KR101450250B1 - Method and apparatus for applying round policy to smart device - Google Patents

Abstract

According to an embodiment of the present invention, provided is a method for applying a round policy to a smart device which includes: a step of allowing a policy setting server to receive a smart device operation control policy including a specific condition from multiple policy control terminals, a step of allowing the policy setting server to notify the fact of policy control reception to the smart device; and a step of allowing the policy setting server to transmit the policy to the smart device, and to apply a specific policy which has a condition suitable for a present situation among the policies to the smart device.

Description

METHOD AND APPARATUS FOR APPLYING ROUND POLICY TO SMART DEVICE [0002]

The present invention relates to a method for applying a policy in a stereoscopic fashion to a smart device.

Recently, smart devices such as smart phones and tablet PCs have been commercialized and their functions have been diversified. Also, as the processing performance increases, there is a need to control the use of the smart device of the user for security or organizational management according to the status of the smart device user or the position within the organization. For example, confidential information such as a company is leaked to the outside, which can cause enormous damage to the company. It is unlawful for members of a company to divide research results, sales strategies, and confidential documents of public institutions, companies, In some cases, key information is leaked to a computer for storage in a computer storage medium or used for the operation of a business after retirement. To prevent such problems, the use of each user's smart device must be controlled The need is increasing.

A physical security method such as a method of retrieving a smart device of a user who needs control and control and a method of attaching a special security sticker to a camera and a data connection connector portion of the smart device are performed.

However, these methods can not prevent the wireless data transmission / reception through the smart device and can not completely prevent the occurrence of the security incidents, and there are adverse effects such as loss of the recovered terminals in order to take the physical method.

In response to these problems, MDM (Mobile Device Management) technology has been introduced to handle system control of smart devices. MDM is a technology for remotely controlling a smart device installed with MDM client in MDM server.

These MDM technologies enable MDM servers to be installed in organizations that require smart device control, and MDM clients to be installed on smart devices of each organization, so that the MDM client can be centrally managed and controlled It is possible to make it possible to do.

For example, the usability of a smart device of the organizer may be limited in a manner that restricts the use of the device at a predetermined time period or at a predetermined position.

However, the application of such a primary and collective policy has a problem that a policy which is not suitable to the actual user 's situation can be applied indiscriminately.

For example, if a school uses a policy that restricts the use of smart devices by students at a predetermined time, there is a problem that the policy is also applied to students who are at a place such as a home or a school in the corresponding time zone.

In other words, it was impossible to set up a policy that could accommodate various needs of various administrators.

In addition, when there are a plurality of organizations to which a user who owns a smart device belongs, there has been a problem that efficient policy management can not be performed using the conventional MDM technology.

On the other hand, media control technology for preventing data leakage on a network such as an intra-company intranet is also utilized. Media control technology is mandatory for software that blocks the use of media that may be related to the leakage of a file in order to allow a user terminal (PC, notebook) to access the company network to access the internal network without fear of data leakage Refers to technology that is installed and operated.

However, since this media control technology also operates only by a predetermined rule, it is difficult to control the dynamic smart device.

SUMMARY OF THE INVENTION It is an object of the present invention to solve the above-described problems of the prior art.

It is an object of the present invention to enable a plurality of organizations and a plurality of control subjects to stereoscopically control a smart device according to position, time, and other predetermined criteria.

Another object of the present invention is to allow a control subject of a specific smart device to be changed according to a place and a schedule, and only a control subject meeting the standard can manage and control the smart device according to its own policy.

It is still another object of the present invention to enable a proper security policy to be actively applied by changing the subject and the method of controlling the smart device according to the location or time.

It is another object of the present invention to enable a policy for a smart device to be set in three dimensions.

According to an aspect of the present invention, there is provided a method for controlling a smart device, the method comprising: receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals; Notifying the policy setting server of the reception of the policy control to the smart device; And transmitting the policy to the smart device so that the policy setting server can apply a specific policy having a condition that matches the current one of the plurality of policies to the smart device. / RTI >

In the case of applying the policy to the smart device, if there is no policy satisfying the current situation, a preset default policy may be applied.

In the application of the policy to the smart device, when there are a plurality of policies having conditions that match the current situation, the policy may be applied according to the priority order.

The step of applying the policy may include receiving control information from a policy control terminal that has transmitted a policy having a condition matching the current situation and transmitting the control information to the smart device in real time.

The condition may include at least one of time information and location information to which the policy is applied.

According to another aspect of the present invention, there is provided a smart device operating control method comprising: receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals; A policy setting notification unit for notifying the smart device of the reception of the policy control by the policy setting server; And a policy sending unit for sending the policy to the smart device so that a specific policy having a condition that matches the current status among a plurality of policies can be applied to the smart device, Device is provided.

In the case of applying the policy to the smart device, if there is no policy satisfying the current situation, a preset default policy may be applied.

In the application of the policy to the smart device, when there are a plurality of policies having conditions that match the current situation, the policy may be applied according to the priority order.

The policy sender may receive the control information from the policy control terminal that transmitted the policy having a condition that matches the current situation and transmit the control information to the smart device in real time.

The condition may include at least one of time information and location information to which the policy is applied.

According to another embodiment of the present invention, there is provided a method for applying a policy in three dimensions in a smart device, the method comprising: receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals through a policy setting server step; And applying a specific policy having a condition that matches the current status of the received operation control policy.

In addition, a computer-readable recording medium for recording a computer program for executing any one of the smart device stereoscopic policy application methods is provided.

According to the present invention, a plurality of tissues and a plurality of control subjects can stereoscopically control the smart device according to position, time, and other preset criteria.

According to the present invention, a control subject of a specific smart device is changed according to a place and a schedule, and only a control subject meeting the standard can manage and control the smart device according to its own policy.

According to the present invention, an appropriate security policy for a smart device is actively applied according to the location and time, and natural policy change can be brought about.

FIG. 1 is a diagram illustrating a configuration of an overall system for applying a stereoscopic policy to a smart device according to an embodiment of the present invention. Referring to FIG.
FIG. 2 is a flowchart illustrating a process of setting a stereoscopic policy for a smart device according to an embodiment of the present invention.
FIG. 3 is a flowchart illustrating a process of applying a policy in a smart device according to an embodiment of the present invention.
4 is a block diagram illustrating a configuration of a policy setting server according to an embodiment of the present invention.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings, so that those skilled in the art can easily carry out the present invention.

[Preferred Embodiment of the Present Invention]

FIG. 1 is a diagram illustrating a configuration of an overall system for applying a stereoscopic policy to a smart device according to an embodiment of the present invention. Referring to FIG.

Referring to FIG. 1, a system according to an embodiment of the present invention may include a smart device 100, a policy setting server 200, and a policy control terminal 300.

The smart device 100, the policy setting server 200, and the policy controlling terminal 300 can transmit and receive information through a communication network. The communication network may be configured without regard to its communication mode such as wired and wireless. For example, the communication network may be a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN) ), And the like. Or a public network to which a security policy is applied. The smart device 100 is a target terminal whose operation is controlled by a specific policy, and each of the users may be provided in a plurality of different ones. The policy control terminal 300 sets a policy for controlling the smart device 100 A plurality of terminals may be provided as a policy setting terminal.

The smart device 100 according to an embodiment of the present invention is a device that receives a security policy set by the policy setting server 200 and operates according to the policy. The term 'policy' should be understood as a concept including a condition for applying a security setting or a usage restriction setting to the smart device 100. The smart device 100, which is the subject of the policy reception, is a digital device including a wired / wireless communication function or other functions, and may be a memory device such as a tablet PC, a smart phone, a mobile phone, a navigation pad, a web pad, a PDA, And a digital device equipped with a microprocessor for computing power.

The policy setting server 200 receives various smart device control policies from the policy controlling terminal 300 and transmits the received various smart device control policies to the smart device 100.

The policy setting server 200 may transmit a currently set policy when a policy transmission request is received from the smart device 100. [ For example, a policy setting application distributed by the policy setting server 200 may be installed in the smart device 100. Depending on the operation of the application, the policy setting server 200 may periodically, aperiodically, The policy transfer request can be forwarded. Alternatively, when a user of the smart device 100 inputs a policy reception command through the smart device 100, the policy reception request may be transmitted to the policy setting server 200. [ When such a request is made, the policy setting server 200 may transmit one or more control policies to the smart device 100.

Meanwhile, according to another embodiment, the policy setting server 200 may transmit a notification message to the smart device 100 to receive the policy. For example, when a new policy is registered or a new policy is modified by the policy controlling terminal 300 and a new policy to be received by the smart device 100 is inputted from the policy controlling terminal 300, the policy setting server 200 May forward the notification message to the smart device 100. [ Upon receipt of the notification message, the smart device 100 may transmit a policy transmission request to the policy setting server 200. For example, the notification message may be delivered to the smart device 100 in the form of a push message or the like, and when the user of the smart device 100 requests the policy transmission through the interface included in the corresponding push message, A policy may be received from the policy setting server 200.

The policy control terminal 300 may be plural. There may be a plurality of entities for setting and managing the policy, and each manager may have one policy control terminal 300. However, the present invention is not limited thereto, and the policy control terminal 300 may perform policy control through a single terminal connected to the policy setting server 200 without all the policy control entities.

Each policy control entity can be a subject existing at different locations and times, and can set control policies with different conditions. According to one embodiment, smart device control policies can be set for different locations and different times. For example, the first policy control entity may be a school administrator who intends to limit the operation of the smart device 100 existing within the location of the school, during the curriculum time, and the second policy control entity may include a time outside the school curriculum hour, The user can be a parent who wants to control the operation of the smart device 100 when the user is out of the authority of the school administrator. The first policy control entity and the second policy control entity may have separate policy control terminals 300, respectively.

All the policies transmitted from the policy control terminal 300 are transmitted to the policy setting server 200 and finally transmitted to the smart device 100 and utilized for controlling the smart device 100. [ The policy control terminal 300 may have an application for policy setting and policy transfer to the policy setting server 200.

Hereinafter, a process of setting a policy for a smart device and applying the corresponding policy to the smart device will be described.

FIG. 2 is a flowchart illustrating a process of setting a stereoscopic policy for a smart device according to an embodiment of the present invention.

Referring to FIG. 2, a plurality of policy control subjects set different smart device control policies through respective policy control terminals 300 (S210).

Each subject may establish a respective policy for controlling the smart device 100 that exists in a particular environment (e.g., a specific location and a specific time). According to one embodiment, the conditions for the control time or control position can be set. The time can be set as a temporal range, and the control location can also be set to its geographical range. For example, the controlled area may be displayed in a circle or another polygon on a map provided by an application installed in the policy controlling terminal 300. [

On the other hand, each policy control entity can set different control conditions. For example, the first policy control entity may establish a policy for controlling the smart device 100 existing in the first place during the first time, input it through the policy control terminal 300, The subject can set a policy for controlling the smart device 100 existing in the second place for the second time and input the policy through the policy control terminal 300. [ The first time and the second time may be at least some overlapping times, but may not. The policy established by each policy control entity may be a specific operation control method (for example, blocking data transmission function) for the smart device 100, but may be performed by the smart device 100 conforming to the policy application condition May be set so that the operation control can be performed in real time at the corresponding time. In other words, the policy control entity itself may input only the condition that becomes the control subject of the smart device 100, and may control the smart device 100 in real time when the conditions are satisfied in the future.

Meanwhile, the policy control subjects may select the smart device 100 to which the policy application is applied. For example, an identifier of the smart device 100 or a smart device 100 satisfying a specific condition may be selected. Modifications to established policies can be made at any time by the subject. In addition, it may be possible to set a policy to be applied under conditions that do not correspond to a specific time and specific position, if necessary.

When the policy setting is completed, the corresponding policy is transmitted to the policy setting server 200 (S220). The policy transmission can be done through the policy control terminal 300.

Upon receiving the policy, the policy setting server 200 may notify the smart device 100 of the policy setting or the policy modification (S230). The notification message may include an instruction to take a policy that has been set or modified.

Upon receipt of the notification message, the smart device 100 requests the policy setting server 200 to transmit the set or modified policy (S240). In response to the request, the policy setting server 200 delivers the policy received from the policy controlling terminal 300 to the corresponding smart device 100 (S250). As described above, the smart device 100 receives the policy when there is a policy reception command from the policy setting server 200, and does not receive it in the form of polling.

Hereinafter, a process of selectively applying a policy in the smart device 100 receiving the policy will be described.

3 is a flowchart illustrating a process of applying a policy in the smart device 100 according to an embodiment of the present invention.

Referring to FIG. 3, the smart device 100 internally stores the policies retrieved from the policy setting server 200, and lists up the policies set by the plurality of policy control entities (S310).

Thereafter, it is determined whether there is a policy that matches the current situation (for example, the current time and the current position) and the applicable conditions (S320). If the policies are to be applied at a specific time and at a specific location, the policy to be applied at the current time and at the current location is loaded. It is also possible to filter out the policy corresponding to the current time and to filter out the policy to be applied to the current location, and vice versa. If there is a policy appropriate to the current situation, the policy is selected and the smart device 100 is controlled according to the policy (S330). If there are a plurality of selected policies, a specific policy may be selected according to a preset priority. For example, the policy type may be divided into a formal policy and a temporary policy by the policy setting subject, and the priority of the policy selection may be determined according to the type thereof.

According to the embodiment of the present invention, the smart device 100 may be controlled in real time by the policy control subject that sets the control condition conforming to the current situation. That is, if a policy control entity sets a policy for controlling the smart device 100 existing in the school from 9:00 am to 11:00 pm and stores the information in the policy setting server 200, The policy setting server 200 may issue a control command to the policy controlling terminal 300 to control the smart device 100. At this time, the policy control entity can specifically input an operation control command for the smart device 100 under a specific environment through the policy control terminal 300. [ For example, when a command to shut down the communication function of the smart device 100 in the school is issued, the communication function of the smart devices 100 meeting the condition can be blocked in real time. This control command may be transmitted to the smart device 100 through the policy setting server 200 or directly to the smart device 100.

On the other hand, if it is determined in step S320 that there is no policy suited to the current situation, the basic policy is selected and the smart device 100 may be controlled (S340). If there are more than one default policy, the policy will be applied according to the preset priority.

FIG. 4 is a block diagram showing in detail the configuration of the policy setting server 200 according to the embodiment of the present invention.

4, the policy setting server 200 may include a policy receiving unit 210, a policy setting notifying unit 220, a policy transmitting unit 230, a communication unit 240, and a control unit 250. According to an embodiment of the present invention, at least a part of the policy receiving unit 210, the policy setting notifying unit 220, the policy transmitting unit 230, the communication unit 240, And may be program modules in communication with the policy controlling terminal 300. These program modules may be included in the policy setting server 200 in the form of an operating system, an application program module, and other program modules, and may be physically stored on various known memory devices. These program modules may also be stored in a remote storage device capable of communicating with the policy setting server 200. [ These program modules include, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types as described below in accordance with the present invention.

The policy receiving unit 210 may receive a plurality of policies from a plurality of policy control terminals 300 according to an exemplary embodiment. The received information may include condition information to which the corresponding policy is to be applied to the smart device 100. In addition, the policy control terminal 300 may include a condition for controlling the smart device 100 in real time, for example, a condition for the smart device 100 to be controlled in real time.

The policy setting notifying unit 220 notifies the smart device 100 of the fact that the policies set by the policy controlling terminal 300 have been received. The notification may be made by a push message transmission method, and may include, for example, information about the subject who set the policy and transmitting the notification. The smart device 100 can send a policy reception request to the policy setting server 200 when a notice that the policy has been newly set or a notification that the existing policy has been modified is transmitted to the smart device 100. [ The policy reception request may be made aperiodically by the user of the smart device 100, but may be performed without the request of the user by the application installed in the smart device 100. [

The policy transmission unit 230 according to an embodiment transmits a new policy or a modified policy to the smart device 100 according to a policy transmission request from the smart device 100. [ The transmitted policy may include the conditions under which the smart device 100 is operated and controlled, and may include only operational conditions (e.g., environmental conditions such as time or location). If the transmitted policy includes only a condition for controlling the operation of the smart device 100, if the smart device 100 satisfies the condition, the specific control method transmitted from the policy control terminal 300 in real time is called smart Or may be delivered to the device 100.

The communication unit 240 according to an embodiment of the present invention receives the control policy of the smart device 100 from the policy control terminal 300 and transmits the control policy to the smart device 100. [ The communication unit 240 can function to allow the policy setting server 200 according to the present invention to communicate with an external device such as the smart device 100 and the policy control terminal 300. [

The control unit 250 controls the flow of data between the policy receiving unit 210, the policy setting notifying unit 220, the policy transmitting unit 230, and the communication unit 240 according to an exemplary embodiment of the present invention. . That is, the control unit 250 according to the present invention controls the flow of data between the respective components of the policy setting server 200 to control the policy receiving unit 210, the policy setting notifying unit 220, the policy transmitting unit 230, The control unit 240 can perform control to perform a unique function.

According to the present invention, each of the plurality of policy control subjects can control the smart device used by the organizer only for a specific time or position. In addition, it is impossible to control the smart device at a time or location where the user does not have the authority. Therefore, it is possible to control the smart devices of the organization according to the task and security rules of the organization, and even if the users of the smart device belong to various organizations, the employees are not exposed to excessive control.

The embodiments of the present invention described above can be implemented in the form of program instructions that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination. The program instructions recorded on the computer-readable recording medium may be those specially designed and constructed for the present invention or may be those known and used by those skilled in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, Those skilled in the art will appreciate that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims.

Therefore, the spirit of the present invention should not be construed as being limited to the above-described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, I will say.

100: Smart devices
200: Policy setting server
300: Policy control terminal

Claims (12)

Receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals;
Notifying the policy setting server of the reception of the policy control to the smart device; And
Wherein the policy setting server transmits the policy to the smart device so that a specific policy having a condition that matches the current status among a plurality of policies can be applied to the smart device,
Wherein the condition includes location information to which the policy is to be applied. The method according to claim 1,
The application of the policy to the smart device may include:
A method for applying a smart device stereoscopic policy, wherein a preset basic policy is applied when there is no policy satisfying the current situation. The method according to claim 1,
The application of the policy to the smart device may include:
A method for applying a smart device stereoscopic policy in which a policy is applied according to a priority when a plurality of policies having a condition matching the current situation is applied. The method according to claim 1,
The policy application step includes:
Receiving control information from a policy control terminal that has transmitted a policy satisfying a current condition, and transmitting the control information to the smart device in real time. delete A policy receiving unit for receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals;
A policy setting notification unit for notifying the smart device of the reception of the policy control by the policy setting server; And
The policy setting server transmits the policy to the smart device so that a specific policy having a condition that matches the current status among a plurality of policies can be applied to the smart device,
Wherein the condition includes location information to which the policy is to be applied. The method according to claim 6,
The application of the policy to the smart device may include:
Wherein the predetermined basic policy is applied when there is no policy satisfying the current condition. The method according to claim 6,
The application of the policy to the smart device may include:
A device for applying a smart device stereoscopic policy in which a policy is applied according to a priority when a plurality of policies having a condition matching the current situation is applied. The method according to claim 6,
The policy transmission unit,
And receives control information from a policy control terminal that transmits a policy having a condition that matches the current situation, and transmits the control information to the smart device in real time. delete As a method for three-dimensionally applying a policy in a smart device,
Receiving a smart device operation control policy including a specific condition from a plurality of policy control terminals through a policy setting server; And
And applying a specific policy having a condition that matches the current status of the received operation control policies. 12. A computer-readable recording medium for recording a computer program for executing the method according to any one of claims 1 to 11.

Images