De-identification processing method for management of personal identification information and apparatus therefor

1 . An operation method of a de-identification service provision apparatus for management of personal identification information, the operation method comprising:

obtaining personal identification information corresponding to personal information comprising receiving the personal identification information one-way converted with a transmission period encrypted from the personal information from an institute server;

identifying a de-identification mode corresponding to the personal identification information;

performing iterative hash chain processing by the number of times determined in accordance with the de-identification mode in correspondence to the personal identification information, wherein the performing of iterative hash chain processing comprises repeatedly hashing the personal identification information or a string in which the personal identification information and a special string are combined by a preset number of repetitions in accordance with the de-identification mode;

configuring a relational database corresponding to the personal identification information using de-identification code information obtained as a result of the iterative hash chain processing; and

replacing de-identification code information stored in the relational database with de-identification information of the personal identification information and providing the de-identification information to a target network.

2 . The operation method of claim 1 , wherein the obtaining of personal identification information comprises:

decrypting a transmission period for the received personal identification information, and

the providing the de-identification information to a blockchain network comprises:

replacing the personal identification information transmitted from the institute server with the de-identification code information and encrypting a transmission period; and

propagating the transmission period-encrypted de-identification information to a blockchain network connected with the institute server.

3 . The operation method of claim 1 , wherein the de-identification mode comprises a first mode that calculates the number of repetitions of the iterative hash chain processing on the basis of string information of the personal identification information.

4 . The operation method of claim 3 , wherein the performing of iterative hash chain processing comprises:

extracting and concatenating numeric values of a string of the personal identification information when the de-identification mode is identified as the first mode;

summing a first number and a last number of the concatenated string; and

calculating a unit digit of the summed value as the number of repetitions.

5 . The operation method of claim 1 , wherein the de-identification mode comprises a second mode that calculates the number of repetitions of the iterative hash chain processing using a timestamp corresponding to the personal identification information as a random seed.

6 . The operation method of claim 5 , wherein the performing of iterative hash chain processing comprises:

creating a timestamp corresponding to the personal identification information when the de-identification mode is identified as the second mode; and

determining a random value determined within a predetermined range as the number of repetitions of the iterative hash chain processing using the timestamp as a seed.

7 . The operation method of claim 1 , wherein the de-identification mode comprises a third mode that calculates the number of repetitions of the iterative hash chain processing using a string of a timestamp corresponding to the personal identification information.

8 . The operation method of claim 7 , wherein the performing of iterative hash chain processing comprises:

extracting a timestamp string corresponding to the personal identification information when the de-identification mode is identified as the third mode;

combining a last digit number obtained from the timestamp string with the personal identification information; and

performing the iterative hash chain processing by a preset number of times using the personal identification information combined with the last digit number.

9 . A de-identification service provision apparatus comprising:

a personal identification information collector-processor configured to obtain personal identification information corresponding to personal information, wherein the personal identification information collector-processor receives the personal identification information one-way converted with a transmission period encrypted from the personal information from an institute server through a communication module;

an iterative hash chain processor configured to identify a de-identification mode corresponding to the personal identification information and perform iterative hash chain processing by the number of times determined in accordance with the de-identification mode in correspondence to the personal identification information, wherein the iterative hash chain processor repeatedly hashes the personal identification information or a string in which the personal identification information and a special string are combined by a preset number of repetitions in accordance with the de-identification mode;

a database manager configured to configure a relational database corresponding to the personal identification information using de-identification code information obtained as a result of the iterative hash chain processing; and

a service processor configured to replace de-identification code information stored in the relational database with de-identification information of the personal identification information, and provide the de-identification information to a target network.

10 . The de-identification service provision apparatus of claim 9 , wherein

the service processor replaces the personal identification information transmitted from the institute server with the de-identification information, encrypts a transmission period, and propagates the transmission period-encrypted de-identification information to a blockchain network connected with the institute server through the communication module.

11 . The de-identification service provision apparatus of claim 9 , wherein the de-identification mode comprises at least one of a first mode that calculates the number of repetitions of the iterative hash chain processing on the basis string information of the personal identification information, a second mode that calculates the number of repetitions of the iterative hash chain processing using a timestamp corresponding to the personal identification information as a random seed, and a third mode that calculates the number of repetitions of the iterative hash chain processing using a string of a timestamp corresponding to the personal identification information.

12 . The de-identification service provision apparatus of claim 11 , wherein when the de-identification mode is identified as the first mode, the iterative hash chain processor extracts and concatenates numeric values of a string of the personal identification information, sums a first number and a last number of the concatenated string, and calculates a units digit of the summed value as the number of repetitions.

13 . The de-identification service provision apparatus of claim 11 , wherein when the de-identification mode is identified as the second mode, the iterative hash chain processor creates a timestamp corresponding to the personal identification information and determines a random value determined within a predetermined range as the number of repetitions of the iterative hash chain processing using the timestamp as a seed.

14 . The de-identification service provision apparatus of claim 11 , wherein when the de-identification mode is identified as the third mode, the iterative hash chain processor extracts a timestamp string corresponding to the personal identification information, combines a last digit number obtained from the timestamp string with the personal identification information, and performs the iterative hash chain processing by a preset number of times using the personal identification information combined with the last digit number.

15 . Non-transitory computer-readable storage medium, configured to store instructions which when executed perform the following operations:

obtain a hash chain value for iterative hash chain processing from personally identifiable information;

two-way encrypt a first timestamp string;

perform a first hash chain of one-way encrypting a first connection string composed of the non-encrypted first timestamp string and the personally identifiable information;

performing a second hash chain of extracting a second timestamp string at a second time point corresponding to the second hash chain and of one-way encrypting a second connection string obtained by concatenating second timestamp string with a result of the first hash chain;

repeatedly perform a process of extracting an N-th timestamp string at an N-th time point corresponding to an N-th hash chain that is a next of the second hash chain, of concatenating the N-th timestamp string to a result of an N−1-th hash chain, performing one-way encryption, and of increasing N by 1 until the number of repetitions calculated on the basis of the hash chain value is reached;

output de-identified code information obtained as the number of repetitions is reached; and

configure a relational database using the personally identifiable information, the two-way encrypted first timestamp string, and difference information between timestamps.

16 . The non-transitory computer-readable storage medium of claim 15 , wherein the instructions, when executed, are further configured to:

obtain a two-way encrypted first timestamp string and difference information between timestamps from the relational database in correspondence to personally identifiable information requested to be inquired from an external device;

perform a first hash chain of decrypting the two-way encrypted first timestamp string and of one-way encrypting a first string obtained by concatenating the two-way encrypted first timestamp string with the personally identifiable information requested to be inquired;

obtain a second timestamp string by separating a first difference value from the difference information of the timestamps and adding the first difference value to the first timestamp string;

perform a second hash chain of combining the second timestamp string with a result of the first hash chain and of performing one-way encryption;

repeatedly perform a process of calculating N-th timestamp string corresponding to an N-th hash chain that is a next of the second hash chain from the difference information of the timestamps, of concatenating the N-th timestamp string to a result of an N−1-th hash chain, performing one-way encryption, and increasing N by 1 until a hash chain determined in accordance with the difference information of the timestamps is finished; and

output an iterative hash chain result according to repeated performance as pre-converted de-identification information in correspondence to the personally identifiable information.