TWM597905U - Data de-identification system - Google Patents

Abstract

A data de-identification system includes a first database, a data de-identification device, and a second database. The first database includes an original personal data. The data de-identification device is signally connected to the first database and configured to receive the original personal data to convert the original personal data into a de-identification personal data. The second database is signally connected to the data de-identification device and configured to receive and store the de-identification personal data.

Description

Data de-identification system

The content of this disclosure is related to a data de-identification system, and especially to a personal financial data de-identification system.

Generally speaking, the protection of the personal data (for example, name, birthday, ID number, etc.) of customers by financial institutions is usually achieved through the setting of access permissions and the encryption of data. However, protecting customers' personal data by setting access permissions cannot prevent internal personnel of financial institutions from leaking personal data. On the other hand, protecting customers' personal data through encryption may also pose considerable risks. For example, if the data is not handled properly during the decryption process, the risk of data leakage will increase; or when the encryption key is lost, the encrypted data will not be restored, resulting in irreversible damage to the data.

Therefore, how to protect the integrity of the customer's personal data and avoid the leakage of the customer's personal data due to improper use or theft is an urgent issue in this field.

According to an embodiment of the present disclosure, the data de-identification system includes a first database, a data de-identification device, and a second database. The first database contains original personal data. The data de-identification device signal connects to the first database and is configured to receive original personal data and convert the original personal data into de-identified personal data. The second database signal connects the data to identify the device, and is configured to receive and store the de-identified personal data.

In one embodiment of the present disclosure, the data de-identification system further includes a data slicing device, the signal is connected to the second database, and is configured to receive de-identified personal data, and slice the de-identified personal data to obtain the same bits A number of advanced materials.

In an embodiment of the present disclosure, the data de-identification system further includes an advanced database, the signal is connected to the data slicing device, and is configured to store advanced data.

In one embodiment of this disclosure, the advanced database includes a plurality of advanced sub-databases, and the advanced data are stored in different advanced sub-databases.

In an embodiment of the present disclosure, the data de-identification system further includes a data checking device, the signal is connected to the advanced sub-database, and is configured to check whether the advanced data in different advanced sub-databases have the same bit. number.

In one embodiment of this disclosure, the data de-identification system further includes a data authentication device, a signal connection data de-identification device, and is configured to receive original personal data and de-identify personal data.

In one embodiment of this disclosure, the data authentication device includes a data matching file configured to store original personal data and de-identified personal data, and the data authentication device is configured to authenticate the original personal data and the de-identified personal data in the data pairing file Access rights.

In one embodiment of the present disclosure, the data de-identification system further includes a random number unit, and the original personal data and the random number unit are combined to convert into de-identified personal data.

In one embodiment of the present disclosure, the data de-identification system further includes a data matching file configured to store original personal data, random number units, and de-identified personal data.

In an embodiment of the present disclosure, the data de-identification system further includes an arithmetic rule unit, and the data de-identification device converts the original personal data into de-identifiable personal data through the arithmetic rule unit.

According to the above-mentioned embodiments of the present disclosure, by setting the de-identification device, the customer's original personal data can be converted into de-identified personal data. Since de-identified personal data cannot present personal information that can represent the identity of the customer, the risk of leakage of the original personal data can be reduced, and the rights of customers can be protected.

100: Data de-identification system

110: First Database

120: Data to identify the device

130: The second database

140: Data authentication device

150: Data Slicing Device

160: Advanced Database

170: Advanced sub-database

180: data checking device

210~360: Operation

In order to make the above and other objectives, features, advantages, and embodiments of this disclosure more comprehensible, the description of the accompanying drawings is as follows:

FIG. 1 is a block diagram of a data de-identification system according to an embodiment of the present disclosure.

Figure 2 is a schematic diagram of a data matching file according to an embodiment of the present disclosure.

FIG. 3 is a flowchart of a method of using the data de-identification system according to an embodiment of the present disclosure.

FIG. 4 is a flowchart of a method of using the data de-identification system according to another embodiment of the present disclosure.

Hereinafter, multiple implementation manners of the present disclosure will be disclosed in diagrams. For the sake of clarity, many practical details will be described in the following description. However, it should be understood that these practical details should not be used to limit this disclosure. That is to say, in some implementations of this disclosure, these practical details are unnecessary, and therefore should not be used to limit this disclosure. In addition, in order to simplify the drawings, some conventionally used structures and elements are shown in the drawings in a simple and schematic manner. In addition, for the convenience of readers, the size of each element in the drawings is not drawn according to actual scale.

It should be understood that the "signal connection" referred to in this disclosure may include wired connection, wireless connection, or any combination of the above methods. For example, a wired connection can connect two devices through a data cable; a wireless connection can connect two devices through the Internet; and a wired-wireless hybrid connection can be connected to an intermediate device through a wired connection first, and then wirelessly Connect to the target device by way of connection.

FIG. 1 shows a block diagram of a data de-identification system 100 according to an embodiment of the present disclosure. The data de-identification system 100 includes the first capital The material library 110, the data identification device 120, and the second database 130. The first database 110 signals to connect the data to identify the device 120, and the data to identify device 120 signals to connect to the second database 130. The first database 110 is configured to store original personal data corresponding to the customer's identity. In some embodiments, the original personal data includes the ID number and name corresponding to the client's identity. For example, the presentation method of the original personal data may be "A123456789, Wang Xiaoming". It should be understood that the original personal data listed above are only examples, and this disclosure is not limited to the above.

In some embodiments, the first database 110 can transmit the original personal data contained in it to the data de-identification device 120, and the data de-identification device 120 can convert the original personal data into de-identified personal data. The de-identified personal data generated after conversion is presented in the form of a hash value, that is, presented as a string of random letters and random numbers, and has no substantial meaning. In other words, de-identified personal data cannot present personal information that can represent the customer's identity (for example, ID number and name). In detail, the data de-identification device 120 may combine the original personal data with a set of random number units, and generate de-identified personal data corresponding to the original personal data through the conversion of the algorithm unit. For example, the data de-identification device 120 may combine the original personal data such as "A123456789, Wang Xiaoming" with a random number unit such as "779854234483115", and then convert the above-mentioned algorithm unit to generate, for example, "8A53A30EF1A01AF5E86CDA73F7A3B6E891FB693717C81711B329D828CFB3B2E" De-identification personal information.

In some embodiments, the data de-identification device 120 transmits the de-identified personal data obtained after the conversion to the second database 130 for data storage. In other words, the second database 130 is configured to store de-identified personal data. Since the de-identified personal data cannot present personal information that can represent the identity of the customer, the de-identified personal data obtained from the second database 130 cannot be used. In this way, customers' original personal data can be prevented from being improperly used or stolen, thereby preventing the leakage of original personal data and protecting the rights of customers.

In some embodiments, the data de-identification system 100 further includes a data authentication device 140. The data authentication device 140 signals connection data to identify the device 120, and the data authentication device 140 includes a data matching file. Specifically, please refer to FIG. 2, which shows a schematic diagram of a data matching file according to an embodiment of the present disclosure. The data matching file contains at least the original personal data corresponding to the customer's identity, the random number unit combined with the original personal data, and the de-identified personal data corresponding to the original personal data. For details, please refer to Figure 1 and Figure 2 at the same time. After the data de-identification device 120 converts the original personal data corresponding to the customer's identity into de-identified personal data, the data de-identification device 120 can use the original personal data The random number unit combined with the original personal data and the de-identified personal data corresponding to the original personal data are transmitted to the data authentication device 140 to create a data matching file in the data authentication device 140. The data authentication device 140 is configured to store and maintain the data pair file, and authenticate the access authority of the data in the data pair file. In this way, financial personnel with authority It is necessary to pass the authentication of the data authentication device 140 before entering the data authentication device 140 to access various data in the data matching file.

In some embodiments, the data de-identification system 100 further includes a data slicing device 150. The data slicing device 150 signals the second database 130 to slice the de-identified personal data in the second database 130. In detail, the second database 130 can transmit the de-identified personal data contained in it to the data slicing device 150, and the data slicing device 150 can further process the received de-identified personal data string. slice. For example, the data slicing device 150 can slice the de-identified personal data such as "8A53A30EF1A01AF5E86CDA73F7A3B6E891FB6937C81711B329D828FB3B2E7C17" to generate strings such as "8A53A30EF1A01AF5", "E86CDA73F6F7C81729D17, "E86CDA73F6F7A3B91F6F7A3B91F5", "E86CDA73F6F7A3B91F6" data. It should be understood that the advanced materials listed above are only examples, and this disclosure is not limited to the above. In some embodiments, each piece of advanced data has the same number of bits (byte).

In some embodiments, the data de-identification system 100 further includes an advanced database 160. The advanced database 160 signals the data slicing device 150 so that the data slicing device 150 can transmit multiple pieces of advanced data obtained after slicing to the advanced database 160 for long-term data storage and backup. Since each piece of advanced data obtained after slicing is not complete, the security of the customer's original personal data can be further protected. In some embodiments, the advanced database 160 includes multiple The advanced sub-database 170, and each piece of advanced data is stored in a different advanced sub-database 170. By storing each piece of advanced data in a different advanced sub-database 170, the risk of improper use or theft of the customer's original personal data can be further reduced.

In some embodiments, the data de-identification system 100 further includes a data checking device 180. The data checking device 180 signals to the advanced database 160 to confirm whether the bit numbers of the advanced data stored in different advanced sub-databases 170 are consistent with each other, thereby ensuring that multiple advanced data can be restored to the original individual data. In some embodiments, the data checking device 180 can perform a cyclic redundancy check (CRC) to check the number of bits of the advanced data.

FIG. 3 is a flowchart of a method of using the data de-identification system according to an embodiment of the present disclosure. In detail, the use of the data de-identification system in Figure 3 can de-identify customers' original personal data. The method of using the data de-identification system includes operations 210 to 260. In the following description, the above operations will be further explained.

Please refer to Figure 1 and Figure 3 at the same time. First, in operation 210, the first database 110 transmits the original personal data of the customers contained in it to the data identification device 120. Next, in operation 220, the data de-identification device 120 converts the received personal original data into de-identified personal data. Subsequently, in operation 230, the data de-identification device 120 transmits the de-identified personal data obtained after the conversion to the second database 130 for storage. At the same time, in operation 240, the data de-identification device 120 merges the original personal data with the original personal data The random number unit and the de-identified personal data corresponding to the original personal data are transmitted to the data authentication device 140 to create a data matching file in the data authentication device 140. In this way, a financial officer with authority can enter the data authentication device 140 to access various data in the data matching file. Then, in operation 250, the second database 130 transmits the de-identified personal data contained in the second database 130 to the data slicing device 150 to obtain multiple pieces of advanced data. Subsequently, in operation 260, the data slicing device 150 transmits multiple pieces of advanced data to the advanced database 160 for long-term storage and backup of the data.

Through the above operations, the customer's original personal information can be de-identified. In this way, the original personal data can be prevented from being used or stolen improperly, thereby preventing the leakage of the original personal data and protecting the rights and interests of customers. In addition, by slicing de-identified personal data and storing and backing up for a long time, data security can be further protected.

FIG. 4 shows a flowchart of a method of using the data de-identification system according to an embodiment of the present disclosure. In detail, through the use of the data de-identification system in Figure 4, the multiple pieces of advanced data obtained after slicing can be restored to the customer's original personal data. The method of using the data de-identification system includes operation 310 to operation 360. In the following description, the above operations will be further explained.

Please refer to Figure 1 and Figure 4 at the same time. First, in operation 310, the data checking device 180 checks whether the bit numbers of the advanced data stored in different advanced sub-databases 170 are consistent with each other. Next, in operation 320, each advanced sub-database 170 stores the advanced data to be restored Transfer to the data slicing device 150. Subsequently, in operation 330, the data slicing device 150 combines the multiple pieces of advanced data it has received to restore the de-identified personal data. Then, in operation 340, the data slicing device 150 transmits the combined de-identified personal data to the second database 130. Subsequently, in operation 350, the second database 130 transmits the de-identified personal data contained therein to the data de-identifying device 120. Then, in operation 360, the data authentication device 140 retrieves the de-identified personal data from the data de-identification device 120, and finds the original data corresponding to the de-identified personal data through the data matching file located in the data authentication device 140 Personal data, and then provide authorized financial personnel to access customers' original personal data.

Through the above operations, the customer's original personal data can be restored to ensure that the de-identified original personal data will not be damaged. In addition, the authorized financial personnel must pass the authentication of the data authentication device before they can enter the data authentication device to access the data in the data matching file. In this way, data security can be further protected.

According to the above-mentioned embodiments of the present disclosure, by setting the de-identification device, the customer's original personal data can be converted into de-identified personal data. Since de-identified personal data cannot present personal information that can represent the identity of the customer, the risk of leakage of the original personal data can be reduced, and the rights of customers can be protected. In addition, with the setting of the data slicing device, the original personal data can be further converted into advanced data for long-term preservation and backup. In addition, through the setting of the data authentication device, the authorized financial personnel must pass the authentication before they can access the customer’s original personal data to further ensure the data. safety.

Although the present disclosure has been disclosed in the above implementation manners, it is not intended to limit the present disclosure. Anyone with ordinary knowledge in the technical field of the present disclosure can make various changes and changes without departing from the spirit and scope of the present disclosure. Retouching, therefore, the scope of protection of this disclosure shall be subject to the scope of the attached patent application.

100: Data de-identification system

110: First Database

120: Data to identify the device

130: The second database

140: Data authentication device

150: Data Slicing Device

160: Advanced Database

170: Advanced sub-database

180: data checking device

Claims (10)

A data de-identification system, including A first database, containing an original personal data; A data de-identification device, signaled to the first database, wherein the data de-identification device is configured to receive the original personal data and convert the original personal data into a de-identified personal data; and A second database, which signals the data de-identification device, and is configured to receive and store the de-identified personal data. The data de-identification system according to claim 1, further comprising a data slicing device connected to the second database with signals, and configured to receive the de-identified personal data, and slice the de-identified personal data to Obtain multiple advanced data with the same number of bits. The data de-identification system described in claim 2 further includes an advanced database, the signal is connected to the data slicing device, and is configured to store the advanced data. The data de-identification system according to claim 3, wherein the advanced database includes a plurality of advanced sub-databases, and each of the advanced data is stored in a different advanced sub-database. The data de-identification system described in claim 4 further includes a data checking device, the signal is connected to these advanced sub-databases, and the configuration To check whether the advanced data located in different advanced sub-databases have the same number of bits. The data de-identification system described in claim 1 further includes a data authentication device, which is signal-connected to the data de-identification device and configured to receive the original personal data and the de-identified personal data. The data de-identification system according to claim 6, wherein the data authentication device includes a data matching file configured to store the original personal data and the de-identified personal data, and the data authentication device is configured to authenticate the data pairing The original personal data in the file and an access right of the de-identified personal data. The data de-identification system as described in claim 1, further comprising a random number unit, wherein the original personal data and the random number unit are combined to be converted into the de-identified personal data. For example, the data de-identification system described in claim 8 further includes a data matching file configured to store the original personal data, the random number unit, and the de-identified personal data. The data de-identification system according to claim 1 further includes an algorithm unit, wherein the data de-identification device converts the original personal data into the de-identified personal data through the algorithm unit.

Images