KR102081173B1 - System and method for affiliation identification and management of terminal in cloud environment - Google Patents

Abstract

The present invention relates to a system and method for identification and management of belonging of a terminal in a cloud environment. According to an embodiment of the present invention, a system in a cloud environment comprising each of a terminal connecting to a server, and the server which sets affiliation of the terminal using information received from the terminal and manages the terminal using the set affiliation. In a first case that the terminal grasps its own affiliation information from information stored therein and generates a hash of a predetermined size using the grasped information as an affiliation identifier to transmit the generated affiliation identifier to the server, the server sets the affiliation of the terminal using the affiliation identifier received from the terminal.

Description

System and method for affiliation identification and management of terminal in cloud environment}

The present invention relates to a system and method for identification and management of affiliation of a terminal in a cloud environment. More particularly, the terminal and identification of affiliation of the terminal and software installed in the terminal in a cloud environment are identified. The present invention relates to a system and a method capable of managing software by affiliation.

In a cloud environment, a server (or set of servers) supports terminals of various organizations, companies or departments. At this time, it is necessary to identify the affiliation at the time of new setting (registration) of the terminal and to correctly set the identifier for the affiliation of the terminal.

In the conventional affiliation identification method (hereinafter, referred to as “prior art”), an administrator or a terminal user directly inputs affiliation information from a corresponding terminal and transmits the affiliation information to a server, and approves the affiliation information received from the server or sets it in an unspecified group. The administrator then manually reassigns the affiliation.

However, such a prior art is a manual method requiring direct intervention of a user and an administrator every time a user belongs to a terminal. Therefore, in the case of using the conventional technique of the manual method, there is a problem in that it takes a lot of time and inconvenience to set up the terminal affiliation, and frequently generates a terminal affiliation setting error such as an incorrect affiliation is set.

In order to solve the problems of the prior art as described above, the present invention is capable of identifying a terminal belonging to the terminal and the software installed in the terminal to communicate with the server in the cloud environment, the terminal and the software is identified The purpose is to provide a system and method that can be managed by affiliation.

However, the problem to be solved by the present invention is not limited to the above-mentioned problem, another task that is not mentioned may be clearly understood by those skilled in the art from the following description. There will be.

The system according to an embodiment of the present invention for solving the above problems, (1) the terminal connected to the server, and (2) using the information received from the terminal to set the belonging of the terminal and set the belonging It is a system of a cloud environment that includes a server that manages terminals by performing license management, software update management, policy management, or security management for each affiliation.

The terminal identifies the belonging information of the terminal from the information stored therein, if there is authentication information or additional information of the installed software, identifies the belonging information therefrom, and attaches a hash of a predetermined size using the identified belonging information. If the membership information is composed of a plurality of hierarchies, select at least two hierarchies and include the lowest hierarchical layer to combine the belonging information of the selected hierarchies, and process the combination information as a hash function. Can be generated.

In the first case in which the terminal transmits the generated belonging identifier to the server, the server may set the belonging of the terminal by using the belonging identifier received from the terminal.

The affiliation information may include a first hierarchy, which is information related to an organization or a company, and a second hierarchy, which is information related to a team, a department, or a group, respectively.

 In the second case in which the server stores corresponding information including the belonging identifier and the belonging information matched in the first case, the server belongs to the corresponding corresponding information if the belonging identifier received from the terminal corresponds to the belonging identifier of the corresponding information. The belonging of the terminal can be set using the information.

In the third case in which the terminal transmits its own information in addition to the belonging identifier in the first case, the server uses the belonging information received together if the format of the belonging identifier received from the terminal conforms to the predetermined format. You can set the belonging of.

In the fourth case in which the terminal transmits its own private IP address and public IP address in addition to the belonging identifier in the first case, if the format of the belonging identifier received from the terminal conforms to the predetermined format, the server receives the received private. Affiliation of a terminal can be set using an IP address and a public IP address.

Unlike the first case, in the fifth case where the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of the belonging identifier, the server receives the received private IP address and public IP address. The belonging of the terminal can be set.

The server may select a terminal belonging setting method in any of the second to fifth cases according to the security level.

The fifth case may be applied at a lower level of security than the second to fourth cases.

The server may store the affiliation identifier of the terminal to be displayed in a string form of m decimal number (where m is a multiple of 4).

The terminal according to an embodiment of the present invention connects to the server and transmits the information, so that the server sets the terminal's own affiliation and uses the set affiliation to manage license management, software update management, policy management, or security management for each affiliation. A terminal in a cloud environment that enables the terminal to manage itself by performing the following steps, comprising: (1) a storage unit for storing information, (2) a terminal's own information from the information stored in the storage unit, and the authentication information of the installed software or If there is additional information, belonging information is identified therefrom, and a hash of a certain size is generated as the belonging identifier using the identified belonging information, and if the belonging information is composed of a plurality of hierarchies, at least two hierarchies must be selected and the lowest level must be obtained. Choose to include a layer to combine the membership information of those selected layers A control function to generate a belonging identifier by processing a hash function and to transmit the generated belonging identifier to a server, wherein the belonging information is assigned to a first layer, a team, a department, or a group related to an organization or a company. It includes each of the second layer which is related information.

According to an embodiment of the present invention, the server sets affiliation of a terminal by using information received from a terminal connected to the terminal, and license management, software update management, policy management, or security management for each affiliation using the set affiliation. A server in a cloud environment for managing a terminal by performing a terminal, comprising: (1) a communication unit for communicating with a terminal, and (2) a control unit for controlling the setting of belonging to a terminal by using the membership identifier when the communication unit is received. The terminal identifies the belonging information of the terminal from the information stored therein, and if there is authentication information or additional information of the installed software, identifies the belonging information therefrom, and uses the identified belonging information to generate a hash of a certain size using the belonging identifier. At least two systems, if the information is composed of a plurality of layers Select to include the lowest layer, combine the belonging information of the selected layers, and process the combination information into a hash function to generate a belonging identifier, the belonging information is a first layer that is information related to the organization or company, and It includes a second layer that is information related to a team, department, or group.

The method according to an embodiment of the present invention is a method for identifying and managing affiliation of a terminal in a cloud environment of a terminal and a server, the method comprising: (1) a terminal accessing a server and transmitting information; A setting step of setting the affiliation of the terminal by using the information received from the terminal; and (3) managing the terminal by performing license management, software update management, policy management, or security management for each affiliation using the affiliation for which the server is set. Steps.

In the transmitting step, the terminal identifies the belonging information of the terminal from the information stored therein, if there is authentication information or additional information of the installed software, identifies the belonging information therefrom, and uses the identified belonging information to determine a certain size. If the hash is generated as a membership identifier, and the membership information consists of a plurality of hierarchies, at least two hierarchies must be selected to include the lowest hierarchy, the membership information of the selected hierarchies are combined, and the combination information is processed as a hash function. Generating the belonging identifier, and transmitting the generated belonging identifier to the server.

The setting step may include setting the belonging of the terminal by using the belonging identifier received from the terminal by the server.

The affiliation information may include a first hierarchy, which is information related to an organization or a company, and a second hierarchy, which is information related to a team, a department, or a group, respectively.

In the setting step, when the server stores the corresponding information including the belonging identifier and the belonging information matched in the first case, the corresponding identifier is received if the belonging identifier received from the terminal corresponds to the belonging identifier of the corresponding information. And setting the belonging of the terminal using the belonging information of the information.

In the setting step, in the third case in which the server transmits its belonging information together with the belonging identifier in the first case, if the format of the belonging identifier received from the terminal conforms to the predetermined format, It may include the step of setting the belonging of the terminal using.

In the fourth step in which the server transmits its own private IP address and public IP address in addition to the affiliation identifier in the first case, if the format of the affiliation identifier received from the terminal conforms to the predetermined format, It may include the step of setting the belonging of the terminal using the received private IP address and public IP address.

In the setting step, unlike the first case, the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of its own identifier. It may include the step of setting the belonging of the terminal using the IP address.

The setting step may include a step in which the server may select a setting scheme belonging to any one of the second case to the fifth case according to the security level, and the fifth case may be more than the second case to the fourth case. Can be applied at a lower level of security.

The setting step may include a step in which the server stores the identity of the terminal to be displayed in a string form of m decimal number (where m is a multiple of 4).

The present invention configured as described above is capable of identifying the belonging of the terminal and the software installed in the terminal to access and communicate with the server in the cloud environment, there is an advantage that can be managed by belonging to the terminal and the software is identified belonging to .

In addition, the present invention does not require the direct intervention of the user and the administrator every time the setting of the terminal, not only can reduce the time required for the terminal belonging setting while increasing the convenience of the terminal belonging setting, it is possible to prevent the error of the terminal belonging setting; There is an advantage to this.

In addition, according to the present invention, various types of terminal transmission information and a setting method of the server according to the present invention have an advantage in that the belonging of the terminal can be set by reflecting various security levels.

Effects obtained in the present invention are not limited to the above-mentioned effects, and other effects not mentioned above may be clearly understood by those skilled in the art from the following description. will be.

1 shows a schematic diagram of a system 100 in accordance with an embodiment of the present invention.
2 shows a block diagram of the terminal 10.
3 shows a block diagram of the server 20.
4 is a flowchart illustrating a method for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention.
5 illustrates an example of a process of a method for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention.

The above objects, means, and effects thereof will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, and as a result, those skilled in the art to which the present invention pertains may easily facilitate the technical idea of the present invention. It can be done. In addition, in describing the present invention, when it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the gist of the present invention, the detailed description thereof will be omitted.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In this specification, the singular forms also include the plural forms as the case otherwise indicates. In this specification, terms such as "comprise", "include", "presume" or "have" do not exclude the presence or addition of one or more other components than the components mentioned.

In this specification, terms such as “or”, “at least one”, etc. may refer to one of the words listed together, or may represent a combination of two or more. For example, "or B" "and at least one of B" may include only one of A or B, and may include both A and B.

In this specification, descriptions that follow “for example”, etc., may not exactly match the information presented, such as the recited characteristics, variables, or values, tolerances, measurement errors, limits of measurement accuracy, and other commonly known factors. It should not be limited to the embodiments of the invention according to various embodiments of the present invention to the same effect as the modification.

In the present specification, when a component is described as being 'connected' or 'connected' to another component, it may be directly connected to or connected to the other component, but another component may be present in between. It should be understood that it may. On the other hand, when a component is said to be 'directly connected' or 'directly connected' to another component, it should be understood that there is no other component in between.

In the present specification, when a component is described as being 'on' or 'facing' another component, the component may be directly in contact with or connected to another component, but another component may be present in between. It should be understood that it can. On the other hand, when a component is described as being "directly" or "directly" to another component, it may be understood that there is no other component in between. Other expressions describing the relationship between the components, such as 'between' and 'directly between', may be interpreted as well.

In this specification, terms such as 'first' and 'second' may be used to describe various components, but the components should not be limited by the above terms. In addition, the above terms should not be construed as limiting the order of each component, but may be used for the purpose of distinguishing one component from another. For example, a 'first component' may be referred to as a 'second component', and similarly, the 'second component' may also be referred to as a 'first component'.

Unless otherwise defined, all terms used in the present specification may be used in a sense that can be commonly understood by those skilled in the art. In addition, terms that are defined in a commonly used dictionary are not ideally or excessively interpreted unless they are specifically defined clearly.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 shows a schematic diagram of a system 100 in accordance with an embodiment of the present invention.

System 100 (hereinafter referred to as “main system”) according to an embodiment of the present invention is a system of a cloud environment, as shown in FIG. 1, including a terminal 10 and a server 20, It is a system that enables identification and management of affiliation of the terminal 10. However, the terminal 10 or the server 20 may be a plurality.

In this case, the affiliation may collectively refer to an independent organization or company or a team, a department, or a group belonging thereto. In general, one terminal 10 may belong to only one organization or company, but in the case of a team, a group, or a department having a hierarchical structure, one terminal 10 may be configured according to the steps of the hierarchy. It may belong to the object of belonging.

In particular, in a cloud environment, the server 20 can support multiple organizations, companies, teams, groups, or departments. Therefore, when a new registration of the terminal 10 should be able to identify affiliation and correctly register affiliation identifier of the terminal 10, the system 100 can perform this function.

In detail, the terminal 10 is an electronic device that communicates with the server 20 and is an electronic device belonging to a certain organization. In this case, the terminal 10 may be an electronic device that requires affiliation setting (registration) through the identification of the belonging in the server 20 or an electronic device in which the belonging setting has already been made in the server 20. Hereinafter, referring to “terminal 10”, membership setting is not yet made in server 20. If referred to as “registration terminal 10,” it is assumed that belonging to server 20 is configured. Do it.

For example, the terminal 10 may be a desktop personal computer (PC), a laptop personal computer (PC), a tablet personal computer (PC), a netbook computer, a workstation, a personal digital assistant (PDA). An assistant, a smartphone, a smartpad, a mobile phone, or an Internet of Things (IoT) device may be used, but is not limited thereto.

The terminal 10 communicates with the server 20 to transmit and receive various information. In general, during communication, the terminal 10 transmits its own hardware-related unique identifier (eg, MAC address, etc.), public IP address, etc. to the server 20. In addition, the terminal 10 may transmit information to enable the server 20 to identify the belonging to the terminal 10 itself, that is, the belonging identifier or the private IP address to the server 20.

2 shows a block diagram of the terminal 10.

As illustrated in FIG. 2, the terminal 10 may include an input unit 11, a storage unit 12, a communication unit 13, a display unit 14, a control unit 15, and the like.

The input unit 11 is configured to receive various types of information. That is, the input unit 11 generates input data in response to the user's input. The input unit 11 may include at least one input means.

The storage unit 12 is a configuration for storing various kinds of information. That is, various kinds of information necessary for the operation of the terminal 10 (that is, the hardware-related unique identifier, public IP address, affiliation information, affiliation identifier, private IP address, etc.) of the terminal 10, software, and the like can be stored.

The communication unit 13 is configured to communicate with the server 20 and the like. In particular, the communication unit 13 transmits to the server 20, in addition to its own hardware-related unique identifier, public IP address, etc., information (eg, an identifier or a private IP address) enabling identification of belonging to the terminal 10 itself. Can be. In addition, the communication unit 13 may receive a request for its current status information from the server 20, and transmit information on the current status to the server 20. In addition, the communication unit 13 may receive management information and the like according to belonging to the terminal 10 from the server 20. In this case, the communication unit 13 may include wired / wireless communication modules of various communication methods.

The display unit 14 is a configuration for displaying display data according to the operation of the terminal 10. In addition, the display unit 14 may be combined with the input unit 11 to be implemented as a touch screen.

The controller 15 is configured to control the input unit 11, the storage unit 12, the communication unit 13, the display unit 14, and the like. In particular, the controller 15 collects / generates various pieces of information (such as an independent identifier or a private IP address) for identification, and transmits it to the server 20 together with its own hardware-specific unique identifier and public IP address. To control. This function may be performed through software installed in the storage unit 12.

The server 20 sets (registers) affiliation with the terminal 10 using the information received from the terminal 10. Thereafter, the server 20 may manage the registration terminal 10 for each belonging by using the set belonging information.

3 shows a block diagram of the server 20.

As shown in FIG. 3, the server 20 may include an input unit 21, a storage unit 22, a communication unit 23, a display unit 24, a control unit 25, and the like.

The input unit 21 is configured to receive various types of information. That is, the input unit 21 generates input data in response to the input of the server manager. The input unit 21 may include at least one input means. The storage unit 22 is a configuration for storing various kinds of information. That is, various kinds of information necessary for the operation of the server 20 (that is, hardware-related unique identifier, public IP address, organization information, organization identifier, private IP address, etc.) of the terminal 10, software, and the like can be stored. Such information may be information received from the terminal 10.

The communication unit 23 is configured to communicate with the terminal 10 and the like. In particular, the communication unit 23, from the terminal 10, in addition to the hardware-specific unique identifier, public IP address, etc. of the terminal 10, information (eg, an identifier or a private IP address, etc.) to enable identification of belonging to the terminal 10 itself. ) Can be received. In addition, the communication unit 23 may receive the current state information by requesting the current state information of the terminal 10. In addition, the communication unit 23 may transmit management information according to the belonging of the terminal 10 to the terminal 10. In this case, the communication unit 23 may include a wired / wireless communication module of various communication methods.

The display unit 24 is a configuration for displaying display data according to the operation of the server 20. In addition, the display unit 24 may be combined with the input unit 21 to be implemented as a touch screen.

The controller 25 is configured to control the input unit 21, the storage unit 22, the communication unit 23, the display unit 24, and the like. In particular, the control unit 25 collects / generates various pieces of information (such as an independent identifier or a private IP address) for identifying the belonging in some cases, and transmits them to the server 20 together with its own hardware-related unique identifier and public IP address. To control. This function may be performed through software installed in the storage unit 22.

For example, the input units 11 and 21 may include a keyboard, a keypad, a dome switch, a touch panel, a touch key, a mouse, or A menu button may be included, but is not limited thereto.

For example, the storage units 12 and 22 may include a hard disk type, a magnetic media type, a compact disc read only memory (CD-ROM), and an optical recording medium type according to the type thereof. Optical Media type, Magneto-optical media type, Ultratimedia card micro type, Flash memory type, ROM type (read only memory type), or RAM It may be a type (random access memory type) and the like, but is not limited thereto. In addition, the storage unit 22 may be a cache, a buffer, a main memory, or an auxiliary memory, or a storage system separately provided according to its use / location, but is not limited thereto.

For example, the communication units 13 and 23 may include 5th generation communication (5G), long term evolution-advanced (LTE-A), long term evolution (LTE), Bluetooth, Bluetooth low energe (BLE), or NFC (near field). wireless communication such as communication), and wired communication such as cable communication, but are not limited thereto.

For example, the display units 14 and 24 may include liquid crystal displays (LCDs), light emitting diode (LED) displays, organic light emitting diode (OLED) displays, and microelectromechanical systems (MEMS). micro electro mechanical systems display, or electronic paper display, but are not limited thereto.

For example, the controllers 15 and 25 may be a processor or software performed by the processor, but are not limited thereto.

Hereinafter, a method (hereinafter referred to as “the present method”) for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention will be described.

4 is a flowchart illustrating a method for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention. 5 illustrates an example of a process of a method for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention.

A method for identifying and managing affiliation of a terminal in a cloud environment according to an embodiment of the present invention (hereinafter, referred to as “the present method”) includes S100 to S300 as illustrated in FIG. 4. S100 to S300 may be controlled by the controllers 15 and 25 of the terminal 10 and the server 20. In this case, the controllers 11 and 21 may perform a control function for S100 to S300 using dedicated software installed in the terminal 10 and the server 20.

S100 is a step in which the terminal 10 collects / generates information for identifying an affiliate thereof and transmits the information to the server 20. That is, in order to allow the server 20 to identify and set up affiliation of the terminal 10 itself, the terminal 10 may identify affiliation identification, such as a membership identifier or a private IP address, in addition to its own hardware-specific identifier and public IP. Information for the server may be transmitted together.

S200 is a step in which the server 20 sets (registers) affiliation of the terminal 10 by using the information received from the terminal 10.

However, at or before S200, the server 20 may prestore a belonging database that may belong to the terminal 10. For example, affiliation databases may include names, addresses, phone numbers, domains, emails, or IP addresses, etc., associated with an organization, company, team, department, or group. In this case, the IP address may include a private IP address in addition to the public IP address. This is because the public IP may be the same even if the router, the team, the department, or the group are different. That is, even if the public IP address is the same, the private IP address of the terminal 10 may vary according to a team, a department, or a group.

In particular, according to the information for identifying the belonging transmitted by the terminal 10 in S100 and the belonging setting method performed by the server 20 receiving the same, the S200 may perform various belonging identification and setting for the terminal 10. have.

First, when the terminal 10 generates the belonging identifier by itself in S100 and transmits it to the server 20 (hereinafter, referred to as “first case”), the server 20 receives the belonging identifier received from the terminal 10. By using to identify the belonging of the terminal 10 can be set.

That is, in the first case, the terminal 10 can grasp the information of own belonging from information previously stored therein. Thereafter, the terminal 10 may generate a hash of a predetermined size as a belonging identifier using the identified belonging information. That is, the terminal 10 may generate a hash by processing the identified membership information as a hash function. Thereafter, the terminal 10 may transmit the generated belonging identifier to the server 20.

In this case, the belonging information is information related to belonging to the terminal 10. For example, the affiliation information may be a name, address, telephone number, domain, e-mail, or the like related to an organization, company, team, department, or group. Such affiliation information may be identified using authentication information of software installed in the terminal 10 or additional information of the software. That is, when the software is installed, the unique authentication information may be stored together in the terminal 10 depending on the belonging, or additional information about the belonging may be stored together by the installer's writing. Therefore, the terminal 10 can grasp its belonging information by using such belonging information.

In particular, the belonging information identified by the terminal 10 may be composed of a plurality of layers. For example, if there are various departments within a company, or various sub-departments exist within the department, the corresponding information forms a plurality of hierarchies (first hierarchy, second hierarchy, etc.). At this time, the first layer corresponds to a layer higher than the second layer. This case is reflected in the belonging database stored in the server 20 and the plurality of hierarchies are stored.

For example, in the identified affiliation information, the first tier may include information related to an organization or a company, and the second tier may include information related to a team, a department, or a group. That is, the first layer may be information about a name, address, phone number, domain, or e-mail related to the organization or company. In addition, the second layer may be information about a name, address, telephone number, domain, or e-mail related to a team, a department, or a group. However, the second layer may include a plurality of lower layers. That is, a plurality of sub-teams, sub-departments, or sub-groups may exist in a team, department, or group according to the second layer.

In particular, when the identified belonging information has a plurality of hierarchies, the terminal 10 may select at least two hierarchies but necessarily include the lowest hierarchical layer to generate combination information combining the belonging information of the selected hierarchies. . This is because the belonging information on the lowest tier can also grasp the information on the upper tier. For example, if you have departments B and C in company A, and a, b, and c subdivisions in department B, then only the information about the hierarchy of subdivisions b, This may be possible.

However, in the case of the lowest hierarchy, the names may be used interchangeably by different departments. For example, departments a, b, and c also exist in department C. Therefore, in order to grasp more identified information, in addition to selecting the lowest layer, it is also necessary to select other layers higher. In this case, the combination information having a larger identification function can be generated using the minimum belonging information. However, the present invention is not limited thereto, and the terminal 10 may generate combination information by selecting belonging information of all the identified layers. Thereafter, according to the first case, the terminal 10 may generate the belonging identifier by processing the combination information as a hash function and transmit the generated identifier to the server 20.

For example, the terminal 10 may generate belonging identifiers by combining and identifying the belonging membership information and lowering them to generate a hash using a Message-Digest Algorithm 5 (MD5) hash function.

However, since the generated hash is displayed in a binary form, the terminal 10 may convert the hash into a predetermined format and display the hash for improving compatibility and readability. That is, the terminal 10 may convert the hash to be displayed in a string form of m decimal numbers (where m is a multiple of 4) separated by a separator. In addition, the terminal 10 may transmit the converted information to the server 20 as an belonging identifier. This hash conversion function may be performed by the server 20. In particular, if the hash is converted into a string form and displayed, when manual identification of the administrator of the server 20 side is required in identifying and setting the membership of the terminal 10 in S200 to be described later, the readability of the recognition may be improved. have. At this time, the administrator may decide to approve, withhold, or reject the new registration request.

For example, the hash is 36 characters (8-4-4-4-12), similar to the format of universally unique identifier (UUID), such as “231e2310-e31b-31d4-a231-231231231231”. May be converted to be separated by a hyphen (-). In this case, each character may be a hexadecimal number, and the separator may be omitted, such as “231e2310e31b31d4a231231231231231”.

In particular, there may be a case where the server 20 itself stores the corresponding information (hereinafter referred to as "second case"). In this case, the correspondence information includes affiliation information that matches the received affiliation identifier and may be information including information on the affiliation identifier in the affiliation database. For example, the corresponding information may be information in which the belonging identifier and the belonging information matched thereto are stored in the form of a table.

In the case of receiving the belonging identifier of the terminal 10 according to the first case and storing the corresponding information according to the second case, the server 20 responds to the corresponding identifier if the received belonging identifier corresponds to the belonging identifier of the corresponding information. The belonging of the terminal 10 can be identified and set using the belonging information of the information. For example, the server 20 may check whether the received belonging identifier exists in the belonging database, and then set the belonging of the corresponding terminal 10 according to the belonging information according to the checked information.

In addition, in the first case, the terminal 10 may transmit its own belonging information previously identified for generating the belonging identifier in addition to the belonging identifier (hereinafter, referred to as “third case”). In this case, the server 20 may identify and set the belonging of the terminal 10 even if there is no corresponding information. That is, the server 20 may set the belonging of the terminal 10 by using the belonging information received together if the format of the belonging identifier received from the terminal 10 conforms to the predetermined format. For example, if the received membership identifier format conforms to the predetermined format, the server 20 checks whether the membership information received together is in the membership database, and according to the membership information according to the checked information, Affiliation can be set.

In this case, the predetermined format may be related to a format that can only be generated according to a method in which the terminal 10 generates the belonging identifier in S100. For example, whether or not the belonging identifier has a predetermined size, whether the belonging identifier can be represented by a string of a predetermined constant size of m decimal numbers (where m is a multiple of 4) such as a UUID, etc. It may be, but is not limited thereto.

Unlike the third case, in the first case, the terminal 10 may transmit its own IP address in addition to the belonging identifier (hereinafter, referred to as “fourth case”). In this case, the server 20 may identify and set the belonging of the terminal 10 even if there is no corresponding information and the belonging information is not received from the terminal 10. That is, the server 20 may set the belonging of the terminal 10 by using the received IP address if the format of the belonging identifier received from the terminal 10 matches the predetermined format. For example, if the received belonging identifier type conforms to the predetermined format, the server 20 checks whether the received IP address exists in the belonging database, and then, according to the belonging information according to the checked information, Affiliation can be set.

Unlike the first case, there may be a case in which the terminal 10 fails to identify its own information in S100 and transmits its own IP address instead of the belonging identifier (hereinafter referred to as “the fifth case”). In this case, the server 20 may identify and set the belonging of the terminal 10 even though there is no corresponding information and does not receive the belonging identifier and belonging information from the terminal 10. That is, the server 20 may set affiliation of the terminal 10 by using the IP address received from the terminal 10. For example, the server 20 may check whether the received IP address exists in the belonging database, and then set the belonging of the corresponding terminal 10 according to the belonging information according to the checked information.

However, in the fourth case and the fifth case, it may be desirable for the server 20 to store information on an IP address of each organization or information on affiliation by IP address, and such information may be stored in an affiliate database. Information may be included. In particular, since public IP can be used by a plurality of affiliations, it may be desirable to use private IP together to distinguish it. That is, in the fourth case and the fifth case, the terminal 10 may transmit its own private IP address and public IP address to the server 20.

Meanwhile, in S200, the server 20 may set a security level, select at least two of the second to fifth cases according to the security level, and perform the belonging setting of the terminal 10 according to the selected case. have. In particular, when the security level is very high, in addition to the setting of belonging to the terminal 10 according to one of the second case to the fifth case, additionally, the setting of belonging to the terminal 10 may be possible only when the final approval of the administrator occurs. It may be implemented. That is, when the security level is high, the approval step is performed according to the security procedure, the organization of the terminal 10 may be set at the time of the final approval of the administrator. On the other hand, when the security level is low, the affiliation of the terminal 10 may be automatically set according to the affiliation setting of the terminal 10 according to any one of the second case to the fifth case. However, other cases than the fifth case may correspond to a high security level. Accordingly, it may be preferable that the belonging setting of the terminal 10 according to the fifth case is used when the security level is lower than in other cases.

In operation S200, the server 20 may register the belonging identifier while setting the belonging to the terminal 10. That is, in the first to fourth cases, since the terminal 10 transmits the belonging identifier, the corresponding belonging identifier may be stored in the belonging database as the belonging identifier for the terminal 10, but is not limited thereto. That is, the server 20 may generate and store another belonging identifier in addition to the received belonging identifier. In addition, in the fifth case, since the terminal 10 does not transmit the belonging identifier, the server 20 may separately generate the belonging identifier in the terminal 10 and store the belonging identifier in the belonging database.

S300 is a step of performing management for the registration terminal 10. That is, when the belonging setting for the terminal 10 is completed according to S200, the server 20 may manage the registered terminal 10 for each belonging by using the stored belonging identifier. For example, the management performed by the server 20 for the registration terminal 10 for each organization may include, but is not limited to, license management, software update management, policy management, or security management.

Specifically, the server 20 may request for the current state information of the registration terminal 10. For example, the current state information may be information related to a current state of hardware or software of the registration terminal 10. Thereafter, the server 20 may receive corresponding current state information from the registration terminal 10, and may transmit management information according to belonging of the registration terminal 10 to the terminal 10 with reference to this. For example, the management information may include updated license data, software data, policy data, security data, or the like, and the terminal 10 may update the received management information by reflecting it.

In particular, in S300, the server 20 may transmit various levels of management information to the registration terminal 10 according to which of the second to fifth cases the affiliation of the registration terminal 10 is set. That is, it corresponds to a case where the registration terminal 10 (second terminal) according to other cases has a higher security level than the registration terminal 10 (first terminal) according to the fifth case. Therefore, even if the first terminal and the second terminal belong to the same belonging, the server 20 may transmit the first management information for the first terminal and the second management information for the second terminal differently. For example, software data for a specific software update may not be transmitted to the first terminal, but may be transmitted to the second terminal.

On the other hand, the program according to an embodiment of the present invention is a program stored in a medium for belonging identification and management of the terminal 10 in the cloud environment according to the above-described method. For example, a program according to an embodiment of the present invention may be recorded in a recording medium readable by a computer or similar device.

For example, the recording medium may be a hard disk type, a magnetic media type, a compact disc read only memory (CD-ROM), an optical media type, a magnetic-optical medium Type (magneto-optical media type), multimedia card micro type, memory of the card type (eg SD or XD memory, etc.), flash memory type, ROM (read only memory); ROM, random access memory (RAM), or a combination of a memory composed of a memory, a main memory, or a secondary memory device, but is not limited thereto.

In addition, a program, an input device according to an embodiment of the present invention, a communication network such as the Internet, an intranet, a local area network (LAN), a wide area network (WLAN), or a storage area network (SAN), Or stored in an attachable storage device accessible via a communication network comprised of a combination thereof.

As described above, the present invention enables identification of affiliation of the terminal 10 and the software installed in the terminal 10 to access and communicate with a server in a cloud environment, and to manage the membership for the terminal and the software for which the organization is identified. There is a possible advantage.

In addition, the present invention does not require the direct intervention of the user and the administrator every time the setting of the terminal 10, not only can reduce the time required according to the setting of the terminal belonging to increase the convenience of the terminal belonging setting, the terminal belonging setting error There is an advantage that can be prevented.

In addition, according to the present invention, as the transmission information of various types of terminals 10 and the setting method of the server 20 are presented, there is an advantage that the belonging of the terminal 10 can be set by reflecting various security levels.

In the detailed description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined by the following claims and their equivalents.

10: terminal 20: server
11, 21: input unit 12, 22: storage unit
13, 23: communication unit 14, 24: display unit
15, 25: control unit 100: system

Claims (7)

A terminal that accesses a server and sets the affiliation of the terminal by using the information received from the terminal, and uses the set affiliation to manage management information about license management, software update management, or security management for each affiliation. A system in a cloud environment each including a server managing a registration terminal by transmitting to a (registration terminal),
The terminal,
Understand the device's own affiliation information from the information stored therein, if there is authentication information or additional information of the installed software, identify the affiliation information therefrom, and generate a hash of a certain size as the affiliation identifier using the identified affiliation information. However, if the membership information consists of a plurality of hierarchies, at least two hierarchies must be selected to include the lowest hierarchical layer to combine the membership information of the selected hierarchies, and the combination information is processed by a hash function to generate a membership identifier.
The server,
In a first case in which the terminal transmits the generated belonging identifier to the server, the belonging of the terminal is set using the belonging identifier received from the terminal.
In the second case in which the corresponding information including various belonging identifiers and the belonging information matched in the first case is stored in the first case, if the corresponding information corresponding to the belonging identifier received from the terminal is stored, the belonging information of the corresponding corresponding information is stored. Set the affiliation of the terminal using
In the first case, when the terminal transmits its own affiliation information identified to generate a corresponding affiliation identifier in addition to the affiliation identifier, if the format of the affiliation identifier received from the terminal conforms to the predetermined format, Set the belonging of the terminal by using the corresponding belonging information,
In the fourth case in which the terminal transmits its own private IP address and public IP address in addition to the belonging identifier, the private IP address received together if the format of the belonging identifier received from the terminal conforms to the predetermined format. And using the public IP address to set the belonging of the terminal,
Unlike the first case, when the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of its own identifier, the received private IP address and public IP address are used. Sets the affiliation of the terminal,
According to the security level, it is possible to select a terminal belonging setting method in any of the second case to the fifth case, but the fifth case is a lower level of security than the second case to the fourth case. Apply,
Even for the registered terminals belonging to the same belonging to the respective registered terminal different management information according to the security level at the time of setting the belonging,
The affiliation information includes a first hierarchy, which is information related to an organization or a company, and a second hierarchy, which is information related to a team, a department, or a group lower than the first hierarchy. delete delete The method of claim 1,
The server stores the membership identifier of the terminal to be displayed in the form of a string of m decimal number (where m is a multiple of 4) separated by a separator. By connecting to the server and transmitting the information, the server sets the terminal's own affiliation and uses the set affiliation to provide management information for license management, software update management, or security management for each affiliation (registration terminal). A terminal in a cloud environment that enables a registered terminal itself to be managed by transmitting to a terminal,
A storage unit for storing information; And
Understand the device's own information from the information stored in the storage, but if there is authentication information or additional information of the installed software, the information of the device is identified therefrom, and using the identified information, a hash of a certain size is generated as the device identifier. However, if the membership information consists of a plurality of hierarchies, at least two hierarchies must be selected to include the lowest hierarchical layer to combine the membership information of the selected hierarchies, and the combination information is processed by a hash function to generate a membership identifier. And a control unit which controls to transmit the generated belonging identifier to the server.
The server,
In a first case in which the terminal transmits the generated belonging identifier to the server, the belonging of the terminal is set using the belonging identifier received from the terminal.
In the second case in which the corresponding information including various belonging identifiers and the belonging information matched in the first case is stored in the first case, if the corresponding information corresponding to the belonging identifier received from the terminal is stored, the belonging information of the corresponding corresponding information is stored. Set the affiliation of the terminal using
In the first case, when the terminal transmits its own affiliation information identified to generate a corresponding affiliation identifier in addition to the affiliation identifier, if the format of the affiliation identifier received from the terminal conforms to the predetermined format, Set the belonging of the terminal by using the corresponding belonging information,
In the fourth case in which the terminal transmits its own private IP address and public IP address in addition to the belonging identifier, the private IP address received together if the format of the belonging identifier received from the terminal conforms to the predetermined format. And using the public IP address to set the belonging of the terminal,
Unlike the first case, when the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of the belonging identifier, using the received private IP address and public IP address Sets the affiliation of the terminal,
According to the security level, it is possible to select a terminal belonging setting method in any of the second case to the fifth case, but the fifth case is a lower level of security than the second case to the fourth case. Apply,
Even for the registered terminals belonging to the same belonging to the respective registered terminal different management information according to the security level at the time of setting the belonging,
The belonging information includes a first layer, which is information related to an organization or a company, and a second layer, which is information related to a team, a department, or a group, respectively. A terminal's affiliation is set using information received from a terminal connected to the terminal, and a terminal whose registered information is assigned management information about license management, software update management, or security management for each affiliation using the set affiliation (registration terminal). As a server in the cloud environment to manage the registration terminal by transmitting to),
Communication unit for communicating with the terminal; And
And a controller configured to control setting of belonging of the terminal when the belonging identifier is received in the communication unit.
The terminal,
Understand the device's own affiliation information from the information stored therein, if there is authentication information or additional information of the installed software, identify the affiliation information therefrom, and generate a hash of a certain size as the affiliation identifier using the identified affiliation information. However, if the membership information consists of a plurality of hierarchies, at least two hierarchies must be selected to include the lowest hierarchical layer to combine the membership information of the selected hierarchies, and the combination information is processed by a hash function to generate a membership identifier.
The control unit,
In a first case in which the terminal transmits the generated belonging identifier to the server, the terminal is controlled to set the belonging of the terminal by using the belonging identifier received from the terminal.
In the second case in which the corresponding information including various belonging identifiers and the belonging information matched in the first case is stored in the first case, if the corresponding information corresponding to the belonging identifier received from the terminal is stored, the belonging information of the corresponding corresponding information is stored. Use to control to set the belonging of the terminal,
In the first case, when the terminal transmits its own affiliation information identified to generate a corresponding affiliation identifier in addition to the affiliation identifier, if the format of the affiliation identifier received from the terminal conforms to the predetermined format, Control to set the belonging of the terminal by using the corresponding belonging information,
In the fourth case in which the terminal transmits its own private IP address and public IP address in addition to the belonging identifier, if the format of the belonging identifier received from the terminal conforms to the predetermined format, the received private IP address And control to set the belonging of the terminal by using a public IP address,
Unlike the first case, when the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of its own identifier, the received private IP address and public IP address are used. To control the belonging of the terminal,
According to the security level, it is possible to select a terminal belonging setting method in any of the second case to the fifth case, but the fifth case is a lower level of security than the second case to the fourth case. Control it,
Also, for the registered terminals belonging to the same belonging device, different management information is transmitted to the corresponding registered terminal according to the security level when setting the belonging.
The belonging information includes a first layer that is information related to an organization or a company, and a second layer that is information related to a team, a department, or a group. A method for identifying and managing affiliation of a terminal in a cloud environment of a terminal and a server,
A transmission step in which the terminal accesses the server and transmits information;
A setting step of setting affiliation of the terminal by using the information received from the terminal by the server; And
A management step of managing a registration terminal by transmitting management information for license management, software update management, or security management for each affiliation by using the affiliation set by the server to a terminal (registration terminal) whose affiliation is set;
The transmitting step,
The terminal understands the terminal's own information from the information stored therein.If there is authentication information or additional information of the installed software, the terminal identifies the belonging information therefrom and uses the identified belonging information to generate a hash of a certain size using the identified belonging information. If the membership information consists of a plurality of hierarchies, select at least two hierarchies to include the lowest hierarchical layer, combine the membership information of the selected hierarchies, and process the combination information as a hash function to generate a membership identifier. And transmitting the generated belonging identifier to the server.
The setting step,
In the first case in which the terminal transmits the generated belonging identifier to the server, the server sets the belonging of the terminal by using the belonging identifier received from the terminal.
In the second case in which the server stores corresponding information including various belonging identifiers and corresponding belonging information in the first case, if the corresponding information corresponding to the belonging identifier received from the terminal is stored by the server, Set the belonging of the terminal by using the belonging information,
In the third case in which the terminal transmits its own affiliation information which the terminal identifies in order to generate a corresponding affiliation identifier in addition to the affiliation identifier, if the format of the affiliation identifier received from the terminal conforms to the predetermined format, Set the belonging of the terminal by using the received belonging information,
In the fourth case in which the terminal transmits its own private IP address and public IP address in addition to the belonging identifier, the server receives the private if the format of the belonging identifier received from the terminal conforms to the predetermined format. Set the affiliation of the terminal by using an IP address and a public IP address,
Unlike the first case, when the terminal fails to grasp its own information and transmits its own private IP address and public IP address instead of its own identifier, the server receives the private IP address and public IP address received by the server. Setting affiliation of the terminal by using; And
According to the security level, it is possible to select a terminal belonging setting method in any of the second case to the fifth case, but the fifth case is a lower level of security than the second case to the fourth case. Applying;
The management step may include transmitting different management information to each registered terminal according to the security level at the time of setting the belonging to the registered terminals belonging to the same belonging,
The belonging information includes a first layer which is information related to an organization or a company, and a second layer which is information related to a team, a department or a group, respectively.

Images