Patent ID: 8769276

Claim:
A method of transmitting user's personal information, the method comprising: detecting user's personal information in response to a user's personal information request message from a client using an information management server; generating an encryption key used to encrypt the detected user's personal information and a decryption key used to decrypt the encrypted user's personal information; encrypting the detected user's personal information using the encryption key and signing the encrypted user's personal information; generating an agent comprising the encrypted user's personal information, a user's personal information signature value, and verification information used to provide the user's personal information only to an authorized client, wherein the verification information comprises the user's purpose information comprised in the user's personal information request message; and transmitting the agent and the decryption key to the client, wherein the verification information is included in the agent before the user's personal information is encrypted and the user's personal information signature value is transmitted to the client, wherein the verification information: is included without being encrypted so that the verification information can be utilized by the client without decryption, and comprises a public key of the client; and wherein the agent receives the user's personal information request message from the client and detects the encrypted user's personal information and the user's personal information signature value when it is determined that the client is authorized to access the user's personal information based on the verification information, wherein the agent is a software mobile agent which can move to and work in a different host.