KR101446326B1 - Apparatus and method for managing securing data - Google Patents

Abstract

The present invention relates to an apparatus and a method for managing security data, which are capable of preventing an accident that a user leaks security data, which companies cooperating with each other share, carelessly or intentionally to the outside. The apparatus for managing security data includes: a login module which receives an identification code and processes login; a search processing module which searches security files in task ID units stored in a storage module, outputs the searched security files in a search window, and outputs configuration security data of a selected security file in a task window depending on the login processing of the login module; a security module which decodes the security file into security data, stores the security data in a security drive set as a security zone, encodes security data stored in the security drive into a security file, and stores the security file in a non-security zone; and a processing module which controls the execution of the security data by an application program based on access authority information.

Description

TECHNICAL FIELD [0001] The present invention relates to a security data management apparatus,

The present invention relates to a security data management apparatus and a management method capable of preventing an accident that a user inadvertently or intentionally leaks security data shared by a collaborating company to the outside.

Specialization of business by sector required collaboration among companies. Of course, companies that collaborate follow the responsibility and responsibility to thoroughly manage the information they share for the collaboration.

On the other hand, as communication technology developed and data processing technology developed, it became easier to share accurate information among companies. However, the development of communication technology and data processing technology has facilitated leakage of information, which has also caused a deterioration in the security efficiency of security data protected by collaborating companies.

In order to solve such a problem, Patent Publication No. 2001-0109271, which is a technology for performing security processing so that security target data is not leaked during a communication process, and a patent registration number 10-1125699.

However, all of these conventional technologies are created for the purpose of preventing unauthorized leakage of security target data (hereinafter referred to as " security data ") by unauthorized third parties in a communication process or a search process, There is no function to prevent the received user from leaking the security data by remorse.

In addition, since the conventional technologies are limited to sharing security data on the premise of communication between cooperating 1: 1 companies, there is no device that a company receives security data from a plurality of companies while maintaining a security environment, .

Accordingly, it is an object of the present invention to provide a method and system for preventing unauthorized disclosure of unauthorized leakage of security data, And to provide a security data management apparatus and a management method that enable accurate security management without confusion.

According to an aspect of the present invention,

A login module for receiving an identification code and processing login;

A search processing module for searching for a security file in the job ID unit stored in the storage module and outputting the security file in the search window and outputting the configuration security data of the selected security file to the job window according to the login process of the login module;

A security module decrypting the security file into security data and storing the secure file in a secure drive set as a security area, encrypting the security data stored in the secure drive as a security file, and storing the security data in a non-security area; And

A processing module for controlling execution of the security data by an application program based on access authority information;

And a security data management device.

According to another aspect of the present invention,

Outputting, by the management apparatus, a search window in which the job ID is posted;

A login step in which the management device receives an identification code and processes the login in response to the selection of the job ID;

An access right confirmation step of the management device confirming access right information on the security file of the identification code;

A task window output step in which the management apparatus outputs a task window in which a security file corresponding to the task ID and security data are posted; And

A security data execution step of decrypting the security file into security data and storing the decrypted security file in a secure drive set as a security area and processing the execution of the security data by an application program based on the access right information;

And a security data management method.

In order to execute the security data, the present invention is to actively restrict the execution range of the security data by confirming the access right of the user who tries to execute the security data, thereby allowing the authorized user to inadvertently or maliciously There is an effect of preventing an accident that flows out.

Also, there is an effect that a security data list for a plurality of job IDs is posted using the search window for security data managed for each job ID, thereby enabling a user to efficiently conduct a security data processing job.

In addition, even if the security data list for a plurality of job IDs is posted, it is possible to restrict only one job ID to be able to secure security between security data for each job ID. However, among security data belonging to the same job ID, It is possible to increase the work efficiency in a secure environment.

1 is a block diagram schematically showing a security system in which a management apparatus according to the present invention is configured,
2 is a block diagram showing the configuration of the security system,
FIG. 3 is an image showing one embodiment of a search window and a task window operated by the management apparatus according to the present invention,
4 is a flowchart sequentially showing a management method according to the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a block diagram schematically showing a security system in which a management apparatus according to the present invention is configured. FIG. 2 is a block diagram illustrating the configuration of the security system. Referring to FIG.

The management apparatus according to the present invention is installed in the terminal 10 of the partner company S who collaborates with the companies G1, G2 and G3 and shares the same with the companies G1, G2 and G3, ) To be able to secure and manage security data.

The terminal 10 of the partner company S communicates with the servers 20, 20 ', and 20' operated by the companies G1, G2 and G3 via a public communication network such as the Internet.

Meanwhile, the server 20, 20 ', 20 "is provided with a security device for communicating with the management device, and when the management device and the security device communicate with each other and the security data stored in the terminal 10 of the partner company S Management is done.

In the embodiment of the present invention, the servers 20, 20 ', 20 "are configured for each of the enterprises G1, G2, G3 and the servers 20, 20' (G1, G2, G3) are separately provided with a security device for communicating with the server, and the terminals G1, G2, and G3 are provided with security devices A service model structure for communicating with the management apparatus of the terminal 10 may be applied.

The above-described functions will be described in more detail while explaining each configuration of the management apparatus.

A management apparatus according to the present invention comprises a storage module (11) for storing security data in a secure file format, a communication module (12) for processing communication with the security device connected to a communication network, A login information management module 14 for managing login information of a user, a security file stored in the storage module 11, and security data configured in the security file by an identification code A processing module (16) for processing the processing for the security file to proceed according to the designated access authority information, and a decryption unit for decrypting the security file retrieved from the storage module (11) And a security module 17 for causing the decrypted security data to be executed in a secure drive, which is a secure area, or in a secure environment artificially created. Here, the secure drive is a file or a device controlled by the security module 17 so that only a permitted user or an authorized program can access and store stored data, and the data located in the secure drive is transferred to an external take- Are all blocked, ensuring the security of the data. To this end, the secure drive is only caught by the management device executed as a normal login, so that the user can confirm the secure drive only through a legitimate login. Also, the secure drive is only caught in the authorized program, so that when the user tries to retrieve the authorized program, the secure drive is confirmed.

For reference, in the embodiment of the present invention, the secure drive exists as a normal file, and when the management device operates, separate data (security file) input / output can be performed while operating as an independent virtual drive. At the time of data input / output, the security module 17 performs encryption and decryption, thereby ensuring security for the corresponding data. The description of the security drive is given in Japanese Patent No. 0549644, No. 0589541, and No. 0596135, to which the applicant of the present invention has rights, so that a detailed description of the structure and operation principle of the secure drive will be omitted.

Subsequently, the authorized program refers to an application set to be able to access the secure drive, and it is possible to set an authentication file promised to the application, input security target application information to the secure drive, It is determined whether or not the access to the secure drive is permitted, and then the access permission is determined. Since the authorization of the program is a condition for interlocking with the secure drive, the security module 17 confirms whether the program is authorized.

On the other hand, the security environment is an execution environment that is distinguished from a general environment that is set when the terminal 10 is booted, and restricts the environment so that only an authorized program can execute the security data. Here, the drive executed in the secure environment is a secure drive, and secure data generated and stored by an authorized program in the secure environment is stored only in the secure drive. To be more specific, an OS (Operating System) installed in the terminal 10 for executing data creates an environment for operating a program. Since a general conventional environment is vulnerable to security, The terminal 10 configures a security environment in which only an authorized program is executed while a separate communication line is formed.

The system configuration of the terminal 10 for setting the security environment will be described.

As shown in FIG. 5 (a schematic diagram of a kernel structure of a terminal for configuring a security environment according to the present invention), a host OS (hereinafter referred to as " 32 are layered into a virtual layer 33 and the virtual layer 33 is layered into a plurality of divided virtual operating layers 34a, 34b, 34c. That is, a plurality of virtual operating layers 34a, 34b, and 34c are formed in the kernel area to form a plurality of partitioned partitions, and each partition is identified as an operating environment separated from the user area through the virtualization technology . Although the kernel area is actually operated by one OS, the operating information of the OS is separately provided to the virtual operating layers 34a, 34b, and 34c through the virtual layer 33, It is realized in the form of execution.

The security module 17 adjusts the corresponding virtual operating layer so that the virtual operating layer set as the security environment in the divided virtual operating layers 34a, 34b, 34c can be executed when the user tries to execute the security data The execution environment is changed and the communication path for the operating information of the OS is changed to the virtual operating layer corresponding to the security environment. When the communication path is changed, a file set as a security drive in the user area is recognized as a drive (virtual drive) and communicates with the virtual operating layer. As a result, the environment of the terminal 10 is reset so that the process can be driven according to the mode set to the secure environment, whereby the execution of the authorized program for executing the secure data is performed in the designated secure drive.

In addition, the security environment can be realized on a folder basis. More specifically, the security folder of the security environment is linked with the virtual operating layer set as the security environment, and when the user clicks the security folder set as the security environment for executing the security data, The communication path to the information is changed to the virtual operating layer set as the security environment. As a result, the terminal 10 is reset to the environment in which the process can be driven according to the mode set to the security environment, whereby execution of the authorized program for executing the security data is performed in the specified security environment.

Meanwhile, when the security environment is established, the security module 17 performs communication with the servers (G1, G2, and G3) servers 20, 20 ', and 20' The server 20, 20 ', 20 ", and the server 20, 20', 20", 20 ", 20" and 20 ' ), Or establishes a virtual private network (VPN) as a communication line of the servers 20, 20 ', 20 ".

In order to restore the security environment to the normal environment, a 'task end menu' configured on the desktop of the security environment may be clicked. That is, when the 'job end menu' is clicked, all work related to the security data is terminated through the end of the program, and the security environment (virtual operating environment) is switched to the normal environment.

The security device can be installed in the servers 20, 20 ', and 20' operated by the companies G1, G2 and G3 and configured to communicate with the management device. A user DB 22 for storing user information; a communication module 23 connected to the communication network for processing communication with the management apparatus; An authentication module 24 for verifying whether or not authentication is performed in response to a query signal, an access restriction module 24 for confirming an access right to security data shared by the user and transmitting the access right information to the management device of the terminal 10, The security file can be secured by a service model method for managing security files of various companies G1, G2, and G3 in one integrated server, as described above. Therefore, The security device includes a specific server 20, 20 ', 20' ').

The storage module 11 of the management device collects one or more pieces of security data in one operation unit and compresses and stores the security data in a security file. In accordance with the setting, a task ID is assigned to each security file, . The secure data can be transmitted from the servers 20, 20 ', and 20' operating in the companies G1, G2 and G3. Meanwhile, the storage module 11 stores the security data in one security file And stores the encrypted data in the form of a job ID. Therefore, even if the security data is unauthorizedly leaked, the security data is encrypted in the security file format.

The communication module 12 is a device that enables the terminal 10 to communicate with a normal communication network such as the Internet and proceed with communication.

The login module 13 processes the login process for executing the management apparatus or executing the security file by the user, and inputs the ID and PW (hereinafter, " identification code "), which is one kind of the identification code of the user, (20, 20 ', 20 ") of a certain company (G1, G2, G3) as well as to confirm whether or not the user is trying to access the server In the embodiment, the ID / PW is exemplified by the identification code, but other known and common codes capable of identifying the user or security data such as the authentication number can be variously modified within the scope of the following rights .

As described above, the management apparatus according to the present invention can communicate with the security apparatuses of the plurality of companies G1, G2 and G3, respectively, from the servers 20, 20 ', 20 "of the companies G1, G2 and G3 The login module 13 checks the information of the companies G1, G2 and G3 inputted by the user and the identification codes of the companies G1, G2 and G3, The login module 13 may search the login information management module 14 and proceed with a normal login procedure when the identification code is input. In order to enhance the authentication function, after transmitting an authentication inquiry signal to the security devices of the servers 20, 20 ', and 20' 'as described above, .

The login information management module 14 stores login information such as an identification code. The login information may include an identification code such as an ID / PW and information on a company G1, G2, G3 associated with the identification code. The information may include information on a company G1, G2, G3 server 20 , 20 ', 20' '), and the like.

The search processing module 15 provides a list of security files of the corresponding companies G1, G2 and G3 stored in the storage module 11 and a list of security data configured in the security file. As shown in FIG. 3 (an image showing one embodiment of a search window and a task window operated by the management apparatus according to the present invention), the user selects a company G1, G2, and G3) can be identified by checking the IDs (security file A, security file B, security file C, security file D). Subsequently, when the user selects a job ID in the search window and proceeds to log in normally, the corresponding job window pops up. A security data list in the security file corresponding to the job ID is posted in the job window, and the user can select and execute the posted security data.

In the embodiment according to the present invention, job IDs are posted to be classified by company in the search window, but they may be posted without discrimination to the corporation. Alternatively, a login window may be displayed by selecting a job ID that the user has posted, 2 can be selectively popped up.

For reference, '0.txt', '1.word', '2.hwp', and '3.bmp' posted in task windows 1 and 2 are for detailed security data posted when the user clicks the task ID. As a list, the list illustrates security data executable through the corresponding application program. In this example, the extension is exemplified as text, word, Hangul, and bitmap image. However, the present invention is not limited to this, and other drawings, design data, and the like may be included in a general document file.

Subsequently, the search processing module 15 outputs the security drive in which the decrypted security data is located in the job search window shown in FIG. 3, so that the user can control the execution of security data in the secure drive corresponding to the secure area . Of course, in a situation where the management apparatus according to the present invention is not logged in, the secure drive is not exposed.

On the other hand, when the access right limiting module 25 transmits the updated security file for the same job ID, the search processing module 15 receives the updated security file, The updated security file is placed in a subfolder (directory) in the job ID, and an update date is entered. That is, the user terminal 10 can manage the security file before the update and the security file after the update so that confusion of work can be prevented, and stable continuity can be ensured while maintaining security. Of course, since the security file before update and the security file after update have the same job ID and are managed as upper and lower folders, security data included in the security file can be moved and copied between job IDs.

The processing module 16 manages the access right information transmitted from the access right restriction module 25 according to the job ID, and compares the process executed by the application program with the access right information so that whether or not the process is controlled is controlled. For reference, since the application program operates based on the OS (Operating System) process, the processing module 16 confirms the access right information when the application program is to execute a specific process, and determines whether or not the process is executed do.

The security module 17 controls the secure drive, encrypts the secure data and decrypts the secure file, and processes the decrypted secure data to be stored in the secure drive in the secure area mode. The management apparatus according to the present invention stores the security file in a normal drive in the storage module 11 corresponding to the non-security area and encrypts it with an extension executable only by the management apparatus according to the present invention. For reference, in the present embodiment, the extension of the security file stored in the non-security area, which is a general drive in the storage module 11, is * .evsw.

The security module 17 decrypts the security file into security data so that the security data can be executed within a limited range, and then stores the decrypted security file in the security drive, which is a security area. Accordingly, the authorized application program can retrieve and 'retrieve' the security data because the security drive is searched, and the unauthorized application can not retrieve the security data because the security drive can not be searched.

The security module 17 can divide the execution environment of the terminal 10 into a general environment and a security environment, thereby limiting execution of security data only in a secure environment. To this end, the security module 17 forms a plurality of virtual operating layers 34a, 34b, and 34c in the OS kernel as described above so that an execution environment of the OS separated into the general environment and the security environment can be created.

For reference, in the general environment, the security drive can be identified, and in the security environment created by the security module 17, a general drive corresponding to the secure drive can be identified. However, the security module 17 ensures that the secure data is not executed in the general drive in both the normal environment and the secure environment.

Meanwhile, the management apparatus according to the present invention can allow security files for a plurality of job IDs to be posted in a search window, and the user can selectively execute the security files. At this time, the security data is classified and stored in the security area according to job IDs, and in order to prevent information leakage of the security data, only one security data is executed per job ID.

The security data DB 21 of the security device stores security data to be shared by the companies G1, G2, and G3 and the partner company S. According to the present invention, the security data is classified and stored according to job IDs so that the security device can convert and store the security data into a security file based on the job ID.

The user DB 22 stores the user information and the identification code information of the partner company S so that the authentication module 24 can search the information corresponding to the authentication query signal of the login module 13 and proceed with the authentication process .

The communication module 23 is a device that enables the servers 20, 20 ', and 20 " to communicate with a normal communication network such as the Internet and proceed with communication.

Upon receiving the authentication inquiry signal from the terminal 10, the authentication module 24 compares the identification code included in the authentication inquiry signal with the identification code information of the user DB 22 to finally determine whether or not it is true. If it is determined that the authentication is successful, the authentication module 24 generates an authentication signal and transmits the authentication signal to the in-control module 13 of the terminal 10 do.

The access right limitation module 25 manages the access right information for the user with respect to the security data of the job ID and retrieves the access right information corresponding to the identification code of the authentication inquiry signal, To the processing module 16. As a result, the processing module 16 can update the access right information of the corresponding security data at each login.

The access right limiting module 25 sets access rights for each user of the security data by the operator of the servers 20, 20 ', 20 "of the respective companies G1, G2 and G3, stores them as access right information, And transmits the access right information to the terminal 10 of the corresponding user by checking the authentication inquiry signal transmitted from the device. When the authentication module 24 generates the authentication signal, The access right information may be transmitted to the terminal 10 so that the processing module 16 of the terminal 10 processes the access right information.

In the embodiment according to the present invention, the access right contents included in the access right information may be discarded, released, imported, merged, printed, copied and pasted, screen captured, print marking and the like. The destruction is to set up the process such that the security data shared by the partner company (S) is automatically destroyed after the expiration of the set validity period, and the release is to set the process so that the security data can be stored also in the general area, (20, 20 ', 20 ") to the responsible person of the company (G1, G2, G3) after receipt of the security data, and the merging is performed between the receivers The job is to merge only the job ID, the transfer is to set the process so that the security data can be moved or copied to another IP, the printing is to set the process so that the security data can be output, The process is set so that data can be copied or pasted into the general area, If capture is to set up a process to screen capture the output screen of the security data to the print mark is set for the process to enable the print marking insert for printing security data.

The access right limiting module 25 confirms whether the security data for each job ID is updated by confirming the security data DB 21. If it is confirmed that the security data of the job ID to be operated by the user is updated, To the terminal (10).

FIG. 4 is a flowchart sequentially illustrating a management method according to the present invention. Referring to FIG.

S10; Security Data Sharing Phase

The terminal 10 of the partner company S receives the security data from the servers 20, 20 ', 20 "of the companies G1, G2 and G3. At this time, It is delivered in a secure file format, and is managed by job ID.

The security file may be shared by communication between the security device of the server 20, 20 ', 20 "and the management module of the terminal 10, May be transferred to the management device of the storage device 10 and stored in the storage module 11.

Since the security file is stored in the general area of the storage module 11 in an encrypted state, the user operating the terminal 10 can not confirm the security data included in the security file without a separate authentication procedure.

S20; Login step

The user proceeds to login operation for operating the management device to execute the security data. Here, the management device operation may be performed by clicking on the execution icon of the management device or clicking on the executable file (first example), or by directly clicking the security file to be executed (second example).

In the first example, when the user clicks the execution icon or the executable file, the search processing module 15 outputs a search window in which the job ID is posted. At this time, the search window may post one or more job IDs having history in the terminal 10. Subsequently, when the user selects one of the posted job IDs, the login module 13 outputs a login window for inputting the connection target company and the identification code.

When the user inputs the information about the connection target company and the identification code related to the job ID in the login window, the login module 13 transmits information about the input company and the identification code to the login information management module 14, The login module 13 checks the URL or IP / PORT which is the address of the corresponding company G1, G2 or G3 server 20, 20 ', 20 " When the management module 14 is searched, the management device is driven through a normal login procedure, and the storage module 11 searches for a security file associated with the identification code.

In the second example, when the user clicks on the security file located in the general drive, the login module 13 recognizes the security file and immediately outputs a login window for inputting the identification code with the connection target company.

Since the following process is the same as the first example, the following description will be omitted.

Meanwhile, the login module 13 may further include an authentication procedure of a user attempting to log in, in order to increase security of the security data.

In more detail, the login module 13 transmits the login information to the servers 20, 20 ', 20 "of the corresponding companies G1, G2, G3 based on the connection target company information in the login information management module 14. [ And accesses the corresponding server 20, 20 ', 20 ".

Next, the login module 13 transmits an authentication inquiry signal to the security device of the server 20, 20 ', 20 ", and the authentication module 24 of the security device transmits an authentication inquiry signal The authentication module 24 transmits an authentication signal to the login module 13, and the login module 13 transmits the authentication signal to the login module 13, The management apparatus is driven by finally authenticating the identification code inputted by the user.

S30; Steps to verify access rights

The access right restriction module 25 retrieves the access right information based on the identification code of the user requesting the authentication inquiry signal and transmits the access right information to the processing module 16 in the management device of the terminal 10 do. As described above, the access right information includes a job ID for allowing a user to identify and distinguish the security file, and information about the user's right to access the security file.

The access right restriction module 25 is controlled by the person in charge of managing the security data of the enterprise G1, G2 and G3, and can adjust the access right for each user and job ID. Therefore, the user's access rights to the security file (data) is applied every time the user logs in.

On the other hand, the access right limiting module 25 searches the security data DB 21 to check whether or not security data for each job ID is updated. If the security data of the job ID is updated, To the corresponding terminal (10).

S40; Task window output step

When the login module 13 completes the login procedure, the search processing module 15 outputs a security file corresponding to the job ID granted to the logged-in user and a job window in which the security data list configured in the security file is posted. At this time, the task pane may expose the security drive, which is a security area in which the security data is executed, so that the user can recognize the temporary storage location of the security data.

For example, the security file of the security data posted in the task window may be a security file that the user clicked directly in the second example. Alternatively, in the first example, the login module 13 may retrieve the security file to be.

Meanwhile, a sub-folder (directory) may be additionally described according to whether the security file is updated or not. That is, when the updated security file is transmitted from the security device of the server 20, 20 ', 20 ", the updated security file for posterior security file existing in the terminal 10 is posted in the subfolder If the access right to the job ID is allowed to the user, the security data corresponding to the job ID can be moved or copied within the same job ID range, so that the security file of the job ID is edited Of course, the security of the security data is maintained by restricting the exchange of the security data between the other job IDs.

Meanwhile, when the same job ID exists in the security area, the security data corresponding to the job ID can be freely moved and copied between the job IDs, thereby improving the work efficiency of the user. Of course, the exchange of security data between the other job IDs is blocked, so that the security of the security data can be protected.

S50; Step to Execute Secure Data

When the user clicks the corresponding security data posted in the job window for execution of the security data, the security module 17 decrypts the encrypted security file into the security data and stores the decrypted security file in the security drive, which is the security area.

Then, the security data stored in the secure drive is executed through the corresponding application program. Here, the application program is an authorized application program, and can recognize the secure drive and access and execute the secure data.

On the other hand, during the execution of security data, various process progress is accompanied. In other words, an application must proceed with the corresponding process in order to execute specific data of security data. At this time, the processing module 16 determines whether the process to be executed by the application program is continued according to the access right information received from the access right limiting module 25, so that the process can be restricted according to the access right information .

As a result, the user who intends to execute the security data is restricted in the processes of merging, printing, copying and pasting, screen capturing, print marking, etc. of the security data according to the corresponding access right information, There is an effect. When the security data of the specific job ID is executed, the processing module 16 restricts the execution of the security data of the other job ID, so that only the security data for one type of job ID is transmitted .

The security module 17 can change the general environment to the security environment in order to execute the security data, and can execute the authorized application program after the change. As a result, by executing an authorized application program under a secure environment, the secure data can be executed securely, thereby ensuring the execution of the user on the premise of reliable security.

S60; Security Data Execution Termination Phase

After completing the operation of editing the security data, the user can proceed to the end of closing the operation window and the like. When the user manipulates the end menu in the job window, the security module 17 encrypts the security data stored in the secure drive and converts the security data into a security file of a predetermined unit of work, I store it in my non-security area. When the secure data in the secure drive is converted into a secure file, the name of the secure file is set to the promised operation ID so that the authorized user can search for and decrypt the secure file, do.

In the embodiment where the security data is executed in the secure environment, the security module 17 checks whether the application program is authorized, and then controls only the authorized application program to be executed in the secure environment. The secure environment (virtual operating environment) is terminated and the secured drive, which is a mounted virtual drive, is unmounted and is switched to the normal environment.

S70; Security Data Export Phase

When the user selects the return menu of the navigation window after completing the job, the management device confirms the address of the server 20, 20 ', 20' 'of the job ID and confirms the security of the server 20, 20' Transfer the security file to the device. In this case, the security file is encrypted by encrypting security data located in the secure drive and converted into a promised work unit.

For reference, the security file includes profile information such as job ID, job name, job file creator information, and server information, and is transmitted together with the profile information upon returning. Since the login is required for export, communication is established between the server 20, 20 ', 20 "and the terminal 10 based on the login information of the user.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined by the appended claims.

10; A terminal 11; Storage module 12; Communication module
13; Login module 14; Login information management module 15; Search processing module
16; Processing module 17; Security module 20, 20 ', 20 "; server
21; Security data DB 22; User DB 23; Communication module
24; Authentication module 25; Access restriction module 31; hardware
32; Host OS 33; Imaginary layer
34a through 34c; Virtual operating layers G1, G2, G3; Enterprise
S; Partners

Claims (11)

delete A login module for receiving an identification code and processing login; A search processing module for searching for a security file in the job ID unit stored in the storage module and outputting the security file in the search window and outputting the configuration security data of the selected security file to the job window according to the login process of the login module; A security module decrypting the security file into security data and storing the secure file in a secure drive set as a security area, encrypting the security data stored in the secure drive as a security file, and storing the security data in a non-security area; And a processing module for controlling the execution of the security data by the application program based on the access right information,
The login module transmits an authentication inquiry signal to a corresponding security device of the input identification code;
Wherein the processing module receives the access right information transmitted by the security device in response to the authentication inquiry signal and updates the access right information each time the login is made;
The security data management apparatus comprising: A login module for receiving an identification code and processing login; A search processing module for searching for a security file in the job ID unit stored in the storage module and outputting the security file in the search window and outputting the configuration security data of the selected security file to the job window according to the login process of the login module; A security module decrypting the security file into security data and storing the secure file in a secure drive set as a security area, encrypting the security data stored in the secure drive as a security file, and storing the security data in a non-security area; And a processing module for controlling the execution of the security data by the application program based on the access right information,
Wherein the search processing module receives the updated security file from the security device and stores the received security file in the storage module to be placed in a subdirectory of the security file in the job ID;
The security data management apparatus comprising: The method according to claim 2 or 3,
Wherein the security module confirms whether an application program for executing the security data is authorized. 5. The method of claim 4,
The security module forms a plurality of virtual operating layers for individually receiving operating information of an operating system (OS) in a kernel area and transmitting the information to a user area, and when executing the decrypted security data, Changes the communication path of the driving information, and causes the applied application program to be executed in the secure environment. The method according to claim 2 or 3,
The processing module causing execution of the security data to be performed on a task ID basis;
The security data management apparatus comprising: Outputting, by the management apparatus, a search window in which the job ID is posted;
A login step in which the management device receives an identification code and processes the login in response to the selection of the job ID;
An access right confirmation step of the management device confirming access right information on the security file of the identification code;
A task window output step in which the management apparatus outputs a task window in which a security file corresponding to the task ID and security data are posted; And
A security data execution step of decrypting the security file into security data and storing the decrypted security file in a secure drive set as a security area and processing the execution of the security data by an application program based on the access right information;
The security data management method comprising the steps of: 8. The method of claim 7,
Wherein the step of verifying the access right includes a step in which the management apparatus transmits an authentication inquiry signal corresponding to the identification code to the security apparatus; and a step in which the security apparatus receives the access authority information transmitted in response to the authentication inquiry signal, The security data management method comprising the steps of: 8. The method of claim 7,
Wherein the step of verifying the access right includes the steps of: checking whether the security device updates the security file of the job ID based on the identification code; transmitting the security file updated by the security device to the management device; Receiving the updated security file from the security device and storing the received security file in a subdirectory of the security file in the job ID;
The step of outputting the operation window further includes outputting the updated security file so as to be placed in a subdirectory of the security file in the operation ID;
The security data management method comprising the steps of: 8. The method of claim 7,
The security data execution step may further include encrypting the processed security data with a security file, storing the encrypted security file in a non-security area, and deleting the security data remaining in the secure drive The security data management method comprising the steps of: 8. The method of claim 7,
The security data execution step may include setting a security environment among a plurality of virtual operation layers formed in the kernel area so that the management device individually receives driving information of an operating system (OS) before decrypting the security data, Changing a communication path of the driving information to a virtual operating layer and checking whether an application program for executing the security data is authorized and executing the authorized application program in the security environment, A method of managing security data.

Images