KR20220115451A - Personal information printed matter destruction management system and method - Google Patents

Abstract

The present invention relates to a personal information printout destruction management system and method. The method according to the present invention comprises the steps of: scanning a printout to be destroyed; extracting text information from the scanned data of the printout to be destroyed; detecting a personal information item included in the printout to be destroyed from the extracted text information; and comparing the detected personal information item with a predetermined comparison target personal information item to determine whether an unregistered personal information item is included in the printout to be destroyed. It is possible to prove that the personal information printout output from a personal information file has been safely destroyed by using destruction information generated by the present invention. In addition, when the personal information printout is destroyed, it is possible to verify whether the relevant institution is legally handling personal information by checking whether an unregistered personal information item is included.

Description

Personal information printed matter destruction management system and method

The present invention relates to a system and method for managing the destruction of printed personal information.

Recently, many public institutions have printed and used documents containing personal information in the form of paper prints. Many of these personal information documents are stored for a certain period in a specific space, such as a document archive, and then shredded in large quantities by external companies.

The longer the period between creation and destruction of paper prints containing personal information, the greater the management burden and the higher the risk of personal information leakage. In particular, in the case of paper prints containing personal information, there was a weakness in that it was not possible to distinguish whether the paper prints were actually destroyed by an appropriate procedure, or whether the paper prints were lost or taken out.

Korean Patent No. 10-1657496 (Registration Date: September 08, 2016)

The technical problem to be solved by the present invention is to provide a personal information printed matter destruction management system and method that can manage the destruction history of the personal information printed matter.

The personal information print destruction management method according to an embodiment of the present invention for solving the above technical problem includes the steps of scanning the destruction target printed matter, extracting text information from the scan data of the destruction target printed matter, and the extracted text information detecting personal information items included in the destruction target printed matter from includes steps.

The method may further include the step of receiving a selection of one of the personal information file ledger or a predetermined work unit.

The personal information item registered in the selected personal information file ledger or business unit may be used as the comparison target personal information item.

The method includes the steps of scanning and then destroying the printed matter to be destroyed, and the destruction date and time of the printed material to be destroyed, the person in charge of destruction, the number of pieces of destruction, the number of personal information items and personal information detected in the printed material to be destroyed, the selected personal information file ledger or business unit The method may further include generating and storing the destruction information including at least one of the information.

The destruction information may further include scan data of the printed matter to be destroyed by de-identifying personal information.

The destruction information may further include information on unregistered personal information items included in the destruction target printed matter.

The legitimacy of the destruction target printed matter may be determined according to whether the unregistered personal information item is included in the destruction target printed matter.

According to another embodiment of the present invention, it includes a computer-readable recording medium in which a program for executing the method is recorded.

A personal information printed material destruction management system according to another embodiment of the present invention includes a scanning unit for scanning the destruction target printed matter, a character recognition unit for extracting text information from scan data of the destruction target printed matter, and the destruction from the extracted text information and a control unit that detects a personal information item included in the target printed matter, compares the detected personal information item with a predetermined comparison target personal information item, and determines whether an unregistered personal information item is included in the destruction target printed matter.

The system may further include an input/output unit for selecting one of a personal information file ledger or a predetermined business unit.

The control unit may use the personal information item registered in the selected personal information file ledger or work unit as the comparison target personal information item.

The system may further include a discarding unit that discards the discarded printed matter after scanning it.

The control unit generates destruction information including at least one of the destruction date and time of the destruction target printed matter, the person in charge of destruction, the number of pieces of destruction, the number of personal information items and personal information detected in the destruction target printed matter, the selected personal information file ledger or business unit information, can be saved

By using the destruction information generated by the present invention, it can be proved that the printed personal information output from the personal information file is safely destroyed. In addition, when destroying printed personal information, it is possible to verify whether unregistered personal information items are included and whether the relevant institution is handling personal information legally.

1 is a block diagram of a personal information print destruction management system according to an embodiment of the present invention.
2 is a flowchart illustrating a method for managing destruction of personal information printed matter according to an embodiment of the present invention.

Personal information file means a collection of personal information that is systematically arranged or composed according to certain rules so that personal information can be easily retrieved. The personal information file is not only used in the form of an electronic file, but is also printed and used if necessary. The printed personal information printed from the personal information file should be destroyed without delay when the personal information becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of processing personal information has been achieved. Hereinafter, the printed personal information output from the personal information file is referred to as the destruction target print.

Then, with reference to the accompanying drawings, embodiments of the present invention will be described in detail so that those of ordinary skill in the art to which the present invention pertains can easily implement them.

1 is a block diagram of a personal information print destruction management system according to an embodiment of the present invention.

Referring to FIG. 1 , the personal information print destruction management system according to an embodiment of the present invention may include a destruction terminal device 100 , a destruction management server 200 , and a user terminal 300 .

The destruction terminal device 100 , the destruction management server 200 , and the user terminal 300 may exchange various types of information and data through the communication network 10 .

The communication network 10 includes a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), the Internet, 2G, 3G, 4G, 5G, LTE mobile communication network, It may include LPWA (Low Power Wide Area) networks such as Bluetooth, Wi-Fi, Wibro, satellite communication networks, LoRa, Sigfox, etc. Does not matter.

The destruction terminal device 100 is a device that scans and then discards the discarded printed matter. The printed matter to be destroyed may be in the form of paper on which personal information is recorded. Personal information may be personally identifiable information such as name, resident registration number, phone number, etc., and may be information related to an individual such as address, disease, property details, and the like.

The discarding terminal device 100 may include a scanning unit 110 , a discarding unit 120 , a transceiver 130 , and an input/output unit 140 .

The scanning unit 110 may generate scan data obtained by scanning the discard target printed matter.

The discarding unit 120 performs a function of physically destroying the discarded printed matter so that it cannot be restored. The shredder 120 may include, for example, a mechanical component such as a document shredder capable of tearing and shredding paper.

The transceiver 130 supports exchanging various commands, information, and data between the destruction terminal device 100 and the destruction management server 200 in a wired or wireless communication method.

The input/output unit 140 outputs various types of information related to the operation of the discarding terminal device 100 and performs a function of receiving various types of information or commands related to the operation of the discarding terminal device 100 from the user. The input/output unit 140 may include an input means such as a physical button, a physical keypad, a keyboard or a touch screen, and a display means such as an LCD panel, an LED panel, and an OLED panel.

The destruction management server 200 stores and manages destruction information on the printed matter discarded by the destruction terminal device 100 . In addition, the destruction management server 200 may provide the destruction information requested by the user terminal 300 .

Meanwhile, under the Personal Information Protection Act, when a public institution operates a personal information file, 1. the name of the personal information file, 2. the basis and purpose of the operation of the personal information file, 3. the items of personal information recorded in the personal information file, 4. Protection of personal information processing policy including methods of processing personal information, 5. retention period of personal information, 6. recipients of personal information in the case of regular or repeated provision, 7. other matters prescribed by Presidential Decree, etc. It is stipulated to register and disclose to the committee.

The document in which the personal information processing policy for the personal information file is registered is called the personal information file ledger.

The destruction management server 200 may determine the legality of the discarded printed matter. For example, if an unregistered personal information item in the personal information file ledger is included in the printout to be destroyed, the printout may be judged to be inappropriate because it has not been processed in accordance with the Personal Information Protection Act.

The destruction management server 200 may include a communication unit 210 , a storage unit 220 , a character recognition unit 230 , a control unit 240 , and an interface unit 250 .

The communication unit 210 supports the destruction management server 200 to exchange various commands, information and data with the destruction terminal device 100 or the user terminal 300 .

The storage unit 220 may store various types of information and data related to the operation of the personal information printed material destruction management system. For example, the storage unit 220 may store a personal information file ledger, user information, print destruction information, and the like. According to an embodiment, the storage 220 may also store personal information items registered for each business unit.

In addition, the storage unit 220 may store a regular expression pattern prepared for each personal information item. For example, a regular expression pattern for each personal information item such as name, resident registration number, driver's license number, address, phone number, date of birth, address, gender, occupation, e-mail address, etc. may be prepared and stored in advance in the storage unit 220 .

The character recognition unit 230 may recognize and extract text information from the scanned data of the discard target printed matter. It can be implemented as an OCR (optical character reader) program that can recognize and extract text information from an image file.

The controller 240 may control the overall operation of the destruction management server 200 . In particular, the controller 240 may detect the personal information item from the text information extracted from the discard target printed matter by using a regular expression pattern prepared in advance for each personal information item.

The control unit 240 may determine whether the destruction target printed matter includes unregistered personal information items to determine the legitimacy of the destruction target printed matter.

The control unit 240 may use the personal information item registered in the personal information file ledger as the comparison target personal information item. The control unit 240 compares the comparison target personal information item with the personal information item detected in the destruction target printed matter, and if an unregistered personal information item is included in the destruction target printed matter, it may be determined that the printed matter is illegal. For example, if the personal information items registered in the personal information file ledger are name, resident number, and phone number, and an address is detected in the printout to be destroyed, the printout may be judged as illegal.

On the other hand, it may be difficult or inconvenient to accurately select the personal information file ledger corresponding to the printed matter to be destroyed. Therefore, instead of having to select a specific personal information file ledger, a business unit corresponding to the printed matter to be destroyed may be selected, and the personal information item registered in the relevant business unit may be used as the personal information item for comparison. For example, tasks such as property tax and withholding tax can be grouped into one business unit, namely, tax business. In addition, the personal information items registered in the property tax personal information file and the withholding tax personal information file belonging to the tax business can be used as personal information items for comparison with the printed matter related to the tax business.

The control unit 240 includes at least one of the destruction date and time of the destruction target printed matter, the person in charge of destruction, the number of pieces of destruction, the number of personal information items and personal information detected in the destruction target printed material, the personal information file ledger or business unit information selected from the person in charge of destruction The destruction information may be generated and stored in the storage unit 220 .

Meanwhile, the controller 240 may de-identify the scan data so that personal information is not identified. In addition, the control unit 240 may include the personal information de-identification-processed scan data in the destruction information. Here, the de-identification process may be performed by masking a part corresponding to the personal information or by overlaying a predetermined pattern on the scan data so that the personal information is not identified. Of course, it is also possible to process the scan data so that personal information included in the scan data is not identified.

The user can also verify that the print is actually destroyed by checking the scan data that has been processed to de-identify personal information.

The interface unit 250 provides the user terminal 300 with a destruction information inquiry, destruction statistics inquiry, personal information statistics inquiry menu screen, and destruction information inquiry, destruction statistics inquiry, personal information statistics inquiry, etc. from the user terminal 300 The request may be received and transmitted to the controller 240 .

The controller 240 may provide destruction information, destruction statistics, and personal information statistics corresponding to the inquiry request from the user terminal 300 with reference to data stored in the storage unit 220 .

The user terminal 300 is an information communication terminal used by a user who uses the personal information printed material destruction management system. The user terminal 300 may be implemented as an information communication terminal such as a smart phone, a tablet PC, a head mounted display (HMD) terminal, and the like.

The administrator of the personal information printed material destruction management system or the person in charge of personal information protection may use the user terminal 300 to access the destruction management server 200 to inquire about destruction information, search for destruction statistics, and search for statistics on personal information. Of course, in addition to that, a user who has obtained a certain authority or permission can access the destruction management server 200 using the user terminal 300 to inquire necessary information.

2 is a flowchart illustrating a method for managing destruction of personal information printed matter according to an embodiment of the present invention.

Referring to FIGS. 1 and 2 , first, the destruction management server 200 may receive a registration of a personal information file ledger for a personal information file operated by a corresponding institution from an administrator (S205). Step S205 may be performed whenever the personal information file ledger registration is required. If it is implemented to determine the legitimacy of the printed matter to be destroyed by business unit, personal information items may be registered for each business unit in step S205.

The destruction management server 200 may perform user authentication for the person in charge of destruction when performing the destruction procedure for the printed matter to be destroyed (S210). The destruction terminal device 100 may receive information necessary for user authentication from the person in charge of destruction, and transmit it to the destruction management server 200 so that user authentication is performed. Alternatively, if the user terminal of the person in charge of destruction scans the QR code displayed on the destruction terminal device 100 and transmits it to the destruction management server 200 through a communication network, it is also possible to have the destruction management server 200 directly perform user authentication. . The user authentication method may be performed in various ways other than those described herein. In some embodiments, step S210 may be omitted.

The destruction terminal device 100 may receive a selection of a personal information file ledger or a work unit corresponding to the destruction target printed matter (S215). The destruction terminal device 100 receives the personal information file ledger list or the task unit list from the destruction management server 200, displays it through the input/output unit 140, and selects the corresponding personal information file ledger or task unit from the person in charge of destruction can receive Of course, according to the embodiment, it is also possible to implement so that the person in charge of destruction can directly input the name or code corresponding to the personal information file ledger or business unit to the destruction terminal device 100 .

Next, when the discarding target printed matter is input, the discarding terminal device 100 may generate scan data by scanning the discarding target printed material ( S220 ). In step S220 , the discarding terminal device 100 may destroy the discarded object by shredding it immediately after scanning it.

The destruction terminal device 100 may transmit the scan data of the destruction target printed matter to the destruction management server 200 (S225). When the destruction terminal device 100 transmits the destruction document data, it may also transmit information on the destroyer information, the number of pages of destruction, and the destruction date and time to the destruction management server 200 .

The destruction management server 200 may extract text information from the scan data of the printed matter to be destroyed (S230).

In addition, the destruction management server 200 may detect the personal information item included in the destruction target printed matter from the extracted text information (S235). In step S235, the destruction management server 200 may detect the personal information item by using a regular expression pattern prepared in advance for each personal information item. In step S235, the destruction management server 200 detects and stores only the personal information item and does not store the personal information itself. In step S235, the destruction management server 200 may count the number of detected personal information. The number of detected personal information for each personal information item may be divided and counted.

After detecting the personal information item, the destruction management server 200 may delete the text information extracted from the discarded printed matter scan data (S240). In addition, the destruction management server 200 may store the discarded printed matter scan data after performing personal information de-identification processing (S245). According to an embodiment, the discarded printout scan data may also be deleted in step S240, and step S245 may be omitted.

The destruction management server 200 may check whether the unregistered personal information item is included in the destruction target printed matter (S250).

In step S250, the comparison target personal information item registered in the personal information file ledger is compared with the personal information item detected in the destruction target printed matter, and if the unregistered personal information item is included in the destruction target printed matter, the printed matter is deemed to be illegal. can judge Or, according to the embodiment, a task unit corresponding to the printout to be destroyed is selected, and the personal information item to be compared registered in the task unit is compared with the personal information item detected in the printout to be destroyed to determine the legitimacy of the printout. It is also possible

The destruction management server 200 includes at least one of the destruction date and time of the destruction target printed matter, the person in charge of destruction, the number of pieces of destruction, the number of personal information items and personal information detected in the destruction target printed matter, the selected personal information file ledger or business unit information. Information can be generated and stored (S255). When the discarded printed matter scan data has been processed to de-identify personal information in step S245, the discarded printout scan data that has been processed to de-identify personal information may be further included in the destruction information generated in step S255. In addition, information on unregistered personal information items included in the printed matter to be destroyed and the result of determining the legality of the printed matter to be destroyed may also be included in the destruction information.

Thereafter, the manager or the person in charge of personal information protection of the destruction management system may inquire about the destruction information in the destruction management server 200 through the user terminal 300 ( S260 ), and check the legitimacy of the discarded printed matter.

The embodiments described above may be implemented by a hardware component, a software component, and/or a combination of a hardware component and a software component. For example, the apparatus, methods and components described in the embodiments may include, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate (FPGA). array), a programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions, may be implemented using one or more general purpose or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For convenience of understanding, although one processing device is sometimes described as being used, one of ordinary skill in the art will recognize that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that may include For example, the processing device may include a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as parallel processors.

The software may comprise a computer program, code, instructions, or a combination of one or more thereof, which configures a processing device to operate as desired or is independently or collectively processed You can command the device. The software and/or data may be any kind of machine, component, physical device, virtual equipment, computer storage medium or device, to be interpreted by or to provide instructions or data to the processing device. It may be permanently or temporarily embody in The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored in one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the embodiment, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

As described above, although the embodiments have been described with reference to the limited drawings, those skilled in the art may apply various technical modifications and variations based on the above. For example, the described techniques are performed in a different order than the described method, and/or the described components of the system, structure, apparatus, circuit, etc. are combined or combined in a different form than the described method, or other components Or substituted or substituted by equivalents may achieve an appropriate result.

Claims (11)

scanning the printed material for destruction;
extracting text information from the scan data of the printed matter to be destroyed;
detecting a personal information item included in the destruction target printed matter from the extracted text information; and
comparing the detected personal information item with a predetermined comparison target personal information item and determining whether the unregistered personal information item is included in the destruction target printed matter
A method for managing the destruction of personal information printouts, including.
In claim 1,
Step of selecting one of the personal information file ledger or pre-determined business unit
further comprising,
The personal information print destruction management method using the personal information item registered in the selected personal information file ledger or business unit as the comparison target personal information item.
In claim 2,
destroying the printed matter to be destroyed after scanning; and
Creating and storing destruction information including at least one of the date and time of destruction of the printed material to be destroyed, the person in charge of destruction, the number of pages of destruction, the number of personal information items and personal information detected in the printed material to be destroyed, the selected personal information file ledger or business unit information
A method for managing the destruction of personal information printouts further including.
In claim 2,
The destruction information is
The personal information print destruction management method further comprising the scan data of the destruction target printed matter in which personal information is de-identified.
In claim 2,
The destruction information is
Personal information print destruction management method further comprising information on unregistered personal information items included in the destruction target print.
In claim 2,
A method for managing the destruction of printed personal information for judging the legality of the printed material to be destroyed according to whether the item to be destroyed contains unregistered personal information.
A computer-readable recording medium in which a program for executing the method of any one of claims 1 to 6 is recorded on a computer.
a scanning unit that scans the printed matter to be destroyed;
a character recognition unit for extracting text information from the scan data of the printed matter to be destroyed; and
Detect personal information items included in the destruction target printed matter from the extracted text information, compare the detected personal information items with a predetermined comparison target personal information item, and check whether the destruction target printed material contains unregistered personal information items control unit to judge
Personal information print destruction management system, including.
In claim 8,
Further comprising an input/output unit for selecting one of the personal information file ledger or a predetermined business unit,
The control unit is a personal information print destruction management system using the personal information item registered in the selected personal information file ledger or work unit as the comparison target personal information item.
10. In claim 9,
Further comprising a discarding unit for destroying the discarded object after scanning the print,
The control unit generates destruction information including at least one of the destruction date and time of the destruction target printed matter, the person in charge of destruction, the number of pieces of destruction, the number of personal information items and personal information detected in the destruction target printed matter, the selected personal information file ledger or business unit information, Personal information printout destruction management system that stores.
10. In claim 9,
The destruction information is
The personal information print destruction management system further comprising scan data of the destruction target printed matter in which personal information is de-identified.

Images