KR100996910B1 - System and Method of Location-based information security - Google Patents

Abstract

According to the present invention, when information (confidential) inside an organization such as an enterprise is digitally documented (electronically documented), it may occur due to copying of a document, external leakage, or arbitrary exposure of a secret key (password) of a user who has the right to the document. It relates to a system that can prevent the leakage of information that can be based on location.

The information protection system disclosed in the present specification comprises: a user key issuing unit for generating and issuing a user key reflecting location information (viewing permission location information) to allow viewing of electronically documented (encrypted) information; Location information for receiving location information (access location information) of the user at the time of requesting the reading, when the user requests to view the information by using an authentication element that authenticates that the user has a legitimate authority to the information. Receiving unit; And a key storage unit for storing the issued user key and determining whether the access location information is included in the read-allowed location information so that the read-out information can be provided to the user only when included. This solves the problem to be solved.

Description

Location-based information security system and its method {System and Method of Location-based information security}

The present invention relates to an information protection system and a method thereof, and more particularly, when information (confidential) inside an organization, such as a company, is digitally documented (electronically documented), the document has a right to copy, externally leak, and have a right to a document. The present invention relates to a system and method for preventing the leakage of information that may occur due to the random exposure of a user's secret key (password).

The ripple effect of digitization extends to documents that are encountered on a daily basis, and most organizations such as corporations have established an electronic document management system to increase the amount of work-related documents to be managed and to expedite payment processing. Documents are digitized and managed. Such electronic documents are easy to copy and the ability to create large numbers of copies in a short time can cause significant damage to the organization, especially when documents containing important confidential information are exposed to the outside world.

To prevent exposure of electronically documented information (confidentiality), most organizations apply the Digital Right Management (DRM) system to document security. In a DRM system, a pre-issued license allows only authorized users (the authorized user) to view, modify and copy electronically documented information (confidential). Generally, electronic documented information (confidential) protected by DRM is encrypted with symmetric key, and symmetric key that encrypts electronic documented information (confidential) is encrypted with public key of political party user and distributed through license. The DRM system attempts to protect documented confidentiality by decrypting the electronic documented information (confidential) only if the owner of the legitimate private key enters the legitimate password.

However, even if electronically documented information (confidential) protected in the above manner, if the private key and password are randomly exposed to the outside, such as when a party user randomly provides his / her private key and password to a third party, A third party can also read electronic documented information (confidential), and there is a problem in that confidentiality inside the organization is unprotected, especially by the malicious intention of party users inside the organization.

The present invention has been made to solve the above problems, and the problem to be solved by the present invention is that the private key and password of the party user who can view (access) electronic documented information (confidential) inside the organization It is an object of the present invention to provide an information protection system and method capable of protecting electronically documented information (confidential) even if it is arbitrarily exposed to a third party (external).

In order to solve the above problems, the information protection system disclosed herein

A user key issuing unit for generating and issuing a user key reflecting location information (viewing permission location information) that is allowed to view electronic documented (encrypted) information to a user; Location information for receiving location information (access location information) of the user at the time of requesting the reading, when the user requests to view the information by using an authentication element that authenticates that the user has a legitimate authority to the information. Receiving unit; And a key storage unit for storing the issued user key, judging whether the access position information is included in the read permission position information, and allowing the read request information to be provided to the user only when included. The present invention solves the problem to be solved.

In order to solve the above problems, the information protection method disclosed herein

(a) generating and issuing a user key reflecting the location information (viewing permission location information) that is allowed to view electronic documented (encrypted) information to the user; (b) when the user requests to view the information by using an authentication element that authenticates that the user has a legitimate authority to the information, receiving location information (access location information) of the user at the time of requesting the reading; Making; And (c) storing the issued user key, determining whether the access location information is included in the read permission location information, and allowing the read request information to be provided to the user only when included. To solve the problem to be solved by the present invention.

According to the present invention, even if the private user's private key and password for the electronic documented information (confidential) inside the organization is exposed to the outside arbitrarily, the location of the attempt to access the information (access) is specified in a specific location, that is, If the access is not allowed, access (access) is blocked, thereby ensuring the security of electronic documented information (confidential) protection within the organization.

Prior to the description of the specific contents of the present invention, for the convenience of understanding, an outline of a solution of the problem to be solved by the present invention is first presented.

The core of the scheme for protecting electronic documented information (confidential) in organizations such as corporations according to the present invention is the private key, password, etc. of a party user in order to be able to read or copy the electronic documented information (confidential). Not only does it require an authentication element, but it also allows access to electronically documented information (confidential) only at specific locations.

That is, even if a private key and password of a political party user are randomly exposed to a third party, the location of access to electronic documented information (confidential) is not a predetermined location, that is, an access-admitted location. In order to solve the problem to be solved by the present invention, it is impossible to access (view) itself even by a party user only with the private key and password of the party user. to be.

Hereinafter, the configuration of the invention for clarifying the solution to the problem to be solved by the present invention will be described in detail with reference to the accompanying drawings, based on the preferred embodiment of the present invention, to give a reference numeral to the components of the drawings In the drawings, like reference numerals refer to like elements even though they are on different drawings, and it is to be noted that components of other drawings may be cited when necessary in describing the drawings.

1A and 1B illustrate a preferred configuration of the present invention, and FIG. 2 illustrates a preferred flow of the present invention.

The terminal 10 storing the electronic documented information (confidential) is remotely separated from the user terminal (PC, notebook, UMPC, mobile phone, etc. having a device having a computing and display function, 20), or the user It may be provided as a module in the terminal 20 to be integrated (integrated) (in the case of Figure 1b). In the case of the detachable type, some components of the present invention are implemented in the terminal 10 that stores electronic documented information (confidential), and some components are implemented in the user terminal 20. In the integrated case, the entire configuration of the present invention is implemented in the user terminal 20.

The user key issuing unit 101 is allowed to access (view) documents related to the authentication factor A and the various tasks of the organization to be authenticated when the user joins an organization such as an enterprise. Generates a decryption key of the document by receiving location information (viewing permission location information) (s111), generates a user key encrypted with the decryption key using the authentication element and the viewable location information (s112) and issues it to the user. This part performs the function. Issuance of the user key (s11) consists of storing the user key in the key storage unit 102 of the terminal 10, which specifically stores electronic documented information (confidential).

Where A denotes 'issuance', which is to distinguish it from B to be mentioned below. An example of the authentication element may be a user password. If the interval for transmitting the password to the terminal 10 is unsecure, it may be other data in a cryptographically protected form, and the same may be applied to the following authentication elements. .

The decryption key represents a private key in the case of a public key encryption algorithm or a secret key in the case of a symmetric key encryption algorithm according to a document encryption algorithm. On the other hand, the read permission position information is stored in the read permission position information storage unit 103 of the terminal 10 storing electronic documented information (confidential), and if a user key issuance event is transmitted to the user key issuer 101. do. The designation and storage of the location information allowed for access will be made by the information protection policy by the group. However, in order to ensure the complete confidentiality protection, it is reasonable to designate and store the minimum number of locations. Only where it is strictly controllable by The specific manner of designation and storage of the location information is irrelevant to the essential aspects of the present invention, so further detailed description is omitted.

When the user requests the reading by transmitting the authentication element B (password) to the terminal 10 through his terminal 20 to read the electronic documented information (confidential) (s121), the user terminal applying for reading ( Position information (connection position information) of 20 is received by the position information receiving unit 104 (s122). Here, 'B' is to be distinguished from 'A' above and is for 'view (access) request' of information (confidential).

On the other hand, the reception of the access position information, especially when the user terminal 20 is remote from the terminal 10 storing the electronic documented information (confidential) as shown in Figure 1a, the GPS (Global Positioning System) that has been activated a lot recently Preferably). That is, when a user makes a request for reading information (confidentiality) to the terminal 10 through his terminal 20, the location information (the location information of the point where the request for viewing (connection) to the satellite 30 that provides the GPS service) is generated ( Access location information) is transmitted, and the satellite 30 transmits the received access location information to the location information receiver 104. Alternatively, when the reading request is received from the user terminal 20 to the terminal 10, the location information receiver 104 may detect the reading request and request the connection location information of the user terminal 20 directly from the satellite 30. It is possible.

The location information receiving unit 104 transmits the connection location information to the key storage unit 102 (s123), and the key storage unit 102 inquires the location information of the reading allowable location information storage unit 103 to retrieve the location information receiving unit ( It is determined whether the connection location information received from 104 is included in one of the view permission position information stored in the view permission position information storage 103 (S124). If the determination result is not included, the user terminal 20 is notified of 'access denied', and if included, the right authority for viewing the user terminal 20 requesting the reading is recognized, and thus the object is viewed from the user key. The decryption key of the document is extracted (s125) and transmitted to the information storage / transmitter 105. At this time, the decryption key is extracted as follows.

Decryption key = F (authentication element, connection location information, user key).

Where F is a trapdoor one-way function, and a trapdoor one-way function is a kind of function that generates an output having a one-way property for a given input, and RSA (Rivest-Shamir). -Adleman) Applicable to cryptographic systems such as elliptic curves, ID-based, and attribute-based. A trapdoor one-way function is a function that cannot determine the input value even if the output of the function is given. It is difficult to find the inverse of a function like a normal one-way function, but it is a function that can be easily found if there is special information called trapdoor. The trapdoor one-way function is widely used in the field of cryptography. The mathematical definition of the trapdoor one-way function is as follows.

It is difficult to find f (x) when there is a secret y, and no y for any x, but if y is given then the function f is a trapdoor one-way function if it is easy to find the value of x in f (x). In the present invention, the special information corresponding to the trapdoor is the authentication element and the connection location information.

The information storage / transmitter 105 stores the electronically documented (encrypted) information (confidential), receives the decryption key from the key storage unit 102, decrypts the encrypted information (confidential), and decrypts the decrypted information. Transmission to the user terminal 20 (s13).

On the other hand, the present invention further includes an encryption unit 106, if modification (change) to the read information occurs so that the above-described protection scheme can be implemented for the modified information (s14). That is, when the user modifies the information viewed by the user, the encryption unit 106 encrypts the modified information and stores the information in the information storage / transmission unit 105. The modified information stored in the information storage / transmitter 105 may be protected in the same manner as the information before modification through the same decoding process as described above.

Meanwhile, the user may arbitrarily store the modified information in a terminal other than the terminal 20 or the terminal 10 of the terminal 20 or the terminal 10, in particular in the case of FIG. 1A. In order to prevent this, the storage prevention unit 107 determines that the modification is completed when the user wants to store the modified information in a terminal other than the terminal 20 or the terminal 10 (s141). The information is directly transmitted to the encryption unit 106 to be encrypted and stored in the information storage / transmission unit 105 (S142). In the case of FIG. 1B, the terminal 10 storing electronic documented information (confidential) is provided integrally with the user terminal 20 so that the user is not connected with the information storage / transmitter 105. The same is true when trying to save to a storage disk.

The present invention can also be embodied as computer readable code on a computer readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system.

Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like, and also implemented in the form of carrier waves (for example, transmission over wired or wireless networks). It includes being. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

The present invention has been described above with reference to preferred embodiments thereof. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention.

Therefore, the disclosed embodiments should be considered in an illustrative rather than a restrictive sense. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the equivalent scope will be construed as being included in the present invention.

1A and 1B show one preferred configuration of the present invention.

2 is a view showing a preferred flow of the present invention.

Claims (15)

A user key issuing unit for generating and issuing a user key reflecting location information (viewing permission location information) that is allowed to view electronic documented (encrypted) information to a user; When the user requests to view the information by using an authentication element that authenticates that the user has a legitimate authority to the information, the user's location information (connection location) from the GPS (Global Positioning System) Location information receiving unit for directly receiving information); And A location-based information protection including a key storage unit for storing the issued user key and determining that the access location information is included in the read-allowed location information so that the read-out information can be provided to the user; system. The method of claim 1, wherein the user key issuing unit Generating a decryption key of the electronically documented (encrypted) information, and encrypting the generated decryption key using the authentication element and viewable position information to generate the user key. delete The method of claim 2, wherein the key storage unit And extracting the decryption key from the user key only when the access position information is included in the view allowable position information, so that the read request information can be decrypted. delete The method of claim 1, Location-based information protection, characterized in that if the user is provided after the information requested to read the user modifies the provided information, encrypting the modified information stored in the location-based information protection system system. The method of claim 6, If the user attempts to store the modified information, the storage protection unit prevents the storage attempt by immediately transmitting the modified information to the encryption unit, considering that there is no further modification to the modified information. Location-based information protection system comprising a. (a) generating and issuing a user key reflecting the location information (viewing location information) allowing the terminal to view the electronic documented (encrypted) information; (b) the user at the time of requesting the reading from a GPS (Global Positioning System) when the terminal requests to view the information by using an authentication element that authenticates that the user is a user having the right to the information. Directly receiving location information (connection location information) of the; And (c) the terminal storing the issued user key, and determining that the access location information is included in the reading allowed location information so that the requested information is provided to the user only. Location-based information protection. The method of claim 8, wherein step (a) (a1) generating a decryption key of the electronic documented (encrypted) information; And (a2) generating the user key by encrypting the generated decryption key using the authentication element and the view permission position information. delete The method of claim 9, wherein step (c) And extracting the decryption key from the user key only when the access position information is included in the read permission position information to enable decryption of the read-in request information. delete The method of claim 8, (d) if the user modifies the information after the requested information is provided to the user, encrypting the modified information and storing the modified information in a terminal where the electronic document (encrypted) information has been stored; Location-based information protection method. The method of claim 13, (e) If the user attempts to store the modified information, the user is considered to have no further modification to the modified information and immediately encrypts the modified information by the step (d) to And further comprising preventing the storage attempt. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 8 to 9, 11 and 13 to 14 on a computer.

Images