Method and System for Transmitting and Receiving User's Personal Information Using Agent

• US 20080294896A1
• Filed: 12/06/2006
• Published: 11/27/2008
• Est. Priority Date: 12/12/2005
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Kim, Seung-Hyun, Noh, Jong-Hyouk, Choi, Dae Seon, Cho, Sang Rae, Jin, Seung Hun, Cho, Yeong Sub
• Granted Patent: US 8,769,276 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A method and system for transmitting and receiving user'"'"'s personal information using an agent are provided. An information management server managing user'"'"'s personal information provides an agent including user'"'"'s personal information in response to a user'"'"'s personal information request message from a client. A client receives the agent and requests user'"'"'s personal information from the agent. Then, the agent determines whether the client is authorized and provides the user'"'"'s personal information to the client when it is determined that the client is authorized. Accordingly, the user'"'"'s personal information is safely managed and transmitted.

Claims

1. A method of transmitting user'"'"'s personal information, the method comprising:

detecting user'"'"'s personal information in response to a user'"'"'s personal information request message from a client using an information management server;

generating an encryption key used to encrypt the detected user'"'"'s personal information and a decryption key used to decrypt the encrypted user'"'"'s personal information;

encrypting the detected user'"'"'s personal information using the encryption key and signing the encrypted user'"'"'s personal information;

generating an agent comprising the encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide the user'"'"'s personal information only to an authorized client; and

transmitting the agent and the decryption key to the client.

2. The method of claim 1, wherein the user'"'"'s personal information request message comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and the information management server detects the user'"'"'s personal information only when the use'"'"'s purpose information comprised in the user'"'"'s personal information request message agrees with a predetermined user'"'"'s purpose information.

3. The method of claim 2, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message.

4. The method of claim 1, wherein the verification information comprises at least one of an effective period, a user'"'"'s count limit of the user'"'"'s personal information.

5. The method of claim 1, wherein the verification information comprises a public key of the client.

6. The method of claim 1, wherein the agent is a software mobile agent that is transmitted from the information management server to the client.

7. A method of receiving user'"'"'s personal information, the method comprising:

a client receiving from an information management server an agent comprising encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, verification information used to provide user'"'"'s personal information only to an authorized client, and a decryption key used to decrypt the encrypted user'"'"'s personal information;

the client transmitting a user'"'"'s personal information request message to the agent;

the agent determining whether the client is fairly authorized based on the verification information;

when it is determined that the client is authorized, the agent providing the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the client; and

the client verifying the user'"'"'s personal information signature value using a public key of the information management server and, when the user'"'"'s personal information signature value is verified, decrypting the encrypted user'"'"'s personal information using the decryption key to extract the user'"'"'s personal information.

8. The method of claim 7, wherein the verification information comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information,

the user'"'"'s personal information request message transmitted to the agent comprising user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and

determining of whether the client is fairly authorized comprises determining whether the user'"'"'s purpose information comprised in the verification information is the same as the user'"'"'s purpose information comprised in the user'"'"'s personal information request message.

9. The method of claim 7, wherein the verification information comprises at least one of an effective period and a user'"'"'s count limit of the user'"'"'s personal information, and

determining whether the client is fairly authorized comprises determining whether at least one condition of the effective period and the user'"'"'s count limit is satisfied.

10. The method of claim 7, wherein the verification information comprises a public key of the client, and

determining of whether the client is fairly authorized comprises determining whether the client is authorized using the public key of the client.

11. The method of claim 7, wherein the agent is a software mobile agent that is transmitted from the information management server to the client.

12. A system for transmitting user'"'"'s personal information, the system comprising:

an information detector detecting user'"'"'s personal information, that has been stored in advance, in response to a user'"'"'s personal information request message from a client;

a key generator generating an encryption key to encrypt the detected user'"'"'s personal information and a decryption key to decrypt the encrypted user'"'"'s personal information;

an encryption unit encrypting the detected user'"'"'s personal information using the encryption key and signing the encrypted user'"'"'s personal information;

an agent generator generating an agent comprising the encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide the user'"'"'s personal information only to an authorized client; and

a transceiver receiving the user'"'"'s personal information request message from the client, outputting the user'"'"'s personal information request message to the information detector, and transmitting the agent and the decryption key to the client.

13. The system of claim 12, wherein the user'"'"'s personal information request message comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and the information detector detecting the user'"'"'s personal information only when the user'"'"'s purpose information comprised in the user'"'"'s personal information request message agrees with a predetermined user'"'"'s purpose information.

14. The system of claim 12, wherein the verification information comprises at least one among user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, an effective period, a user'"'"'s count limit of the user'"'"'s personal information, and a public key of the client.

15. The system of claim 12, wherein the agent comprises:

a storage storing the encrypted user'"'"'s personal information, the user'"'"'s personal information signature value, and the verification information;

a personal information controller receiving the user'"'"'s personal information request message from the client and detecting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the client is authorized to access the user'"'"'s personal information based on the verification information; and

an interface receiving the user'"'"'s personal information request message from the client, transmitting the user'"'"'s personal information request message to the personal information controller, and transmitting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the client.

16. A system for receiving user'"'"'s personal information, the system comprising:

a transceiver transmitting a users'"'"' personal information request message to an information management server and receiving from the information management server an agent comprising encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide user'"'"'s personal information only to an authorized system and a decryption key used to decrypt the encrypted user'"'"'s personal information;

an agent interface unit transmitting a user'"'"'s personal information request message to the agent and receiving the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value from the agent when the agent determines that the system is authorized to access the user'"'"'s personal information based on the verification information; and

a decryption unit verifying the user'"'"'s personal information signature value received through the agent interface using a public key of the information management server and decrypting the encrypted user'"'"'s personal information using the decryption key to extract the user'"'"'s personal information

17. The system of claim 16, wherein the verification information comprises at least one among user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, an effective period, a user'"'"'s count limit of the user'"'"'s personal information, and a public key of the system.

18. The system of claim 16, wherein the agent comprises:

a storage storing the encrypted user'"'"'s personal information, the user'"'"'s personal information signature value, and the verification information;

a personal information controller receiving the user'"'"'s personal information request message and detecting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the system is authorized to access the user'"'"'s personal information based on the verification information; and

an interface receiving the user'"'"'s personal information request message from the agent interface unit, transmitting the user'"'"'s personal information request message to the personal information controller, and transmitting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the agent interface unit.