KR20210055880A - Method for checking encrypted data and method for data encryption - Google Patents

Abstract

Disclosed are an encrypted data verification method and a data encryption method. The encrypted data verification method is performed by a processing device and comprises: a first variable designation step of designating a previously encrypted character string as a first variable; a specific position value extraction step of extracting a value at a specific position from a character string of unencrypted identification information or a character string of encrypted identification information; an index conversion step of converting the specific position value into an index; a character string separation step of separating the character string on the basis of the index; a string combination step of combining a characteristic value with a separate string through a preset rule to form a single string; a second variable generation step of generating a second variable by encrypting the combined string; and a variable checking step of confirming whether the first variable and the second variable match. Even without using a decryption scheme, encrypted data can be checked.

Description

How to check encrypted data and how to encrypt data {METHOD FOR CHECKING ENCRYPTED DATA AND METHOD FOR DATA ENCRYPTION}

The present disclosure relates to a method of verifying encrypted data and a method of encrypting data.

In general, in blockchain technology, data stored in blocks is shared, and for this purpose, data is secured by using various encryption methods. However, if the current blockchain technology, which discloses transaction information entering each block to all participants, is applied to voting, there is a concern that who voted for which candidate may be disclosed. In particular, there was a problem in that security for the elected person's preference) was difficult. In this regard, Korean Patent Publication No. 10-2014647 discloses a technology for a blockchain-based electronic voting method.

In the blockchain service, security of various information (e.g., customer name, amount, etc.) including secret voting results is required, but the method of verifying the original data by decrypting the encrypted data is the load and storage of the system. Since space can be wasted, there is a need to develop a technology that can check encrypted data in an easy and convenient way without using a decryption process.

The technical idea of the present disclosure is to solve the above-described problem, and an object thereof is to provide a technology capable of confirming encrypted data without using a decryption method.

In addition, the technical idea of the present disclosure has another purpose to provide a technology capable of easily encrypting information required for security in a blockchain service.

The problem to be solved by the present invention is not limited to the above-described problem, and other technical problems that are not mentioned will be clearly understood by those of ordinary skill in the art from the following description.

In order to achieve this object, as an embodiment of the present invention, a method of verifying encrypted data is performed by a data processing apparatus, comprising: a first variable specifying step of designating a previously encrypted character string as a first variable; A specific location value extracting step of extracting a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information; An index conversion step of converting the specific position value into an index; A character string separation step of separating a character string based on the index; A character string combining step of combining the characteristic values with the separated character strings through a preset rule to form a single character string; Generating a second variable by encrypting the combined character string as a second variable; And a variable checking step of checking whether the first variable and the second variable match.

In addition, the method of checking the encrypted data may further include a characteristic value output step of outputting a characteristic value used when creating the second variable when the first variable and the second variable match.

And, the method of verifying the encrypted data is, when the first variable and the second variable do not match, a characteristic value different from the characteristic value used when creating the second variable is separated from the character string separated in the character string separation step. A third variable generation step of combining and encrypting to generate a third variable; And an additional confirmation step of checking whether the first variable and the third variable match.

In order to achieve this object, as another embodiment of the present invention, a method of encrypting data is performed by a data processing device, and extracts a value at a specific position among a string of unencrypted identification information or a string of encrypted identification information. Extracting a specific position value; An index conversion step of converting the specific position value into an index; A character string separation step of separating a character string based on the index; A character string combining step of combining the characteristic values with the separated character strings through a preset rule to form a single character string; And an encryption step of encrypting the combined character string.

The data encryption method may further include a string storage step of storing the encrypted string.

In order to achieve this object, as another embodiment of the present invention, a program for performing the above-described method may be recorded on a computer-readable recording medium.

The means for solving the above problems are merely exemplary and should not be construed as limiting the present invention. In addition to the above-described exemplary embodiments, there may be additional embodiments described in the drawings and detailed description of the invention.

As described above, according to various embodiments of the present invention, a specific character string including a characteristic value is encrypted in the same manner as a previously encrypted character string, and then compared with each other to check whether they match. After encrypting a specific character string using a type of characteristic value, it is compared with each other to determine whether they match, and when the encrypted character strings match, the corresponding characteristic value can be output.

Accordingly, since the characteristic values included in the original text data can be checked without decrypting the encrypted data, there is an effect of preventing a system load problem and wastage of storage space due to data decryption.

In addition, according to various embodiments of the present invention, even in a blockchain service in which information is shared with all participants, specific information requiring security can be easily encrypted, and the encryption process is convenient and efficient.

Effects according to various embodiments of the present invention are not limited to the above-mentioned effects, and other effects that are not mentioned will be clearly understood by those skilled in the art from the description of the claims.

1 is a block diagram schematically showing each configuration of a data processing apparatus according to an embodiment of the present invention.
2 is a flowchart schematically showing a method of checking encrypted data according to an embodiment of the present invention.
3 is a flowchart schematically illustrating a process in which a character string of unencrypted identification information is encrypted and separated into two character strings, and then combined with a characteristic value to be encrypted again in an embodiment of the present invention.
4 is a flowchart schematically showing a method of encrypting data according to an embodiment of the present invention.

Preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings, but technical parts that are already well-known will be omitted or compressed for conciseness of description.

It should be noted that in this specification, references to "one" or "one" embodiment of the present invention are not necessarily to the same embodiment, and they mean at least one.

In the following examples, expressions in the singular include plural expressions unless the context clearly indicates otherwise.

In the following embodiments, terms such as include or have means that the features or components described in the specification are present, and do not preclude the possibility that one or more other features or components may be added.

When a certain embodiment can be implemented differently, a specific process order may be performed differently from the described order. For example, two processes described in succession may be performed substantially simultaneously, or may be performed in an order opposite to the described order. That is, each step of the method described herein may be appropriately performed in any order unless otherwise stated in the specification or clearly contradicted by context.

Since each configuration shown in the drawings is arbitrarily shown for convenience of description, the present invention is not necessarily limited to what is shown.

1 is a block diagram schematically showing each configuration of a data processing apparatus according to an embodiment of the present invention, and FIG. 3 is a character string of unencrypted identification information in an embodiment of the present invention is encrypted and converted into two character strings. It is a flow chart schematically showing a process of being separated and then combined with a feature value to be re-encrypted. 1 and 3, the data processing apparatus 10 according to an embodiment includes a variable designation unit 100, a specific position value extraction unit 200, an index conversion unit 300, and a character string separation unit 400. , A character string combination unit 500, a variable generation unit 600, a variable checking unit 700, a characteristic value output unit 800, and a control unit 900.

In an embodiment, the variable designation unit 100 may designate a pre-encrypted character string as an arbitrary variable (for example, a first variable). The pre-encrypted character string may be stored in a storage unit (not shown) in the data processing apparatus 10 or may be stored in a separate database.

In an embodiment, the specific location value extractor 200 may extract a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information. The identification information is a unique identification key assigned to each user, and may correspond to user ID information or the like. In addition, unencrypted identification information or encrypted identification information may be stored in a storage unit (not shown) in the data processing device 10 or stored in a separate database, and the specific location value extracting unit 200 is The identification information can be retrieved from and a specific location value 210 can be extracted.

Referring to FIG. 3, the specific location value extracting unit 200 may extract d, which is the 14th character, from '1ad5dfd34dfafd', which is a string of encrypted identification information, as a specific location value 210. In this case, the specific location value extraction unit 200 may extract the specific location value 210 using a preset extraction rule. Of course, the algorithm for extracting a specific position value from a character string consisting of at least one of letters, numbers, and symbols may be implemented in various ways depending on implementation, and the n-th character, number, or symbol in the character string as a specific position value It is also possible to extract.

Meanwhile, the identification information encryption unit (not shown) included in the data processing apparatus 10 may encrypt a string of unencrypted identification information using an encryption algorithm (eg, SHA-256, MD5, etc.). Referring to FIG. 3, the identification information encryption unit may encrypt identification information “imavoter” as “1ad5dfd34dfafd”.

In an embodiment, the index conversion unit 300 may convert the specific location value 210 extracted by the specific location value extraction unit 200 into an index. For example, the index conversion unit 300 may quantify'd' extracted as a specific position value 210 from the string '1ad5dfd34dfafd' using an index conversion algorithm and designate it as an index. In other words, the index conversion unit 300 may convert an arbitrary character extracted as the specific position value 210 into a number through an index conversion algorithm. In an embodiment,'d' extracted as the specific position value 210 is converted to 4 by the index conversion unit 300, and may be designated as an index. Of course, since the algorithm for digitizing characters can be implemented through various methods known in the art, it is not limited to the above-described example.

In an embodiment, the string separator 400 separates the string using a preset string separation rule, but may separate the string based on the index. Referring to FIG. 3, the string separator 400 may set up to the fourth digit of the string as a front end of the string and divide the front end and the rear end into two strings. That is, the string separator 400 may separate the string into '1ad5' and'dfd34dfafd'.

In an embodiment, the character string combination unit 500 may combine separated character strings and characteristic values to form a single character string. In this case, a character string may be combined into one using a preset combination rule. In this specification, a characteristic value means specific data that needs to be encrypted so that it is not exposed to others. For example, the feature value can be applied to data such as a customer name and amount, and the secret voting feature value can be applied to the candidate's number. In an embodiment, the unencrypted original characteristic value may be stored in a storage unit in the data processing apparatus 10 or stored in a separate database.

Referring to FIG. 3, the character string combination unit 500 may insert a characteristic value “2” between “1ad5” and “dfd34dfafd” and combine them into a single character string. Of course, depending on the implementation, it is possible to combine the characteristic value '2' into a single character string in a state where the characteristic value '2' is placed at the front end of '1ad5' or the rear end of'dfd34dfafd'. Can be applied.

In an embodiment, the variable generator 600 may generate a specific variable by encrypting the combined character string. Referring to FIG. 3, the variable generator 600 may generate an encrypted '3dfaf45sgsf6t7ajfk' as a second variable.

In an embodiment, the variable checking unit 700 may compare a character string of the first variable and the second variable to check whether they match, and the characteristic value output unit 800 may output a specific characteristic value.

In an embodiment, the control unit 900 may generally control each component such that an operation of encrypting unencrypted data or an operation of checking a characteristic value included in the encrypted data is performed. When the first variable and the second variable coincide, the control unit 900 may control the characteristic value output unit 800 to output the characteristic value used when the second variable is generated.

2 is a flowchart schematically showing a method of checking encrypted data according to an embodiment of the present invention. A method of verifying encrypted data according to an embodiment of the present invention will be described in accordance with the flowchart shown in FIG. 2, and will be described with reference to the drawings shown in FIGS. 1 and 3, but will be described in order for convenience. .

1. Step 1 of designating the first variable <S201>

In this step, the variable designation unit 100 may designate a pre-encrypted character string as the first variable. This step does not necessarily precede each step to be described later. That is, this step may be performed before each step, after each step, or may be performed simultaneously with each step, depending on the implementation.

2. Specific position value extraction step <S202>

In this step, the specific location value extracting unit 200 may extract a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information. As a specific example, the specific location value extracting unit 200 may extract the specific location value 210 by calling identification information stored in a storage unit in the data processing apparatus 10 or stored in a separate database. Here, the identification information may be applied as a string of identification information that is not previously encrypted or a string of encrypted identification information.

In this step, the specific location value extracting unit 200 uses a preset extraction rule, and may extract the n-th character, number, or symbol from the corresponding character string as a specific location value.

3. Index conversion step <S203>

In this step, the index conversion unit 300 may convert the specific position value 210 extracted by the specific position value extracting unit 200 into an index in step S202. For example, the index conversion unit 300 may transform an arbitrary character (or number, symbol, etc.) extracted as the specific position value 210 into a number through an index conversion algorithm. Referring to FIG. 3,'d' extracted as a specific position value 210 is converted to 4 by the index conversion unit 300, and the converted number 4 may be designated as an index.

4. String separation step <S204>

In this step, the character string separator 400 may divide one character string into a plurality of character strings based on the index. Referring to FIG. 3, the string separator 400 may set up to the fourth digit of the string as a front end of the string and divide the front end and the rear end into two strings.

5. String combination step <S205>

In this step, the character string combination unit 500 may combine the characteristic values with the separated character strings to form a single character string. Referring to FIG. 3, the character string combination unit 500 may insert a characteristic value “2” between “1ad5” and “dfd34dfafd” using a preset combination rule and combine it into a single character string.

6. Second variable creation step <S206>

In this step, the variable generator 600 may generate a second variable by encrypting the string combined into one in step S205. The generated second variable may be stored in a storage unit in the data processing apparatus 10 or in a separate database.

7. Variable Check Step Step <S207>

In this step, the variable checking unit 700 may compare the strings of the first variable and the second variable to check whether they match each other. That is, when the strings of the first variable and the second variable are the same, the variable checking unit 700 may determine that the first variable and the second variable are identical.

8. Characteristic value output step <S208>

If it is determined in step S207 that the first variable and the second variable match, in this step, the feature value output unit 800 may output the feature value used when creating the second variable. For example, if it is determined in step S207 that the first variable and the second variable coincide, the control unit 900 determines that the characteristic value included in the first variable and the characteristic value included in the second variable are the same, and the second variable The characteristic value output unit 800 may be controlled to output '2', which is a characteristic value used when creating a variable.

9. Step of creating the third variable <S209>

If it is determined in step S207 that the first variable and the second variable do not match, in this step, the feature value different from the feature value used when creating the second variable is combined with the character string separated in step S204, and encrypted. It can be created with 3 variables. For example, in this step, the character string combination unit 500 stores another characteristic value (eg, '1') stored in a storage unit in the data processing device 10 or a separate database, and the character string separated in step S204. They are combined with, but made into one character string using the same combination rule as in step S205, and the variable generator 600 may create a third variable by encrypting the combined character string in the same manner as in step S206.

10. Additional verification step <S210>

In this step, the variable checking unit 700 may compare the strings of the first variable and the third variable to check whether they match each other. That is, when the strings of the first variable and the third variable are the same, the variable checking unit 700 determines that the first variable and the third variable match, and the control unit 900 determines the characteristics used when creating the third variable. In order to output the value '1', the control may proceed to step S208.

11. The fourth variable creation step <S211>

If it is determined in step S210 that the first variable and the third variable do not match, in this step, the characteristic value different from the characteristic value used when creating the second variable and the third variable is combined with the character string separated in step S204. It can be encrypted and created as a fourth variable. For example, in this step, the character string combination unit 500 stores other characteristic values (e.g., '3') stored in a storage unit in the data processing device 10 or a separate database. They are combined with, but made into one character string using the same combination rule as in step S205, and the variable generator 600 may create a fourth variable by encrypting the combined character string in the same manner as in step S206.

After this step, the process returns to step S210 and the variable checking unit 700 compares the character strings of the first variable and the fourth variable to check whether they match each other. That is, when the strings of the first variable and the fourth variable are the same, the variable checking unit 700 determines that the first variable and the fourth variable match, and the control unit 900 determines the characteristic used when creating the fourth variable. Control to proceed to step S208 to output the value '3'.

4 is a flowchart schematically illustrating a method of encrypting data according to an embodiment of the present invention. A method of encrypting data according to an embodiment of the present invention will be described in accordance with a flowchart shown in FIG. 4, and will be described with reference to the drawings shown in FIGS. 1 and 3, but in order for convenience.

1. Specific position value extraction step <S301>

In this step, the specific location value extracting unit 200 may extract a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information. The specific position value extraction unit 200 may extract the specific position value 210 by calling identification information stored in a storage unit in the data processing apparatus 10 or stored in a separate database. In this step, the specific location value extracting unit 200 uses a preset extraction rule, and may extract the n-th character, number, or symbol from the corresponding character string as a specific location value.

2. Index conversion step <S302>

In this step, the index conversion unit 300 may convert the specific position value 210 extracted by the specific position value extracting unit 200 into an index in step S301. For example, the index conversion unit 300 may transform an arbitrary character (or number, symbol, etc.) extracted as the specific position value 210 into a number through an index conversion algorithm. Referring to FIG. 3,'d' extracted as a specific position value 210 is converted to 4 by the index conversion unit 300, and the converted number 4 may be designated as an index.

3. String separation step <S303>

In this step, the character string separator 400 may divide one character string into a plurality of character strings based on the index. Referring to FIG. 3, the string separator 400 may set up to the fourth digit of the string as a front end of the string and divide the front end and the rear end into two strings.

4. String combination step <S304>

In this step, the character string combination unit 500 may combine the characteristic values with the separated character strings to form a single character string. Referring to FIG. 3, the character string combination unit 500 may insert a characteristic value “2” between “1ad5” and “dfd34dfafd” using a preset combination rule and combine it into a single character string.

5. Encryption step <S305>

In this step, the variable generation unit 600 may encrypt the string combined into one in step S304. The encrypted character string may be stored in a storage unit in the data processing apparatus 10 or in a separate database in the character string storage step S306 performed after this step. In addition, the encrypted character string may be used as a first variable in the above-described method of verifying encrypted data.

Various embodiments of the present invention can be implemented as computer-readable codes on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tapes, floppy disks, and optical data storage devices. In addition, the computer-readable recording medium may be distributed over a computer system connected through a network to store and execute computer-readable codes in a distributed manner.

For convenience of understanding, although it is sometimes described that one of the above-described elements is used, one of ordinary skill in the art may include a plurality of processing elements or a plurality of types of processing elements. You can see that there is.

As described above, according to various embodiments of the present invention, a specific character string including a characteristic value is encrypted in the same manner as a previously encrypted character string and then compared with each other to check whether they match. After encrypting a specific character string using the characteristic value of, it is compared with each other to determine whether it matches, and if the encrypted character strings match, the corresponding characteristic value can be output. Therefore, the characteristic included in the original data without decrypting the encrypted data The value can be checked, and there is an effect of preventing the system load problem and the wastage of storage space due to data decryption.

In addition, according to various embodiments of the present invention, even in a blockchain service in which information is shared with all participants, specific information requiring security can be easily encrypted, so that the encryption process is convenient and efficient.

In addition, in various embodiments of the present invention, since one identification information is combined with one characteristic value, a specific characteristic value can be assigned to each user, thereby facilitating data management for each user.

Meanwhile, according to various embodiments of the present invention, since a character string is divided into two character strings and a character string for a characteristic value is combined with two character strings to form a single character string, character strings can be combined in an easy and simple manner. It can reduce processing time and load.

As described above, a detailed description of the present invention has been made by an embodiment with reference to the accompanying drawings, but since the above-described embodiment has been only described with reference to a preferred example of the present invention, the present invention is limited to the above embodiment. It should not be understood as being, and the scope of the present invention should be understood in terms of the claims and their equivalent concepts to be described later.

10: data processing device
100: variable designation part
200: specific position value extraction unit
210: specific position value
300: index conversion unit
400: string separator
500: string combination
600: variable generator
700: variable confirmation unit
800: characteristic value output unit
900: control unit

Claims (6)

A method of verifying encrypted data performed by a data processing device, comprising:
A first variable designating step of designating a previously encrypted character string as a first variable;
A specific location value extracting step of extracting a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information;
An index conversion step of converting the specific position value into an index;
A character string separation step of separating a character string based on the index;
A character string combining step of combining the characteristic values with the separated character strings through a preset rule to form a single character string;
Generating a second variable by encrypting the combined character string to generate a second variable; And
And a variable checking step of checking whether the first variable and the second variable coincide with each other.
How to verify encrypted data. The method of claim 1,
The method of verifying the encrypted data
When the first variable and the second variable match, a characteristic value output step of outputting a characteristic value used when creating the second variable; characterized in that it further comprises
How to verify encrypted data. The method of claim 1,
The method of verifying the encrypted data
When the first variable and the second variable do not match, the characteristic value different from the characteristic value used when creating the second variable is combined with the character string separated in the character string separation step and encrypted to create a third variable. Generating a third variable; And
Further comprising: an additional confirmation step of confirming whether the first variable and the third variable match or not.
How to verify encrypted data. As a method of encrypting data performed by a data processing device,
A specific location value extracting step of extracting a value at a specific location from a string of unencrypted identification information or a string of encrypted identification information;
An index conversion step of converting the specific position value into an index;
A character string separation step of separating a character string based on the index;
A character string combining step of combining the characteristic value with the separated character string through a preset rule to form a single character string; And
And an encryption step of encrypting the combined character string.
How to encrypt data. The method of claim 4,
The data encryption method
Characterized in that it further comprises a; character string storage step of storing the encrypted character string
How to encrypt data. A computer-readable recording medium on which a program for performing the method according to any one of claims 1 to 5 is recorded.

Images