KR100740682B1 - Secure file server system prevent data save from local pc, and and method thereof and media that can record computer program for method thereof - Google Patents

Abstract

A secure file server system for preventing data from being stored to a local PC, and a method and a recording medium storing a computer program thereof are provided to prevent IP such as a document from being exposed or flown out by making a user store the document to a secure file server while enabling the user to perform document work as if working with a local PC. The secure file server provides an environment capable of storing a plurality of file servers, and makes the user store the document to a specific file server while providing the connected local PCs with the same document working function as the local PC. The local PC is automatically connected to the secure file server through the network, provides a Windows explorer with a RAM disk as a user working area, and displays accessible server/folder name to a lower folder of the RAM disk according to authority of the user. The local PC prevents the user from storing the data to a user PC or permits restricted access to the user PC depending on a storage policy predetermined to each user, and makes the processed document stored to the specific file server.

Description

SECURE FILE SERVER SYSTEM PREVENT DATA SAVE FROM LOCAL PC, AND AND METHOD THEREOF AND MEDIA THAT CAN RECORD COMPUTER PROGRAM FOR METHOD THEREOF}

1 and 2 is a conceptual view of the operation of the secure file server system to prevent data storage to the local PC according to a preferred embodiment of the present invention

3 is a block diagram of a secure file server system for preventing data storage to a local PC according to a preferred embodiment of the present invention

4 is a screen showing the 'File Server Management' menu screen of ArtStorage

5 is a screen for explaining a method of terminating a connection of a target server in the file server management menu screen of FIG.

6A to 6C are screens for describing a server manager, a data manager, and a user setting method for a target server in the 'file server management' menu screen of FIG. 4.

FIG. 7 is a screen for explaining a method of checking file server display information of a target server in the “file server management” menu screen of FIG. 4; FIG.

8A and 8B are screens illustrating a data disk management method for a target server in the file server management menu screen of FIG.

9A to 9C are screens for describing a service control method for a target server in the file server management menu screen of FIG. 4.

FIG. 10 is a screen for explaining a method of restarting a target server in the file server management menu screen of FIG.

11 is a screen showing a 'shared folder management' menu screen of ArtStorage

12A to 12G are screens illustrating a method of setting access rights for a shared folder in the 'shared folder management' menu screen of FIG.

13A to 13C are screens for explaining a method of changing quota information setting of a shared folder in the 'shared folder management' menu screen of FIG.

FIG. 14 is a screen illustrating a 'document class setting' window of a shared folder on the 'shared folder management' menu screen of FIG.

15 is a screen showing the 'work history search' menu screen of ArtStorage

16 is a screen showing a 'monitor' menu screen of ArtStorage

17A to 17E are screens illustrating a method of performing data and folder quota refining of a file server on a 'scheduler' menu screen of ArtStorage.

18A and 18B are screens for explaining a method of performing a setting operation for a communication port, database server information, and a system administrator in an 'Configuration' menu screen of ArtStorage.

19A to 19G are screens for explaining how to add an ArtStorage administrative template and how to set up Group Policy for ArtStorage servers and clients.

20A and 20B are screens of running Windows Explorer on a client PC on which an ArtStorage Client is installed.

21A through 21G are screens for explaining a method of storing a document in an ArtStorage secure file server.

The present invention relates to a secure file server system for preventing data storage to a local PC (PC), and a method and a recording medium storing a computer program for the method, in particular to perform a document operation as if working on a local PC However, the storage of documents can be stored only within a specific file server and operated in conjunction with the Digital Rights Management (DRM) solution to prevent data storage on the local PC that can completely block the exposure and leakage of intellectual property such as documents. The present invention relates to a secure file server system for preventing and a method and a recording medium storing a computer program for the method.

In general, various files created on a computer, such as key confidential documents and design drawings, are the intellectual property of a company. These assets are usually on individual PCs and are shared with each other via network file servers or with each other on their PCs. If these documents should not be allowed to be exposed or leaked to the outside, security solutions such as Digital Rights Management (DRM) are used to protect intellectual property. The idea of the DRM consists of additional technology that prevents decryption of encrypted documents and prevents copying and printing of documents regardless of the storage location of the documents.

However, in the past, despite using the DRM solution for document exposure / leakage prevention, there are the following problems.

A) Document disclosure and leakage by insiders

If you use a file server to share document files, you control access to the document files. Access control on the file server assigns permission levels such as 'read-only', 'modify' and 'no permission' to prevent unintended corruption of files stored on the server. However, even if only read-only permission is granted, the file download from the file server can be freely used and thus cannot be used as a way to prevent exposure / leakage of main documents. There was a security loophole that could take the document to the PC where it was downloaded.

In order to solve this problem, conventionally, the DRM solution was used to prevent the exposure / leakage of documents by the insider. However, since the DRM solution does not specifically limit the storage location of the document, it can be stored in a personal notebook, an external storage medium, or a web site, and although it is extremely difficult to decrypt the contents of the file, the file name, type, etc. If you are able to expose the document and decide to decrypt the document, as with many encryption technologies, it involves the risk of decryption by investing a long time.

Therefore, since the DRM solution does not limit the storage location of the document, the DRM solution may store the document locally such as a notebook and take it outside. Therefore, since the user can open and view the document stored in the notebook from the outside, even if the DRM solution is applied, it is difficult to prevent an insider having access to the document from exposing or leaking the document.

As such, it is true that even using the file server or the DRM solution, it is difficult to prevent exposure / leakage by the person who can access the document. As an example, the number of damages caused by industrial spies and the exposure / leakage of internal company information by retirees and insiders is increasing rapidly, and countermeasures are strongly required.

B) Document exposure / leakage due to theft and loss of PC

Typically, many documents produced by a company are generated on a local PC and collected in a groupware or file server. At this time, users need minimal training to access documents collected in groupware or file server.

In order to protect confidential documents stored in the local PC, DRM and the like may be applied, and some training is required. Confidential documents often require that their existence is confidential. If a document requiring such security and confidentiality exists on the local PC, the responsibility for the security of this document is given to each individual, and various training for security must be continuously provided to each individual.

If your PC or laptop is lost or stolen, confidential data may be exposed or leaked to the outside.

C) Prevention of document exposure due to carelessness of the document worker

If the document worker has a job feature that requires confidentiality, the document produced by the worker must be guaranteed to be confidential in itself.

Research organizations that conduct business secrets and research tasks, such as personnel, accounting, and finance, may need to be aware of document exposures in addition to document exposure / leakage by outside attackers or document exposure / leakage by insiders. In this way, if the document is exposed to people other than the worker, and material and mental damage is expected to be caused to himself and his organization, the document information should be prevented from being exposed to the outside by unintentional intention.

Accordingly, the present invention has been made to solve the above problems, and the object of the present invention is to perform a document work the same as working on a local PC, but the storage of the document to be stored only in a specific file server, so as to the local disk Provides a secure file server system that prevents data storage to a local PC that prevents the disclosure and leakage of intellectual property such as documents by blocking the source of confidential data, and a method and a recording medium storing a computer program for the method. There is.

In addition, another object of the present invention is to perform the document work the same as working on the local PC, but only the storage of the document is stored in a specific file server and operate in conjunction with the DRM solution, so that intellectual assets such as documents by the insider The present invention provides a secure file server system that prevents data storage to a local PC that can completely block exposure / spillage to the outside, and a method and a recording medium storing computer programs therefor.

In addition, another object of the present invention is to provide a secure file server system, a method, and a method thereof for preventing data storage to a local PC that prohibits unauthorized users from accessing the local PC accessing the specific file server. The present invention provides a recording medium storing a computer program.

In addition, another object of the present invention is to store a secure file server system and a method and a computer program for the method to prevent data storage to the local PC to control the storage space for each user through the quota setting in the specific file server To provide a record carrier.

Still another object of the present invention is to provide a server connection control function for a user, and a secure file server system and method and method thereof for preventing data storage to a local PC which prevents exposure of confidential data stored in the specific file server. It is to provide a recording medium storing a computer program for the.

In addition, another object of the present invention is a secure file server system that prevents data storage to a local PC to set up a centralized client (PC) environment using Group Policy (GPO) of large departments, medium-sized departments, small departments, etc. And a recording medium storing the method and a computer program for the method.

In addition, another object of the present invention is a secure file server system that prevents the storage of data to a local PC that can completely block the exposure / leakage of intellectual property such as documents when the laptop or PC in use is stolen and lost; To provide a method and a recording medium storing a computer program for the method.

Still another object of the present invention is to provide a secure file server system and a method for preventing data storage on a local PC that can protect against unspecified or unauthorized access to secure documents in a notebook or a PC, and a method thereof. The present invention provides a recording medium storing a computer program for the method.

In addition, another object of the present invention is to enable the reverse tracking in the event of an emergency or similar situation through a detailed job log of the document work occurring in the secure file server, local PC that can identify the origin and analyze the work pattern when a security incident occurs The present invention provides a secure file server system for preventing data storage in a furnace, and a method and a recording medium storing a computer program for the method.

In addition, another object of the present invention is to provide a secure file server system, a method and a computer program for separating the encrypted data communication channel and the file transfer channel to prevent data storage to the local PC providing optimized communication performance It is to provide a recording medium that stores the.

Still another object of the present invention is to provide a secure file server system for preventing data storage on a local PC that permanently securely deletes a document deleted on a server using a secure deletion solution, and a method and a computer program for the method. To provide a record carrier.

Still another object of the present invention is to provide a secure file server system and a method for preventing data storage on a local PC that permanently securely deletes a document and file history (cache) of an application program using a secure deletion solution on a server. The present invention provides a recording medium storing a computer program for the method.

In addition, another object of the present invention to provide a secure file server system for preventing data storage to a local PC that provides a user interface, such as the operation of the existing Windows Explorer, and a method and a recording medium storing a computer program for the method There is.

In order to achieve the above object, a method of preventing data storage on a local PC according to the present invention includes: (a) providing a environment in which a plurality of file servers can be managed, and a local PC connected to a local PC connected through a communication network; Installing a secure file server solution (ArtStorage) manager program on the secure file server to perform the same document operation as that on the document but save the document only to a specific file server; (b) installing a secure file server solution (ArtStorage) client program automatically connected to the secure file server through a communication network on a local PC; (c) starting a Windows Explorer after logging in a program installed in the local PC; (d) providing a RAM disk to a user's work area in the window explorer, and displaying a server name and a folder name accessible according to a user's authority in a subfolder of the RAM disk; ; (e) opening one of the accessible folders and retrieving the accessible folder name, document name and related information from the server and displaying the same on the screen; (f) clicking on any one of the documents or opening a document existing in the corresponding folder under the RAM disk in an application, and the document file is automatically downloaded from the server and opened on the RAM disk which is a temporary storage space of the local PC. ; (g) prohibiting storing of the document on the local PC according to a policy and storing the document on the RAM disk and storing the document on the secure file server or permitting the storing of the document on the local PC according to a policy; (h) automatically deleting the document worked on the RAM disk of the local PC when closing the worked document; And (i) deleting the work record of the document work application after closing the work document.

The secure file server solution manager program may include: (a1) generating an 'Art Storage Shortcut' icon when the ArtStorage Admin Console is started after logging in to the secure file server solution manager program; And (a2) Clicking the 'Art Storage Shortcut' icon, 'File Server Management' menu for managing a plurality of file servers at a single point, and 'Shared Folder Management for setting disk usage and permissions per user or group 'Menu', 'History inquiry' menu to check which file server users are connected to and access files, 'Monitor' menu to check disk and shared folder usage by file server, Displaying an ArtStorage screen with a 'Scheduler' menu to perform data and folder quota cleanup of file servers, and a 'Configuration' menu to perform settings for communication ports, database server information, and system administrators It characterized by including.

In order to prevent data storage to the local PC, an extended menu window is displayed by right-clicking a server item of the 'file server management', and the extended menu window is: 'Connect to connect or terminate connection with the target server. Exit 'menu; 'Server Manager Settings' menu to specify the server manager of the target file server; A 'data manager setup' menu for designating a data manager of the target file server; 'User Settings' menu to specify the user of the target file server; A 'File Server Display Information' menu for checking display name, DN, FQDN, and file server description information for the target file server; A 'data disk management' menu for changing information search and setting for a disk managed by a target file server; And a 'service control' menu for starting, restarting, or stopping a service of the target file server.

The server disconnected from the menu is characterized in that the management operation including 'shared folder management' can not be performed.

In the method of preventing data storage to the local PC, the data manager designated in the 'data manager setting' menu may only perform a shared folder management operation, and to prevent the data manager from acquiring information on confidential data. The file name is represented in the form of '***. ***'.

The method of preventing data storage to the local PC is characterized in that only the file server designated as the user is displayed in the list when the user designated in the 'user setting' menu executes Windows Explorer.

The method of preventing data storage to the local PC may include: displaying a server manager registration information window by clicking the server manager setting menu; Displaying a search result of a corresponding user in a 'searched user' list when a user inputs a search condition of a name, ID, and department in the 'server manager registration information' window and clicks a 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And completing the server manager setting by clicking the 'confirm' button in the guide window.

The method of preventing data storage to the local PC may include: displaying a data manager registration information window when the data manager setting menu is clicked; Displaying a search result of a corresponding user in a 'searched user' list when a user inputs a search condition of a name, ID, and department in the 'data manager registration information' window and clicks a 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And when the 'confirm' button is clicked in the guide window, completing the data manager setting.

The method of preventing data storage on the local PC may include: displaying a user registration information window when the user setting menu is clicked; Displaying a search result of a corresponding user in a 'searched user' list after inputting a search condition of a name, ID, and department in the 'user registration information' window and clicking the 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And completing the user setting when the user clicks the 'OK' button in the guide window.

In order to prevent data storage to the local PC, the 'File Server Display Information' window appears when the 'File Server Display Information' menu is clicked, and the 'Extended File Server Display Information' window displays the 'Extended File Server'. The display name ',' DN ',' DNSHostName 'and' file server description 'information may be checked, and the' file server description 'item may be modified.

In order to prevent data storage to the local PC, the 'Disk Management' window appears when the 'Data Disk Management' menu is clicked, and basic information and settings for the currently configured data disk are displayed through the 'Disk Management' window. It can be changed.

The disk type setting contents that can be set or changed in the 'disk management' window may include a 'system disk' item for setting a target disk as a system disk; An 'system mirror disk' entry that sets the target disk as a backup disk of the system disk; 'Data disk' item for setting the target disk as a data disk; An 'data mirror disk' item that sets the target disk as a backup disk of the data disk; And an "other" item for designating a disc for which the disc type is not set.

The method of preventing data storage to the local PC may include displaying an extended menu window for starting, restarting, or stopping a data communication channel and a file communication channel by clicking the 'service control' menu. do.

A method of preventing data storage on the local PC may include: displaying a shared folder on a screen when the 'shared folder management' menu is clicked; Displaying a menu window including a 'new quarter folder' menu by right-clicking an empty space of a screen on which the shared folder is displayed; Clicking on the 'New Quota Folder' menu displays a 'Quota Quota Folder' window; And inputting a folder name in the 'Quarter Folder Creation' window, setting a capacity limit, and then clicking the 'Create' button to generate a folder.

The method for preventing data storage on the local PC may include: right-clicking the created folder and then clicking an 'access permission setting' menu to display an 'access permission setting' window; And adding or deleting an access permission user list and an inaccessible user list in the 'access authority setting' window.

The method of changing the quota information setting for the shared folder may include: right-clicking a target folder and then clicking a 'quarter information setting' menu to display a 'change quota folder' window; A notification window appears when the 'apply' button is clicked after changing the 'capacity limit' setting in the 'edit quarter folder' window; And clicking the 'OK' button in the notification window.

The method of preventing data storage on the local PC may include: displaying an 'audit history inquiry' screen when the 'job history inquiry' menu is clicked; Inputting a server list, a work computer, a worker, a log type, and date information as a search condition on the 'Audit details inquiry' screen, and then clicking a 'search' button; And outputting log contents satisfying the input search condition.

The method for preventing data storage on the local PC is characterized in that all document file paths are displayed in the form of '******' when the data manager is accessed.

The method of preventing data storage on the local PC may include outputting a 'shared folder report' screen displaying information on the size and usage of disk and shared folders for each file server when the 'monitor' menu is clicked. .

The method of preventing data storage on the local PC may include: outputting a scheduler screen when the scheduler menu is clicked; Executing a task scheduling wizard when the 'add' button is clicked on the 'scheduler' screen; Selecting a target file server in the 'job scheduling wizard', selecting a 'important document secure file server backup' or 'folder quota' item, and then clicking 'next' button; Setting a cycle for executing a task, a task start time, and date information in the 'task scheduling wizard' and clicking a 'add' button to display a notification window; Clicking the 'confirm' button in the notification window to finish the scheduler operation; And right-clicking the created reservation task to change the addition, modification, removal or execution status of the reservation task.

The method of preventing data storage on the local PC may include: outputting a 'setting' screen including a 'setting change' tab and a 'system administrator' tab when the 'setting' menu is clicked; And setting a communication port by inputting a data communication channel and a file communication channel by clicking the 'change setting' tab, and setting database information by inputting a database server name and a database name.

In order to prevent data storage on the local PC, click the 'System Manager' tab, enter a search condition including name, ID, and department, and then click the 'Find' button. 'List, select the user's search results from the' searched users' list and click the 'down' button to move to the 'currently registered users' list and display them, And confirming that the user is normally registered and clicking the 'apply' button.

The method of adding a secure file server solution (ArtStorage) administrative template to the secure file server may be performed by right-clicking the 'Administrative Template' item in the directory of 'Computer Configuration' or 'User Configuration' of Windows Explorer, Click 'Add / Remove' menu and 'Add / Remove Template' window will appear; A 'policy template' window appears when the 'add' button is clicked on the 'add / remove template' window; Selecting an administrative template file ('ArtStorage.adm') from the 'policy template' window and clicking an 'open' button; Checking that the administrative template file has been added in the 'add / remove template' window and clicking the 'close' button; And adding an 'ArtStorage Group Policy' item below the 'administrative template'.

The group policy setting method for the secure file server may be set by adding an 'ArtStorage Server Environment Setting' item under the 'ArtStorage Group Policy' of the computer configuration, and the 'ArtStorage Server Environment Setting' item is a data request. And a 'TCP Listening Port setting for Data Secure Channel' item that specifies a TCP port to be used by the data secure channel for response. 'TCP Listening Port Setting for File-X Channel' that specifies the TCP port used for sending and receiving files; 'Limit the maximum number of client connections' that sets the maximum number of clients that can connect to the server; 'Limit maximum file size for transfer' item that sets the maximum file size for sending and receiving files; 'Specify retention time for idle sessions' item to set up session retention time with the server; 'Define intentional server load determination count' that sets the number of invalid session connection attempts; And a 'define database connection string' item for inputting connection information for a database server used in a secure file server solution (ArtStorage).

The method for setting a group policy for the local PC may be set by adding an 'ArtStorage Client Policy' item under the 'ArtStorage Group Policy' of the user configuration, and the 'ArtStorage Client Policy' item may include a data request and response. 'TCP Listening Port Setting for Data Secure Channel' that specifies the TCP port to be used by the data security channel for the purpose of data security; 'TCP Listening Port Setting for File-X Channel' that specifies the TCP port used for sending and receiving files; 'Use virtual network drive' item to set whether to use a virtual network drive connection; 'Set a local disk write-blocking policy for secure document files' entry that sets whether to allow users to save to local disk for secure document files; And 'Use secure permanent deletion' item to set the deleted document to be non-recoverable.

The secure file server may permanently securely delete documents deleted on the server so that they cannot be recovered using a secure deletion algorithm.

The secure file server may permanently securely delete documents and file usage history of an application program on the local PC so that they cannot be recovered using a secure deletion algorithm.

The secure file server may be configured to prevent decryption of documents stored on the server and to prevent copying and printing of documents by using a security algorithm such as digital rights management (DRM).

The secure file server may set an access right of a local PC that accesses the specific file server to prohibit an unauthorized person from reading.

The secure file server is characterized in that for controlling the storage space for each folder by setting a quota in the specific file server.

The secure file server may provide a server connection control function to a local PC accessing the specific file server to block exposure of confidential data stored in the specific file server.

The secure file server stores detailed work logs of the document work on the local PC and traces back through the work log in case of an emergency or similar situation to identify the origin and analyze the work pattern.

The secure file server is characterized by providing an optimized communication performance by separating the encrypted data communication channel and the file transfer channel with the local PC and the specific file server.

The Secure File Server Solution (ArtStorage) client program may prohibit an attempt to copy a folder or a corresponding document under the RAM disk onto the local PC.

The Secure File Server Solution (ArtStorage) client program prevents the program from opening a folder or a document under the RAM disk in an application program and attempting to save it to another drive on the local PC. It features.

The communication network may include a network communication network and an internet network in an organization, and the local PC may include a notebook and a portable terminal and block document storage by the local PC.

The storage policy for each user may include a 'LOW' policy for reading, editing and storing data on a secure file server solution (ArtStorage) and a local disk in the client PC; The client PC can read data on the secure file server solution (ArtStorage), edit and store the data on the secure file server, and edit and store data on the local disk, but store the data on the secure file server solution (ArtStorage) locally. 'MEDIUM' policy is impossible; And reading data on the secure file server solution (ArtStorage) from the client PC and editing and storing the data on the secure file server, but editing and storing data on a local disk or storing data on the secure file server solution (ArtStorage) locally. It is characterized in that it includes a 'HIGH' policy that is impossible.

In order to achieve the above object, a secure file server system that prevents data storage to a local PC according to the present invention provides an environment in which a plurality of file servers can be managed at one point, and connected to a local PC connected through a communication network. At least one secure file server, which provides the same document working function as working on its own PC but stores the document only to a specific file server; And a server name and folder which are automatically connected to the secure file server through a communication network and provide a RAM disk to a user's work area in Windows Explorer, and accessible to sub-folders of the RAM disk according to a user's authority. Display the name, perform the document operation within the accessible server name and folder name, and then prevent the data to be stored on your PC according to a predefined user-specific storage policy or allow only limited access, Includes; a plurality of local PC to be stored only to a specific file server.

The secure file server system stores a detailed job log of a document job worked on the local PC and traces back through the job log in case of an emergency or similar situation to identify the origin and analyze the job pattern, and an audit DB. It characterized in that it further comprises;

The secure file server system further comprises a central integrated authentication server for performing user authentication of the local PC.

The communication network may include a network communication network and an internet network in an organization, and the local PC may include a notebook and a portable terminal and block document storage by the local PC.

The secure file server may permanently securely delete documents deleted on the server so that they cannot be recovered using a secure deletion algorithm.

The secure file server may permanently securely delete documents and file usage history of an application program on the local PC so that they cannot be recovered using a secure deletion algorithm.

The secure file server may be configured to prevent decryption of documents stored on the server and to prevent copying and printing of documents by using a security solution such as DRM (Digital Rights Management).

The secure file server system uses an encrypted file system on a client PC in addition to a method of using a RAM disk as a user's work area in the Windows Explorer.

In addition, a recording medium storing a computer program for a method for preventing data storage on a local PC of the present invention made to achieve the above object is a local PC according to any one of claims 1 to 37. And a recording medium storing a computer program on a method of preventing data storage in a furnace.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

Conceptual view of operation of secure file server system

1 and 2 is a conceptual view of the operation of the secure file server system to prevent data storage to the local PC according to an embodiment of the present invention.

The user sees only servers and folders to which he is authorized in the Windows Explorer. This means that after the administrator task is completed, the user can immediately use the data on the server without any additional work.

According to the predefined user-specific storage policy, users may not be able to save data to the local disk installed in their PC or have limited access. Secure File Server Solution (hereinafter referred to as 'ArtStorage') The RAM disk used to connect to the server (RAM DISK) allows you to meet a stronger level of security by leaving no data locally.

The predefined policy levels by user are as follows.

1) If the policy level is 'LOW', the user can read / edit / save data on ArtStorage and local disk, and there are no special restrictions.

2) If the policy level is 'MEDIUM', the user can read / edit / save data on ArtStorage and edit / save data on the local disk. However, data on ArtStorage cannot be stored locally.

3) If the policy level is 'HIGH', the user can read / edit / save data on ArtStorage. However, no data can be stored on the local disk.

Configuration of Secure File Server System

3 is a block diagram of a secure file server system for preventing data storage to a local PC according to a preferred embodiment of the present invention.

As shown in FIG. 3, the secure file server system includes a plurality of local PCs (also referred to as 'client PCs'), a plurality of secure file servers (or referred to as 'ArtStorage servers'), and an audit DB. It includes a large department, a medium department, a small department, and a F / S-based configuration, each composed of a server, an audit database, and an integrated repository. A centrally integrated authentication server is connected through a communication network.

The secure file server provides an environment in which a plurality of file servers can be managed at one point, and provides a local PC connected through a communication network with the same document working function as working on his PC, but the storage of documents is specific. Only save to file servers.

The secure file server permanently securely deletes documents deleted on the server so that they cannot be recovered using a secure deletion solution. Then, the document and file history of the application on the server is permanently securely deleted so that it cannot be recovered using a secure deletion solution.

In addition, the secure file server uses a security solution such as Digital Rights Management (DRM) to prevent decryption of documents stored on the server and to prevent copying and printing of documents.

The plurality of local PCs are automatically connected to the secure file server through a communication network, and provide a RAM disk to a user's work area in a Windows Explorer and according to the user's authority in a subfolder of the RAM disk. Display the accessible server name and folder name, perform document operations within the accessible server name and folder name, and then prevent data from being stored on your PC according to a predefined user-specific storage policy or restrict access only. Allow and work on documents that are saved only to a specific file server.

The audit DB server stores a detailed work log of the document work worked on the local PC and traces back through the work log in case of an emergency or similar situation to analyze the origin and analyze the work pattern.

The central integrated authentication server performs user authentication of the local PC.

The communication network includes a network communication network and an internet network in an organization, and the local PC includes a notebook and a portable terminal, and blocks document storage to the local PC.

The art storage may be configured in various ways according to the requirements of scale. Each function and module can be mounted in a single or multiple systems as needed.

A. Art Storage ( ArtStorage ) Server (Administrator)

The secure file server solution (hereinafter referred to as 'ArtStorage') is an integrated secure file server that provides an environment for managing multiple file servers at one point. It also provides a record of all operations between the client and the server, enabling backtracking in the event of an emergency or similar situation, leading to faster response.

The function of ArtStorage provides a plurality of file server management, shared folder management and access authority management, job history inquiry (audit), server status monitor, scheduler, environment setting, and the like.

The system specification supported by ArtStorage is shown in Table 1.

The ArtStorage is composed of a total of six menus such as file management server, shared folder management, job history management, monitor, scheduler, and environment setting. The following describes the functions provided by each menu and how to use them.

One. Of ArtStorage  File Server Management

4 is a screen showing a 'file server management' menu screen of the ArtStorage system administrator,

First, log in as an ArtStorage system administrator to the secure file server where the ArtStorage system administrator solution is installed, and then start the ArtStorage Admin Console. ) Shortcut icon is created.

If you double-click the 'ArtStorage shortcut' icon, the 'File Server Management' window shown in FIG. 4 appears as the first screen.

The file server management window of FIG. 4 shows an example in which an audit team is registered. If a registered server is selected, detailed information (details) of the selected server is displayed at the bottom of the screen. At this time, the detailed information includes 'system information', 'CPU information', 'MEMORY information' and the like.

Right-clicking on the server item displays a management menu window as shown in FIG. In the management menu window, as shown in FIG. 5, 'connection termination', 'server manager setting', 'data manager setting', 'user setting', 'file server display information', 'data disk management', 'service control', ' Server control ', and each function is as follows.

The 'connection termination' menu connects or ends the connection with the target server. At this time, when the connection is terminated, the management operation for the target server cannot be performed.

The 'server manager setting' menu designates a server manager of a target file server.

The 'data manager setting' menu designates a data manager of a target file server. At this time, the data manager can only perform shared folder management. In order to prevent the data manager from obtaining information about confidential data, the file name is represented as '***. ***'.

The 'user setting' menu designates a user of the target file server. When a user launches Windows Explorer, only the file servers that he or she designates as users appear in the list.

The 'file server display information' menu confirms display name, DN, FQDN, and file server description information of the target file server.

The 'data disk management' menu changes information search and setting for a disk managed by a target file server. The disk type setting specified in the data disk management is information used by the ArtStorage scheduler.

The service control menu starts, restarts or stops a service of a target file server.

The server control menu restarts the target file server.

Hereinafter, the detailed management menu for the file server will be described in more detail.

1-1) Termination of Connection

The 'connection termination' menu is used to temporarily or potentially exclude the file server from being managed. To exclude a file server from being managed, right-click the target server in the right screen of the 'File Server Management' menu, and click the 'End Connection' menu.

When the server is disconnected, the target server icon is grayed out.

Since the server disconnected through the 'connection termination' menu is excluded from the management target, management operations such as shared folder management cannot be performed. To include the disconnected server again in the management target, right-click the target server and click the 'Connect' menu.

Once you've successfully connected to the target server, you'll be able to manage shared folders and files again.

1-2) Server Manager, Data Manager, and User Settings

If you right-click the file server on the right screen of the 'File Server Management' menu and then click the 'Server Manager Setting' menu (see FIG. 5), the 'Server Manager Registration Information' window shown in FIG. 6A is displayed. After entering a name, ID or department information in the 'server manager registration information' window and clicking the 'find' button, the search result of the corresponding user is displayed in the 'searched user' list at the bottom. Then, after selecting a user's search result from the 'searched user' list and clicking the down (▼) button immediately below, the user's search result is moved to the 'currently registered user' list as shown in FIG. 6B. Is displayed.

After confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button, a guide window for successfully adding a user object is displayed as shown in FIG. 6C. After that, click the 'OK' button in the guide window to complete the server manager setup.

The 'data manager setting' and 'user setting' methods are the same as the 'server manager setting' method described above. The difference in authority between the server administrator, data administrator, and user is shown in Table 2 below.

The data manager displays file names in the form of '***. ***' when managing folders and files, and displays the names and paths of the target files in the work list when the task history inquiry is performed. This is in order to minimize security exposures.

1-3) File Server Display Information

Right-clicking the target server on the right screen of the 'File Server Management' menu and then clicking the 'File Server Display Information' menu (see FIG. 5) displays the 'File Server Display Information' window shown in FIG. 7. In the 'File Server Display Information' window, 'Extended Display Name', 'DN', 'DNSHostName' and 'File Server Description' information about the target file server can be checked, and only the 'File Server Description' item can be modified. have.

1-4) Data Disk Management

Right-clicking the target server in the right screen of the 'File Server Management' menu and then clicking the 'Data Disk Management' menu (see FIG. 5), the 'Disk Management' window shown in FIG. 8A is displayed.

In the 'Disk Management' window, basic information and settings of the currently configured data disk can be changed. If the disk list does not appear, click the 'Query' button in the 'Disk Management' window.

As shown in FIG. 8B, the disk type may be divided into a "system disk", a "system mirror disk", a "data disk", a "data mirror disk" or "other". This disk type information is information that ArtStorage's scheduler refers to when performing a backup operation. That is, it does not perform operations such as mirroring the physical disk.

Disc type setting contents that can be set or changed in the 'disk management' window are as follows.

The 'system disk' item sets the target disk as the system disk.

The 'system mirror disk' item sets the target disk as a backup disk of the system disk. System mirror disks are used by the ArtStorage scheduler for system backup.

The 'data disk' item sets the target disk as the data disk.

The 'data mirror disk' item sets the target disk as a backup disk of the data disk. The data mirror disk is used for data backup by the ArtStorage scheduler.

The 'other' item is set as a spare disk. Also, discs that do not have a disc type set to 'other' by default.

1-5) Service Control

Right-click the target server on the right screen of the 'File Server Management' menu and then click the 'Service Control' menu to start, restart, or stop the data communication channel and file communication channel. The control menu window appears (see FIG. 9A).

If you click the View Details button on the right screen of the 'File Server Management' menu, detailed information about the target server can be checked in more detail as shown in FIG. 9B.

At this time, if the data channel or file channel service is stopped, the corresponding service item is displayed as "not connected" in the detail view screen as shown in FIG. 9C.

1-6) Server Control

As shown in FIG. 10A, when a user right-clicks a target server on the right screen of the 'file server management' menu and clicks a 'server control' and then a 'server restart' menu, the target server is restarted.

Through the 'File Server Management' menu, the administrator can manage several file servers at a single point. If you run the ArtStorage management console, you can check the list of currently registered ArtStorage file servers and connection status in the 'File server management' menu as follows. In addition, server status information such as 'system information', 'CPU information' and 'MEMORY information' may be checked. The server connection status and performance information are updated at each refresh interval shown at the top of the screen, and the update interval can be adjusted.

2. Of ArtStorage  Shared folder management

FIG. 11 is a screen illustrating a 'shared folder management' menu screen of ArtStorage.

As shown in FIG. 11, the 'shared folder management' menu screen displays a name, size, type, date of modification, and the like of a registered shared folder.

Disk usage and usage rights may be set for each user or group using the 'shared folder management' menu.

To set disk usage and permissions for a user or group, right-click on the right screen of the 'Shared Folder Management' menu as shown in FIG. 12A and click the 'New Quota Folder' menu as shown in FIG. 12B. The Create Folder window appears.

As shown in FIG. 12B, an input field for inputting data such as a folder name, total size, remaining size, and capacity limit, and a 'create' and 'cancel' button are provided in the 'create quarter folder' window.

In the 'Quarter Folder Creation' window, enter a folder name, set the capacity limit, and click the 'Create' button to create a shared folder as shown in FIG. 12C.

If you right-click on the created folder and click on the 'Access Right Setting' menu, the 'Access Right Setting' window appears as shown in FIG. 12D.

If the user clicks the 'Add' button on the right side of the 'Access Authorization User List' in the 'Access Right Setting' window, the 'Search User' window as shown in FIG. 12E appears.

In the 'User Search' window, select a user to be granted access permission from the users displayed in the 'Searched User' column and click the down (▼) button to register. Finally, when the 'add' button is clicked, the added user is displayed in the 'access permission user list' window of the 'access authority setting' window as shown in FIG. 12F.

Next, set up access privileges for the added users. The access right is selected from 'permit all rights', 'modify permission' and 'read permission'. When the 'OK' button is clicked, an access authority setting notification window as shown in FIG. 12G is displayed.

When the 'OK' button is clicked on the access right setting notification window, the access right setting is completed.

2-1) Changing Quota Information Settings

To change the quota information setting for the shared folder, right-click the target folder as shown in FIG. 13A and then click the 'Set Quota Information' menu to display the 'Modify Quota Folder' window as shown in FIG. 13B.

After changing the 'capacity limit' setting in the 'edit quota folder' window and clicking the 'apply' button, a notification window as shown in FIG. 13C appears. Clicking the 'OK' button in the notification window completes the change of the quota information setting for the shared folder.

2-2) Changing Document Grade Settings

To change the document rating setting for the shared folder, right-click the target folder and then click the 'Document Rating Setting' menu to display the 'Document Rating Setting' window as shown in FIG.

The document grades are classified into 'general documents', 'confidential documents' and 'top secret documents' and operate in conjunction with DRM (Data Rights Management). Document grade related features are not supported in ArtStorage version, but they can be changed as needed later.

3. Of ArtStorage Work History Inquiry

15 is a screen showing a 'work history inquiry' menu screen of ArtStorage.

As shown in FIG. 15, the 'job history inquiry' menu screen includes a text box for inputting a server list, a work computer, a worker, a log type, and date information as search conditions, and a 'search' after inputting the search conditions. When the button is clicked, a log content output screen for outputting a detailed job history satisfying a corresponding condition and a page movement selection button for selecting and moving a page of the log content output screen are included. Here, the server list is composed of a selection button for querying all file server or file server job history, the log type is composed of a selection button for querying all the work performed or the history of the work type performed It is.

In the 'job history inquiry' menu, a detailed list of tasks can be inquired and audited by clicking a 'search' button after inputting a server list, a work computer, a worker, a log type, and date information as a search condition.

As such, the 'job history inquiry' menu may check the contents of which file the user accesses and which file is accessed. That is, you can check the record of all the work performed by the user. At this time, if the data manager accesses, all document file paths are displayed as ******.

4. Of ArtStorage  monitor

16 is a screen illustrating a 'monitor' menu screen of ArtStorage.

As shown in FIG. 16, the 'monitor' menu screen includes a file server selection button for selecting a file server to be monitored and a disk display window for displaying disk items of the selected file server. Selecting a disk displays the disk status information such as the total size of the disk, the space used and the available space, and displays the usage information of the shared folder, such as the folder name, quota size, used space, and available space.

Therefore, information on disk and shared folder usage for each file server can be checked through the 'monitor' menu.

5. Of ArtStorage Scheduler

17A to 17E are screens illustrating a method of performing data and folder quota refining of a file server on a 'scheduler' menu screen of ArtStorage.

Through the 'Scheduler' menu, data and folder quota purification of a file server may be performed.

To schedule a new job, click the 'Add' button on the upper right of the screen in the 'Scheduler' menu and the 'Job Schedule Wizard' window as shown in FIG. 17B appears.

When the 'Job Scheduling Wizard' is executed, select a target file server, select 'Important Document Secure File Server Backup' or 'Folder Quota', and then click the 'Next' button. appear.

After setting the cycle, task start time and date information to execute the task in the task scheduling wizard window, click the 'Add' button, a notification window as shown in Figure 17d appears.

In the notification window, click the 'OK' button.

On the other hand, as shown in Figure 17e, by right-clicking the already created reservation task it is possible to change the modification, removal or execution status of the reservation task.

6. Of ArtStorage  Preferences

18A and 18B are screens illustrating a method of performing a setting operation for a communication port, database server information, and a system administrator in an 'environment setting' menu screen of ArtStorage.

Through the 'environment setting' menu, a setting operation for the communication port, database server information, and the system administrator may be performed. Since the data communication channel, file communication channel or database information is related to ArtStorage related Group Policy Object (GPO), when changing this setting, the corresponding GPO setting should be changed as well.

The 'environment setting' menu screen is provided with a 'change setting' tab and a 'system administrator' tab.

The 'change configuration' tab includes a communication port setting column for setting a data communication channel and a file communication channel and a database information field for setting a DB server name and a DB name as shown in FIG. 18A.

In the 'System Manager' tab, as shown in FIG. 18B, a search condition for inputting a name, ID, and a department, a search result field for displaying a searched user's ID, name, and a department, an ID and a name of a currently registered system administrator, and It includes a window that displays departments, a down (▼) button, and an "apply" button.

As such, an ArtStorage system administrator can be designated by clicking the 'System Manager' tab located at the upper right of the screen in the 'Environmental Setting' menu. However, you can see the 'System Manager' tab only when you are connected as a system administrator.

Three types of managers may be configured in the ArtStorage.

1) System Administrator: Top-level administrator who has full control of ArtStorage operation and management

2) Server Manager: Administrator of a specific ArtStorage Server

3) Data Manager: Manager of shared resources in a specific ArtStorage server

Art Storage ( ArtStorage ) Policy configuration

You can use Active Directory Group Policy to apply features such as communication ports, database connection information, and secure hard deletes for ArtStorage servers or clients. In order to apply the group policy related to the ArtStorage server and client, an ArtStorage management template should be added to the newly created group policy.

Hereinafter, a method of adding the ArtStorage management template and a method of setting a group policy for the ArtStorage server and the client will be described with reference to FIGS. 19A to 19G.

First, create a new Group Policy in the Group Policy Object Editor, then right-click on the Administrative Templates item in Computer Configuration or User Configuration, as shown in Figure 19a, and then click the Add / Remove Templates menu. The Add / Remove Template window as shown in FIG. 19B appears.

Next, when the 'Add' button is clicked in the 'Add / Remove Template' window, the 'Policy Template' window as shown in FIG. 19C is displayed.

Next, select the 'ArtStorage.adm' file in the 'Policy Template' window and click the 'Open' button. In this case, the 'ArtStorage.adm' file is present in the '% SYSTEMROOT% \ inf' folder (eg, C: \ WINDOWS \ inf) of the server on which the ArtStorage server package is installed.

Next, after confirming that the ArtStorage management template item is added in the 'add / remove template' window, click the 'close' button (see FIG. 19D).

Thereafter, as shown in FIG. 19E, an item 'ArtStorage Group Policy' may be added under the 'Administrative Template'.

The ArtStorage management template includes both computer configuration and user configuration. The contents set in the computer configuration are the settings applied to the ArtStorage server, and the contents set in the user configuration are the settings applied to the ArtStorage client.

The ArtStorage server group policy is set in a computer configuration as shown in FIG. 19F.

Table 3 shows the details of the ArtStorage server group policy set in the computer configuration.

The ArtStorage client group policy uses a user configuration as shown in FIG. 19G.

Details of the ArtStorage client group policy set in the user configuration are shown in Table 4.

B. Art Storage  Client( ArtStorage  Client)

Unlike a general file server, the ArtStorage secure file server provides a list of servers and shared folders that are automatically accessible to a user, thereby serving as a "easy file server". Basically, however, ArtStorage is a "secure file server" that aims to prevent data exposure / leakage by blocking important data from being stored on each PC's local hard disk. In order to use such security and convenience functions, the ArtStorage Client must be installed on each user's PC after the ArtStorage Secure File Server is established.

The ArtStorage Client is mounted on a Windows Explorer in the form of a RAMDisk, and its usage is the same as a general operation using the Windows Explorer.

Features of the ArtStorage Client are as follows.

1) It provides the same usage as user-friendly window explorer.

2) List only the servers and folders available to the user.

3) Do not save the document on the user's computer to prevent the loss of important documents (but may be allowed by policy).

4) Working documents aren't lost if you lose your connection to a secure file server.

System specifications supported by the ArtStorage Client are shown in Table 5.

Art Storage  Client( ArtStorage  Client) policy level

The ArtStorage secure file server manages documents by applying three levels of policies to users as shown in Table 6. For example, if you apply a policy level of 'MEDIUM' to a user, that user will not be able to save or copy documents stored on an ArtStorage secure file server to the local hard disk of the user's computer. Saved contents are stored only on the ArtStorage secure file server.

Although users do not decide on these policy levels themselves, they should be fully aware of the extent to which they can be worked on. The policy level applied to the user is informed by prior notice, and the scope of work for each policy level is shown in Table 6.

If you save a document stored on the server to your PC or vice versa, you can use "Save As", "Copy / Paste Using Shortcut Keys (Ctrl + C / V)", "Drag and Drop" & Drop) ".

Art Storage  Client( ArtStorage  Client)

The operations such as opening a Hunmin Office or MS Office document stored in the ArtStorage secure file server, editing / saving, or creating a new document and storing the same document are the same as the existing method of use. The user only needs to know in advance what the ArtStorage secure file server is available for and what folder should be used on that server. Of course, secure file servers and shared folders that are not granted access are not visible to the user.

Art Storage  Client( ArtStorage  Client) User Interface Check

20A and 20B are screens of running Windows Explorer on a client PC on which an ArtStorage Client is installed.

When the Windows Explorer is executed in the client PC, a disk is added with the name RAMDisk as shown in FIG. 20A. The RAMDisk is classified as a local disk, but is actually a RAM disk configured to use a portion of memory as a disk, unlike a general local hard disk. The RAMDisk is used only when accessing Hunmin Office or MS Office documents stored in the ArtStorage secure file server, and its usage is the same as that of Windows Explorer.

In the RAMDisk (R drive), two folders exist, such as 'ArtStorage' and 'ArtStorage Off-Line View', as shown in FIG. 20A. The 'ArtStorage Off-Line View' folder is a folder used internally to keep working documents from being lost when the network connection with the ArtStorage secure file server is lost.

The actual folder you use is the 'ArtStorage' folder. If the 'ArtStorage' folder in the RAMDisk is expanded as shown in FIG. 21B, a list of ArtStorage secure file servers that a user can access is displayed. If you expand the server again, you will see a shared folder that can be accessed by real users.

Art Storage ( ArtStorage A document on a secure file server

21A to 21G are screens for explaining a method of storing a document in an ArtStorage secure file server.

Users must have the appropriate permissions to save documents to an ArtStorage secure file server. As described in the ArtStorage Client policy level, the permission for the corresponding folder is delivered through advance notice. The user should check and understand these permissions in advance.

The method of storing the newly created document in the ArtStorage secure file server is the same as the existing method, and only the storage location is different. The following describes how to save a new document to the ArtStorage secure file server.

First, create a new document using an office product such as the Hunmin Office product or the MS Office product.

Next, to store the newly created document in the ArtStorage secure file server, the storage location is selected as the RAMDisk (R :) as shown in FIG. 21B.

Next, when the 'ArtStorage' folder item is double-clicked on the 'RAMDisk (R :)', an ArtStorage file server list appears as shown in FIG. 21D.

Next, double-click on an ArtStorage secure file server where you want to save the document. At this time, the ArtStorage secure file server shows a list of folders accessible by the user as shown in FIG. 21E. Double-click on the folder where you want to save the document.

Next, after modifying the document file name to be stored as shown in FIG. 21F, click the 'Save' button.

Next, the document file stored in the designated folder can be checked as shown in FIG. 21G.

As described above, a method of storing a document file on an ArtStorage secure file server using a RAMDisk is the same as the conventional method. The only thing you need to know is what ArtStorage Secure File Server you should use and what folder should be used on the ArtStorage Secure File Server. Since these contents are delivered through prior notice, the user needs to know these notices in advance.

The present invention is not limited to the above-described embodiments, but can be variously modified and changed by those skilled in the art, which should be considered as being included in the spirit and scope of the present invention as defined in the appended claims. will be.

As described above, according to the secure file server system for preventing data storage on the local PC according to the present invention, and a method and a recording medium storing a computer program for the method, it is possible to efficiently operate with a small manpower The savings, of course, contribute to productivity gains, and can prevent the economic and emotional losses that can result from exposure / leakage of confidential information.

In addition, since security-related documents or documents are not stored in local PCs and laptops, document exposure / emission by insiders, retirees, industrial spies, and the like can be prevented.

In addition, when deleting a document file placed on a secure file server, it is possible to permanently shred documents through a secure deletion algorithm.

It also enables centralized management and management of an organization's intellectual property.

In addition, all work between the client and the server keeps a record, allowing for backtracking in the event of an emergency or similar situation.

In addition, since an area where the user can work on the window is displayed without additional education / guidance about the physical location, name, connection method, etc. of the server, a unique area of the work can be defined and the user can concentrate on the work.

In addition, the user side and the administrator side has the following effects.

On the user side, it is possible to increase work efficiency because it is possible to concentrate on work because its own work area is defined. And because it is based on a user shell, this solution can be used without any reluctance, and no training is required, which can reduce overall costs.

From the manager's point of view, the data can be easily managed through the data that is recorded / stored as the author, the modifier, the date, as well as the original work data. In addition, unified and simplified server management can reduce unnecessary time and waste of human resources.

Claims (46)

In a method for preventing data storage on a local PC, (a) Provides an environment for managing multiple file servers, and allows local PCs connected through a communication network to perform the same document operations as those on their own PCs, but to store documents only on specific file servers. Installing a secure file server solution (ArtStorage) manager program on the secure file server; (b) installing a secure file server solution (ArtStorage) client program automatically connected to the secure file server through a communication network on a local PC; (c) starting a Windows Explorer after logging in a program installed in the local PC; (d) providing a RAM disk to a user's work area in the window explorer, and displaying a server name and a folder name accessible according to a user's authority in a subfolder of the RAM disk; ; (e) opening one of the accessible folders and retrieving the accessible folder name, document name and related information from the server and displaying the same on the screen; (f) clicking on any one of the documents or opening a document existing in the corresponding folder under the RAM disk in an application, and the document file is automatically downloaded from the server and opened on the RAM disk which is a temporary storage space of the local PC. ; (g) prohibiting storing of the document on the local PC according to a policy and storing the document on the RAM disk and storing the document on the secure file server or permitting the storing of the document on the local PC according to a policy; (h) automatically deleting the document worked on the RAM disk of the local PC when closing the worked document; And (i) deleting a work record of a document work application program after closing the worked document; and storing the data on the local PC. The method of claim 1, wherein the secure file server solution manager program is: (a1) creating an 'Art Storage Shortcut' icon when starting the ArtStorage Admin Console after logging in to the secure file server solution manager program; And (a2) Clicking the 'Art Storage Shortcut' icon, 'File Server Management' menu for managing multiple file servers from a single point, and 'Shared Folder Management' for setting disk usage and permissions for each user or group Menu, 'History inquiry' menu to check which file server is accessed and which file is accessed, 'Monitor' menu to check disk and shared folder usage by file server, Displaying an art storage screen having a 'scheduler' menu for performing data and folder quota purification of a file server and a 'configuration' menu for setting a communication port, database server information, and a system administrator; Method for preventing the storage of data to the local PC comprising a. The method of claim 2, wherein the method of preventing data storage on the local PC is: If you right-click on the server item of 'File server management', an extended menu window is displayed. The extended menu window is: 'End Connection' menu for connecting to or disconnecting from the target server; 'Server Manager Settings' menu to specify the server manager of the target file server; A 'data manager setup' menu for designating a data manager of the target file server; 'User Settings' menu to specify the user of the target file server; A 'File Server Display Information' menu for checking display name, DN, FQDN, and file server description information for the target file server; A 'data disk management' menu for changing information search and setting for a disk managed by a target file server; And And a 'service control' menu for starting, restarting, or stopping a service of the target file server. The method of claim 3, wherein The server is disconnected from the menu method to prevent the storage of data to the local PC, characterized in that to prevent the management operation including the 'shared folder management'. The method of claim 3, wherein the method of preventing data storage on the local PC is: The data manager designated in the 'data manager setting' menu may only perform a shared folder management operation, and the file name may be set as '***. ***' to prevent the data manager from acquiring information on confidential data. A method of preventing data storage on a local PC, characterized by the same form. The method of claim 3, wherein the method of preventing data storage on the local PC is: When the user specified in the 'User setting' menu runs the Windows Explorer, only the file server designated as the user is displayed in the list. The method of claim 3, wherein the method of preventing data storage on the local PC is: Displaying a 'server manager registration information' window by clicking the 'server manager setting' menu; Displaying a search result of a corresponding user in a 'searched user' list when a user inputs a search condition of a name, ID, and department in the 'server manager registration information' window and clicks a 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And Completing the server manager setting when clicking the 'OK' button in the guide window; preventing the data storage to the local PC. The method of claim 3, wherein the method of preventing data storage on the local PC is: Displaying a 'data manager registration information' window by clicking the 'data manager setting' menu; Displaying a search result of a corresponding user in a 'searched user' list when a user inputs a search condition of a name, ID, and department in the 'data manager registration information' window and clicks a 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And Completing the data manager setting when clicking the 'OK' button in the guide window; preventing the data storage to the local PC. The method of claim 3, wherein the method of preventing data storage on the local PC is: Displaying a 'user registration information' window by clicking the 'user setting' menu; Displaying a search result of a corresponding user in a 'searched user' list after inputting a search condition of a name, ID, and department in the 'user registration information' window and clicking the 'find' button; Selecting a user's search result from the 'searched user' list and clicking the 'down' button to move to and display a list of 'currently registered users'; Displaying a guide window indicating that the user object has been added successfully after confirming that the user is normally registered in the 'currently registered user' list and clicking the 'confirmation' button; And Completing the user setting when clicking the 'OK' button in the guide window; How to prevent data storage to the local PC comprising a. The method of claim 3, wherein the method of preventing data storage on the local PC is: When the 'File Server Display Information' menu is clicked, the 'File Server Display Information' window appears, and the 'Extended Display Name', 'DN', 'DNSHostName' and ' File server description 'information, and the' file server description 'item can be modified. The method of claim 3, wherein the method of preventing data storage on the local PC is: Clicking on the 'Data Disk Management' menu brings up the 'Disk Management' window, and allows you to change basic information and settings for the currently configured data disk through the 'Disk Management' window. How to prevent. The method of claim 11, Disk type settings that can be set or changed in the 'Disk Management' window are as follows: An 'system disk' entry that sets the target disk as the system disk; An 'system mirror disk' entry that sets the target disk as a backup disk of the system disk; 'Data disk' item for setting the target disk as a data disk; An 'data mirror disk' item that sets the target disk as a backup disk of the data disk; And And 'other' item that designates a disk for which the disk type is not set. The method of claim 3, wherein the method of preventing data storage on the local PC is: And clicking the 'service control' menu to display an extended menu window for executing a start, restart, or stop command for a data communication channel and a file communication channel. The method of claim 2, wherein the method of preventing data storage on the local PC is: Displaying a shared folder on a screen when the 'shared folder management' menu is clicked; Displaying a menu window including a “new quarter folder” menu by right-clicking an empty space on a screen on which the shared folder is displayed; Clicking on the 'New Quota Folder' menu displays a 'Quota Quota Folder' window; And Entering a folder name in the 'Quarter folder creation' window, setting a capacity limit, and clicking the 'Create' button, the folder is created; Method of preventing data storage to the local PC comprising a. 15. The method of claim 14, wherein the method of preventing data storage on the local PC is: Right-clicking the created folder and then clicking an 'access permission setting' menu to display an 'access permission setting' window; And And adding or deleting an access permission user list and an inaccessible user list in the 'access authority setting' window. The method of claim 14, wherein the setting of the quota information for the shared folder is as follows: Right-click on the target folder and click on the 'Set Quota Information' menu to display the 'Modify Quota Folder' window; A notification window appears when the 'apply' button is clicked after changing the 'capacity limit' setting in the 'edit quarter folder' window; And Clicking on the 'OK' button in the notification window; Method of preventing data storage to the local PC further comprising. The method of claim 2, wherein the method of preventing data storage on the local PC is: When the 'job history inquiry' menu is clicked, an 'audit history inquiry' screen is displayed; Inputting a server list, a work computer, a worker, a log type, and date information as a search condition on the 'Audit details inquiry' screen, and then clicking a 'search' button; And And outputting log contents that satisfy the input search condition. 18. The method of claim 17, wherein the method of preventing data storage on the local PC is: If the data manager is accessed, the method for preventing data storage to the local PC, characterized in that all document file paths are displayed in the form of '******'. The method of claim 2, wherein the method of preventing data storage on the local PC is: When the 'monitor' menu is clicked, a method of preventing data storage to a local PC, characterized by outputting a 'shared folder report' screen displaying information on the size and usage of disks and shared folders for each file server. The method of claim 2, wherein the method of preventing data storage on the local PC is: Outputting a scheduler screen when the scheduler menu is clicked; Executing a task scheduling wizard when the 'add' button is clicked on the 'scheduler' screen; Selecting a target file server in the 'job scheduling wizard', selecting a 'important document secure file server backup' or 'folder quota' item, and then clicking 'next' button; Setting a cycle for executing a task, a task start time, and date information in the 'task scheduling wizard' and clicking a 'add' button to display a notification window; Clicking the 'confirm' button in the notification window to finish the scheduler operation; And Right-clicking the created scheduled task to change the status of the addition, modification, removal or execution of the scheduled task; including a method for preventing data storage to the local PC. The method of claim 2, wherein the method of preventing data storage on the local PC is: Outputting a 'environmental setting' screen having a 'change setting' tab and a 'system administrator' tab when the 'environmental setting' menu is clicked; And Setting a communication port by inputting a data communication channel and a file communication channel by clicking the 'change setting' tab, and setting database information by inputting a database server name and a database name. How to prevent data storage in the The method of claim 21, wherein the method of preventing data storage on the local PC is: Click the 'System Manager' tab, enter the search conditions including the name, ID, and department, and then click the 'Find' button to display the search results of the user in the 'Searched Users' list, and the 'Searched Users' list. After selecting a user's search results and clicking the 'Down' button, the user will be taken to the 'current registered users' list and displayed. Clicking on a; method for preventing the storage of data to the local PC comprising a. The method of claim 1, wherein the method of preventing data storage on the local PC is: Right-click on the 'Administrative Templates' item in the 'Computer Configuration' or 'User Configuration' directory of Windows Explorer and click on the 'Add / Remove Templates' menu to display the 'Add / Remove Templates' window; A 'policy template' window appears when the 'add' button is clicked on the 'add / remove template' window; Selecting an administrative template file ('ArtStorage.adm') from the 'policy template' window and clicking an 'open' button; Checking that the administrative template file has been added in the 'add / remove template' window and clicking the 'close' button; And Adding an 'ArtStorage Group Policy' item under the 'administrative template'; And adding a secure file server solution (ArtStorage) management template to the secure file server. The method of claim 23, wherein the method of preventing data storage on the local PC is: Set the 'ArtStorage Server Preferences' item under 'ArtStorage Group Policy' of the computer configuration. The 'ArtStorage server environment setting' item, 'TCP Listening Port Setting for Data Secure Channel' that specifies the TCP port to be used by the data secure channel for data requests and responses; 'TCP Listening Port Setting for File-X Channel' that specifies the TCP port used for sending and receiving files; 'Limit the maximum number of client connections' that sets the maximum number of clients that can connect to the server; 'Limit maximum file size for transfer' item that sets the maximum file size for sending and receiving files; 'Specify retention time for idle sessions' item to set up session retention time with the server; 'Define intentional server load determination count' that sets the number of invalid session connection attempts; And Including 'entry database connection string' entry for entering connection information for database server used in secure file server solution (ArtStorage), And setting a group policy for the secure file server. The method of claim 23, wherein the method of preventing data storage on the local PC is: Set the 'ArtStorage Client Policy' item under 'ArtStorage Group Policy' of the user configuration. The 'ArtStorage Client Policy' item is 'TCP Listening Port Setting for Data Secure Channel' that specifies the TCP port to be used by the data secure channel for data requests and responses; 'TCP Listening Port Setting for File-X Channel' that specifies the TCP port used for sending and receiving files; 'Use virtual network drive' item to set whether to use a virtual network drive connection; 'Set a local disk write-blocking policy for secure document files' entry that sets whether to allow users to save to local disk for secure document files; And Including the "Enable secure hard delete" entry, which disables recovery for deleted documents. Setting a group policy for the local PC. The method of claim 1, wherein the secure file server: And securely deleting the document deleted on the secure file server permanently so as to be impossible to recover using a secure deletion algorithm. The method of claim 1, wherein the secure file server: And securely deleting the document and file usage history of the application program on the local PC so that it cannot be recovered using a secure deletion algorithm. The method of claim 1, wherein the secure file server: A method of preventing data storage on a local PC, characterized by preventing the decryption of a document stored on the secure file server and copying or printing the document by using a security algorithm such as Digital Rights Management (DRM). . The method of claim 1, wherein the secure file server: And setting access rights of the local PC accessing the specific file server to prevent unauthorized users from viewing the data. The method of claim 1, wherein the secure file server: The method of preventing data storage to the local PC, characterized in that for controlling the storage space for each folder by setting a quota in the specific file server. The method of claim 1, wherein the secure file server: Providing a server connection control function to a local PC accessing the specific file server to prevent exposure of confidential data stored in the specific file server. The method of claim 1, wherein the secure file server: A method of preventing data storage to a local PC, which stores detailed work logs of the document work on the local PC and traces back through the work log to analyze the origin and analyze the work pattern in case of emergency or similar situation. . The method of claim 1, wherein the secure file server: And separating the encrypted data communication channel and the file transfer channel from the local PC and the specific file server to provide optimized communication performance. The method of claim 1, The secure file server solution (ArtStorage) client program, And attempting to copy a folder or a corresponding document under the RAM disk onto the local PC is prohibited. The method of claim 1, The secure file server solution (ArtStorage) client program, Opening a folder or a document under the RAM disk in an application program and attempting to save it to another drive existing on the local PC is prohibited. . The method of claim 1, The communication network includes a network communication network in the organization, the Internet network, The local PC includes a notebook, a portable terminal, Blocking data storage on the local PC. The method of claim 1, wherein the method of preventing data storage on the local PC is: A 'low' policy for reading, editing and storing data on a secure file server solution (ArtStorage) and a local disk in the client PC; The client PC can read data on the secure file server solution (ArtStorage), edit and store the data on the secure file server, and edit and store data on the local disk, but store the data on the secure file server solution (ArtStorage) locally. 'MEDIUM' policy is impossible; And The client PC may read data on the secure file server solution (ArtStorage) and edit and store the data on the secure file server, but editing and storing data on a local disk or storing data on the secure file server solution (ArtStorage) locally A method of preventing data storage to a local PC, comprising an impossible 'HIGH' policy. In a secure file server system that prevents data storage to a local PC, At least one or more servers that provide an environment for managing multiple file servers and provide local PCs connected via a communication network with the same document-working capabilities as working on their own PCs, but store documents only on specific file servers. Secure file server; And A server name and a folder name that are automatically connected to the secure file server through a communication network and provide a RAM disk to a user's work area in Windows Explorer, and accessible to a subfolder of the RAM disk according to a user's authority. After performing a document operation within the accessible server name and folder name, the user can not save the data to his PC according to a predefined user-specific storage policy or allow only limited access. And a plurality of local PCs to be stored only to a specific file server. The system of claim 38, wherein the secure file server system is: An audit DB server and an audit DB for storing detailed work logs of the document work performed on the local PC to trace back through the work log in case of an emergency or similar situation to analyze the origin and analyze the work pattern; Secure file server system that prevents data storage to a local PC. 40. The secure file server system according to claim 38 or 39, wherein: A centralized authentication server for performing a user authentication of the local PC; Secure file server system for preventing data storage to the local PC further comprises. The method of claim 38, The communication network includes a network communication network in the organization, the Internet network, The local PC includes a notebook, a portable terminal, A security file server system for preventing data storage to a local PC, characterized in that to block the document storage to the local PC. 39. The secure file server of claim 38, further comprising: And securely deleting data stored on the secure file server permanently so as to be impossible to recover by using a secure deletion algorithm. 39. The secure file server of claim 38, further comprising: And securely deleting data and a file usage history of an application program on the local PC permanently so that they cannot be recovered using a secure deletion algorithm. 39. The secure file server of claim 38, further comprising: Secure file server that prevents data storage to local PC, by using a security solution such as Digital Rights Management (DRM) to prevent the decryption of documents stored on the server and to prevent the copying and printing of documents. system. The system of claim 38, wherein the secure file server system is: A secure file server system for preventing data storage to a local PC, wherein an encrypted file system is used on a client PC in addition to a RAM disk as a user's work area in the Windows Explorer. 38. A recording medium storing a computer program for a method for preventing data storage on a local PC according to any one of claims 1 to 37.

Images