Zaštita osobnih podataka u kartičnom poslovanju

master's thesis

• Title (english): Personal data protection in payment card industry
• Author: Jasna Janković
• Mentor: Boris Vrdoljak (mentor)
• Committee member: Boris Vrdoljak (predsjednik povjerenstva)
• Committee member: Marina Bagić Babac (član povjerenstva)
• Committee member: Mirta Baranović (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2018-07-11, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Stupanjem na snagu Opće uredbe o zaštiti podataka svi informacijski sustavi na području Europske unije moraju ostvariti zahtjeve uredbe o sigurnosti osobnih podataka. Sigurnosni zahtjevi uredbe uključuju zaštitu osobnih podataka pri pohrani i obradi te druge funkcionalnosti sustava kao što su pravo na pristup, prenosivost ili brisanje. Većina zahtjeva proizašla iz prava pojedinaca mogu se ostvariti dopunom funkcionalnosti sustava, osim prava na brisanje zbog kojeg je potrebno napraviti temeljitu analizu sustava i uvođenja ove funkcionalnosti. Zaštita podataka u sustavu pohrane i pri obradi se može ostvariti tokenizacijom. Uvođenjem tokenizacije se mogućnosti napada na sustav svode na jednu komponentu, glavnu bazu tokena, što uvelike olakšava uvođenje zaštite sustava. Tokenizacija je vrlo fleksibilna s obzirom na format podataka, što minimalno mijenja postojeći sustav pri njenom uvođenju.

Abstract (english)

With the entry into force of the General Data Protection Regulation, all information systems in European union area have to fulfill its personal data security demands. Security demands contain personal data protection at rest and in a process, as well as others functionalities such as the right to access, right for data portability or right to be forgotten. The most of the demands that originated from the rights of an individual can be implemented with basic new functionalities, except the right to be forgotten, which requires complete and thorough analysis of the system and the implementation process. Data protection at rest and in a process can be implemented with the help of tokenization. Tokenization makes all vulnerabilities of the system gather to a single component, the main token database, which makes the system greatly simple to protect. Furthermore, the concept of tokenization is very flexible regarding data format, allowing minimum changes if the current system at its implementation.

• Keywords: Opća uredba o zaštiti podataka; zaštita podataka; tokenizacija; strategije tokenizacije; tokenizacija koja čuva format
• Keywords (english): General Data Protection Regulation; GDPR; data protection; tokenization; tokenization strategies; format-preserving tokenization
• Language: croatian
• URN:NBN: urn:nbn:hr:168:181014
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-13 21:09:32