Personal information connection record management method and device

Abstract

To control accesses by receiving the reasons for the access to personal information in the case where the personal information in a DB server is accessed through a web application server without correcting an existing source of the web application server.SOLUTION: A personal information access record management system includes: a web application server 20 having a privacy logging agent for collecting access logs; a data receiving unit; an access record standardization unit which generates personal information access record standardized based on the 5W1H principle; a personal information search unit which configures a data map by analyzing schema of the personal information, table, and column information; a personal information analysis unit which identifies personal information from the standardized access record to calculate a risk index; an information user right management unit which gives an access right to access the personal information for each information user; and a personal information access record management and control server having a download control unit which determines whether to allow downloading when determining download of a personal information file.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a technology for managing personal information access records, and more particularly to a method and device for managing personal information access records, which can receive and manage personal information access reasons and control access when a web application server attempts to access personal information of a DB server without modifying the existing source of the web application server. [Background technology]

[0002] Generally, personal information is defined as information that can identify a living individual through name, resident registration number, and image, etc., and includes information that cannot identify a specific individual by itself but can be easily combined with other information to identify the individual. The types of such personal information are very diverse, ranging from personal information such as an individual's name and resident registration number to inner secrets such as socio-economic status and condition, education, health and medical care, assets, cultural activities, and political inclinations. Personal information can include not only information provided to a business by a user (customer) when signing up or registering for the business's services as a member, but also call history, log records, purchase history, etc. generated during the user's use of the service.

[0003] The Personal Information Protection Act requires companies and public institutions to collect evidence of personal information file downloads by internal personal information handlers and store them for two years, and to manage them after receiving explanations (reason) for the use of personal information. Here, "access records" refers to electronic records of the details of the work that personal information handlers performed by connecting to the personal information processing system, including the personal information handler's account, the date and time of connection, connection location information (terminal information such as the connected person's PC or mobile device, or the server's IP address), information on the subject of the processed information, and the work performed (collection, generation, connection, linking, recording, storage, holding, processing, editing, searching, output, correction, recovery, use, provision, disclosure, destruction, etc.).

[0004] The “Personal information access record detection device and method” published under registration number 10-1528437 (Patent Document 1) in the Registered Patent Gazette (B1) of the Korean Intellectual Property Office includes the steps of confirming the first access time for an identifier that requested a login and the second access time of the most recent login closest to the first access time, extracting the first access region where the login was made and the second access region where the most recent login was made based on the network address used, and making a first comparison of the result obtained by dividing the distance between the first and second access regions by the time interval between the first and second access times with a selected critical speed, and detecting that the identifier is related to unauthorized use if the result of the first comparison exceeds the critical speed.

[0005] In addition, the "Personal Information Connection Record Integrity Verification System and Verification Method" published under Registration No. 10-2013415 (Patent Document 2) relates to a system and method for verifying the integrity of personal information connection records, in which an integrated management server and a connection record verification value storage server share each other's public keys for initial information exchange, and generate and transmit a secret key required to derive a verification value; in order to generate the verification value, the integrated management server periodically collects all log data generated from the personal information processing system, extracts only log data corresponding to the personal information connection record from the collected log data, generates an integrated verification value that can verify the individual verification values ​​and the individual verification values ​​generated in one collection period with one value, and transmits the generated individual verification value and integrated verification value to the connection record verification value storage server; in order to verify the integrity, the integrated management server generates the individual verification value and the integrated verification value by itself, and compares them with the verification value transmitted from the connection record verification value storage server, and if they match, determines that there is integrity. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Korean Patent No. 10-1528437 [Patent Document 2] Korean Patent No. 10-2013415 Summary of the Invention [Problem to be solved by the invention]

[0007] Since internal personal information handlers generally handle personal information through a web application server, which is an internal business system, it is necessary to implement a method that can automatically detect when a personal information file is downloaded by connecting to the web application server and accept the reason for the download, and also to additionally control access without modifying the existing source of the web application server.

[0008] The present invention has been proposed to meet these requirements, and the problem that the present invention aims to solve is to provide a personal information access record management method and device that can accept and manage personal information access reasons and control access when a web application server attempts to access personal information of a DB server without modifying the existing source of the web application server. [Means for solving the problem]

[0009] An embodiment of the present invention discloses a personal information connection record management device.

[0010] The disclosed personal information access record management device includes a privacy logging agent that collects all access records for HTTP requests and responses of information users and controls HTTP response data according to an account; a access record data receiving unit that receives and stores the personal information access records collected from the privacy logging agent; a access record standardizing unit that obtains information of actual information users for web access accounts from the access record data receiving unit, generates and stores personal information access records standardized based on six principles; and searches for personal information stored in a database (DBMS) used by a web application server, analyzes the schema, table, and column information of the corresponding personal information, and can be used in personal information identification and judgment processing. a personal information analysis unit which obtains personal information schema, table and column information from the personal information search unit and obtains standardized connection records according to the six-rule from the connection record standardization unit to identify personal information and calculates a risk index for determining misuse, abuse, leakage and change of personal information; an information user authority management unit which grants authority to control access to personal information connection for each information user in order to prevent leakage and misuse of personal information; and a personal information file download control unit which, when it is determined that a personal information file is to be downloaded, compares the authority set for the web connection account with the risk index and determines whether or not to permit the download of the corresponding requested file.

[0011] The personal information connection record management device may further include a personal information connection justification processing unit that requests justification for personal information access of a corresponding account and records the input justification when the risk index is equal to or greater than a predetermined value.

[0012] The privacy logging agent operates in a plug-in manner in a web application server and compares the risk index of the personal information analysis unit for the requested personal information based on the authority and setting value of each information user, and provides a response such as automatic masking of personal information or excessive use of personal information.

[0013] The personal information analysis unit calculates a risk index based on the personal information type, the number of uses for each personal information type, access time, vacation or holiday, personal information use authority, and unregistered IP.

[0014] In addition, another embodiment of the present invention discloses a personal information connection record management method.

[0015] The disclosed method for managing personal information access records includes the steps of: setting authority for personal information access for each information user to prevent leakage and misuse of personal information; searching for personal information stored in a database (DBMS) and analyzing schema, table, and column information of the personal information to construct a data map to be used in personal information identification and judgment processing; receiving a request for personal information access or personal information file download from a web browser; collecting all access records for the information user's HTTP request and response; generating a personal information access record standardized based on the six principles from the collected access records; obtaining personal information schema, table, and column information from the data map, obtaining the personal information access record standardized based on the six principles to identify personal information, and calculating a risk index for determining misuse, misuse, leakage, and change of personal information; requesting a justification if the calculated risk index value is equal to or greater than a predetermined value and storing the input justification; and responding with a risk index of the corresponding account if the information user's HTTP request is a personal information access request, and responding with an HTTP Redirection according to the risk index of the corresponding account if the information user's HTTP request is a personal information file download request. Effect of the Invention

[0016] According to an embodiment of the present invention, when a company, public institution, etc. is already providing a web service using a web application server and personal information stored in a database, it is possible to satisfy various guidelines required by the Personal Information Protection Act (e.g., connection log recording and explanation record management) at low cost without modifying the existing source of the web application server.

[0017] In addition, according to an embodiment of the present invention, a distinction is made between simply viewing or recording personal information and downloading a personal information file, and when downloading a personal information file, it is controlled by a separate personal information access record management and control server, thereby strengthening the protection of personal information through stricter procedures.

[0018] According to an embodiment of the present invention, a personal information access log can be recorded and managed in a standardized manner, and if the access log is analyzed and found to be personal information, a risk index can be accurately calculated based on various elements such as the personal information type, the number of uses per personal information type, access time, and personal information use authority, and then the personal information access can be controlled in various ways according to the authority of the information user, thereby efficiently operating the service. [Brief description of the drawings]

[0019] [Figure 1] 1 is a schematic diagram illustrating the overall configuration of a personal information connection record management system according to an embodiment of the present invention; [Diagram 2] 4 is an operational flowchart of a privacy logging agent according to an embodiment of the present invention. [Diagram 3] 4 is an operational flowchart of a personal information search unit according to an embodiment of the present invention. [Figure 4] 4 is an operational flowchart of an information user authority management unit according to an embodiment of the present invention. [Diagram 5] 11 is an operational flowchart of a connection record standardization unit according to an embodiment of the present invention. [Figure 6] 4 is an operation flowchart of a personal information analysis unit according to an embodiment of the present invention. [Figure 7] 4 is a flowchart illustrating a risk index calculation procedure of a personal information analysis unit according to an embodiment of the present invention. [Figure 8] 5 is a flowchart illustrating an operation of a download control unit according to an embodiment of the present invention. [Figure 9] 11 is a flowchart illustrating an operation of a clarification processing unit according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] The present invention and the technical problems achieved by the implementation of the present invention will be more apparent from the preferred embodiments of the present invention described below. The following embodiments are merely illustrative for explaining the present invention, and are not intended to limit the scope of the present invention.

[0021] FIG. 1 is a schematic diagram illustrating the overall configuration of a personal information connection record management system according to an embodiment of the present invention.

[0022] 1, in a web service system of a company or public institution including an information user terminal 10, a web application server (20; WAS), and a database system (30; DBMS) in which personal information 32 is stored, an information user such as a personal information handler can access the personal information 32 in the database 30 and perform a predetermined task after logging in to the web application server 20 through the information user terminal 10. The information user terminal 10 is equipped with a web browser and can make an HTTP Request or an HTTP file download request to the web application server 20, and the web application server 20 includes an HTTP Filter 22 and a DB Driver 24.

[0023] In such a web service system, when the web browser installed on each terminal device accesses the personal information 32 in the database, the company or public institution must record and manage the personal information access log of the information user, such as the personal information handler, in accordance with the Personal Information Protection Act.

[0024] In order to meet the requirements of such companies and public institutions, the personal information access record management system 100 according to an embodiment of the present invention installs a privacy logging agent 110 in a plug-in manner in the web application server 20, receives real-time input of access records and records the personal information access log, and receives input of the reason (proof) for personal information access, analyzes the personal information access pattern, and controls access to personal information according to the degree of risk.

[0025] For this purpose, the personal information connection record management system 100 according to an embodiment of the present invention is composed of a privacy logging agent 110 installed in a plug-in manner in the web application server 20, and a data receiving unit 120, a connection record standardization unit 130, an information user authority management unit 140, a personal information search unit 150, a personal information analysis unit 160, a proof processing unit 170, a download control unit 180, and a web interface 190, which are implemented in the personal information connection record management and control server 102, as shown in FIG. 1, and the connection record manager 104 is connected to the connection record management and control server 102 to operate the connection record management system 100.

[0026] Referring again to FIG. 1, after the web browser installed in the information user terminal 10 is executed, it connects to the web application server 20, logs in, and then requests a web URL. If the web URL request is an "HTTP Request", the web application server 20 responds with the personal information authority applied and outputs the web browser screen. If the web URL request is an "HTTP file download request", the HTTP Filter 22 of the web application server 20 performs "HTTP Redirection" to the access record management and control server 102 to perform a file download with the personal information authority applied so that the file can be saved.

[0027] The privacy logging agent 110 is installed in the web application server 20 in a plug-in manner and performs the role of collecting and controlling access record data. That is, if the request accepted through the web browser of the information user is an HTTP Request, the privacy logging agent 110 collects all access records for the request and response, controls the HTTP Response data according to the login account, and if it is an HTTP file download request, responds with Redirection so that the information user 10 can connect to the web interface 190 of the personal information access record management and control server 102.

[0028] All access records (HTTP Request+Response+execution SQL) of an information user accessing the web application server 20 are collected by the privacy logging agent 110 and transmitted in real time to the personal information access record management and control server 102. The personal information access record management and control server 102 analyzes the personal information access contents of the corresponding information user, calculates a risk index, and then transmits it to the privacy logging agent 110. Accordingly, the privacy logging agent 110 provides an HTTP Response result such as automatic masking of personal information or excessive use of personal information according to the authority and risk index of the corresponding information user, thereby performing authority-based control.

[0029] The web interface 190 of the personal information access record management and control server 102 provides WAS personal information access management and control, an external interface function (HTTP Request / Response), and a personal information file download function, and provides an administrator screen interface to the access record manager terminal 104. That is, the web interface 190 waits for a web request, processes the administrator operation request if it is an administrator operation request, and processes personal information file download redirection by referring to the control of the download control unit 180 if it is a personal information file download request.

[0030] The connection record data receiving unit 120 receives all information data of the personal information connection record (HTTP Request+Response) collected from the Privacy Logging Agent 110 via TCP / IP communication, and stores it in a repository.

[0031] The access record standardization unit 130 receives the access record from the data receiving unit 120, acquires actual information user information for the web access account, generates a personal information access record standardized according to the six what principle (5W1H), and stores it in a repository.

[0032] The information user authority management unit 140 sets and manages access control levels (authorities) for personal information access for each information user at levels 1 to 5 in order to prevent leakage and misuse of personal information.

[0033] The personal information search unit 150 searches in advance for personal information such as unique identification and sensitive information stored in the DBMS 30 used by the web application server 20, and constructs a data map so that the schema and table column information of the corresponding personal information can be used during the personal information identification judgment process of the risk analysis module.

[0034] The personal information analysis unit 160 obtains personal information schema, table, and column information from the personal information search unit 150, and obtains standardized access records according to the six-parameter rule from the access record standardization unit 130, identifies personal information, and calculates a risk index for determining the misuse, misuse, leakage, and modification of personal information.

[0035] If the risk index is equal to or greater than a predetermined value, the justification processing unit 170 requests justification for access to personal information of the corresponding account, and records and manages the input justification.

[0036] If it is determined that the request is to download a personal information file, the download control unit 180 compares the access control level and risk index of the web connection account to determine whether or not to permit the download of the requested file.

[0037] FIG. 2 is an operational flowchart of a privacy logging agent according to an embodiment of the present invention.

[0038] 2, when the privacy logging agent 110 is installed in the web application server 20, it operates in a plug-in manner and sets an HTTP Request filter and an HTTP Response filter (S101 to S103), and then sets a DBMS Driver Interceptor (S104).

[0039] Also, a login ID extraction method is set, authority information for each connection account is obtained from the information user authority management unit 140 to generate a data map, and schema, table, and column information is obtained from the personal information database from the personal information search unit 150 (S105 to S107).

[0040] After that, the device waits for an HTTP request to be received.

[0041] When an HTTP request is received, the HTTP session information is extracted and stored in the session information data map (S108).

[0042] If the HTTP Session is a login page, the connection ID is extracted from the login ID object and then SQL execution is monitored, and if it is not a login page, SQL execution is monitored immediately (S109, S110). HTTP collected information included in the HTTP Session includes the URL address, client ID, cookies, connection time, request parameters, etc.

[0043] Thereafter, when an SQL execution is detected, the SQL execution query is collected and the SQL Return ROW is collected (S111 to S113).

[0044] After collecting SQL data to determine whether SQL execution has occurred, the HTTP Response Interceptor is referenced, and if it is a file download, a download cookie is issued with the file ID (ID) and login ID (ID), and the "HTTP Request + Response + Download Cookie" is transmitted to the connection record management and control server 102 (S114 to S117).

[0045] Next, the download cookie is added to the response and the process is changed to an HTTP Response Redirection response, and then the HTTP Response Redirection is responded to to connect to the connection record management and control server 102, and the web application server 20 waits for reception of an HTTP Request again (S118, S119).

[0046] If it is not a file download, the HTTP request+response information is stored and transmitted to the access record management and control server 102, and personal information is detected from the HTTP response data (S120, S121).

[0047] If personal information is detected, the personal information analysis unit 160 analyzes the personal information to calculate a risk index, and performs controls such as disconnection and masking of personal information based on the risk index value, and after masking or changing the HTTP Response to a controlled response, transmits the HTTP Response to the web browser and waits for reception of the HTTP Request again (S122 to S126).

[0048] If no personal information is detected, the HTTP response is immediately sent to the web browser and the browser waits for the HTTP request again (S122, S126).

[0049] In this manner, in an embodiment of the present invention, when an information user attempts to download a personal information file, the connection record management and control server 102, rather than the web application server 20, manages the download of the personal information file through redirection, thereby enabling more strict management of the personal information file.

[0050] FIG. 3 is an operational flowchart of the personal information search unit according to an embodiment of the present invention.

[0051] Referring to FIG. 3, the personal information search unit 150 acquires personal information search policies such as database connection information, number of samplings, personal information identification formula, and personal information confirmation frequency from the repository, and then connects to the database 30 to collect database meta information such as schema, table, column, view, procedure, function, etc. (S201 to S203).

[0052] Thereafter, a sampling number of items is obtained from the search target data DB, and the personal information type is determined by utilizing the personal information identification regular expression (S204, S205).

[0053] If the information is subsequently identified as personal information, the identification information is checked through checksum calculation of resident ID number, account number, credit card number, etc., and the occurrence frequency of the corresponding column relative to the number of personal information samples is calculated as a percentage (100%) (S206-S208).

[0054] If the calculation result shows that the current calculation frequency is equal to or greater than the determination frequency, the schema, table, column and personal information data of the identified personal information are stored in the repository, and a sampling is obtained from the search target data DB, and the above process is repeated (S209, S210).

[0055] In this way, the personal information search unit 150 checks identification information such as resident ID number, account number, credit card number, etc. through checksum calculation according to the personal information search policy, calculates the occurrence frequency of the corresponding column in comparison with the number of personal information samples as a percentage (100%), and if the calculated value is equal to or greater than a predetermined frequency value, it determines it to be personal information, extracts and stores the personal information data.

[0056] FIG. 4 is an operational flowchart of an information user authority management unit according to an embodiment of the present invention.

[0057] Referring to FIG. 4, the information user authority management unit 140 obtains a web connection account and authority information from a repository and waits for an event (S301, S302).

[0058] If a rights information change event occurs, rights information synchronization is performed, and the changed rights information is transmitted to the privacy logging agent 110 for synchronization, and then the event is awaited again (S303 to S305).

[0059] If an authority change operation event by an administrator occurs, the authority newly registered, modified, or deleted by the administrator's operation is stored in the repository, an authority information change event is generated to perform authority information synchronization, and then the system waits for the event again (S306 to S308).

[0060] In this way, the administrator can newly register, modify, or delete the personal information use authority of the information user, and the modified authority information is synchronized with the privacy logging agent 110 through a synchronization procedure.

[0061] FIG. 5 is an operation flowchart of the connection record standardization unit according to the embodiment of the present invention.

[0062] Referring to FIG. 5, the connection record standardization unit 130 obtains connection record source data from the connection record data receiving unit 120, extracts the login ID (Who), extracts the HTTP request time (When), and grasps system information (Where) such as the connection IP and server IP (S401-S404).

[0063] Next, personal information is extracted from the HTTP response (What), and the JDBC driver is used to understand SQL statement actions (How) such as save, change, and delete, to generate a connection record based on the 5W1H principle, and then the record is saved as a JSON format file (S405~S408).

[0064] FIG. 6 is an operation flowchart of the personal information analysis unit according to the embodiment of the present invention.

[0065] 6, the personal information analysis unit 160 obtains a personal information identification regular expression, and obtains personal information schema, table, and column information from the personal information search unit 150 (S501, S502). In addition, the personal information analysis unit 160 obtains a connection record in JSON format according to the six-digit rule from the connection record standardization unit 130, and reads out the connection record data to be analyzed (S503).

[0066] Then, the SQL sentence of the connection record to be analyzed is analyzed to extract schema, table, and column information, and then it is determined whether it is a personal information schema, table, or column (S505 to S506).

[0067] If it is not a personal information schema, table, or column, the personal information regular expression is executed to determine whether or not there is personal information, and if personal information is detected or it is a personal information schema, table, or column, the risk index calculation procedure of Figure 7 is performed to process the personal information confirmation (S507, S512, S513). In the risk index calculation procedure, the total number of uses by personal information type, risk index conversion, and explanation events are generated.

[0068] Thereafter, unstructured data is extracted from the HTTP response, HTML tags are removed to generate pure text data, and the pure text data is subjected to a personal information regular expression (S508 to S511).

[0069] If personal information is detected through the execution of the regular expression, the risk index calculation procedure of FIG. 7 is executed again to confirm the personal information, and then the process returns to reading the connection record data to be analyzed (S514, S515).

[0070] FIG. 7 is a flowchart illustrating a risk index calculation procedure of the personal information analysis unit according to an embodiment of the present invention.

[0071] First, in the embodiment of the present invention, a method for controlling access to personal information according to risk grade is as shown in Table 1 below.

[0072] [Table 1] In the embodiment of the present invention, the risk index can be classified according to the period as shown in Table 2 below.

[0073] [Table 2] In an embodiment of the present invention, risk index calculation factors include personal information type risk level, number of uses by personal information type, access time, vacation or holiday, personal information use authority, unregistered IP, and the like.

[0074] In addition, in order to control personal information users through the risk index value, the personal information authority risk index (PRIVACY_RULE_RISK_V) is defined as shown in Table 3 below.

[0075] [Table 3] The personal information rule risk index (PRIVACY_RULE_RISK_V) is a level value corresponding to the risk index of the information user.

[0076] In addition, the time-specific risk index weighting (TIME_RISK_V) is defined as shown in Table 4 below, and the risk index is reflected by adding weighting values ​​for access outside working hours or on holidays / vacations by information user or department.

[0077] [Table 4] In addition, the risk level (PRIVACY_RISK_V) and weighting value for each personal information type are defined as shown in Table 5 below and reflected when calculating the risk index.

[0078] [Table 5] In addition, the risk weight value (PRIVACY_ACTION_V) for personal information data inquiry / change / deletion is defined as shown in Table 6 below, and risk weight values ​​are assigned according to personal information SQL DML (insert, update, delete) and DROP by information user or department, and reflected in the risk index.

[0079] [Table 6] Using this weight definition, the total risk weight (RISK_V_TOTAL) can be calculated by the time-based risk index weight (TIME_RISK_V) + risk level by personal information type (PRIVACY_RISK_V) + personal information data inquiry / change / deletion (PRIVACY_ACTION_V).

[0080] Referring to FIG. 7, the risk index calculation module of the personal information analysis unit 160 receives a risk index calculation input value in the form of access record data including information such as access time, personal information type, number of uses, logged-in user, and data action (inquiry, deletion, modification, execution SQL, etc.) (S601).

[0081] Next, a connection count risk index (WAS_CONNECT_RISK_V; WCRV) is calculated according to the following equation 1 (S602).

[0082] First, in the embodiment of the present invention, the access count risk index stage is defined as shown in Table 7 below.

[0083] [Table 7]

[0084]

number

[0085] For example, if the condition is a level 1 user of personal information authority and the total number of connection records is 250, it can be calculated as WAS_CONNECT_RISK_V(16) = ((250 / 300) + RISK_V_TOTAL) * 20 (personal information level 1 warning risk index value). A calculation formula can be added to the above value with weighting for access outside of business hours, holidays, and multiple IP users.

[0086] In addition, if the risk value of the condition is greater than severe, it will be classified as a "highest risk connection record for abnormal symptoms" and given five stars, and will be considered as a major management target.

[0087] Meanwhile, the connection risk index classification (WAS Connection Risk Value; WCRV) is defined as shown in Table 8 below.

[0088] [Table 8] Next, a personal information overlook risk index (PRIVACY_OVERLOOK_V; POV) is calculated as follows (S603):

[0089] First, the personal information overlookup stage (PRIVACY_OVERLOOK_V) is defined as shown in Table 9 below.

[0090] [Table 9]

[0091]

number

[0092] For example, if the condition is a level 1 user of personal information authority and the number of personal information uses is 400, the personal information excessive inquiry risk index value (PRIVACY_OVERLOOK_V;12) = ((400 / 500) + RISK_V_TOTAL) * 15 (personal information level 1 caution risk index value) can be calculated by the personal information excessive inquiry risk index (PRIVACY_OVERLOOK_V) = ((number of excessive inquiries / number of level category definitions) + RISK_V_TOTAL) * PRIVACY_RULE_RISK_V). A calculation formula can be added to the above value to apply weighting values ​​for access outside of business hours, holidays, and multiple IP users.

[0093] In addition, if the risk level of the condition is greater than the severe level (20), it will be classified as a "highest risk connection record with abnormal signs" and given five stars, and will be considered as a major management target.

[0094] Meanwhile, the risk index classification of personal information over-inquiry can be defined as shown in Table 10 below.

[0095] [Table 10] Next, a personal information change risk index (PRIVACY_CHANGE_V; PCV) is calculated as shown in Equation 3 (S604).

[0096] First, the personal information change risk index (PRIVACY_CHANGE_V) is defined as shown in Table 11 below.

[0097] [Table 11]

[0098]

number

[0099] For example, if the condition is that the user has one level of personal information authority and the number of personal information uses is 400, the personal information change risk index (PRIVACY_CHANGE_V;12)=((400 / 500)+RISK_V_TOTAL)*15(personal information one level caution risk index value) can be calculated according to Equation 3.

[0100] A calculation formula can be added to the above values ​​that applies weighting for access outside of business hours, holidays, and multiple IP users.

[0101] In addition, if the risk value of the condition is greater than the severe level (20), it will be classified as a "highest risk connection record with abnormal signs" and given five stars, and will be considered as a major management target.

[0102] Meanwhile, the personal information data change risk index (PCV) classification can be defined as shown in Table 12 below.

[0103] [Table 12] Next, the information user risk quotient (URV) is calculated according to the formula in Table 13 (S605).

[0104] In an embodiment of the present invention, the information user risk index calculation classification is defined as shown in Table 13 below.

[0105] [Table 13] In Table 13, MV is the access count weight reduction value, which is divided by 3 to obtain only 33.3%. The information user risk index can be applied to all personal information processing systems such as databases and web servers.

[0106] Subsequently, if the calculated risk index is judged to be an abnormality symptom, an alarm is generated and an alarm mail is transmitted to the information user and the administrator (S606).

[0107] Then, the calculated risk index value is stored in the repository (S607).

[0108] FIG. 8 is a flowchart illustrating the operation of the download control unit according to the embodiment of the present invention.

[0109] 8, when a download control unit 180 receives a request to store and analyze an HTTP download file, the download control unit 180 extracts a file ID and a login ID from an HTTP cookie and stores the original file (S701 to S703).

[0110] Next, file types such as Office, Hwp, PDF, image, etc. are extracted, text is extracted from the files, and personal information is detected based on the personal information analysis unit 160, and the personal information detection result and HTTP cookies are stored (S704-S707). The HTTP cookie includes the File ID, Login ID, Filename, etc., and the personal information detection result includes the total number of uses by personal information type, risk index conversion, etc.

[0111] If it is an HTTP file download request, the file ID and login ID are extracted from the HTTP cookie to search for the requested file (S708~S710). The personal information risk index and number of uses are obtained from the repository, and personal information usage authority information is obtained. If the personal information risk index is greater than the permitted authority, a download request failure is sent to the HTTP Response, and if the personal information risk index is less than the permitted authority, the file download is accepted and the file is transmitted (S711~S715).

[0112] FIG. 9 is a flowchart illustrating the operation of the clarification processing unit according to the embodiment of the present invention.

[0113] Referring to FIG. 9, when a "clarification event" occurs from the personal information analysis unit 160, the proof processing unit 170 extracts the personal information risk index and user information from the repository, obtains information user authority information, and if the personal information risk index is greater than the allowed authority, issues a connection record proof ID, issues a connection record proof including the connection record, personal information usage status, and proof ID according to the six-point principle, and then sends a proof email (S801-S807).

[0114] When a "proof processing completion event" occurs from the web browser, a web screen is opened through the personal information proof URL of the corresponding information user, and a screen for outputting personal information usage details and inputting proof is provided (S808~S810). Subsequently, the proof contents inputted (entered) through the input screen are stored in the repository (S811).

[0115] Although the present invention has been described with reference to one embodiment shown in the drawings, those skilled in the art will recognize that various modifications and equivalent alternative embodiments are possible. [Explanation of symbols]

[0116] 10: Information user 20: Web Application Server (WAS) 30: Database (DBMS) 32: Personal Information 100: Personal information connection record management system 102: Personal information connection record management and control server 104: Connection record manager 110: Privacy Logging Agent 120: Data receiving unit 130: Connection Record Standardization Division 140: Information User Authority Management Department 150: Personal information search department 160:Personal Information Analysis Department 170: Clarification processing section 180: Download control section 190: Web interface

Claims

1. a privacy logging agent for collecting all connection records for HTTP requests and responses of information users and controlling HTTP response data according to accounts; a connection record data receiving unit for receiving and storing the personal information connection record collected from the privacy logging agent; a connection record standardization unit for acquiring information of actual information users of the web connection account from the connection record data receiving unit, and generating and storing a personal information connection record standardized based on the six-point rule; a personal information search unit for searching for personal information stored in a database (DBMS) used by the web application server, analyzing the schema, table, and column information of the personal information, and constructing a data map for use in a personal information identification and judgment process; a personal information analysis unit for acquiring personal information schema, table, and column information from the personal information search unit, acquiring personal information access records standardized according to the six-point rule from the access record standardization unit, identifying personal information, and calculating a risk index for determining the misuse, abuse, leakage, and modification of personal information based on personal information type, number of uses by personal information type, access time, vacation or holiday, personal information use authority, and unregistered IP; An information user authority management department that grants authority to control access to personal information for each information user in order to prevent leakage and misuse of personal information; and a personal information file download control unit which, when it is determined that a personal information file is to be downloaded, compares the authority set in the web connection account with the risk index to determine whether or not to permit the download action of the personal information file.

2. The personal information connection record management device includes:

2. The personal information access record management device of claim 1, further comprising a personal information access justification processing unit that requests justification for the information user's access to personal information and records the input justification when the risk index is equal to or greater than a predetermined value.

3. The privacy logging agent includes: The personal information access record management device according to claim 1 or 2, characterized in that while operating in a plug-in manner in a web application server, the personal information analysis unit compares the risk index of the personal information of the HTTP request based on the authority and setting value of each information user, and provides a response of automatic masking of personal information or excessive use of personal information.

4. setting the authority for personal information access for each information user in order to prevent leakage and misuse of personal information; searching for personal information stored in a database (DBMS) and analyzing the schema, table, and column information of the personal information to construct a data map for use in a personal information identification and judgment process; receiving a request for accessing personal information or downloading a personal information file from a web browser; collecting all connection records for HTTP requests and responses of information users; generating a standardized personal information access record based on six principles from the collected access records; obtaining personal information schema, table, and column information from the data map, obtaining personal information access records standardized according to the six-point rule to identify personal information, and calculating a risk index for determining personal information misuse, leakage, and modification based on personal information type, number of uses by personal information type, access time, vacation or holiday, personal information use authority, and unregistered IP; requesting a justification if the calculated risk index value is equal to or greater than a predetermined value and storing the justification; responding according to the risk index if the HTTP request of the information user is a personal information access request, and judging whether to allow the personal information file to be downloaded according to the risk index if the HTTP request is a personal information file download request.

5. The step of constructing the data map comprises: The method for managing personal information connection records according to claim 4, characterized in that a personal information search policy including database connection information, the number of samplings, a personal information identification regular expression, and a personal information confirmation frequency is obtained, a schema, a table, a column, a view, a procedure, a function and database meta information are collected by connecting to the database, and then the personal information type is determined by utilizing the personal information identification regular expression.

Images