may include a communication unit 1210, a storage unit 1220, and a control unit 1230. The server 1200 provides a management program to the terminal 1100, thereby managing security key information or allowing the security key to execute a program. In addition, the server 1200 may receive security key information from the terminal 1100 and manage basic security key information or key security key information.

The communication unit 1210 enables communication with the terminal 1100 by wire or wirelessly. The communication unit 1210 includes code division multiple access (CDMA), global system for mobile communication (GSM), wideband CDMA (WCDMA), CDMA-2000, time division multiple access (TDMA), long term evolution (LTE), and global system for mobile communication (Wimax). Wired/wireless communication such as interoperability for microwave access), wireless LAN (WLAN), ultrawide band (UWB), Bluetooth, wireless display (WI-DI), Internet, LAN, etc. may be supported.

The communication unit 1210 may include an input unit 1211 and an output unit 1212. The input unit 1211 may receive security key information from the terminal 1100. Alternatively, the input unit 1211 may receive basic security key information or key security key information from the terminal 1100. The input unit 1211 may provide security key information, that is, basic security key information or key security key information, to the storage unit 1220 or the control unit 1230. The output unit 1212 may provide a management program to the terminal 1100 and may provide security key information or case information.

The storage unit 1220 may store security key information received through the communication unit 1210. The storage unit 1220 may include a basic information DB 1221, a main information DB 1222, and a case information DB 1223. Basic security key information (see FIG. 1, 1101) and main security key information (see FIG. 1, 1102) may be stored in the storage unit 1220 of the server 1200. The storage unit 1220 of the server 1200 may include a basic information DB 1221 and a main information DB 1222.

The basic information DB 1221 may store basic information of an encrypted or distorted security key. In addition, basic information of the non-distorted security key that is separately stored may be stored in the basic information DB 1221. The basic information of the security key that has not been distorted can be used when the basic information of the security key is re-distorted after the key information of a specific security key is reduced during computation.

The control unit 1230 of the server 1200 may derive various information or perform security management using the basic information DB 1221 and the main information DB 1222 of the storage unit 1220. For example, the control unit 1230 may perform security management using a blockchain system (TCS).

The basic information DB 1221 stores security key information input from the terminal 1100, and basic information of a security key such as security key No., terminal ID, and contact information may be stored. The main information DB 1222 may store main information associated with basic information of the security key and related to security of the security key.

The controller 1230 may include a processor 1231, a program manager 1232, a basic information manager 1233, and a main information manager 1234. The control unit 1230 may be implemented in hardware or software. For example, the processor 1231 may be implemented with hardware, and the program manager 1232, the basic information manager 1233, and the main information manager 1234 may be implemented with an algorithm or software.

The processor 1231 may control the overall operation of the server 1200. For example, the processor 1231 accesses the basic information DB 1221 and the main information DB 1222 of the storage unit 1220, and configures the basic information manager 1233 and the main information manager 1234. The control unit 1230 can be driven by executing an algorithm or program command. In addition, the processor 1231 may include controllers, interfaces, and a graphic engine that control various components of the server 1200. The processor 1231 may be provided in the form of a system-on-chip (SoC), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or the like.

The program manager 1232 may provide or support installation of a management program to the terminal 1100. The program manager 1232 may execute a separate security program when necessary through the terminal 1100 in which the management program is installed. The basic information manager 1233 may access the basic information DB 1221 of the storage unit 1220 and manage basic information of the security key. When a new security key is generated through the terminal 1100, the basic information manager 1233 assigns the new security key No. and the new security key No. to the basic information DB 1221. And a classification password, etc. can be stored. The basic information manager 1233 may update basic information stored in the basic information DB 1221 when basic information of an existing security key is changed.

The main information manager 1234 may access the main information DB 1222 of the storage unit 1220 and manage main information of the security key. The main information manager 1234 may update the main information stored in the main information DB 1222 when existing main information is changed.

6 is a conceptual diagram exemplarily illustrating an operation method of the main information manager shown in FIG. 5. Referring to FIG. 6, for example, the basic information of the security key of the security key A and the security key B is a security key No., a classification password, etc., and major information of the security key (security key sender name, security file name, security key details) Etc. Basic information of the security key may be stored in the basic information DB 1221. Key information of the security key may be stored in the key information DB 1222 through a connection password as shown in FIG. 6.

The sender name and security key content 1 of the security key A may be stored in the main information DB 1222 through connection passwords 135 and 279, respectively. Next, the security key content 1 and the sender name of the security key B may be stored in the main information DB 1222 through connection passwords 307 and 570, respectively. In addition, the security file name of the security key A and the sender name of the security key B may be stored in the main information DB 1222 through connection passwords 538 and 570, respectively.

When hacker 3 tries to hack the main information DB 1222, the connection password in front of each attribute of the main information may be processed as a hash processing result number of the connection password after the basic information classification password.

The connection password after the identification password in the basic information of the security key can be processed with the hash function. The processing result is recorded in front of the main information so that it is linked from the basic information to the main information attribute. However, even if key information is hacked, it is not possible to infer the security key security key No. as the basic information cannot be connected. Even if the key information properties of several security keys are mixed and hacked, there is no relationship and security can be maintained.

FIG. 7 is a block diagram illustrating a main information reduction operation of the main information manager shown in FIG. 5 by way of example. Referring to FIG. 7, the control unit 1230 of the server 1200 may search for basic security key information through the KCS system when computer processing is required. This KCS system is a CBR (Case-Based Reasoning) system that searches for the similarity of the security key basic information DB that was distorted at the time of registration, accurately finds the security key, returns the corresponding key information, and provides it to the terminal 1100. The control unit 1230 of the server 1200 may delete the returned data after performing a search operation using BCS within the server within the shortest time. The terminal 1100 may transmit only the work result to the person in charge after deleting the reduction data.

Regarding the CBR system, the application filed on May 15, 2017 (application number: 10-2015-0155339) is described in "Storage Media for Installation of Security Servers and Security Functions Using Case-Based Reasoning Engine" And can be applied to the CBR system of the present application.

The CBR system receives security key information for search and searches the case database. The CBR system calculates the similarity for each attribute in the case of the retrieved security key information, applies a weight to each of the attributes of the security key information for which the similarity calculation is completed, and calculates the final similarity value for each case to which the weight is applied. . The CBR system determines whether the matched security key information, that is, basic security key information, is detected based on the calculated final similarity value. In this case, the CBR system may determine the security key information of the case where the calculated final similarity value is the highest as the matched security key information.

For example, when the CBR system detects the security key information of the case with the highest final similarity value, that is, the basic security key information, it extracts the mapped security key main information corresponding to the detected security key basic information and provides it to the user. can do. However, if the CBR system is less than a preset reference value or if security key information corresponding to the security key information requested for search does not exist, it can be terminated. Meanwhile, the CBR system may extract security key information for two or more cases with a high final similarity value, and detect the security key information requested for a search by determining a predetermined criterion among the corresponding security key information. The CBR system recovers the matched basic information of the security key, and decrypts the encrypted security key key information matched with the recovered basic information of the security key.

FIG. 8 is a conceptual diagram exemplarily illustrating an operation of managing basic information of a security key according to a change of a new classification password of the basic information manager shown in FIG. 7. Here, the security key basic information management operation according to the change of the new classification password may be performed by the control unit 1120 of the terminal 1100.

The control unit 1230 may distort the second and six digits of the encrypted data 253138 of the security key No. to generate the data distorted to 243139. That is, the basic information manager 1233 of the control unit 1230 may generate new distortion-processed data 243139 from the security key name stored in the basic information DB 1221.

Meanwhile, the control unit 1230 may generate a new identification password through separate hash processing of the identification password 341256 stored in the basic information DB 1221 twice. In the first step, the identification code 341256 is divided by the decimal number 113 to obtain 3019.90. In step 2, only integers from the result of step 1 are taken to get 3019, and 540573 is obtained by multiplying by 179.

The control unit 1230 changes a new identification password for each transaction, and the identification password in the server 1200 is used as it is. The connection part for each key information attribute that is linked to the classification password in the basic security key information is not newly hashed. In addition, the control unit 1230 may increase security by using a sufficiently long hash processing number. The basic information may be stored in the basic information DB 1221 after re-distortion processing.

The present invention applies a case-based reasoning (CBR) technology, which is one of the bases of artificial intelligence, in order to further strengthen security processing such as preventing the leakage of major information of a security key. More specifically, in the case of the present invention by applying a hashing processing method, the security key No. cannot be grasped even if a hacker invades some data from the time of input and registration of security key information to the time of external output in the system. . Therefore, according to the security policy of the present invention, the leakage of key information of the security key to the outside is thoroughly prevented.

In particular, through thorough security of the security key information, it is possible to prevent external leakage of certain secret information including personal medical information. To this end, the present invention limits access to key information to a considerable level. For example, an approach can be made through a similarity search using a case-based reasoning engine.

The security of the present invention basically applies the hash function of the blockchain method. Furthermore, the security of the present invention prevents external leakage of key information of the security key that may occur during the information registration process. To this end, a case-based reasoning engine of an artificial intelligence method is used, and a Hashing-processed blockchain technology is also applied to the connection of security key information properties. Therefore, the security key information security is thoroughly maintained from the initial security key generation.

In the present invention, upon initial generation, basic security key information properties (security key number, security key identification password, etc.) are hashed and stored in different addresses. In addition, the encrypted security key number, which is the basic information of the security key, and the password for the hashed security key classification are distorted and stored in the basic information DB. In addition, the security key classification password and the key information properties of the security key are also connected by hashing by applying a blockchain security key. In addition, when retrieving key information of security keys, the security key key information is linked only through the similarity case search of the KCS (Security Key Case Search) security system that saw case data of basic information of security keys.

Eventually, even if a hacker invades key information data, all connections are hashed and reverse search is not possible. That is, security key No. Since it is impossible to expose, the sensitive key information contents of the security key are not leaked to the outside.

The server of the security system according to an embodiment of the present invention includes a communication unit that receives encrypted information from a terminal, a control unit that outputs the encrypted information to a case-based reasoning engine in the server, and a storage unit that stores the encrypted information converted into a case database. Can include. The security system of the present invention may include an artificial intelligence case-based reasoning engine. The encrypted information received from the control unit can be divided into basic information and main information. In particular, the classification password, which is one of the attribute information in the basic information, is separately hashed to increase security.

Basic information attribute information is distorted using a random number, and the encrypted main information is classified for each attribute. In addition, one attribute in the main information is subdivided as needed. Classification of basic information By utilizing the result of Hashing processing of the connection password, the contents of the main information are stored in the location of the connection password address in the case base of the main information case.

When working in the security system, the search target information is checked through the storage unit of the server and then encrypted. After encryption input, among basic information cases distorted from the case information DB, a similarity search can be performed using case-based reasoning technology. Basic information cases are searched and selected through similarity search, and personal key information connected with the hashing process is decrypted for verification. Accordingly, necessary information is extracted and output from the system.

The printed information is applied to the computer processing work of the system. The password for classifying the security key in the encrypted basic information stored in the DB in the server is separately hashed by using other prime numbers. Basic information properties may be distorted and stored in the storage unit. Therefore, unlike the existing encryption-only data security method, in the present invention, main information can be extracted only through case search of encrypted and distorted basic information. Therefore, it can fundamentally prevent hacking inside and outside the organization. The present invention can be applied to a security key security system through a distorted case data search.

The above description is a detailed example for carrying out the present invention. In addition to the above-described embodiments, the present invention will include simple design changes or embodiments that can be easily changed. In addition, the present invention will also include techniques that can be easily modified and implemented using the embodiments. Accordingly, the scope of the present invention is limited to the above-described embodiments and should not be defined, and should be defined by the claims and equivalents of the present invention as well as the claims to be described later.

Claims (4)

Generate encrypted data using basic security key information, generate a classification password for the basic security key information, and hash the identification password using a prime number to generate an encrypted new identification password, and the security key key information A terminal for generating a connection password for the main information of the security key by using a prime number used during hashing of the basic information of the security key in the process of encrypting the security key; And
A security system comprising a server including a basic information DB for storing the basic information of the security key and a main information DB for storing the main information of the security key encrypted through the connection password. The method of claim 1,
The terminal distorts the encrypted security key basic information and the encrypted new identification password, so that the basic security key information can be retrieved through a CBR system. Generate encrypted data using basic security key information, generate a classification password for the basic security key information, and hash the identification password using a prime number to generate an encrypted new identification password, and the security key basic A basic information manager for storing encrypted data of information and the encrypted new classification password in a basic information DB; And
In the process of encrypting the basic security key information, a connection password for main security key information is generated using a prime number used during hash processing of the basic security key information, and the main security key information encrypted through the connection password is A server in a security system that includes a key information manager that stores key information in the DB. The method of claim 3,
In order to use the basic information of the security key as a gateway for the use of technical information, the basic information of the security key is randomly distorted, and the basic information of the security key is selected only through similarity search in this system including the case-based reasoning engine. By doing so, it is a server of a security system that strengthens security processing before connecting to key information including security key data.

Images