METHOD AND SYSTEM FOR DATA MANAGEMENT

• US 20170372087A1
• Filed: 06/22/2017
• Published: 12/28/2017
• Est. Priority Date: 06/28/2016
• Status: Abandoned Application

• Current Assignee: LINE Corporation (A Holdings Corp.)
• Original Assignee: LINE Corporation (A Holdings Corp.)
• Inventors: LEE, Seokchan
• Application Number:
  US15/630,125
• Publication Number:
  US 20170372087A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Provided is a data management method and system. A data management method executed by an electronic device configured as a computer may include setting a first password for allowing access to data stored on the electronic device; setting a second password for deleting the data or blocking access to the data; providing a user interface for inputting a password; and processing the input password by allowing access to the data in response to an input of the first password through the user interface or by deleting the data or blocking access to the data in response to an input of the second password through the user interface.

Claims

1. A non-transitory computer-readable recording medium storing instructions that, when executed by a processor, cause the processor to perform data management operations in conjunction with an electronic device configured as a computer, the data management operations comprising:

setting a first password for allowing access to data stored on the electronic device,

setting a second password for deleting the data or blocking access to the data,

providing a user interface for inputting a password, and

processing the input password by allowing access to the data in response to an input of the first password through the user interface or by deleting the data or blocking access to the data in response to an input of the second password through the user interface.

2. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the first password includes encrypting the data using a key generated as a desired character string and storing a result value of a first operation between the desired character string and the first password,

the processing of the input password includes allowing access to the data by restoring the key using a result of a second operation between the stored result value and the first password in response to the input of the first password, and by restoring the encrypted data using the restored key, and

the first operation and the second operation have an inverse operation relationship.

3. The non-transitory computer-readable recording medium of claim 2, wherein the processing of the input password includes blocking access to the data by deleting the stored result value in response to the second password being input.

4. The non-transitory computer-readable recording medium of claim 3, wherein the processing of the input password includes backing up the result value by transmitting the generated key to an e-mail address or an external storage device connected to the electronic device, or by uploading the generated key to a server, before deleting the stored result value.

5. The non-transitory computer-readable recording medium of claim 3, wherein the processing of the input password includes deleting the encrypted data after deleting the stored result value in response to the input of the second password.

6. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the first password includes encrypting the data using a key generated as a desired character string and storing a result value of a first operation between the desired character string and the first password,

the setting of the second password includes generating a pair of a public key and a private key separate from the second password, providing a function of transmitting the private key to an outside of the electronic device, and storing the public key on the electronic device, and

the processing of the input password includes blocking access to the data by encrypting the stored result value using the public key in response to the input of the second password.

7. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the first password includes encrypting the data using a key generated in association with the first password, and

the processing of the input password includes allowing access to the data by decrypting the encrypted data using the generated key in response to the input of the first password, and blocking access to the data by deleting the generated key in response to the input of the second password.

8. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the first password includes encrypting the data using a key generated in association with the first password,

the setting of the second password includes generating a pair of a public key and a private key separate from the second password, providing a function of transmitting the private key to an outside of the electronic device, and storing the public key on the electronic device, and

the processing of the input password includes allowing access to the data by decrypting the encrypted data using the key generated in association with the first password in response to the input of the first password, and blocking access to the data by encrypting the key generated in association with the first password using the public key in response to the input of the second password.

9. The non-transitory computer-readable recording medium of claim 1, wherein the processing of the input password includes displaying a preset screen not in interaction with the input to the electronic device while deleting the data or blocking access to the data in response to the input of the second password.

10. The non-transitory computer-readable recording medium of claim 1, wherein

the data includes data that is managed by an application installed and executed on the electronic device, and

the processing of the input password includes processing the input password under control of the application.

11. The non-transitory computer-readable recording medium of claim 10, wherein the providing of the user interface includes providing the user interface and requesting the input of the password every time the application is executed in a foreground.

12. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the second password comprises setting a portion of the data in association with the second password, and

the processing of the input password includes deleting at least the portion of the data set in association with the second password or blocking access to at least the portion of the data set in association with the second password, in response to the input of the second password.

13. The non-transitory computer-readable recording medium of claim 1, wherein

the setting of the second password includes setting a plurality of different second passwords, and

the processing of the input password includes deleting the data or blocking access to the data in response to an input of at least one of the plurality of different second passwords.

14. The non-transitory computer-readable recording medium of claim 1, wherein the first password includes a password for allowing access to the data by allowing use of the electronic device, a password for allowing access to the data by allowing execution of a specific application installed on the electronic device, or a password for allowing direct access to the data.

15. A data management method executed by an electronic device configured as a computer, the method comprising:

setting a first password for allowing access to data stored on the electronic device;

setting a second password for deleting the data or blocking access to the data;

providing a user interface for inputting a password; and

processing the input password by allowing access to the data in response to an input of the first password through the user interface or by deleting the data or blocking access to the data in response to an input of the second password through the user interface.

16. The method of claim 15, wherein

the setting of the first password includes encrypting the data using a key generated as a desired character string and storing a result value of a first operation between the desired character string and the first password,

the processing of the input password includes allowing access to the data by restoring the key using a result of a second operation between the stored result value and the first password in response to the input of the first password, and by restoring the encrypted data using the restored key, and

the first operation and the second operation have an inverse operation relationship.

17. The method of claim 16, wherein the processing of the input password includes blocking access to the data by deleting the stored result value in response to the input of the second password.

18. The method of claim 15, wherein

the setting of the first password includes encrypting the data using a key generated as a desired character string and storing a result value of a first operation between the desired character string and the first password,

the setting of the second password includes generating a pair of a public key and a private key separate from the second password, providing a function of transmitting the private key to an outside of the electronic device, and storing the public key on the electronic device, and

the processing of the input password includes blocking access to the data by encrypting the stored result value using the public key in response to the input of the second password.

19. The method of claim 15, wherein the setting of the first password includes encrypting the data using a key generated in association with the first password, and

the processing of the input password includes allowing access to the data by decrypting the encrypted data using the generated key in response to the input of the first password, and blocking access to the data by deleting the generated key in response to the input of the second password.

20. The method of claim 15, wherein

the setting of the first password includes encrypting the data using a key generated in association with the first password,

the setting of the second password includes generating a pair of a public key and a private key separate from the second password, providing a function of transmitting the private key to an outside of the electronic device, and storing the public key on the electronic device, and

the processing of the input password includes allowing access to the data by decrypting the encrypted data using the key generated in association with the first password in response to the input of the first password, and blocking access to the data by encrypting the key generated in association with the first password using the public key in response to the input of the second password.