Personal information protection device and protection method aiming at digital hacker attack

Abstract

The present invention relates to a personal information protection device and protection method against digital hacker attacks, the personal information protection method according to the present invention comprising: a first step of rooting a victim terminal that has encountered digital hacker attacks to obtain an administrator permission, and installing a dedicated application on the victim terminal; a second step of analyzing data packet information of rogue software installed on the victim terminal to extract information of a rogue server; a third step of analyzing the actual data stored in the victim terminal, continuously generating false data of contacts, names, email address books and various images in the same or similar form as the actual data, and storing the false data in the victim terminal; and a fourth step of continuously transmitting the false data to the harming server through the victim terminal so that the harming server cannot recognize the personal information of the victim.

Description

Technical Field

[0001] The present invention relates to a personal information protection device and a protection method against digital hacker attacks, and more specifically, to a personal information protection device and a protection method against digital hacker attacks, which can protect personal information stolen by digital hacker attacks by continuously transmitting false data generated by generative artificial intelligence (AI) to an attacker server, thereby hindering the data collection of the attacker server and making it impossible for the attacker to identify the actual data of the victim. Background Art

[0002] In recent years, the spread of communication terminal devices that perform smartphone functions using mobile operating systems such as Windows Mobile, i-OS, and Android has been very active.

[0003] The communication terminal device using this mobile operating system runs various applications based on the mobile operating system to provide various information processing services to users.

[0004] In addition, the communication terminal device using the mobile operating system also installs a browser as an application program, which communicates with Internet websites by running the browser to provide users with information from various websites.

[0005] Communication terminal devices such as smartphones that use this mobile operating system are exposed to digital hacker attacks using malware and the like.

[0006] Malware refers to malicious software, including all software that infringes on the interests of users. Malware includes all forms from simple computer worms and Trojans to the most complex forms of computer viruses, which not only affect the infected terminal, but also other terminals that communicate with the infected terminal.

[0007] The leakage of personal information caused by this kind of rogue software is becoming more and more common, and the losses it causes are also increasing.

[0008] In order to solve such a problem, various security technologies have been proposed, but when personal information is leaked through digital hacker attacks by such malicious software, it is necessary to develop a technology that can neutralize the leakage of personal information.

[0009] Prior art literature

[0010] Patent Literature

[0011] (Patent Document 1) Korean Patent Gazette No. 10-2197005 (December 23, 2020) Summary of the invention

[0012] 1. Technical issues to be resolved

[0013] Therefore, an object of the present invention is to provide a personal information protection device and method against digital hacker attacks that can overcome the above-mentioned problems in the prior art.

[0014] Another object of the present invention is to provide a personal information protection device and method against digital hacker attacks, which generates false data and continuously transmits it to the attacker's server, thereby hindering the attacker's data collection and making it impossible for the attacker to identify the victim's actual data, thereby protecting personal information stolen by digital hacker attacks.

[0015] (II) Technical solution

[0016] According to an implementation scheme of the present invention, in order to solve some of the above-mentioned technical problems, the personal information protection method according to the present invention includes: a first step of rooting a victim terminal that has been attacked by digital hackers to obtain administrator privileges and install a dedicated application on the victim terminal; a second step of analyzing the packet information of the rogue software installed on the victim terminal to extract information of the victim server; a third step of analyzing the actual data stored in the victim terminal, continuously generating false data of contacts, names, email address books and various images in the same or similar form as the actual data, and storing them in the victim terminal; and a fourth step of continuously transmitting the false data to the victim server through the victim terminal so that the victim server cannot recognize the victim's personal information.

[0017] The first step or the second step may further include a step of deactivating the rogue software, and in the fourth step, the transmission of the false data may be performed by activating the rogue software.

[0018] The first step or the second step may further include a step of deactivating the rogue software. In the fourth step, the transmission of the false data may be performed by running a separate simulation application embedded in the dedicated application to directly transmit the false data to the victim server.

[0019] The false data in the third step may be generated using generative AI so that it has no specific pattern and no similarity in content.

[0020] According to an implementation scheme of the present invention, in order to solve some of the above-mentioned technical problems, the personal information protection method according to the present invention includes: a first step of rooting an unregistered terminal to obtain administrator privileges, and changing the unique identification code (IMEI) to the unique identification code (IMEI) of a victim terminal that has been attacked by digital hackers to synchronize the unregistered terminal with the victim terminal; a second step of analyzing the packet information of the rogue software installed on the victim terminal to extract the information of the victim server; a third step of analyzing the actual data stored in the victim terminal, continuously generating false data of contacts, names, email address books and various images in the same or similar form as the actual data, and storing them in the unregistered terminal; and a fourth step of continuously transmitting the false data to the victim server through the unregistered terminal so that the victim server cannot recognize the victim's personal information.

[0021] The first step or the second step may further include a step of deactivating the rogue software. In the fourth step, the transmission of the false data may be performed by running a separate simulation application on the unregistered terminal and directly transmitting the false data to the victim server based on the victim server information.

[0022] The false data in the third step may be generated using generative AI so that it has no specific pattern and no similarity in content.

[0023] According to an implementation scheme of the present invention, in order to solve some of the above-mentioned technical problems, the personal information protection device according to the present invention includes: an information collection unit, which is rooting a victim terminal or an unregistered terminal that has been attacked by digital hackers to obtain administrator privileges, and analyzes the packet information of the rogue software installed on the victim terminal to extract information of the victim server; a false data generation unit, which analyzes the actual data stored in the victim terminal, continuously generates false data of contacts, names, email address books and various images in the same or similar form as the actual data, and stores them in the victim terminal or the unregistered terminal; and an information protection unit, which continuously transmits the false data to the victim server through the victim terminal or the unregistered terminal so that the victim server cannot recognize the victim's personal information.

[0024] When the information collecting unit rooting the unregistered terminal to obtain administrator privileges, the unique identification code (IMEI) of the unregistered terminal may be changed to the unique identification code (IMEI) of a victim terminal that has been attacked by digital hackers to synchronize the unregistered terminal with the victim terminal.

[0025] The victim server information may include server address, port, and protocol.

[0026] (III) Beneficial effects

[0027] The advantages of the present invention are that, by continuously transmitting false data generated by generative AI to the attacker server, the data collection of the attacker server is hindered, and the attacker cannot identify the actual data of the victim, thereby protecting personal information stolen by digital hacking. In addition, by using an unregistered terminal and disguising it as a victim terminal to transmit false data, the data collection of the attacker server is hindered, and the attacker cannot identify the actual data of the victim, thereby protecting personal information. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 is a schematic block diagram of a personal information protection device according to a first embodiment of the present invention.

[0029] Figure 2 yes Figure 1 Operation flow chart of the personal information protection device.

[0030] Figure 3 is a schematic block diagram of a personal information protection device according to a second embodiment of the present invention.

[0031] Figure 4 yes Figure 3 Operation flow chart of the personal information protection device.

[0032] Description of reference numerals:

[0033] 110: Information Collection Department

[0034] 120: False data generation department

[0035] 130: Information Protection Department

[0036] 200: Victim terminal

[0037] 250: Unregistered terminal

[0038] 300: Server compromised DETAILED DESCRIPTION

[0039] The preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings, which is intended to enable those skilled in the art to fully understand the present invention without any other intention.

[0040] Figure 1 is a schematic block diagram of a personal information protection device according to a first embodiment of the present invention.

[0041] like Figure 1 As shown, the personal information protection device 100 according to the first embodiment of the present invention is intended to identify the victim server 300 to hinder the data collection of the victim server, making it difficult for the perpetrator to identify the victim's actual personal information, so as to protect the personal information that has been or is being leaked from the victim terminal 200.

[0042] The victim terminal 200 may be any one of a desktop terminal, a laptop computer, a tablet computer and a smart phone terminal. In the present invention, a smart phone will be taken as an example for description.

[0043] The personal information protection device 100 includes an information collection unit 110 , a false data generation unit 120 and an information protection unit 130 .

[0044] The information collection unit 110 is rooted in a victim terminal 200 that is being or has been attacked by digital hackers and whose personal information has been leaked, to obtain administrator privileges, install a dedicated application (hereinafter referred to as "dedicated application (APP)") on the victim terminal, and analyze the packet information of the malware installed on the victim terminal to extract information about the attacker server 300.

[0045] If the victim terminal 200 is rooted, the administrator privileges can be directly obtained, so that various system overclocking and global ROM customize can be realized. By installing a custom ROM, the existing operating system can be replaced, and by utilizing an external memory, the capacity can be greatly increased, so that a large amount of data can be stored. The system files can be modified by accessing the system files. After rooting, a dedicated application (APP) can also be easily installed on the victim terminal 200 to explore various response plans.

[0046] The information collection unit 110 can use a packet capture utility (e.g., a capture program such as WireShark) to capture and analyze the data packets of the rogue software to track the address of the rogue software server, i.e., the victim server 300, thereby obtaining the address and protocol. That is, the victim server 300 or the socket server of the victim server 300 can be identified by analyzing the data packets of the phishing file. The victim server information may include the server address, port, protocol, etc.

[0047] The false data generating unit 120 analyzes the actual data stored in the victim terminal 200 , continuously generates false data of contacts, names, email address books and various images in the same or similar form as the actual data, and stores them in the victim terminal 200 .

[0048] The fake data can be generated using generative AI so that it does not have a specific pattern and the content does not have similarity. For example, it can include an express-based ai_generator program generated using chatGPT-based AI.

[0049] For names, the false data generation unit 120 generates multiple names in a form similar to the names stored in the victim terminal 200 (for example, 2-3 character Korean names, etc.). For e-mails, an ID with a random character combination can be generated by randomly selecting a domain name by determining the domain name risk. For e-mails, it can be generated using AI or a separate algorithm. In addition, for phone numbers (contacts), they can also be randomly generated in the same way, with each digit being generated by a random number combination. For images, a specified number of various meaningless images are generated and stored through generative AI. In addition, various types of false data in a form similar to the names can also be generated based on various personal information stored in the victim terminal (for example, resident registration card numbers, account numbers, various passwords, etc.).

[0050] In the present invention, unlike the prior art, generative AI is used to generate false data. If dummy data is directly created manually without using generative AI, the data is artificially created, so there must be a specific pattern, and since the amount of data itself will increase, similar data may be blocked and deleted in the attacker server 300 over time. If generative AI is used, since new data in a form similar to the actual data is continuously generated, it is impossible for the attacker to distinguish the similarity of specific patterns or content.

[0051] The information protection unit 130 may continuously or repeatedly transmit the false data to the victim server 300 through the victim terminal 200, so that the victim server 300 cannot recognize the victim's personal information.

[0052] For example, by re-activating the apk (Android Application Package) file received from the perpetrator, the false data is automatically transmitted to the perpetrator server 300, making it difficult to identify the data, thereby actually forging the victim's personal information. From the perspective of the perpetrator server 300, the victim is identified by the unique identification code (IMEI), and since the new data is transmitted from the terminal with the same unique identification code, the actual victim information cannot be identified.

[0053] Here, the apk file, i.e., the rogue software, received from the perpetrator may be deactivated before the false data is generated, and reactivated to transmit the false data when the false data is transmitted after the false data is generated. Different from this, the apk file, i.e., the rogue software, received from the perpetrator may be deactivated before the false data is generated, and when the false data is transmitted after the false data is generated, the false data may be directly transmitted to the perpetrator server 300 by running a separate simulation application embedded in the dedicated application (APP).

[0054] If false data is transmitted to the address of the victim server 300 based on the victim server information acquired by the information collecting unit 110, it is difficult for the victim server 300 to identify the actual data of the victim. Therefore, the personal information of the victim can be protected.

[0055] Figure 2 is based on Figure 1 1 is an operation flow chart of the personal information protection device 100 according to the first embodiment of the present invention.

[0056] like Figure 2 As shown, according to the first embodiment of the personal information protection method using the personal information protection device 100 of the present invention, first identify the victim terminal 200 that is being attacked by digital hackers or has been attacked by digital hackers, root the victim terminal 200 to obtain administrator privileges, and install and enable a dedicated application (APP) on the victim terminal 200 (S110).

[0057] Next, a packet analysis program such as a packet capture tool is used to analyze the packet information of the rogue software installed on the victim terminal 200 to extract the information of the victim server (S112). The address, port, protocol and other information of the victim server are extracted and a database is established. At this point, the rogue software installed on the victim terminal 200 can be deactivated.

[0058] Thereafter, the actual data stored in the victim terminal 200 is analyzed, and false data of contacts, names, email address books, and various images in the same or similar form as the actual data is continuously generated and stored in the victim terminal 200 (S114). At this time, the actual data of the victim terminal 200 is deleted in advance or stored in a separate storage such as a cloud.

[0059] In addition, the victim terminal 200 continuously or repeatedly transmits the false data to the victim server 300 so that the victim server 300 cannot recognize the victim's personal information, thereby protecting the victim's personal information ( S116 ).

[0060] The transmission of the false data may be performed by activating the rogue software, or by running a separate simulation application embedded in the dedicated application (APP) to directly transmit the false data to the victim server 300 .

[0061] Figure 3 is a schematic block diagram of a personal information protection device according to a second embodiment of the present invention.

[0062] like Figure 3 As shown, the personal information protection device 100 according to the second embodiment of the present invention is intended to utilize an unregistered terminal 250 and identify an aggressor server 300 to hinder data collection by the aggressor server, making it difficult for the aggressor to identify the actual personal information of the victim, so as to protect personal information that has been or is being leaked from the victim terminal 200.

[0063] The victim terminal 200 and the unregistered terminal 250 may be any one of a desktop terminal, a laptop computer, a tablet computer and a smart phone terminal. The present invention will be described by taking a smart phone as an example.

[0064] The unregistered terminal 250 may also be referred to as an unused device, and may refer to a terminal that is not registered with a communication company.

[0065] According to the second embodiment of the present invention, the personal information protection device 100 includes an information collection unit 110, a false data generation unit 120 and an information protection unit 130, which obtains administrator privileges by rooting an unregistered terminal 250 to replace the victim terminal 200, and disguises the unregistered terminal 250 as the victim terminal 200.

[0066] The information collecting unit 110 roots the unregistered terminal 250 to obtain administrator privileges, installs a dedicated application (APP) on the unregistered terminal 250 , and changes the unique identification code (IMEI) to be the same as the IMEI of the victim terminal 200 to synchronize the unregistered terminal 250 with the victim terminal 200 .

[0067] In addition, the data packet information of the rogue software installed on the victim terminal 200 is analyzed to extract the information of the harming server 300 .

[0068] The information collection unit 110 can use a packet capture tool (e.g., a capture program such as Wire Shark) to capture and analyze the data packets of the rogue software to track the address of the rogue software server, i.e., the victim server 300, thereby obtaining the address and protocol. That is, the victim server 300 or the socket server of the victim server 300 can be identified by analyzing the data packets of the phishing file. The victim server information may include the server address, port, protocol, etc.

[0069] The false data generation unit 120 analyzes the actual data stored in the victim terminal 200 , continuously generates false data of contacts, names, email address books and various images in the same or similar form as the actual data, and stores it in the unregistered terminal 250 .

[0070] The fake data can be generated using generative AI so that it does not have a specific pattern and the content does not have similarity. For example, it can include an express-based ai_generator program generated using chatGPT-based AI.

[0071] For names, the false data generation unit 120 generates multiple names in a form similar to the names stored in the victim terminal 200 (for example, 2-3 character Korean names, etc.). For e-mails, an ID with a random character combination can be generated by randomly selecting a domain name by determining the domain name risk. For e-mails, it can be generated using AI or a separate algorithm. In addition, for phone numbers (contacts), they can also be randomly generated in the same way, with each digit being generated by a random number combination. For images, a specified number of various meaningless images are generated and stored through generative AI. In addition, various types of false data in a form similar to the names can also be generated based on various personal information stored in the victim terminal (for example, resident registration card numbers, account numbers, various passwords, etc.).

[0072] In the present invention, unlike the prior art, false data is generated by generative AI. If virtual data is directly created manually without generative AI, the data is created manually and therefore has a specific pattern. Moreover, since the amount of data itself increases, similar data may be divided and deleted in the attacker server 300 over time. If generative AI is used, since new data in a form similar to the actual data is continuously generated, it is impossible for the attacker to distinguish the similarity of a specific pattern or content.

[0073] The information protection unit 130 may continuously or repeatedly transmit the false data to the victim server 300 through the unregistered terminal 250 so that the victim server 300 cannot recognize the victim's personal information.

[0074] For example, by re-activating the apk (Android Application Package) file received from the perpetrator, the false data is automatically transmitted to the perpetrator server 300, making it difficult to identify the data, thereby actually forging the victim's personal information. From the perspective of the perpetrator server 300, the victim is identified by the unique identification code (IMEI), and even if new data is transmitted from the unregistered terminal 250, it will be identified as the victim's data because the IMEI is the same, so the actual victim information cannot be identified.

[0075] Here, the transmission of the false data can be performed by directly transmitting the false data to the victim server 300 by running a separate simulation application embedded in the dedicated application (APP) of the unregistered terminal 250. If the false data is transmitted to the address of the victim server 300 based on the victim server information acquired by the information collecting unit 110, it is difficult for the victim server 300 to identify the actual data of the victim. Therefore, the personal information of the victim can be protected.

[0076] Figure 4 is based on Figure 3 1 is an operation flow chart of the personal information protection device 100 according to the second embodiment of the present invention.

[0077] like Figure 4 As shown, according to the second embodiment of the personal information protection method using the personal information protection device 100 of the present invention, first identify the victim terminal 200 that is being attacked by digital hackers or has been attacked by digital hackers, root a separate unregistered terminal 250 to obtain administrator privileges, and install and enable a dedicated application (APP) on the unregistered terminal 250 (S150).

[0078] Next, a packet analysis program such as a packet capture tool is used to analyze the packet information of the rogue software installed on the victim terminal 200 to extract information of the victim server 300 (S152). The address, port, protocol and other information of the victim server are extracted and a database is established.

[0079] Thereafter, the actual data stored in the victim terminal 200 is analyzed, and false data of contacts, names, email address books, and various images in the same or similar form as the actual data is continuously generated and stored in the unregistered terminal 250 (S154).

[0080] Furthermore, the unregistered terminal 250 continuously or repeatedly transmits the false data to the victim server 300 so that the victim server 300 cannot recognize the victim's personal information, thereby protecting the victim's personal information ( S156 ).

[0081] The false data may be transmitted by running a separate simulation application embedded in the dedicated application (APP) to directly transmit the false data to the victim server 300 .

[0082] As described above, the advantages of the present invention are that, by continuously transmitting false data generated by generative AI to the victim server, the data collection of the victim server is hindered, and the perpetrator cannot identify the actual data of the victim, thereby protecting personal information stolen by digital hacking. In addition, by using an unregistered terminal and disguising it as a victim terminal to transmit false data, the data collection of the victim server is hindered, and the perpetrator cannot identify the actual data of the victim, thereby protecting personal information.

[0083] The above description of the embodiments is only for the purpose of thoroughly understanding the present invention and is described by way of example with reference to the accompanying drawings, and should not be construed as limiting the present invention. In addition, it is obvious to a person skilled in the art that various changes and modifications may be made without departing from the basic principles of the present invention.

Claims

1. A method for protecting personal information, characterized in that: include: In the first step, the victim’s terminal that has been attacked by digital hackers is rooted to obtain administrator privileges and install a dedicated application on the victim’s terminal; The second step is to analyze the data packet information of the rogue software installed on the victim terminal to extract the information of the victim server; The third step is to analyze the actual data stored in the victim terminal, continuously generate false data of contacts, names, email address books and various images in the same or similar form as the actual data, and store them in the victim terminal; as well as The fourth step is to continuously transmit the false data to the victim server through the victim terminal so that the victim server cannot identify the victim's personal information.

2. The personal information protection method according to claim 1, characterized in that: The first step or the second step further comprises a step of deactivating the rogue software, In the fourth step, the transmission of the false data is performed by enabling the rogue software.

3. The personal information protection method according to claim 1, characterized in that: The first step or the second step further comprises a step of deactivating the rogue software, In the fourth step, the transmission of the false data is performed by running a separate simulation application embedded in the dedicated application to directly transmit the false data to the victim server.

4. The personal information protection method according to claim 1, characterized in that: The false data in the third step is generated using generative AI so that it has no specific pattern and the content has no similarity.

5. A method for protecting personal information, characterized in that: include: In a first step, the unregistered terminal is rooted to obtain administrator privileges, and a unique identification code is changed to a unique identification code of a victim terminal that has been digitally hacked to synchronize the unregistered terminal with the victim terminal; The second step is to analyze the data packet information of the rogue software installed on the victim terminal to extract the information of the victim server; The third step is to analyze the actual data stored in the victim terminal, continuously generate false data of contacts, names, email address books and various images in the same or similar form as the actual data, and store them in the unregistered terminal; as well as The fourth step is to continuously transmit the false data to the victim server through the unregistered terminal so that the victim server cannot identify the victim's personal information.

6. The personal information protection method according to claim 5, characterized in that: The first step or the second step further comprises a step of deactivating the rogue software, In the fourth step, the transmission of the false data is performed by running a separate simulation application on the unregistered terminal and directly transmitting the false data to the victim server based on the victim server information.

7. The personal information protection method according to claim 5, characterized in that: The false data in the third step is generated using generative AI so that it has no specific pattern and the content has no similarity.

8. A personal information protection device, characterized in that: include: The information collection department roots the victim terminal or unregistered terminal that has been attacked by digital hackers to obtain administrator privileges and analyzes the data packet information of the rogue software installed on the victim terminal to extract the information of the victim server; a false data generating unit that analyzes the actual data stored in the victim terminal, continuously generates false data of contacts, names, email address books, and various images in the same or similar form as the actual data, and stores the same in the victim terminal or the unregistered terminal; as well as The information protection unit continuously transmits the false data to the victim server through the victim terminal or the unregistered terminal so that the victim server cannot recognize the victim's personal information.

9. The personal information protection device according to claim 8, characterized in that: When the information collection unit roots the unregistered terminal to obtain administrator privileges, the unique identification code of the unregistered terminal is changed to the unique identification code of the victim terminal that has been attacked by digital hackers to synchronize the unregistered terminal with the victim terminal.

10. The personal information protection device according to claim 8, characterized in that: The victim server information includes server address, port, and protocol.

Images