KR101028150B1 - File managing device of client apparatus, method thereof and recorded medium recorded with program thereof - Google Patents

Abstract

Disclosed are a file management apparatus, a method, and a recording medium having recorded thereon a program of a client terminal. The file management apparatus includes a work area setting unit configured to set an idle storage space designated by a storage device of a client terminal as a work area, which is a virtual storage space; A file manager to store a file received from a server in a work area; And when receiving a storage information request of the client terminal from an application layer or intercepting a storage information request transmitted from the application layer to a kernel layer, a shell to transmit storage information to the application layer. A shell control unit for controlling the hierarchy. According to an embodiment of the present invention, there is an advantage of providing high security in sharing between a server and a client terminal for data related to a task.

Server, client terminal, security, printing

Description

File management device of the client terminal, method and program recording medium recording the program {

The present invention relates to a file management apparatus, and more particularly, to a file management apparatus, a method and a recording medium on which a file management apparatus of a client terminal connected to a server is recorded.

In general, most documents related to work are produced by computer-based electronic documents. Such electronic documents are generally managed in a system in which a server and a plurality of client terminals are connected.

The electronic documents managed in such a system include many long-term research and development results, and many confidential documents that require security.

Electronic document security in the server is relatively easy, but there is a problem that it is relatively difficult to manage the electronic documents in a plurality of client terminals connected to the server.

Looking at the file management apparatus of the conventional client terminal, there is a problem that only supports documents written in the formal business format. The client terminal converts the confidential files downloaded from the server into various formats such as various word processors (for example, Hangul Hangul, Word) or office files (for example, Excel, PowerPoint), and formally and informally between the client terminals. Can send and receive However, there is a problem that the file management apparatus of the client terminal according to the related art does not limit the file deformation of various formats.

Referring to the file management apparatus of the conventional client terminal, only the authenticated client terminal can download a predetermined file from the server, but if the client user does not delete the file even after the official business hours are over, the file remains on the client terminal. After that, there is a problem that there is a possibility that the leak later leaks in security.

SUMMARY OF THE INVENTION An object of the present invention is to propose a file management apparatus, a method and a recording medium on which a program of a client terminal is provided, which provides a secure sharing between a server and a client terminal for data related to a task.

Another object of the present invention is to propose an apparatus, a method and a recording medium on which a file management apparatus of a client terminal capable of preventing unauthorized leakage of work-related data from a client terminal.

According to an aspect of the present invention, a device for managing a file of a client terminal connected to a server, the workspace setting unit for setting an idle storage space specified in the storage device of the client terminal as a virtual storage space; ; A file manager to store a file received from the server in the work area; And when receiving a storage information request of the client terminal from an application layer or intercepting a storage information request transmitted from the application layer to a kernel layer, the shell to transmit first storage information to the application layer. (shell) a shell control unit for controlling a layer, wherein the first storage device information further includes management area information including a combination of storage space information of the server and the work area information, and the storage device to a user of an application. And a shell control unit controlling the shell hierarchy such that only the management region information is output as the information.

The apparatus may further include a transmission unit configured to transmit and receive data to and from the server. When a storage command for the first file is input to the storage space of the server, the file manager transmits the first file to the storage space of the server. The transmission unit can be controlled to

In addition, a predetermined area of the storage unit provided in the client terminal is set as a backup area, the information of the first file, the date and time information of creating, modifying or changing the first file, the date and time information of transmitting the first file, The apparatus may further include a history unit configured to store at least one of information of the client terminal and user information of the client terminal in the backup area.

Here, at least one of the storage space and the work area of the server may be recognized as a folder or a virtual hard disk in the application layer.

In addition, when the connection between the server and the client terminal is released, the file manager may delete a file included in the work area.

In addition, when the connection between the server and the client terminal is released, the file management unit may initialize a clipboard.

In addition, when the storage location of the file is specified in any storage space other than the management area may further include a monitoring unit for permanently deleting the file.

According to another aspect of the present invention, a file management method of a client terminal connected to a server, the method comprising the steps of: (a) setting a designated idle storage space of the storage space of the client terminal as a virtual storage space; (b) outputting only management area information consisting of a combination of storage space information of the server and the work area information to a user of an application as storage information of the client terminal; And (c) when the connection with the server is released, deleting the file stored in the work area.

In addition, when the storage command of the storage space of the server is input to the first file included in the work area after the step (b) and before the step (c), the server receives the first file. The method may further include transmitting to a storage space of the.

Also, the step (d) may include the information on the first file, the date and time information on which the first file is generated, modified or changed, and the first file in a backup area set in a predetermined area of the storage space provided in the client terminal. The method may further include storing one or more of the transmitted date information, information of the client terminal, and user information of the client terminal.

In addition, one or more of the storage space information and the workspace information of the server may be output to a user of an application as a folder or a virtual hard disk.

The method may further include storing the file received from the server before the step (c) in the work area.

In addition, after the step (b) and before the step (c), if the storage location of the file is designated in any storage space other than the management area, the file may be permanently deleted.

According to another aspect of the present invention, a program of command commands that can be executed by a file management apparatus is implemented to perform a file management method of a client terminal connected to a server, and a program that can be read by the file management apparatus. A recording medium having recorded thereon, the method comprising: (a) setting an idle storage space having a specified size among storage spaces of the client terminal as a working area which is a virtual storage space; (b) outputting only management area information consisting of a combination of storage space information of the server and the work area information to a user of an application as storage information of the client terminal; And (d) when the connection with the server is released, a recording medium having a program recorded thereon for executing the step of deleting a file stored in the work area.

File management apparatus and method of the client terminal according to an embodiment of the present invention and a recording medium on which the program is recorded has an advantage of providing a high security in sharing between the server and the client terminal for the data related to the task.

File management apparatus, method and a recording medium recording the program of the client terminal according to an embodiment of the present invention can be secured by controlling the storage space and printer without being limited to the characteristics and types of applications installed in the client terminal There is an advantage.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all transformations, equivalents, and substitutes included in the spirit and scope of the present invention. In the following description of the present invention, if it is determined that the detailed description of the related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In order to facilitate a thorough understanding of the present invention, the same reference numerals are used for the same means regardless of the number of the drawings.

1 is a diagram illustrating a structure in which a server to which a file management apparatus according to an exemplary embodiment of the present invention is applied and a client terminal are connected through a network.

Referring to FIG. 1, a system to which a file management method according to an exemplary embodiment of the present invention may be applied may be a system in which a server 110 and a client terminal connected to the server are connected to a network 120.

Hereinafter, for convenience of explanation, the client terminal 101 will be referred to collectively.

In addition, the number of client terminals illustrated in FIG. 1 is merely an example, and the number is not limited to those skilled in the art.

Hereinafter, the file management apparatus according to an embodiment of the present invention may be a recording medium in which a program capable of performing the file management method according to the embodiment of the present invention is recorded, and also a client terminal in which the program is recorded. It also clarifies that the program may be recorded as part of the client terminal or as part of connected components.

Hereinafter, as illustrated in FIG. 1, the file management apparatus according to the embodiment of the present invention is referred to as a file management apparatus 100.

Hereinafter, if the client terminal is an electronic device that is wired and / or wirelessly connected to the server and can transmit and receive data with the server, the client terminal may be applicable regardless of other names and other functions.

Hereinafter, the configuration of the file management apparatus 101 and the server 110 according to the first embodiment of the present invention will be described with reference to FIGS. 2 and 3.

2 is a block diagram illustrating a configuration of the server 110 according to the first embodiment of the present invention.

Referring to FIG. 2, the server 110 according to the first embodiment of the present invention may include a transceiver 111, a storage 112, and an authenticator 113.

The transceiver 111 may transmit and receive data between the client terminals 101.

The storage unit 112 may store data.

The authenticator 113 may authenticate the client terminal 101 or the user of the client terminal 101 requesting to connect to the server 110. Here, it is apparent to those skilled in the art that the authentication method can be applied to a number of known techniques.

The storage space of the storage unit 112 may be classified and designated as a storage space accessible by the authority granted to the client terminal 101 or the user of the client terminal 101 requesting to connect to the server 110.

For example, suppose that Firm A has several services (for example, a service, b service, and c service). And suppose A is involved in a service but not b service. And, suppose that A request to connect to the server 110 using the client terminal 101. In this case, only information about a service folder in which file contents related to a service are stored in the storage space of the server 113 may be provided to the client terminal 101 used by A.

The information on the storage space of the server 110 is differentiated according to the authority granted to the user of the client terminal.

 Since it can be provided to the terminal 101 is a known technique, detailed description thereof will be omitted.

Hereinafter, a file management apparatus according to an exemplary embodiment of the present invention will be described with reference to FIG. 3.

3 is a block diagram illustrating a configuration of a file management apparatus 101 according to a first embodiment of the present invention, FIG. 4 is a view for explaining the structure of an operating system (OS), and FIG. 5 is an embodiment of the present invention. According to an example, work area information and server storage space information are queried.

Referring to FIG. 3, the file management apparatus 101 according to the first embodiment of the present invention includes a transceiver 301, a storage unit 302, a work area setting unit 303, a shell control unit 304, It may include one or more of the file manager 305, the monitoring unit 306 and the history unit (310).

The transceiver 301 may be an existing transceiver that transmits / receives data to / from another external device provided in a computer or the like, and may be separately provided as illustrated in FIG. 3 according to an embodiment.

The storage unit 302 may also be a permanent or temporary storage device such as an existing hard disk or ram disk which is provided in a computer or the like, and may be separately provided as illustrated in FIG. 2 according to an embodiment. have.

The work area setting unit 303 may set a portion of the idle storage space of the storage unit 302 as a work area which is a virtual storage space according to an embodiment of the present invention.

For example, the work area setting unit 303 may use a virtual hard disk as a storage space having a predetermined size of 10 gigabytes in an idle storage space among the hard disks that are the storage unit 302 of the client terminal 101. disk) as your workspace.

According to an embodiment of the present invention, the size of the work area set by the work area setting unit 303 may be set in various ways with reference to the total size of the storage space of the client terminal 101, the size of the idle storage space, or a designated value. Can be.

Here, the set work area may be recognized as a virtual folder or a virtual hard disk as a virtual storage space. This point will be described later in the shell control unit 304.

The shell control unit 304 will be described below with reference to FIG. 4.

The operating system of the client terminal includes a kernel layer 401 as a first layer, a shell layer 402 as a second layer, and an application layer 403 as a third layer. Can be classified as).

Here, since the classification of the operating system is a known technique, the present disclosure will be briefly described within the limits for describing the shell controller 304 according to the exemplary embodiment of the present invention.

The kernel layer 401 is a core part of the operating system and may include an interface between the hardware layers 401. The kernel layer 401 is responsible for the security of the hardware and the processor of the client terminal, and efficiently manages limited system resources to smoothly execute the application. In addition, the kernel layer 401 may be implemented with hardware abstractions to provide a consistent interface to various operating systems on hardware that may be implemented in various ways.

The shell layer 402 surrounds the kernel layer 401 and has an interface between the kernel layer 401 and the application layer 403, and from the application layer 403 to the kernel layer 402 in accordance with user input. It can also be used to pass commands to.

The application layer 403 may be an application installed in the client terminal 101.

In some cases, the operating system may include a kernel layer 401 and a shell layer 402. Microsoft's Windows, for example.

However, in the present specification, it is clarified that the conceptual description is divided into a kernel layer 401 that interfaces with hardware and a shell layer 402 that interprets and delivers commands from the application layer to the kernel layer 401.

In addition, many programs can be included in the operating system, such as Microsoft's Windows. In the following description, a program other than the kernel layer 401 and the shell layer 402 is described as being included in the application layer 403.

For example, a file explorer for searching and copying a file included in a storage device in Microsoft Windows, and a device manager program for viewing the information of the storage device may be an application. The shell layer 402 And the hardware of the client terminal 101 through the kernel layer 401.

Referring back to FIG. 3, the shell controller 304 according to an embodiment of the present invention receives a storage information request of the client terminal 101 from an application layer, or stores the request transmitted from the application layer to the kernel layer 401. When intercepting a device information request, the shell layer may be controlled to transmit storage information to the application layer.

In this case, the storage device information may include storage space information of the server 110 designated by the client terminal 101 in the server 110 and workspace information set by the workspace setting unit 203.

In addition, the shell controller 304 may control the shell layer 402 such that all or part of storage information is displayed to the user of the client terminal 101 in the application layer.

Here, since the cell controller 304 generally controls the shell layer 402 so that all of the storage information is displayed to the user of the client terminal 101, the following describes a case in which only some of the storage information is displayed. do.

<case # 1>

Hereinafter, assume that a hard disk of 100 gigabytes is provided as the storage unit 302 of the client terminal 101.

According to an embodiment of the present invention, the work area setting unit 303 may set 10 gigabytes of idle space of the hard disk as a work area that is a virtual storage space. For example, the work area setting unit 303 may set a work space having a set capacity of 10 gigabytes as a virtual hard disk having a driver name Z or a folder having a folder name as Z. Referring to FIG. 5, an example is shown in which the work area is set to a hard disk having a driver name of Z (see reference numeral 501 of FIG. 5).

In addition, when the example described in FIG. 2 is described consistently, when the user A is connected to the server 110 through the client terminal 101, the service folder information may be received as the storage space information of the server 110. (See 502 in FIG. 5).

According to an embodiment of the present invention, in addition to the hard disk information (for example, a hard disk having a driver name C) provided in the client terminal 101, the work area information (for example, the work area (Z :), 501) and The shell control unit 304 may control the shell layer 402 such that the storage information further including the service folder information 502 is transmitted to the application layer. In addition, the shell control unit 304 may control the shell layer 402 such that only the workspace information (for example, workspace Z: 501) and a service folder information 502 is output to the user. .

For example, assume that A runs a window explorer that is considered an application herein.

In this case, the window explorer, which is an application, requests storage information from the shell layer 303 or the kernel layer 401 according to an implementation method.

The shell controller 304 according to an embodiment of the present invention may receive a storage device information request from a window explorer as an application or intercept a storage policy information request to the kernel layer 401 from a window explorer as an application. Can be.

In addition to the C drive information that is the storage device information of the client terminal 101, the shell control unit 304 includes work area information (for example, work area Z: 501) and a service that is a storage space information of the server. The shell layer 402 can be controlled to send folder information 502 to an application, Windows Explorer.

Here, the shell controller 304 according to the embodiment of the present invention controls the shell layer 402 such that only workspace information (for example, Z hard disk) and a service folder information 502 are output to the user in the Windows Explorer. can do.

Referring to FIG. 5, A can query only the work area information (for example, work area (Z :), 501) and a service folder information 502 in the left window of the window explorer, and the corresponding position in the right window. You can search the data of.

Therefore, according to the embodiment of the present invention, A will not be able to move or copy data stored in the service folder 502 to another device besides the work area 501.

The file management apparatus of a client terminal according to the related art has a security problem because data contained in a storage space of a server may be copied to an external memory such as a USB memory, recorded on a CD, or leaked.

However, according to an embodiment of the present invention, since only the storage space information of the server for inquiring data and the workspace information that are managed separately are inquired in the application, the possibility of withholding the possibility of storing them in another location can be blocked. There is this.

<case # 2>

While the foregoing example is kept consistent, other embodiments are described.

Suppose A creates aaa.doc, the contract document for service A.

When the word program, which is an application, receives a storage command from the computer, the word program, which is an application, may request storage information from the shell layer 302 or the kernel layer 301 to guide the storage location.

The shell controller 304 according to an embodiment of the present invention may receive a storage information request from the application layer 403 or intercept a storage information request transmitted from the application layer 403 to the kernel layer 401. .

In addition to the hard disk information of the client terminal 101, the shell controller 304 may transmit the work area information (for example, the hard disk Z) and a service folder information among the storage spaces of the server to the application layer.

The shell controller 304 outputs only workspace information (for example, hard disk Z) and server a service folder information when outputting storage information to guide a storage location to a user. Shell layer 302 can be controlled.

FIG. 6 is a diagram illustrating an example in which only a service folder 602 of a work area (for example, work area (Z)) 601 and a storage space of a server is outputted from a storage location designation in a word that is an application.

Therefore, according to the embodiment of the present invention, Ab can specify the storage location of the generated aaa.doc document only in the Z drive 601 which is a work area or a service folder 602 of the server.

The case where A designates a storage location of aaa.doc as a folder which is a storage space of a server will be described later in the file manager 305.

Therefore, according to the embodiment of the present invention, since A can store aaa.doc only in a storage space of a workspace or a server that is managed separately, there is an advantage that the possibility of storing in another storage medium can be blocked.

Referring back to FIG. 3, when the file manager 305 receives a predetermined file from the storage space of the server 110 in the client terminal 101, the file manager 305 may store the file only in the work area. At this time, it will be apparent to those skilled in the art that the file management unit 305 can output to the user a UI (User Interface) for inquiring in which folder of any folder existing in the work area.

For example, in the environment illustrated in FIG. 5, the user Ab may copy the bbb.doc file from a service folder 502, which is a storage space of the server, and store the bbb.doc file in the workspace (Z :) 501. In this case, the file management unit 305 controls the transceiver unit 301 to receive the bbb.doc file from the storage unit 112 of the server, and the received bbb.doc file to the work area (Z :) 501. Can be stored.

On the contrary, if the user A creates in the work area (Z :) 501 or edits a previously received file in the work area (Z :) 501 and copies it to a service folder. The file manager 305 may control the transceiver 301 to transmit the file to the storage 112 of the server.

For example, in the environment illustrated in FIG. 6, when the user group stores the generated bbb.doc file in the a service folder 602, the file manager 305 controls the transceiver 301 to control the bbb.doc file. The file may be transmitted to the storage 112 of the server. The storage 112 of the server may store the received bbb.doc file in a service folder.

At this time, according to the environment to which the embodiment of the present invention is applied, the file management unit 305 first stores bbb.doc in the work area (Z :) 601 and fails to transmit the data to the storage unit 112 of the server. If so, you can resend the saved bbb.doc file again. In this case, when the transfer is completed, the bbb.doc file stored in the work area (Z :) 601 may be deleted.

In addition, when the connection between the server 110 and the client terminal 101 is released, the file manager 305 may permanently delete data stored in the work area (Z :) 601.

Of course, before the file management unit 305 permanently deletes the data stored in the work area (Z :) 601 according to an embodiment of the present invention, a message for inducing the client terminal user A to store in the service folder 602. It is apparent to those skilled in the art that the output can be output.

In addition, according to the environment to which the embodiment of the present invention is applied, the file management unit 305 monitors whether the file size, name, etc. of the file stored in the work area is changed, and if there is a changed file, the client terminal user Gap a service folder ( It is apparent to those skilled in the art that the transceiver 301 may be controlled to output a message for inducing storage at 602 or to automatically transmit the message without outputting the message.

In addition, when the file management unit 305 controls the transceiver unit 301 to transmit the changed file to the server 110 in accordance with an embodiment of the present invention, the file management unit 305 includes at least one of the change date information and the user information of the client terminal. It is obvious to those skilled in the art in the light of the technical idea of the present invention.

The monitoring unit 306 monitors whether the file generated, modified or changed in the client terminal 101 is stored outside the workspace (Z :) 601 and the storage space (for example, a service folder) of the server, If a file is stored outside the workspace (Z :) 601 and a storage space (eg, a service folder) of the server, the file may be permanently deleted.

For example, the shell controller 304 according to an embodiment of the present invention may control the shell layer 402 such that all of the storage information is displayed to the user of the client terminal 101. In this case, unlike illustrated in FIG. 6, a hard disk C drive or other USB memory may be displayed in the storage location information of the application and may be designated as the storage location according to a user input. In this case, according to an embodiment of the present invention, the monitoring unit 306 may permanently delete files stored outside the work area (Z :) 601 and the storage space (for example, a service folder) of the server.

For example, the shell control unit 304 outputs only a service folder 602 of the workspace (for example, workspace (Z :), 601) and the storage space of the server to be specified in the storage location designation in the word that is the application. Controlling the shell hierarchy has been described above. However, due to a malicious attempt by the user of the client terminal 101, the storage location of the file may be specified in addition to the storage area of the work area and the server. In this case, according to an embodiment of the present invention, the monitoring unit 306 may permanently delete the file when the file is stored outside the workspace and the storage space of the server.

The history unit 310 may set a predetermined storage space of the storage unit provided in the client terminal 101 as a backup area. The history unit 310 transmits the file information transmitted from the client terminal 101 to the storage space of the server 110 (for example, a service folder), date and time information of creating, modifying, and changing the file, and the file. One or more of one date information, information of the client terminal 101, and user information of the client terminal 101 may be stored.

Here, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that the predetermined storage space set as the backup may be part of a storage unit provided in the client terminal 101 or a part of an external storage device connected to the client terminal 101. Do.

Here, the backup area set by the history unit 310 is set not to be displayed to the user of the client terminal 101.

Here, the backup area set by the history unit 310 may be maintained even if the connection between the client terminal 101 and the server 110 is released.

In this case, the information stored in the backup area set by the history unit 310 may be variously designated as the information of the last three days or the last 100 information about the information.

Therefore, according to the exemplary embodiment of the present invention, there is an advantage in that it is easy to prove whether an arbitrary file is transmitted from the client terminal 101 to the server 110.

So far, the components of the server and the file management apparatus and the functions of each component have been described with reference to FIGS. 2 to 6.

Each component described above is activated when a connection is made between the client terminal 101 and the server 100, and may be deactivated when the connection between the client terminal 101 and the server 100 is released. It is obvious to those skilled in the art in view of the spirit.

However, it is intended to clarify that the division of the above-described components is only divided by the main function of each component. That is, two or more components may be combined into one component, or one component may be provided divided into two or more for each function. In addition, each of the above-described components may additionally perform some or all of the functions of other components in addition to the main functions of their own, and some of the main functions of each of the components are performed by other components. Of course, it may be carried out exclusively. Therefore, the presence or absence of each component described through this specification should be interpreted functionally.

Therefore, in the following description of the file management method according to the first embodiment of the present invention with reference to FIG. 7, the server 110 as a functional subject, regardless of the configuration of the server 110 and the file management apparatus 100, And the file management apparatus 100 will be described as the main subject.

7 is a flowchart illustrating a method of managing a file by the file management apparatus 100 according to the first embodiment of the present invention. More specifically, it is a flowchart illustrating a process of opening a predetermined file in the storage space of the server 110 in the file management apparatus 100.

Hereinafter, in order to clarify the gist of the file management method according to the first embodiment of the present invention, descriptions duplicated with the parts described with reference to FIGS. 2 to 6 will be omitted.

Referring to FIG. 7, in operation S702, the file management apparatus 100 may request a connection to the server 110. In this case, the connection request may include information of the client terminal 101 or user information of the client terminal 101.

Subsequently, in step S704, the server 110 may perform authentication by using the information of the client terminal or the user information of the client terminal 101 included in the connection request, and to the authenticated client terminal or client terminal user in step S706. The authentication approval signal may be transmitted.

Subsequently, in step S708, the file management apparatus 101 sets a storage space corresponding to a specified size among the storage devices of the client terminal as the work area, and sets the set work area information (for example, 501 of FIG. 5) to the client terminal (see FIG. 5). 101) to the user.

Subsequently, in step S710, the file management apparatus 100 may request storage space information of the server, and receive storage space information designated for each user authority of the client terminal 101 in step S712 (for example, in FIG. 5). 502).

In operation S714, the workspace information and the storage space information of the server may be output to the client terminal user. For example, as illustrated in FIG. 5, the work area information and the storage space information of the server may be output to the client terminal user from the file explorer, as described above with reference to FIG. 5.

Subsequently, in step S716, the file management apparatus 100 may request a predetermined file in a storage space of the server according to a user input, and in step S718, receive the predetermined file from the server 110, and in step S720. The received file may be stored in the work area of the file management apparatus 100.

Here, steps S716 to S720 may be performed by a user of the client terminal 101 copying a file from the storage inquiry program.

For example, steps S716 to S720 may be performed by a user of the client terminal 101 copying a file between folders in the file explorer. In more detail, the file manager 305 controls the transceiver 301 to receive a predetermined file from the server 110 and to store the received file in the work area. Described in

Subsequently, after the client terminal user browses a predetermined file in step S720, the client terminal may request to release the connection between the file management apparatus 100 and the server 101 (eg, logout request). A disconnection grant signal may be received from 110.

According to the prior art, there is a problem that data relating to a task remains in the client terminal 101 at this point. In addition, there is a problem that there is a possibility that the remaining data is leaked to other outside.

According to the exemplary embodiment of the present invention, the file manager 305 may permanently delete the data stored in the work area in step S726.

In operation S726, the file management apparatus 100 may release the setting of the work area, initialize the clipboard, and copy the contents of data related to the task.

So far, the file management method according to the first embodiment of the present invention has been described with reference to FIG. 7. However, the flowchart illustrated in FIG. 7 is only an example illustrated for the purpose of understanding the invention, and the order of each step may be variously changed, and one step may be subdivided into a plurality of steps, or vice versa. It will be apparent to one skilled in the art that two steps may be performed in one step.

For example, in operation S706, the authentication approval signal may include storage information for each user right. In operation S708, the file management apparatus 100 may output storage space information of the server together with work area information.

For example, steps S710 to S712 may be performed before step S708, and the file management apparatus 100 may output storage space information and work area information of the server as in step S708 in step S708.

For example, the step of permanently deleting the file stored in the work area by the file management apparatus in step S726 may be performed in parallel with the step of releasing the setting of the work area in step S726.

8 is a flowchart illustrating a method of managing a file by the file management apparatus 100 according to the first embodiment of the present invention. More specifically, it is a flowchart illustrating a process of editing and storing a predetermined file in a storage space of the server 110 in the file management apparatus 100.

Hereinafter, referring to FIG. 8, it is assumed that step S720 described above with reference to FIG. 7 is performed.

For example, it is assumed that the user of the client terminal 101 copies a predetermined file of the service folder 502 to the work area (Z :) 501 in the environment illustrated in FIG. 5.

In operation S802, the file management apparatus 100 may edit a file according to a user's input. Although step S802 of FIG. 8 is illustrated as editing a file, a case of generating a new file may also be applicable.

Subsequently, when the file management apparatus 100 receives a storage input from the user of the client terminal 101 in step S804, whether to store the file management apparatus 100 in the work area 601 or the a service folder 602 as illustrated in FIG. 6. UI (User Interface) to select can be output.

When the storage input is received in the service folder 602, the file management apparatus 100 may transmit the corresponding file to the server 110 in step S806.

Here, before or after the file management apparatus 100 transmits the file to the server 110, the file information in the backup area, the date and time of creating, modifying and changing the file, the information of the client terminal 101, and the like. One or more of user information of the client terminal 101 may be stored.

Here, the backup area set by the file management apparatus 100 is set not to be displayed to the user of the client terminal 101, and may be maintained even if the connection between the client terminal 101 and the server 110 is released. Explained.

When the storage input is received in the work area folder 601, the file management apparatus 100 may store the corresponding file in the work area in step S808.

If the storage location of the file is specified other than the work area 601 and a service folder (ie, storage space of the server), the file management apparatus 100 may permanently delete the file. 3, 306).

Subsequently, when the file management apparatus 100 receives a disconnect request (for example, a logout input) from the client terminal user in step S810, it is inquired whether to store the file stored in the work area in the a service folder 602. You can print a message that says

Subsequently, in step S812, when the file management apparatus 100 receives a storage command from a service folder 602, the file management apparatus 100 may transmit the corresponding file to the server 110.

In this case, before or after the file management apparatus 100 transmits the file to the server 110, the file information in the backup area, the date and time of creating, modifying and changing the file, the information of the client terminal 101, and the like. As described above in step S806, one or more pieces of user information of the client terminal 101 may be stored.

Here, the file management apparatus 100 monitors whether the size, name, etc. of the file stored in the work area is changed, and if there is no change, the step S810 or less may be omitted. Self-explanatory

In addition, when step S810 illustrated in FIG. 8 is omitted, and the file management apparatus 100 has a changed file as a result of the monitoring, the changed file may be automatically transmitted to the server 110 in view of the technical spirit of the present invention. Self-explanatory

In addition, it is apparent to those skilled in the art in view of the technical spirit of the present invention that the changed file may be transmitted by including one or more of the change date information and the user information of the client terminal.

Since steps S814 to S820 overlap with the above-described portions of steps S722 to S728 of FIG. 7, a detailed description thereof will be omitted.

So far, the file management method according to the first embodiment of the present invention has been described with reference to FIGS. 7 and 8.

Hereinafter, a file management method according to a second embodiment of the present invention will be described with reference to FIG. 9.

9 and 10 are block diagrams illustrating the configuration of the server 110 and the file management apparatus 100 according to the second embodiment of the present invention, Figures 11 and 12 according to a second embodiment of the present invention. It is a figure for demonstrating the function of the shell control part 304. FIG.

In the following description of FIGS. 9 and 10, descriptions overlapping with the components described with reference to FIGS. 2 to 5 will be omitted, and descriptions will be given based on the newly added or changed components according to the second embodiment of the present invention. .

First, a server 110 according to a second embodiment of the present invention will be described with reference to FIG. 9.

Referring to FIG. 9, the server 110 according to the second embodiment of the present invention may include one or more of a transceiver 111, a storage 112, an authenticator 113, and a converter 114. .

Since the basic functions of the transceiver 111, the storage 112, and the authentication unit 113 will be described with reference to FIG. 2, duplicate description thereof will be omitted herein.

Hereinafter, the authentication unit 113 and the conversion unit 114 will be described.

According to the second embodiment of the present invention, the file pipe apparatus 100 generates a target image by converting a printer target file into an image (the virtual printer generating unit 307 and the print control unit of the file management apparatus 100). It will be described later in step 308) to the server 110.

According to the second embodiment of the present invention, the authentication unit 113, when the transmission and reception unit 111 receives the printer target image from the file management apparatus 100, the client terminal user information whether or not the client terminal user has the right to print Can be authenticated.

For example, the file management apparatus 100 may extract the information of the client terminal user in the process of connecting to the server 110, and may authenticate the print authority using the extracted user information.

For example, the authentication unit 113 may extract the information of the source file included in the target image and perform authentication on the print using the printer permission information specified in the folder where the source file is located in the storage space of the server. .

When the authentication unit 113 authenticates, the conversion unit 114 may generate an authentication image including additional information specified in the target image received from the file management apparatus 100.

Here, the additional information is information designated to the server 110, the watermark for encryption, administrator information specified for each storage space of the server 110, print request date and time information, authentication date and time information and client terminal information and user information of the client terminal It may include one or more of.

The conversion unit 114 may add additional information to the target image in a bar code format, and generate an authentication image by adding it in various other well-known ways.

Hereinafter, the configuration of the file management apparatus 100 according to the second embodiment of the present invention will be described with reference to FIG. 10.

Referring to FIG. 10, the file management apparatus 101 according to the second embodiment of the present invention may include a transceiver 301, a storage 302, a work area setting unit 303, and a shell control unit 304. It may include one or more of the file management unit 305, the monitoring unit 306, the job printer generation unit 307, the print control unit 308 and the history unit 310.

For the basic functions of the transmission / reception unit 301, the storage unit 302, the work area setting unit 303, the shell control unit 304, the file management unit 305, and the history unit 310, see FIG. 3. Since the description will be omitted, redundant description will be omitted here.

Hereinafter, the monitoring unit 306, the job printer generating unit 307, and the print control unit 308 will be described, and the additional functions of the shell control unit 304 and the history unit 310 will be described.

The job printer generation unit 307 generates a job printer driver which is a virtual printer driver connected to the client terminal 101. More specifically, the job printer driver may be generated to recognize the job printer as a virtual printer in the shell layer 402 and the application layer 403.

The shell controller 304 receives the printer information request of the client terminal from the application layer, or intercepts the printer information request transmitted from the application layer 403 to the kernel layer 402. The shell layer 402 may be controlled to transmit further printer information to the application layer 403. In addition, the shell controller 304 may control the shell layer 402 such that only job printer information is output from the application layer 403 to the client terminal user or printer information further including the job printer is output.

11 illustrates a plurality of printer information connected to the client terminal 101. 12 illustrates an example in which only job printer information generated by the job printer generator 307 is output to a user in an application layer.

It will be described below in more detail.

For example, when a word program included in an application layer receives a print command for a predetermined file from a user, the application layer requests printer information from the kernel layer 401 or the shell layer 402. In this case, the shell controller 304 may receive the printer information request or intercept the printer information request transmitted from the application layer 402 to the kernel layer 401. The shell controller 304 controls the shell layer 402 such that printer information including the job printer driver generated by the job printer generator 307 is transmitted from the shell layer 402 to the application layer 403. Can be. Therefore, according to the second embodiment of the present invention, only the work printer information is displayed in the printer information output window of the word that is the application as illustrated in FIG.

According to the related art, as illustrated in FIG. 11, since a user of a client terminal can output a document related to a task using any printer among a plurality of printers, a security vulnerability exists.

However, according to the second embodiment of the present invention, as illustrated in FIG. 12, since a user can output only using a job printer that is managed separately for printing, security of data related to work can be enhanced. There is an advantage.

When the print control unit 308 receives a print command from the user of the client terminal 101, the print control unit 308 may generate a target image by converting the print target file into an image.

Here, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that the print control unit 308 may further include information of a print target file in the process of generating the target image.

Here, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that the print control unit 308 may generate the target image by converting the print target file into a designated image format.

Here, in the process of specifying the file name of the target image by the print control unit 308, it is apparent to those skilled in the art in view of the technical spirit of the present invention that the target image file name can be designated to include the character string of the specified format.

In this case, the information of the target file may be information of the original file when edited, and may include one or more of edit date / time information, print command input date / time information, and user information of the client terminal.

In addition, the print controller 308 may output the authentication image received from the server 110 using a designated printer among printers (hereinafter, referred to as "real printers") substantially connected to the client terminal 101.

The monitoring unit 306 according to the second exemplary embodiment of the present invention monitors a file in which a print command is issued to a real printer connected to the client terminal 101, and deletes a print target file when the print target file is not an authentication image, You can cancel the print order.

For example, when the shell control unit 304 controls the shell layer 402 to output the actual printer information to the user of the client terminal 101 in addition to the job printer, the user of the client terminal 101 uses the real printer to print a command. can do. In this case, the monitoring unit 306 may determine whether the print target file to which the print command is issued to the actual printer is an authentication image, and delete the print target file or cancel the print command if the print target file is not an authentication image.

For example, although the shell control unit 304 controls the shell layer 402 so that the shell control unit 304 outputs only the job printer to the client terminal 101 user in the application layer 403, the client terminal 101 ) A print command for an arbitrary file may be input to an actual printer by a malicious attempt of a user. In this case, the monitoring unit 306 may determine whether the file issued with the print command to the real printer is an authentication image, and if the file is not an authentication image, delete the file or cancel the print command.

Here, the monitoring unit 306 determines whether the file to be printed is an authentication image, the image format of the file to be printed, the barcode included in the file to be printed, the presence or absence of a specified format included in the file name of the file to be printed, and the like. It can be judged by using.

The history unit 310 according to the second exemplary embodiment of the present invention includes target image information transmitted from the client terminal 101 to the server 110 in the backup area, date and time information for generating the target image, and temporary information for transmitting the target image. , At least one of information of the client terminal 101 and user information of the client terminal 101 may be stored.

Here, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that the predetermined storage space set as the backup may be part of a storage unit provided in the client terminal 101 or a part of an external storage device connected to the client terminal 101. Do.

Here, the backup area set by the history unit 310 may be set not to be displayed to the user of the client terminal 101.

Here, the backup area set by the history unit 310 may be maintained even if the connection between the client terminal 101 and the server 110 is released.

In this case, the information stored in the backup area set by the history unit 310 may be variously designated as the information of the last three days or the last 100 information about the information.

Therefore, according to the embodiment of the present invention, there is an advantage in that it is easy to prove whether the target image is transmitted from the client terminal 101 to the server 110.

Each component described above is activated when a connection is made between the client terminal 101 and the server 100, and may be deactivated when the connection between the client terminal 101 and the server 100 is released. It is obvious to those skilled in the art in view of the spirit.

So far, the server 110 and the file management apparatus 100 according to the second embodiment of the present invention have been described with reference to FIGS. 9 to 12. The server 110 and the file management apparatus 100 according to the second embodiment of the present invention may be configured in various ways as described above. It will be apparent to those skilled in the art that one component may be implemented by a plurality of components and vice versa. In addition, the configuration of each component is to be understood as a functional unit, and components that perform the same similar function without regard to the name of each component should be understood to be similar components.

Therefore, in the following description of the file management method according to the second embodiment of the present invention, it is described that the server and the file management apparatus are the main functions.

Hereinafter, a description overlapping with the above-described parts with reference to FIGS. 9 through 12 may obscure the gist of the file management method according to the second embodiment of the present invention with reference to FIG. 13.

13 is a flowchart illustrating a file management method according to a second embodiment of the present invention.

In operation S1302 of FIG. 13, the user downloads a predetermined file from a storage space (for example, a service folder) of the server and performs the operation S720 of FIG. 7 viewed by the user, or edits or generates the predetermined file. Assuming that step S802 of is performed.

However, the foregoing premise is only a premise for understanding the present invention, and the steps illustrated in FIG. 13 may be performed at any step of outputting a predetermined file according to an embodiment of the present invention. It is apparent to those skilled in the art in view of the technical spirit of the invention.

Referring to FIG. 13, in operation S1302, the file management apparatus 100 may generate a job printer driver that is a virtual printer driver and output only job printer information including the job printer driver in the application layer to the user.

Subsequently, when the file management apparatus 100 receives a print command in step S1304, the print target file may be converted into a target image.

Here, it has been described above that the file management apparatus 100 may include one or more of original file information, editing date and time information, print command input date and time information, and user information of the client terminal in the process of generating the target image.

Here, the file management apparatus 100 may generate a target image by adding a format designated to a file name or converting the file to a designated image format in the process of generating the target image.

Subsequently, the file management apparatus 100 may transmit the target image to the server 110 in step S1306, and receive the authentication image generated by the server 110 in step S1310.

Here, in step S1306, the target image information, the date and time of generating the target image, and the date and time information of transmitting the target image to the backup area before or after the file management apparatus 100 transmits the target image to the server 110. As described above, one or more of the information of the client terminal 101 and the user information of the client terminal 101 may be stored.

In operation S1312, the file management apparatus 100 may output the authentication image using a designated printer among printers connected to the file management apparatus 100.

In step S1312, when the file management apparatus 100 receives the authentication image, in order to designate a printer to output the authentication image, the list of printers substantially connected to the client terminal 101 is output to the client terminal 101 user. It will be apparent to those skilled in the art in view of the technical spirit of the present invention. In this case, since the conventional client terminal 101 is the same as the technology for outputting a list of connected printers, detailed description thereof will be omitted.

In addition, the file management apparatus 100 determines whether the file in which the print command is issued to the real printer in step S1312 is an authentication image, and if the file is not an authentication image, delete the file or cancel the print command. Can be described above.

Up to now, the file management method according to the second embodiment of the present invention has been described with reference to FIG. 13.

So far, the file management apparatus and the file management method according to the first embodiment of the present invention have been described with reference to FIGS. 2 to 8, and the file management apparatus according to the second embodiment of the present invention with reference to FIGS. 9 to 13. And file management methods were described.

In order to facilitate understanding and explanation of the present invention, the first and second embodiments of the present invention have been separately described. However, it will be apparent to those skilled in the art in view of the technical spirit of the present invention that it may be performed in parallel with the first and second embodiments of the present invention.

File management method method according to an embodiment of the present invention is implemented in the form of program instructions that can be executed by various computer means may be recorded on a computer readable medium. Computer-readable media may include, alone or in combination with the program instructions, data files, data structures, and the like.

The program instructions recorded on the computer readable medium may be those specially designed and constructed for the present invention, or may be known and available to those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Hardware devices specially configured to store and execute program instructions such as magneto-optical media and ROM, RAM, flash memory and the like. In addition, the above-described medium may be a transmission medium such as an optical or metal wire, a waveguide, or the like including a carrier wave for transmitting a signal specifying a program command, a data structure, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and changes can be made.

1 is a diagram illustrating a structure in which a server to which a file management apparatus according to an embodiment of the present invention is applied and a client terminal are connected through a network.

2 is a block diagram illustrating a configuration of a server 110 according to the first embodiment of the present invention.

3 is a block diagram illustrating a configuration of a file management apparatus 101 according to a first embodiment of the present invention.

4 is a view for explaining the structure of an operating system (OS).

5 is a diagram illustrating an example of how work area information and storage space information of a server are inquired according to an embodiment of the present invention.

FIG. 6 is a diagram illustrating an example in which only a service folder of a workspace and a storage space of a server is output in designating a storage location of a word that is an application;

7 is a flowchart illustrating a method of managing a file by the file management apparatus 100 according to the first embodiment of the present invention.

8 is a flowchart illustrating a method of managing a file by the file management apparatus 100 according to the first embodiment of the present invention.

9 and 10 are block diagrams illustrating the configuration of the server 110 and the file management apparatus 100 according to the second embodiment of the present invention.

11 and 12 are views for explaining the function of the shell control unit 304 according to the second embodiment of the present invention.

13 is a flowchart illustrating a file management method according to a second embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

110: server 111: transceiver

112: storage unit 113: authentication unit

114: converter

100: file management device 101: client terminal

301: transceiver unit 302: storage unit

303: work area setting unit 304: shell control unit

305: File management unit 306: Job printer generation unit

306: print control unit

Claims (14)

In the device for file management of the client terminal connected to the server, A work area setting unit configured to set an idle storage space designated by a storage device of the client terminal as a work area which is a virtual storage space; A file manager to store a file received from the server in the work area; And When receiving a storage information request of the client terminal from an application layer or intercepting a storage information request transmitted from the application layer to a kernel layer, the shell may transmit first storage information to the application layer. shell) includes a shell control that controls the hierarchy, The first storage device information further includes management area information including at least one of storage space information of the server and the work area information. And the shell controller controls the shell hierarchy such that only the management region information is output as storage information to a user of an application. The method of claim 1, Further comprising a transmission unit for transmitting and receiving data with the server, When a storage command for the first file is input to the storage space of the server, the file management unit controls the transmission unit to transmit the first file to the storage space of the server. The method of claim 2, The predetermined area of the storage unit provided in the client terminal is set as a backup area, and the information of the first file, the date and time information of creating, modifying or changing the first file, the date and time of transmitting the first file, and the client terminal. And a history unit for storing at least one of information of a user and user information of a client terminal in the backup area. The method according to claim 1 or 3, And at least one of a storage space of the server and the work area is recognized as a folder or a virtual hard disk in the application layer. The method according to claim 1 or 3, And when the connection between the server and the client terminal is released, the file management unit deletes a file included in the work area. The method according to claim 1 or 3, And the file management unit initializes a clipboard when the connection between the server and the client terminal is released. The method according to claim 1 or 3, And a monitoring unit for permanently deleting the file if the storage location of the file is specified in any storage space other than the management area. In the file management method by the file management device for performing file management of the client terminal connected to the server, (a) setting a designated idle storage space among the storage spaces of the client terminal as a work area which is a virtual storage space; (b) When a storage information request of the client terminal is received from an application layer or a storage information request transmitted from the application layer to a kernel layer is intercepted, the control is performed through a shell layer. Outputting only management area information including at least one of storage space information of the server and the work area information to the user of the application as storage information of the client terminal; And  (c) deleting the file stored in the work area when the connection with the server is released. The method of claim 8, After step (b) but before step (c) (d) if the storage command of the storage space of the server is received with respect to the first file included in the workspace, transmitting the first file to the storage space of the server. File management method. 10. The method of claim 9, Step (d) Information of the first file, date and time information of creating, modifying or changing the first file, date and time information of transmitting the first file, and a client terminal in a backup area set in a predetermined area of the storage space provided in the client terminal. And at least one of information and user information of the client terminal. The method of claim 8 or 10, At least one of the storage space information and the workspace information of the server is output to a user of an application as a folder or a virtual hard disk. The method of claim 8 or 10, Before step (c) And storing the file received from the server in the work area. The method of claim 8 or 10, After step (b) but before step (c) If the storage location of the file is specified in any storage space other than the management area, the file management method comprising permanently deleting the file. In the recording medium recording a program that can be read by the file management apparatus is implemented to perform a file management method of the client terminal connected to the server, (a) setting a designated idle storage space among the storage spaces of the client terminal as a work area which is a virtual storage space; (b) When the storage information request of the client terminal is received from the application layer or the storage information request transmitted from the application layer to the kernel layer is intercepted, the control is performed through the shell layer. Outputting only management area information including at least one of storage space information of the server and the work area information to the user of the application as storage information of the client terminal; And  (c) a recording medium having a program for executing a step of deleting a file stored in the work area when the connection with the server is released.

Images