Method and system for transmitting and receiving user's personal information using agent

• US 8,769,276 B2
• Filed: 12/06/2006
• Issued: 07/01/2014
• Est. Priority Date: 12/12/2005
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Noh, Jong-Hyouk, Kim, Seung-Hyun, Choi, Dae Seon, Cho, Sang Rae, Cho, Yeong Sub, Jin, Seung Hun
• Primary Examiner(s): Benoit, Esther
• Application Number:
  US12/097,179
• Publication Number:
  US 20080294896A1
• Time in Patent Office: 2,764 Days
• Field of Search: 713/168
• US Class Current: 713/168
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A method and system for transmitting and receiving user'"'"'s personal information using an agent are provided. An information management server managing user'"'"'s personal information provides an agent including user'"'"'s personal information in response to a user'"'"'s personal information request message from a client. A client receives the agent and requests user'"'"'s personal information from the agent. Then, the agent determines whether the client is authorized and provides the user'"'"'s personal information to the client when it is determined that the client is authorized. Accordingly, the user'"'"'s personal information is safely managed and transmitted.

Claims

1. A method of transmitting user'"'"'s personal information, the method comprising:

detecting user'"'"'s personal information in response to a user'"'"'s personal information request message from a client using an information management server;

generating an encryption key used to encrypt the detected user'"'"'s personal information and a decryption key used to decrypt the encrypted user'"'"'s personal information;

encrypting the detected user'"'"'s personal information using the encryption key and signing the encrypted user'"'"'s personal information;

generating an agent comprising the encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide the user'"'"'s personal information only to an authorized client, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message; and

transmitting the agent and the decryption key to the client,

wherein the verification information is included in the agent before the user'"'"'s personal information is encrypted and the user'"'"'s personal information signature value is transmitted to the client, wherein the verification information;

is included without being encrypted so that the verification information can be utilized by the client without decryption, and

comprises a public key of the client; and

wherein the agent receives the user'"'"'s personal information request message from the client and detects the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the client is authorized to access the user'"'"'s personal information based on the verification information,

wherein the agent is a software mobile agent which can move to and work in a different host.

2. The method of claim 1, wherein the user'"'"'s personal information request message comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and the information management server detects the user'"'"'s personal information only when the user'"'"'s purpose information comprised in the user'"'"'s personal information request message agrees with a predetermined user'"'"'s purpose information.

3. The method of claim 2, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message.

4. The method of claim 1, wherein the verification information comprises at least one of an effective period, a user'"'"'s count limit of the user'"'"'s personal information.

5. The method of claim 1, wherein the agent is a software mobile agent that is transmitted from the information management server to the client.

6. A method of receiving user'"'"'s personal information, the method comprising:

a client receiving from an information management server an agent comprising encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, verification information used to provide user'"'"'s personal information only to an authorized client, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message, and a decryption key used to decrypt the encrypted user'"'"'s personal information;

the client transmitting a user'"'"'s personal information request message to the agent;

the agent determining whether the client is fairly authorized based on the verification information;

when it is determined that the client is authorized, the agent providing the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the client; and

the client verifying the user'"'"'s personal information signature value using a public key of the information management server and, when the user'"'"'s personal information signature value is verified, decrypting the encrypted user'"'"'s personal information using the decryption key to extract the user'"'"'s personal information,

wherein the verification information is included in the agent before the user'"'"'s personal information is encrypted and the user'"'"'s personal information signature value is transmitted to the client, wherein the verification information;

is included without being encrypted so that the verification information can be utilized by the client without decryption, and

comprises a public key of the client; and

wherein the agent receives the user'"'"'s personal information request message from the client and detects the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the client is authorized to access the user'"'"'s personal information based on the verification information,

wherein the agent is a software mobile agent which can move to and work in a different host.

7. The method of claim 6, wherein the verification information comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information,

the user'"'"'s personal information request message transmitted to the agent comprising user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and

determining of whether the client is fairly authorized comprises determining whether the user'"'"'s purpose information comprised in the verification information is the same as the user'"'"'s purpose information comprised in the user'"'"'s personal information request message.

8. The method of claim 6, wherein the verification information comprises at least one of an effective period and a user'"'"'s count limit of the user'"'"'s personal information, and

determining whether the client is fairly authorized comprises determining whether at least one condition of the effective period and the user'"'"'s count limit is satisfied.

9. The method of claim 6, wherein the verification information comprises a public key of the client, and

determining of whether the client is fairly authorized comprises determining whether the client is authorized using the public key of the client.

10. The method of claim 6, wherein the agent is a software mobile agent that is transmitted from the information management server to the client.

11. A system for transmitting user'"'"'s personal information, the system comprising:

an information detector detecting user'"'"'s personal information, that has been stored in advance, in response to a user'"'"'s personal information request message from a client;

a key generator generating an encryption key to encrypt the detected user'"'"'s personal information and a decryption key to decrypt the encrypted user'"'"'s personal information;

an encryptor encrypting the detected user'"'"'s personal information using the encryption key and signing the encrypted user'"'"'s personal information;

an agent generator generating an agent comprising the encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide the user'"'"'s personal information only to an authorized client, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message; and

a transceiver receiving the user'"'"'s personal information request message from the client, outputting the user'"'"'s personal information request message to the information detector, and transmitting the agent and the decryption key to the client, wherein the verification information is included in the agent before the user'"'"'s personal information is encrypted and the user'"'"'s personal information signature value is transmitted to the client, wherein the verification information;

is included without being encrypted so that the verification information can be utilized by the client without decryption, and

comprises a public key of the client;

wherein the agent receives the user'"'"'s personal information request message from the client and detects the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the client is authorized to access the user'"'"'s personal information based on the verification information, wherein authorization is based on;

a requested item from the user'"'"'s personal information that is present in storage, the user'"'"'s purpose information in the user'"'"'s personal information request message agreeing with the purpose information in the storage,

an arrival time of the request message within an effective period, and a total number of requests that are less than or equal to a user'"'"'s count limit stored in the storage, wherein the agent is a software mobile agent which can move to and work in a different host.

12. The system of claim 11, wherein the user'"'"'s personal information request message comprises user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, and the information detector detecting the user'"'"'s personal information only when the user'"'"'s purpose information comprised in the user'"'"'s personal information request message agrees with a predetermined user'"'"'s purpose information.

13. The system of claim 11, wherein the verification information comprises at least one among user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, an effective period, a user'"'"'s count limit of the user'"'"'s personal information, and a public key of the client.

14. The system of claim 11, wherein the agent comprises:

a storage storing the encrypted user'"'"'s personal information, the user'"'"'s personal information signature value, and the verification information; and

an interface receiving the user'"'"'s personal information request message from the client, transmitting the user'"'"'s personal information request message to the personal information controller, and transmitting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the client.

15. A system for receiving user'"'"'s personal information, the system comprising:

a transceiver transmitting a users'"'"' personal information request message to an information management server and receiving from the information management server an agent comprising encrypted user'"'"'s personal information, a user'"'"'s personal information signature value, and verification information used to provide user'"'"'s personal information only to an authorized system and a decryption key used to decrypt the encrypted user'"'"'s personal information, wherein the verification information comprises the user'"'"'s purpose information comprised in the user'"'"'s personal information request message;

an agent interface transmitting a user'"'"'s personal information request message to the agent and receiving the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value from the agent when the agent determines that the system is authorized to access the user'"'"'s personal information based on the verification information; and

a decryptor verifying the user'"'"'s personal information signature value received through the agent interface using a public key of the information management server and decrypting the encrypted user'"'"'s personal information using the decryption key to extract the user'"'"'s personal information,

wherein the verification information is included in the agent before the user'"'"'s personal information is encrypted and the user'"'"'s personal information signature value is transmitted to the client, wherein the verification information;

is included without being encrypted so that the verification information can be utilized by the client without decryption, and

comprises a public key of the account

wherein the agent receives the user'"'"'s personal information request message from the client and detects the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value when it is determined that the client is authorized to access the user'"'"'s personal information based on the verification information, wherein authorization is based on;

a requested item from the user'"'"'s personal information that is present in storage, the user'"'"'s purpose information in the user'"'"'s personal information request message agreeing with the purpose information in the storage,

an arrival time of the request message within an effective period, and a

total number of requests that are less than or equal to a user'"'"'s count limit stored in the storage,

wherein the agent is a software mobile agent which can move to and work in a different host.

16. The system of claim 15, wherein the verification information comprises at least one among user'"'"'s purpose information indicating the purpose of using the user'"'"'s personal information, an effective period, a user'"'"'s count limit of the user'"'"'s personal information, and a public key of the system.

17. The system of claim 15, wherein the agent comprises:

a storage storing the encrypted user'"'"'s personal information, the user'"'"'s personal information signature value, and the verification information; and

an interface receiving the user'"'"'s personal information request message from the agent interface, transmitting the user'"'"'s personal information request message to the personal information controller, and transmitting the encrypted user'"'"'s personal information and the user'"'"'s personal information signature value to the agent interface unit.