KR20170022455A - Analytics center and control method thereof, and service providing device and control method thereof in co-operational privacy protection communication environment - Google Patents

Abstract

The present invention discloses an operation method of an analysis server and analysis server, a service provision apparatus, and an operation method of a service provision apparatus in a communication environment for protecting personal information in a cooperative manner. That is, according to the present invention, when providing a service using encrypted personal information, only a part of personal information can be obtained in a cooperative manner through calculation between encrypted personal information, thereby providing a service.

Description

TECHNICAL FIELD [0001] The present invention relates to an analysis server and an operation method of an analysis server in a communication environment in which personal information is protected in a cooperative manner, an operation method of the service providing apparatus, and an operation method of the service providing apparatus. OPERATIONAL PRIVACY PROTECTION COMMUNICATION ENVIRONMENT}

The present invention relates to security enhancement techniques for personal information, and more particularly, it relates to a security enhancement technology for personal information, and more particularly, A service providing apparatus and an operation method of the service providing apparatus in a communication environment in which personal information is protected in a cooperative manner.

2. Description of the Related Art [0002] Recently, with the development of communication technologies including mobile communication, a variety of services utilizing communication technologies have been provided in all fields of society including finance, medical care, real estate, and media.

In the case of a service utilizing such a communication technology, it is common to utilize personal information of a user who requests a service for the purpose of improving the service quality such as a targeting service.

However, in order to utilize the above services, all the personal information of the user is collected by one intermediary server (for example, service server) and transmitted to the service providing device (for example, 3 ^rd Party service company) Is required.

That is, since the mediating server has exclusive rights to distribute and use all the personal information of the user, personal information is easily exposed to the manager who manages the mediating server according to transparency, which may cause problems such as malicious theft and illegal use .

In order to solve this problem, the personal information was transmitted to the service providing device before encryption, and the encrypted personal information was transmitted.

However, in order to provide the service using the encrypted personal information, it is necessary to perform the decryption process for the encrypted personal information. That is, since the service providing apparatus directly decrypts the private information encrypted using the public key or the secret key, all the personal information of the user is eventually disclosed to the service providing apparatus.

Accordingly, in the present invention, in an environment in which personal information is protected in a cooperative manner in which only a part of personal information is acquired in a cooperative manner through the calculation of encrypted personal information when a service using the encrypted personal information is provided, An operation method of the server and the analysis server, a service providing apparatus, and an operation method of the service providing apparatus.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and it is an object of the present invention to provide a method and apparatus for collecting personal information only in cooperation with an encrypted personal information, An operation method of an analysis server and an analysis server in a communication environment that protects personal information in a cooperative manner that can be provided, and a method of operating the service providing apparatus and the service providing apparatus.

Further, it is to be understood that the present invention is not limited to the above-mentioned embodiments, and other and further objects which are not mentioned can be clearly understood by those skilled in the art from the following description .

To achieve the above object, according to a first aspect of the present invention, there is provided an analysis server comprising: a receiver for receiving encrypted data obtained by encrypting personal information from a collection device; And a control unit for detecting encrypted data related to the information request message when receiving an information request message requesting information on a specific user from a service providing apparatus for providing a service related to the encrypted data, A generating unit for generating an encrypted calculation result including information for identifying the device; And a providing unit for providing the encrypted calculation result to the service providing apparatus and obtaining a decryption result for the detected encrypted data using the encrypted calculation result in the service providing apparatus, do.

Preferably, the information request message includes a search condition for searching for the information about the specific user, and the detected encrypted data satisfies the search condition among the two or more element encrypted data included in the encrypted data And the encrypted data is encrypted.

Advantageously, the generation unit performs an operation between encrypted information without a decryption process on the detected encrypted data to generate the encrypted operation result.

The encryption algorithm applied to the encrypted data is the same, and is based on a homomorphic encryption technique capable of performing computation between encrypted information.

According to a second aspect of the present invention, there is provided a service providing apparatus comprising: a generating unit generating an information request message for requesting information about a specific user to provide a service using encrypted data obtained by encrypting personal information; And a control unit operable to detect encrypted data associated with the information request message and to receive a result of the encrypted operation including information for identifying a collection device for decrypting the detected encrypted data, An obtaining unit obtaining a decoding result for the data; And a service providing unit for providing a service related to the specific user by using the decoding result.

Preferably, the information request message includes a search condition for searching for the information about the specific user, and the detected encrypted data satisfies the search condition among the two or more element encrypted data included in the encrypted data And the encrypted data is encrypted.

Preferably, the obtaining unit transmits the encrypted calculation result to the collecting device, and receives the decoding result for the element encrypted data satisfying the search condition.

According to a third aspect of the present invention, there is provided a method of operating an analysis server, comprising: receiving encrypted data obtained by encrypting private information from a collection device; And a control unit for detecting encrypted data related to the information request message when receiving an information request message requesting information on a specific user from a service providing apparatus for providing a service related to the encrypted data, A generation step of generating an encrypted calculation result including information for identifying the device; And a providing step of providing the encrypted calculation result to the service providing apparatus so that the service providing apparatus can obtain a decryption result for the detected encrypted data using the encrypted calculation result .

Preferably, the information request message includes a search condition for searching for the information about the specific user, and the detected encrypted data satisfies the search condition among the two or more element encrypted data included in the encrypted data And the encrypted data is encrypted.

According to a fourth aspect of the present invention, there is provided a method of operating a service providing apparatus, the method including generating an information request message for requesting information on a specific user to provide a service using encrypted data obtained by encrypting personal information Generating step; And a control unit operable to detect encrypted data associated with the information request message and to receive a result of the encrypted operation including information for identifying a collection device for decrypting the detected encrypted data, An obtaining step of obtaining a decoding result for the data; And a providing step of providing a service related to the specific user using the decoded result.

The present invention provides a method of operating an analysis server and an analysis server in a communication environment for protecting personal information in a cooperative manner, It is possible to obtain the service, thereby preventing the exclusive distribution and use right of the personal information and providing the service with enhanced privacy security of the user.

1 is an exemplary diagram illustrating a communication environment for protecting personal information in a cooperative manner according to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of an analysis server according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of a service providing apparatus according to an embodiment of the present invention.
4 is a flowchart illustrating a flow of providing a service according to an embodiment of the present invention.
5 is a diagram showing an example of personal information according to an embodiment of the present invention.
6 is a flowchart illustrating an operation flow of an analysis server according to an embodiment of the present invention.
7 is a flowchart illustrating an operational flow of a service providing apparatus according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

First, a communication environment for protecting personal information in cooperation with the present invention will be described with reference to FIG.

1, a communication environment for protecting personal information in a cooperative manner to which the present invention is applied includes a terminal 100, a collection device 200, an analysis server 300, and a service providing device 400 .

The terminal 100 is a device that transmits personal information and uses a service provided by the service providing apparatus 400, and may be a wired terminal or a wireless terminal.

For example, the terminal 100 may be a smart phone, a desktop, a notebook PC, a tablet PC, a PDA, or the like, which the user uses, Devices may all be included.

The collecting device 200 may be an information collecting device 200 ₁ - 200 ₁ provided in at least one company (for example, a hospital, a financial institution, a telecommunication company, etc.) which directly uses at least one user, 200 _n ). In the course of using services provided by each company, at least one user may provide various personal information (medical records, residence, age, sex, name, location, payroll, property, ). ≪ / RTI > Hereinafter, it is assumed that the user has transmitted personal information through the terminal 100, and the following description will be made.

That is, the information collecting apparatuses 200 ₁ -200 _n store personal information reflecting characteristics of services provided by respective companies.

For example, assuming that the data collection device _{(200: 1)} provided in hospitals, data collection devices (200 _1), the basic personal information for each user (such as age, gender, name, etc.) In addition to this user During the course of using the services provided by the hospital, special personal information such as medical records, diseases, medicines, and medical examinations agreed to be collected will be stored.

Hereinafter, the personalized information collected on the basis of the basic personal information (eg, age, sex, name, etc.) of the user and the service provided by each company (for example, payroll details, property, communication fees, medical records, , Medicines, results of health examinations, etc.) will be referred to as personal information.

The analysis server 300 receives encrypted data obtained by encrypting personal information from the collecting device 200 for each user and calculates encrypted data for a specific user without a decryption process when the service providing device 400 requests it And transmits the generated result to the service providing apparatus 400.

The service providing apparatus 400 receives the encrypted operation result from the analysis server 300, and obtains only some personal information about a specific user using the encrypted operation result, and provides the service.

In the above description, the analysis server 300 and the service providing apparatus 400 are separately described. However, if the functions of the analysis server 300 and the service providing apparatus 400 can be maintained in the same manner, Server.

Hereinafter, the terminal 100 and the collecting device 200 will be described in more detail with reference to FIG.

Referring to FIG. 1, a terminal 100 according to an embodiment of the present invention encrypts personal information generated in a process of using a service provided by at least one company (e.g., a hospital, a financial institution, a communication company, etc.) And generates encrypted data.

That is, the terminal 100 generates the encrypted data by applying the first encryption algorithm to encrypt the personal information.

Here, the first encryption algorithm may be an encryption algorithm based on a symmetric key encryption (Data Encryption Standard) technique in which calculation between encrypted information is impossible.

More specifically, the terminal 100 generates a secret key (k) for the first encryption algorithm. Subsequently, the terminal 100 encrypts the private information using the private key k to generate encrypted data (hereinafter, symmetric key encrypted data).

In addition, the terminal 100 generates a homotypic decoding function (hereinafter, a homotypic decoding function) by applying a second algorithm to encrypt the decoding function for the secret key k.

Here, the second encryption algorithm is an encryption algorithm based on a homomorphic encryption (HE) technique capable of computing encrypted information.

At this time, since the collecting apparatus 200 uses a homogeneous decoding function as a parameter for performing computation between the encrypted information using the characteristics of the second algorithm, a second encryption algorithm is applied to the homotypic decoding function, unlike the symmetric key encryption data .

When the private information is encrypted and transmitted as described above and the decryption function itself for decryption is encrypted and transmitted, the collecting device 200 receives the encrypted private information and the decryption function, Even if information leakage or hacking occurs in the device 200, the damage can be minimized.

The collecting apparatus 200 receives the symmetric key encryption data and the homogeneous decryption function from the terminal 100.

That is, the collecting device 200 applies the second encryption algorithm to the symmetric key encryption data and the same type decryption function to generate encrypted data (hereinafter, same-type encrypted data). The process of generating the same type of encrypted data will be described in more detail later with reference to FIG.

Then, the collecting device 200 delivers the same type of encrypted data to the analysis server 300. [

Hereinafter, the configuration of the analysis server according to the embodiment of the present invention will be described in detail with reference to FIG.

2, the analysis server 300 according to the present invention includes a receiving unit 310, a generating unit 320, and a providing unit 330.

The receiving unit 310 receives the same type of encrypted data generated by applying the second encryption algorithm to the personal information from the collecting device 200. [ The received same type of encrypted data can be stored separately for each user.

Here, each of the isochronous encrypted data classified by users includes two or more element encrypted data. For example, if the same type of encrypted data of user A includes medical records, payroll details, communication fees, age, sex, name, etc., the medical records, payroll, communication charges, age, sex, Name, etc. correspond to the element encryption data.

Upon receiving the information request message requesting the information on the specific user from the service providing apparatus providing the service using the same type of encrypted data, the generating unit 320 detects the isochronous encrypted data related to the information request message, Encrypted encrypted data is transmitted to the collecting device at a later time, and generates an encrypted calculation result including information for identifying the corresponding collection device that performs decryption on the element-encrypted data of the same-type encrypted data.

More specifically, when the generating unit 320 receives an information request message for requesting information on a specific user from the service providing apparatus 400, the generating unit 320 detects the same type of encrypted data associated with the information request message.

At this time, the information request message includes a retrieval condition for retrieving information about a specific user, and an information collecting apparatus 200 ₁ for decrypting the detected encrypted data satisfying the retrieval condition among the same type of encrypted data, that is, -200 _n ) can be included in the function form. Hereinafter, the function included in the information request message will be described as an analysis function.

That is, the generation unit 320 generates an encrypted operation result by performing an operation between encrypted information without decryption of the element-encrypted data satisfying the retrieval condition among the same type of encrypted data for a specific user using the analysis function .

Then, the generating unit 320 transmits the encrypted calculation result to the providing unit 330.

The providing unit 330 provides the encrypted operation result to the service providing apparatus 400 so that the service providing apparatus 400 can obtain the decryption result for the element encrypted data using the encrypted operation result.

Hereinafter, a configuration of a service providing apparatus according to an embodiment of the present invention will be described in detail with reference to FIG.

3, the service providing apparatus 400 according to the present invention includes a generating unit 410, an obtaining unit 420, and a service providing unit 430. As shown in FIG.

The generation unit 410 generates an information request message for requesting information on a specific user in order to provide a service using the encrypted data, that is, the encrypted data of the same type.

That is, the generating unit 410 includes an information collecting apparatus 200 ₁ -200 _n for performing decoding on the element-encrypted data satisfying the retrieval condition among the identical-type encrypted data and the retrieval condition for retrieving the information on the specific user, An information request message including an analysis function is generated.

Here, the search condition is a condition for detecting the element-coded data necessary for providing the service among the same type of encrypted data for a specific user, and the condition may be changed according to the type and characteristics of the service provided by the service providing apparatus.

The acquiring unit 420 acquires the same-type encrypted data related to the information request message from the analysis server 300, and decrypts the elementally-encrypted data of the same-type encrypted data when the detected same-type encrypted data is transmitted to the collecting apparatus And transmits the encrypted calculation result including the information for identifying the collection device to be performed, thereby obtaining the decryption result for the element encrypted data using the encrypted calculation result.

More specifically, when the obtaining unit 420 receives the encrypted calculation result from the analysis server 300, the obtaining unit 420 transmits the encrypted calculation result to the information collecting apparatuses 200 ₁ -200 _{n in the} collecting apparatus 200, And requests decryption of decryptable element-encrypted data in the collecting device.

That is, as described above, since the encrypted operation result includes the information about the corresponding information collecting device for performing the decryption on the element encrypted data, each information collecting device that receives the encrypted operation result is included in the same type of encrypted data And decrypts corresponding element encryption data that can be decrypted by itself among the element encryption data.

Thus, the decryption unit 420 may not decrypt the entirety of the same type of encrypted data for a specific user by simply transmitting the result of the encrypted calculation to the information collecting apparatuses 200 ₁ -200 _n , Only the decryption result for the element encryption data contained in the result is partially obtained from the information collecting apparatus.

At this time, since the information collecting apparatuses 200 ₁ -200 _n generate the encrypted data by applying the second encryption algorithm, the public key (hereinafter referred to as the HE public key) and the secret key Key) is preferably stored.

Accordingly, the information collecting apparatuses 200 ₁ -200 _n can decrypt and transmit the element-encrypted data using the HE secret key. Thereafter, the acquiring unit 420 notifies the service providing unit 430 that the decryption result for the element-encrypted data has been received.

The service providing unit 430 provides a service related to a specific user using the decoding result of the element encrypted data.

That is, the service providing unit 430 applies the decryption result for the element-encrypted data to the service decision function to generate recommendation information for the service to be provided. Then, the service provider 430 delivers the recommendation information to the terminal of the specific user.

Referring to FIGS. 4 and 5, a method of collecting and collecting only a part of personal information through the calculation of encrypted personal information when providing a service using encrypted personal information according to an embodiment of the present invention This will be described in detail. Hereinafter, for convenience of description, reference will be made to the reference numerals mentioned in FIGS. 1 to 3 described above.

First, referring to FIG. 4, a description will be given of the entire flow of providing a service by collectively acquiring only a part of personal information through calculation of encrypted personal information when providing a service using encrypted personal information according to an embodiment of the present invention .

For reference, the parameters shown in FIG. 4 can be defined as shown in Table 1.

[Table 1]

The terminal 100 generates the encrypted data by encrypting the personal information d1, .., dn generated in the course of using the service provided by at least one company (e.g., hospital, financial institution, communication company, etc.).

Here, the first encryption algorithm may be an encryption algorithm based on a symmetric key encryption (Data Encryption Standard) technique in which calculation between encrypted information is impossible.

...

)를 생성한다(S110). 이때, Ek 와 Dk 는k 를 사용한 암호화와 복호화부이다.More specifically, the terminal 100 generates a secret key (k) for the first encryption algorithm (SlOO). Subsequently, the terminal 100 encrypts the private information using the secret key k to generate encrypted data (hereinafter, symmetric key encrypted data) (

...

(S110). At this time, Ek and Dk are encryption and decryption units using k.

In addition, the terminal 100 generates a homotypic decoding function Cpk by applying a second algorithm to encrypt the decoding function for the secret key k (S120).

Here, the second encryption algorithm is an encryption algorithm based on a homomorphic encryption (HE) technique capable of computing encrypted information.

At this time, since the collecting apparatus 200 uses a homogeneous decoding function as a parameter for performing computation between the encrypted information using the characteristics of the second algorithm, a second encryption algorithm is applied to the homotypic decoding function, unlike the symmetric key encryption data .

When the private information is encrypted and transmitted as described above and the decryption function itself for decryption is encrypted and transmitted, the collecting device 200 receives the encrypted private information and the decryption function, Even if information leakage or hacking occurs in the device 200, the damage can be minimized.

) 및 동형 복호화 함수(

)를 수집장치(200)로 전달한다(S130).Then, the terminal 100 transmits the symmetric key encryption data (

) And a homogeneous decryption function (

To the collecting device 200 (S130).

) 및 동형 복호화 함수(

)를 전달받는다. 수집장치(200)는, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)에 제2 암호화 알고리즘을 적용하여 암호화 데이터(이하, 동형 암호화 데이터)(

)를 생성한다(S140).The collecting apparatus 200 receives the symmetric key encrypted data (

) And a homogeneous decryption function (

). The collecting apparatus 200 receives the symmetric key encrypted data (

) And a homogeneous decryption function (

(Hereinafter referred to as " same type encryption data ")

(S140).

)는, 동형 복호화 함수(

)의 ENCpk 에 대하여 대칭키 암호화 데이터(

)를 수행하여 생성된다. That is,

) Is the same type decryption function (

) ≪ / RTI > ENCpk of the symmetric key encryption data (

).

)와 동형 복호화 함수(

)를 전달받게 되므로 수집장치(200)에서의 정보유출 또는 해킹이 발생하더라도 피해를 최소화할 수 있게 되는 것이다.When the personal information is encrypted and transmitted as described above and the decryption function for decrypting the encrypted personal information is encrypted and transmitted, the collecting device 200 transmits the encrypted symmetric key encryption data (

) And isomorphic decryption function (

It is possible to minimize the damage even if information leakage or hacking occurs in the collecting device 200. [

Then, the collecting apparatus 200 transmits the same-type encrypted data to the analysis server 300 (S150).

)를 수신한다.The analysis server 300 receives the same type of encrypted data (for example,

).

Here, each of the isochronous encrypted data classified by users includes two or more element encrypted data. For example, if the same type of encrypted data of user A includes medical records, payroll details, communication fees, age, sex, name, etc., the medical records, payroll, communication charges, age, sex, Name, etc. correspond to the element encryption data.

Then, the analysis server 300 receives an information request message (analysis function F) for requesting information on a specific user from the service providing apparatus providing the service using the same type of encrypted data (S160) Information for identifying the corresponding collection device that detects the same type of encryption data associated with the analysis function F) and decrypts the element-encrypted data of the same-type encrypted data when the detected same-type encrypted data has been transmitted to the collection device at a later time (S170). ≪ / RTI >

More specifically, when the analysis server 300 receives an information request message (analysis function F) for requesting information on a specific user from the service providing apparatus 400, the analysis server 300 transmits an information request message (analysis function F) Data is detected.

At this time, the information request message (analysis function F) includes a search condition for searching for information on a specific user and detected encrypted data satisfying the search condition among the same type of encrypted data, that is, information for performing decoding on the element- Information identifying the collection device 200 ₁ -200 _n may be included in the form of a function.

In other words, the analysis server 300 uses the analysis function F to calculate the encrypted data (c1, c2, ..., cn) satisfying the retrieval condition among the same type of encrypted data for a specific user without decryption And generates an encrypted calculation result (C).

Here, the encrypted operation result (C) means collective group encryption that satisfies the search condition among the same type of encrypted data for a specific user.

Thereafter, the analysis server 300 transmits the encrypted calculation result C to the service providing apparatus 400 (S180).

The service providing apparatus 400 detects homogeneous encrypted data related to the information request message (analysis function F) from the analysis server 300, and when the detected homogenous encrypted data is transmitted to the collecting apparatus at a later time, (C) including information capable of identifying a corresponding collection device for performing decryption on the encrypted data (c1, c2, ..., cn) And obtains decoding results b1, ..., bn for the data.

More specifically, when the service providing apparatus 400 receives the encrypted operation result C from the analysis server 300, the service providing apparatus 400 transmits the encrypted operation result C to the information collecting apparatus 200 ₁ - 200 _n to request decryption of the decryptable element cipher data c1, c2, ..., cn from the corresponding collection apparatus (S190a).

That is, as described above, since the encrypted operation result includes the information about the corresponding information collecting device for performing the decryption on the element encrypted data, each information collecting device that receives the encrypted operation result is included in the same type of encrypted data And decrypts corresponding element encryption data that can be decrypted by itself among the element encryption data.

Thus, the service providing apparatus 400 does not transfer the decrypted data for the entirety of the same type of encrypted data to a specific user only by transmitting the encrypted calculation result C to the information collecting apparatuses 200 ₁ - 200 _n , Only the decryption result for the element-encrypted data included in the encrypted operation result is obtained from the information collecting apparatus.

At this time, since the information collecting apparatuses 200 ₁ -200 _n generate the encrypted data by applying the second encryption algorithm, the public key (hereinafter referred to as the HE public key pk) and the secret key Secret key ski).

The information collecting apparatuses 200 ₁ -200 _n decrypt the element encrypted data c 1, c 2, ... c _n using the HE secret key to obtain decryption results b 1, ..., b n .

Then, the information collecting apparatuses 200 ₁ -200 _{n transmit} the decoding results b 1, ..., bn for the element encrypted data c 1, c 2, ..., cn to the service providing apparatus 400 (S 190 b).

The service provider 430 provides services related to a specific user using the decryption results b1, ..., bn for the element encrypted data c1, c2, ..., cn.

That is, the service providing unit 430 applies the decryption result (b1, ..., bn) for the element encrypted data (c1, c2, ..., cn) to the service decision function G to provide recommendation information m. Then, the service providing unit 430 delivers the recommendation information m to the terminal of the specific user to provide the service.

Hereinafter, an example (for example, a real estate service) in which only a part of personal information is acquired in a cooperative manner through the calculation of encrypted personal information when providing a service using encrypted personal information to provide a service will be described with reference to FIG. 4 .

4, the personal information d1, .., dn generated in the process of using the personal information of the user who requested the real estate service, that is, the service provided by at least one company (e.g., hospital, financial institution, Will be described.

More specifically, the terminal 100 of the user who has requested the real estate service receives the personal information d1, .., dn (k) generated in the course of using the service provided by at least one company (e.g., hospital, financial institution, And then delivers it to the collection device 200 in at least one company (e.g., hospital, financial institution, telecommunications company, etc.).

Here, the personal information d1, ..., dn should be acquired to provide a real estate service (d1 = position), d2 (health), ... (dn = financial information).

At this time, the information collecting apparatus 200 ₁ receiving information of (d 1 = position) may be a communication company, and the information collecting apparatus 200 ₂ receiving information of (d 2 = health) dn = financial information), the information collection device (200 _n) for receiving information of a may be a financial institution.

…

)를 생성하며, 비밀키(k)에 대한 복호화 함수를 암호화하기 위해 제2 알고리즘을 적용하여 동형 복호화 함수(이하, 동형 복호화 함수)(Cpk)를 생성한다(S100-S120). 이후, 단말(100)은, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)를 수집장치(200)로 전달한다(S130). That is, the terminal 100 encrypts the private information d1, ..., dn using the secret key for the first encryption algorithm,

...

And generates a same type decryption function Cpk by applying a second algorithm to encrypt the decryption function for the secret key k in steps S100 to S120. Then, the terminal 100 transmits the symmetric key encryption data (

) And a homogeneous decryption function (

To the collecting device 200 (S130).

) 및 동형 복호화 함수(

)를 전달받는다. 수집장치(200)는, 대칭키 암호화 데이터(

) 및 동형 복호화 함수(

)에 제2 암호화 알고리즘을 적용하여 동형 암호화 데이터(

)를 생성한다. 이후, 수집장치(200)는, 동형 암호화 데이터(

)를 분석서버(300)로 전달한다(S140, S150).The collecting device 200 collects the symmetric key encryption data (d1 = location, d2 = health, ... dn = finance) necessary for receiving the real estate service from the terminal 100

) And a homogeneous decryption function (

). The collecting apparatus 200 receives the symmetric key encrypted data (

) And a homogeneous decryption function (

) To apply the same encryption algorithm (

). Thereafter, the collecting apparatus 200 transmits the same type of encrypted data (

To the analysis server 300 (S140, S150).

)를 수신한다. 한편, 분석서버(300)는, 동형 암호화 데이터를 이용하여 서비스를 제공하는 서비스제공장치(400)로부터 부동산 서비스를 요청한 사용자에 대한 정보를 요청하는 정보요청메시지(분석함수 F)를 수신한다(S160).The analysis server 300 receives the same type of encrypted data (for example,

). Meanwhile, the analysis server 300 receives an information request message (analysis function F) for requesting information on a user requesting a real estate service from the service providing apparatus 400 providing the service using the same type of encrypted data (S160 ).

Then, the analysis server 300 uses the analysis function F to decrypt the encrypted data (c1, c2, ..., cn) satisfying the retrieval condition among the same type of encrypted data for the user who requested the real estate service, To generate an encrypted calculation result (C). The analysis server 300 transmits the encrypted calculation result C to the service providing apparatus 400 (S170, S180).

The service providing apparatus 400 acquires decryption results b1, ..., bn for the element-encrypted data using the encrypted operation result C to provide the real-estate service.

That is, when the service providing apparatus 400 receives the encrypted operation result C from the analysis server 300, the service providing apparatus 400 transmits the encrypted operation result C to the information collecting apparatus 200 ₁ (e.g., a communication company) Collecting device 200 ₂ (eg hospital) ... Information collection device (200 _n) (e.g., financial institutions) by passing a request to decode for the collection decoding encrypted data elements in the device (c1, c2, ... cn) (S190a).

At this time, since the information collecting apparatuses 200 ₁ -200 _n generate the encrypted data by applying the second encryption algorithm, the public key (hereinafter referred to as the HE public key pk) and the secret key Secret key ski).

The information collecting apparatuses 200 ₁ -200 _n decrypt the element encrypted data c 1, c 2, ... c _n using the HE secret key to obtain decryption results b 1, ..., b n .

That is, the information collecting apparatuses 200 ₁ -200 _n need to acquire (d 1 = location), (d 2 = health), (b1, ..., bn) by performing decoding on the elementary-coded data (c1, c2, ... cn) corresponding to the elementary data (dn = financial information).

Then, the information collecting apparatuses 200 ₁ -200 _{n transmit} the decoding results b 1, ..., bn for the element encrypted data c 1, c 2, ..., cn to the service providing apparatus 400 (S 190 b).

The service providing apparatus 400 receives the decryption results b1, ..., bn, i.e., d1 = position, d2 = health, (dn = financial information) to the real estate service recommendation function G to generate the recommended property information m. Thereafter, the service providing apparatus 400 delivers the recommended sale information m to the terminal 100 of the user who has requested the real estate service, and provides the service.

Hereinafter, an operation method of the analysis server and the service providing apparatus according to the embodiment of the present invention will be described in detail with reference to FIG. 6 and FIG.

First, an operation method of the analysis server will be described in detail with reference to FIG. 6, it is assumed that the collecting apparatus 200 generates the same type of encryption data for a specific user by applying the second encryption algorithm to the symmetric key encryption data and the same type decryption function transmitted from the terminal 100 I will explain.

4 and 6, the receiving unit 310 of the analysis server 300 according to the embodiment of the present invention collects the same type of encrypted data generated by applying the second encryption algorithm to the personal information from the collecting device 200 . The received same type of encrypted data can be stored separately for each user.

Here, each of the isochronous encrypted data classified by users includes two or more element encrypted data. For example, if the same type of encrypted data of user A includes medical records, payroll details, communication fees, age, sex, name, etc., the medical records, payroll, communication charges, age, sex, Name, etc. correspond to the element encryption data.

Upon receiving the information request message requesting the information on the specific user from the service providing apparatus providing the service using the same type of encrypted data (S310), the generating unit 320 detects the isochronous encrypted data related to the information request message And generates an encrypted operation result including information for identifying a corresponding collection device that performs decryption on the element-encrypted data of the same-type encrypted data when the detected same-type encrypted data is transmitted to the collecting device in operation S320.

More specifically, when the generating unit 320 receives an information request message for requesting information on a specific user from the service providing apparatus 400, the generating unit 320 detects the same type of encrypted data associated with the information request message.

At this time, the information request message includes a retrieval condition for retrieving information about a specific user, and an information collecting apparatus 200 ₁ for decrypting the detected encrypted data satisfying the retrieval condition among the same type of encrypted data, that is, -200 _n ) can be included in the function form. Hereinafter, the function included in the information request message will be described as an analysis function.

That is, the generation unit 320 generates an encrypted operation result by performing an operation between encrypted information without decryption of the element-encrypted data satisfying the retrieval condition among the same type of encrypted data for a specific user using the analysis function .

Then, the generating unit 320 transmits the encrypted calculation result to the providing unit 330.

The providing unit 330 transfers the encrypted operation result to the service providing apparatus 400 in operation S330 and obtains the decryption result for the element encrypted data using the operation result encrypted in the service providing apparatus 400 .

Next, an operation method of the service providing apparatus will be described in detail with reference to FIG. In FIG. 7, it is assumed that the analysis server 300 generates and stores homogeneous encryption data for a specific user using the symmetric key encryption data and the homogeneous decryption function transmitted from the collecting device 200.

4 and 7, the generating unit 410 of the service providing apparatus 400 according to the embodiment of the present invention includes an information request requesting information about a specific user to provide a service using the same- Message (S400).

That is, the generator 410 generates an information collection apparatus 200 ₁ - 200 _n that can decrypt the element-encrypted data satisfying the retrieval condition among the identical-type encrypted data and the retrieval condition for retrieving the information about the specific user And generates an information request message including an analysis function so that it can be confirmed.

Here, the search condition is a condition for detecting the element-coded data necessary for providing the service among the same type of encrypted data for a specific user, and the condition may be changed according to the type and characteristics of the service provided by the service providing apparatus.

On the other hand, the acquiring unit 420 acquires the same-type encrypted data related to the information request message from the analysis server 300, and when the detected identical-type encrypted data is transmitted to the collecting apparatus at a later time, After receiving the encrypted operation result including the information for identifying the collection device performing the decryption, the decryption result for the element encrypted data is obtained using the encrypted operation result after receiving the encrypted operation result.

More specifically, the obtaining unit 420 receives the encrypted calculation result from the analysis server 300 (S410), and transmits the encrypted calculation result to the information collecting apparatuses 200 ₁ -200 _{n in the} collecting apparatus 200 And requests decryption of the decryptable element-encrypted data in the collection device (S420).

That is, as described above, since the encrypted operation result includes the information about the corresponding information collecting device for performing the decryption on the element encrypted data, each information collecting device that receives the encrypted operation result is included in the same type of encrypted data And decrypts corresponding element encryption data that can be decrypted by itself among the element encryption data.

Thus, the decryption unit 420 may not decrypt the entirety of the same type of encrypted data for a specific user by simply transmitting the result of the encrypted calculation to the information collecting apparatuses 200 ₁ -200 _n , Only the decryption result for the element encryption data included in the result is acquired from the information collecting apparatus.

At this time, since the information collecting apparatuses 200 ₁ -200 _n generate the encrypted data by applying the second encryption algorithm, the public key (hereinafter referred to as the HE public key) and the secret key Key) is preferably stored.

Accordingly, the information collecting apparatuses 200 ₁ -200 _n can decrypt and transmit the element-encrypted data using the HE secret key. Thereafter, the acquiring unit 420 notifies the service providing unit 430 that the decryption result for the element-encrypted data has been received.

The service providing unit 430 provides a service related to a specific user by using the decryption result for the element encrypted data (S430).

That is, the service providing unit 430 applies the decryption result for the element-encrypted data to the service decision function to generate recommendation information for the service to be provided. Then, the service provider 430 delivers the recommendation information to the terminal of the specific user.

As described above, according to the present invention, a single exclusive brokerage server does not distribute all personal information of a user exclusively or provide services by allocating usage rights, When the result of the encrypted operation computed while being encrypted is received from the server, the result of partially decrypting only a part of the personal information for providing the service, rather than the whole decryption of the personal information, By providing the service, it is possible to prevent the exclusive right of the personal information, and it is possible to provide the service using the personal information only by cooperation of a plurality of devices, so that it is possible to maximize the security.

Embodiments of the present invention may be implemented in the form of program instructions that may be executed through various computer means and recorded on a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions recorded on the medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

According to an operation method of an analysis server and an analysis server, a service providing apparatus, and an operation method of an apparatus for providing service in a communication environment for protecting personal information in a cooperative manner according to the present invention, Since only some personal information is acquired in a cooperative manner through calculation between the information and the service is provided, as the existing technology is overcome, it is possible to use a device which is not only used for the related technology, This is an invention that is industrially applicable because it is practically possible to carry out clearly.

100: terminal 200:
300: Analysis server
310: Receiving unit 320:
330: Offering
400: Service providing device
410: Generation unit 420:
430: Service Offering

Claims (10)

A receiving unit for receiving encrypted data obtained by encrypting private information from a collecting device;
And a control unit for detecting encrypted data related to the information request message when receiving an information request message requesting information on a specific user from a service providing apparatus for providing a service related to the encrypted data, A generating unit for generating an encrypted calculation result including information for identifying the device; And
And providing the result of the encrypted operation to the service providing apparatus so that the service providing apparatus can obtain a decryption result for the detected encrypted data using the encrypted operation result,
Wherein the analysis server comprises: The method according to claim 1,
The information request message includes:
And a search condition for searching for information on the specific user,
The detected encrypted data is encrypted,
Wherein the encrypted data is element encrypted data satisfying the search condition among two or more element encrypted data included in the encrypted data. 3. The method of claim 2,
Wherein the generation unit comprises:
Wherein the analysis server generates an encrypted operation result by performing an operation between encrypted information without a decryption process on the detected encrypted data. The method of claim 3,
Characterized in that the encryption algorithm applied to the encryption data is the same and is based on a homomorphic encryption technique capable of operation between encrypted information. A generating unit generating an information request message for requesting information about a specific user to provide a service using encrypted data obtained by encrypting private information;
And a control unit operable to detect encrypted data associated with the information request message and to receive a result of the encrypted operation including information for identifying a collection device for decrypting the detected encrypted data, An obtaining unit obtaining a decoding result for the data; And
A service providing unit for providing a service related to the specific user using the decoded result,
The service providing apparatus comprising: 6. The method of claim 5,
The information request message includes:
And a search condition for searching for information on the specific user,
The detected encrypted data is encrypted,
Wherein the element data is element-encrypted data that satisfies the search condition among two or more element-encrypted data included in the encrypted data. The method according to claim 6,
Wherein the obtaining unit comprises:
And transmits the encrypted calculation result to the collecting device to receive a decryption result for the element encrypted data satisfying the retrieval condition. A receiving step of receiving encrypted data obtained by encrypting private information from a collecting device;
And a control unit for detecting encrypted data related to the information request message when receiving an information request message requesting information on a specific user from a service providing apparatus for providing a service related to the encrypted data, A generation step of generating an encrypted calculation result including information for identifying the device; And
Providing a result of the encrypted operation to the service providing apparatus and obtaining a decryption result for the detected encrypted data using the encrypted operation result in the service providing apparatus;
The method comprising the steps of: 9. The method of claim 8,
The information request message includes:
And a search condition for searching for information on the specific user,
The detected encrypted data is encrypted,
Wherein the encrypted data is element encrypted data satisfying the search condition among two or more element encrypted data included in the encrypted data. A generating step of generating an information request message for requesting information on a specific user to provide a service using encrypted data obtained by encrypting private information;
And a control unit operable to detect encrypted data associated with the information request message and to receive a result of the encrypted operation including information for identifying a collection device for decrypting the detected encrypted data, An obtaining step of obtaining a decoding result for the data; And
And a providing step of providing a service related to the specific user using the decoding result
And transmitting the service request to the service providing apparatus.

Images