KR101345999B1 - Method and system for security management of smart-phone based on dual security - Google Patents

Abstract

The present invention relates to a smartphone security management method and a smartphone security management system based on dual security, and more particularly, when a smartphone user wants to enter a specific area such as a security area, In addition to allowing certain functions of the smartphone to be remotely controlled so that a plurality of security modules of the security program can monitor each other, abnormal behavior such as stopping or deleting the security program by the user during execution of the security program. The present invention relates to a dual security-based smart phone security management technology to detect and control this stably.

Description

Method and system for security management based on dual security {Method and system for security management of smart-phone based on dual security}

The present invention relates to a smartphone security management method and a smartphone security management system based on dual security, and more particularly, when a smartphone user wants to enter a specific area such as a security area, In addition to allowing certain functions of the smartphone to be remotely controlled so that a plurality of security modules of the security program can monitor each other, abnormal behavior such as stopping or deleting the security program by the user during execution of the security program. The present invention relates to a dual security-based smart phone security management technology to detect and control this stably.

Conventionally, when a smartphone user wants to enter a specific area requiring security, such as an enterprise or a public institution, a sticker or even an entrance is attached to the smartphone to restrict camera functions, storage to a memory card, and data communication. There was an inconvenience to leave the smartphone to.

In addition, the security technology in a specific region of the conventional smartphone, when a sticker is attached to a camera or a memory card in order to control the use of the smartphone, the user may sneak off the sticker so that the sticker is not displayed, thereby preventing user's arbitrary use. There were also disadvantages that were difficult to control.

Accordingly, the other security measures are proposed by using the security program installed on the smartphone. However, even when the security program is installed and executed, when the security program is executed based on the user's location, there is a big error in location recognition and it is difficult to control and manage the user when the user stops the execution or deletes and restarts the security program. There was this.

Accordingly, in the technical field, in the function control method for the smartphone using the security program, not only the function that threatens security in a specific region of the smartphone, but also for abnormal behavior such as the deletion of the security program by the user Manageable technology development is urgently needed.

[Related Technical Literature]

1. Security authentication method of smartphone (Patent application 10-2011-0073814)

2. System and method for providing enhanced security model (Patent application 10-2005-7011829)

An object of the present invention is to allow the smart phone user to enter the security area, so that the security program is executed at the entrance so that the specific functions of the smart phone can be remotely controlled, the execution of the security program by the user during the security program execution or It provides a dual security-based smart phone security management method and smart phone security management system for stably detecting and controlling abnormal behavior such as deletion attempts.

Smartphone security management method based on dual security according to the present invention for achieving this problem, as a dual security-based security management method for the smart phone 10, the control unit 14 stores the dual security program (17) Storing in the first step; The controller 14 implements the dual security module 16 having the first security module 16a and the second security module 16b on the system memory 15 by performing an initial operation according to the execution of the dual security program. Second step; When the control unit 14 receives a driving signal from the input sensor unit 12 by tagging by the input sensor unit 12 with respect to the access tag 21 provided in the access device 20 in the security area, A third step of executing a security program; A fourth step in which the first security module 16a and the second security module 16b monitor each other's operation disturbance state; A fifth step in which the first security module 16a and the second security module 16b detect the operation disturbance state with respect to each other to generate and transmit operation disturbance information to the control server 50 through the communication network 40; ; The control server 50 is a sixth step of remotely performing the position detection and use control of the smart phone 10 in the security area (A) via the communication network 40;

In the dual security-based smart phone security management method according to the present invention, between the third step and the fourth step, the dual security module 16 requests the control unit 14 to transmit the user information stored in the storage unit 17 A step of doing; Step B of controlling, by the control unit 14, the wireless transceiver 13 to transmit user information to the control server 50; The control server 50 performs a check check process for the user information and the pre-stored access information, and setting the function control of the smart phone 10 according to the user level on the access information; have.

In addition, the dual security-based smart phone security management method according to the present invention, the wireless communication unit 13 when the control unit 14 is the secondary tagging by the input sensor unit 12 for the access tag 21. A seventh step of controlling and transmitting the user's access to the security area A to the control server 50 to update the accessor information; And an eighth step of stopping execution of the dual security module 16 implemented on the system memory 15 when the control unit 14 receives the stop signal from the input sensor unit 12. have.

Smartphone security management system based on dual security according to the present invention for achieving this problem, the dual security program is stored on the storage unit 17, and is implemented by the control unit 14 on the system memory 15 An input sensor unit 12 for the dual security module 16 including the first security module 16a and the second security module 16b, and the access tag 21 provided in the access device 20 in the security area. Computer-readable recording of a security management program for the smart phone 10 including a control unit 14 for executing a double security program when tagging is performed to receive a driving signal from the input sensor unit 12. media; In response to the monitoring of the disturbance state of the operation by the user of the first security module 16a or the second security module 16b, the first security module 16a and the second security module 16b operate from the monitored module. It is configured to include; control server 50 for receiving the disturbing information to detect the location and use of the smart phone 10 in the security area (A).

In the dual security-based smart phone security management system according to the present invention, the control unit 14 receives the user information transmission request stored in the storage unit 17 from the dual security module 16 to the user server to the control server 50 The wireless transmission / reception unit 13 is controlled to perform transmission, and when the second tagging is performed by the input sensor unit 12 with respect to the access tag 21, the wireless transmission / reception unit 13 is controlled to allow the user to secure the security area ( A) to enter and exit the outgoing information to the control server 50 to update the accessor information, and upon receiving the stop signal from the input sensor unit 12 stops the execution of the double security program.

On the other hand, in the present invention, the operation disturbance state for the security module (16a, 16b) is set to an abnormal behavior of the user's execution and deletion attempts to any one of the first security module (16a) and the second security module (16b). Can be. In addition, in the present invention, the control server 50 performs a check check process between the user information and the accessor information corresponding to the pre-stored user, the call function, camera function, Wi-Fi of the smartphone 10 according to the user level on the accessor information It may be configured to set a function control for one or more of a function, a data communication function.

According to the dual security-based smart phone security management technology of the present invention, so that the function of the smart phone can be remotely controlled and managed in the security area, and if the user stops running or restarts after deleting the security program by detecting it By allowing abnormal users to be controlled, companies or public institutions can operate a security system for smartphones efficiently.

1 is a view showing a first embodiment of the overall configuration in which the dual security-based smart phone security management method according to the present invention is executed.
2 is a view showing a second embodiment of the overall configuration in which the dual security-based smart phone security management method according to the present invention is executed.
3 is a diagram showing the configuration of a smartphone in a dual security-based security management system of the present invention.
4 is a flowchart showing a method for managing security of a smartphone based on dual security according to the present invention.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 and 2 are diagrams illustrating a first embodiment and a second embodiment of the overall configuration in which the dual security-based smart phone security management method according to the present invention is executed. Referring to [FIG. 1] and [FIG. 2], the smartphone security management system according to the present invention as a whole smartphone 10, access device 20, internal communication network 41, control server 50, communication network ( 40), the mobile communication network 42, and the base station 60.

The smart phone 10 is a terminal possessed by a user entering and exiting the security area A through the access device 20. The smart phone 10 is a terminal having a comprehensive concept including an intelligent mobile phone added with a computer support function regardless of a name. The smart phone 10 is more suitable for the present invention because it can install program software, but it is also possible to release the program according to the present invention so that a general feature phone is not excluded from the scope of the present invention.

The access device 20 may include an access tag 21 to transmit access information of the smart phone 10 to the control server 50 through the internal communication network 41. Here, the access tag 21 is a device for acquiring information about the smartphone 10, and may include, for example, a near field communication module (NFC). As another embodiment, as shown in FIG. 2, the access tag 21 may be configured using the QR code 22 to perform virtually the same function.

The communication network 40 is a high-speed backbone network of a large communication network capable of a large capacity, long distance voice / data service, and may be, for example, a general Internet network. In addition, the communication network 40 is a next-generation wired network for providing a high-speed multimedia service based on ALL-IP (ALL Internet Protocol) and plays a role of mediating transmission and reception of signals and data between systems.

Finally, the control server 50 performs individual function control for the smart phone 10 according to the present invention in the security zone (A), and furthermore, the user performs abnormal behavior with respect to the dual security program installed in the smart phone 10. If you do, it is a system that can detect, control and manage this. The control server 50 may be configured to be directly connected to the communication network 40 according to the example.

3 is a diagram showing the configuration of the smart phone 10 in the dual security-based security management system of the present invention. Referring to FIG. 3, the smartphone 10 includes a touch screen 11, an input sensor unit 12, a wireless transmission / reception unit 13, a control unit 14, a system memory 15, and a storage unit 17. It is made, including, a dual security module 16 is installed in the system memory (15).

The touch screen 11 is a configuration unit in which an input unit having a touch interface and an output unit for outputting a UI screen are integrally formed. In another embodiment of the present invention, the touch screen 11 may be modified and applied to a terminal having a separate input unit and an output unit.

The input sensor unit 12 is a module for communicating with the access tag 21 provided in the access device 20. When the access tag 21 is formed of a near field communication module (NFC), the input sensor unit 12 corresponds to the near field corresponding thereto. When the access tag 21 is a QR code, the communication unit may be formed with a photographing apparatus (camera module) and a QR code application program module.

The wireless transmission / reception unit 13 performs signal and data transmission and reception with the control server 50 connected to the communication network 40 via the base station 60 and the mobile communication network 42 by, for example, an RF method.

The controller 14 installs a dual security program stored in the form of a file in the storage unit 17 on the system memory 15 at the request of the user through the touch screen 11. In the present invention, the security program is installed on the system memory 15 to monitor each other for abnormal behavior such as execution suspension or deletion attempt between one process and another process through a dual security process.

When the smartphone user enters the security area A provided with the access device 20, the control unit 14 receives the access tag 21 provided in the access device 20 through the input sensor unit 12 by the user. In the case of tagging, after receiving the driving signal from the input sensor unit 12, the dual security program installed in the storage unit 17 is executed.

The controller 14 implements the dual security module 16 having the first security module 16a and the second security module 16b on the system memory 15 by performing an initial operation according to the execution of the dual security program. . That is, the control unit 14 that receives the driving signal through the input sensor unit 12 from the access device 20 installed at the entrance of the security area (A) is two security modules (16a) included in the dual security module (16) , 16b) to be performed simultaneously so that the two security modules 16a, 16b monitor each other for abnormal behavior that may occur to the other party. The present invention is not limited to two security modules, and three or more security modules may be used as necessary.

On the other hand, when the smart phone user comes out from the security area (A), the access tag 21 provided in the access device 20 is tagged by the user through the input sensor unit 12, the event received The control unit 14 controls the wireless transmission and reception unit 13 so that the smartphone user enters and exits the security area A to the control server 50 to update the accessor information corresponding to the user corresponding to the user. do. In addition, the control unit 14 receives the stop signal from the input sensor unit 12 or stops the execution of the dual security program in response to the above event.

The system memory 15 generally includes a basic operating system (OS) and a graphical user interface (GUI) portion of the smartphone 10 to maintain and delete stored data even when power is not supplied to the nonvolatile memory (NVM). It can be configured in various forms such as flash memory, MRAM (magnetic RAM), PRAM (phase change RAM), FRAM (ferroelectric RAM) and the like. According to the exemplary embodiment, other types of memory devices may be provided, and a nonvolatile memory such as random access memory (RAM) may be provided if necessary.

The dual security module 16 includes a first security module 16a and a second security module 16b as core components of the present invention. The fail-safe module 16 is preferably implemented on the system memory 15 because it is advantageous to allow it to be executed again even if the smartphone 10 is reset or rebooted.

When the implementation on the system memory 15 by the control unit 14 is completed, the dual security module 16 performs a user information transmission request stored in the storage unit 17 to the control unit 14, thereby controlling the control unit 14. Through the wireless transmission and reception unit 13 by the transmission of the user information to the control server 50 to be performed.

The first security module 16a and the second security module 16b in the dual security module 16 allow the smartphone user's behavior by the controller 14 to be stably controlled by monitoring each other. The first security module 16a and the second security module 16b monitor each other's execution status by the smart phone user.

The first security module 16a is detected with respect to the second security module 16b, and the second security module 16b with respect to the first security module 16a may detect an operational disturbance that may be applied by the user. In response to this, the operation disturbance information is transmitted to the control server 50 through the base station 60 and the mobile communication network 42.

More specifically, when the so-called 'abnormal behavior' such as execution stop or deletion attempt for one of the first security module 16a or the second security module 16b by the smart phone user performs the monitoring The operation disturbance information for this is generated and transmitted to the control server 50.

On the other hand, if any one of the first security module (16a) and the second security module (16b) the smartphone user has an abnormal behavior, such as stopping execution or attempt to delete, the control unit 14 detects this control server Notify 50, the control server 50 may be added to the function to remotely control the smartphone 10 in response thereto. The control server 50 may interfere with the entire function of the smart phone 10 or the rest of functions except for the telephone call function, or select and hinder some functions such as a camera function and a storage medium access function.

4 is a flowchart illustrating a dual security-based smart phone security management method according to an embodiment of the present invention. Referring to FIGS. 1 to 4, the controller 14 stores a dual security program stored in a file form in the storage unit 17 on the storage unit 17 in response to a user's request through the touch screen 11. Install in (S11).

In the present invention, the security program is installed in the storage unit 17 to monitor each other for abnormal behavior such as execution suspension or deletion attempt between one process and another process through a dual security process.

After step S11, the controller 14 performs the initial operation according to the execution of the dual security program. The dual security module includes a first security module 16a and a second security module 16b on the system memory 15. (16) is implemented (S12). That is, the controller 14 receiving the driving signal from the input sensor unit 12 causes the two security modules 16a and 16b to be executed at the same time, thereby causing an abnormality of the smartphone user between the two security modules 16a and 16b. Monitor behavior.

After the step (S12), the control unit 14, the smart phone user enters the security area (A) equipped with the access device 20, the access tag 21 provided in the access device 20 is input sensor by the user When tagging through the unit 12, after receiving the driving signal from the input sensor unit 12, and executes the dual security program installed in step (S11) (S13). Here, the access tag 21 may be formed of a near field communication module (Near Field Communication (NFC)) or a QR code.

After step S13, the dual security module 16 requests the control unit 14 to transmit the user information stored in the storage unit 17, so that the control unit 14 controls the user information through the wireless transceiver 13. The server 50 transmits the data (S14).

After step S14, the control server 50 checks the user information of the smartphone 10 received from the control unit 14 by step S14 and the accessor information corresponding to the user previously stored in the control server 50. The verification process is performed (S15), and the control function of the smartphone 10 according to the user level on the accessor information is set corresponding to the check result of the check (S16). Here, the functions of the smartphone 10 according to the level of the user may include a call, a camera, Wi-Fi, and data communication.

After step S16, the first security module 16a and the second security module 16b in the dual security module 16 start to perform mutual control (S17). Controlling here means monitoring the user's execution status with respect to each other.

After step S17, the first security module 16a is operated by the user against the second security module 16b, and the second security module 16b is prevented from operating. In response to detecting the state, the operation disturbance information is transmitted to the control server 50 through the base station 60 and the mobile communication network 42 (S18). More specifically, the security module that monitors when an abnormal action such as execution stop or deletion of one of the first security module 16a or the second security module 16b is executed by the smart phone user. The operation disturbance information is generated and transmitted to the control server 50.

After step (S18), the control server 50 performs a position detection and use control in the security area (A) for the smart phone 10 as a result of the operation disturbance state detection (S19). That is, the control server 50 connects the data session with the smart phone 10, and grasps the location and the behavior of the smart phone 10 where the abnormal behavior is detected to identify the smart phone 10 possessed by the abnormal user. To control.

After the step (S19), the control unit 14 is the smart phone user exits the security area (A) provided with the access device 20, the access tag 21 provided in the access device 20 is input sensor by the user In the case of tagging through the unit 12, the wireless transceiver 13 is controlled to transmit the information of the smart phone user entering and exiting the security area A to the control server 50 so that the user information corresponding to the user is updated. (S20).

After step S20, when receiving the stop signal from the input sensor unit 12, the control unit 14 stops the execution of the dual security program in step S12 (S21).

The present invention can also be embodied in the form of computer readable code on a computer readable recording medium. At this time, the computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disks, optical data storage devices, and the like, including those implemented in the form of carrier waves (eg, transmission over the Internet). . The computer-readable recording medium can also be stored and executed by a computer-readable code in a distributed manner on a networked computer system. And functional programs, codes, and code segments for implementing the present invention can be easily deduced by programmers skilled in the art to which the present invention belongs.

As described above, the embodiments of the present invention have been disclosed in the present specification and drawings, and although specific terms have been used, they have been used only in a general sense to easily describe the technical contents of the present invention and to facilitate understanding of the invention. And is not intended to limit the scope of the invention. It will be apparent to those skilled in the art that other modifications based on the technical idea of the present invention are possible in addition to the embodiments disclosed herein.

10: Smartphone
11: Touch screen
12: input sensor unit
13: wireless transceiver
14:
15: System memory
16: double security module
16a: first security module
16b: second security module
17:
20: access device
21: access tag
22: QR code
40: network
41: Internal network
42: mobile network
50: control server
60: base station

Claims (12)

As a dual security-based security management method for the smart phone 10,
A first step of the control unit 14 storing the dual security program in the storage unit 17;
The control unit 14 performs an initial operation according to the execution of the double security program, and provides the double security module 16 having the first security module 16a and the second security module 16b on the system memory 15. Implementing a second step;
The control unit 14 is tagged by the input sensor unit 12 with respect to the access tag 21 provided in the access device 20 of the security area, and receives the drive signal from the input sensor unit 12 If the third step of executing the dual security program;
A fourth step in which the first security module (16a) and the second security module (16b) monitor the operation disturbance state by the user;
The first security module (16a) and the second security module (16b) of the second module detects the operation disturbance state for each other to generate and transmit the operation disturbance information to the control server 50 through the communication network (40) 5 steps;
A sixth step in which the control server 50 remotely performs location detection and usage control of the smart phone 10 in the security area A through the communication network 40;
Dual security-based smartphone security management method that is configured to include.
The method according to claim 1,
The operation disturbance state in the fourth step is an abnormal behavior including an execution stop and deletion attempt by the user of any one of the first security module 16a and the second security module 16b. Dual security based smartphone security management method.
The method according to claim 1,
And a third step of performing the second step,
A second step of the dual security module (16) requesting the control unit (14) to transmit user information stored in the storage unit (17);
Step B of controlling, by the controller 14, the wireless transceiver 13 to transmit the user information to the control server 50;
A step C of the control server 50 setting a function control of the smart phone 10 according to a user level on the accessor information by performing a verification check process on the user information and previously stored accessor information;
Dual security-based smartphone security management method is configured to include more.
The method according to claim 3,
In the step C, the control server 50 sets the control of at least one of the call function, the camera function, the Wi-Fi function, the data communication function of the smart phone 10, smart phone based on double security How to manage security.
The method according to claim 2,
When the controller 14 performs the second tagging by the input sensor unit 12 with respect to the access tag 21, the controller 14 controls the wireless transceiver 13 so that the user enters and exits the security area A. FIG. A seventh step of transmitting the outgoing information to the control server 50 to update the accessor information;
Dual security-based smartphone security management method is configured to include more.
The method according to claim 5,
An eighth step of stopping execution of the dual security module 16 implemented on the system memory 15 when the control unit 14 receives the stop signal from the input sensor unit 12;
Dual security-based smartphone security management method is configured to include more.
The dual security program is stored on the storage unit 17, and the dual security module 16 including the first security module 16a and the second security module 16b is stored on the system memory 15 from the dual security program. When the tagging is performed by the input sensor unit 12 for the access tag 21 provided in the access device 20 of the security area, and receives a driving signal from the input sensor unit 12, the double A computer-readable recording medium having recorded thereon a security management program for the smart phone 10 including a control unit 14 for executing a security program;
Monitoring of the first security module 16a and the second security module 16b according to the monitoring of the operation disturbance state by the user with respect to the first security module 16a or the second security module 16b. A control server 50 for receiving the operation disturbance information from a module so as to perform position detection and use control of the smartphone 10 in the security area A;
Dual security-based smartphone security management system that is configured to include.
The method of claim 7,
The operating disturbance state is a double security-based smartphone security, characterized in that the abnormal behavior of the user's execution and deletion attempts to any one of the first security module (16a) and the second security module (16b). Management system.
The method of claim 7,
The control unit 14 receives a user information transmission request stored in the storage unit 17 from the dual security module 16, and transmits and receives the user information to the control server 50. Dual security based smartphone security management system, characterized in that for controlling the.
The method of claim 9,
The control server 50 performs a verification check process of the user information and the accessor information corresponding to the previously stored user, the call function, the camera function, the Wi-Fi of the smartphone 10 according to the user level on the accessor information A dual security-based smartphone security management system, characterized in that for setting the function control for one or more of the function, data communication function.
The method of claim 7,
The control unit 14 controls the wireless transceiver 13 when the second tagging is performed by the input sensor unit 12 with respect to the access tag 21 so that the user enters and exits the security area A. FIG. Dual security-based smart phone security management system, characterized in that for transmitting the outgoing information to the control server 50 to update the accessor information.
The method of claim 11,
The controller 14 stops the execution of the double security program when receiving a stop signal from the input sensor unit 12, dual security-based smart phone security management system.

Images