Personal information sharing platform service provision system based on the right to transfer personal information

Abstract

A personal information sharing platform service providing system based on a personal information portability right is provided, and includes a platform service providing server including a user terminal which agrees to provide personal information for the use of personal information, inputs at least one type of personal information for the use of personal information, and sets a price for the at least one type of personal information, a requester terminal which requests personal information for the user terminal and views personal information of preset items included in the personal information within a preset information use period, and a consent storage unit which obtains consent to the provision of personal information for the use of personal information from the user terminal, a database unit which receives and stores at least one piece of personal information from the user terminal, an auction unit which sets a budget for using the at least one piece of personal information when the requester terminal requests at least one piece of personal information, and a period limiting unit which provides the personal information of the preset items of the at least one piece of personal information by specifying an information use period, which is a viewing limit, when the requester terminal wins the bid.

Description

[Technical field]

[0001] The present invention relates to a personal information sharing platform service providing system based on the right to transfer personal information, and provides a platform that obtains consent to the provision of personal information for the use of personal information, shares personal information and distributes profits, and reduces exposure to sensitive information to zero while limiting the period of information use with a secure number sunset type. [Background technology]

[0002] The right to information portability is the right of the data subject to request the transfer or transmission of information about himself / herself and to allow the personal information controller to use the information about him / her that is being processed. The right to information portability strengthens the data subject's control over personal information, guarantees the right to select services, and grants the data subject the right to use the information about himself / herself that is collected and managed by the personal information controller. It is an expansion and strengthening of the traditional right to request access to and copies of personal information. In Korea, the right to information portability is widely recognized as a means to promote the distribution and utilization of personal information, and in terms of legislative theory, it has been mainly discussed from the perspective of utilizing personal information rather than strengthening the rights of data subjects. In particular, since the right to information portability has been confused with the term "my data," it has been used as a justification for the distribution and sharing of personal information.

[0003] At this time, methods have been researched and developed to distribute profits to individuals when sharing personal information to generate profits. In this regard, prior art Korean Patent Publication No. 2022-0073899 (published on June 3, 2022) and Korean Patent Publication No. 2017-0045786 (published on April 28, 2017) disclose a configuration in which medical data is collected based on the user's consent on the user's device, and then generated as medical field my data through text mining and encryption, and metadata is separated from the my data and managed in a binarized manner, and medical information is utilized using the metadata, and a configuration in which personal information data is separated into metadata and personal data, and when shared, personal data is converted into shared data and sold, providing an intermediary platform.

[0004] However, in the former and latter cases, all personal information that is classified as Grade 1 information under the Personal Information Protection Act is removed by metadata and shared, resulting in the configuration of big data or my data, and is not a configuration that provides Grade 1 personal information that actual information users need the most. The right to information portability requires careful design because it poses a high risk of violating the privacy of the information subject and may infringe on the information property rights of the personal information processor. Therefore, data mining business is conducted by completely deleting, de-identifying, or anonymizing the information before providing it, but in this case, the value of utilizing personal information will drop sharply. The right to information portability may further deepen the serious problem of concentration and monopoly of personal information, may cause indiscriminate overseas transfer of public information, and may result in large platform companies and others only making profits by making the information subject bear the transfer costs, but it is possible that small and medium-sized enterprises will become even more starved of personal information. Therefore, research and development of a personal information sharing platform that can share personal information while protecting it is required. Summary of the Invention [Problem to be solved by the invention]

[0005] In one embodiment of the present invention, a system for providing a personal information sharing platform service based on a personal information transfer right may be provided, which obtains consent for providing personal information from a user terminal for use of the user's personal information, constructs a database, allows a requester terminal to inquire about a required object, and when uploading a request post on the requester terminal, displays information on the purpose of collecting and using personal information, items of personal information to be collected, and the period of holding and using personal information, and limits the period of information use for a phone number among personal information in a sunset type manner and provides a secure number to the requester terminal, thereby allowing a phone number to be set without specifying the phone number but limiting the period, and when a profit is generated from a successful bid on the requester terminal, allows the user terminal to check the remainder of the generated profit minus taxes and fees in a history log. However, the technical problems to be achieved by this embodiment are not limited to the above technical problems, and other technical problems may exist. [Means for solving the problem]

[0006] As a technical means for achieving the above-mentioned technical object, one embodiment of the present invention includes a platform service providing server including a user terminal which agrees to provide personal information for personal information use, inputs at least one type of personal information for personal information use, and sets a price for the at least one type of personal information, a requester terminal which requests personal information of the user terminal and views personal information of preset items included in the personal information within a preset information use period, and a consent storage unit which obtains consent to providing personal information for personal information use from the user terminal, a database unit which receives and stores at least one piece of personal information from the user terminal, an auction unit which sets a price for using the at least one piece of personal information when the at least one piece of personal information is requested at the requester terminal, and a period limiting unit which specifies an information use period, which is a viewing limit, for personal information of preset items among the at least one piece of personal information and provides it when the requester terminal wins the bid. Effect of the Invention

[0007] According to any one of the above-mentioned problem solving means of the present invention, a database is constructed by obtaining consent for providing personal information from a user terminal for use of the user's personal information, and the necessary objects can be inquired at the requester terminal. After that, when uploading a request post at the requester terminal, information is displayed to clearly indicate the purpose of collecting and using the personal information, the items of personal information to be collected, and the period of holding and using the personal information. By providing a sunset type safe number, the period of information use can be limited without specifying the phone number by providing a sunset type safe number. When revenue is generated as a result of a successful bid at the requester terminal, the remainder of the generated revenue excluding taxes and fees can be checked in a history log at the user terminal. [Brief description of the drawings]

[0008] [Figure 1] 1 is a diagram illustrating a system for providing a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention. [Diagram 2] 2 is a block diagram illustrating a platform service providing server included in the system of FIG. 1. [Diagram 3] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 4] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Diagram 5] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 6] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 7]1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 8] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 9] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 10] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 11] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 12] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 13] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 14] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 15] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 16] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 17] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 18]1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 19] 1 is a diagram illustrating an embodiment of a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention; [Figure 20] 4 is an operational flowchart illustrating a method for providing a personal information sharing platform service based on a personal information transfer right according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art to which the present invention pertains can easily carry out the present invention. However, the present invention may be embodied in various different forms and is not limited to the embodiments described herein. In order to clearly explain the present invention in the drawings, parts that are not related to the description are omitted, and similar parts are designated by similar reference numerals throughout the specification. Throughout the specification, when a part is described as being "connected" to another part, this includes not only when the part is "directly connected" to another part, but also when the part is "electrically connected" to another part via another element in between. Furthermore, when a part is described as "comprising" a certain component, this does not mean excluding other components, but may further include other components, unless otherwise specified to the contrary, and is understood not to preclude the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts, or combinations thereof. The terms "about," "substantially," and the like, as used throughout the specification, when the manufacturing and material tolerances inherent in the stated meaning are given, are used in the sense of a numerical value or close to that numerical value, and are used to prevent an unscrupulous infringer from taking unfair advantage of the disclosure in which precise or absolute numerical values ​​are stated to aid in the understanding of the present invention. The terms "steps of" or "steps of" as used throughout the specification of the present invention do not mean "steps for".

[0010] In this specification, the term "module" includes a unit implemented by hardware, a unit implemented by software, and a unit implemented by both. Also, one unit may be implemented by using two or more pieces of hardware, and two or more units may be implemented by one piece of hardware. Meanwhile, the term "module" is not limited to software or hardware, and the "module" may be configured to be in an addressable storage medium or to execute one or more processors. Thus, as an example, the "module" includes components such as software components, object-oriented software components, class components, and task components, as well as processes, functions, attributes, procedures, subroutines, program code segments, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The components and functions provided within the "module" may be combined into a smaller number of components and "modules" or further separated into additional components and "modules". Moreover, the components and "modules" may be embodied to execute one or more CPUs within a device or a security multimedia card. Some of the operations and functions described herein as being performed by a terminal, apparatus, or device may instead be performed by a server connected to the terminal, apparatus, or device. Similarly, some of the operations and functions described herein as being performed by a server may instead be performed by a terminal, apparatus, or device connected to the server.

[0011] In this specification, some of the operations or functions described in terms of mapping or matching with a terminal may be interpreted as mapping or matching a terminal's unique number or personal identification information, which is identifying data of the terminal.

[0012] The present invention will now be described in detail with reference to the accompanying drawings.

[0013] Fig. 1 is a diagram for explaining a personal information sharing platform service providing system based on a right to transfer personal information according to an embodiment of the present invention. Referring to Fig. 1, the personal information sharing platform service providing system 1 based on a right to transfer personal information may include at least one user terminal 100, a platform service providing server 300, and at least one requester terminal 400. However, such a personal information sharing platform service providing system 1 based on a right to transfer personal information in Fig. 1 is merely one embodiment of the present invention, and the present invention should not be limited by Fig. 1.

[0014] At this time, each component in Fig. 1 is generally connected through a network (Network 200). For example, as shown in Fig. 1, at least one user terminal 100 may be connected to a platform service providing server 300 through the network 200. And, the platform service providing server 300 may be connected to at least one user terminal 100 and at least one requester terminal 400 through the network 200. And, at least one requester terminal 400 may be connected to the platform service providing server 300 through the network 200.

[0015] Here, a network refers to a connected structure that allows information to be exchanged between multiple nodes such as terminals and servers. Examples of such networks include a local area network (LAN), a wide area network (WAN), the Internet (WWW), wired / wireless data communication networks, telephone networks, and wired / wireless television communication networks. Examples of wireless data communication networks include, but are not limited to, 3G, 4G, 5G, 3GPP (registered trademark) (3rd Generation Partnership Project), 5GPP (5th Generation Partnership Project), LTE (Long Term Evolution), WIMAX (World Interoperability for Microwave Access), Wi-Fi, the Internet, LAN (Local Area Network), Wireless LAN (Wireless Local Area Network), WAN (Wide Area Network), PAN (Personal Area Network), RF (Radio Frequency), Bluetooth (registered trademark) network, NFC (Near-Field Communication) network, satellite broadcasting network, analog broadcasting network, DMB (Digital Multimedia Broadcasting) network, etc.

[0016] In the following, the term "at least one" is defined as a term including singular and plural, and it is obvious that even if the term "at least one" is not present, each component can exist in singular or plural and can mean singular or plural. In addition, it can be said that each component can be provided in singular or plural depending on the embodiment.

[0017] At least one user terminal 100 may be a terminal of a user who agrees to provide personal information by using a web page, an app page, a program, or an application related to the personal information sharing platform service based on the right to transfer personal information and uploads the personal information for use. The user terminal 100 may be a terminal that receives a share of profits obtained by using the personal information from the platform service providing server 300.

[0018] Here, at least one user terminal 100 may be implemented as a computer that can connect to a remote server or terminal through a network. Here, the computer may include, for example, a notebook computer, a desktop, a laptop, etc. equipped with a navigation system and a web browser. At this time, at least one user terminal 100 may be implemented as a terminal that can connect to a remote server or terminal through a network. At least one user terminal 100 may be, for example, a wireless communication device that ensures portability and mobility, and may include all kinds of handheld-based wireless communication devices such as navigation, PCS (Personal Communication System), GSM (Global System for Mobile communications), PDC (Personal Digital Cellular), PHS (Personal Handyphone System), PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication)-2000, CDMA (Code Division Multiple Access)-2000, W-CDMA (W-Code Division Multiple Access), Wibro (Wireless Broadband Internet) terminals, smartphones, smartpads, tablet PCs, etc.

[0019] The platform service providing server 300 may be a server that provides a personal information sharing platform service web page, app page, program, or application based on the right to transfer personal information. The platform service providing server 300 may be a server that obtains consent to the provision of personal information for the use of personal information from at least one user terminal 100, and constructs a database by receiving at least one type of personal information for the use of personal information. The platform service providing server 300 may be a server that allows the requester terminal 400 to search for personal information with desired conditions, allows the requester terminal 400 to upload a request post specifying the purpose, scope, use, and period of use for the use of personal information, and allows the requester terminal 400 to set a price when using personal information. In this case, the platform service providing server 300 may be a server that provides personal information to the requester terminal 400 when a bid is won. The platform service providing server 300 may be a server that settles the remainder of the profits generated in the auction, minus taxes and fees, to the user terminal 100. In addition, the platform service providing server 300 may be a server that not only applies a secure number to the phone number among personal information, but also provides the information in a sunset type to limit the period of use, and in order to prevent abusing of the user terminal 100, when advertisements, etc. are sent to the requester terminal 400 by e-mail or mail, the server may provide rewards such as points only after the user enters evidence that the advertisements have been opened.

[0020] Here, the platform service providing server 300 may be implemented as a computer that can connect to a remote server or terminal through a network. Here, the computer may include, for example, a notebook computer, a desktop computer, a laptop computer, etc. equipped with a navigation system and a web browser.

[0021] At least one requester terminal 400 may be a terminal of an individual or a company who wishes to use personal information by using a web page, an app page, a program, or an application related to the personal information sharing platform service based on the right to transfer personal information. The requester terminal 400 may be a terminal that searches whether the desired target information exists, and if it is successful, pays the winning bid and uses the personal information.

[0022] Here, at least one requester terminal 400 may be implemented as a computer that can connect to a remote server or terminal through a network. Here, the computer may include, for example, a notebook computer, desktop, or laptop equipped with a navigation system or a web browser. At this time, at least one requester terminal 400 may be implemented as a terminal that can connect to a remote server or terminal through a network. At least one requester terminal 400 may be, for example, a wireless communication device that ensures portability and mobility, and may include all kinds of handheld-based wireless communication devices such as navigation, PCS (Personal Communication System), GSM (Global System for Mobile communications), PDC (Personal Digital Cellular), PHS (Personal Handyphone System), PDA (Personal Digital Assistant), IMT (International Mobile Telecommunication)-2000, CDMA (Code Division Multiple Access)-2000, W-CDMA (W-Code Division Multiple Access), Wibro (Wireless Broadband Internet) terminals, smartphones, smartpads, tablet PCs, etc.

[0023] Figure 2 is a block diagram illustrating a platform service providing server included in the system of Figure 1, and Figures 3 to 19 are diagrams illustrating an embodiment of a personal information sharing platform service based on personal information transfer rights in accordance with one embodiment of the present invention.

[0024] Referring to FIG. 2, the platform service providing server 300 may include a consent storage unit 310, a database creation unit 320, an auction unit 330, a time limit unit 340, a sunset number providing unit 350, an abusing prevention unit 360, a request posting management unit 370, an information providing unit 380, a sending / receiving indication unit 390, and a current revenue status unit 391.

[0025] When the platform service providing server 300 according to an embodiment of the present invention or another server (not shown) operating in conjunction therewith transmits a personal information sharing platform service application, program, application page, web page, etc. based on a personal information transfer right to at least one user terminal 100, at least one requester terminal 400, and at least one information providing server 500, at least one user terminal 100 and at least one requester terminal 400 may install or open a personal information sharing platform service application, program, application page, web page, etc. based on a personal information transfer right. In addition, a service program may be driven in at least one user terminal 100 and at least one requester terminal 400 using a script executed in a web browser. Here, the web browser is a program that enables the use of a web (WWW) service, and refers to a program that receives and displays hypertext described in HTML (Hyper Text Mark-up Language), and includes, for example, Netscape, Explorer, Chrome, etc. In addition, an application refers to an application on a terminal, and includes, for example, an app executed in a mobile terminal (smartphone).

[0026] Referring to FIG. 2, the consent storage unit 310 can obtain consent to the provision of personal information for the use of personal information from the user terminal 100. The user terminal 100 can consent to the provision of personal information for the use of personal information, input at least one type of personal information for the use of personal information, and set a price. In one embodiment of the present invention, when a requester (information user) uses personal information of a user (information provider), that is, if the user's information provider is sorted as a condition of the requester, the method by which the requester can contact the information provider is mainly a phone number, an e-mail, and an address. At this time, a phone number, especially a mobile phone number, is very sensitive personal information, but it is also the most important and essential contact point from the viewpoint of an information user who purchases information. However, when the mobile phone information of the information provider is transmitted to the information user, it may be exposed to the information user's illegal abuse, various illegal distribution, criminal use, etc.

[0027] In such cases, a temporary number called a secure number is often used, but in one embodiment of the present invention, a secure number with a limited usage period is provided to the information user instead of the information provider's phone number, but a method of providing a sunset type secure number with a limited information usage period can be provided. A typical conventional secure number is a method of generating a usage number through an arbitrary combination of random numbers and forwarding it through matching with a specific number, which is mainly a form of being issued and used by the user himself, but in the platform of the present invention, the platform operator generates the information provider's phone number as an arbitrary number, sets it to be provided and connected to the information user through matching only for a specific period, and automatically deletes it when the preset information usage period expires. In other words, the sunset type secure number can be said to be a sunset type temporary number that is temporarily provided to the information user without identifying the information provider. In addition to the sunken secure number, there are also sunken secure emails and sunken secure addresses. Like a DNS server that links a domain and an IP address and connects it to a server, the platform provides the sunken secure email and the sunken secure address to the requester terminal 400, and the email sent to the sunken secure email is sent to the actual user's email. In the case of the sunken secure address, it can be accepted by the post office after a bulk conversion process.

[0028] The database unit 320 may receive and store at least one piece of personal information from the user terminal 100. In this case, a zero trust model, i.e., a zero trust model in which nothing is trusted, may be established for the administrator or staff who manages the platform according to an embodiment of the present invention to protect personal information in the database.

[0029] <Zero Trust Model>

[0030] The zero trust model, which means security without boundaries, is a model that aims to achieve information security in all situations by assuming that there are attackers not only in external networks but also in confirmed internal networks. Existing boundary-based security models can effectively block external attackers against internal networks by implementing strong firewalls and gateway detection, but external remote workers such as telecommuters and cloud-based services are relatively exposed to threats and are not safe. The zero trust model does not trust anything and considers users located in the internal network to be potential intruders. It is a new security architecture that focuses on protecting data rather than protecting boundaries, and is a model that does not absolutely trust any user when access to data occurs, and continuously checks who the user is, what purpose they are using, and what data they are accessing, and grants only the minimum necessary privileges to the user to restrict unnecessary access to other data.

[0031] <Definition of Zero Trust Architecture>

[0032] NIST introduces zero trust as "Never Trust, Always Verify." This means that you should never trust anything and always verify. In other words, zero trust is a new cybersecurity paradigm based on this principle that prioritizes the protection of organizational resources. Zero trust breaks away from the traditional security model of focusing on monitoring the network boundary and focuses on individual interactions between individuals (users, data, computing equipment, etc.), such as who is the user trying to use a service and what data is being accessed. Therefore, the objects of protection in the zero trust model include remote users outside the organization's network boundary and personal PCs and mobile devices that are not owned by the organization and are used to connect to the network.

[0033] The zero trust model does not trust any user absolutely. Each user is given only the minimum authority required for the task, and the given authority is continuously checked to restrict access to data without authority. When a user tries to access data, the user's identity is confirmed, the minimum authority required for the task is granted, and the access authority is periodically checked. To realize the zero trust model, the structure must be designed like building a building. From the network structure such as the location of information protection equipment and the location of servers, to specific security policies such as authentication methods and procedures for equipment and users, and access control methods, the detailed configuration of the entire organization's network and the operation and interaction of security-related elements must all be designed. This type of security structure design is called security architecture.

[0034] Zero-Trust Architecture (ZTA) defines seven principles for implementing a zero-trust model. The zero-trust model must be designed and implemented in accordance with these seven principles in an organization's infrastructure and business processes. The seven principles of ZTA are as follows: (1) Treat all data resources and computing services as assets to be protected. This principle means treating all elements on an organization's network as assets. An organization's network is made up of various types of equipment. Data, services, data collection and storage devices, and SaaS (Software as a Service) are all considered assets to be protected, and even remote workers' personal devices such as laptops and tablets should be considered assets to be protected if they can be connected to the organization's network.

[0035] (2) All communications are protected regardless of their location in the network. This principle means that the trustworthiness of an asset is not evaluated based on the location where it is connected to the network. The same procedures must be followed to satisfy security requirements whether accessing from within the network or from outside. All communications must be conducted in the most secure manner, must satisfy confidentiality and integrity, and the source of the connection, such as equipment or user, must be authenticated. (3) Access authority to an organization's assets is granted on a per-session basis. When a user accesses an asset, it is determined in advance which authority is required for which task, and only the minimum authority required for the requested task is granted to the relevant session. When the session expires or another task is requested, authentication procedures must be repeated and the corresponding minimum authority must be granted. In order to embody this principle, the classification of existing tasks and the necessary authority must be precisely defined at the initial design stage.

[0036] (4) Access to assets must be determined by a dynamic policy that considers various information such as the identity of the user, the application, the service, and the status of the requested asset, and other operational and environmental requirements. To realize zero trust, the assets held by the organization, the members of the organization, and the access authority to the assets required by each member must be defined, and a dynamic policy that considers various information and grants the necessary authority must be applied. Information that can be collected at this time includes the identity of the user, asset information, operational information, and environmental information, which can be organized as shown in Table 1.

[0037] [Table 1]

[0038] (5) The organization must not trust any assets and must monitor and measure the integrity and security status of the assets. When the organization evaluates the requirements for assets, it must also evaluate the security status of the assets. It must establish a system for continuously diagnosing the status of assets and mitigating risks (Continuous Diagnostics and Mitigation, CDM). If some assets are known to have been attacked or have vulnerabilities, they can receive different permissions from other secure assets. For example, a personal device evaluated as having malicious code installed may be denied access to the network. (6) Before allowing access to assets, it is necessary to dynamically and strictly confirm the authentication of users and equipment and the possession of access rights. (7) The organization must collect as much information as possible, such as the security status of assets, network traffic and access request information, and communication status, and use it to improve security. In a zero-trust architecture, this principle is not limited to specific technologies. Depending on the organization's situation, it can be designed and implemented with various elements to meet the seven principles. <Core Logical Components of ZTA>

[0039] One of the most representative models of the zero trust model shows the components of zero trust and their mutual interactions. In the control model, policies can be decided and applied at the policy decision point (PDP) and policy enforcement point (PEP). Here, the policy decision point (PDP) is further divided into the policy engine (PE) and policy administrator (PA). The policy engine makes decisions regarding requests to access assets. It also dynamically decides to approve or deny requests using the organization's policies and collected information. The PA implements the decision of the PE. If the PE makes an approval decision, it opens a session between the requester and the asset to connect the communication, and if it makes a denial decision, it closes the session, blocks the communication, and manages the application of policies such as the user's session and the authorization granted, such as the presence or absence of authentication. In other words, the PDP is the part that decides the policy and manages the application of the policy. The PEP is a gatekeeper that receives instructions from the PA that manages the policy and plays the role of opening and closing communication, and can be seen as a logger that records entry and exit.

[0040] The ZTA embodied in the example model enables authentication, authorization management, and recording using these three components. There are various ways for organizations to implement ZTA for their workflows, but ZTA can be implemented in various ways according to the characteristics of each organization, although it is basically implemented to satisfy the seven principles of ZTA. For example, the ID of the actor can be used as a core component of policy generation, and in this case, access to the organization's data can be monitored and approved / denied according to the ID and attributes attached to the ID. Personal data can be placed in special network devices such as intelligent switches / routers, next-generation firewalls, and special-purpose gateway devices, and these can be logically and physically separated to protect each personal data. If the PE determines how to configure the network using the SDP method, the PA can reconfigure it, and the client can request and approve access to the PEP configured by the PA. In conclusion, it is not necessary to be limited to some limited method, but it is sufficient to implement it to satisfy the seven principles to suit each organization according to its characteristics.

[0041] <Reliability Algorithm>

[0042] In ZTA, the Policy Engine (PE) is responsible for deciding whether or not to apply a policy. When making a decision, the PE must evaluate the reliability of the asset or users accessing the asset. The policy that the PE applies depends on the reliability. The reliability evaluation algorithm evaluates the factors in Table 2 below.

[0043] [Table 2]

[0044] PE evaluates the reliability considering the above five factors and decides whether the accessing subject can access the assets. This reliability algorithm can be implemented in various ways. Representatively, there is a criteria-centered method or score-centered method, and a single reliability algorithm method or a multi-factor reliability algorithm method. The criteria-centered method evaluates the reliability based on whether the accessing subject exceeds a certain criterion, and the score-centered method evaluates the reliability of the accessing subject by calculating the reliability by a score method. The single reliability algorithm method evaluates the reliability of each request individually, and the multi-factor reliability algorithm method evaluates the reliability by considering the communication record and evaluation record of the requesting subject. There is no correct answer when deciding on a reliability algorithm. Since every organization has a different environment, it is only necessary to select and implement the method that is most suitable for the environment in order to design the logical core components of ZTA. In summary, zero trust protects all of an organization's data resources and computer services by not trusting any components in the network. Here, the components refer to all elements in the network, including users and devices connected to the network, servers located in the internal network, network devices, information protection devices, and programs running on each device. In other words, the components inside the network are not trusted. The zero trust architecture does not determine the degree of trust based on the network connection point, but instead checks the identity and authority of the person accessing each data and asset when access occurs, grants only the minimum authority required for the requested task, and manages access on a session-by-session basis for each task. After that, when the task is completed, the corresponding session is terminated, and if another task is required, the authority is granted after re-authentication. To realize this concept of zero trust, all assets must be periodically monitored and measured for integrity checks, infection, etc., and various information such as user identity, service request information, asset status, and as much information as possible such as network traffic and communication status can be collected and used to improve security.

[0045] <Personal information encryption>

[0046] Encryption algorithms that can be used for database encryption can be classified into symmetric key (secret key) algorithms, public key algorithms, and hash algorithms depending on the characteristics of the key. In the case of database encryption, a fast algorithm is appropriate for items that are continuously encrypted and decrypted each time a query is processed, such as names and resident ID numbers, while a hash algorithm is appropriate for items that do not require decryption, such as passwords. In one embodiment of the present invention, a symmetric key algorithm, AES or DES, can be used to encrypt and decrypt a user's personal information. Of course, this does not exclude public key or hash algorithms, or hybrid encryption that combines these.

[0047] When the requester terminal 400 requests at least one piece of personal information, the auction unit 330 may set a budget for using at least one piece of personal information. For example, it is assumed that the requester targets women in their 20s and 30s residing in Seoul and needs personal information on these women in their 20s and 30s. In this case, when the requester terminal 400 inputs a budget after sorting the personal information that satisfies the conditions requested by the requester terminal 400, the auction unit 330 may arrange the prices set by the user terminal 100 in ascending order in order to sell the personal information, and may derive the number of pieces of personal information that can be purchased within the budget in the requester terminal 400. If the budget is 100,000 won and the price range for each piece is from 100 won to 500 won, it may calculate how many pieces of personal information can be purchased for 100,000 won. The requester terminal 400 may increase the budget when the number of information providers related to the item required by the requester terminal 400 is insufficient, and may decrease the budget when the number of information providers for the item exceeds the number. There can be various types of personal information items, but the AND and OR operators can be provided in the search filter so that the requester can specify cases where the requested personal information items are met simultaneously or where one of the personal information items meets only one condition, etc. Accordingly, the requester can set an AND condition or an OR condition. Of course, the NOT operator can also be added if it is a condition that the requester wishes to match.

[0048] At this time, the user terminal 100 can set a price for each item of personal information as shown in FIG. 5 and FIG. 6. For example, a name, sex, date of birth, place of birth, etc. can be input, and authentication can be performed to verify whether the information is fake or real as shown in FIG. 7. There is a limit to setting a price (bidding) for information that has not been verified. This is because information that is definitely real is more valuable than uncertain information that is not sure whether it is fake or real. As shown in FIG. 8 and FIG. 9, in addition to information that can identify an identity, preference information such as what food you like and what style of travel you like is also like a blessing for advertisers, so a function can be provided to collect information on this and set a price. As shown in FIG. 10 and FIG. 11, by providing such personal information, information on how many days an advertiser can contact the user can be provided, and points (profits) that the advertiser has obtained by purchasing his / her own information can be used at a point shop as shown in FIG. 12, can be exchanged for cash as shown in FIG. 13, and can be managed on a personal page as shown in FIG. 14. You can list your current information sales status as shown in Figure 15, and set prices as shown in Figure 16. When identity authentication is verified by petition documents as shown in Figure 17, various petition documents are issued and verification is performed by comparing them with personal information, and as shown in Figure 18, items that cannot be issued by petition documents, such as preferences, can be verified through an acquaintance authentication process by selecting an acquaintance and having the acquaintance verify them. Functions such as those shown in Figure 19 can be provided, but are not limited to these.

[0049] At this time, the auction unit 330 can construct an auction model using ABM (Agent Based Model) to simulate a competitive bidding market. At this time, the actors are businesses, i.e., bidders. The successful bidder can be awarded the bid through quantitative evaluation and the bid amount. ABM is a system modeling approach consisting of autonomous and interacting actors. The actors are set as constituent entities having key attributes and behavioral rules in the system, and are simulated to interact in a given environment. In the auction system, economic entities make choices to maximize profits by considering the actions of competitors and their own attributes, and the results derived from the aggregation of these choices again affect the profits of each entity. Since direct interaction between actors in an auction system is a form of collusion, it is limited to a situation where the results of other actors indirectly affect the successful bid result.

[0050] <Bidders and bid price rating>

[0051] The price determination method for competitive bidding is a differential price method, and the bidder's bid price can be set so that the winning bid price is the same as the bid price. Therefore, it is rational for a bidder to add a margin to his or her bid price. However, adding an excessive margin reduces the probability of winning, so an appropriate bid price must be considered.

[0052]

number

[0053] Formula 1 is a formula for the successful bidder to calculate his / her own expected profit, and an optimization algorithm is used to find the bid price that maximizes the expected profit. The successful bidder's expected profit π is calculated by multiplying the probability of winning the bid by the profit when the bid is won. The probability of winning is calculated using order statistics. If we assume that the number of competitors in the auction excluding the bidder is n-1 and the number of successful bidders is ns, the ns-th lowest bid price among the n-1 competitors must be higher than the bid price b. The cumulative distribution function F is the bidder's assumption of the bid distribution of competitors, and shows the probability that the competitor's bid price bj is lower than the bid price b. Therefore, 1-F(b) shows the probability that the bid price is lower than the competitor's bid price. The profit when the bid is won is calculated by subtracting the business cost c from the bid price b. Using this, businesses can set their own bid price, and can receive guidelines for the bid price.

[0054] The period limiting unit 340 may specify and provide an information use period, which is a viewing limit, for the personal information of a preset item among at least one of the personal information, when the bid is made by the requester terminal 400. The requester terminal 400 may request the personal information of the user terminal 100, and may view the personal information of the preset items included in the personal information within the preset information use period.

[0055] The sunset number providing unit 350 may provide a sunset type secure number for the telephone number of the personal information during the information use period. The term sunset type means that the secure number will lose its validity after a specific period, as in the case of sunset clauses, unless additional action is taken to extend the validity period. Instead of the term sunset clause, various concepts such as sunset law, sunset system, sunset legislation, sunset provision, and sunset regulation may be used in conjunction with each other, and although they may differ slightly, they are concepts that include the fact that the secure number is abolished if a specific period is set and no special measures are taken. That is, the secure number can be used only for a preset period, and after that, the secure number is deleted, so that messages and calls cannot be made from the user terminal 100 any more.

[0056] This preset period is the information usage period, and according to the Personal Information Protection Act, it is stipulated by law that the purpose, use and period must be clearly stated when using personal information. By setting this period, the requester terminal 400 is able to eliminate any intermediate mediators that may be connected to the user terminal 100, that is, to eliminate any intermediate mediators. At this time, the safe number is a randomly selected number, and since [user phone number-safe number] is mapped, if the requester terminal 400 makes a call or sends a message to the safe number, it is forwarded to the user's phone number. As with the phone number, the safe email address and safe address (home address) can be set in the same way along with the safe number, and as a result, the requester can only contact the user during the preset information usage period, and once the information usage period expires, there is no way to contact the user any more.

[0057] When an email or address among the personal information is provided, the abusing prevention unit 360 may input a unique identification code output when the email of the user terminal 100 is opened or a unique identification code printed or inserted in the mail envelope delivered to the address in order to provide points for providing the personal information to the user terminal 100. Abusing is a term that indicates an act having some kind of illegal purpose, such as causing damage to others or for the benefit of children, and while a user's receipt of a share of profits is premised on providing his / her personal information, receiving a share of profits without viewing an advertisement or opening a letter despite preventing an act using personal information is an act that goes against the interest of the requester. Accordingly, after identifying the user terminal 100 by device fingerprinting, it is possible to monitor and detect cases where a user repeatedly creates a fake account to obtain a reward on the user terminal 100 or repeatedly performs an act required for obtaining a reward using a MacroBot, and treat the user account as an abuser. If a user does not use the same device but a large number of different devices, they can be monitored and identified as malicious users by determining whether they are connected to the same or similar GPS or WiFi.

[0058] <Conditions for device fingerprinting>

[0059] Among device information, browser attributes appear relatively consistently, and core components can be selected to classify meaningful values ​​for device identification, and such selection criteria can be selected based on conditions such as application to the domestic Internet environment, ease of implementation, selection of common identification values ​​for each device, avoidance of anti-fingerprinting, minimization of privacy violations, etc. The criteria for selecting identification values ​​and conditions for device detection methods are as follows.

[0060] First, it must be applicable to the domestic Internet environment. In order to determine the device information of domestic users more accurately, it is necessary to assign weights that are suitable for the domestic Internet environment. In the case of devices used in the country, information such as language and time zone is almost always the same, so it is necessary to lower the weights of the corresponding attribute values ​​in the method of identifying the device. Also, in the case of mobile devices, it may be necessary to dynamically change the condition values, such as lowering the weights for the connecting IP. This can be changed according to the characteristics of each web service. Second, it must be easy to implement. In order to collect device information such as Javascript, Flash, and canvas fingerprinting in web services, it is necessary to minimize the accessibility of users and the speed reduction when accessing websites by using a minimum of code. In fact, implementing a huge amount of Javascript results in the collection of unnecessary information, and the implementation of scripts inevitably leads to a reduction in the page landing speed of websites, so an implementation method that minimizes this is necessary.

[0061] Third, a common identification value must be selected for device browsers. There are identifiable and non-identifiable values ​​in the browsers of user devices. Since the items that can be collected differ depending on the browser used, a value that can provide accurate results and identification must be selected, but technology that can be applied to all mobile devices is required. Fourth, anti-fingerprinting technology must be avoided. Browsers that hide header values ​​and various tools that can hide tracking are provided to prevent privacy violations. As the use of Tor networks and Tor browsers is increasing recently, it is necessary to be able to detect attack patterns in which device attribute values ​​are continuously modified through the use of such anti-tracking tools and proxies, and to set up additional security procedures. Anti-fingerprinting must be avoided by adding new tracking methods for information that cannot be collected on user devices, or by applying technology to verify this.

[0062] Fifth, privacy violations must be minimized. Only the minimum amount of information necessary to identify the device must be collected so that it cannot be used for any purpose other than identifying the user or the device itself. Since the collected information itself may be subject to arguments that it may violate personal information, basic privacy protection measures must be in place, such as legally notifying users of the collected information and storing it in a hash format.

[0063] <Optimal information gathering model>

[0064] To implement an actual web service based on the optimal information collection model, a browser collection script for device fingerprinting can be made to run on a web server, and a fingerprinting server can be used to combine characteristic values ​​to generate a device fingerprinting ID. After that, behavior can be tracked based on the device fingerprinting ID, and suspicious devices can be tagged or blocked, or managed by requiring additional authentication such as ARS authentication or domestic identity authentication depending on the type of service.

[0065] <Device scoring for online fraud prevention>

[0066] Although the methods of attacks such as online fraud for corporate web services vary by industry, most web services that use accounts are exposed to the same dangers. Of course, it is necessary to take traditional defense measures to deal with such attacks, but identifying devices connected to a network can be evaluated as an important technology to recognize the dangers that may be posed to web services and to defend against attacks. Preventing device-based attacks can play a major role in effectively preventing attacks in the online environment and providing safe services to trusted users. Generally, an attacker's device is not configured for only one web service. The more accurate data you have about the device, the easier it is to evaluate the danger and stop the attack. Identifying the device is the first line of defense against online attacks and can be a powerful tool to identify high-risk behavior patterns.

[0067] <Device scoring model>

[0068] The method of identifying the device fingerprinting ID (hereinafter referred to as the device ID) and tracking its behavior can be to create a unique ID using currently used technical cookies and combine it with the device fingerprinting ID. Depending on the site, it can be an even more valuable detection method if it is combined with a unique value held by the web service company, such as a unique serial number or a user account ID. Two unique keys are used in this method.

[0069] The first key used is a cookie-based Product Unique Identifier (PUID). This is a value that is generated based on cookies when the user's web browser first connects to a web service, and is the same concept as a UUID. This key can be used to check whether the user's browser has connected to the website in question. The second key used is a Device Fingerprint Unique Identifier (DFID) generated using a unique value of the browser. This key can be generated by hashing each value of the optimal information collection model. For example, if hashing is done with SHA256, a 64-digit unique key will be created. These keys are stored in available storage space such as browser cookies, local storage, HTML5 Web SQL on the user's device, and a process of comparison is applied when accessing a website. Different standards can be applied depending on the detection level and policy of each site.

[0070] When the user terminal 100 first accesses a website, the device fingerprinting process starts and a PUID is generated based on the cookie value of the user browser. In addition to this PUID, the system generates a DFID through a process of acquiring the user's device information. These two keys are stored in the DB of the user's device and the device fingerprinting system or the web service and are used for the next comparison. If the DFID does not exist or does not match when the user's PUID exists, a new one is generated and the change is recorded, and monitoring of the device is strengthened by tagging or blocking, and it is effective to use a process to further identify the user using additional authentication means such as ARS authentication or domestic identity authentication depending on the type of service. These two keys, PUID and DFID, can be used appropriately in conjunction with the management of the access IP address of devices already in use and the history management of logged-in accounts for security management.

[0071] <Linking devices and accounts>

[0072] By linking device and account information and tracking this link to apply to in-company web services, it can be used as a useful weapon to discover cyber attackers working together. In the case of organized and sophisticated hacking groups, they often use different types of devices located in multiple locations, but if they log into the same account, tracking and managing this link information allows for much more sophisticated detection than the current defense method of detection based on IP addresses. For example, if the same mobile gateway IP is used, it is impossible to detect or block the activity, but it is possible to detect if one device creates multiple accounts in sequence or if multiple devices all use the same account, and such devices and user accounts can be managed for risk through separate scoring management.

[0073] The request post management unit 370 may upload a request post of a requester requesting the provision of personal information, arrange the request posts by pre-defined categories, and list the request posts in order of highest accumulated rewards for each pre-defined category.

[0074] The information providing unit 380 can provide the user terminal 100 with a database for using personal information and statistical data including the bid amount, and can provide the maximum, average and minimum bid amounts. The bid amount can be a price setting for each item of personal information that the user can set. In other words, it is a setting of how much the user wants to sell his / her information for. The platform of the applicant of the present invention (Korea Integrated Petition Center Co., Ltd.) issues documents for each individual through the issuance of various petition documents, so that if the information is verified through this, that is, if it is verified information, the price can be set higher, and if not, a limit can be set on the amount that can be raised. In addition, a guideline is provided for the maximum value and minimum value of verified personal information, so that the user can set the value of his / her personal information by himself / herself.

[0075] When a requester uploads a request post requesting the provision of personal information on the requester terminal 400, the sender / receiver indicating unit 390 may specify the name of the requesting business and the purpose of use of the requester as required items, select at least one of the phone number, email, and address in the personal information, and input the sender name to indicate the sender name. A personal information controller who processes personal information must process personal information to the extent necessary for the purpose of processing the personal information and must not use the personal information for purposes other than the purpose, so the purpose of use may be indicated, and if a phone number is used to prevent thoughtless spam from being delivered to the user, the sending number, if it is email, the sending email address, if it is postal mail, the sending address, etc. may be indicated.

[0076] When the current earnings status unit 391 provides the earnings obtained by providing personal information in the user terminal 100 in a history log, it can provide the requester, purchased items, and bid price by date, provide earnings statistics by day, month, year, requester, and item, and provide the total earnings amount, withdrawal and balance history.

[0077] Hereinafter, the operation process of the platform service providing server of Fig. 2 will be described in detail with reference to Figs. 3 to 19. However, it is obvious that the embodiment is merely one of various embodiments of the present invention, and the present invention is not limited thereto.

[0078] Referring to FIG. 3, (a) the platform service providing server 300 constructs a personal information database by storing personal information when the user agrees to provide the personal information and uploads the personal information at the user terminal 100. Then, as shown in (b), the platform service providing server 300 allows the requester terminal 400 to search for the necessary personal information in the database, but at this time, the personal information is not provided immediately by blurring, anonymizing, or pseudonymizing the personal information, or by showing only the matching numbers. As shown in (c), the platform service providing server 300 allows the user terminal 100 to set a price (bidding), and the requester terminal 400 can set the number of personal information according to the target conditions and budget and then purchase the item, thereby setting the user as the successful bidder. (d) If the requester terminal 400 wins the bid, the platform service providing server 300 provides personal information to the requester terminal 400, but when the personal information such as a phone number, email address, or home address is requested, an intermediate medium with a preset period, i.e., a limited period of information use, such as a secure number, secure email address, and secure home address, can be provided to prevent the user's information from being directly obtained by the requester.

[0079] As shown in (a) of FIG. 4, the platform service providing server 300 can check whether the user has entered a strange phone number, e-mail, or home address through an authentication number in the case of a phone number, e-mail confirmation in the case of e-mail, and confirmation of mail sent to the home address in the case of a home address, in order to prevent abusing of the user terminal 100. In addition, the platform service providing server 300 can perform reception confirmation in the case of a message received at a phone number, e-mail open confirmation in the case of e-mail, and mail confirmation in the case of mail in order to provide a reward to the user terminal 100. The e-mail open confirmation can be performed by scanning a unique identification code that appears only when an e-mail is opened, such as a QR code, or by scanning a printed unique identification code that appears only when the mail is opened.

[0080] In addition, when uploading a request post as in (b), the platform service providing server 300 can list the highest accumulated rewards by category, and as in (c), the business name (requester's name), purpose of use, receiving method (select one of phone number / email / postal mail), and sender's name can be displayed in advance, for example, 050 number for phone number, sender's name and email address for email, and sender's address for postal mail. In addition, the requester terminal 400 can provide desired purchase items individually or as a whole, and provide the user terminal 100 with expected profits per sales item, etc. As shown in (d), the platform service providing server 300 can provide a history of earnings to each user terminal 100, information on users (requesters), purchased items, and bid prices by date, and can provide overall earnings or non-payment statistics by day, month, year, requester, and item, and can provide a total amount of earnings, and can provide a history of withdrawals and balances in a bankbook format with dates, summaries, deposits, withdrawals, balances, and notes, and can indicate earnings after deduction of income tax and fees. When settling, the identity of the user terminal 100 is verified, and the date and time of settlement, limits, number of times, exception clauses, etc. are disclosed, and the deposit after deduction of tax is indicated.

[0081] <Touch point management policy>

[0082] In the case of a telephone number among contact points, the aforementioned sunset type secure number is used to manage the information usage period and a random secure number can be mapped to the telephone number of the user terminal 100. In the case of an e-mail, a subject grouping separated by [ ] must be provided to increase the open rate with consent, and the requester terminal 400 can check in advance whether the requested e-mail content, design, and attachments can be transmitted. In addition, to prevent users from abandoning the e-mail and increase the reading rate, a preset feedback number or character can be entered after the e-mail is opened. In the case of an address, a method can be used in which a photograph taken after receiving mail is uploaded or a printed number is entered when the mail is opened.

[0083] <Front page>

[0084] On the statistics screen, you can view the total number of participants, total cumulative sales amount, average sales amount per user, number of sales per user, average sales amount per database, etc. You can also view the number of databases wishing to sell per user, average total selling bid amount per user, total number of databases for sale held (EA), total bid amount of databases for sale (won), average bid amount per database, number of resales per database, etc.

[0085] Matters not described in the method for providing a platform service for sharing personal information based on the right to transfer personal information in Figures 2 to 19 are the same as or can be easily inferred from the content previously described in Figure 1 for the method for providing a platform service for sharing personal information based on the right to transfer personal information, so they will not be described below.

[0086] Figure 20 is a diagram showing a process of transmitting and receiving data between each component included in the system for providing a platform service for sharing personal information based on the right to transfer personal information in Figure 1 according to one embodiment of the present invention. Hereinafter, an example of a process of transmitting and receiving data between each component will be described with reference to Figure 20, but the present application is not limited to such an embodiment, and it is obvious to those skilled in the art that the process of transmitting and receiving data shown in Figure 20 can be changed according to the various embodiments described above.

[0087] Referring to FIG. 20, the platform service providing server obtains consent to the provision of personal information for use from the user terminal (S5100).

[0088] The platform service providing server receives and stores at least one piece of personal information input from the user terminal (S5200), and when the requester terminal requests at least one piece of personal information, sets a budget for using the at least one piece of personal information (S5300).

[0089] In addition, if the bid is won by the requester terminal, the platform service providing server specifies an information usage period, which is a viewing restriction, for the personal information of a preset item among at least one of the personal information, and provides it (S5400).

[0090] The order of the above steps (S5100 to S5400) is merely an example and is not limited thereto, that is, the order of the above steps (S5100 to S5400) may be changed, and some of the steps may be performed simultaneously or deleted.

[0091] Matters not described in relation to the method for providing a platform service for sharing personal information based on the right to transfer personal information in Figure 20 are the same as or can be easily inferred from the contents previously described in relation to the method for providing a platform service for sharing personal information based on the right to transfer personal information through Figures 1 to 4, and therefore will not be described below.

[0092] The method for providing a personal information sharing platform service based on a right to transfer personal information according to an embodiment described in FIG. 20 may also be embodied in the form of a recording medium including computer executable instructions such as an application or a program module executed by a computer. The computer readable medium may be any available medium that can be accessed by a computer, and includes both volatile and non-volatile media, and separate and non-separate media. The computer readable medium may also include all computer storage media. The computer storage medium includes all volatile and non-volatile, separate and non-separate media embodied in any method or technology for storing information such as computer readable instructions, data structures, program modules or other data.

[0093] The method for providing a personal information sharing platform service based on a right to transfer personal information according to an embodiment of the present invention may be executed by an application (which may include a program included in a platform or operating system that is basically installed in a terminal) that is basically installed in the terminal, or may be executed by an application (i.e., a program) that a user directly installs in a master terminal through an application providing server such as an application store server, an application, or a web server related to a corresponding service. In this sense, the method for providing a personal information sharing platform service based on a right to transfer personal information according to an embodiment of the present invention may be embodied as an application (i.e., a program) that is basically installed in a terminal or directly installed by a user, and recorded in a computer-readable recording medium such as a terminal.

[0094] The above description of the present invention is for illustrative purposes only, and those skilled in the art will understand that the present invention can be easily modified into other specific forms without changing the technical idea or essential features of the present invention. Therefore, the above-described embodiments should be understood to be illustrative and not limiting in all respects. For example, each component described as a single type may be implemented in a distributed form, and similarly, each component described as distributed may be implemented in a combined form.

[0095] The scope of the present invention is indicated by the claims set forth below rather than by the above detailed description, and all modifications and variations derived from the meaning and scope of the claims and their equivalent concepts should be construed as being included within the scope of the present invention.

Claims

1. a user terminal for agreeing to provide personal information for the use of the personal information, inputting at least one type of personal information for the use of the personal information, and setting a price for the at least one type of personal information; A requester terminal that requests personal information of the user terminal and views personal information of preset items included in the personal information within a preset information use period; and a consent storage unit for obtaining consent to provide personal information for use of the personal information from the user terminal, a database unit for receiving and storing at least one piece of personal information from the user terminal, an auction unit for setting a budget for using the at least one piece of personal information when the at least one piece of personal information is requested from the requester terminal, and a period limiting unit for specifying and providing an information use period, which is a viewing limit, for personal information of a preset item among the at least one piece of personal information when the requester terminal wins the bid; The present invention relates to a personal information transfer right-based personal information sharing platform service providing system.

2. The auction section includes: When the requester terminal sorts the personal information according to the requested conditions and then inputs a budget on the requester terminal, the prices set on the user terminal for selling the personal information are arranged in ascending order, and the number of personal information that can be purchased within the budget on the requester terminal is derived. The personal information transfer right based personal information sharing platform service providing system according to claim 1.

3. The platform service providing server includes: a sunset number providing unit for replacing the telephone number among the personal information with a sunset type secure number during the information usage period; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

4. The platform service providing server includes: When an email address or an address is provided among the personal information, an abusing prevention unit inputs a unique identification code output when the email is opened on the user terminal or a unique identification code printed or inserted in an envelope delivered to the address in order to provide points to the user terminal for providing the personal information; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

5. The platform service providing server includes: a request post management unit that uploads a request post of a requester requesting the provision of personal information, arranges the request posts according to preset categories, and arranges and lists the request posts according to the preset categories in descending order of accumulated rewards; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

6. The platform service providing server includes: an information providing unit that provides the user terminal with a database for using the personal information and statistical data including the bid amount, and provides the maximum, average, and minimum values ​​of the bid amount; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

7. The platform service providing server includes: a caller specifying unit for specifying the name of the requesting business and the purpose of use of the requester as required information when uploading a request post of the requester requesting the provision of personal information on the requester terminal, selecting at least one of a phone number, an e-mail address, and an address in the personal information, and inputting the name of the caller to specify the name of the caller; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

8. The platform service providing server includes: a revenue status section for providing the requester, purchase item, and bid price by date when the revenue obtained by providing the personal information in the user terminal is provided in a history log, providing revenue statistics by day, month, year, requester, and item, and providing the total revenue amount, withdrawal, and balance history; The personal information transfer right based personal information sharing platform service providing system according to claim 1.

Images