KR101308703B1 - Security system for electronic commerce and method thereof - Google Patents

Abstract

PURPOSE: An electronic commerce security system and a method thereof are provided to fundamentally prevent the possibility that a user terminal accesses a phishing website and restrict the access of other websites during the access to the valid website, thereby preventing data leakage. CONSTITUTION: A configuration management unit (56) downloads information from a security policy server, updates the downloaded information, and transmits information generated in a security transaction module to the security policy server. A lock management unit (57) restricts the access of other websites while a user terminal accesses a valid website, and blocks the movement and copy of data generated while the user terminal accesses the valid website. If the access to the valid website is completed, a delete management unit (58) completely deletes the data generated during the access to the valid website. [Reference numerals] (50) Security agent; (51) Monitoring module; (52) Monitoring unit; (53) Validity determination unit; (55) Module for safe dealing; (56) Configuration management unit; (57) Lock management unit; (58) Delete management unit; (59) Alarm management module; (60) Log collecting unit

Description

Electronic commerce security system and method thereof

The present invention relates to an e-commerce security system and a method thereof, and more particularly, to prevent the user terminal from being connected to the impersonation website, and to prevent the data from being leaked during and after being connected to a valid website. The present invention relates to an e-commerce security system and a method for blocking the same.

With the recent development of the Internet and the activation of electronic commerce, e-mails and messengers have been used to illegally obtain personal financial information such as credit card numbers, website passwords, and bank account security card numbers. Phishing scams are being used to impersonate messages from trusted people or businesses, or to drive access to impersonal websites rather than to genuine websites.

Accordingly, the government and each e-commerce institution are trying to prepare various measures to prevent phishing. For example, each e-commerce company encourages its customers to distribute and install security programs such as antivirus, keyboard security, and personal PC firewalls. Will work.

Among these, the vaccine program is removed after diagnosing a virus of a predefined type. Therefore, there is a disadvantage that it is cumbersome because regular updates to the vaccine data is essential. In addition, if a new virus or malware is generated, there is a limit that can not be blocked until a problem occurs.

The keyboard security program runs on the keyboard driver program of the PC OS, encrypts the keyboard input values, transfers them to the memory, and decrypts the input data in the PC memory. However, keyboard security programs can be disabled by recent hacking techniques, and there is a limitation that hacking is possible because the input data is decrypted in the PC memory.

Personal PC firewalls block predefined network ports and allow you to define security levels. However, personal PC firewalls generate frequent errors due to conflicts with user programs, and have low user convenience when applying security policies. In addition, there is a disadvantage that other process control is impossible when driving the personal firewall.

On the other hand, financial institutions have been using phishes to prevent phishing by using one time password (OTP) for several years. However, OTP has limitations that can only be used by financial institutions, and the penetration rate is very low. Accordingly, Korean Patent Registration No. 10-1027228, "Authentication device for internet security, method and recording medium recording the same", proposes a technology for performing authentication by using an OTP device and a 2D code together.

These existing security programs are based on the policy of strengthening security measures without affecting the user computing environment as much as possible, thus allowing applications or processes on the PC. Accordingly, security programs can be hacked using the current hacking techniques, and thus there is a limitation of PC security.

Korean Patent Registration No. 10-1027228

Accordingly, the problem to be solved by the present invention is to fundamentally prevent the user terminal from accessing the impersonated website, to restrict the operation of other programs on the user terminal while connected to the effective website, and to access the effective website. The present invention provides an e-commerce security system and method for completely erasing data after termination and preventing data from being leaked.

An electronic commerce security system according to an embodiment of the present invention for solving the problem, a security policy server for providing a security policy to prevent phishing, the user terminal for downloading the security policy to download to the user terminal And prevent the user terminal from accessing a pretended website, restrict access to another website while accessing a pre-authenticated valid website, and leak data generated while accessing the valid website. And a security policy that blocks the security agent, and a security policy set by the security policy server and log information collected and provided by the user terminal through the security agent.

An electronic commerce security method according to an embodiment of the present invention for solving the above problems is the installation step of downloading and installing a security agent which is a program having a security policy to prevent phishing from the external security policy server to the user terminal, A monitoring step of monitoring website access of the user terminal, a validity determining step of determining whether the website to be accessed is a valid website previously authenticated, and permission to access the website of the user terminal according to whether the website is valid A connection determination step of determining whether to determine whether the user terminal is connected to a valid website, and a security step of restricting the user terminal from accessing another website while the user terminal is connected to the valid website.

According to the present invention, it is possible to fundamentally block the possibility of the user terminal accessing the impersonated website and to restrict the access of another website during the access to the valid website, thereby preventing data from being leaked, and accessing the effective website. After the termination, the stored data is completely deleted to prevent the data from leaking out, so that the user can use the electronic commerce with confidence.

1 is a schematic configuration diagram of an electronic commerce security system and a user terminal provided with a security service from the system according to the present invention.
FIG. 2 is a detailed configuration diagram illustrating the function of the security management console of FIG. 1.
FIG. 3 is a detailed configuration diagram of the security policy server of FIG. 1.
4 is a detailed configuration diagram of the security policy DB of FIG. 1.
5 is a functional diagram of a security agent provided to a user terminal in the security system of the present invention.
6 is a flowchart illustrating a process of securing a user terminal in the security system of the present invention.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention.

1 is a schematic configuration diagram of an electronic commerce security system and a user terminal provided with a security service from the system according to the present invention.

The e-commerce security system 1 prevents phishing scams in which the user terminal 100 accesses the impersonated website and leaks user information, and the security policy server 10, the security management console 30, and security. Policy DB 20 may be included.

The security policy server 10 is installed in the user terminal 100 to provide a security agent which is an application program to prevent phishing, and may exchange information with the user terminal 100 through the security agent. The security policy server 10 may be composed of one server for one company, or may be composed of a plurality of servers.

The security policy DB 20 may store and manage various policy information necessary for the operation of the security policy server 10 and various log information collected and provided through a security agent in the user terminal 100.

The security management console 30 is an administrator PC capable of performing input and output of information by the administrator of the company operating the security system 1, the security policy server 10, security policy DB (20), security management console (30) Settings and management for the operation of the security system 1 can be performed, such as setting or managing the environment of the system), and setting the policy of the security agent.

The user terminal 100 may be connected to the security policy server 10 of the electronic commerce security system 1 through a network, and may download and install a security agent that performs electronic commerce security.

FIG. 2 is a detailed configuration diagram illustrating the function of the security management console of FIG. 1.

The security management console 30 is connected to the security policy server 10, the server control function 31 for monitoring the environment setting and operation of the security policy server 10, for the environment setting and tuning of the security policy DB (20) DB control function (32), console control function (33) for setting the environment of the security management console (30), agent control function (34) for setting and managing policies for the security agent, security policy server (10) and An information analysis and report function 35 for analyzing and reporting information about the user terminal 100 and an inter-system interworking module support function 36 may be performed.

Let's take a closer look at each function as follows.

The server control function 31 has a function of setting or changing an environment of the security policy server 10, a function of monitoring the operation status of the security policy server 10, a function of remotely controlling the security policy server 10, and security. If more than one policy server 10 is installed, it may include an environment setting function for operating in conjunction with each security policy server 10.

Here, the function of setting or changing the environment of the security policy server 10 is that the security policy server 10 performs a user registration procedure when the user terminal 100 is connected, or provides a security agent to the user terminal 100. Or when performing various roles such as exchanging information with a security agent, it may include a function of setting or changing a policy as a reference.

Environment setting function for a plurality of security policy server 10, when the security policy server 10 is composed of a plurality of servers, to set the policy and environment necessary for each security policy server 10 is effectively linked and operated This function is to. In this case, the necessary policy may include criteria such as an operation priority between the security policy servers 10, a limit value, load balancing, and the like. That is, in what order the plurality of security policy servers 10 will operate, the role limit of the security policy server 10, the number of user terminals 100 that can be connected to each security policy server 10 at a time, and each The policy may include a policy for distributing load to the security policy server 10.

The DB control function 32 may include a function of setting an environment of the security policy DB 20, a function of remotely backing up the security policy DB 20, a function of remotely tuning the security policy DB 20, and the like. have.

The console control function 33 has a function of setting a basic operating environment of the security management console 30, a function of registering and managing an operation manager operating the security management console 30, setting up multiple managers and setting reporting criteria. Functions and the like. The security management console 30 may not only participate in the operation and management of the manager of the same level, but may also be directly related to the operation and management of the upper level manager or to manage and supervise the operation of the operation manager. do. The console control function 33 includes a function of setting such multiple managers, and a function of setting criteria for reporting to the multiple managers.

The agent control function 34 sets / changes / deletes baseline information, sets / changes / deletes event occurrence criteria, sets / changes / deletes log acquisition items and cycles, upgrades and patches of security agents. It may include a function of setting / changing / deleting a policy and a function of setting / changing / deleting a real-time alerting criterion.

Here, the reference information is information for determining whether the user terminal 100 accesses a valid website previously authenticated when the user terminal 100 accesses a website, and includes a server address and a URL address of the valid website. can do. The real-time alert is a function of providing an alert to the user terminal 100 when it is determined that the website to be accessed by the user terminal 100 is not a valid website. The real-time alert criterion refers to a criterion for generating a real-time alert. .

The information analysis and report function 35 is used to exchange access information of the user terminal 100 generated by the operation of the security policy server 10, download information of the security agent, and information with the security agent installed in the user terminal 100. This function analyzes and reports information such as log information acquired.

The inter-system interworking module support function 36 is a function for supporting a module for interworking with a main system or an additional system of a service operating entity providing the security system 1, and automatically collects reference information and a control system interworking module. , May include a personnel information interworking module.

FIG. 3 is a detailed configuration diagram of the security policy server of FIG. 1.

The security policy server 10 is a console input processing unit 11 for receiving information or commands from the security management console 30 and a network communication unit 12 for supporting communication with a security agent installed in the user terminal 100. And an agent processor 13 for exchanging information with the security agent, and a server manager 14 for protecting a function of the security policy server 10 itself.

The console input processing unit 11 may receive various environment values input by the administrator through the security management console 30 and store them in the security policy DB 20. The environment values input through the security management console 30 may include policies and environment values for the security policy server 10, policies and environment values for the security policy DB 20, and policies and environments for the security management console 30. Value, a policy applied to a security agent, and the like, and the console input processing unit 11 stores these policies and environment values in the security policy DB 20.

In addition, the console input processing unit 11 may process a command input through the security management console 30 and deliver it to the security agent. When a command is input from the security management console 30, the console input processing unit 11 may extract a value corresponding to the command from the security policy DB 20 and transfer the value to the security agent. The extracted value may be reprocessed to deliver the reproduced value to the security agent, or the command value input from the security management console 30 may be directly transmitted to the security agent.

The agent processing unit 13 performs functions such as determining the validity of the security agent, checking the version of the security agent, and processing values input from the security agent.

The agent processing unit 13 may check the validity of the security agent by using the security agent information provided from the security agent periodically when communication with the security agent is started or during communication with the security agent. When the validity of the security agent is confirmed, the session of the security agent with the security policy server 10 is allowed. In addition, when the validity of the security agent is confirmed, the agent processing unit 13 checks the version of the security agent, and if it is not the latest version, extracts the data necessary for updating to the latest version from the security policy DB 20 security agent Can be delivered to.

The agent processing unit 13 may provide information provided by the security agent, for example, information about a website to be accessed by the user terminal 100, and the user terminal 100 accesses the website using a browser or a window explorer. While transmitting the generated log information and the like to the security policy DB (20) to be stored. In addition, when information is requested from the security agent, the agent processing unit 13 compares the requested information and provides a valid and appropriate value to the security agent. For example, when requesting the update of the reference information required to confirm whether the website to be accessed from the security agent is a valid website, the agent processing unit 13, according to the request, the latest from the security policy DB (20) The reference information can be retrieved and sent to the security agent.

The server manager 14 may perform a self-detection function to protect the environment of the operating system required for the operation of the security policy server 10 and to protect the function of the security policy server 10.

On the other hand, the security policy server 10 may be composed of a plurality of servers, in this case, each other security policy server 10 so that each security policy server 10 can operate smoothly without conflict with the other security policy server (10) Means for performing a mutual authentication function for authenticating the < RTI ID = 0.0 >), < / RTI > In addition, a separate server manager for managing the security policy server 10 may be configured.

4 is a detailed configuration diagram of the security policy DB of FIG. 1.

The security policy DB 20 stores a policy storage unit 21 for storing various policies and environment settings inputted from the security management console 30, and stores information of a user who has registered through a connection of the user terminal 100. It may include a user information storage unit 22, and a connection information storage unit 23 for storing information provided through communication with the security agent installed in the user terminal 100.

The policy storage unit 21 includes policy and environment setting information of the security policy server 10, environment setting information and tuning information of the security policy DB 20, environment setting information of the security management console 30, and a policy for a security agent. Information can be stored.

The user information storage unit 22 may store personal information such as a user's name, address, ID, password, and the like, and information about the user terminal 100 used by the user.

The access information storage unit 23 may store log information including information of a valid website accessed by the user using the user terminal 100.

5 is a functional diagram of a security agent provided to a user terminal in the security system of the present invention.

The security agent 50 can be largely composed of two functional modules, one for monitoring module 51 and the other for secure transaction module 55.

When the user terminal 100 tries to access the website, the monitoring module 51 may perform a function of allowing or disallowing access by analyzing and monitoring whether the website is a valid website, and the safe transaction module 55. ) May perform a function of protecting the user terminal 100 so that a secure transaction can be made when the user terminal 100 accesses a valid website and an electronic commerce is made.

The function of each module is as follows.

The monitoring module 51 monitors the website access of the user terminal 100, collects information on the website to be accessed, and collects the monitoring unit 52 and the monitoring unit 52 to determine whether the website is connected. It may include a validity determination unit 53 for determining whether the website to be accessed according to one information is a valid website.

The monitoring module 51 is a service mode of an operating system, and is automatically loaded and driven when the user terminal 100 is booted, and has a function of preventing another program from removing the monitoring module 51 or delaying an operation. .

The monitoring unit 52 may operate when an internet browser or a window explorer is executed in the user terminal 100. For example, after the browser is executed in the user terminal 100, when the user inputs the address of the website to be connected to the address bar of the browser, the user clicks the URL address received by mail or messenger to automatically open the browser. When the user attempts to connect to the website of the corresponding URL address, when the user attempts to connect to the website designated by the program or the specific program received by mail or messenger, the user terminal 100 If a program that is already installed or installed at random is running a browser and attempts to connect to the website specified by the program, the user is registered on the desktop of the user terminal 100 or a shortcut link or bookmark of the browser. Click the button to launch your browser and Monitoring 52 If you try to establish a connection to the website is automatically activated.

When the browser is operated in the above-described case, the monitoring unit 52, URL information, website address, port number, browser caption name, tab address, tab ID, tab name, tab group ID of the website that the browser is to access , Access information such as tab group name can be collected. The monitoring unit 52 transmits the collected access information to the validity determining unit 53, and the browser accesses the website until the validity determining unit 53 determines whether the corresponding website is a valid website. Will be delayed. In this case, the monitoring unit 52 may display a message indicating that the validity of the website is being determined on the user terminal 100.

When the monitoring unit 52 receives a result of determining the validity of the website by the validity determining unit 53, the monitoring unit 52 may perform an operation corresponding to the result. If the validity determination unit 53 determines that the website is a valid website, the monitoring unit 52 displays a guide message on the user terminal 100 that allows access to the valid website, and at the same time. Clear the delay so that the browser can connect to a valid website. In addition, the monitoring unit 52 activates the secure transaction module 55 so that the user can perform a secure electronic commerce as the browser accesses a valid website.

On the other hand, if the validity determination unit 53 determines that the website is impersonating the website, the monitoring unit 52 displays a warning message for restricting access to the website on the user terminal 100. At the same time, the monitoring unit 52 may forcibly terminate the browser or display a message requesting the user to terminate the browser. When attempting to access the impersonated website in this way, the monitoring unit 52 may force the browser to shut down or simply display a message as an option. It may be set.

The validity determination unit 53 receives the access information collected by the monitoring unit 52 and compares it with the reference information that the security agent 50 has. The user terminal 100 determines whether the access information is identical to the reference information. You can determine the validity of the website you are trying to access.

Here, the reference information is watch information provided from the security policy server 10 at the time of initial installation of the security agent 50 and is information on valid websites authenticated by the security policy server 10. The reference information may include valid server information and filter information for determining a valid website, such as server addresses and URL information of valid websites authenticated by the security service provider 1 and the service provider providing the security system 1. have. The reference information is provided encrypted and may be included in the security agent 50 itself and stored. Alternatively, the reference information may be stored and operated outside the security agent 50 as a separate file.

In addition, the validity determination unit 53 communicates with the security policy server 10 at the time of booting the user terminal 100, when a specific event occurs, or periodically, which the version of the security agent 50 and the security agent 50 have. The versions of the reference information can be compared. As a result of the comparison, when the version of the security agent 50 or the reference information is lower than the version of the security policy server 10, the validity determination unit 53 may request an update from the security policy server 10. When the security policy server 10 provides data for updating to the latest version, the validity determination unit 53 downloads the corresponding data to update the security agent 50 or the reference information.

Meanwhile, the monitoring unit 52 and the validity judging unit 53 may perform mutual integrity verification, and when the monitoring unit 52 and the validity judging unit 53 start operation, the safety transaction is performed. When calling the module 55, it may include when updating the reference information through communication with the security policy server (10).

The secure transaction module 55 may include a configuration manager 56, a lock manager 57, a deletion manager 58, an alert manager 59, and a log collector 60.

The configuration manager 56 is responsible for communication with the security policy server 10, downloads and updates information from the security policy server 10, and updates the information generated by the secure transaction module 55 to the security policy server 10. It can play the role of delivering.

The configuration manager 56 downloads information and policies necessary for protecting the environment of the user terminal 100 for secure electronic commerce from the security policy server 10, and compares the downloaded information and policies with existing information and policies. By updating the changes, the changed information and policies can be applied to the e-commerce. With this function, the configuration manager 56 checks the integrity of the existing information and policies, and if the information and policy is newly provided from the security policy server 10, it can check the integrity of the information and policy.

In addition, the configuration manager 56 may determine a local store to be used when the user terminal 100 accesses a valid website according to a policy from the security policy server 10, and transmit the same to the lock manager 57. The configuration manager 56 transmits various log data collected by the log collector 60 to the security policy server 10, and encrypts the log data before transmitting to the security policy server 10.

The configuration manager 56 cancels the operation of the secure transaction module 55 when the user terminal 100 terminates the access to the effective website. At this time, the function of the configuration manager 56 itself may be automatically terminated.

The lock manager 57 serves to protect the environment of the user terminal 100 according to the policy of the configuration manager 56.

The lock manager 57 may restrict access to another website while the user terminal 100 is accessing a valid website. That is, when the lock manager 57 tries to access another website through a separate browser or window explorer in the user terminal 100, the lock manager 57 blocks the message or informs that the user terminal 100 is connected to another website. ), You can terminate the access to the currently active website. In this case, whether to block access to another website or to terminate access to a valid website being accessed may be selected by the user as an optional item and may be selected by a policy set in the security policy server 10. have.

In addition, the lock manager 57 may limit the viewing and changing of information in the system registry while accessing a valid website, as well as the creation and execution of additional processes. Through the operation of the lock management unit 57, by preventing the effective website and other websites from accessing the user terminal 100 at the same time, it is possible to prevent information from being leaked from the effective website during electronic commerce on the effective website. It can be prevented at the source.

In addition, the lock management unit 57 prevents data that is temporarily created or changed in the local storage determined by the configuration management unit 56 from being copied or moved to another area, and blocks other processes from accessing the local storage. Stored information can be secured.

When the connection of the valid website is terminated, the deletion manager 58 may delete data generated during the connection of the valid website. The data generated during the connection of the effective website is stored in the local repository determined by the configuration manager 56, and the deletion manager 58 deletes the data stored in the local repository and the data stored in the predetermined area. To ensure that data is not restored, the DOD (Department of Defense) standard performs a complete deletion. As such, all data on the activities including the e-commerce on the effective website are deleted by the deletion managing unit 58, so that the data generated in the previous valid website is generated even if the user terminal 100 accesses the impersonated website later. Will not leak.

The alert manager 59 may display a message on the user terminal 100 so that the user can easily understand the events generated by the configuration manager 56, the lock manager 57, and the delete manager 58. For example, when the configuration manager 56 receives new information and policies from the security policy server 10, the alert manager 59 may display a message indicating that the information and policies are updated to the user terminal 100. . If the lock management unit 57 attempts to access another website during the operation of the effective website, the warning management unit 59 may display a warning message on the user terminal 100 indicating that another website is attempting to be accessed. .

In addition, the alert management unit 59 receives the event generated by the user from the user terminal 100, or processes itself or the configuration management unit 56, lock management unit 57, deletion management unit 58 of the secure transaction module 55. It can also be delivered to the back.

If the log collection unit 60 is allowed to access a valid website and the session starts, the log information generated during the process from the start of the session to the end of the session, the configuration management unit 56 of the secure transaction module 55, the lock Log information on the result of performing the functions of the management unit 57, the deletion management unit 58, and the warning management unit 59, the user terminal 100 or any process in violation of the policy set by the security policy server 10 You can collect log information about this. The log collector 60 may transfer the collected log information to the configuration manager 56.

6 is a flowchart illustrating a process of securing a user terminal in the security system of the present invention.

When the user terminal 100 connects to the security policy server 10 of the security system 1, the security policy server 10 receives the security agent 50 of the service provider providing the security system 1 from the user terminal 100. ) The user terminal 100 downloads and installs the security agent 50 (S600).

After the security agent 50 is installed, when the user terminal 100 is rebooted, the validity determination unit 53 and the configuration management unit 56 of the security agent 50 start communication with the security policy server 10 ( S605). The validity determination unit 53 compares the version of the security agent 50 and the reference information with the version of the security policy server 10, and requests an update when a new version exists in the security policy server 10. The configuration manager 56 compares the information and the policy necessary for the electronic commerce with the information and the policy stored in the security policy server 10, and requests an update if a new information and the policy exist.

When the user executes the Internet browser or the Windows Explorer of the user terminal 100, and attempts to connect to a specific website using the Internet browser or the Windows Explorer (S610), the monitoring unit 52 of the security agent 50 is operated To start. The monitoring unit 52 may include information such as URL information, website address, port number, browser caption name, tab address, tab ID, tab name, tab group ID, and tab group name of a web site to be accessed by a browser or a window explorer. Collect (S615), and passes the collected information to the validity determination unit 53 requests to confirm whether the website to be accessed is a valid website (S620). While the validity determination unit 53 determines the validity of the website, the monitoring unit 52 may display a message informing the user terminal 100 that the connection is delayed while determining the validity of the website.

The validity judging unit 53 compares the reference information provided from the security policy server 10 with the information collected by the monitoring unit 52 (S625), and when the results of both sides match, the web to be accessed The website is determined to be a valid website, and if the results of both parties do not match, the website to be accessed is determined to be an impersonated website. When the determination is completed, the validity determination unit 53 transmits the determination result to the monitoring unit 52.

If the website to be accessed is a valid website, the monitoring unit 52 displays a message informing that it is a valid website, connects sessions, and activates the secure transaction module 55 (S635). On the other hand, if the website to be accessed is a impersonation website, a warning message indicating that the impersonation website may be displayed, and a message forcing the browser to be terminated or requesting the browser to be terminated may be displayed on the user terminal 100 ( S630).

If the website to be accessed is a valid website, the configuration management unit 56 of the secure transaction module 55 determines a local storage for storing data generated while the user terminal 100 accesses the valid website and is active. And drive policies for safe e-commerce. While the user terminal 100 is accessing the valid website, the log collecting unit 60 collects log data generated while working on the valid website (S640).

The lock manager 57 prevents data temporarily stored and changed in the local storage from being copied or moved to another area. In addition, the lock manager 57 restricts the viewing and changing of information in the system registry and restricts the creation and execution of additional processes. If an attempt is made to access another website using a separate browser or window explorer during operation of a valid website, the lock management unit 57 blocks access to another website or accesses another website. Is displayed as a warning message and the connection of the valid website being accessed is terminated (S645).

When the user completes the e-commerce and terminates the access to the valid website (S650), the log collecting unit 60 passes the collected log data to the configuration manager 56, and the configuration manager 56 encrypts the log data. To the security policy server 10 (S655). In addition, the deletion management unit 58 completely deletes data generated and / or changed while stored in the local storage while accessing the effective website (S660). Then, the drive management unit terminates the operation of the safe transaction module 55.

As described above, in the security system 1, when the security terminal 50 is installed in the user terminal 100 and the user terminal 100 accesses the website, it is determined whether the website is a valid website. In addition, while the user terminal 100 is accessing the effective website, other websites and the effective website are prevented from working together, data is copied and moved, and additional system registry or processes are created. And by preventing the user terminal 100 from accessing the impersonated website, and preventing the data from the valid website from being leaked. In addition, after the access to the valid website is terminated, the data generated and / or changed during the access to the valid website is completely deleted by the DOD standard, thereby eliminating the possibility of data leakage later.

That is, according to the security system 1, it is possible to block the possibility that the user terminal 100 accesses the impersonated website, to prevent the data from being leaked while accessing the valid website, and even after the access of the valid website is terminated. This can prevent the leakage of the user, so that the user can use the e-commerce with confidence.

Meanwhile, the security system 1 may be installed at each service provider providing electronic commerce, respectively, to build a dedicated security system for each service provider, or to share information on a valid website for multiple service providers. Of course, the system can also be used to build.

Embodiments of the present invention include a computer-readable medium having program instructions for performing various computer-implemented operations. This medium records a program for executing the e-commerce security method described above. The medium may include program instructions, data files, data structures, etc., alone or in combination. Examples of such media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD and DVD, programmed instructions such as floptical disk and magneto-optical media, ROM, RAM, And a hardware device configured to store and execute the program. Or such medium may be a transmission medium, such as optical or metal lines, waveguides, etc., including a carrier wave that transmits a signal specifying a program command, data structure, or the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

Although the preferred embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of right.

1: Security System 10: Security Policy Server
20: Security Policy DB 30: Security Management Console
50: security agent 51: monitoring module
52: monitoring unit 53: validity determination unit
55: safe transaction module 56: configuration management unit
57: lock management unit 58: delete management unit
59: alarm management unit 60: log collection unit

Claims (23)

Security policy server that provides a security policy to the user terminal to prevent phishing,
Downloaded and installed on the user terminal for the execution of the security policy, preventing the user terminal from accessing a pretended website, restricting access to other websites while accessing a valid website previously authenticated; A security agent that blocks the leakage of data generated while accessing the valid website, and
A security policy DB configured to store the security policy set in the security policy server and log information collected and provided by the user terminal through the security agent;
The security agent,
A monitoring module for monitoring website access of the user terminal, analyzing and monitoring whether a website to be accessed is the valid website, and determining whether to access the website of the user terminal;
And a secure transaction module for restricting access to other websites and preventing the leakage of data while the user terminal accesses the valid website and performs electronic commerce.
The safe transaction module,
A configuration management unit for downloading and updating information from the security policy server and transferring the information generated in the secure transaction module to the security policy server;
A lock management unit that restricts access to another website while the user terminal is accessing the valid website and blocks copying and movement of data generated while accessing the valid website;
A deletion management unit that completely deletes data generated during connection of the effective website when the access of the valid website is terminated;
And a log collector configured to collect log information generated during a process from session start to end when a session is started due to access of the valid website. The method of claim 1,
And setting up and managing an environment of the security policy server and the security policy DB, and a security management console which is an administrator PC for setting a policy of the security agent. 3. The method of claim 2,
The security policy server,
A console input processing unit configured to receive information or a command from the security management console;
A network communication unit supporting communication with the security agent installed in the user terminal;
And an agent processing unit for exchanging information with the security agent and processing a request from the security agent. delete The method of claim 1,
The monitoring module,
A monitoring unit that monitors the website access of the user terminal and collects information on the website to be accessed to determine whether to permit the website access of the user terminal;
And a validity determination unit that determines whether a website to be accessed is a valid website according to the information collected by the monitoring unit. The method of claim 5, wherein
The monitoring unit is operated when the Internet browser or the Windows Explorer is executed in the user terminal, and the URL information, the website address, the port number, the browser caption name, the tab address, and the tab of the website to be accessed by the Internet browser or the Windows Explorer. E-commerce security system, characterized in that for collecting at least one information of the ID, tab name, tab group ID, tab group name. The method of claim 5, wherein
The validity determination unit,
The web site to be accessed by comparing valid server information and filter information for determining the valid web site, such as server addresses and URL information of the valid web sites provided from the security policy server, and information collected by the monitoring unit. E-commerce security system, characterized in that for determining the validity of. The method of claim 7, wherein
The monitoring unit,
And as a result of the determination of the validity determination unit, when the website to be accessed is a valid website, permits access to the website and activates the operation of the secure transaction module. The method of claim 7, wherein
The monitoring unit,
As a result of the determination of the validity determining unit, if the website to be accessed is a impersonation website, displaying a message indicating that the website is impersonation website on the user terminal, and then blocking access to the website; And displaying at least one message on the user terminal requesting connection termination. delete The method of claim 1,
If the lock management unit attempts to access another website through a separate browser or a window explorer while accessing the effective website, the lock manager blocks the access to the other website, and the user terminal And displaying at least one message informing that the user is accessing another website, and then terminating the connection of the valid website. The method of claim 1,
The lock management unit, while accessing the valid website, restricts the viewing and changing of information in the system registry and the creation and execution of additional processes. The method of claim 1,
The lock management unit, while accessing the valid website, e-commerce security system, characterized in that the data temporarily created or changed in the local storage is blocked from being copied or moved to another area. An installation step of downloading and installing a security agent, which is a program having a security policy for preventing phishing, from an external security policy server to a user terminal;
A monitoring step of monitoring a website access of the user terminal;
A validity determining step of determining whether the website to be accessed is a valid website previously authenticated;
An access determining step of determining whether to permit access to the website of the user terminal according to whether the website is valid; And
If the user terminal is connected to a valid website, while the user terminal is connected to a valid website, a security step of restricting the user terminal from accessing another website;
The security step,
Preventing accessing and changing information in the system registry and creating and executing additional processes while the user terminal is accessing the valid website. 15. The method of claim 14,
The validity determination step,
Collecting information about a website to be accessed by the user terminal;
Comparing the information collected about the website to be accessed with reference information about a valid website owned by the security agent;
And determining whether the website to be accessed is a valid website according to the degree of agreement between the collected information and the reference information. The method of claim 15,
The collected information includes at least one of URL information, website address, port number, browser caption name, tab address, tab ID, tab name, tab group ID, and tab group name of the website to be accessed. E-commerce security method, characterized in that. The method of claim 15,
And the reference information includes valid server information and filter information for determining the valid website such as server addresses and URL information of the valid websites provided from the security policy server. The method of claim 15,
As a result of the validity determination, if the website to be accessed is a impersonation website, displaying a message indicating that the impersonation website is on the user terminal;
And at least one of blocking access to the website and displaying a message on the user terminal requesting to stop accessing the website. 15. The method of claim 14,
The security step,
Monitoring access to another website through a separate browser or window explorer while accessing the valid website;
When the connection to the other website is detected, blocking the access to the other website, displaying a message indicating that the user terminal is accessing the other website, and terminating the access to the valid website. E-commerce security method comprising the step of executing at least one of the steps. delete An installation step of downloading and installing a security agent, which is a program having a security policy for preventing phishing, from an external security policy server to a user terminal;
A monitoring step of monitoring a website access of the user terminal;
A validity determining step of determining whether the website to be accessed is a valid website previously authenticated;
An access determining step of determining whether to permit access to the website of the user terminal according to whether the website is valid; And
If the user terminal is connected to a valid website, while the user terminal is connected to a valid website, a security step of restricting the user terminal from accessing another website;
The security step,
Preventing access to data that is temporarily created or changed in local storage from being copied or moved to another area while accessing the valid website. An installation step of downloading and installing a security agent, which is a program having a security policy for preventing phishing, from an external security policy server to a user terminal;
A monitoring step of monitoring a website access of the user terminal;
A validity determining step of determining whether the website to be accessed is a valid website previously authenticated;
An access determining step of determining whether to permit access to the website of the user terminal according to whether the website is valid; And
If the user terminal is connected to a valid website, while the user terminal is connected to a valid website, a security step of restricting the user terminal from accessing another website;
The security step,
And when the access of the valid website is terminated, completely deleting the data generated during the access of the valid website. An installation step of downloading and installing a security agent, which is a program having a security policy for preventing phishing, from an external security policy server to a user terminal;
A monitoring step of monitoring a website access of the user terminal;
A validity determining step of determining whether the website to be accessed is a valid website previously authenticated;
An access determining step of determining whether to permit access to the website of the user terminal according to whether the website is valid; And
If the user terminal is connected to a valid website, while the user terminal is connected to a valid website, a security step of restricting the user terminal from accessing another website;
The security step,
Collecting log information generated during a process from session start to termination when a session is started due to access of the valid website;
And when the session ends, transmitting the log information to the security policy server.

Images