WO2023128340A1

WO2023128340A1 - Method and system for processing homomorphic encrypted data

Info

Publication number: WO2023128340A1
Application number: PCT/KR2022/019463
Authority: WO
Inventors: 안용대; 정승우
Original assignee: 주식회사 디사일로
Priority date: 2021-12-30
Filing date: 2022-12-02
Publication date: 2023-07-06
Also published as: KR102401485B1

Abstract

The present invention is a data processing method using homomorphic encryption, performed by a processor of a data user device. The method comprises the steps of: transmitting, to a data server, a data combination request for data user data; according to the data combination request, receiving a combinable external data list from the data server; determining a combination condition with any one piece of external data from among the external data list; receiving encrypted external data from the data server; homomorphically encrypting the user data; combining the encrypted user data with the encrypted external data by using the combination condition; and decrypting only a combination result corresponding to the combination condition, and transmitting the decrypted combination result to the data server.

Description

Homomorphic encrypted data processing method and system

The present invention relates to a method and system for processing homomorphic encrypted data.

With the development of cloud computing, people can store data in a cloud environment or share data with others as needed instead of renting expensive storage space.

Cloud computing is convenient because users can share and use data anytime, anywhere through a network, but the cloud environment itself has a problem in that it is vulnerable to security.

Accordingly, various security technologies for protecting data stored in a cloud environment have been disclosed. Most of the conventional security technologies are configured in such a way that a cloud server encrypts data that a user wants to store based on the user's personal information and provides a token to access the data to the corresponding user.

However, if the amount of data is large, it takes a lot of time to decrypt the encrypted data, which slows down the data search speed and data sharing speed. In the case of being hacked from the outside, a situation in which a user's personal information may be exposed may occur.

The background description of the invention has been prepared to facilitate understanding of the present invention. It should not be construed as an admission that matters described in the background art of the invention exist as prior art.

Accordingly, a new transaction method capable of exchanging data between a data provider and a data user without storing the original data in a cloud environment is required.

As a result, the inventors of the present invention, when a cloud server receives a data rental request from a data user, transmits data encrypted by the data provider, thereby enabling a data user to obtain only homomorphic encrypted operation results, and a method and method for the same I was trying to develop a system that does it.

The tasks of the present invention are not limited to the tasks mentioned above, and other tasks not mentioned will be clearly understood by those skilled in the art from the following description.

In order to solve the above problems, a data processing method according to an embodiment of the present invention is provided. The method may include sending a data combining request for data user data to a data server, receiving an external data list that can be combined from the data server according to the data combining request, and an external data list of any one of the external data lists. Determining a combination condition with data, receiving encrypted external data from the data server and isomorphically encrypting the user data, combining the encrypted user data and the encrypted external data using the combination condition and decrypting only the combining result corresponding to the combining condition, and transmitting the decoded combining result to the data server.

According to a feature of the present invention, the determining of the combination condition may include determining a combination index using metadata of the user data, and isomorphic encryption of the user data based on the combination index and the metadata. It may further include generating a parameter for converting into a form.

According to another feature of the present invention, the binding index and the parameter are transmitted to a data provider device providing the external data, and the encrypted external data is obtained using the binding index and the parameter by the data provider device. may be encrypted data.

According to another feature of the present invention, the encrypting may further include receiving parameters for a homomorphic encryption operation from the data server.

According to another feature of the present invention, the external data may be data including user's personal information.

In order to solve the above problems, a data processing method according to another embodiment of the present invention is provided. The method includes the steps of receiving a data combining request including combining conditions of a data user from a data server, isomorphically encrypting data corresponding to the data combining request, and transmitting the encrypted data to the data server. configured to include

In order to solve the above problems, a data processing mediation method according to another embodiment of the present invention is provided. The method includes acquiring external data capable of data processing through a data provider device, receiving a data combining request including a combining condition from a data user device, and a list of external data that can be combined according to the combining condition among the external data. determining, transmitting the data combining request to a data provider device providing external data to be combined, receiving homomorphically encrypted external data from the data provider device, and converting the homomorphically encrypted external data to the data user device and receiving a decrypted combining result of data corresponding to the combining condition from the data user device.

Other embodiment specifics are included in the detailed description and drawings.

According to the present invention, users can safely rent data including personal information in a public cloud environment.

In addition, according to the present invention, as data is encrypted and decrypted by a data provider, the data provider can process data even through a public cloud environment without considering security issues. In particular, the data provider can enhance security by encrypting data using a homomorphic encryption technique.

In addition, the present invention can adjust the length of the encryption parameter and the corresponding encryption strength according to the amount and type of data, the service to be used for the data, etc., so that the data provider and the data user can trade data according to their respective requirements. .

Effects according to the present invention are not limited by the contents exemplified above, and more various effects are included in the present invention.

1 is a schematic diagram of a data processing system according to one embodiment of the present invention.

2 is a block diagram showing the configuration of a data provider device according to an embodiment of the present invention.

3 is a flowchart of a data processing method of a data provider device according to an embodiment of the present invention.

4 is a block diagram showing the configuration of a data server mediating data processing according to an embodiment of the present invention.

5 is a flowchart of a data processing mediation method according to an embodiment of the present invention.

6 is a block diagram showing the configuration of a data user device according to an embodiment of the present invention.

7 is a flowchart of a data processing method of a data user device according to an embodiment of the present invention.

8 to 10 are schematic views illustrating data user interface screens capable of processing data according to an embodiment of the present invention.

11 is a schematic flowchart of a data processing method according to an embodiment of the present invention.

Advantages and features of the present invention, and methods of achieving them, will become clear with reference to the detailed description of the following embodiments taken in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below and will be implemented in various forms different from each other, only these embodiments make the disclosure of the present invention complete, and common knowledge in the art to which the present invention pertains. It is provided to completely inform the person who has the scope of the invention, and the present invention is only defined by the scope of the claims. In connection with the description of the drawings, like reference numerals may be used for like elements.

In this document, expressions such as "has," "may have," "includes," or "may include" indicate the existence of a corresponding feature (eg, numerical value, function, operation, or component such as a part). , which does not preclude the existence of additional features.

In this document, expressions such as “A or B,” “at least one of A and/and B,” or “one or more of A or/and B” may include all possible combinations of the items listed together. . For example, “A or B,” “at least one of A and B,” or “at least one of A or B” (1) includes at least one A, (2) includes at least one B, Or (3) may refer to all cases including at least one A and at least one B.

Expressions such as “first,” “second,” “first,” or “second,” used in this document may modify various elements, regardless of order and/or importance, and refer to one element as It is used only to distinguish it from other components and does not limit the corresponding components. For example, a first user device and a second user device may represent different user devices regardless of order or importance. For example, without departing from the scope of rights described in this document, a first element may be named a second element, and similarly, the second element may also be renamed to the first element.

A component (e.g., a first component) is "(operatively or communicatively) coupled with/to" another component (e.g., a second component); When referred to as "connected to", it should be understood that the certain component may be directly connected to the other component or connected through another component (eg, a third component). On the other hand, when an element (eg, a first element) is referred to as being “directly connected” or “directly connected” to another element (eg, a second element), the element and the above It may be understood that other components (eg, third components) do not exist between the other components.

As used in this document, the expression "configured to" means "suitable for," "having the capacity to," depending on the circumstances. ," "designed to," "adapted to," "made to," or "capable of." The term "configured (or set) to" may not necessarily mean only "specifically designed to" hardware. Instead, in some contexts, the phrase "device configured to" may mean that the device is "capable of" in conjunction with other devices or components. For example, the phrase "a processor configured (or configured) to perform A, B, and C" may include a dedicated processor (e.g., embedded processor) to perform those operations, or by executing one or more software programs stored in a memory device. , may mean a general-purpose processor (eg, CPU or application processor) capable of performing corresponding operations.

Terms used in this document are only used to describe a specific embodiment, and may not be intended to limit the scope of other embodiments. Singular expressions may include plural expressions unless the context clearly dictates otherwise. Terms used herein, including technical or scientific terms, may have the same meaning as commonly understood by a person of ordinary skill in the art described in this document. Among the terms used in this document, terms defined in a general dictionary may be interpreted as having the same or similar meaning as the meaning in the context of the related art, and unless explicitly defined in this document, an ideal or excessively formal meaning. not be interpreted as In some cases, even terms defined in this document cannot be interpreted to exclude the embodiments of this document.

Each feature of the various embodiments of the present invention can be partially or entirely combined or combined with each other, and as those skilled in the art can fully understand, various interlocking and driving operations are possible, and each embodiment can be implemented independently of each other. It may be possible to implement together in an association relationship.

For clarity of interpretation of this specification, terms used in this specification will be defined below.

Referring to FIG. 1 , a data processing system 1000 may include a data provider device 100 , a data server 200 , a data user device 300 and a cloud server 400 .

The data processing system 1000 may provide an environment in which users can process encrypted data on a public cloud. Here, processing data may be understood as transferring encrypted data between a device and a server or analyzing data within a device.

Specifically, the data processing system 1000 may transmit homomorphically encrypted data between a data provider and a data user through the data server 200 . In particular, the present invention may encrypt data through a homomorphic encryption technique so that an operation between encrypted data is possible.

The data to be homomorphically encrypted in the present invention may include the user's personal information, for example, the user's name, resident registration number, personal customs clearance number, driver's license number, user's call record, location (latitude, longitude) information, bank transaction information, land, real estate information, etc.

Data exchanged between each component in the data processing system 1000 is not a data source, but homomorphic encrypted data and parameters for homomorphic encryption operations (eg, the degree of a function used for homomorphic encryption operation (polynomial degree), It may be a scale bit or coefficient specified for homomorphic encryption operation, and the original data may be stored in each device.

That is, the data processing system 1000 does not completely provide data to data users, but data so that homomorphically encrypted data can be processed in a designated area (web page or application environment provided by the data server 200). Intermediate between providers and data users.

The data provider device 100 is a user device that possesses data including personal information and provides the right to use the data, and may include an electronic device such as a PC, tablet PC, and smart phone. The data provider device 100 may have an application for data processing installed and executed, or may access a web page provided by the data server 200, and isomorphically encrypt data that can be rented through the application or web page so that the data server 200 ) can be sent.

The data provider device 100 may pre-process data to enable operations between homomorphic encrypted data and encrypt the preprocessed data using a homomorphic encryption technique. In this case, the parameter for the homomorphic encryption operation may be a parameter received from the data server 200 or the data user device 300 .

The data provider device 100 may generate and perform homomorphic encryption by generating a homomorphic encryption key reflecting the received parameters, and the data user device 300 that has performed homomorphic encryption through the same parameters can decrypt the combination result of the homomorphically encrypted data. can

In various embodiments, the data provider device 100 may provide additional information, such as a title of data, a brief description, and descriptions of items constituting a data field, when registering data so that data users can search for homomorphically encrypted data. can provide

In various embodiments, the data provider device 100 isomorphically encrypted data and transmits it to the data server 200 at the request of the data user, or isomorphically encrypted data that can be rented without a data user's request and sends it to the data server 200. can be sent Homomorphically encrypted data transmitted to the data server 200 may be included in a list of data available for rental of a web page or application.

The data server 200 is a server capable of mediating data rental or data combination between the data provider device 100 and the data user device 300, and may be implemented as a general-purpose computer, laptop, or cloud server.

The data server 200 may provide a web page or application for data rental, combination, and analysis to the data provider device 100 and the data user device 300 .

In various embodiments, data server 200 may provide data provider device 100 and data user device 300 with the same parameters for homomorphic encryption operations. That is, the data server 200 may provide parameters in the mediation process so that calculation (combination) and decryption between homomorphically encrypted data are possible.

In various embodiments, the data server 200 may register homomorphically encrypted data with the cloud server 400 . Here, the cloud server 400 is a server operated in a public cloud environment, and only homomorphically encrypted data may be registered in the cloud server 400 .

The data user device 300 is a user device that wants to use data including personal information, and may include an electronic device such as a PC, tablet PC, and smart phone. The data user device 300 may have an application for data processing installed and executed, may access a web page provided by the data server 200, and may process homomorphically encrypted data through the application or web page. Here, processing the homomorphically encrypted data means obtaining a result of filtering, grouping, or sorting the data for data analysis, combining with data stored in the data user device 300, and combining the data. It can be understood as converting the result according to conditions specified by the data user.

When requesting data rental, the data user device 300 may determine a data analysis process (work flow) in advance. Specifically, the analysis process may include registering meta data, determining a binding index using the meta index, and generating parameters for homomorphic encryption operation. Here, the parameter for the homomorphic encryption operation is a parameter used for operation with another homomorphic encrypted data, for example, the polynomial degree of a function used for the homomorphic encryption operation, for the homomorphic encryption operation Some data included in meta data, such as designated scale bits and coefficients, may be parameters for homomorphic encryption operation.

The data user device 300 may generate parameters for converting user data into a form capable of performing homomorphic encryption based on the binding index and meta data.

This analysis process may later be transferred to the data provider device 100, and the data provider device 100 may lend data only to the data user device 300 for which the data utilization method is specified.

The data user device 300 may pre-process the user data and encrypt the pre-processed data through a homomorphic encryption technique so that an operation between encrypted data is possible. In this case, the parameters for homomorphic encryption may be parameters generated by the data user device 300 according to the data combination index or parameters received from the data server 200 .

The data user device 300 may generate and perform homomorphic encryption of a data user's encryption key in which parameters are reflected, and may receive homomorphically encrypted data from the data server 200 using the same parameters. The data user device 300 may combine this with its own homomorphically encrypted data and decrypt the combined result.

The cloud server 400 is a public cloud-based server capable of storing data in a sharable form. The cloud server 400 includes homomorphically encrypted data provided by the data server 200 and results calculated in a homomorphically encrypted state. can be stored

In various embodiments, the cloud server 400 may provide homomorphically encrypted data stored in the cloud database to the data server 200 .

So far, the data processing system 1000 according to an embodiment of the present invention has been described. In the data processing system 1000, a data provider and a data user are divided, but a data provider can become a data user, and a data user can also become a data provider, lending and analyzing data between them.

Hereinafter, the data provider device 100 that selectively provides data according to a data rental request will be described.

Referring to FIG. 2 , the data provider device 100 may include a memory interface 110 , one or more processors 120 and a peripheral interface 130 . The various components within data provider device 100 may be connected by one or more communication buses or signal lines.

The memory interface 110 may be connected to the memory 150 and transfer various data to the processor 120 . Here, the memory 150 is a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (eg SD or XD memory, etc.), RAM, SRAM, ROM, EEPROM, PROM, network storage storage, cloud , It may include at least one type of storage medium among blockchain databases.

In various embodiments, memory 150 includes operating system 151 , communication module 152 , graphical user interface module (GUI) 153 , sensor processing module 154 , telephony module 155 , and application module 156 . ) At least one or more of them may be stored. Specifically, the operating system 151 may include instructions for processing basic system services and instructions for performing hardware tasks. The communication module 152 may communicate with at least one of one or more other devices, computers, and servers. A graphical user interface module (GUI) 153 may process a graphical user interface. Sensor processing module 154 may process sensor-related functions (eg, process voice input received through one or more microphones 192 ). The phone module 155 may process phone-related functions. The application module 156 may perform various functions of a user application, such as electronic messaging, web browsing, media processing, navigation, imaging, and other processing functions. In addition, the data provider device 100 may store one or more software applications 156 - 1 and 156 - 2 (eg, a data rental application) associated with a certain type of service in the memory 150 .

In various embodiments, the memory 150 may store a digital assistant client module 157 (hereinafter referred to as a DA client module), thereby storing instructions and various user data 158 for performing client-side functions of the digital assistant. (eg user-customized vocabulary data, preference data, other data such as the user's electronic address book, etc.).

Meanwhile, the DA client module 157 receives a user's voice input, text input, touch input, and/or gesture input through various user interfaces (eg, the I/O subsystem 140) provided in the data provider device 100. can be obtained.

In addition, the DA client module 157 may output audio-visual and tactile data. For example, the DA client module 157 may output data consisting of a combination of at least two of voice, sound, notification, text message, menu, graphic, video, animation, and vibration. In addition, the DA client module 157 may communicate with a digital assistant server (not shown) using the communication subsystem 180 .

In various embodiments, DA client module 157 may collect additional information about the surrounding environment of data provider device 100 from various sensors, subsystems, and peripheral devices to construct a context associated with user input. there is. For example, the DA client module 157 may infer the user's intention by providing context information together with the user's input to the digital assistant server. Here, the situational information that may accompany the user input may include sensor information, eg, lighting, ambient noise, ambient temperature, image of the surrounding environment, video, and the like. For another example, the contextual information may include the physical state of the data provider device 100 (eg, device orientation, device location, device temperature, power level, speed, acceleration, motion patterns, cellular signal strength, etc.). For another example, the contextual information is information related to the software state of the data provider device 100 (eg, processes running on the data provider device 100, installed programs, past and present network activity, background services, error logs, resource usage, etc.).

In various embodiments, the memory 150 may include added or deleted commands, and furthermore, the data provider device 100 may include additional components other than those shown in FIG. 2 or may exclude some components.

The processor 120 may control overall operations of the data provider device 100 and may execute various commands for implementing an interface for schedule management by driving an application or program stored in the memory 150 .

The processor 120 may correspond to an arithmetic device such as a central processing unit (CPU) or an application processor (AP). In addition, the processor 120 may be implemented in the form of an integrated chip (IC) such as a System on Chip (SoC) in which various computing devices such as a Neural Processing Unit (NPU) are integrated.

In various embodiments, the processor 120 may lend data to data users, that is, data analysts who need the data, which will be described below with reference to FIG. 3 .

Referring to FIG. 3 , the processor 120 may receive a data combining request including combining conditions of a data user from the data server 200 providing a data processing environment through the communication subsystem 180 (S110). . Here, providing a data processing environment may be understood as distributing an application capable of processing data in the data server 200 or providing a web page capable of processing data.

In various embodiments, the data combination request may be a request generated by the data user device 300, and may include metadata registered through the data user device 300, a combination index, and parameters for a homomorphic encryption operation. there is.

That is, the processor 120 of the data provider device 100 can check what kind of processing (analysis) the data user will perform by renting his/her own data, and can pre-process the data in a form suitable for the data user.

After step S110, the processor 120 may homomorphically encrypt data corresponding to the data combination request (S120). The processor 120 may homomorphically encrypt only data corresponding to a data combination request among data stored in the memory 150 or a database connected to the data provider device 100 .

In various embodiments, the processor 120 may receive parameters for a homomorphic encryption operation from the data server 200 . Accordingly, the processor 120 generates a homomorphic encryption key by using the parameters for the homomorphic encryption operation received from the data user device 300 and the parameters for the homomorphic encryption operation received from the data server 200 in step S110. , the preprocessed data can be encrypted.

In addition, the parameter received from the data server 200 may be the same as the parameter provided to the data user device 300, and accordingly, the encrypted result calculated through the homomorphic encrypted data is decrypted by the data user device 300 later. can do.

After step S120 , the processor 120 may transmit the homomorphically encrypted data to the data server 200 through the communication subsystem 180 . For example, the processor 120 may register homomorphically encrypted data in a web page or application capable of processing data.

On the other hand, the data transmitted to the data server 200 may be data including the user's personal information, and the data server 200 in the present invention transfers the homomorphically encrypted data including the user's personal information to the cloud server ( 400) can be stored.

Referring back to FIG. 2 , the peripheral interface 130 is connected to various sensors, subsystems, and peripheral devices to provide data so that the data provider device 100 can perform various functions. Here, that the data provider device 100 performs a certain function may be understood as being performed by the processor 120 .

Peripheral interface 130 may receive data from motion sensor 160, light sensor (light sensor) 161, and proximity sensor 162, through which data provider device 100 may receive orientation, light, and Proximity detection function, etc. can be performed. As another example, peripheral interface 130 may receive data from other sensors 163 (positioning system-GPS receiver, temperature sensor, biometric sensor) through which data provider device 100 may receive other sensors. functions related to 163 can be performed.

In various embodiments, the data provider device 100 may include a camera subsystem 170 coupled to the peripheral interface 130 and an optical sensor 171 coupled thereto, through which the data provider device 100 may take a picture. and various shooting functions such as video clip recording.

In various embodiments, data provider device 100 may include communication subsystem 180 coupled with peripheral interface 130 . The communication subsystem 180 is composed of one or more wired/wireless networks, and may include various communication ports, radio frequency transceivers, and optical transceivers.

In various embodiments, data provider device 100 includes an audio subsystem 190 coupled to peripheral interface 130, which audio subsystem 190 includes one or more speakers 191 and one or more microphones 192. By including, the data provider device 100 can perform voice-activated functions, such as voice recognition, voice replication, digital recording, and telephony functions.

In various embodiments, data provider device 100 may include I/O subsystem 140 coupled with peripheral interface 130 . For example, the I/O subsystem 140 may control the touch screen 143 included in the data provider device 100 through the touch screen controller 141 .

For example, the touch screen controller 141 uses any one of a plurality of touch sensing technologies such as capacitive, resistive, infrared, surface acoustic wave technology, proximity sensor array, and the like to provide a user's touch and motion or touch. and cessation of movement. For another example, I/O subsystem 140 may control other input/control devices 144 included in data provider device 100 via other input controller(s) 142 . As an example, other input controller(s) 142 may control one or more buttons, rocker switches, thumb-wheels, infrared ports, USB ports, and pointer devices such as styluses and the like.

So far, the data provider device 100 according to an embodiment of the present invention has been described. According to the present invention, the data provider device 100 does not register the data source itself with the data server 200 or the cloud server 400 so that other users can use the data it has, but upon request for data use. , can provide only some of the data directly homomorphically encrypted on its own device.

Hereinafter, a data server 200 capable of mediating between a data provider and a data user and providing a data processing space will be described.

Referring to FIG. 4 , the data server 200 may include a communication interface 210, a memory 220, an I/O interface 230, and a processor 240, each of which includes one or more communication buses or signals. They can communicate with each other through lines.

The communication interface 210 may be connected to a plurality of data provider devices 100 through a wired/wireless communication network to exchange data. For example, the communication interface 210 may transmit a data combining request, a parameter for homomorphic encryption, a decrypted combining result, etc. to the data provider device 100, and homomorphically encrypted external data from the data provider device 100. can receive Here, the external data may mean data stored in the data provider device 100 .

For another example, the communication interface 210 may receive a data combination request, homomorphically encrypted user data, and a decrypted combination result from the data user device 300, and external data that can be rented to the data user device 300. Lists, parameters for homomorphic encryption operations, and homomorphically encrypted external data can be transmitted.

On the other hand, the communication interface 210 enabling the transmission and reception of such data includes a communication pod 211 and a wireless circuit 212, where the wired communication port 211 is one or more wired interfaces, for example, Ethernet, This may include Universal Serial Bus (USB), FireWire, and the like. Also, the wireless circuit 212 may transmit/receive data with an external device through an RF signal or an optical signal. In addition, wireless communication may use at least one of a plurality of communication standards, protocols and technologies, such as GSM, EDGE, CDMA, TDMA, Bluetooth, Wi-Fi, VoIP, Wi-MAX, or any other suitable communication protocol.

The memory 220 may store various data used in the data server 200 . For example, the memory 220 may store identification information of the data provider device 100 and the data user device 300 and may store parameters for homomorphic encryption of data.

In various embodiments, the memory 220 may include volatile or non-volatile recording media capable of storing various data, commands, and information. For example, the memory 220 may be a flash memory type, a hard disk type, a multimedia card micro type, a card type memory (eg SD or XD memory, etc.), RAM, SRAM, ROM, EEPROM, PROM, network storage storage , Cloud, and a blockchain database may include at least one type of storage medium.

In various embodiments, the memory 220 may store configurations of at least one of the operating system 221 , the communication module 222 , the user interface module 223 , and one or more applications 224 .

Operating system 221 (e.g. embedded operating systems such as LINUX, UNIX, MAC OS, WINDOWS, VxWorks, etc.) is a variety of software for controlling and managing general system tasks (e.g. memory management, storage device control, power management, etc.) components and drivers, and may support communication between various hardware, firmware, and software components.

The communication module 223 may support communication with other devices through the communication interface 210 . The communication module 220 may include various software components for processing data received by the wired communication port 211 or the wireless circuit 212 of the communication interface 210 .

The user interface module 223 may receive a user's request or input from a keyboard, touch screen, microphone, etc. through the I/O interface 230 and provide a user interface on a display.

Applications 224 may include programs or modules configured to be executed by one or more processors 230 . Here, an application for mediating data processing may be implemented on a server farm.

The I/O interface 230 may connect at least one of an input/output device (not shown) of the data server 200, for example, a display, a keyboard, a touch screen, and a microphone, to the user interface module 223. The I/O interface 230 may receive user input (eg, voice input, keyboard input, touch input, etc.) together with the user interface module 223 and process a command according to the received input.

The processor 240 is connected to the communication interface 210, the memory 220, and the I/O interface 230 to control the overall operation of the data server 200, and to run applications or programs stored in the memory 220. Through this, various commands for processing homomorphic encrypted data can be performed.

The processor 240 may correspond to an arithmetic device such as a central processing unit (CPU) or an application processor (AP). In addition, the processor 240 may be implemented in the form of an integrated chip (IC) such as a System on Chip (SoC) in which various computing devices are integrated. Alternatively, the processor 240 may include a module for calculating an artificial neural network model, such as a Neural Processing Unit (NPU).

In various embodiments, the processor 240 may mediate data including sensitive information between a data user and a data provider, which will be described below with reference to FIG. 5 .

Referring to FIG. 5 , the processor 240 may acquire external data capable of data processing through the data provider device 100 (S210). Specifically, the processor 240 may obtain information on data capable of data processing (eg, analysis through rental) from the plurality of data provider devices 100 . For example, the processor 240 may obtain additional descriptions such as meta data of the external data, a title of the external data, a brief description, and a description of items constituting the data field.

After step S210, the processor 240 may receive a data combining request including combining conditions from the data user device 300 through the communication interface 210 (S220). Here, the data combination request may include an analysis process (workflow) designed by the data user. Specifically, the analysis process may include a description of how to combine the two data and what kind of data processing (eg, filtering, grouping) is to be performed using the combined result. For example, the data combination request may include metadata of a data user, a combination index, and parameters for homomorphic encryption operation.

In various embodiments, the processor 240 determines the validity of the analysis process included in the data combination request, and only when the analysis process is valid, the third party data including the user's personal information is transferred to the data user device 300. can be rented. If the analysis process is not valid, the processor 240 may transmit an analysis process (workflow) redesign notification to the data user device 300 through the communication interface 210 .

After step S220, the processor 240 may determine a list of external data that can be combined according to a combination condition among external data (S230). For example, the processor 240 may determine external data that can be combined based on the data user's metadata or binding index, and the external data list including the name of the external data provider, the title of the external data, and a brief description of the external data. can create

In addition, the processor 240 may transmit the determined external data list to the data user device 300 through the communication interface 210 .

After step S230, the processor 240 may transmit a data combination request to the data provider device 100 that is selected through the data user device 300 and provides external data to be combined (S240). Specifically, the processor 240 may transmit metadata of a data user, a binding index, and parameters for homomorphic encryption operation together with combining conditions. Here, the parameter for the homomorphic encryption operation may be a parameter extracted from the data user device 300 based on a binding index in the data user device 300 .

In various embodiments, processor 240 may transmit parameters for the same homomorphic encryption operation to data user device 300 and data provider device 100 via communication interface 210 . That is, the processor 240 may transmit the same encryption parameter so that the homomorphically encrypted external data and the homomorphically encrypted user data are operated in an encrypted state and then decrypted by the data user device 300 .

After step S240, the processor 240 may receive homomorphically encrypted external data from the data provider device 100 through the communication interface 210 and transmit the homomorphically encrypted external data to the data user device 300 ( S250). Here, each of the homomorphically encrypted data may be data including personal information of the user, and each data is homomorphic using a homomorphic encryption key in which parameters generated by the data server 200 and the data user device 300 are reflected. Since it is encrypted, calculation and decryption may be possible.

After step S250, the processor 240 may receive a decrypted combination result of data corresponding to the combination condition from the data user device 300 through the communication interface 210 (S260). The processor 240 may obtain a decryption result of data processed according to a combination condition, rather than a decryption result of homomorphically encrypted external data or user data, and may transmit it to the data provider device 100 .

So far, the data server 200 according to an embodiment of the present invention has been described. According to the present invention, data including users' personal information is homomorphically encrypted, combined, and decrypted in a state stored in each safe device, and the data server 200 can deliver only these results, and thus sensitive information mediation. risks can be minimized.

Hereinafter, a data user device 300 that requires user data including personal information for data analysis will be described.

Referring to FIG. 6 , a data user device 300 may include a memory interface 310 , one or more processors 320 and a peripheral interface 330 .

As described above, if data including user personal information can be provided, a data user can become a data provider, and accordingly, the data user device 300 can have the same configuration as the data provider device 100. there is.

In FIG. 6, a description of a configuration overlapping with that of FIG. 2 will be omitted, and a data processing method using homomorphic encryption performed by the processor 320 will be described with reference to FIG. 7.

7 is a flowchart of a data processing method of a data user device according to an embodiment of the present invention, and FIGS. 8 to 10 illustrate data user interface screens capable of processing data according to an embodiment of the present invention. It is a schematic diagram for

Referring to FIG. 7 , the processor 320 may transmit a data combining request for user data to the data server 200 through the communication subsystem 380 (S310). Specifically, the processor 320 may obtain an analysis process (workflow) created (designed) by a data user through a touch screen 341 or other input/control device 344, and meta data of user data can register. Here, the processor 240 may register meta data by uploading meta data to a web page or application capable of data processing (rental, combination, and analysis).

If the analysis process is valid and the meta data is registered, the processor 320 may receive a list of external data that can be combined according to a data combination request from the data server 200 through the communication subsystem 380 (S320). ). Here, the external data may include the user's personal information, for example, the user's name, resident registration number, personal customs clearance number, driver's license number, user's call record, location (latitude, longitude) information, bank It may include transaction information, land, real estate information, and the like.

In this regard, referring to FIG. 8, the data user device 300 includes an item 11 for selecting external data ( ^3rd party data) and user data (local data) of the data provider according to the analysis process (workflow) this can be provided. In addition, the data user device 300 may be provided with a data processing list 12 usable by the data user using external data and user data, and according to the previous data combination request, a list of external data 13 that can be combined can be listed. For example, the external data list may include the name of the external data provider, the title of the external data, and a brief description of the external data.

After step S320, the processor 320 may determine a combination condition with any one external data from the list of external data (S330). Specifically, the processor 320 may determine a binding index using meta data of user data, and may generate a parameter for converting user data into a form capable of performing encryption on the basis of the binding index and meta data. For example, the processor 320 converts a polynomial degree of a function required for a homomorphic encryption operation in metadata, a scale bit designated for the homomorphic encryption operation, and a coefficient for the homomorphic encryption operation. It can be extracted as a parameter.

In addition, the combining condition may include data field selection information selected by the data user, and the processor 320 may pre-process the data in accordance with the combining condition.

The processor 320 may transmit the combination condition to the data server 200 through the communication subsystem 380, and the combination condition including the combination index and parameters is data providing external data through the data server 200. It may be delivered to the provider device 100 .

After step S330, the processor 320 may receive homomorphically encrypted external data from the data server 200 and homomorphically encrypt user data (S340). At this time, the processor 320 may additionally receive parameters for the homomorphic encryption operation from the data server 200 in addition to the homomorphic encryption parameters generated by the processor 320, and accordingly, generate an encryption key reflecting the two parameters, The preprocessed user data can be homomorphically encrypted.

Homomorphically encrypted external data received from the data server 200 is data homomorphically encrypted by the data provider device 100, and the homomorphic encryption key generated by the processor 320 is used by the data server 200 and the data user device 300. ) may be reflected.

After step S340, the processor 320 may combine the homomorphically encrypted user data and the homomorphically encrypted external data using a combination condition (S350).

In this regard, referring to FIGS. 9 and 10 , the data user device 300 may be provided with an icon 14 for registering homomorphically encrypted user data, and homomorphically encrypted user data and homomorphically encrypted external data. In the combined state, the analysis items 15 available to the data user may be listed. When the data user selects “filter” in the corresponding analysis item 15, two homomorphically encrypted data are combined in the data user device 300, and a sequence to be filtered may be displayed in the form of a visual icon 16. .

After step S350, the processor 320 may decode only the combining result corresponding to the combining condition and transmit the decoded combining result to the data server 200 (S360). Since external data and user data are encrypted using an encryption key reflecting the same parameters, the data user device 300 can decrypt the combined result using its own key.

That is, since the data user device 300 only checks the combined result, rather than outputting the external data and the original user data and the resulting combined result, all of the user's personal information may not be exposed.

In various embodiments, the data user device 300 may process/analyze only external data without user data, and in this case, external data previously homomorphically encrypted in the data provider device 100 may be utilized.

So far, the data user device 300 according to an embodiment of the present invention has been described. According to the present invention, the data user device 300 can be selectively used according to a desired analysis process without purchasing external data including user personal information.

Hereinafter, a method for processing homomorphic encrypted data between three parties including the data provider device 100, the data server 200, and the data user device 300 will be schematically described.

Referring to FIG. 11 , in a state in which external data information that can be processed by the data provider device 100 is registered, a data rental request may be made through the data user device 300 .

The data user device 300 may transmit a data rental request for data processing (analysis) to the data server 200 (S1), and receive a list of external data capable of data processing (analysis/combination) as a response thereto (S1). It can (S2).

The data user device 300 may generate a binding index and parameters for homomorphic encryption (S3), and transmit a combining condition including them to the data server 200. The data server 200 may transmit a data combining request by transferring all information received from the data user device 300 to the data provider device 100 (S5).

In addition, the data server 200 may provide the same parameters for the homomorphic encryption operation to the data provider device 100 and the data user device 300 (S6), and the external data and user data preprocessed in each device are , can be transmitted to the data server 200 in a homomorphic encrypted state (S7) (S8). However, here, the data user device 300 requesting data rental may not transmit the homomorphically encrypted user data to the data server 200 .

The data user device 300 may receive homomorphically encrypted external data from the data server 200 (S9), combine the homomorphically encrypted data according to the combining condition (S10), and then decrypt it (S11). According to an embodiment, the data user device 300 may transmit the decrypted combination result to the data server 200 (S12), and the data server 200 may register it with the cloud server 400 (S13). .

Although one embodiment of the present invention has been described in more detail with reference to the accompanying drawings, the present invention is not necessarily limited to these embodiments, and may be variously modified and implemented without departing from the technical spirit of the present invention. there is. Therefore, the embodiments disclosed in the present invention are not intended to limit the technical idea of the present invention, but to explain, and the scope of the technical idea of the present invention is not limited by these embodiments. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. The protection scope of the present invention should be construed according to the claims below, and all technical ideas within the equivalent range should be construed as being included in the scope of the present invention.

Claims

A data processing method using homomorphic encryption performed by a processor of a data user device,

sending a data combining request for data user data to a data server;

receiving a list of external data that can be combined from the data server according to the data combining request;

determining a combination condition with any one external data from the external data list;

receiving encrypted external data from the data server and homomorphically encrypting the user data;

combining the encrypted user data and the encrypted external data using the combining condition; and

decoding only the combining result corresponding to the combining condition and transmitting the decoded combining result to the data server; Including, data processing method.
According to claim 1,

The step of determining the bonding conditions,

Determining a binding index using metadata of the user data; and

Generating a parameter for converting the user data into a form capable of performing homomorphic encryption based on the combined index and the meta data;
According to claim 2,

The binding index and the parameter,

It is transmitted to a data provider device providing the external data,

The encrypted external data,

and data encrypted using the binding index and the parameter by the data provider device.
According to claim 1,

The encryption step is

The data processing method further comprising receiving parameters for homomorphic encryption operation from the data server.
According to claim 1,

The external data is

Data that contains your personal information, how the data are processed.
A data processing method using homomorphic encryption performed by a processor of a data provider device, comprising:

Receiving a data combining request including combining conditions of data users from a data server;

Homomorphically encrypting data corresponding to the data combining request; and

transmitting the encrypted data to the data server; Data processing method comprising a.
According to claim 6,

The data combination request,

A data processing method further comprising meta data registered through a data user device, a binding index, and an encryption parameter.
According to claim 6,

The encryption step is

The data processing method further comprising receiving parameters for homomorphic encryption operation from the data server.
According to claim 8,

The parameter is

The data processing method, which is the same parameter as the parameter provided to the data user device corresponding to the data combination request.
According to claim 6,

The encrypted data is

Data that contains your personal information, how the data are processed.
As a data processing mediation method using homomorphic encryption performed by a processor of a data server,

acquiring external data capable of data processing through a data provider device;

Receiving a data combination request including a combination condition from a data user device;

determining a list of external data that can be combined according to the combining condition among the external data;

forwarding the data combining request to a data provider device providing external data to be combined;

receiving homomorphically encrypted external data from the data provider device and transmitting the homomorphically encrypted external data to the data user device; and

receiving a decrypted combining result of data corresponding to the combining condition from the data user device; A data processing mediation method comprising a.
According to claim 11,

After sending the data combination request,

Transmitting the same parameter for a homomorphic encryption operation to the data user device and the data provider device.
According to claim 12,

The step of transmitting the data combination request,

A step of transmitting metadata, a binding index, and parameters of a data user together with the binding condition, a data processing mediation method.
According to claim 11,

Receiving the decrypted combination result,

Transmitting the decrypted combination result to the data provider device, Data processing mediation method further comprising.
According to claim 11,

Each of the homomorphically encrypted data,

A method of intermediary data binding, which is data containing the user's personal information.