KR101636709B1 - System for providing connection information using identifier generation based on personal information, method of providing connection information, and apparatus for the same - Google Patents

Abstract

A linkage information providing system, a linkage information providing method and an apparatus therefor for generating a personal information based identifier are disclosed. A linkage information providing system using personal information based identifier generation according to the present invention is a linkage information providing system that determines whether service information received from a linkage information providing apparatus and a use apparatus is valid and transmits the link information to a linkage information providing apparatus and a use apparatus A service providing device; Receiving personal information and linkage information from a personal information processing apparatus of a linkage information providing organization, generating a linkage identifier using the shared key and the personal information, generating a linkage dictionary including the linkage identifier and linkage information, A linkage information providing device for transmitting linkage information to a linkage information utilizing device; And extracting the linkage information and the linkage identifier by decrypting the linkage dictionary, and transmitting the linkage information and the linkage identifier to the personal information processor of the linkage information using agency to map the linkage information, the linkage identifier, and the personal information And a link information utilizing device.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for providing linkage information using personal information based identifier generation,

The present invention relates to a linkage information providing technology using personal information based identifier generation, which generates an identifier for identifying a user based on personal information, and generates a personal information based identifier linking personal information between institutions using the identifier A method for providing linkage information, and an apparatus therefor.

In order to provide services to users in the online or off-line, such as government, corporations, etc., a value that can uniquely identify a user is required.

In general, a resident registration number is used as a value that can uniquely identify a user. However, when personal information possessed by service organizations is leaked, a resident registration number that can have only one per user is also leaked.

In addition, when personal information such as date of birth, sex, name, address, and postal code is used instead of the resident registration number to identify the user, there is a risk that the personal information is directly exposed when various institutions provide the link service .

Korean Patent Laid-Open Publication No. 2013-0142875 discloses a personal identification management system for non-face-to-face services, and provides a technique for comparing the date of birth, sex, name, address, and postal code in place of the resident registration number for user identification. In order to provide this linkage service, the problem that personal information is exposed directly is not solved.

Therefore, there is a need for a linkage information providing technique using a new personal information based identifier generation that minimizes the damage of leakage of personal information by sharing an identifier created through personal information instead of the user's resident registration number It is urgent.

An object of the present invention is to use a separate identifier generated by a field combination of personal information instead of a user's resident registration number as a value for identifying a user, thereby preventing leakage of a resident registration number when a personal information leakage problem occurs, Thereby preventing the reuse of the outflowed identifier, thereby minimizing the damage caused by leakage of personal information.

It is another object of the present invention to provide a method and a system for generating a user identifier by using a shared key common only to a linkage group to which personal information is to be linked and to redirect a shared key to a linkage group It is possible to replace the identifier, reuse the leaked identifier to attempt association, or reuse the leaked identifier to more quickly solve the problem used to identify the user.

According to another aspect of the present invention, there is provided an apparatus for providing linkage information using personal information based identifier generation, the apparatus comprising: a transmission unit configured to transmit institution information and service information to a link service providing apparatus, A service setting unit for receiving a generated module license and a shared key from the linked service providing apparatus and verifying the generation module license; A linkage identifier generation unit for receiving the personal information from the personal information processing apparatus and generating a linkage identifier using the shared key and the personal information; And a specialized transfer unit for generating a linkage dictionary including the linkage identifier and linkage information received from the personal information processing apparatus, and transmitting the linkage dictionary to the linkage information using apparatus.

At this time, the linkage identifier generation unit may perform a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information, a second conversion using the shared key, A linkage identifier can be generated.

At this time, the service setting unit generates combination information of the personal information field for the institution information, and the linkage identifier generation unit may combine the personal information fields according to the combination information.

At this time, if there is a linkage identifier replacement decision from the linkage service providing apparatus, the service setting unit receives the reissued shared key from the linkage service providing apparatus, and the linkage identifier generating unit generates the linkage identifier using the re- Can be regenerated.

At this time, the linkage identifier generation unit may combine the personal information fields including the predetermined fixed field and the at least one selection field.

At this time, the linkage identifier generation unit may transmit the linkage identifier to the personal information processing apparatus so that the personal information and the linkage identifier are mapped.

Also, the apparatus for using association information using the personal information based identifier generation according to the present invention transmits institution information and service information to the linked service providing apparatus, and when the service information corresponding to the institution information is valid, A service setting unit for receiving a generated module license and a shared key from the generated module and verifying the generated module license; A personal information management method comprising: receiving personal information from a personal information processing apparatus; generating a linkage identifier using the shared key and the personal information; transmitting the linkage identifier to the personal information processing apparatus to map the personal information and the linkage identifier; An identifier generation unit; A linkage identifier extracting unit for extracting the linkage information and the linkage identifier from the linkage received from the linkage information providing apparatus; And a linkage information mapping unit for linking the linkage information and the linkage identifier to the personal information processing apparatus to map the linkage information, linkage identifier, and personal information.

At this time, the linkage identifier generation unit may perform a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information, a second conversion using the shared key, A linkage identifier can be generated.

At this time, the service setting unit generates combination information of the personal information field for the institution information, and the linkage identifier generation unit may combine the personal information fields according to the combination information.

At this time, if there is a linkage identifier replacement decision from the linkage service providing apparatus, the service setting unit receives the reissued shared key from the linkage service providing apparatus, and the linkage identifier generating unit generates the linkage identifier using the re- Can be regenerated.

According to another aspect of the present invention, there is provided a method for providing linkage information using a personal information based identifier, comprising the steps of: transmitting institution information and service information to a linkage service providing apparatus, and when the service information corresponding to the institution information is valid, Receiving a generated module license and a shared key from the generated module and verifying the generated module license; Receiving personal information from the personal information processing apparatus, and generating a linkage identifier using the shared key and the personal information; And generating a linkage dictionary including the linkage identifier and the linkage information received from the personal information processing apparatus, and transmitting the linkage dictionary to the linkage information using apparatus.

The generating of the linkage identifier may include combining at least two personal information fields among a plurality of personal information fields included in the personal information to perform a first conversion and using the shared key to convert the first conversion result into a second And generate the linkage identifier.

In this case, the linkage information providing method using the personal information based identifier generation may further include generating combination information of the personal information field with respect to the institution information, wherein the step of generating the linkage identifier comprises: Personal information fields can be combined.

The method may further include receiving a re-issued shared key from the cooperative service providing apparatus when the cooperative identifier is determined to be changed from the cooperative service providing apparatus, The step of generating an identifier may regenerate the linkage identifier using the re-issued shared key.

At this time, the step of generating the linkage identifier may combine the personal information field including the predetermined fixed field and the at least one selection field.

At this time, in the step of generating the linkage identifier, the linkage identifier may be transmitted to the personal information processing apparatus so that the personal information and the linkage identifier are mapped.

In addition, the method of using linkage information using personal information based identifier generation according to the present invention is a method of transmitting institution information and service information to a linkage service providing apparatus, and when the service information corresponding to the institution information is valid, Receiving a generated module license and a shared key from the generated module and verifying the generated module license; Receiving personal information from the personal information processing apparatus, and generating a linkage identifier using the shared key and the personal information; Transmitting the linkage identifier to the personal information processing apparatus so that the personal information and the linkage identifier are mapped; Extracting linkage information and a linkage identifier from a linkage received from the linkage information providing apparatus; And transmitting the linkage information and the linkage identifier to the personal information processing apparatus so that the linkage information, the linkage identifier, and the personal information are mapped.

The generating of the linkage identifier may include combining at least two personal information fields among a plurality of personal information fields included in the personal information to perform a first conversion and using the shared key to convert the first conversion result into a second And generate the linkage identifier.

In this case, the method of using linkage information using personal information based identifier generation may further include generating combination information of the personal information field for the institution information, and the step of generating the linkage identifier may include: Personal information fields can be combined.

In this case, the method of using linkage information using personal information based identifier generation further includes receiving a reissued shared key from the linked service providing apparatus when there is a linkage identifier replacement decision from the linked service providing apparatus, The step of generating an identifier may regenerate the linkage identifier using the re-issued shared key.

The linkage information providing system using the personal information based identifier generation according to the present invention determines whether the service information received from the linkage information providing apparatus and the use apparatus is valid and transmits the shared key to the linkage information providing apparatus and the use apparatus A connection service providing device for connecting the service providing device; Receiving personal information and linkage information from a personal information processing apparatus of a linkage information providing organization, generating a linkage identifier using the shared key and the personal information, generating a linkage dictionary including the linkage identifier and linkage information, A linkage information providing device for transmitting linkage information to a linkage information utilizing device; And extracting the linkage information and the linkage identifier by decrypting the linkage dictionary, and transmitting the linkage information and the linkage identifier to the personal information processor of the linkage information using agency to map the linkage information, the linkage identifier, and the personal information And a link information utilizing device.

According to the present invention, as a value for identifying a user, a separate identifier generated through field combination of personal information is used instead of the resident registration number of the user, thereby preventing leakage of a resident registration number when a personal information leakage problem occurs, It is possible to prevent the leaked identifier from being reused, thereby minimizing the damage caused by leakage of personal information.

Also, according to the present invention, a user identifier is generated using a shared key common only to a linkage group to which personal information is to be linked, so that, when a personal information leakage problem occurs, only by redistributing a shared key to the linkage group, It is possible to reuse the leaked identifier by reusing the leaked identifier or reuse the leaked identifier to solve the problem used to identify the user more quickly.

1 is a diagram illustrating a system for providing linked information using personal information based identifier generation according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an example of a linkage information providing organization shown in FIG. 1. Referring to FIG.
FIG. 3 is a diagram showing an example of a personal information linkage identifier processing apparatus of the linkage information providing organization shown in FIG. 1. FIG.
4 is a diagram showing an example of a personal information linkage identifier processing apparatus of the linked information using agency shown in FIG.
5 is a flowchart illustrating a method of providing linkage information using a personal information based identifier generation according to an embodiment of the present invention.
6 is a flowchart illustrating a method of using linkage information using personal information based identifier generation according to an exemplary embodiment of the present invention.
FIG. 7 is a flowchart illustrating an overall process of generating a linkage identifier according to the present invention.
FIG. 8 is a flowchart illustrating an overall process of the linkage information processing according to the present invention.

The present invention will now be described in detail with reference to the accompanying drawings. Hereinafter, a repeated description, a known function that may obscure the gist of the present invention, and a detailed description of the configuration will be omitted. Embodiments of the present invention are provided to more fully describe the present invention to those skilled in the art. Accordingly, the shapes and sizes of the elements in the drawings and the like can be exaggerated for clarity.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating a system for providing linked information using personal information based identifier generation according to an embodiment of the present invention.

Referring to FIG. 1, a linkage information providing system using personal information based identifier generation according to an embodiment of the present invention includes a linkage information provider 111, a linkage information use agency 121, and a linkage service provider 130 .

The linkage information providing agency 111 and the linkage information use agency 121 include personal information linkage identifier processing units 110 and 120 and personal information processing units 112 and 122, respectively.

The personal information association identifier processing units 110 and 120 transmit institution information and service information to the association service providing apparatus 130.

For example, the service information and the institution information may be transmitted to the linkage service providing apparatus 130 by one of the organizations 111 and 121 that want to link the personal information, and the remaining organizations may transmit only the institution information . In this case, the service information includes group information to be linked to personal information, so that the linked service providing apparatus 130 can identify which organization is the same group and provide the service. In this case, the service information may include which organization is a linkage information provider and which organization is a linkage information use agency.

As another example, the organization information may include group information of the organizations that want to link with the personal information, so that the linked service providing apparatus 130 may collect the institution information to identify which organization is the same group.

In addition, the service information may include information related to the service contract, such as combination information of personal information fields to be used for generating the linkage identifier, validity period of the linkage service, and the like.

The linkage service providing apparatus 130 determines whether the service information corresponding to the received organization information is valid.

When the service information is valid, the linkage service providing apparatus 130 determines that the linkage information providing agency 111 and the linkage information use agency 121 belong to the linkage group, and transmits the link information to the personal information linkage identifier processing unit 110 or 120 Generate module license and transfer the shared key.

At this time, the creation module license may be in the form of a file. Further, the generation module license may be an electronically signed file.

At this time, the generated module license may include information on a period during which the linked information providing service of the linked information providing organization and the use agencies 111 and 121, such as the shared key holding period and the service providing period, is available.

At this time, the cooperative service providing apparatus 130 transmits the same shared key to the institutions belonging to the cooperating group so that the institutions belonging to the cooperating group generate the same cooperating identifier.

At this time, the association identifier is a user identification value for uniquely identifying the user, and is a value different from the resident registration number.

At this time, the personal information linkage identifier processing unit 110 or 120 determines whether the generated module license is valid, and generates a linkage identifier if valid.

At this time, the personal information linkage identifier processing apparatuses 110 and 120 receive the personal information from the personal information processing apparatuses 112 and 122 belonging to the respective institutions, and generate the linkage identifier using the personal information and the shared key.

As described above, the association information providing system using the personal information based identifier generation according to the embodiment of the present invention uses a separate identifier generated through field combination of the personal information, instead of the resident registration number of the user, as a value for identifying the user , When a personal information leakage problem occurs, only the user identifier is newly generated, thereby minimizing the damage caused by leakage of personal information.

At this time, the personal information linkage identifier processing unit 110 of the linkage information provider 111 further receives the linkage information, which is personal information to be linked, from the personal information processing unit 112, and uses the linkage identifier and linkage information To generate a linkage.

In this case, the linkage information may be information to be linked by a plurality of agencies such as a user's mileage or points.

At this time, the personal information linkage identifier processing device 120 of the linkage information use organization 121 sends the linkage identifier to the personal information processing device 122 in advance so that the linkage identifier and the personal information in the personal information processing device 122 are mapped .

When the linkage information providing organization 111 transmits the linkage information to the linkage information use agency 121, the linkage information use agency 121 extracts the linkage identifier and linkage information from the linkage information, Lt; / RTI >

At this time, the personal information processing device 122 uses the linkage identifier to determine which user is the linkage information, maps the linkage identifier, the personal information, and the linkage information so that the individual information is linked between the linkage groups .

When the linkage service providing device 130 determines that the linkage dictionary has been exposed, it decides to replace the linkage identifier and transmits a new shared key to the linkage information providing agency 111 and the linkage information use agency 121.

The linkage information providing organization 111 and the linkage information use agency 121 generate a new linkage identifier and replace the linkage identifier through the above procedure.

As described above, in the linkage information providing system using the personal information based identifier generation according to the embodiment of the present invention, the user identifier is generated using the shared key common only among the linkage groups to which the personal information is linked, In case of a leakage problem, it is possible to newly generate the identifier by simply re-distributing the shared key to the linkage group, so that the damage caused by leakage of personal information can be recovered more quickly.

The network 140 provides a path for transferring information between the linkage information providing organization 111, the linkage information utilizing agency 121 and the linkage service providing apparatus 130, . For example, the network 140 may include an i-bipnet that provides a large-capacity data transmission / reception service and a data service without a disruption phenomenon via an Internet protocol (IP) (3G) mobile communication network including Wired (WIBRO) network, WCDMA, HSDPA (High Speed Downlink Packet Access) network, and 3.5G mobile communication network including LTE network. A 4th-generation mobile communication network, a satellite communication network, and a Wi-Fi network. 1, the network used between the linkage information provider 111 and the linkage service provider 130 may be different from the network used between the linkage information provider 121 and the linkage service provider 130 And may be the same.

2 is a diagram showing an example of the linkage information provider 111 shown in FIG.

Referring to FIG. 2, the linkage information providing organization 111 shown in FIG. 1 includes a personal information processing apparatus 112 and a personal information linkage identifier processing apparatus 110.

The personal information linkage identifier processing unit 110 includes a linkage identifier generation module 211, a professional generation module 212, a license verification module 213, a shared key storage module 214, an interface module 215, and a communication module 216 ).

The linkage identifier generation module 211 generates a linkage identifier using the shared key and the personal information received from the personal information processing device 112. [

At this time, the linkage identifier generation module 211 performs a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information received from the personal information processing device 112, May be secondly transformed using the shared key to generate a linkage identifier.

The first transformation is to provide confidentiality to the personal information, and the second transformation is for inter-agency interworking.

For example, the plurality of personal information fields included in the personal information may include a name field, a date of birth field, a sex field, a mobile phone number field, an e-mail address field, and an address field.

In this case, the first transformation and the second transformation may use cryptographic operations such as symmetric key encryption or message hashing, and the operations used for the first transformation and the second transformation may be the same or different from each other.

At this time, the linkage identifier generation module 211 fixedly includes a name field, a date of birth field, and a gender field to utilize the linkage identifier as a quasi-identifier of the user, and may selectively include one or more of the remaining fields The linkage identifier can be generated using the result of combining the included fields.

At this time, the linkage identifier generation module 211 can generate a linkage identifier according to field combinations differently designated for each linkage group.

The professional generation module 212 generates linkage information by including linkage information, which is additional personal information to be linked to the linkage identifier.

At this time, the professional generation module 212 may generate a linkage special by encrypting the linkage identifier and the linkage information.

The license validation module 213 verifies the generated generation module license along with the shared key issuance.

At this time, the license verification module 213 determines whether the generation module license is valid. If the license is valid, the license verification module 213 generates a linkage identifier for the linkage identifier generation module 211 or the specialty generation module 212 Deliver the message.

If the license is invalid, the license verification module 213 does not transmit a message for the linkage identifier generation module 211 or the specialization generation module 212 for the linkage identifier generation or association specialization process.

In addition, if the license is not valid, the license verification module 213 may transmit a message that the generated module license is invalid to the linked service provider 130 shown in FIG.

The shared key storage module 214 stores the shared key used for generating the linkage identifier.

The interface module 215 interfaces with the personal information linkage identifier processing unit 110 and the personal information processing unit 112.

The communication module 216 is connected to the personal information linkage identifier processing unit 110 and the linkage service provider 130 or the personal information linkage identifier processing unit 110 shown in FIG. 1 and the linkage information use agency 121).

That is, the interface module 215 serves as an internal interface of the linkage information providing organization 111 shown in FIG. 1, and the communication module 216 takes charge of external communication of the linkage information providing agency 111 shown in FIG.

Although not shown in FIG. 2, the linked information utilizing agency 121 shown in FIG. 1 may also include a personal information processing device and a personal information linkage identifier processing device.

Also, the personal information linkage identifier processing device of the linkage information use organization 121 may include a linkage identifier generation module, a professional processing module, a license verification module, a shared key storage module, an interface module, and a communication module.

FIG. 3 is a diagram showing an example of the personal information linkage identifier processing unit 110 of the linkage information providing organization 111 shown in FIG.

3, the personal information linkage identifier processing unit 110 of the linkage information provider 111 shown in FIG. 1 includes a service setting unit 310, a linkage identifier generation unit 320, and a specialized transfer unit 330, .

When the service information corresponding to the institution information is valid, the service setting unit 310 receives the generated module license and the shared key from the linked service providing apparatus, and transmits the generated module license to the linked service providing apparatus Verify.

For example, the service information transmitted together with the service setting unit 310 includes group information for linking personal information and an effective period of the linkage service, so that it is possible to determine whether institution information is included in the group information, It can be determined whether the service information is valid according to whether the service is valid or not.

At this time, the service setting unit 310 generates the combination information of the private information field with respect to the institution information, and the linkage identifier generation unit 320 may combine the private information fields according to the combination information.

The linkage identifier generation unit 320 receives the personal information from the personal information processing apparatus, and generates the linkage identifier using the shared key and the personal information.

At this time, the linkage identifier generation unit 320 performs a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information, and performs a second conversion using the shared key A linkage identifier can be generated.

In this case, when there is a linkage identifier replacement decision from the linkage service providing apparatus, the service setting unit 310 receives the reissued shared key from the linkage service providing apparatus and uses the reissued shared key in the linkage identifier generating unit 320 The linkage identifier can be regenerated.

At this time, the linkage identifier generation unit 320 may combine the personal information fields including the predetermined fixed field and at least one selection field.

At this time, the fixed field may be a private information field that enables the individual to quasi identify. For example, the fixed field may be a name field, a date of birth field, and a gender field, so as to generate an identifiable linkage identifier that gives an individual as a combination of these three fields. Here, the quasi identification means a case in which the probability of the identifier being redundant enough to be usable in accordance with the identifier, such as a fingerprint of a person, is low even if the user is not uniquely identified.

At this time, the linkage identifier generating unit 320 may transmit the linkage identifier to the personal information processing apparatus so that the personal information and the linkage identifier are mapped.

The specialized transferring unit 330 generates a linkage containing the linkage identifier and linkage information received from the personal information processing apparatus, and transmits the linkage linkage to the linkage information using apparatus.

FIG. 4 is a diagram showing an example of the personal information linkage identifier processing device 120 of the linkage information using organization 121 shown in FIG.

4, the personal information linkage identifier processing unit 120 of the linkage information using organization 121 shown in FIG. 1 includes a service setting unit 410, a linkage identifier generator 420, a linkage identifier extractor 430 And a linkage information mapping unit 440.

When the service information corresponding to the institution information is valid, the service setting unit 410 receives the generated module license and the shared key from the linked service providing apparatus, and transmits the generated module license to the linked service providing apparatus Verify.

At this time, the service setting unit 410 generates the combination information of the private information field with respect to the institution information, and the linkage identifier generation unit 420 may combine the private information fields according to the combination information.

The linkage identifier generation unit 420 receives the personal information from the personal information processing apparatus, generates a linkage identifier using the shared key and the personal information, and transmits the linkage identifier to the personal information processing apparatus to map the personal information and the linkage identifier .

At this time, the linkage identifier generation unit 420 performs a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information, and performs a second conversion using the shared key A linkage identifier can be generated.

In this case, when there is a linkage identifier replacement decision from the linkage service providing apparatus, the service setting unit 410 receives the reissued shared key from the linkage service providing apparatus, and the linkage identifier generating unit 420 uses the reissued shared key The linkage identifier can be regenerated.

The linkage identifier extractor 430 extracts the linkage information and the linkage identifier from the linkage received from the linkage information providing device.

The linkage information mapping unit 440 includes a linkage information mapping unit for linking the linkage information and the linkage identifier to the personal information processing apparatus to map linkage information, linkage identifier, and personal information.

5 is a flowchart illustrating a method of providing linkage information using a personal information based identifier generation according to an embodiment of the present invention.

Referring to FIG. 5, a method of providing linkage information using personal information based identifier generation according to an exemplary embodiment of the present invention includes: a linkage information providing apparatus that transmits institution information and service information to a linkage service providing apparatus; It is determined whether the service information corresponding to the institution information is valid (S510).

Also, in the method of providing linkage information using the personal information based identifier generation according to an embodiment of the present invention, when the service information corresponding to the institution information is valid, the linkage information providing apparatus transmits a generated module license and a shared key from the linkage- (S520).

Also, in the method of providing linkage information using personal information based identifier generation according to an embodiment of the present invention, the linkage information providing device verifies the generated module license (S530).

Also, in the method of providing linkage information using the personal information based identifier generation according to an embodiment of the present invention, the linkage information providing apparatus receives personal information from the personal information processing apparatus (S540).

Also, in the method of providing linkage information using personal information based identifier generation according to an embodiment of the present invention, the linkage information providing apparatus generates a linkage identifier using the shared key and personal information (S550).

At this time, in operation S550, at least two personal information fields among a plurality of personal information fields included in the personal information are combined to perform a first conversion, a first conversion result is subjected to a second conversion using a shared key, Can be generated.

At this time, the step S550 may combine the personal information fields including the predetermined fixed field and the at least one selection field.

At this time, the fixed field may be a private information field that enables the individual to quasi identify. For example, the fixed field may be a name field, a date of birth field, and a gender field, so as to generate an identifiable linkage identifier that gives an individual as a combination of these three fields. Here, the quasi identification means a case in which the probability of the identifier being redundant enough to be usable in accordance with the identifier, such as a fingerprint of a person, is low even if the user is not uniquely identified.

At this time, the personal information field may be combined according to the combination information set according to the institution information in step S550.

At this time, if there is a linkage identifier replacement decision from the linkage service providing apparatus, the linkage information providing apparatus receives the reissued shared key from the linkage service providing apparatus, and the linkage information providing apparatus uses the reissued shared key The linkage identifier can be regenerated.

Also, in the method of providing linkage information using personal information based identifier generation according to an embodiment of the present invention, a linkage information providing apparatus generates a linkage dictionary including linkage identifiers and linkage information received from the personal information processing apparatus, To the linkage information utilizing apparatus (S560).

6 is a flowchart illustrating a method of using linkage information using personal information based identifier generation according to an exemplary embodiment of the present invention.

Referring to FIG. 6, in the method of using association information using personal information based identifier generation according to an embodiment of the present invention, the association information using apparatus transmits institution information and service information to a linked service providing apparatus, It is determined whether the service information corresponding to the institution information is valid (S610).

Also, when the service information corresponding to the institution information is valid, the linkage information using apparatus generates license of the generated module and the shared key from the linkage service providing apparatus, (S620).

Also, in the method of using linked information using personal information based identifier generation according to an embodiment of the present invention, the linked information using device verifies the generated module license (S630).

Also, in the method of using linked information using personal information based identifier generation according to an embodiment of the present invention, the linked information using apparatus receives personal information from the personal information processing apparatus (S640).

Also, in the method of using linked information using personal information based identifier generation according to an embodiment of the present invention, the linked information using apparatus generates a linked identifier using the shared key and personal information (S650).

At this time, in operation S650, at least two personal information fields among a plurality of personal information fields included in the personal information are combined to perform a first conversion, a first conversion result is subjected to a second conversion using a shared key, Can be generated.

At this time, the step S650 may combine the personal information fields including the predetermined fixed field and the at least one selection field.

At this time, the fixed field may be a private information field that enables the individual to quasi identify. For example, the fixed field may be a name field, a date of birth field, and a gender field, so as to generate an identifiable linkage identifier that gives an individual as a combination of these three fields. Here, the quasi identification means a case in which the probability of the identifier being redundant enough to be usable in accordance with the identifier, such as a fingerprint of a person, is low even if the user is not uniquely identified.

At this time, step S650 may combine the personal information fields according to the combination information set according to the institution information.

At this time, if there is a linkage identifier replacement decision from the linked service providing apparatus, the linkage information providing apparatus receives the reissued shared key from the linked service providing apparatus, and the linkage information utilizing apparatus uses the reissued shared key The linkage identifier can be regenerated.

Also, in the method of using linkage information using personal information based identifier generation according to an embodiment of the present invention, the linkage information generating apparatus receives linkage information generated by the linkage information providing apparatus (S660).

Further, in the method of using linkage information using personal information based identifier generation according to an embodiment of the present invention, the linkage information using apparatus extracts the linkage identifier and linkage information from the linkage dictionary (S670).

Also, in the method of using linkage information using personal information based identifier generation according to an embodiment of the present invention, the linkage information utilizing apparatus transmits the linkage information and the linkage identifier to the personal information processing apparatus so that the linkage information, linkage identifier, (Step S680).

FIG. 7 is a flowchart illustrating an overall process of generating a linkage identifier according to the present invention.

Referring to FIG. 7, in order to generate the linkage identifier according to the present invention, the linkage information providing organization and the use agencies 111 and 121 provide institution information and service information to the linkage service provider 130 (S710).

At this time, the linked service providing organization 130 inquires service contract information of the requesting institutions 111 and 121 and determines whether there is service information corresponding to the corresponding institution information (S720).

As a result of the determination in step S720, if there is no service information, a message indicating that the service information is not valid is transmitted to the requesting institutions 111 and 121 (S731).

If it is determined in step S720 that the service information exists, the generated module license and the shared key information are inquired (S732).

At this time, the linked service provider 130 transmits the inquired generation module license and the shared key to the requesting agencies 111 and 121 (S733).

At this time, the requesting institutions 111 and 121 verify the generation module license (S740).

If it is determined in step S740 that the generated module license is not valid, the requesting institutions 111 and 121 transmit a message indicating that the license verification has failed to the linked service providing organization 130 (S741).

As a result of the verification in step S740, if the generation module license is valid, the requesting institutions 111 and 121 extract the personal information of the user from the individual information processing apparatuses of the respective institutions (S742).

At this time, the requesting institutions 111 and 121 generate the linkage identifier of the user using the personal information of the user and the shared key (S743).

Although not shown in FIG. 7, the requesting institutions 111 and 121 store the linkage identifier generated in each personal information processing apparatus.

FIG. 8 is a flowchart illustrating an overall process of the linkage information processing according to the present invention.

Referring to FIG. 8, in order to process the link information according to the present invention, the link information providing organization 111 extracts linkage identifiers and linkage information from the personal information processing apparatus (S820).

At this time, the linkage information provider 111 encrypts the linkage identifier and the linkage information to generate a linkage message (S830), and transmits the linkage message to the linkage information use agency 121 (S840).

At this time, the linkage information utilizing agency 121 decrypts the linkage dictionary (S850).

At this time, the linkage information utilization organization 121 extracts the linkage identifier and linkage information from the linkage dictionary and compares the linkage identifier with the linkage identifier held (S860).

At this time, the linkage information use organization 121 transmits the extracted linkage identifier and linkage information to the personal information processing apparatus, and stores the linkage identifier, linkage information, and personal information in the personal information processing apparatus so as to be mapped (S870).

At this time, the linkage information utilizing agency 121 transmits a result message indicating that the linkage processing is completed to the linkage information providing agency 111, and the linkage processing is completed.

The method and method for providing linkage information using personal information based identifier generation according to the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Includes all types of hardware devices that are specially configured to store and execute magneto-optical media and program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions may include machine language code such as those generated by a compiler, as well as high-level language code that may be executed by a computer using an interpreter or the like. Such a hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

As described above, the configuration and method of the above-described embodiments are not limited to the above-described embodiments, but the present invention can be applied to a system and method for providing a linkage information using a personal information based identifier generation according to the present invention, The embodiments may be configured so that all or some of the embodiments may be selectively combined so that various modifications may be made.

111: Linkage information providing device
121: Linkage information utilization device
130: connection service providing device
140: Network
110, 120: personal information linkage identifier processing device
112, 122: personal information processing device
211: linkage identifier generation module
212: Professional Generation Module
213: License Verification Module
214: Shared key storage module
215: Interface module
216: Communication module

Claims (22)

A service for transmitting institution information and service information to a linked service providing apparatus and receiving a generated module license and a shared key from the linked service providing apparatus when the service information corresponding to the institution information is valid and for verifying the generated module license Setting section;
A linkage identifier generation unit for receiving the personal information from the personal information processing apparatus and generating the first linkage identifier using the shared key and the personal information; And
A personal information processing unit for generating a linkage tuple including the first linkage identifier and the linkage information received from the personal information processing apparatus and transmitting the linkage tuple to the linkage information using apparatus,
Lt; / RTI >
The linkage identifier generation unit
A first conversion step of performing a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information excluding a resident number and performing a second conversion using the shared key, Generates an identifier,
Wherein the first linkage identifier is transmitted to the linkage information using apparatus and is used for linking information with personal information identified by the second linkage identifier generated by the linkage information using apparatus. Linkage information providing device. delete The method according to claim 1,
The service setting unit
Generating combination information of the personal information field for the institution information,
The linkage identifier generation unit
And the personal information field is combined according to the combination information. The method of claim 3,
The service setting unit
Receiving a re-issued shared key from the linked service providing apparatus when there is a linkage identifier replacement decision from the linked service providing apparatus,
The linkage identifier generation unit
And the first association identifier is regenerated using the re-issued shared key. The method of claim 4,
The linkage identifier generation unit
And a personal information field including a predetermined fixed field and at least one selection field are combined with each other. The method of claim 5,
The linkage identifier generation unit
And the first linkage identifier is transmitted to the personal information processing apparatus so that the personal information and the first linkage identifier are mapped to each other. A service for transmitting institution information and service information to a linked service providing apparatus and receiving a generated module license and a shared key from the linked service providing apparatus when the service information corresponding to the institution information is valid and for verifying the generated module license Setting section;
A personal information management method comprising: receiving personal information from a personal information processing apparatus, generating a first linkage identifier using the shared key and personal information, transmitting the first linkage identifier to the personal information processing apparatus, A linkage identifier generation unit for mapping an identifier to an identifier;
A linkage identifier extracting unit for extracting the linkage information and the second linkage identifier from the linkage received from the linkage information providing apparatus; And
A link information mapping unit for linking the linkage information and the second linkage identifier to the personal information processing apparatus to map the linkage information and the personal information corresponding to the first linkage identifier,
Lt; / RTI >
The linkage identifier generation unit
A first conversion step of performing a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information excluding a resident number and performing a second conversion using the shared key, And generating an identifier based on the generated personal information based identifier. delete The method of claim 7,
The service setting unit
Generating combination information of the personal information field for the institution information,
The linkage identifier generation unit
And the personal information field is combined according to the combination information. The method of claim 9,
The service setting unit
Receiving a re-issued shared key from the linked service providing apparatus when there is a linkage identifier replacement decision from the linked service providing apparatus,
The linkage identifier generation unit
And the first association identifier is regenerated using the re-issued shared key. The method comprising: transmitting institution information and service information to a linked service providing apparatus, receiving a generated module license and a shared key from the linked service providing apparatus when the service information corresponding to the institution information is valid, and verifying the generated module license ;
Receiving personal information from the personal information processing apparatus, and generating a first linkage identifier using the shared key and the personal information; And
Generating a linkage dictionary including the first linkage identifier and the linkage information received from the personal information processing apparatus, and transmitting the linkage dictionary to the linkage information using apparatus
Lt; / RTI >
Wherein the generating the first cascade identifier comprises:
A first conversion step of performing a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information excluding a resident number and performing a second conversion using the shared key, Generates an identifier,
Wherein the first linkage identifier is transmitted to the linkage information using apparatus and is used for linking information with personal information identified by the second linkage identifier generated by the linkage information using apparatus. Method of providing linkage information. delete The method of claim 11,
The linkage information providing method using the personal information based identifier generation method
Generating combination information of the personal information field for the institution information
Further comprising:
Wherein the generating the first cascade identifier comprises:
And combining the personal information fields according to the combination information. 14. The method of claim 13,
The linkage information providing method using the personal information based identifier generation method
Receiving a re-issued shared key from the linked service providing apparatus when there is a linkage identifier replacement decision from the linked service providing apparatus
Further comprising:
Wherein the generating the first cascade identifier comprises:
And the first association identifier is regenerated using the re-issued shared key. 15. The method of claim 14,
Wherein the generating the first cascade identifier comprises:
And a personal information field including a predetermined fixed field and at least one selection field are combined with each other. 16. The method of claim 15,
Wherein the generating the first cascade identifier comprises:
And transmitting the first linkage identifier to the personal information processing apparatus so that the personal information and the first linkage identifier are mapped. The method comprising: transmitting institution information and service information to a linked service providing apparatus, receiving a generated module license and a shared key from the linked service providing apparatus when the service information corresponding to the institution information is valid, and verifying the generated module license ;
Receiving personal information from the personal information processing apparatus, and generating a first linkage identifier using the shared key and the personal information;
Transmitting the first linkage identifier to the personal information processing apparatus so that the personal information and the first linkage identifier are mapped;
Extracting linkage information and a second linkage identifier from a linkage received from the linkage information providing device; And
And transmitting the linkage information and the second linkage identifier to the personal information processing apparatus so that the linkage information and the personal information corresponding to the first linkage identifier are mapped
Lt; / RTI >
Wherein the generating the first cascade identifier comprises:
A first conversion step of performing a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information excluding a resident number and performing a second conversion using the shared key, And generating an identifier based on the identification information. delete 18. The method of claim 17,
The linkage information using method of generating the personal information based identifier
Generating combination information of the personal information field for the institution information
Further comprising:
Wherein the generating the first cascade identifier comprises:
And combining the personal information fields according to the combination information. The method of claim 19,
The linkage information using method of generating the personal information based identifier
Receiving a re-issued shared key from the linked service providing apparatus when there is a linkage identifier replacement decision from the linked service providing apparatus
Further comprising:
Wherein the generating the first cascade identifier comprises:
And the first association identifier is regenerated using the re-issued shared key. A computer-readable recording medium on which a program for executing the method according to any one of claims 11, 13 to 17, and 19 to 20 is recorded. A linkage service providing device for determining whether service information received from the linkage information providing device and the use device is valid, and transmitting the linkage information to the linkage information providing device and the use device;
A personal information management method comprising: receiving personal information and linkage information from a personal information processing apparatus of a linkage information providing organization; generating a first linkage identifier using the shared key and the personal information; linking the linkage dictionary including the first linkage identifier and linkage information A linkage information providing device for linking the linkage information to the linkage information utilizing apparatus; And
Generating a second linkage identifier by using the shared key and the personal information, mapping the personal information to the second linkage identifier, decoding the linkage dictionary to extract the linkage information and the first linkage identifier, And a linkage information utilization device for mapping the personal information corresponding to the second linkage identifier
Lt; / RTI >
The linkage information providing device and the linkage information utilizing device
A first conversion step of performing a first conversion by combining at least two personal information fields among a plurality of personal information fields included in the personal information excluding a resident number and performing a second conversion using the shared key, An identifier and the second linkage identifier are generated based on the generated linkage information.

Images