KR100962390B1 - method for confirming security function applying state and applying terminal in security area - Google Patents

Abstract

A method of checking a security function application state of a terminal located in a security area and a security management apparatus for managing the same are disclosed. The method of checking the security function application status of a terminal located in a security area includes transmitting a security confirmation message for confirming the security function application status to a terminal located in the security area, and receiving a response message for the security confirmation message to secure the terminal. Check the terminal security function application status by checking the function application status.

According to the present invention, it is possible to check the security function application state of all the terminals located in the security area, and there is an advantage that the remote control can be applied so that the security function is applied to the terminal to which the security function is not applied.

Remote control, security function applied, USSD, DCS, security control

Description

{Method for confirming security function applying state and applying terminal in security area}

The present invention relates to a security function application state and a control method of the terminal, and more particularly, to check whether the security function of the terminal located in the security area is operating properly, and to apply the security function to the terminal is not applied security function It relates to a method of controlling to.

Unstructured Supplementary Services Data (USSD) is used as a means of transmitting information or specific commands from a GSM network. USSD is similar in that it uses signaling channel like SMS service, but USSD, unlike SMS service, is not stored and transmitted, but cancels communication path like data service. Document length of USSD can be up to 182 characters. Do.

USSD is defined in the GSM standards 02.90 (USSD Stage 1) and 03.90 (USSD Stage 2). In Stage 1, the initialization of the service is initiated from the terminal, and Stage 2 provides bidirectional.

Since USSD is not a store-and-forward method, the transmission speed is up to 7 times faster than the SMS service, and the user does not need to access a specific menu in order to use the USSD service. In addition, it is possible to implement by inputting simple USSD command. Since USSD command is sent to HLR (Home Location Register) of user's registered network, there is no change of USSD command in other network area, and USSD service is available in all existing terminals. As a result, it is possible to control the security function of the terminal located in the security area.

Recently, a lot of accidents leaking confidential documents and high technology of the company have occurred. These leaks result in large operating losses for companies, and if the technology is leaked abroad, it can be a huge loss nationally.

Therefore, in order to prevent this, efforts have been made to maintain security by restricting some functions of the terminal in the secure area. However, this only restricts certain functions of the terminal by the operation of the user or the security officer at the time of entering the security area, and prevents the user from randomly releasing the restricted function in the security area. There was a problem that it is not possible to determine whether this has been applied.

In order to solve this problem, conventionally, a security function is applied by controlling a terminal that enters a secure area through an LSI message. However, if the user does not artificially receive the LSI message, security settings cannot be made. .

Accordingly, the present invention for solving the above problems is to propose a method for checking whether the security function application state of the terminal located in the secure area is properly.

In addition, the present invention proposes a method for remotely controlling a security function to be applied to a terminal to which a security function of a terminal located in a secure area is not applied.

Other objects of the present invention will be readily understood through the description of the following examples.

In order to achieve the above object, according to an aspect of the present invention there is provided a method for the security management device to check the security function application state of the terminal located in the security area.

In the method for confirming the security function application state of the terminal located in the security area, the security management device according to an embodiment of the present invention, (a) security confirmation for confirming the security function application state to the terminal located in the security area; Sending a message; (b) receiving a response message to the security confirmation message; And (c) confirming a security function application state of the terminal by analyzing the received response message.

According to another aspect of the present invention, a method for applying a security function of a terminal located in a security area by a security management device is provided.

A method for applying a security function of a terminal located in a security area by a security management apparatus according to an embodiment of the present invention, the method comprising: (a) transmitting a security confirmation message for confirming a security function application state to a terminal located in the security area; ; (b) receiving a response message to the security confirmation message; And (c) confirming a security function application state of the terminal by analyzing the received response message; As a result of the checking in step (c), in the case of the terminal to which the security function is not applied, generating a security function application message and transmitting the generated security function application message to the terminal to which the security function is not applied. A method of applying a terminal security function is provided.

According to another aspect of the present invention, a security management apparatus for managing a security function application state of a terminal located in a security area is provided.

A security management apparatus for managing a security function application state of a terminal located in a security area according to an embodiment of the present invention, the security management message generating unit generating a security confirmation message for confirming the security function application state of the terminal; A transmitter for transmitting the generated security confirmation message to a terminal located in the security area; A receiving unit which receives a response message to the security confirmation message; And a controller configured to analyze the received response message, check a security function application state of the terminal, and output a result thereof.

As described above, the present invention has the advantage that the security function application state of all the terminals located in the security area can be confirmed.

In addition, the present invention has the advantage that it can be remotely controlled so that the security function is applied to the terminal is not applied to the security function of the terminal located in the security area.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

The terms first, second, A, B, etc. may be used to describe various components, but the components are not limited by the terms, and merely distinguish one component from another component. Used only for the purpose. For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, with reference to the accompanying drawings, it will be described in detail an embodiment of the present invention. Hereinafter, the same reference numerals are used for the same components in the drawings, and duplicate descriptions of the same components are omitted.

1 is a configuration diagram schematically showing a terminal and a security management apparatus located in a secure area according to an embodiment of the present invention.

The security area is an area that should be restricted so that a specific function of the terminal 150 does not operate, and the range and restriction function of the security area may be arbitrarily set on the operator side.

The security function application state refers to a state in which a specific function of the terminal 150 located in the security area is not performed. For example, a state in which the camera function of the terminal 150 is restricted so that a facility in the security area cannot be photographed. Indicates.

The security management apparatus 100 transmits a security confirmation message for confirming the security function application state of the terminal 150 to the terminal 150, and the terminal 150 receiving the security confirmation message has its own security function application state. Check and transmit to the security management device 100 again.

If the security management apparatus 100 is a device capable of transmitting and receiving messages with the terminal 150, the type thereof is irrelevant and may generally be a server.

In addition, the security management apparatus 100 generates a security function application message for a terminal whose security function is not properly operated as a result of confirming the security function application state of the terminal 150 and transmits it to the corresponding terminal.

The security function application message sent to the terminal may be analyzed in the terminal and controlled to operate the security function.

In particular, since the present invention transmits a security confirmation message using the USSD, it is possible to check the security function application state of all terminals located in the secure area, and also it is not possible to block the reception of a specific message by the user's operation. There is an advantage that can be confirmed.

A method of checking the security function application state of the terminal 150 through the security management device 100 in the security area and controlling the terminal in which the security function does not work properly will be described in detail below.

2 is a configuration diagram showing a detailed configuration of the security management apparatus 100 according to an embodiment of the present invention.

Referring to FIG. 2, the security management apparatus 100 may include a security confirmation message generator 210, a transmitter 220, a receiver 230, a security function application message generator 240, a controller 250, and the like. do.

The security confirmation message generator 210 generates a message for confirming the security function application state of the terminal 150 located in the secure area. The security confirmation message is a message in which a specific code for confirming the security function application state of the terminal 150 is inserted, and the type thereof is irrelevant.

According to an embodiment of the present invention, the security confirmation message generating unit 210 may generate the USSD. The USSD is used as a means for transmitting information or a specific command from the GSM network to support an operator defined service and an old terminal. The USSD may be input in a string form. At this time, the input string is standardized in GSM, and the string can be freely used. It is obvious to those skilled in the art of communication.

Since the USSD cannot be blocked from being received by the terminal 150, when the message is transmitted in the USSD form, the terminal 150 has no choice but to receive the corresponding message. Therefore, when the security confirmation message is generated in the USSD form, it is possible to check the security function application state of all the terminals 150 located in the security area.

The security confirmation message generating unit 210 may generate a security confirmation message including a data coding scheme (DCS: Data coding Scheme) for confirming the security function application state of the terminal 150. In particular, when the security confirmation message is generated in the form of USSD, the security confirmation message can be generated by processing the data coding schema included in the USSD.

For example, a data coding scheme for checking a security function application state may include a camera locking check scheme for checking whether a function of a camera mounted on the terminal 150 operates, and a video call function is blocked in the terminal 150. Video call restriction check schema for checking whether the recording function and the recording restriction check scheme for checking whether the recording function is blocked in the terminal 150, and the like. In addition, it will be apparent to those skilled in the art that a data coding scheme for checking the functional limitation of the terminal 150 necessary for security may be further included.

The transmitter 220 transmits the security confirmation message generated by the security confirmation message generator 210 to the terminal 150 located in the security area. In particular, when the security confirmation message is in the USSD form, the transmitter 220 may transmit the security confirmation message by registering the corresponding USSD in the terminal 150.

The receiver 230 receives a response message for the security confirmation message from the terminal 150. The response message refers to a message transmitted to the security management apparatus 100 by checking whether the security function is applied in the terminal 150 in response to the security confirmation message transmitted to the terminal 150.

The response message may be implemented in various ways. For example, a character inserting a specific field into the security confirmation message and confirming whether the security function is applied to the corresponding field in the terminal 150 receiving the security confirmation message It can be implemented in the form of inserting.

For convenience of understanding and explanation of the present invention, for example, when an empty field is inserted into the security confirmation message and transmitted to the terminal 150, the terminal 150 checks the security function application state to secure the security. If the function is applied, '1'. If the security function is not applied, '0' can be inserted into the blank field to generate the response message.

That is, in the above example, when a value of '1' is returned to a specific field as a result of analyzing the response message received from the security management apparatus 100, it may be determined that the corresponding security function is applied. When the value of '0' is returned, It can be determined that the security function is not applied.

Referring to FIG. 2, although the transmitter 220 and the receiver 230 are illustrated as separate components, it is obvious that each function may be performed in one configuration.

The security function application message generating unit 240 generates a security function application message for applying the security function of the terminal to which the security function is not applied among the terminals 150 located in the secure area.

The security function application message is a message in which a specific code is inserted to apply the security function of the terminal to which the security function is not applied.

According to an embodiment of the present invention, the security function application message generating unit 240 may generate the USSD. In the case of the USSD, it cannot be blocked from being received by the terminal 150 as described above. Therefore, when the security function application message is generated in the USSD form, the security function of all the terminals to which the security function is not applied may be applied.

In addition, the security function application message generator 240 may generate a security function application message including a data coding scheme (DCS) for applying a security function of a terminal to which the security function is not applied. In particular, when the security function application message is generated in the form of USSD, the data coding scheme included in the USSD may be processed to generate the security function application message.

For example, a data coding scheme for applying a security function of a terminal to which a security function is not applied may include a camera locking scheme for limiting a function of a camera mounted on a terminal, and an image for restricting a video call function in a terminal. Call restriction schemes and recording restriction schemes that limit recording capabilities in the terminal. In addition, it will be apparent to those skilled in the art that a data coding scheme for checking the functional limitation of the terminal 150 necessary for security may be further included.

The control unit 250 includes each component included in the security management apparatus 100 (for example, the security confirmation message generator 210, the transmitter 220, the receiver 230, and the security function application message generator 240). Generates and outputs a control signal for controlling

For example, the controller 250 may control the security confirmation message generating unit 210 to generate a security confirmation message for confirming the security function application state of the terminal 150. In particular, according to an embodiment of the present invention can be controlled to generate a security confirmation message in the form of USSD.

The controller 250 may control the transmitter 220 to transmit the security confirmation message to the terminal 150 located in the security area.

In addition, the controller 250 may control to output a result by analyzing a response message corresponding to the security confirmation message received by the receiver 230. The method of checking the security function application state of the terminal 150 by analyzing the response message may be changed in various ways. For example, the value of the security function application state of the terminal may be checked through a value included in a specific field of the response message. Can be.

For convenience of understanding and explanation of the present invention, for example, an empty field is inserted into the security confirmation message and transmitted to the terminal 150, and the terminal 150 receives the security function in the corresponding blank field. In this case, it is assumed that a response message is generated by inserting '1' when the security function is applied and inserting '0' when the security function is not applied.

In the above example, the control unit 250 may analyze the specific field of the response message and determine that the corresponding security function is applied when a value of '1' is returned. When the value of '0' is returned, the corresponding security function is not applied. I can judge that.

The controller 250 may generate a control signal for outputting the response message analysis result.

In addition, the controller 250 checks the security function application state of the terminal 150, and as a result, the security function application message generator 240 generates a security function application message for applying the security function to the terminal to which the security function has not been applied. Can be controlled. In particular, according to an embodiment of the present invention can be controlled to generate a security function application message in the form of USSD.

The controller 250 may control the transmitter 220 to transmit the security function application message generated by the security function application message generator 240 to a terminal to which the security function is not applied.

Referring to FIG. 2, the security confirmation message generator 210 and the security function application message generator 240 are represented as independent components. However, this is for convenience of explanation and may be one component.

3A and 3B are exemplary views illustrating an example of message configuration when a security confirmation message and a security function application message are implemented in a USSD form according to an embodiment of the present invention.

3A illustrates an example of configuration of a message when a security confirmation message is implemented in a USSD form according to an embodiment of the present invention.

The USSD is used as a means for transmitting information or a specific command from the GSM network to support an operator defined service and an old terminal. The USSD may be input in a string form. At this time, the input string is standardized in GSM, and the contents of the string are freely available. It is obvious to those skilled in the art of communication.

When the security confirmation message is configured in the USSD form, the security confirmation message may be configured by editing a string of the USSD, and in particular, the security confirmation message may be configured by processing a data coding schema (DCS).

The security confirmation message is a message for confirming whether a function that may compromise security among the functions of the terminal 150 located in the security area is limited as described above.

In order to maintain security, various functions of the terminal may be limited, and some of the functions will be described by way of example. In addition, it is assumed that the security confirmation message is configured in the form of USSD by processing the data coding schema (DSC).

First of all, in the security area, the structure of the building and the internal facilities should be prohibited, so the function of the camera mounted on the terminal 150 should be locked. In other words, the camera must be locked and the security confirmation message confirming this state will be referred to as a camera locking confirmation scheme.

In addition, video calls should be restricted in secure areas. That is, the video call function of the terminal 150 should be restricted in the secure area. A security confirmation message for confirming this state will be referred to as a video call restriction confirmation scheme.

As another example, since the internal voice should not be recorded in the secure area, the recording function of the terminal 150 should be limited. A security confirmation message for confirming this state will be referred to as a recording restriction confirmation scheme.

In addition, there are various examples of terminal functions to be restricted in a secure area, and it is easy for a person skilled in the art to change them. In addition, the camera locking confirmation schema, the video call restriction confirmation schema, and the recording restriction confirmation schema are examples of security confirmation messages, and names may be easily changed and used.

In addition, blank fields 310, 320, and 330 may be inserted into the security confirmation message. The blank field is for checking whether the security function is applied to the corresponding field by checking the security function application state in the terminal 150.

As described above with reference to FIG. 2, when the security function is applied to the terminal 150, a response message is generated by inserting '1' when the security function is applied and inserting '0' in the blank field when the security function is not applied. Assume that

In the example of FIG. 3A, since the value corresponding to the camera locking confirmation schema of the response message is '0', it can be seen that the camera function of the terminal 150 is not locked.

Figure 3b shows an example of the configuration of the message when the security function application message is implemented in the USSD form according to an embodiment of the present invention.

Since the security function application message is also identical in configuration to the security confirmation message described with reference to FIG. 3A, a detailed description will be omitted.

However, unlike the security confirmation message, the security function application message does not need to include the blank fields 310, 320, and 330.

The security function application message is a message for applying a security function of a terminal not applied with a security function located in a security area, and may be, for example, a camera locking schema, a video call restriction schema, a recording restriction schema, or the like.

In the example of FIG. 3A, when only the value corresponding to the camera locking confirmation schema is '0' in the response message, the security management apparatus 100 generates a security function application message including a camera locking scheme for restricting the camera function to the corresponding terminal. send. That is, a message for locking the camera of the terminal is generated and transmitted to the terminal.

4 is a flowchart illustrating a process of confirming a security function application state of a terminal and applying a security function of a terminal to which the security function is not applied in the security management apparatus according to an embodiment of the present invention.

In FIG. 4, a security function application state check and a security function application process will be described along with the example of FIG. 3A for the convenience of understanding and explanation of the invention.

First, the security management device 100 generates a security confirmation message for confirming the security function application state of the terminal located in the security area (step S410). The security confirmation message may be generated in a USSD form, and in this case, it may include a data coding schema (DCS), so the detailed description thereof will be omitted.

Thereafter, the process proceeds to step S420 and transmits the security confirmation message generated in step S410 to the terminal 150 located in the secure area.

Upon receiving the security confirmation message, the terminal 150 confirms its security function application state according to the security confirmation message (step S430). In particular, when a security message is received in the USSD form, the terminal 150 cannot deny the reception by an operation, and thus the terminal 150 can check the security function application state of all terminals located in the secure area.

Thereafter, the terminal 150 checks its security function application state and then transmits a response message to the security management device 100 (step S440). Since the configuration of the response message has been described with reference to FIG. 3A, a detailed description thereof will be omitted.

For example, if it is determined in step S430 that the security function is applied, if the camera function of the terminal 150 is not limited, the message may be included in the response message indicating that the camera locking function is not limited and transmitted to the security management apparatus 100. .

In operation S450, the security management apparatus 100 may determine whether the security function of the terminal 150 is applied by analyzing the response message received from the terminal 150. If the security function is applied as a result of the determination in step S450, the process of applying the security function is terminated.

On the other hand, when the security function of the terminal is not applied as a result of the determination in step S450, a security function application message is generated to apply the security function of the terminal that is not applied to the security function (step S460) and the security function application message is transmitted to the terminal. Transfer (step S470).

After receiving the security function application message, the terminal 150 performs a process of applying the security function according to the contents included in the security function application message (step S480).

The security management apparatus 100 may check the security function application state of the terminal 150 located in the secure area remotely by transmitting a security confirmation message to the terminal 150. As a result of the check, the terminal does not have the security function applied to the security area. If it is found that it can be controlled to apply the security function of the terminal remotely by sending a security function application message to the terminal, there is an advantage that can effectively manage the security function application of the terminal 150 in a secure area have.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art that various modifications of the present invention without departing from the spirit and scope of the invention described in the claims below And can be changed.

1 is a block diagram schematically illustrating a terminal and a security management apparatus located in a secure area according to an embodiment of the present invention.

2 is a configuration diagram showing a detailed configuration of the security management device 100 according to an embodiment of the present invention.

Figure 3a is an exemplary view showing an example of the message configuration when the security confirmation message is implemented in the USSD form according to an embodiment of the present invention.

Figure 3b is an exemplary view showing an example of the message configuration when the security function application message is implemented in the USSD form according to an embodiment of the present invention.

4 is a flowchart illustrating a process of confirming a security function application state of a terminal and applying a security function of a terminal to which the security function application state is not applied in the security management apparatus according to an embodiment of the present invention.

Claims (15)

In the method of the security management device to check the security function application state of the terminal located in the security area, (a) transmitting a security confirmation message of Unstructured Supplementary Services Data (USSD) including a Data Coding Scheme (DCS) to confirm a security function application state to a terminal located in the secure area; (b) receiving a response message to the security confirmation message; And (c) analyzing the received response message to confirm a security function application state of the terminal; As a result of confirming step (c), In the case of the terminal does not apply the security function, And generating a security function application message and transmitting the generated security function application message to a terminal to which the security function has not been applied. delete delete The method of claim 1, The data coding scheme is, The camera locking confirmation scheme for determining whether the camera function of the terminal is limited, the video call restriction confirmation schema for determining whether the video call is restricted, and the recording restriction confirmation schema for determining whether the recording function is restricted Method for checking the terminal security function application status, characterized in that it comprises one or more. The method of claim 1, The data coding scheme is, Method for checking the terminal security function application status, characterized in that determined by a specific bit. delete A security management apparatus for managing a security function application state of a terminal located in a security area, A security confirmation message generation unit for generating a security confirmation message of Unstructured Supplementary Services Data (USSD) including a data coding scheme (DCS: Data Coding Scheme) for confirming a security function application state of the terminal; A transmitter for transmitting the generated security confirmation message to a terminal located in the security area; A receiving unit which receives a response message to the security confirmation message; A controller configured to analyze the received response message, check a security function application state of the terminal, and output a result; And And a security function application message generator configured to generate a security function application message for applying the security function of the terminal to which the security function is not applied when the security function of the terminal is not applied as a result of the determination by the controller. delete delete The method of claim 7, wherein The data coding scheme is, And at least one of a camera locking confirmation schema, a video call restriction confirmation schema, and a recording restriction confirmation schema. delete The method of claim 7, wherein The transmitting unit, And a security function application message generated by the security function application message generator to the terminal. The method of claim 7, wherein The security function application message, Security management device, characterized in that the USSD (Unstructured Supplementary Services Data). The method of claim 7, wherein The security function application message, And a data coding scheme (DCS: Data Coding Scheme) for applying a security function to the terminal. The method of claim 14, The data coding scheme is, And at least one of a camera locking schema, a video call restriction schema, and a recording restriction schema.

Images