KR20220083499A - Method of Asset management using QR code - Google Patents

Abstract

In the asset management method using a QR code performed by a server connected to the first and second terminals through a network, the server receiving the asset code for each asset owned by the company from the first terminal, the server Receiving the asset information for the asset from the first terminal, the server generating a QR code for the asset to which the asset code is given, the server connecting through the QR code from the second terminal Asset management method using a QR code comprising the step of receiving a request and the step of the server providing the asset information to the second terminal. A method of asset management using QR codes.

Description

Method of Asset management using QR code

The present invention relates to an asset management method using a QR code, and more particularly, a QR code that can be used to immediately check and manage registration, change, and disposal of information assets owned by a company by various means using the QR code. It relates to an asset management method using

Recently, the importance of compliance is increasing day by day as corporate businesses diversify and the amount of information that companies need to handle explodes. Compliance refers to a series of activities that control and supervise the company's executives and employees in advance or on a regular basis to comply with all laws and regulations. can be seen in meaning.

Accurate compliance with such compliance can generally be confirmed through a wide range of activities, including asset management and operations, and investigations and audits. Auditors should check on a per-asset basis whether the information assets held by the company are in compliance with a set of compliances. At this time, the auditor or internal manager is cumbersome, such as having to check various documents or access a specific system to search the history of the information asset to check whether the information asset complies with compliance. In addition, it is inconvenient for the manager of information assets to check the documents or systems related to the management history in order to check whether the information asset has any weaknesses and risk levels and related protection measures, or the importance of the information asset. .

Therefore, while managing multiple information assets owned by a company in an integrated way, the management history and vulnerability risk assessment and protection measures of the information assets There is a need for an asset management method that can immediately check information, etc. on site.

Republic of Korea Patent No. 2123112 (Title of Invention: Hospital Asset Management System and Method, Publication Date: 2020.06.15)

The problem to be solved by the present invention is an asset management method using a QR code that allows you to check the management history, vulnerability information, risk assessment history, etc. is to provide

In the asset management method using the QR code of the present invention for solving the above problems, the asset management method using the QR code is performed by a server connected to the first and second terminals through a network, the server is the first Receiving an asset code for each asset owned by the company from a terminal, the server receiving asset information about the asset from the first terminal, the server generating a QR code for the asset to which the asset code is assigned Step, the server receiving a request for connection through the QR code from the second terminal, and the server providing the asset information to the second terminal Asset management method using a QR code comprising a. A method of asset management using QR codes.

In an asset management method using a QR code according to an embodiment of the present invention, the asset information is an asset management method using a QR code including information about a department responsible for the asset, a person in charge, a manager, or an external maintenance personnel. can

In the asset management method using a QR code according to an embodiment of the present invention, the asset information includes an asset importance evaluation value that quantitatively evaluates the asset importance according to confidentiality, integrity or availability of the asset. It could be an asset management method.

In the asset management method using a QR code according to an embodiment of the present invention, the asset information is a QR code including information on the result of vulnerability analysis for the asset, whether or not to approve the risk assessment or the execution schedule of the risk assessment It may be an asset management method used.

In the asset management method using a QR code according to an embodiment of the present invention, the asset information may be an asset management method using a QR code including information about a person performing the vulnerability analysis or the risk assessment.

The asset management method using a QR code according to an embodiment of the present invention may be an asset management method using a QR code further comprising the step of the server confirming the access authority of the second terminal.

In the asset management method using a QR code according to an embodiment of the present invention, the server may be an asset management method using a QR code that allows access only to the second terminal connected to a predetermined network.

In the asset management method using a QR code according to an embodiment of the present invention, the server may be an asset management method using a QR code that allows access only to the predetermined second terminal.

The asset management method using a QR code according to an embodiment of the present invention may be an asset management method using a QR code in which the server allows access of the second terminal only within a predetermined time range.

The asset management method using a QR code according to an embodiment of the present invention may be an asset management method using a QR code in which the server allows access only to the second terminal located in a predetermined place.

The asset management method using a QR code according to an embodiment of the present invention further includes the step of receiving, by the server, measures for the asset from the second terminal, and providing the measures to the first terminal It may be an asset management method using a QR code.

In the asset management method using a QR code according to an embodiment of the present invention, it is possible to check the management history, vulnerability information, risk assessment history, etc. there is an effect

Effects according to the embodiments of the present invention are not limited by the contents exemplified above, and more various effects are included in the present specification.

1 is a conceptual diagram illustrating a server performing an asset management method using a QR code according to an embodiment of the present invention, a network connected to the server, a first terminal, and a second terminal.
2 is a flowchart of an asset management method using a QR code according to an embodiment of the present invention.
3 is a view showing that the second terminal according to an embodiment of the present invention recognizes the QR code attached to the asset.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. In describing the present invention, if it is determined that adding a detailed description of a technique or configuration already known in the field may make the gist of the present invention unclear, some of it will be omitted from the detailed description. In addition, the terms used in this specification are terms used to properly express embodiments of the present invention, which may vary according to a person or custom in the relevant field. Accordingly, definitions of these terms should be made based on the content throughout this specification.

The terminology used herein is for the purpose of referring to specific embodiments only, and is not intended to limit the invention. As used herein, the singular forms also include the plural forms unless the phrases clearly indicate the opposite. As used herein, the meaning of 'comprising' specifies a particular characteristic, region, integer, step, operation, element and/or component, and other specific characteristic, region, integer, step, operation, element, component, and/or group. It does not exclude the existence or addition of

In the present specification, the communication method of the network is not limited, and the connection between each component may not be connected in the same network method. The network may include not only a communication method using a communication network (eg, a mobile communication network, a wired Internet, a wireless Internet, a broadcasting network, a satellite network, etc.) but also short-range wireless communication between devices. For example, the network may include all communication methods through which an object and an object can network, and is not limited to wired communication, wireless communication, 3G, 4G, 5G, or other methods. For example, a wired and/or network may be a Local Area Network (LAN), a Metropolitan Area Network (MAN), a Global System for Mobile Network (GSM), an Enhanced Data GSM Environment (EDGE), a High Speed Downlink Packet Access (HSDPA), W-CDMA (Wideband Code Division Multiple Access), CDMA (Code Division Multiple Access), TDMA (Time Division Multiple Access), Bluetooth, Zigbee, Wi-Fi, VoIP (Voice over) Internet Protocol), LTE Advanced, IEEE802.16m, WirelessMAN-Advanced, HSPA+, 3GPP Long Term Evolution (LTE), Mobile WiMAX (IEEE 802.16e), UMB (formerly EV-DO Rev. C), Flash-OFDM, iBurst and MBWA (IEEE 802.20) systems, HIPERMAN, Beam-Division Multiple Access (BDMA), Wi-MAX (World Interoperability for Microwave Access), and one or more communication methods selected from the group consisting of ultrasound-based communication can refer to a communication network by However, the present invention is not limited thereto.

Hereinafter, an asset management method using a QR code according to an embodiment of the present invention will be described with reference to the accompanying FIGS. 1 to 3 .

In the asset management method using a QR code according to an embodiment of the present invention, information on various assets 50 stored by the server 20 is provided to a terminal accessing through the QR code 60 to provide corporate assets ( 50) is a way to manage it. Here, the asset 50 refers to a tangible asset owned by a company, and in particular, may refer to an asset subject to internal regulations of the company, domestic and foreign certification, audit, and the like. Information on the asset 50 may mean information on management and operation personnel for the asset 50, asset importance evaluation value, vulnerability analysis result information, etc., and through this information, registration and change of the asset 50 , it is possible to manage and check the overall information related to the management of the asset 50, such as disposal.

1 is a network 10, a first terminal 30, and a second terminal 40 connected to a server 20 and the server 20 for performing an asset management method using a QR code according to an embodiment of the present invention. ) is a conceptual diagram showing

The server 20 may identify the asset 50 through the asset code for each of the assets 50 owned by the company, and may store asset information about the asset 50 . The server 20 may generate a unique QR code 60 for each asset 50 , and may provide asset information about the asset 50 to a terminal connected through the QR code 60 .

The first terminal 30 may receive asset information about the assets 50 owned by the company. The first terminal 30 transmits the received asset information on the asset 50 to the server 20 .

The second terminal 40 may connect to the server 20 by recognizing the QR code 60 associated with the asset 50 . The second terminal 40 may receive asset information on the corresponding asset 50 through the server 20 .

The first terminal 30 and the second terminal 40 may be communicatively connected to the server 20 through the network 10 to transmit/receive data. In this case, the first terminal 30 and the second terminal 40 may include, but are not limited to, a smartphone, a mobile phone, a notebook computer, a tablet PC, a PC, and a workstation.

Hereinafter, an asset management method using a QR code according to an embodiment of the present invention will be described according to each step with reference to FIGS. 2 and 3 .

Referring to FIG. 2 , in the asset management method using a QR code according to an embodiment of the present invention, the server 20 receives the asset code for each asset 50 owned by the company from the first terminal 30 ( S100 ). ), the server 20 receiving the asset information about the asset 50 from the first terminal 30 (S110), the server 20 generating the QR code 60 for the asset 50 (S120), the step of the server 20 outputting the generated QR code 60 (S130), the server 20 receiving a request for connection through the QR code 60 from the second terminal 40 (S140) ), the server 20 confirming the access authority of the second terminal 40 (S150), the server 20 providing the asset information on the asset 50 to the second terminal 40 (S160) ), the server 20 receiving the measures for the asset 50 from the second terminal 40 (S170) and the server 20 providing the received measures to the first terminal 30 (S180).

Each of the above-described steps may be performed irrespective of the listed order, except when performed in the listed order due to a special causal relationship. However, hereinafter, for convenience of description, it is assumed that each of the above-described steps is performed according to the listed order.

First, the server 20 receives the asset code for each asset 50 owned by the company from the first terminal 30 (S100). A person in charge or a manager for the assets 50 of the company may input an asset code for each asset 50 through the first terminal 30 . The asset code is a code for identifying the asset 50 , and a unique asset code is assigned to each asset 50 . The person in charge or the manager of the asset 50 may input an asset code for each asset 50 through a web service or application provided by the first terminal 30 . The input asset code is transmitted to the server 20 through the network 10 . Through this procedure, the person in charge or the manager of the asset 50 may register the asset 50 owned by the company in the server 20 so that it can be identified.

The asset code may be generated by the server 20 itself. That is, when the person in charge or the manager of the asset 50 wants to register with the server 20 for a specific asset 50 , the server 20 generates an asset code for the asset 50 and the first terminal 30 . can be provided to The asset code received through the first terminal 30 or the asset code generated by the server 20 is stored in the storage medium of the server 20 .

Next, the server 20 receives the asset information about the asset 50 from the first terminal 30 (S110). The person in charge or manager of the asset 50 may input asset information about the asset 50 through the first terminal 30 , and the first terminal 30 transmits the asset information to the server ( 20) can be transmitted.

Here, the asset information received by the first terminal 30 may include information about a department responsible for the asset 50 , a person in charge, a manager, or an external maintenance manpower. For the asset 50 owned by the company, a department responsible for the asset 50, a person in charge, or a manager may be designated. This is to check the audit response for the asset 50 , compliance with internal regulations, etc., or to clarify the subject of management responsibility for the asset 50 . Also, in some cases, the asset 50 may be an asset 50 that is maintained by an external maintenance manpower. For example, network equipment such as routers and switches owned by a company requires professional maintenance and can be managed by external maintenance personnel. By storing the information on the operation or management personnel for the assets 50 owned by the company in the server 20 , the corresponding contents can be immediately checked in the second terminal 40 as will be described later.

The asset information may include an asset importance evaluation value obtained by quantitatively evaluating asset importance according to confidentiality, integrity, or availability of the asset 50 . The asset importance evaluation value may refer to a value that the manager quantitatively evaluates the importance of a specific asset 50 according to security attributes such as confidentiality, integrity, availability, the scale of damage in an intrusion accident, or the failure recovery target time. By storing the asset importance evaluation value in the server 20 in this way, it is possible to immediately check the asset importance evaluation value for the specific asset 50 in the second terminal 40 as will be described later.

The asset information may include information on a vulnerability analysis result for the asset 50 , whether or not a risk assessment is approved, or a schedule for performing a risk assessment. The vulnerability analysis result refers to a result of identifying and quantifying whether the information asset 50 has administrative, technical or environmental vulnerabilities. Risk assessment refers to effective risk management through cost-effectiveness analysis of security measures against losses that may occur in the assets 50 owned by the company. By storing the vulnerability analysis result, risk assessment approval, and risk assessment execution schedule in the server 20 in this way, the vulnerability analysis result for a specific asset 50 in the second terminal 40, risk assessment approval, and You can check the risk assessment schedule immediately.

Asset information may include information on personnel performing vulnerability analysis or risk assessment. In other words, asset information includes information on which personnel performed vulnerability analysis or risk assessment performed by internal or external personnel of the company in the past. By storing the vulnerability analysis manpower and the risk assessment execution manpower in the server 20 in this way, the manpower who performed the vulnerability analysis or risk assessment on the specific asset 50 in the second terminal 40 can be immediately confirmed as will be described later.

The server 20 generates a QR code 60 for the asset 50 (S120). The server 20 may generate a QR code 60 for the asset 50 in which the asset information is input. Here, the generated QR code 60 is a unique code for a specific asset 50 and is individually generated for each asset 50 . The QR code 60 may provide access information for any terminal to request information about the asset 50 from the server 20 .

After generating the QR code 60, the server 20 outputs the generated QR code 60 (S130). The server 20 may transmit the QR code 60 to any terminal connected to the server 20 . The first terminal 30 may receive information about the QR code 60 from the server 20 . In this case, the person in charge or the manager for the specific asset 50 may output the received QR code 60 through a print medium such as a printer. 3 shows that the printed QR code 60 paper is attached to the asset 50 . The attached QR code 60 can be recognized by the second terminal 40 . The second terminal 40 may access the server 20 through the QR code 60 to receive asset information about the asset 50 to which the QR code 60 is attached.

The server 20 may receive a request for access through the QR code 60 from the second terminal 40 (S140). As described above, the second terminal 40 can recognize the QR code 60 attached to the specific asset 50 , and when the QR code 60 is recognized, the second terminal 40 is connected to the server 20 . try to connect

Thereafter, the server 20 checks the access authority of the second terminal 40 (S150). The information provided by the server 20 to the second terminal 40 is information whose outflow is restricted to the outside. For example, since the vulnerability analysis result includes vulnerability information on the assets 50 of the corresponding company, if provided to an unauthorized third party, there is a risk of causing enormous damage to the company. Therefore, it is necessary to provide limited asset information only to authorized personnel. Accordingly, by checking the access authority of the second terminal 40 and blocking the access, it is possible to prevent the asset information on the asset 50 from being leaked to the outside.

The authority for the second terminal 40 to access the server 20 may be set by various methods. First, the server 20 may allow access only to the second terminal 40 connected to the predetermined network 10 . For example, the server 20 may allow access only to the second terminal 40 connected to a network configured by network equipment owned by the company. These networks generally refer to internal networks formed by the same router, switch, or router. Since such an internal network allows access only to terminals to which access is permitted through a password or the like, the server 20 can provide asset information only to the restricted second terminal 40 .

Second, the server 20 may allow access only to the predetermined second terminal 40 . A person in charge of information protection of a company may store information about at least one second terminal 40 that can access the server 20 through the QR code 60 in the server 20 . The server 20 may block access or may not provide asset information when other terminals other than the stored terminal request access.

Third, the server 20 may allow access of the second terminal 40 only within a predetermined time range. In some cases, the asset information may be provided to an auditor who performs an audit on the assets 50 of the company, and the audit is generally performed only at a certain time. Accordingly, the person in charge of information protection of the company may determine a time for which the audit is performed and store it in the server 20 , and the server 20 may allow access to the second terminal 40 only at the corresponding time.

Fourth, the server 20 may allow access only to the second terminal 40 located in a predetermined place. The second terminal 40 may transmit geographic information through a global positioning system (GPS) or geographic information through an Internet protocol (IP) address to the server 20 . The server 20 may check whether the second terminal 40 is located in a predetermined place through the corresponding geographic information. For example, the predetermined place may mean a place where the corresponding asset 50 is geographically located. Through this, when the asset 50 is taken out, the access of an unspecified terminal trying to access the server 20 through the QR code 60 can be blocked.

The server 20 provides asset information on the asset 50 to the second terminal 40 requesting access (S160). The second terminal 40 displays the asset information provided from the server 20 through an output means so that the person in charge, manager, or auditor of the asset 50 can check it.

An auditor who has confirmed the asset information may suggest or recommend measures for vulnerabilities, etc. for the asset 50 . For example, if the auditor has checked asset information through the second terminal 40 for a specific asset 50, but the asset 50 has not performed a risk assessment, it is suggested or recommended to perform a risk assessment. can do. These measures may be input through the second terminal 40 , and the second terminal 40 may transmit the measures to the server 20 .

The server 20 may receive measures for the asset 50 from the second terminal 40 (S170). The received action may be stored in the server 20 and may be added to asset information for the corresponding asset 50 .

The server 20 may provide the received measures to the first terminal 30 (S180). Through this, the person in charge or the manager of the asset 50 may check the measures suggested by the auditor or the like to supplement the weakness of the asset 50 .

The technical features disclosed in each embodiment of the present invention are not limited only to the embodiment, and unless they are mutually incompatible, the technical features disclosed in each embodiment may be combined and applied to different embodiments.

In the above, embodiments of the asset management method using the QR code of the present invention have been described. The present invention is not limited to the above-described embodiments and the accompanying drawings, and various modifications and variations will be possible from the point of view of those of ordinary skill in the art to which the present invention pertains. Accordingly, the scope of the present invention should be defined not only by the claims of the present specification, but also by those claims and their equivalents.

10: Network
20: server
30: first terminal
40: second terminal
50: asset
60: QR code

Claims (11)

In the asset management method using a QR code performed by a server connected to the first and second terminals through a network,
receiving, by the server, an asset code for each asset owned by the company from the first terminal;
receiving, by the server, asset information on the asset from the first terminal;
generating, by the server, a QR code for the asset to which the asset code is granted;
receiving, by the server, a request for access through the QR code from the second terminal; and
providing, by the server, the asset information to the second terminal;
Asset management method using a QR code that includes. According to claim 1,
The asset information is an asset management method using a QR code that includes information about a department responsible for the asset, a person in charge, a manager, or an external maintenance person. According to claim 1,
The asset information is an asset management method using a QR code that includes an asset importance evaluation value that quantitatively evaluates the asset importance according to confidentiality, integrity or availability of the asset. According to claim 1,
The asset information is an asset management method using a QR code that includes information about the result of vulnerability analysis for the asset, whether the risk assessment is approved or not, or information on the execution schedule of the risk assessment. 5. The method of claim 4,
The asset information is an asset management method using a QR code that includes information about personnel performing the vulnerability analysis or risk assessment. According to claim 1,
Asset management method using a QR code further comprising the step of the server confirming the access authority of the second terminal. 7. The method of claim 6,
The server is an asset management method using a QR code that allows access only to the second terminal connected to a predetermined network. 7. The method of claim 6,
The server is an asset management method using a QR code that allows access only to the predetermined second terminal. 7. The method of claim 6,
The server is an asset management method using a QR code that allows access of the second terminal only in a predetermined time range. 7. The method of claim 6,
The server is an asset management method using a QR code that allows access only to the second terminal located in a predetermined place. According to claim 1,
Asset management method using a QR code further comprising the step of the server receiving the measures for the asset from the second terminal, and providing the measures to the first terminal.

Images