KR100999087B1 - Security Domain Service System and Method thereof - Google Patents

Abstract

The present invention relates to a security domain service system and a method thereof, wherein the security domain is set up through predetermined network devices operating on a home network to provide security services in units of domains. Its main purpose is to provide security services in the domain concept.

To this end, the security domain service system according to the present invention establishes a security domain through a plurality of network devices connected to and operated on a home network, predetermined control devices and controlled devices among the network devices, and secures the security domain by unit. It includes a predetermined security control device that performs management, and has the effect of providing a user with a more user-friendly security service through security management through a group of predetermined network devices.

Security services, domain, system

Description

Security domain service system and method thereof

1, a, b and c schematically illustrate a security service structure in a conventional network system.

2 schematically illustrates a structure of a security service system including a security control device according to an embodiment of the present invention.

3 schematically illustrates a structure of a security control apparatus according to an embodiment of the present invention.

4 schematically illustrates security domain information set in a domain management module of a security control apparatus according to an embodiment of the present invention.

5, a and b schematically illustrate a security domain configuration structure according to an embodiment of the present invention.

6A and 6B schematically illustrate a domain protocol structure according to an embodiment of the present invention.

7A to 7C schematically illustrate a domain structure according to another embodiment of the present invention.

8 schematically illustrates a domain protocol structure for ownership transfer according to another embodiment of the present invention.

9 schematically illustrates a security domain service process according to an embodiment of the present invention.

10 schematically illustrates a security domain service process from a user perspective according to an embodiment of the present invention.

FIG. 11 schematically illustrates a process of a security control device according to the user request of FIG. 10.

12a to 12b schematically illustrate a security domain service process according to an embodiment of the present invention.

13a and 13b schematically illustrate a security domain service process according to another embodiment of the present invention.

14a and 14b schematically illustrate a security domain service process according to another embodiment of the present invention.

15 schematically illustrates a domain structure composed of a plurality of security domains according to another embodiment of the present invention.

16A to 16C schematically illustrate a security domain configured as a plurality of security control devices according to another embodiment of the present invention.

<Explanation of symbols on main parts of the drawings>

100 (110, 130): security control unit (SC)

111: Domain Management Module 113: Networking Module                 

115: security service module 117: user management module

119: Security Key Management Module

300 (310, 330, 350, 370): controlled device (CD)

500 (510, 530): control unit (CP)

The present invention relates to a security domain service system and a method thereof, and in particular, by setting a security domain through predetermined network devices operating on a home network to provide security services in units of domains, a user groups a predetermined network device through a domain. Security management is possible.

In general, various network devices in a private network based on the Internet Protocol (hereinafter, referred to as IP) provide various applications on a common virtual computing environment built through middleware.

Middleware is a device that connects various network devices in a peer-to-peer manner to enable communication between network devices, including Home AV Interoperability (HAVI), Universal Plug and Play Control Device (UPnP), Jini (Java Intelligent Network Infrastructure), LonWorks, and others have been proposed to date.

Through such middleware, each network device is connected to a virtual computing environment to provide users with various services according to application characteristics of the network device.

That is, the user may refer to each network device (hereinafter referred to as Controlled Device (CD)) through a network device capable of controlling a predetermined network device (hereinafter referred to as Control Device (CP)). Use a variety of services provided).

In order to provide a secure service, a controlled service (CD) of such a home network requires a security service that provides a service only to a predetermined designated control device (CP).

Accordingly, a predetermined security service method is provided, and a security service in a conventional home network system manages a CP accessible through a predetermined access control list (hereinafter, referred to as an ACL) for security and access control. It consists of a Device Security Service (CD) implemented in the CD and a Security Console Service (Security Console Service) implemented in the Security Console (SC) that allows ACL editing by accessing the CD.

That is, as shown in FIG. 1A, in order to receive a service from a predetermined CD through a CP capable of performing a security service, information about the CD 10 and the CP 30 (eg, a device) may be used. Name, IP information, security information, and the like) are registered in the SC 50 capable of ACL editing of the CD 10 (a).

Then, the SC 50 edits the ACL of the CD 10 to allow access of the CD 10 of the CP 30 through the registered CD 10 and the CP 30 (b).

As such, when ACL editing of the CD 10 is completed through the SC 50, the CP 30 transmits a message requesting a predetermined service to the CD 10, and the CD 10 transmits a message through the ACL. After determining whether to allow the access (30), and transmits a response message (c).

Through this process, the CD 10 and the CP 30 perform a networking operation according to a security service.

When such a security service is applied to a home network composed of a plurality of CDs and CPs, as shown in b of FIG. 1, the SC 50 accesses a predetermined CD capable of ACL editing according to a user's request, Register CP1 or CP2 to allow access to the ACL.

Accordingly, the user can use the service of the CD only through the CP registered in the ACL of each CD by the security service to allow only the access of the registered CP.

If the user wants to use the services of the CD1 (11) and the CD5 (15), the user transmits a predetermined message to the CD1 (11) through the CP2 (33), receives the service, and uses the CP1 (31) There was an inconvenience to receive a service by transmitting a predetermined message to the CD5 (15).

That is, as shown in c of FIG. 1, in the existing security service, the user could use the service as a set A of CPs accessible to the CD1 11 on the basis of the CD1 11.

That is, the service provided from the CD1 11 is accessed by accessing the CD1 11 through the CP1 31, the CP2 32, the CP3 33, etc. according to the set A of the CPs accessible to the CD1 11. In order to use the services provided from the CD2 12 and the CD3 13, a predetermined CP accessible to the CD2 12 and the CD3 13 must be selected.

Since the existing security services in units of CDs are provided based on each CD rather than a user who wants to use a predetermined CD on a home network, it is an inefficient method for a user who wants to use predetermined CDs freely. .

That is, it is important for home network users to securely manage each CD when using the security service, but it is more efficient to use the home network to securely manage predetermined CDs on a basic basis.

For example, “CDs in children's room”, “CDs in parent's room”, “CD-ROMs in living room” rather than security management in the form of “CPs that can use my audio devices” (CPs). (CDs) ”, etc., would be more user-centric.

Japanese Patent Laid-Open Publication No. P2001-251312 (name of the invention: an access management device of a home network connection device), which has been proposed above to solve the problems caused by the existing security service, has an access management table and user authentication means. By allowing access according to the user and operation place for each device, the third party access to the specific device can be restricted through the access permission information of each device set according to the user and operation place. It has been insufficient to provide a security service by grouping a plurality of controlled devices through a predetermined control device.

Therefore, there is a demand for providing a security service in a home network system in units of a predetermined controlled device in accordance with user convenience using a service provided from the predetermined controlled device.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and provides security services for each domain by setting a security domain through predetermined network devices operating on a home network to securely manage a group of predetermined network devices. Its main purpose is to provide security services in the domain concept.

Another object of the present invention is to provide a user-friendly security service through a group of predetermined network devices.

In addition, another object of the present invention is to provide a method for configuring a security domain by grouping predetermined network devices according to the user's selection, it is possible to apply a new business model to the security service that was limited to the security management of the existing network device unit To do that.

According to the present invention, a user selects a CP controlling a predetermined CD and a CD operating on a home network, and configures a security domain with the predetermined CD and the CP selected through a security control device.

In addition, the security control device (SC) edits the ACL of the CD to allow the CD access of the CP when the security domain is configured.

As described above, the security domain generated through the security control device is configured in a predetermined form on the home network system. The security domain structure (hereinafter, referred to as an independent domain structure) in which CPs and CDs are independently configured, CPs and CDs overlap Security domain structure (hereinafter, referred to as a nested domain structure), a security domain structure in which domains are hierarchically organized according to a predetermined priority (hereinafter referred to as a hierarchical domain structure), and a security domain in which predetermined domains are integrated It can be divided into a structure (hereinafter referred to as an integrated domain structure).

In addition, the security domains configured in a predetermined form exchange security domain information set in the security control apparatus according to a predetermined security protocol.

Hereinafter, a security domain service system and a method thereof according to the present invention will be described in detail with reference to the accompanying drawings.

The security domain service system according to an embodiment of the present invention sets a security domain through a plurality of network devices, a predetermined control device and a controlled device among a plurality of network devices and network devices that are connected and operated on a home network. It characterized in that it comprises a security control device for performing security management.

In addition, the security control device is a domain management module for setting a security domain with a predetermined domain name through the predetermined controlled device and the control device, the networking process between the controlled device and the control device in the security domain set through the domain management module For a security service between the controlled device and the control device for accessing the controlled device in the security domain by a domain unit configured through a networking module and a domain management module for recognizing and processing It includes a security service module that performs security management, and a user management module that manages user rights for a user's security domain. The security key management module further manages security keys of security domains set through the domain management module. It is characterized by including.

Security domain service method according to an embodiment of the present invention comprises the steps of setting a security domain through a security control device to a predetermined controlled device and the control device; And performing security management on the controlled device and the control device in the established security domain.

The setting of the security domain may include setting a predetermined controlled device in a security domain generated under a predetermined domain name according to a user's selection in the security control device; Accessing the controlled device to establish ownership and access authority; And setting a control device for controlling a controlled device according to a user's selection in the security domain.

The performing of the security management may include: accessing a controlled device in a security domain and setting an access right for the control device; And performing networking using a security key between a controlled device and a control device in the security domain according to an access right to the set control device.

In the following description of the security service system and method according to the present invention, the security control apparatus can configure only one security domain, in order of independent domain structure, overlapping domain structure, hierarchical domain structure, and unified domain structure. First, the domain structure in which the security control device can configure a plurality of security domains will be described.                     

In describing the domain structure in which the security control device can configure only one security domain, the independent domain structure, the overlapping domain structure, the hierarchical domain structure, and the unified domain structure have similar configurations and operations during domain creation and configuration. In this specification, the description will be based on the independent domain structure.

In addition, in the security service system and method according to the present invention will be described in detail with reference to the accompanying drawings, it will be described through a home network system corresponding to a representative example of a predetermined local network, for a more detailed description Although it is described as being implemented through a home network environment using UPnP middleware, this is also merely illustrative, and it is not limited to using UPnP as well as a security domain in a local network where dynamic mechanisms such as JINI, HAVi, and HWW are used. It will be understood by those skilled in the art that various modifications to the module and other equivalent embodiments are possible that enable the provision of security services for securely managing certain grouped network devices.

2 schematically illustrates a structure of a security service system including a security control device according to an embodiment of the present invention.

As shown in FIG. 2, the security service system according to the present invention includes predetermined security domains Domain A and Domain B set based on the security control devices SC1 and SC2.

The security domain (Domain A) is configured to include a SC1 (110), CDs (310, 330) capable of ACL editing through the SC1 (110), a predetermined CP (510) for controlling the CD (310, 330) However, the security domain (Domain B) has the same structure.

SC (110, 130: 100) generates a security domain of a predetermined domain name according to the user's request, and then generate the CD (310, 330, 350, 370: 300) and CP (510, 530: 500) selected by the user Access to the CD 300 using the public key-based security key (P: K).

In the present invention, the security key (P: K) is defined as key [Pc: Kc] if CP, and key [Ps: Ks] if SC.

In addition, the SC 100 transmits / receives security domain information with other SC 100 according to a predetermined domain protocol, and provides its own security domain information in response to a request of a predetermined security control device using the security domain information. Allow access to security control devices.

For example, if a user wants to securely manage network devices that operate on a home network into two security domains according to where each network device operates, the user may select a predetermined domain name (SC1 room) based on the SC 100. After creating the security domain (Domain A), the living room of the SC2 (Domain B), and select the CD (300) and CP (500) to configure each security domain.

If the user selects the CD1 310 and the CD2 330 as the controlled device constituting the room A of the SC1 110, the SC1 110 selects the selected CD1 310 and the CD2 330. Set to room (Domain A).

Accordingly, the CD1 310 and the CD2 330 are set with ownership and access rights to enable the editing of the ACLs 311 and 331 of the SC1 110 (own: Ps1, ACL: (Ps1: <All />)).

Next, the SC1 100 receives a CP controlling the CD1 310 and the CD2 330 from the user. When the CP1 510 is selected, the CP1 310 for the CP1 510 is selected when the CP1 510 is selected. And the ACLs 311 and 331 of the CD1 310 and the CD2 330 to allow access to the CD2 330.

That is, the SC1 110 sets access rights for the CP1 510 to the ACLs 311 and 331 of the CD1 310 and the CD2 330 using the public key-based security keys Pc1: Kc1 of the CP1 510. (Pc1: <All />).

Through this process, SC1's room (Domain A) is constructed.

The living room of the SC2 (Domain B) is also composed of the CD3 (350), CD4 (370) and CP2 (530) in the same way.

In each of the security domains configured as described above, the user can securely manage CDs in the security domain through the CP of each security domain, and can safely use the services provided from the CDs.

3 schematically illustrates a structure of a security control apparatus according to an embodiment of the present invention.

Hereinafter, in describing the security control apparatus and the security domain setting process, since SC1 110 of Domain A and SC2 130 of Domain B perform the same structure and operation, the SC1 110 of Domain A will be described in detail. Explain.

As shown in FIG. 3, the SC 110 includes a domain management module 111, a networking module 113, a security service module 115, a user management module 117, and a domain management module 111. When setting a plurality of security domains through), further includes a security key management module 119 for managing security keys of each security domain.

The domain management module 111 sets and manages a predetermined security domain through predetermined CDs 310 and 330 and CP 510 according to a user's selection. A predetermined database (not shown) is provided for storing domain information.

In addition, the domain management module 111 checks and updates security domain information stored in a predetermined database through a predetermined interface means. As an interface means, a view (for example, a method of displaying data stored in a database to a user) view is used.

The networking module 113 recognizes and processes a home networking process between the CDs 310 and 330 and the CP 510 in the secure domain set through the domain management module 111 through a predetermined network middleware. For example, the UPnP home It has UPnP middleware stack that can understand UPnP protocol in network environment.

The security service module 115 provides a security service for secure networking between the CDs 310 and 330 and the CP 510. The CD1 310 and the CD2 330 allow access of the CD 510 to the CP 510. The ACLs 311 and 331 of the 310 and the CD2 330 are edited.

That is, the security key of the CP1 510 is registered in the ACLs 311 and 331 of the CD1 310 and the CD2 330, and when the service request message of the CP1 510 is received, the CD1 310 and the CD2 330 are accessed. It is to confirm the permission and to provide the requested service.

The user management module 117 manages a user's login, user authority for a secure domain, and the like, and stores a database for storing domain user management information (hereinafter, referred to as user management information). ) Is provided.

In addition, the user management module 117 sets user rights as a single user if the SC can configure only a single security domain according to the characteristics of the SC, and user rights as an admin or a general user if multiple security domains are possible. Set.

When setting the user authority as admin or general user, the user management module 117 checks and updates the user authority information stored in the database. As an interface means, for example, a method of showing data stored in the database to the user In view is used.

In the present invention, a view made of security domain information is defined as a domain view, and a view made of user authority information is defined as a user view.

4 schematically illustrates security domain information set in a domain management module of a security control apparatus according to an embodiment of the present invention.

As shown in FIG. 4, the security domain information is largely composed of a domain name (a) of a security domain, a security key (b) of a security control device, a control device list (c), and a controlled device list (d).

The control device list (c) is configured to include each CP constituting the corresponding security domain.

The controlled device list d is configured to include each CD constituting the corresponding security domain.

For example, the security domain information set in the domain management module 111 of the SC1 110 (see FIG. 2) is a domain name of Domain A, a control including a security key of the security control device of Ps1 and Pc1 510. The device list includes a controlled device list including a CD1 310 and a CD2 330.

5 a and b schematically illustrate a security domain configuration structure according to an embodiment of the present invention.

5A illustrates a domain setting structure for the CD1 310. First, when the user logs in, the SC1 110 processes a user login through the user management module 117 (a), and the domain management module 111. Create a secure domain (Domain A) with a predetermined domain name entered by the user through (b).

Subsequently, the domain management module 111 of the SC1 110 selects a controlled device capable of ACL editing through the SC1 110 from the user and sets ownership and access authority (c).

When the CD1 310 is selected by the user, the CD1 310 is configured to set ownership and access rights so that the ACL 311 of the SC1 110 can be edited according to the ownership setting of the security service (own: Ps1, ACL: (Ps1: <All />)).

Next, the domain management module 111 of the SC1 110 updates the security domain information on the configuration of the security domain (Domain A) including the CD1 310 (d).

According to the security domain information updated by the domain management module 111, the domain view A of the security domain (Domain A) including CD1 is provided to the user.                     

5B illustrates a domain setting structure for the CP1 510. First, the domain management module 111 of the SC1 110 provides a user with a list of a control device CP on a home network.

The user searches for a predetermined control device for controlling the CD1 310 of the secure domain (Domain A) through the control device list provided from the SC1 110 (a).

If the user selects the CP1 510, the SC1 110 sets the CP1 510 in the security domain (Domain A), and the CP1 510 in the CD1 310 operating in the security domain (Domain A). Edit ACL 311 of CD1 310 to allow access to (b).

That is, the SC1 110 sets the access right for the CP1 510 to the ACL 311 of the CD1 310 using the security key Pc1 of the CP1 510 (ACL: (Pc1: <All / >)).

Next, the domain management module 111 of the SC1 110 updates the security domain information on the configuration of the security domain (Domain A) including the CP1 510 (c).

In accordance with the security domain information updated by the domain management module 111, the domain view A of the security domain (Domain A) including the previously set CD1 and CP1 is provided to the user.

6A and 6B schematically illustrate a domain protocol structure according to an embodiment of the present invention.

In a secure domain service system (see FIG. 2) consisting of Domain A of SC1 110 and Domain B of SC2 130 (see FIG. 2), an access permission setting for CD1 310 of Domain A is required according to a domain configuration request of a user. In this case, the following domain protocol is performed between each SC1 (110) and SC2 (130) according to whether the ownership of the CD1 (310).

As shown in FIG. 6A, when a user logs in to SC1 110 having ownership of CD1 310 and requests a security domain configuration (a), SC1 110 acquires ownership of CD1 310. Check (b).

As a result of the check, if the ownership of the CD1 310 is owned by the SC1 (110), the SC1 (110) configures information to be set in the ACL (311) of the CD1 (310) according to the user's security domain configuration request. c).

That is, when the user requests a domain configuration for the CP2 530 of Domain B, the SC1 110 uses the security key Pc2 of the CP2 530 to allow access of the CP2 530 from the CD1 310. Information to be set in the ACL 311 of the CD1 310 is used (ACL: Pc2 <All />).

Next, the SC1 110 accesses the CD1 310 to edit the ACL 311 of the CD1 310 (d).

Next, SC1 110 requests the domain view of SC2 130 from SC2 130 of Domain B, another security domain operating on the home network (e), and the security domain changed by CD1 310. The domain view of the SC2 130 is updated according to the information (f).

That is, as the CP2 530 of Domain B is set in the ACL 311 of the CD1 310, the security domain information stored in the SC2 130 of the Domian B is updated.

As shown in b of FIG. 6, when a user logs in to SC2 130 that does not have ownership of CD1 310 and requests a secure domain configuration (a), SC2 130 has ownership of CD1 310. (B).                     

As a result of the check, if the ownership of the CD1 310 does not belong to itself (SC2 130), the SC2 130 requests the domain configuration to the SC1 110 having ownership of the CD1 310 according to the user's request for a secure domain configuration. (C).

SC1 (110) requested to configure the domain from the SC2 (130) configures the information to be set in the ACL (311) of the CD1 (310) according to the user's security domain configuration request (d).

That is, when the user requests a domain configuration for the CP2 530 of Domain B, the SC1 110 uses the security key Pc2 of the CP2 530 to allow access of the CP2 530 from the CD1 310. Information to be set in the ACL 311 of the CD1 310 is used (ACL: Pc2 <All />).

Next, the SC1 110 accesses the CD1 310 to edit the ACL 311 of the CD1 310 (e).

Subsequently, the SC1 110 requests a domain view from the SC2 130 (f), and updates the domain view of the SC2 130 according to the security domain information changed by the CD1 310 (g).

7A to 7C schematically illustrate a domain structure according to another embodiment of the present invention.

FIG. 7A illustrates an overlapping domain structure allowing overlapping between predetermined security domains. In the overlapping domain structure including Domain 1, Domain 2, and Domain 3, the CD 300 in the overlapping area of Domain 1 and Domain 2 is SC. Through the transfer of ownership between the 100 is set in a predetermined security domain.

7B illustrates a hierarchical domain structure having a hierarchical structure according to the priority between security domains. CD 300 having a predetermined priority in a hierarchical domain structure consisting of Domain 1, Domain 2, Domain 3, and Domain 4 is shown. ) Is set in a predetermined security domain through the transfer of ownership between the SC 100 according to the priority.

7c illustrates an integrated domain structure in which a predetermined security domain is combined into one security domain. In the integrated domain structure including Domain 3 in which Domain 1 and Domain 2 are combined, the CD 300 includes Domain 1 and Domain 2. The ownership is set in the predetermined Domain 3 via the predetermined secure domain device to which ownership is transferred.

8 schematically illustrates a domain protocol structure for ownership transfer according to another embodiment of the present invention.

In a secure domain service system (see FIG. 2) consisting of Domain A of SC1 110 and Domain B of SC2 130 (see FIG. 2), an access permission setting for CD1 310 of Domain A is required according to a domain configuration request of a user. In this case, the following domain protocol is performed according to the transfer of ownership of the CD1 310 between the SC1 110 and the SC2 130.

As shown in FIG. 8, when a user logs in to SC1 110 and requests a security domain configuration (a), SC1 110 checks ownership of CD1 310 (b).

If the domain structure on the home network is an overlapping domain structure in which predetermined regions of Domain A and Domain B overlap, the SC1 110 of Domain A having ownership of the CD1 310 and the SC2 130 of Domain B (C) attempts to elect a domain administrator to transfer ownership to a given secure domain.

As a result, if SC2 130 is selected as the domain manager (d), SC1 110 sets the transfer of ownership to SC2 130 in CD1 130 (e).                     

Subsequently, the SC2 130 edits the ACL 311 of the CD1 310 according to the user's security domain configuration request (f).

Next, the SC2 130 requests the domain view to the SC1 110 (g) and updates the domain view of the SC2 130 according to the security domain information changed by the CD1 310 (h).

For reference, in the security control apparatus of the security domain service system according to an embodiment of the present invention described above, each module may be configured in hardware, some modules may be configured in software, or the entire module may be configured in software.

Therefore, the configuration of the security control device of the security service system according to an embodiment of the present invention is composed of hardware or software does not depart from the spirit of the present invention, and is composed of software and / or hardware without departing from the spirit of the present invention. Obviously, modifications and changes may be added.

The security domain service method according to the present invention using the security domain service system configured as described above will be described in detail with reference to the accompanying drawings.

The security domain service process according to an embodiment of the present invention largely includes generating a domain, configuring a generated security domain, and accessing a CD 300 in the configured security domain and editing an ACL.

Editing the ACL of the CD 300 may include setting ownership and access rights in the SC 100, and setting access rights for the CP 500 selected to enable control of the CD 300 in the SC 100. It includes a step.

9 schematically illustrates a security domain service process according to an embodiment of the present invention.

As shown in FIG. 9, first, the SC 100 generates a security domain according to a domain name received from a logged in user (S1).

Subsequently, the SC 100 receives a predetermined CD 300 capable of ACL editing through the SC 100 from the user and a CP 500 controlling the selected CD 300 in order to configure the security domain. .

Accordingly, the SC 100 configures a security domain with a predetermined CD 300 and the CP 500 according to a user's selection (S2).

Next, the SC 100 edits the ACL of the CD 300 to set ownership and access rights according to the security domain configuration (S3).

Subsequently, the SC 100 determines whether to reconfigure the security domain that has been configured through the above process (S4), and if it is requested to reconfigure the security domain, the SC 100 returns to the security domain configuration routine.

10 schematically illustrates a security domain service process from a user perspective according to an embodiment of the present invention.

As shown in FIG. 10, a user first logs in to an arbitrary SC 100 (S11).

Next, the user determines whether the SC 100 supports a plurality of security domains (Multi Domain) (S12).

If the determination result does not support a plurality of security domains, only one desired security domain is generated (S13). If the determination result supports a plurality of security domains, a desired number of security domains are generated (S14).

Next, the user refers to the CD 300 capable of ACL editing by the SC 100 provided from the SC 100 and the predetermined CP 500 list, and the predetermined controlled device to configure the generated security domain. 300 and the control device 500 is selected (S15).

FIG. 11 schematically illustrates a process of a security control device according to the user request of FIG. 10.

As shown in FIG. 11, first, the SC 100 processes a user login through the user management module 117 (S21).

Next, the SC 100 generates a security domain according to the user's request (S22), and configures the security domain with the CD 300 and the CP 500 selected by the user (S23).

Next, the SC 100 determines whether the CD 300 has ownership in accordance with the domain protocol for ACL editing of the CD 300 constituting the secure domain (S24).

If the determination result does not have ownership of the CD 300, the SC 100 having ownership of the CD 300 is requested to edit the ACL of the CD 300 (S25), and the determination result corresponds to the CD 300. If you have the ownership to access the CD (300) to edit the ACL (S26).

Next, the SC 100 modifies the domain management information to update the domain view (S27).

Hereinafter, a security domain service method using a security domain service system according to the present invention will be described in detail with reference to the accompanying drawings.

12a to 12b schematically illustrate a security domain service process according to an embodiment of the present invention.                     

According to an embodiment of the present invention, in the overlapping area between Domain 1 and Domain 2 having an independent domain structure on the home network (see a of FIG. 7), the user wants to set the CP2 530 operating in the overlapping area to Domain 1 In accordance with the ownership of the CP2 (530), the following domain setting process is performed.

As shown in a of FIG. 12, when a user logs in to SC1 110 having ownership of CD1 310 and requests Domain A configuration of CP2 530 (a), SC1 110 requests a domain protocol. According to (a of FIG. 6), information to be set in the CD1 310 is configured to set the CP2 530 for which domain configuration is requested from the user to Domain 1.

Subsequently, the SC1 110 sets an access right for the CP2 530 in the ACL 311 of the CD1 310 (ACL (PC: <All />)) (b).

Accordingly, the ACL 3110 of the CD1 310 is added with a newly set ACL (PC: <All />) (C-> C ').

Next, as the domain configuration is changed, SC1 110 updates the domain view A of Domain 1 to the domain view A where CP2 530 is configured (dotted line), and changes the changed domain view to SC2 ( 130).

Accordingly, the SC2 130 updates the domain view by modifying the information about the CP2 530 in the domain view of the domain 2.

In addition, when no further ACL 311 editing is possible according to the characteristics of the CD1 310, the SC1 110 issues a certificate indicating access permission to the CD1 310 and transmits it to the CP2 530 (c). .                     

As shown in b of FIG. 12, if a user logs in to SC2 130 that does not have ownership of CD1 310 and requests the Domain A configuration of CP2 530 (a), the domain is configured in SC2 130. According to the protocol (see b of FIG. 6), a domain configuration for the CP2 530 is requested to the SC1 110 having ownership of the CD1 310 (b).

Accordingly, the SC1 110 accesses the CD1 310 constituting Domain 1 and sets an access right for the CP2 530 in the ACL 311 of the CD1 310 (ACL (PC: <All /> )) (c).

The ACL 3110 of the CD1 310 is added with a newly set ACL (PC: <All />) (C-> C ').

Subsequently, as the domain configuration is changed, SC1 110 updates the domain view A of Domain 1 to the domain view A where CP2 530 is configured (dotted line), and changes the changed domain view to SC2 ( 130).

Accordingly, the SC2 130 updates the domain view by modifying the information about the CP2 530 in the domain view of the domain 2.

In addition, when no further ACL 311 editing is possible according to the characteristics of the CD1 310, the SC1 110 issues a certificate indicating access permission to the CD1 310 and transmits it to the CP2 530 (d). .

13a and 13b schematically illustrate a security domain service process according to another embodiment of the present invention.

As shown in a of FIG. 13, a hierarchical domain structure consisting of Domain 1 (parent) of SC1, Domain 2 (John room) of SC2, Domain 3 (Marry room) of SC3, and Domain 4 (living room) of SC4. If the user wants to configure the CP 570 of Domain 4 (Living Room) in Domain 2 (John Room) in the home network, the domain configuration process as shown in FIG. 13B is performed.

As shown in b of FIG. 13, when a user logs in to SC4 170 that does not have ownership of CD2 330 and requests a domain configuration for CP4 570 (a), the domain is configured in SC4 170. According to the protocol (see b of FIG. 6), a domain configuration for CP4 570 is requested to SC2 130 having ownership of CD2 330 (b).

Accordingly, the SC2 130 accesses the CD2 330 constituting Domain 2 (John Room) and sets an access right for the CP4 570 in the ACL 331 of the CD2 330 (ACL (PC4: <All />)) (c).

The ACL 331 of the CD2 330 is added with a newly set ACL (PC4: <All />) (C-> C ').

Subsequently, as the domain configuration is changed, SC2 130 updates the security domain view B of Domain 2 (John room) to register information about CP4 570 (dotted line), and the changed domain view (B). ) Is provided to SC4 170 (d).

Accordingly, the SC4 170 updates the domain view A by modifying the information about the CP4 570 in the domain view of the domain 4.

In addition, when no further ACL 331 editing is possible according to the characteristics of the CD2 330, the SC2 130 issues a certificate indicating access permission to the CD2 330 and transmits the certificate to the CP4 570 (e). .

14a and 14b schematically illustrate a security domain service process according to another embodiment of the present invention.                     

As shown in a of FIG. 14, in a home network of a unified domain structure in which Domain 1 of SC1 and Domain 2 of SC2 are integrated to form Domain 3 of SC3, a domain configuration process as shown in FIG. 14B is performed. .

As shown in b of FIG. 14, as Domain 1 and Domain 2 are integrated into Domain 3, CP1 510 constituting Domain 1 and CP2 530 constituting Domain 1 are configured to Domain 3. Is changed.

At this time, a domain manager is selected between the SC1 110 of Domain 1 and the SC2 130 of Domain 2 according to the domain protocol (see FIG. 8) (a).

If the SC2 130 is selected as the domain manager, the SC1 110 edits the ACL 311 of the CD1 310 so that the SC2 130 may have ownership of the CDs constituting the integrated Domain 3.

In addition, the access authority for the CP2 530 is set in the ACL 311 of the CD1 310 to allow access to the CD1 310 through the CP2 530.

That is, ownership of the ACL 311 of the CD1 310 is set from own: Ps1 to own: Ps2, and an access right (ACL: (Pc2: <All />)) for the CP3 530 is set ( b).

As such, as SC2 130 is selected as the domain manager and ownership of SC1 110 is transferred to SC2 130, SC1 110 deletes the security domain view A of Domain 1 (A-> delete). ).

In addition, SC2 130 updates the security domain view B of Domain 3 as the domain manager of the integrated Domain 3 is selected and the ownership of CD1 310 and CP1 510 is transferred from SC1 110. (B-> B ').

Hereinafter, as another embodiment of the present invention, a domain structure in which the security control device SC may configure a plurality of security domains will be described.

15 schematically illustrates a domain structure composed of a plurality of security domains according to another embodiment of the present invention.

As shown in FIG. 15, when the SC1 110 has a plurality of public keys based security keys, the user may create a security domain for each security key.

Through this, a plurality of domains are set as one SC1 110, and a user view is used for managing a plurality of user rights through each security key.

In such a domain structure that constitutes a plurality of domains with one SC, a domain protocol (see FIGS. 6A and 6) is not required for communication between SCs of a secure domain.

For example, a user may generate a predetermined number of desired security domains using a plurality of security keys of SC1 110. Domain A using security key 1 (Ps1: Ks1) and security key 2 (Ps2: Ks2) may be used. Create Domain B using and Domain C using security key 3 (Ps3: Ks3).

Then, CDs and CPs constituting each security domain are selected, and ownership and access rights are set in the ACLs of the CDs constituting each security domain.

16A to 16C schematically illustrate a security domain configured as a plurality of security control devices according to another embodiment of the present invention.                     

As shown in FIG. 16A, in Domain 1 including SC1, SC2, and SC3, as shown in b of FIG. 16, all domains are superimposed and managed as one, or as shown in c of FIG. It uses a method of sharing a security key related to ownership of SC1, SC2, and SC3.

The method of sharing a security key may be shared through a domain protocol between SC1, SC2, and SC3 (refer to a, b, and FIG. 8 of FIG. 6) or by receiving a shared key through an external specific interface capable of data communication.

Between SC1, SC2, and SC3, domain view request is made through domain protocol request and domain view update of domain protocol.

Although the present invention has been described in detail above, those skilled in the art to which the present invention pertains may variously modify the present invention without departing from the spirit and scope of the present invention as defined in the appended claims. It is apparent that the present invention may be modified or modified, and a simple change according to an embodiment of the present invention will not depart from the technology of the present invention.

Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

According to the present invention, it is possible to provide a security service of a domain concept for security management for a group of predetermined network devices by providing a security service for each domain by setting a security domain through predetermined network devices operating on a home network. have.

In addition, according to the present invention, security management through a group of predetermined network devices has the effect of providing a user with a more user-friendly security service.

In addition, according to the present invention, by providing a method for configuring a security domain by grouping predetermined network devices according to the user's selection, it is possible to apply a new business model to the security service that was limited to the security management of the existing network device unit Has an effect.

Claims (17)

A domain management module configured to set a predetermined controlled device and a control device operating on a home network in a security domain generated with a predetermined domain name; And A security service that performs security management for a security service between the controlled device and the control device that accesses the controlled device in the security domain on a domain basis set through the domain management module and sets an access right to the control device. Security control device comprising a module. The method of claim 1, A networking module for recognizing and processing a networking process between a controlled device and a control device in the security domain configured through the domain management module; And And a user management module for managing user rights for a user's security domain. The method of claim 1, And a security key management module for managing a security key of a security domain set through the domain management module. The method of claim 3, wherein And the security key includes a plurality of security keys required for managing a plurality of security domains set as one security control device or a security key for managing a single security domain. The method of claim 1, The security domain is a security control device characterized in that when the security control device comprises only one security domain is formed of any one of the domain structure of the independent domain, overlapping domain, hierarchical domain, integrated domain. The method of claim 1, And the security domain is formed in a predetermined number of security domain structures that are set as one security control device when the security control device constitutes a plurality of security domains. A number of network devices connected to and operating on a home network, And a predetermined security control device configured to set a security domain through a predetermined control device and controlled devices among the network devices, and perform security management by the security domain. The method of claim 7, wherein The security control device A domain management module configured to set a security domain with a predetermined domain name through the predetermined controlled device and the control device; A networking module for recognizing and processing a networking process between a controlled device and a control device in the security domain configured through the domain management module; A security service that performs security management for a security service between the controlled device and the control device that accesses the controlled device in the security domain on a domain basis set through the domain management module and sets an access right to the control device. Module, and And a user management module for managing user rights for a user's security domain. The method of claim 8, And a security key management module for managing a security key of a security domain set through the domain management module. The method of claim 9, And the security key includes a plurality of security keys required for managing a plurality of security domains configured as one security control device or security keys for managing a single security domain. The method of claim 7, wherein The security domain is a security domain service system, characterized in that when the security control device configures only one security domain is formed of any one domain structure of independent domain, overlapping domain, hierarchical domain, integrated domain. The method of claim 7, wherein The security domain is a security domain service system, characterized in that the security control device is formed of a predetermined number of security domain structure set as one security control device when configuring a plurality of security domains. Setting a predetermined controlled device in a security domain created by the security control device according to a user's selection; Accessing the controlled device and setting ownership and access authority; Selecting a control device for controlling a controlled device in the secure domain from the user and setting the control device in the secure domain; Setting an access right to the control device by accessing the predetermined controlled device so that the controlled device can be accessed by the control device; And And performing networking through a security service between a predetermined controlled device and a control device in the security domain according to the access right to the set control device. The method of claim 13, Setting the ownership and access rights And editing the ACL of the controlled device by using the security key of the security control device. The method of claim 13, The step of setting an access right for the control device And editing the ACL of the controlled device by using the security key of the control device in the security control device. The method of claim 13, The security domain is a security domain service method characterized in that when the security control device configures only one security domain is formed of any one of the domain structure of the independent domain, overlapping domain, hierarchical domain, integrated domain. The method of claim 13, The security domain is a security domain service method, characterized in that the security control device is formed of a predetermined number of security domain structure set as one security control device when configuring a plurality of security domains.

Images