KR101183575B1 - System for securing personal information - Google Patents

Abstract

PURPOSE: A personal information security system is provided to prevent an internal user or a company from capturing a document and to block leakage of a document including personal information. CONSTITUTION: When a user prints out a document, an agent(100) collects printed data with control of a printing framework of OS(Operating System). The agent detects personal information in the collected data. A server(200) supplies a pattern for personal information detection to the agent. The document includes a stored file and a not stored file.

Description

System for securing personal information

The present invention provides a personal information security system including an agent and a server, wherein when a user outputs a document, the agent collects output data to detect personal information among the data, and the server detects the personal information. It relates to a personal information security system, characterized in that for providing to the agent.

In addition, the present invention relates to a personal information security system, characterized in that the output is blocked when the agent detects personal information.

In another aspect, the present invention relates to a personal information security system, characterized in that the output is approved using the output approval interface of the server or the electronic payment interface using the user's electronic payment system when the number of the personal information is more than the reference number. will be.

In addition, the present invention relates to a personal information security system, characterized in that in the output approval and the electronic payment interface is automatically attached to the document or the image of the document to be output by the user.

In addition, the present invention relates to a personal information security system, characterized in that the agent allows the user to register the disposal schedule, such as the disposal date and document storage location at the same time as the output of the personal information.

Personal information is an essential element for the formation, maintenance, and development of society such as e-commerce, customer management, and financial transactions in the face of the information society. have.

However, if it is leaked for malicious purposes, it can seriously damage the safety and property of individuals, so it is important that measures to thoroughly protect personal information are important.

Here, the personal information refers to information that can recognize the individual through the resident registration number, telephone number and card number as information about the living individual.

Meanwhile, as the Personal Information Protection Act is fully implemented in Korea, companies and organizations are preparing countermeasures to protect personal information in accordance with the Personal Information Protection Act.

In particular, when a document containing personal information is printed on a printer, personal information can be easily leaked, which is an urgent situation for the security system.

For example, an employee of an organization or an organization may output a file to their device (computer, smart pad, smartphone, etc.). Furthermore, when outputting without storing a file or outputting an image, security of whether or not it contains personal information becomes weak.

Another example is when a member of the organization prints out using his or her personal information processing system. In other words, when creating and outputting contracts, promotions, and quotations containing personal information through personal information processing systems, such as CRM (Customer Relationship Management) systems, it is often not saved as a file. Become very vulnerable.

Therefore, when users inside the organization print or capture documents, if the personal information is included, output and capture is blocked, and if the output is performed, approval and revocation management are performed together to maintain strict personal information security. Is required.

The following briefly describes prior art approaches and problems with respect to the detection of personal information in the technical field similar to the present invention.

First, Korean Patent Laid-Open Publication No. 10-2010-0085458 discloses a personal information protection system for retrieving personal information of a memory. It is characterized by detecting whether data matching the pattern exists.

This is advantageous in that it detects whether personal information remains in the memory when memory resides in the user terminal. However, there is a limitation in that personal information security cannot be performed when printing or capturing a document including personal information. .

Secondly, Korean Patent Application Publication No. 10-2010-0034330 discloses a personal information protection system, which analyzes data to obtain a personal information pattern, and selectively selects a personal information field including the obtained personal information pattern. Masking is characterized in that.

This is advantageous in that it detects and masks a personal information pattern. However, in order to analyze the data, the personal information pattern can be detected only after storing as a file. When a document including personal information is output before being stored as a file There is a limitation in that personal information security cannot be performed.

An object of the present invention is to prevent the user of the company or organization from outputting and capturing a document containing personal information, and even if the output is to be carried out together with the approval and disposal management to maintain thorough personal information security In providing a system.

The present invention provides a personal information security system including an agent and a server, wherein when a user outputs a document, the agent collects output data to detect personal information among the data, and the server detects the personal information. By providing a personal information security system, characterized in that to provide to the agent, to solve the technical problem.

The present invention is to solve the technical problem by providing a personal information security system, characterized in that the output is blocked when the agent detects personal information.

The present invention provides a personal information security system, characterized in that the output is approved using the output approval interface of the server or the electronic payment interface using the user's electronic payment system when the number of the personal information is more than the reference number. By doing so, the technical problem is solved.

The present invention is to solve the technical problem by providing a personal information security system that automatically outputs the document or the image of the document to be output to the output approval and the electronic payment interface.

The present invention is to solve the technical problem by providing a personal information security system, characterized in that the agent allows the user to register the disposal date and document storage location at the same time as the output of the personal information.

The present invention has the remarkable effect of preventing a user in an enterprise or an institution from capturing a document and also preventing the output of a document containing personal information.

The present invention has a remarkable effect of protecting personal information by detecting personal information in actual output data, including both when the document is stored as a file and when it is not stored.

The present invention has a remarkable effect of protecting personal information by detecting personal information in actual output data, including the case where the document is text or an image.

The present invention has a remarkable effect of protecting personal information by detecting personal information even when outputting a document using a user's personal information processing system.

When the user outputs personal information, the present invention has a remarkable effect of maintaining thorough personal information security by allowing approval and disposal processing to be performed together.

1 is a view schematically showing the configuration and function of a personal information security system according to an embodiment of the present invention.
2 is a view schematically showing the main configuration of a personal information security system according to an embodiment of the present invention.
3 is a diagram schematically showing the main components of a personal information security system according to an embodiment of the present invention.
4 is a diagram illustrating an example of blocking an output in a personal information security system according to an embodiment of the present invention.
5A to 5D are diagrams illustrating an example of approving an output in a personal information security system according to an embodiment of the present invention.
6 is a diagram illustrating an example of masking and outputting personal information in a personal information security system according to an exemplary embodiment of the present invention.
7 is a diagram illustrating an example of transmitting a mail to an administrator in a personal information security system according to an embodiment of the present invention.
8 is a diagram illustrating an example of registering a revocation schedule in a personal information security system according to an embodiment of the present invention.
9 is a diagram illustrating an example of performing discard notification in a personal information security system according to an embodiment of the present invention.
10 is a diagram illustrating an example of managing a disposal schedule in a personal information security system according to an embodiment of the present invention.
11 is a diagram illustrating an example of confirming revocation in a personal information security system according to an embodiment of the present invention.
12 is a diagram illustrating an example of processing a personal information pattern registration and output policy in a personal information security system according to an embodiment of the present invention.
13 is a diagram illustrating an example of querying an output log in a personal information security system according to an embodiment of the present invention.
14A to 14C illustrate examples of inquiring output statistics in a personal information security system according to an embodiment of the present invention.

The terms and words used in the present specification and claims should not be construed as limited to ordinary or dictionary terms and the inventor may properly define the concept of the term in order to best describe its invention It should be construed as meaning and concept consistent with the technical idea of the present invention.

Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention and are not intended to represent all of the technical ideas of the present invention. Therefore, various equivalents It should be understood that water and variations may be present.

First, the present applicant, as described in the Republic of Korea Patent Registration No. 10-0906628 (printer output monitoring system), the printing framework control module for controlling the printing framework of the operating system (OS) to detect the print execution for the output document Note that the implementation of the transmission and monitoring of the output information and the image file of the printed document is implemented.

In addition, the present applicant, as described in the Republic of Korea Patent Registration No. 10-0919311 (printer toner reduction system), the printing framework control module for controlling the printing framework of the operating system (OS) to perform not only output monitoring but also toner reduction Make sure you've implemented that.

In addition, the present applicant, as described in Korean Patent Registration No. 10-1057743 (external user document distribution system), the printing framework control module converts and encrypts each page of a document file, transmits it to a stream, extracts output information, etc. Note that we have implemented the function of.

Here, the printing framework control module has a function of controlling the printing framework of the operating system (OS), it turns out that the function should be defined according to the design conditions or the interlocking relationship with other constituent means included in each invention. Put it.

Before describing the present invention with reference to the accompanying drawings, it should be noted that the present invention is not described or specifically described with respect to a known configuration that can be easily added by a person skilled in the art, Let the sound be revealed.

1 is a view schematically showing the configuration and function of a personal information security system according to an embodiment of the present invention.

The personal information security system according to an embodiment of the present invention includes an agent 100 and a server 200.

The agent 100 is installed on a user device (computer, smartphone, smart pad, etc.), and is configured to work with the server 200 and the personal information processing system and electronic payment system used by the user device.

Here, the personal information processing system refers to an internal system of a user organization that processes documents including personal information, such as a customer relationship management (CRM) system.

Referring to FIG. 1, the agent 100 and the server 200 use a personal information processing system when a user outputs a stored / non-stored file using a device of the user, or outputs a text / image. If you include personal information in the output, block the output and also prevent the capture if you capture the screen.

In addition, in order to output the user, the user must obtain the output approval, and at the same time, the waste management is performed.

Preferably, the agent 100 and the server 200 may be designed to operate in conjunction with various systems, and depending on the conditions, components included in the agent 100 may be included in or included in the server 200. The reverse case can also be configured to be possible.

2 is a diagram schematically showing the main configuration of the personal information security system according to an embodiment of the present invention, Figure 3 is a diagram schematically showing the main components.

The personal information security system according to an embodiment of the present invention includes an agent 100 and a server 200.

The agent 100 includes a printing framework control module, a user authentication module, an output security unit 110, an output information transmission unit 120, and a disposal processor 130.

Here, the output security unit 110 includes a personal information detection module, OCR recognition module, output blocking module, screen capture prevention module, output approval request module, personal information masking module and administrator mail notification module.

The output information transmission unit 120 includes an output log transmission module and an output document / image transmission module, and the discard processing unit 130 also includes a disposal registration module, a disposal notification module, and a disposal approval request module.

The server 200 includes a login service module, an output setting unit 210, an output approval unit 220, and an output management unit 230. The output setting unit 210 includes an output policy processing module and a personal information pattern processing module. Include.

The output approval unit 220 includes an output approval processing module, an electronic approval linkage module, and a disposal approval processing module, and the output management unit 230 includes an output log inquiry module, an output document / image inquiry module, and an output statistics inquiry module. .

First, the printing framework control module included in the agent 100 controls the printing framework of the operating system (OS) of the agent 100 to detect personal information from the actual output data transmitted to the printer driver, and to display an image for each page. It is the basis for other modules that perform functions such as creating and extracting output information.

Here, the printing framework refers to a kind of subsystem included in an operating system (OS). When a document is output to a printer, the printing framework and the printer driver are linked together to perform printing.

In other words, when the user issues a print command through the application, the printing framework is activated. The spooler service is invoked while the spooler service provides the event standard service related to the start and end of the entire print job. When the printer driver of the printer is called, output data of a printable format (eg, PS, PCL, etc.) is generated and transmitted to the driver.

The printing framework control module of the present invention maintains the security of the actual output data by performing a function of collecting the output data when the user issues a print command to the driver.

Here, referring to the difference between detecting personal information in a file or output data, first, the file detection targets a document stored in the file and the output data detection targets actual output data transmitted to the driver.

Secondly, the file detection detects a personal information pattern in the file contents stored before the output, and the output data detection detects any data for printer output regardless of whether or not it is stored.

Third, file detection requires a separate detection function depending on the type of document (MS Word, Korean, Excel, etc.), and it is impossible to detect a file in a format that is not supported. The driver type will not be affected.

Overall, file detection targets stored documents and does not cover all document types. For example, copy a personal information from a secured document and paste it into a new document before printing without saving. If the personal information is not detected, it can be seen that there is a limit in detecting the personal information.

For example, when the printing framework control module of the present invention operates, if the operating system (OS) is a Windows environment, when there is a print command, the printing framework control module is the GDI (Graphics) of the printing framework. Device Interface) service is called first, and after that, the GDI service does not call the spooler service, but the data is sent directly to the GDI Rendering Engine so that the data can be received and built as a page-by-page image. can do.

Depending on the design requirements, other printing framework control schemes are possible, typically because operating system (OS) providers allow hardware and software developers to replace or modify their printing framework components.

The user authentication module is basically a module in which a user is responsible for authentication, and is linked with a login service module included in the server 200.

That is, when the user wants to output, authentication is performed using the user ID and password information, and the login service module of the server 200 can be logged in using the user information included in a separate storage means. To work.

Depending on the design conditions, if the user performs the initial authentication once, it is designed to operate continuously in the user system, and the information transmitted and received by the user authentication module and the login service module may be configured to be encrypted. .

The output security unit 110 is a means for performing the output and capture prevention of personal information, output approval request, masking processing, administrator mail notification function, the output setting unit 210 and output approval unit 220 of the server 200, etc. It works in conjunction.

4 is a diagram illustrating an example of blocking an output in a personal information security system according to an embodiment of the present invention.

The personal information detection module detects personal information from the output data collected by the printing framework control module.

Here, it should be noted that the personal information is a concept including not only the provisions under the Personal Information Protection Act but also information including a keyword designated by an administrator.

The personal information detection module detects the personal information pattern from the output data according to the personal information pattern information and the output policy set by the output setting unit 210 of the server 200.

Preferably, the output policy and the personal information pattern information are automatically transmitted to the agent 100 after being authenticated as a user.

OCR (Optical Character Recognition) recognition module is a module that recognizes the image character, and serves to assist the user to detect personal information in the image when the user outputs the image.

For example, when the personal information detection module cannot detect the personal information through the image output data, when the OCR recognition module recognizes the image character, the personal information detection module is operated to perform the detection again.

The output blocking module operates when the personal information detection module detects personal information to block output and present a warning message including the detected personal information and output policy as a pop-up window.

Depending on the design conditions, the contents included in the pop-up window can be set by the administrator.

In the case of Fig. 4, it is understood that personal information can be detected at the time of a print command even though the data created by the Hangul word processor is not stored as a file without a specific file name.

The screen capture prevention module performs a function of preventing the document displayed on the user device from being captured.

As an example, the screen capture prevention module may prevent a print screen provided by Windows from operating, and / or prevent a capture application from running, and / or prevent another window from being displayed on the current screen being displayed. Perform the function.

5A to 5D are diagrams illustrating an example of approving an output in a personal information security system according to an embodiment of the present invention.

The output approval request module performs a function of requesting the output approval when the user wants to output a document containing personal information.

Here, the output approval request module is set to operate automatically when one or more of the user's personal information is included, and may set the reference number according to the condition.

Preferably, the reference number of the personal information may be designed to be set in the output setting unit 210 of the server 200.

In addition, according to the operation of the output approval request module, the output approval can be made using the output approval processing module included in the server 200, or it can be linked with the electronic payment system of the user organization by using the electronic payment linkage module. It may be.

Preferably, according to the reference number of the personal information, the output approval processing module in the approval process through a separate interface or by using the electronic payment linkage module is configured to work with the electronic payment system of the user organization.

In addition, the output approval request module is linked to the output document / image transmission module of the output information transmission unit 120 when requesting the output approval to attach the user's document or image to be requested.

Referring to FIGS. 5A to 5D, an example in which an output button is activated and output only after a pop-up window for approving an output is presented and then a request for approval and an output is approved.

Here, a link for viewing an output document or an image may be provided in the interface for output approval as shown in FIG. 5C.

Depending on the design conditions, the interface and contents different from those of FIGS. 5A to 5D may be presented.

Of course, the output button can be activated or automatically output after the output is approved.

6 is a diagram illustrating an example of masking and outputting personal information in a personal information security system according to an exemplary embodiment of the present invention.

Referring to FIG. 6, the personal information masking module performs a function of allowing the administrator to approve an output and when the document is output, the personal information is masked and output.

Of course, according to the design conditions, the administrator can set the masking part.

7 is a diagram illustrating an example of transmitting a mail to an administrator in a personal information security system according to an embodiment of the present invention.

The administrator mail notification module performs a function of automatically notifying an administrator when a user outputs a document including personal information.

Referring to FIG. 7, the administrator mail includes which user outputs which document from which printer, when, and the like, and transmits the output data together to view the output document or image.

The output information transmitter 120 transmits the output log and the output document / image to the server 200.

The output log transmission module generates an output log and transmits it to the server 200 when the user attempts to output a document including personal information or actually outputs a document including personal information.

Here, the output log includes information such as user ID, Windows login ID, document name, PC name, PC IP address, print time, printer name and document name.

The output document / image transmission module performs a function of generating an image for each document or page and transmitting the image to the server 200 when the user actually outputs the document.

For example, if the document that the user wants to output is in the form of a stored file, the file is transmitted or an unsaved file or CRM data of the personal information processing system generates and transmits an image for each page.

This is possible by having the printing framework control module perform rendering for each page.

FIG. 8 illustrates an example of registering a discard schedule in a personal information security system according to an embodiment of the present invention. FIG. 9 illustrates an example of performing a discard notification. FIG. 10 illustrates an example of managing a discard schedule. Figures each showing an example of confirming.

The waste registration module is a window that immediately pops up when a user outputs a document containing personal information. The waste registration module displays a detected personal information and output information, and performs a function of inputting a storage location and a scheduled disposal date of the output.

Depending on the design conditions, the content of the information presented can be changed, and it is also possible to input additional information for disposal other than the storage location and the date of disposal.

Referring to FIG. 9, the discard notification module automatically notifies a user of a document to be discarded when a pre-registered discard date arrives.

Referring to FIG. 10, the waste registration module provides an interface through which the user can manage a waste schedule, and the user may use the same to change and register the waste schedule.

Referring to FIG. 11, the discard approval request module provides an interface that allows a user to confirm the discard after discarding a document including personal information, and the user can use it to check whether the administrator has been confirmed. do.

12 is a diagram illustrating an example of processing a personal information pattern registration and output policy in a personal information security system according to an embodiment of the present invention.

An example of setting personal information pattern information and an output policy in the output setting unit 210 of the server 200 is illustrated. An administrator registers a pattern of personal information regular expression and sets an output policy when a registered pattern is detected. To help.

The personal information pattern processing module provides an administrator interface for designating a detection pattern, and the administrator registers a pattern such as a social security number, a card number, an account number, a phone number, or a designated keyword by using the manager interface.
That is, the pattern includes pattern formation criteria and designated keywords including the number and number rules included in social security numbers, card numbers, account numbers, telephone numbers, etc. It can be a standard that each agency treats as a secret.
In other words, the administrator registers the pattern such as the pattern formation criteria and the designated keyword by using the administrator interface so that the agent can detect the personal information using the pattern.

The output policy processing module provides an administrator interface to set the number control, no action, output log transmission, image dump log, text loading, output blocking, email or masking control when a pattern is detected.

Depending on the design conditions, the output policy can be made to select other items in addition to the above-mentioned matters.

The output approval unit 220 performs a function of allowing an administrator to be interlocked with the output approval request module and the disposal approval request module included in the agent 100.

The output approval processing module performs a function of allowing the administrator to process the approval by using the approval processing interface when the user requests approval to output a document including personal information.

The electronic payment interlocking module is a module for interworking with the electronic payment system of the user organization. For example, when the electronic card information interlocking unit detects more than a reference number, the electronic payment interlocking module may be automatically operated.

Depending on the design conditions, instead of the output approval processing module, the electronic payment interlocking module can be operated at all times, and it can of course be provided with an interface for the administrator to change and register the reference number and the upper payer.

The revocation approval processing module performs a function that allows an administrator or a verifier to approve a request made in the revocation approval request module.

13 is an example of querying the output log in the personal information security system according to an embodiment of the present invention, Figures 14a to 14c shows an example of querying the output statistics in the personal information security system according to an embodiment of the present invention Drawing.

The output log inquiry module performs a function of receiving an output log from the agent 100 when the user attempts to output or outputs a document including personal information and collectively inquiring the administrator.

The output document / image inquiry module performs a function of receiving a printed document or document image when the user outputs a document including personal information so that the user can check the document.

The output statistics module performs a function that enables the administrator to collectively inquire output statistics by department, period, and individual.

On the other hand, it is noted that the above-mentioned 'manager', 'verifier' and 'parent' are not limited to the vocabulary expressed as changeable in the administrator interface according to the organization's policy.

In addition, what was described above using FIGS. 1-14 has described only the main matter of this invention, and this invention is limited to the structure and function of FIGS. 1-14 as many designs are possible within the technical scope. It is not obvious.

100: agent
110: output security
120: output information transmission unit
130: disposal unit
200: Server
210: output setting section
220: output approval unit
230: output management unit

Claims (12)

agent; In the personal information security system comprising a;
When the user prints a document,
The agent collects output data by (a) controlling a printing framework of an operating system (OS), and (b) detects personal information among the data;
The server provides the agent with a pattern-specified keyword and pattern formation criterion for detecting the personal information;
The document is a personal information security system, characterized in that it includes both when stored as a file and not stored.
delete The method of claim 1,
And the document includes both text and images.
The method of claim 1,
The document is a personal information security system, characterized in that the document processed in the personal information processing system used by the user.
The method of claim 1,
If the agent detects personal information,
Personal information security system, characterized in that the output is blocked.
The method of claim 5, wherein
If the number of the personal information is more than the reference number,
Personal information security system, characterized in that the output is approved using the output approval interface of the server or the electronic payment interface using the user's electronic payment system.
The method according to claim 6,
The output approval interface of the server or the electronic payment interface using the user's electronic payment system, characterized in that the user is automatically attached to the document or the image of the document, personal information security system.
The method according to claim 6,
If the above output is approved,
Masking and outputting the personal information, and transmits the output information to the administrator by a personal information security system.
The method according to claim 1 or 8,
When the agent detects or outputs the personal information,
Personal information security system, characterized in that for generating an output log and transmitting to the server.
The method of claim 9,
The agent simultaneously with the output of the personal information,
A personal information security system, characterized by allowing a user to register a disposal date and a document storage location.
11. The method of claim 10,
When the agent reaches the disposal date,
Personal information security system, characterized in that for driving the discard alarm window.
The method of claim 9,
When the agent outputs the personal information,
And provide an interface for allowing a user to register, change the revocation date or request for revocation of the revocation.

Images