TWM610029U - Data security transmission and control system - Google Patents

Abstract

A data secure transmission and control system, including a transmission end computer for transmitting a file to be transmitted to a receiving end computer, a review end computer, and a control end computer, which receive the standby computer sent by the transmission end computer When sending a file and judging that the file to be sent contains a data that needs to be protected, the file to be sent is sent to the reviewer computer for review, and the control computer encrypts the file to be sent that has passed the review into an encryption After the file, the encrypted file is sent to the receiving end computer designated by the transmitting end computer; and the control end computer additionally sends a decryption code to the receiving end computer that receives the encrypted file, so that the receiving end The computer can decrypt the encrypted file with the decryption password to obtain the file to be transmitted.

Description

Data secure transmission and control system

This model relates to a data transmission system, in particular to a data secure transmission and control system.

Insurers need to deal with the payment transactions of various types of payments to customers, such as claims, annuities, maturity... etc., every day. And because the insurance payment files delivered to the bank usually contain personal information such as the customer’s name, ID number, bank account number, etc. Therefore, in order to comply with the personal data protection law and ensure the safety of the transmission of customer’s personal information, insurance companies should provide comprehensive personal information. Data transmission technology to make the implementation of insurance payment obligations more complete.

The current practice is that the operator of the insurance company first downloads an insurance benefit information from the computer system to the personal terminal computer, and then the operator manually merges or splits the insurance benefit information according to the different needs of each bank's bank according to the insurance benefit information. Insurance benefit data to recreate the insurance benefit files to be delivered to each bank. Then, the operator manually encrypts the insurance payment files separately, and delivers the encrypted insurance payment files to the bank treasury of each bank by uploading them to the bank's online banking or sending them in a personal mailbox to execute the payment transaction.

However, the above approach has the following risks: First, when the operation of merging or splitting the insurance benefit data is executed on the personal terminal computer, because the data editing tool is easier to obtain, it is easy to increase the fraud risk of the operator deliberately changing the personal information. Furthermore, if the insurance payment files are encrypted and sent manually, it may happen that they are sent to the wrong bank. In addition, manually uploading the encrypted insurance payment files to online banking or sending them to various bank libraries poses the risk of stealing customers' personal information.

Therefore, the purpose of the present invention is to provide a secure data transmission and control system, which can at least solve the above-mentioned operating method's risk of personal information being easily changed and the problem of customers' personal information being easily stolen.

Therefore, the present new type of data secure transmission and control system is used to transmit data to a receiving end computer, and includes a transmitting end computer for transmitting a file to be sent to the receiving end computer, a reviewing end computer, and a receiving end computer. The control end computer is electrically coupled to the transmitting end computer, the review end computer, and the receiving end computer for communication, and receives the file to be transmitted sent by the transmitting end computer, and determines that the file to be transmitted contains a When the data needs to be protected, the file to be sent is sent to the reviewer computer; wherein, the reviewer computer reviews the file to be sent, and returns the file to be sent that has passed the review to the controller The end computer; the control end computer receives the file to be sent that has passed the audit, encrypts the file to be sent that has passed the audit, and turns it into an encrypted file, and then sends the encrypted file to the sending end computer designated to receive The receiving end computer; and the control end computer additionally sends a decryption code to the receiving end computer that receives the encrypted file, so that the receiving end computer can decrypt the encrypted file with the decryption code to obtain the file to be sent .

In some implementation aspects of the present invention, the data to be protected includes personal data.

In some implementation aspects of the present invention, the data secure transmission and control system further includes a database server and an editing terminal computer that are electrically coupled to the review terminal computer to communicate with the data. When the library server requests to download a piece of data to be edited containing the data to be protected, the database server sends the data to be edited to the reviewer computer, and the reviewer computer reviews the data to be edited , And then send the reviewed data to be edited to the editing side computer, and the editing side computer produces the file to be sent based on the reviewed data to be edited.

In some implementation aspects of the present invention, when the editing computer wants to send the file to be sent to the transmitting computer, when the editing computer determines that the content of the file to be sent has been modified, the editing computer will first The file to be sent is sent to the reviewing end computer, and the reviewing end computer confirms that the content of the file to be sent is correct, and then sends the confirmed file to be sent to the sending end computer.

In some implementation aspects of the present invention, the file to be transmitted is an insurance benefit file, and the data to be protected includes personal data.

In some implementation aspects of the present invention, the transmitting end computer has a fixed Internet protocol address, is equipped with an independent network segment and a firewall, and prohibits access to external storage devices.

In some implementation aspects of the present invention, when the control computer determines that the file to be transmitted does not contain the data to be protected, the control computer transmits the file to be transmitted to the designated computer of the transmitting end The receiving computer.

In some implementation aspects of the present invention, the controlling end computer further determines that the receiving end computer designated by the transmitting end computer to receive is the one included in the sending list based on a mailing list that includes a plurality of recipients. Only when one of the recipients sends the encrypted file to the receiving computer.

The effect of the present invention is that when the control end computer determines that the file to be sent from the transmitting end computer contains data that needs to be protected, the file to be sent is sent to the review end computer for review, and then the file to be sent is sent to the reviewing end computer for review. The audited file to be transmitted is encrypted into an encrypted file, and the encrypted file is sent to the receiving computer designated by the transmitting computer, and a decryption password is also sent to the receiving computer to decrypt the encrypted file. In this way, the data to be protected contained in the file to be sent is prevented from being leaked; the data to be edited and the review history that contain the data to be protected are reviewed by the reviewing end computer to be downloaded to the editing end computer The modified insurance benefit file ensures the legitimacy of the customer’s personal information use and modification; the controlling computer determines whether the receiving computer designated by the transmitting computer to receive the file to be transmitted is the mailing device according to the mailing list. Send the recipients included in the list to ensure that the file to be sent is correctly transmitted.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are represented by the same numbers.

Refer to Figure 1, which is an embodiment of the new data secure transmission and control system, which is mainly but not limited to being applied to an insurance company to securely transmit data to a receiving end computer 1, which can Yes, but not limited to an online banking server set up on the Internet at the bank end or a personal terminal computer set up at each bank bank at the bank end. This embodiment mainly includes a transmission end computer 2, a review end computer 3, and a control end computer 4 at the end of the insurer. Wherein, the transmitting end computer 2 is usually used for operation to transmit a file to be transmitted to the receiving end computer 1; the reviewing end computer 3 is usually operated by a reviewer with authority to determine whether the file to be transmitted is allowed or not Computer; the control end computer 4 is equipped with a Network-based Data Leak Prevention (or Data Loss Prevention) system (hereinafter referred to as the NDLP system), and is in conjunction with The transmitting end computer 2 and the reviewing end computer 3 are electrically coupled (for example, through an internal network) for communication, and are electrically coupled (for example, through the Internet) for communication with the receiving end computer 4. Moreover, the control The end computer 4 is set between the transmitting end computer 2 and the receiving end computer 1. That is, the data or files that the transmitting end computer 2 wants to send to the receiving end computer 1 will pass through the control end computer 4 and be controlled by the Monitoring and control of pipe end computer 4.

Therefore, when the control end computer 4 receives the file to be sent from the transmitting end computer 2, it will determine whether the file to be sent contains a data that needs to be protected through a detection module 41 of the NDLP system. , If yes, block the files to be sent, and send the files to be sent to the reviewer computer 3. Conversely, when the detection module 41 of the control end computer 4 determines that the file to be sent does not contain the data to be protected, the control end computer 4 directly sends the file to be sent to the transmission end The receiving end computer 1 designated by computer 2. Among them, the information that needs to be protected can be, but is not limited to, personal information or confidential information.

After the reviewing end computer 3 receives the file to be sent from the controlling end computer 4, the reviewer who has the authority to use the reviewing end computer 3 will send the file to be sent through the reviewing end computer 3 After reviewing, and after determining that the data to be protected contained in the file to be sent is correct and without information security concerns, the reviewer computer 3 will send the file to be sent that has passed the review back to the control computer 4. In this way, it is ensured that the data to be protected contained in the file to be transmitted is used and transmitted correctly.

After the control terminal computer 4 receives the file to be sent that has been reviewed and returned from the review computer 3, it encrypts the file to be sent that has passed the review with one of the encryption modules 42 to make it an encrypted file The encrypted file is then sent to the receiving computer 1 designated by the transmitting computer 2; and the encryption module 42 also generates a decryption password that can decrypt the encrypted file. Therefore, the control terminal After the computer 4 sends the encrypted file to the receiving computer 1, it will additionally send the decryption password to the receiving computer 1 that receives the encrypted file, so that the receiving computer 1 can use the decryption password to encrypt the encrypted file. Decrypt the file to obtain the file to be sent. For example, the decryption password and the password for encrypting the file to be transmitted that have passed the audit may be the same password, and the password is generated by the encryption module 42 random random number, for example, using MD5 Message Digest Algorithm (MD5 Message Digest Algorithm). -Digest Algorithm) generates encryption (decryption) encryption. Therefore, even if the receiving computer 1 is fixed (ie, the fixed recipient), the decryption password of each encrypted file sent to the receiving computer 1 is different. In this way, the data to be protected contained in the file to be transmitted is prevented from leaking. In addition, the control terminal computer 4 will also synchronously record the sent encrypted files containing the data to be protected.

Moreover, in this embodiment, the transmitting end computer 2 may be a personal computer located in an office of an operator of an insurance company, and the file to be transmitted is only a general file containing the personal data of the insured or the insured, for example.

Alternatively, the file to be transmitted can also be an insurance benefit file (hereinafter referred to as the insurance benefit file) to be provided to the designated bank treasury, so that the bank treasury executes the insurance benefit according to the content of the insurance benefit file. It mainly contains personal information such as customer name, ID number, bank account number, etc. (that is, the information that needs to be protected above). In this application scenario, the transmission terminal computer 2 will be set up in a personal computer in an independent trading room of an insurance company to control the operators who contact the customer’s personal information; and the transmission terminal computer 2 has a fixed Internet Protocol (IP) address, and equipped with independent network segment and firewall to prevent personal data leakage and keep file transfer records; and the transmission end computer 2 prohibits access to external storage devices (such as USB flash drives) to prevent personal information The information is leaked, and it is only used to transmit the insurance benefit file, that is, the transmission terminal computer 2 does not have the editing function and cannot modify or change the content of the insurance benefit file, thereby avoiding the risk of operator fraud and personal information (or Data) is the risk of tampering and misplanting.

Therefore, in order to produce the insurance benefit file provided to the bank treasury of various banks, as shown in FIG. 2, this embodiment may further include a computer that is electrically coupled to the review terminal computer 3 (for example, through an internal network) for communication. A database server 5 and an editing terminal computer 6. The editing terminal computer 6 is usually set in the office of the operator, and when the insurance benefit file is to be produced, the operator sends the data to the database server through the editing terminal computer 6 5 Request to download a data to be edited that contains the data that needs to be protected and is related to insurance benefits. For example, when an insurance benefit data is to be delivered to the bank of each bank, the database server 6 will first edit the computer 6 The data to be edited is sent to the reviewing computer 3, and the reviewer reviews the data to be edited through the reviewing computer 3, and sends a notification to approve the editing computer 6 to download the data to be edited After it is given to the database server 5, the database server 5 will send the reviewed data to be edited to the editing side computer 6, and then the editing side computer 6 can be based on the reviewed data to be edited ( The insurance benefit information to be delivered to the bank treasury) The insurance benefit file to be provided to each bank’s bank treasury is produced. For example, the operator uses the editing terminal computer 6 to merge or split the insurance benefit file according to the different needs of each bank. Insurance benefit information, and made into these insurance benefit files to be delivered to each bank. In this way, to ensure the legitimacy of the customer's personal information use.

And in order to prevent the operator from arbitrarily or deliberately modifying or changing the content of the insurance payment file in the process of producing the insurance payment file, when the operator has completed the preparation of the insurance payment file and wants to send the insurance payment file to When the transmitting end computer 2 in the transaction room transmits to the receiving end computer 1 of the designated bank bank through the transmitting end computer 2, the editing end computer 6 will determine the content of the insurance benefit file based on the editing records of the operator Whether it has been modified or has been modified before, if so, the editing computer 6 will first send the insurance benefit file to the reviewing computer 3, and the reviewer will confirm the insurance benefit file through the reviewing computer 3 After the modification content is correct, the reviewing end computer 3 will send the confirmed insurance benefit file to the transmitting end computer 2; thereby, the legitimacy of the insurance benefit file modification can be ensured. In addition, when the editing terminal computer 6 determines that the content of the insurance benefit file has not been modified, it directly transmits the insurance benefit file to the transmitting terminal computer 2.

Furthermore, the control-end computer 4 is also based on a mailing list that includes the recipients of each bank's bank, and when the insurance benefit file passes the review by the review-end computer 3, the control-end computer 4 returns It will determine whether the receiving computer 1 designated by the transmitting end computer 2 to receive the insurance benefit file is one of the recipients included in the mailing list, and if so, the insurance benefit file will be encrypted and sent to the receiving end. The end computer 1, thereby ensuring that the insurance payment file is correctly transmitted.

It is worth mentioning that when adding a recipient of an existing bank library or adding a new bank bank library to be received in the mailing list, it needs to be reviewed by the reviewing terminal computer 3 first. (Review) can be added to the mailing list to ensure that the insurance payment file can be correctly transmitted and received.

To sum up, in this embodiment, when the control terminal computer 4 determines that the file to be transmitted sent by the transmitting terminal computer 2 contains data that needs to be protected, the file to be transmitted is sent to the review terminal computer for processing. Review (audit), then encrypt the file to be sent that has passed the audit into an encrypted file, send the encrypted file to the receiving computer 1 designated by the transmitting computer 2, and send a decryption password to the receiving end The computer 1 is used to decrypt the encrypted file, thereby preventing the data to be protected contained in the file to be transmitted from leaking; and the reviewing end computer 3 verifies the data to be downloaded to the editing end computer 6 The data to be edited related to the insurance payment and the review of the insurance payment file that has been modified to ensure the legitimacy of the use and modification of the customer’s personal information; and the control terminal computer 4 judges the transmission terminal computer 2 designation by the sending list Whether the receiving end computer 1 that receives the insurance benefit file is the recipient included in the mailing list ensures that the insurance benefit file is transmitted correctly, and the effect and purpose of the present invention are indeed achieved.

However, the above are only examples of the present model. When the scope of implementation of the present model cannot be limited by this, all simple equivalent changes and modifications made in accordance with the patent scope of the present model application and the contents of the patent specification still belong to This new patent covers the scope.

1: The receiving computer 2: Transmission terminal computer 3: Review end computer 4: Control computer 41: Detection module 42: Encryption module 5: Database server 6: Editing computer

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, among which: Figure 1 is a schematic diagram of electronic devices mainly included in an embodiment of the new data secure transmission and control system; and Figure 2 illustrates that this embodiment also includes a database server and an editing computer.

1: The receiving computer

2: Transmission terminal computer

3: Review end computer

4: Control computer

41: Detection module

42: Encryption module

Claims (8)

A secure data transmission and control system for transmitting data to a receiving computer, and includes: A transmitting end computer for transmitting a file to be transmitted to the receiving end computer; A review computer; and A control end computer is electrically coupled to the transmitting end computer, the reviewing end computer, and the receiving end computer for communication, and receives the file to be transmitted from the transmitting end computer, and determines that the file to be transmitted contains a When the data needs to be protected, the file to be sent is sent to the reviewer computer; The reviewer computer reviews the file to be sent, and returns the file to be sent that has passed the review to the control computer; The control end computer receives the file to be sent that has passed the audit, encrypts the file to be sent that has passed the audit, and turns it into an encrypted file, and then sends the encrypted file to the receiving end designated by the transmitting end computer Computer; and the control end computer additionally sends a decryption code to the receiving end computer that receives the encrypted file, so that the receiving end computer can decrypt the encrypted file with the decryption code to obtain the file to be transmitted. The data secure transmission and control system described in claim 1, wherein the data to be protected includes personal data. The data secure transmission and control system as described in claim 1, further comprising a database server and an editing terminal computer which are electrically coupled to the review terminal computer for communication, and the editing terminal computer communicates with the database server When requesting to download a data to be edited containing the data to be protected, the database server sends the data to be edited to the reviewer computer, the reviewer computer reviews the data to be edited, and then The data to be edited that has passed the review is sent to the editing side computer, and the editing side computer produces the file to be sent based on the data to be edited that has passed the review. For example, in the data secure transmission and control system described in claim 3, when the editor computer wants to transmit the file to be transmitted to the transmitting computer, when the editor computer determines that the content of the file to be transmitted has been modified, the editor The end computer first sends the file to be sent to the reviewing end computer, and the reviewing end computer confirms that the content of the file to be sent is correct, and then sends the confirmed file to be sent to the sending end computer. For example, in the data secure transmission and control system described in claim 3 or 4, the file to be transmitted is an insurance benefit file, and the data to be protected includes personal data. The data secure transmission and control system according to claim 5, wherein the transmission end computer has a fixed Internet protocol address, is equipped with an independent network segment and a firewall, and prohibits access to external storage devices. For example, the data secure transmission and control system described in claim 1, wherein when the control computer determines that the file to be transmitted does not contain the data to be protected, the control computer transmits the file to be transmitted to The receiving computer designated by the transmitting computer. The data secure transmission and control system according to claim 5, wherein the control end computer also judges that the receiving end computer designated to receive by the transmitting end computer is the sending based on a mailing list containing plural recipients Only when one of the recipients is included in the list, the encrypted file is sent to the receiving computer.

Images