De-identification processing method for management of personal identification information and apparatus therefor

A de-identification service provision apparatus comprising:

• a personal identification information collector-processor configured to obtain personal identification information corresponding to personal information, wherein the personal identification information collector-processor receives the personal identification information one-way converted with a transmission period encrypted from the personal information from an institute server through a communication module;
• an iterative hash chain processor configured to identify a de-identification mode corresponding to the personal identification information and perform iterative hash chain processing by the number of times determined in accordance with the de-identification mode in correspondence to the personal identification information, wherein the iterative hash chain processor repeatedly hashes the personal identification information or a string in which the personal identification information and a special string are combined by a preset number of repetitions in accordance with the de-identification mode;
• a database manager configured to configure a relational database corresponding to the personal identification information using de-identification code information obtained as a result of the iterative hash chain processing;
• and
• a service processor configured to replace de-identification code information stored in the relational database with de-identification information of the personal identification information, and provide the de-identification information to a target network.

Non-transitory computer-readable storage medium, configured to store instructions which when executed perform the following operations:

• obtain a hash chain value for iterative hash chain processing from personally identifiable information;
• two-way encrypt a first timestamp string;
• perform a first hash chain of one-way encrypting a first connection string composed of the non-encrypted first timestamp string and the personally identifiable information;
• performing a second hash chain of extracting a second timestamp string at a second time point corresponding to the second hash chain and of one-way encrypting a second connection string obtained by concatenating second timestamp string with a result of the first hash chain;
• repeatedly perform a process of extracting an N-th timestamp string at an N-th time point corresponding to an N-th hash chain that is a next of the second hash chain, of concatenating the N-th timestamp string to a result of an N−1-th hash chain, performing one-way encryption, and of increasing N by 1 until the number of repetitions calculated on the basis of the hash chain value is reached;
• output de-identified code information obtained as the number of repetitions is reached;
• and
• configure a relational database using the personally identifiable information, the two-way encrypted first timestamp string, and difference information between timestamps.