KR100882901B1 - Method Of Setting Security Policy In Home Network System - Google Patents

Abstract

The present invention relates to a security policy setting method of a home network system. The present invention provides a method for setting a security policy in a home network system including a plurality of electronic devices and a home gateway for controlling the operation of the electronic devices and a user's access to the electronic devices. Is selected; A mandatory access setting step of setting a specific security level among a plurality of security levels for which the access to the plurality of electronic devices is set differently for the specific user; And a random access setting step of resetting whether or not the specific user permits access to all or some of the electronic devices to which the specific security level allows or restricts access.

Home network, security policy

Description

How to set security policy for home network system {Method Of Setting Security Policy In Home Network System}

The present invention relates to a security policy setting method of a home network system. More specifically, in a method for setting a security policy for access rights for controlling a plurality of electronic devices in a home network environment, Discretionay Access Control (DAC) and Mandatory Access Control (MAC) ) Is a method of setting a security policy of a home network system that can be mixedly applied.

The home network refers to a network technology that connects electronic devices such as information appliances in the home to a network so that users can use them freely regardless of time and place.

The target of building a home network is a digital device, not an analog type, and can be a refrigerator, a washing machine, a digital TV, a digital camcorder, a camera, a computer, or an air conditioner that can be connected to the Internet.

As a communication method applied to a home network, both wired communication and wireless communication may be utilized. Wireless communication technologies that have been recently studied intensively include home RF using RF (Radio Frequency), Bluetooth, wireless LAN, and IrDA using infrared.

The home network is composed of a private network based on the Internet Protocol (IP). Through this, all types of home appliances used in the home are connected and controlled.

Middleware to enable communication between the home gateway (or home server) and various electronic devices in the home network includes HAVI (Home AV Interoperability), UPnP (Universal Plug and Play), JINI, and HWW (Home Wide Web). . The middleware for home network is a kind of software installed in the home gateway that controls various devices in the wired / wireless home networking environment and ensures mutual information exchange.It enables users to create a consistent program regardless of hardware or operating system. Provide an API.

In such a home network environment, a user using electronic devices is allowed or restricted based on a strong security policy. However, in general, the security policy application method for setting access rights of users is separately set the electronic devices that can be accessed by each user and the electronic devices to which access is restricted, so as the number of users increases The security policy applied is complicated and difficult to manage.

In addition, among the security policy setting methods for setting the access rights of the user using the home network environment, there is a level application method that differentiates and sets the access rights for each electronic device.

The security policy method of setting the access rights of each individual user to a corresponding level has the advantage that users can conveniently apply the security policy in many home network environments, but to apply different access rights to a specific user, There is a problem in that access rights must be applied by creating and setting a level other than the level set in.

The present invention solves the above problems and has been proposed in accordance with recent trends and requests, and provides a security policy setting method of a home network system that can be applied by mixing a random access control method and a mandatory access control method. There is a purpose.

Another object of the present invention is to provide a security policy setting method of a home network system that allows a security policy set inside a home gateway in a home network environment to be created, modified, deleted, and managed by a user accessing a web portal. will be.

Still another object of the present invention is a method for setting a security policy of a home network system that allows an administrator who establishes and manages a security policy to set an access right to control electronic devices inside a home network even when the administrator exists outside the home network. To provide.

As an aspect of the present invention for achieving the above object, a security policy setting method of a home network system according to the present invention, a plurality of electronic devices, the operation of the electronic devices and the user's access to the electronic devices In a home network system including a home gateway for controlling the method, a method of setting a security policy, the method comprising: selecting a specific user; A mandatory access setting step of setting a specific security level among a plurality of security levels for which the access to the plurality of electronic devices is set differently for the specific user; And a random access setting step of resetting whether or not the specific user permits access to all or some of the electronic devices for which the specific security level allows or restricts access.

The user selecting step may include selecting the specific user when information regarding the specific user exists; And when the information about the specific user does not exist, generating information about the specific user and selecting the specific user.

The mandatory access setting step may include: setting the specific security level for the specific user when the specific security level exists; And when the specific security level does not exist, setting the generated specific security level for the specific user after the specific security level is generated.

The security policy setting method of the home network system according to an aspect of the present invention may further include storing the items set in the forced access setting step and the random access setting step.

As another aspect of the present invention for achieving the above object, a security policy setting method of a home network system according to the present invention, a plurality of electronic devices, the operation of the electronic devices and the user's access to the electronic devices In a security policy manager terminal capable of communicating with a home network system including a home gateway for controlling a network and setting and managing a security policy of the home network system, the method for setting the security policy relates to a security policy for each user. Transmitting a message requesting information to the home gateway; Receiving information about the security policy for each user from the home gateway; And setting a security policy for a specific user by using the received information about the security policy for each user, wherein the setting of the security policy comprises: selecting the specific user; A mandatory access setting step of setting a specific security level among a plurality of security levels for which the access to the plurality of electronic devices is set differently for the specific user; And a random access setting step of resetting whether or not the specific user permits access to all or some of the electronic devices for which the specific security level allows or restricts access.

The security policy setting method of the home network system according to an aspect of the present invention further includes the step of transmitting the security policy for each user to the home gateway after reflecting the items set in the security policy setting step to the security policy for each user. can do.

As another aspect of the present invention for achieving the above object, a security policy setting method of a home network system according to the present invention, a plurality of electronic devices, the operation of the electronic devices and the user of the electronic devices Claims [1] A method of setting a security policy in a home network system including a home gateway for controlling access, the method comprising: generating a plurality of security levels for setting whether a user is allowed to access each of the plurality of electronic devices; A mandatory access setting step of setting a specific security level among the plurality of security levels for a specific user; And a random access setting step of resetting whether or not the specific user permits access to all or some of the electronic devices for which the specific security level allows or restricts access.

The security policy setting methods of the home network system provided by the present invention can be written as a computer program that can be executed by a computer, and the computer program can be recorded on a computer-readable recording medium.

According to the security policy setting method of the home network system according to the present invention described above has the following advantages.

First, according to the present invention, the security policy can be efficiently managed by using a security policy setting method in which a random access control method and a mandatory access control method are mixed.

Secondly, according to the present invention, there is an effect that a security policy specific to a specific user can be efficiently established and managed.

Third, according to the present invention, the security policy can be established by the security policy manager connected to the web portal, so that even if the security policy manager is external, access rights for controlling the electronic devices inside the home network can be set. It works.

The above objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Like numbers refer to like elements throughout. In addition, when it is determined that the detailed description of the known function or configuration related to the present invention may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a block diagram of a home network system according to an embodiment of the present invention. A home network system according to an embodiment of the present invention will be described in detail with reference to FIG. 1.

Home network system according to an embodiment of the present invention, the external control device 110, the internal control device 140, a plurality of electronic devices 170, security policy manager terminal 200 and the home gateway 300 It may include.

The external control device 110 is a device that can control the plurality of electronic devices 170 from the outside of the home. Examples of the external control device 110 include a mobile phone 111 or a PC (Personal Computer) 112. The external control device 110 may communicate with the home gateway 300 through the telephone network 120 or the Internet 130. The external control device 110 transmits a control signal for controlling the plurality of electronic devices 170 to the home gateway 300.

The internal control device 140 is a device that can control the plurality of electronic devices 170 in the home. Examples of the internal control device 140 include a remote controller 141, a wall pad 142, or a PC 143. The internal control device 140 transmits a control signal for controlling the plurality of electronic devices 170 to the home gateway 300.

The security policy manager terminal 200 allows the security policy manager to log in to create, modify, delete, and manage the security policy of the home network. Detailed configuration and operation of the security policy manager terminal 200 will be described later.

The home gateway 300 is a network and service providing apparatus for sharing and controlling information among electronic devices and communication devices in a home, separating an external network from an internal network, and enabling a service between an internal and external network. to be. That is, the home gateway 300 may provide an internal / external network interface, a networking function, a security function, interworking and service provision between indoor devices.

The home gateway 300 receives a control command signal from the plurality of electronic devices 170 included in a home network having a private IP address and has a limited public IP address. The input control command signal is transmitted to the plurality of electronic devices 170 so as to perform an operation.

For example, the home gateway 300 that receives the control command signal through the mobile phone 111 or the PC 112 detects the user who transmitted the control command and the type of the control command from the received control command signal. Compared with the security policy set by the security policy manager. The home gateway 300 accepts access to the electronic device for a user and a control command matching the set security policy, and restricts access to a user or command for which access to the electronic device is restricted. have.

Meanwhile, in the present invention, the security policy set by the security policy manager may be applied by mixing a discretionary access control (DAC) scheme and a mandatory access control scheme (MAC). According to the random access control scheme, whether to allow access to the plurality of electronic devices 170 according to a user is individually set for each of the plurality of electronic devices 170. The mandatory access control method is to set different security levels in each of the plurality of electronic devices 170 to set a specific security level among the different security levels to a specific user. Specific examples of the security policy setting by the random access control method and the forced access control method will be described later.

The home gateway 300 is connected to the plurality of electronic devices 170. The plurality of electronic devices 170 may include a boiler 171, a living room lamp 172, a door lock 173, a gas valve 174, and a security device 175 that are provided in a general home. . Although not illustrated in FIG. 1, the plurality of electronic devices 170 may include all electronic devices that may be provided in a washing machine, an electric oven, and other general homes.

2 is a block diagram of a security policy manager terminal and a home gateway according to an embodiment of the present invention. The security policy manager terminal 200 and the home gateway 300 according to an embodiment of the present invention will be described in detail with reference to FIG. 2.

The security policy manager terminal 200 and the home gateway 300 may communicate by a specific communication protocol. For example, the security policy manager terminal 200 and the home gateway 300 may exchange data by the Home Security Policy Protocol (HSPP) 230. The HSPP 230 is a communication protocol for communication between the security policy manager terminal 200 and the home gateway 300, which is applied in the home network system described herein. The HSPP 230 is a packet communication method, and may be a socket communication method.

The home gateway 300 may include a security policy agent 305, a security policy storage 310, a log storage 315, an electronic device control agent 320, an active security policy storage 325, and an authentication agent ( 330, a GUI 335, and a security policy module 345.

The security policy agent 305 stores the security policy in response to a security policy request signal transmitted from the security policy manager terminal 200 to create, modify, delete, and manage the security policy set by the security policy manager. The security policy stored in the unit 310 may be transmitted to the security policy manager terminal 200 through the HSPP 230.

The security policy storage unit 310 stores a security policy existing as a file inside the home gateway 300. The security policy storage unit 310 may not be directly accessible when the security policy is applied in the home gateway 300, and the active security policy storage unit may be copied or loaded into a memory for preservation of the security policy. It is preferably configured separately from 325 and used for secure security policy management.

The electronic device control agent 320 transmits the electronic device control command received from the security policy module 345 to the electronic device control interface and the display 400 separated from the home gateway 300, and corresponds to Receive a response signal.

The active security policy storage 325 is a security policy in which the security policy stored in the security policy storage 310 is duplicated or memory loaded. When the user controls the plurality of electronic devices 170 through the GUI 335, the security policy module 345 uses the security policy stored in the active security policy storage 325.

The authentication agent 330 allows a user who is located outside to receive user authentication to control the plurality of electronic devices 170 through the GUI 335. Authenticate

The GUI 335 means a web portal or a home portal, and is provided on a graphic basis so that a user can conveniently control the plurality of electronic devices 170.

The security policy module 345 refers to a security policy stored in the active security policy storage unit 325 to a user who wants to control the plurality of electronic devices 170 through the GUI 335. Authorizes the electronic device 170 and transmits a control command signal for controlling the electronic device 170 to the electronic device control agent 320.

The security policy manager terminal 200 may include a graphical user interface (GUI) 205, an authentication client 210, a security policy generation module 215, an existing security policy storage unit 220, and a temporary security policy storage unit 225. It may include.

The GUI 205 provided in the security policy manager terminal 200 refers to an interface provided on a graphical basis for the security policy manager to be convenient in managing security policies of users on a home network.

The authentication client 210 allows the administrator to manage the security policy through the security policy manager terminal 200 to be authenticated by the home gateway 300. The authentication client 210 inputs an ID and password input by the administrator to the home gateway. And transmits to the authentication agent 330 of 300. The authentication agent 330 authenticates the ID and password input by the administrator, and transmits a response signal to the authentication client 210.

The security policy generation module 215 generates, modifies, deletes and manages a security policy transmitted from the home gateway 300 and stored in the existing security policy storage 220. The security policy created, modified and deleted by the security policy generation module 215 is transmitted to the home gateway 300.

When the security policy manager requests security policy information to the home gateway 300 through the security policy manager terminal 200, the existing security policy storage unit 220 responds to the request. The security policy transmitted from the server is parsed and stored for the security policy manager to view through the GUI 205. In addition, when a security policy manager creates, modifies, deletes, and manages a security policy using the GUI 205, the security policy stored in the existing security policy storage 220 is loaded into the security policy generation module 215. do.

The temporary security policy storage unit 225 stores the security policy created, modified, deleted, and managed by the security policy generation module 215. The security policy stored in the temporary security policy storage unit 225 is transmitted to the home gateway 300 through the HSPP 230.

On the other hand, when a security policy manager located outside, the security policy manager installation program 340 shown in FIG. 2 can be downloaded and installed in a new security policy manager terminal. The security policy manager may manage the security policy using the installed security policy management program.

Meanwhile, the home network system shown in FIG. 1 may include the electronic device control interface and the display 400 shown in FIG. 2.

The electronic device control interface and displayer 400 may include an electronic device control agent 405 and middleware 410.

The electronic device control agent 405 receives the electronic device control command transmitted from the home gateway 300 and transmits it to the middleware 410.

The middleware 410 may transmit the electronic device control command transmitted from the electronic device control agent 405 in a form suitable for the electronic device.

3 is a flowchart illustrating a security policy setting method of a home network system according to an embodiment of the present invention. Referring to Figure 3, it will be described in detail a security policy setting method of a home network system according to an embodiment of the present invention. The security policy setting method of the home network system according to an embodiment of the present invention may be executed in the home network system described with reference to FIGS. 1 and 2.

First, a process of selecting a user to which a security policy is applied is performed [S300].

Here, it may be determined whether the information about the specific user exists in the storage area of the home gateway 300 [S301]. The information about the specific user may be included in a security policy stored in the security policy storage 310. The security policy stored in the security policy storage 310 may exist in the form of a file or a database. For example, the security policy may include user information related to the security policy of family members. The user information may exist as a file or database separate from the security policy file or database.

As a result of the determination in step S301, if there is information about the specific user, the specific user is selected [S307].

As a result of the determination in step S301, if the information about the specific user does not exist, information about the specific user is generated [S303], and after the generated information about the specific user is registered in the security policy [S305]. The specific user is selected [S307].

Then, the forced access setting process is performed for the selected specific user [S400]. The mandatory access setting process, as described above, sets a specific security level among a plurality of security levels for which the access to the plurality of electronic devices 170 is set differently for the specific user. Means that. The information about the plurality of security levels may be included in the security policy file or the database itself, or may exist as a file or database separate from the security policy file or the database.

The security policy manager may classify the plurality of electronic devices 170 into a plurality of groups according to security. The security policy manager may match each of the security levels against the classified plurality of groups.

Here, the security policy manager may determine whether a specific security level to be applied to the selected specific user exists in the storage area of the home gateway 300 [S309].

As a result of the determination in step S309, if the specific security level exists, the specific security level is selected to set the specific security level for the selected specific user [S315]. On the other hand, as a result of the determination in step S309, if the specific security level does not exist, the specific security level is generated [S311], and after the generated specific security level is registered [S313], the specific security level is selected [ S315].

Table 1 shows an example of security levels for mandatory access settings.

Security level Electronics One Washing machine, electric oven 2 Security device, gas valve, boiler, door lock 3 TV 4 Living room

In Table 1, at least one electronic device is matched for each security level. For example, security level 2 is a security level that allows a user access to "security devices", "gas valves", "boilers" and "door locks". Also for example, security level 3 is a security level that allows a user's access to "TV".

Each security level may also be set to allow a user's access to matched electronic devices to lower levels. For example, in Table 1, security level 2 is not only "security device", "gas valve", "boiler" and "door lock", but also "TV" matched to security level 3 and "living room matched to security level 4". Etc. "may be set to allow a user's access to the "

Table 2 shows an example of a security policy in which the security level of Table 1 is applied to four users (mandatory access setting).

Electronics User A User B User C User D (Security level 1) (Security level 2) (Security level 3) (Security level 4) washer ○ × × × Electric oven ○ × × × Security device ○ ○ × × Gas valve ○ ○ × × Boiler ○ ○ × × door lock ○ ○ × × TV ○ ○ ○ × Living room ○ ○ ○ ○

That is, user A, user B, user C, and user D are set with security level 1, security level 2, security level 3, and security level 4, respectively. In Table 2, "o" indicates access permission (許 容), and "x" indicates access denied (不 許). For example, if the step S400 is completed as shown in Table 2 for the user C, the user C is only accessible to the "TV" and "living room" of the electronic devices.

Table 3 shows another example of the security policy in which the security level of Table 1 is applied to four users (mandatory access setting).

Electronics User A User B User C User D (Security level 1) (Security level 2) (Security level 3) (Security level 3) washer ○ × × × Electric oven ○ × × × Security device ○ ○ × × Gas valve ○ ○ × × Boiler ○ ○ × × door lock ○ ○ × × TV ○ ○ ○ ○ Living room ○ ○ ○ ○

In Table 3, security level 1 is set for user A, security level 2 is set for user B, and security level 3 is set equal to user C and user D. FIG.

If the number of security levels applied in step S400 is too large, it becomes difficult to manage the security policy manager, and inconvenience of having to check electronic devices corresponding to the security level to be set when setting a specific security level to a new user. Occurs. In addition, when setting a security policy for a new user or an existing user, there may be no exact level of security for the new user or the existing user. The random access setting process described below can solve this problem.

Therefore, a random access setting process is performed for the selected specific user [S317]. In step S317, whether or not the specific user is allowed to access is reset for all or some of the electronic devices to which the specific security level set in step S400 allows or restricts access.

Table 4 shows an example of a security policy set randomly for the users of Table 2.

Electronics User A User B User C User D (Security level 1) (Security level 2) (Security level 3) (Security level 4) washer ○ × ○ × Electric oven ○ × × × Security device ○ ○ × × Gas valve ○ ○ × × Boiler ○ ○ × × door lock ○ ○ × ○ TV ○ ○ × ○ Living room ○ ○ ○ ○

For example, the security policy manager may need to modify the access permission electronic devices of the user C and the user D at the request of the user C and the user D or at their own discretion. Accordingly, the security policy manager may modify the security level forcibly applied in the step S400 by the step S317.

For example, in Table 4, the user C is set to be denied access to the "TV" that was set to be allowed to access in step S400, and to the "washing machine" that was not allowed to access. Also, for example, the user D is set to be allowed access to the "door lock" and the "TV" which was not accessible in the step S400.

Table 5 shows an example of a security policy that is arbitrarily set for the users of Table 3.

Electronics User A User B User C User D (Security level 1) (Security level 2) (Security level 3) (Security level 3) washer ○ × × × Electric oven ○ × × × Security device ○ ○ × ○ Gas valve ○ ○ × × Boiler ○ ○ × × door lock ○ ○ × × TV ○ ○ × ○ Living room ○ ○ ○ ○

In Table 5, access is denied for "TV" that was granted access to user C in Table 3 [step S400], and for "security devices" that were denied access to user D in table 3 [step S400]. Access is allowed. As described above, with respect to the user C and the user D set to the same security level in step S400, a random access setting process may be performed in step S317 to set different security policies.

Then, the items set in the forced access setting step [S400] and the random access setting step [S317] are stored for the specific user [S319]. The step S319 may be performed by newly generating the security policy or by updating the previously stored security policy.

4 is a flowchart illustrating data and operations transmitted and received between a security policy manager terminal and a home gateway. In order for the security policy setting method of the home network system described with reference to FIG. 3 to be performed in the home network, various data are transmitted and received between the security policy manager terminal 200 and the home gateway 300. The terminal 200 and the home gateway 300 should each perform a predetermined operation.

First, after the authentication (login) of the security policy manager is completed, the security policy manager terminal 200 transmits a message requesting information about a security policy for each user to the home gateway 300 [S401].

The home gateway 300, upon receiving the message, transmits the information about the security policy for each user to the security policy manager terminal 200 [S403].

The security policy manager terminal 200 sets a security policy for a specific user by using the information about the security policy for each user transmitted from the home gateway 300 [S405]. The step S405 is a step of creating, modifying, deleting, and managing a security policy for the specific user. In the step S405, the user selection step [S300], the mandatory access setting step [S400], and the random access setting step by the security policy setting method of the home network system according to an embodiment of the present invention described with reference to FIG. [S317] may be included.

The security policy manager terminal 200 transmits the newly created or updated user-specific security policy to the home gateway 300 in step S405 [S407].

The home gateway 300 applies a security policy for each user transmitted from the security policy manager terminal 200 [S409].

The security policy setting method of the home network system according to the present invention described above may be provided by recording on a computer-readable recording medium as a program for executing in a computer.

The security policy setting method of the home network system according to the present invention can be executed through software. When implemented in software, the constituent means of the present invention are code segments that perform the necessary work. The program or code segments may be stored on a processor readable medium or transmitted by a computer data signal coupled with a carrier on a transmission medium or network.

Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording devices include ROM, RAM, CD-ROM, DVD ± ROM, DVD-RAM, magnetic tape, floppy disks, hard disks, optical data storage devices, and the like. The computer readable recording medium can also be distributed over network coupled computer devices so that the computer readable code is stored and executed in a distributed fashion.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

1 is a block diagram of a home network system according to an embodiment of the present invention.

2 is a block diagram of a security policy manager terminal and a home gateway according to an embodiment of the present invention.

3 is a flowchart illustrating a security policy setting method of a home network system according to an embodiment of the present invention.

4 is a flowchart illustrating data and operations transmitted and received between a security policy manager terminal and a home gateway.

<< Description of the code for the main part of the drawing>

110: external control device 120: telephone network

130: Internet 140: internal control device

170: a plurality of electronic devices 200: security policy manager terminal

205: GUI (terminal side) 210: authentication client

215: security policy generation module 220: existing security policy storage unit

225: temporary security policy storage unit 300: home gateway

305: security policy agent 310: security policy storage unit

315: log storage 320: electronic device control agent

325: active security policy storage unit 330: authentication agent

335: GUI (home gateway side) 345: security policy module

Claims (11)

In the home network system comprising a plurality of electronic devices, a home gateway for controlling the operation of the electronic devices and the user's access to the electronic devices, a method for setting a security policy, A user selection step of selecting a specific user; A mandatory access setting step of setting a specific security level among a plurality of security levels for which the access to the plurality of electronic devices is set differently for the specific user; And A random access setting step of resetting access permission of the specific user to all or some of the electronic devices to which the specific security level allows or restricts access; The user selection step, When the information about the specific user exists, selecting the specific user; And If the information about the specific user does not exist, the information about the specific user is generated and the specific user is selected. Security policy setting method of a home network system that includes. delete The method of claim 1, wherein the mandatory access setting step comprises: Setting the particular security level for the particular user if the particular security level exists; And If the specific security level does not exist, the generated specific security level is set for the specific user after the specific security level is generated. Security policy setting method of a home network system that includes. The method of claim 1, Storing the contents set in the forced access setting step and the random access setting step Security policy setting method of the home network system further comprising. Communicate with a home network system including a plurality of electronic devices and a home gateway that controls operations of the electronic devices and a user's access to the electronic devices, and sets and manages a security policy of the home network system In the security policy manager terminal, the method for setting the security policy, Transmitting a message requesting information on a security policy for each user to the home gateway; Receiving information about the security policy for each user from the home gateway; And And setting a security policy for a specific user by using the received information about the security policy for each user. The security policy setting step, The specific user is selected when the information on the security policy for each user is included, and when the information on the security policy for each user does not include the information on the specific user, the specific user is selected. A user selection step of generating information about a user and selecting the specific user; A mandatory access setting step of setting a specific security level among a plurality of security levels for which the access to the plurality of electronic devices is set differently for the specific user; And A random access setting step of resetting whether or not the specific user is allowed to access all or some of the electronic devices to which the specific security level allows or restricts access Security policy setting method of a home network system that includes. delete The method of claim 5, wherein the mandatory access setting step, Setting the particular security level for the particular user if the particular security level exists; And If the specific security level does not exist, the generated specific security level is set for the specific user after the specific security level is generated. Security policy setting method of a home network system that includes. The method of claim 5, wherein Transmitting the user-specific security policy to the home gateway after reflecting the information set in the security policy setting step to the user-specific security policy. Security policy setting method of the home network system further comprising. In the home network system comprising a plurality of electronic devices, a home gateway for controlling the operation of the electronic devices and the user's access to the electronic devices, a method for setting a security policy, A user selection step of selecting a specific user; Generating a plurality of security levels for setting whether to allow a user access to each of the plurality of electronic devices; A mandatory access setting step of setting a specific security level among the plurality of security levels for the specific user; And A random access setting step of resetting access permission of the specific user to all or some of the electronic devices to which the specific security level allows or restricts access; The user selection step, When the information about the specific user exists, selecting the specific user; And If the information about the specific user does not exist, the information about the specific user is generated and the specific user is selected. Security policy setting method of a home network system that includes. The method of claim 9, Storing the contents set in the forced access setting step and the random access setting step Security policy setting method of the home network system further comprising. A computer-readable recording medium having recorded thereon a computer program capable of executing the method of any one of claims 1, 3 to 5, and 7 to 10.

Images