KR101554625B1 - Usb security system and security method - Google Patents

Abstract

The present invention relates to a USB security system and a security method, which comprises a USB locking device inserted into a USB port to physically lock the USB port; and a managing system monitoring all the time whether the USB port is opened or closed by the USB locking device to generate a security warning when the USB port is opened. The USB locking device includes a locking unit inserted into the USB port to lock the USB port, and a lock releasing unit separating the locking unit from the USB port. The locking unit has an IC chip assigned with a unique identification code, and the unlocking unit has a display unit displaying the unique identification code of the locking unit to be checked with the naked eye of a user. Accordingly, a locked state of the USB port is displayed when the locking unit is locked to the USB port, and only the IC chip which is matched with a unique identification code of a terminal can have the corresponding terminal locked, thereby enhancing security performance.

Description

[0001] USB SECURITY SYSTEM AND SECURITY METHOD [0002]

The present invention relates to a USB security system and a security method that physically blocks a data leakage through a USB port and simultaneously recognizes whether the USB port is open or closed and monitors whether the USB port is normally used.

Generally, USB (Universal Serial Bus) is a personal computer

Computer, and PC) and a peripheral device, and means an interface means for connection between a computer and an external device.

Such a USB can easily connect an external device to a computer without opening the computer terminal. For example, USB has the advantage of easily connecting external devices such as printers, modems, scanners, digital cameras, and USB memories using standard port and plug combinations.

Since USB memory can easily be illegally copied data stored in a computer terminal by connecting to a USB port installed in a computer terminal, most of the information leakage is currently performed through a USB memory.

Therefore, in order to prevent information leakage through the USB memory, a physical control for physically locking the USB port and a logical control for authenticating the permission of the USB memory when the USB memory is connected to the USB port are used.

First, as a device physically controlled, a conventional USB port locking device is disclosed in Korean Patent Registration No. 10-1323364 (Oct. 23, 2013), and is provided with a frame-like outer frame A locking member inserted into the USB port and having an internal structure having a keyhole exposed inside the outer frame and being inserted into the USB port; And a release key unit having a selectively engageable or releasable latch key.

Such a USB port locking device is configured to insert a locking member into a USB port and lock it, and to release the locking member from the USB port by using the release key unit, so that anyone having a release key unit can unlock the locking member from the USB port There is a weak security problem.

As a part of the logical control, the conventional security management system for a storage medium for a USB port is disclosed in Korean Patent Registration No. 10-10622916 (Aug. 31, 2011), in which a security for setting a storage medium usage right for each user terminal After the manager is logged in by the security management program installed with the management program, the management server receives user information for each user terminal, generates a medium identification code of the storage medium mounted for each terminal of the inputted user information, An administrator terminal for generating media information for each storage medium for setting export / import rights, a user security program for security / authentication of a storage medium mounted on the USB terminal, and performs user login through the executed user security program , The storage medium is requested to be authenticated when the storage medium is mounted on the USB terminal, A user terminal which is authenticated by the security management program and requests encryption / decryption or external export / import according to a usage right set in the storage medium, a medium identification code generated through the security management program, A policy server for receiving and storing medium information for a user or an administrator and for storing user information for authentication of a user or an administrator; Encrypts and stores the encrypted ID / password using the symmetric key algorithm, encrypts and stores the encrypted ID / password using the symmetric key algorithm, encrypts and stores the encrypted ID / password using the symmetric key algorithm, Decrypts and authenticates the stored medium identification code And an authentication server for encrypting and transmitting the content using the symmetric key algorithm when the content is requested to be encrypted from the user terminal, decrypting the content after authentication by the stored user password authentication when the encrypted content decryption is requested, and transmitting the decrypted content .

However, the conventional security management system for storage media for a USB port is inconvenient because it uses only an authorized storage medium, the USB port itself is physically opened, and security is only ensured by the security management program, There is a weak problem.

In particular, the conventional USB port locking device and the conventional security management system of the storage medium for the USB port have a problem that it is difficult to unlock the locking device or to detect the contents and outflow of the leakage data when the security management system is hacked.

Patent Document 1: Korean Patent Publication No. 10-1323364 (October 23, 2013) Patent Document 2: Korean Patent Publication No. 10-10622916 (Aug. 31, 2011)

It is an object of the present invention to provide a USB security system and a security method capable of physically locking a USB port and recognizing whether a USB port is opened or closed to monitor whether the USB port is opened or closed and to improve USB security management performance .

The USB security system of the present invention includes: a USB lock device inserted into a USB port to physically lock the USB port; a security monitoring unit that monitors whether the USB port is opened or closed by the USB lock device at all times; And the like.

The USB lock device includes a lock unit inserted into a USB port to lock the USB port, and an unlock unit detachable from the USB port. The lock unit is provided with an IC chip having a unique identification code attached thereto And the unlocking unit may be provided with a display unit for displaying the unique identification code of the lock unit so that the unique identification code can be visually confirmed.

The unlocking unit includes a case, a rotating member rotatably installed in the case, a releasing member connected to the rotating member and rotated together and protruded from one end of the case and coupled to the locking unit, And a lock unit port provided at the other end of the case and into which the lock unit is inserted. The display unit may be disposed on one side of the case to display a unique identification code of the lock unit so that the unique identification code can be visually confirmed.

A PCB for fixing the unique identification code of the lock unit to the display unit can be installed in the case when the lock unit port is fixed and the lock unit is electrically connected to the display unit and inserted into the lock unit port.

Wherein the releasing member has an engaging projection formed at an end of the releasing member to be engaged with an engaging groove formed in the lock unit, the engaging projection being formed of a male screw portion having a thread on an outer surface thereof, And the male screw portion and the female screw portion may have different dimensions of the screw thread and the shape of the screw thread.

The lock unit includes a main body having the same size as a USB port to be inserted into the USB port, an IC chip fixed inside the main body and given a unique identification code, a metal plate fixed to one surface of the main body, . ≪ / RTI >

The lock unit includes a main body having the same size as a USB port to be inserted into the USB port, an IC chip fixed inside the main body and given a unique identification code, a metal plate fixed to one surface of the main body, And a locking protrusion for locking the USB port to be permanently fixed to the USB port may be formed on an outer surface of the main body.

The IC chip is provided with a unique identification code so that only the IC chip matching the unique identification code of the terminal can be locked, and a security warning can be generated when the unique identification code is inconsistent or does not have a unique identification code.

The management system includes a control unit that receives a signal from the IC chip of the USB lock device and determines whether the USB port is opened or closed, and a control unit that periodically monitors whether the USB port is opened or closed by storing data transmitted from the control unit, And a warning unit for generating a security warning when the USB port is opened according to a signal applied from the control unit.

The USB security method includes the steps of locking a USB port using a USB lock device, transmitting and storing to the management server whether the USB port is opened or closed by the USB lock device and periodically monitoring the USB port, And issuing a security warning and notifying the administrator when it is removed from the USB port.

The method of claim 1, further comprising: determining whether the USB port is open or closed according to a signal from an IC chip installed in the USB lock unit; And periodically monitoring whether the port is opened or closed.

The IC chip may be provided with a unique identification code so that only the IC chip matching the unique identification code of the terminal can be locked and the security warning can be generated when the unique identification code is inconsistent or the unique identification code is not included can do.

1 is a block diagram of a USB security system according to an embodiment of the present invention.
2 is a block diagram of a USB security system according to an embodiment of the present invention
3 is a perspective view of a UBS port locking device in accordance with an embodiment of the present invention.
4 and 5 are perspective views of an unlocking unit according to an embodiment of the present invention.
6 is an exploded perspective view of the unlocking unit according to one embodiment of the present invention.
7 is a perspective view illustrating an engaging projection of the releasing member and an engaging groove of the locking unit according to another embodiment of the present invention.
8 and 9 are perspective views of a locking unit according to an embodiment of the present invention.
10 is an exploded perspective view of a lock unit according to an embodiment of the present invention.
11 is a perspective view of a lock unit according to another embodiment of the present invention.
12 is a flowchart illustrating a USB security method according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The sizes and shapes of the components shown in the drawings may be exaggerated for clarity and convenience. In addition, terms defined in consideration of the configuration and operation of the present invention may be changed according to the intention or custom of the user, the operator. Definitions of these terms should be based on the content of this specification.

FIG. 1 is a block diagram of a USB security system according to an embodiment of the present invention, and FIG. 2 is a block diagram of a USB security system according to an embodiment of the present invention.

1 and 2, a security system for a storage medium for a USB port according to an embodiment of the present invention includes a USB port 100 inserted in a USB port 100 installed in a plurality of user terminals 110, 120, And a management system 200 for monitoring whether or not the USB port 100 is opened or closed by the USB port locking device 140. [

3 to 6, the USB lock device 140 includes a lock unit 10 inserted into the USB port 100 to lock the USB port 100, 100). ≪ / RTI >

4 and 5, the unlocking unit 20 includes a case 22, a rotating member 24 rotatably installed in the case 22, and a rotating member 24 connected to the rotating member 24, A release member 26 disposed on one side of the case 22 so as to be rotatable and protruded from one end of the case 22 to be coupled to the lock unit 10; And a lock unit port 30 provided at the other end of the case 22 and into which the lock unit 10 is inserted.

The case 22 is connected to the front of the upper case 32, the lower case 34 coupled to the upper case 32 and the upper case 32 and the lower case 34, And a case 36. A cover member 28 for protecting the releasing member 26 is detachably mounted on the front case 36.

The rotary member 24 is formed in the shape of a disk having a predetermined thickness for facilitating the rotation of the user, and the release member 26 is connected to the center thereof. Therefore, when the rotating member 24 is rotated, the releasing member 26 is rotated together to engage or disengage the lock unit 10. [

The releasing member 26 is formed at its end with an engaging projection 40 that can be engaged with the engaging groove 12 formed in the lock unit 10. [

Here, the engaging projection 40 is formed as a male screw portion having a thread on the outer surface at the end portion of the releasing member 26, and the engaging groove 12 is formed as a female screw portion having a thread on the inner surface, The releasing member 26 is engaged with the lock unit 10, and when it is turned in the other direction, the engagement with the lock unit 10 is released.

At this time, the screw threads of the male screw part and the female screw part and the screw thread shape are formed differently from the ordinary screw so that they are coupled to the engaging groove 12 of the lock unit 10 by means of tools and bolts other than the releasing member 26 I can not.

In particular, the male screw part and the female screw part are tightened when turned to the left and turned to the right, in contrast to the screw tightening and loosening directions, and are formed to be loosened.

As described above, the engaging projections 40 of the releasing member 26 and the engaging grooves 12 of the lock unit 10 are formed in a specific thread shape and a specific dimension so that they can not be coupled to the lock unit other than the unlocking unit, Respectively.

7, the engaging projections 40 and the engaging grooves 12 are formed by the engaging projections 40a, and the engaging grooves are formed by the engaging grooves 12a, A method may be used in which the projections 40a are inserted into the straight grooves 12a and then rotated 90 degrees so that the straight projections 40a are caught inside the straight grooves 12a.

In addition, the engaging projections and the engaging grooves may be formed in various shapes such as a cross protrusion or a T-shaped protrusion, and any structure can be applied as long as the engaging protrusion and the engaging groove can be coupled to the lock unit.

When the lock unit 10 is inserted into the lock unit port 30 when the lock unit port 30 is fixed and electrically connected to the display unit 28 inside the case 22, And a PCB 46 on which various circuit components for displaying the unique identification code of the display unit 28 are mounted.

An LED lamp 48 is mounted on one side of the PCB 46 to illuminate the USB port 100 when the USB port 100 is dark. A power switch 50 and an LED lamp switch 52 are provided on the side surface of the case 22.

The LED lamp 48 is provided in the front case 36 in which the releasing member 26 is drawn out so that when the engaging projection 40 of the releasing member 26 is engaged with the engaging groove 12 of the lock unit 10, .

A battery 54 for supplying power to the PCB 46 is mounted in the case 22 and a battery cover 56 for detaching the battery 54 is attached to the rear of the case 22.

The lock unit 10 includes a main body 14 having the same size as that of the USB port 100 to be inserted into the USB port 100 as shown in FIGS. 8 to 10, An IC chip 16 to which an identification code is assigned and a metal plate 18 fixed to one surface of the main body 14 and having an engaging groove 12 formed therein.

The main body 14 includes a lower plate portion 62 on which an IC chip 16 is fixed and a latching groove 60 to be engaged with a latching piece provided on the USB port is formed and a lower plate portion 62 formed on the rear side of the lower plate portion 62, And a side surface portion 68 formed of a sloped surface 66 formed vertically on both sides of the lower plate portion 62 and having a height reduced toward the front side.

An insertion groove 70 is formed in the rear surface of the case 22 so that the lock unit 10 is inserted into the lock unit port 30. The insertion groove 70 is formed in the lower plate portion 62 of the lock unit 10, A first groove portion 72 formed to have the same thickness as the thickness of the lower plate portion 62 so as to be inserted into the first groove portion 72 and a side portion 68 of the lock unit 10 formed at right angles at both ends of the first groove portion 72 And the second trench 74.

As described above, the insertion groove 70 is formed in a " C "shape so that other components such as USB can not be inserted in addition to the lock unit 10 of the present invention. The side surface portion 68 is formed of the inclined surface 66 so that it can be inserted into the insertion groove 70 more easily.

The IC chip 16 has a function of detecting whether the lock unit 10 has been drawn out or drawn and transmitting to the management system 160 whether the USB port 100 is opened or closed. That is, when the user takes out the lock unit 10 from the USB port 100 to use the USB port 100, the IC chip 16 transmits to the management system 160 whether the USB port 100 is open or closed .

Here, the IC chip 16 is provided with a function of locking only the IC chip which is given a unique identification code and matches the unique identification code of the terminal. That is, the lock unit 10 to which the unique identification code is assigned by each of the IC chips 16 can lock only the corresponding terminal that matches the unique identification code, so that the lock unit having a unique identification code different from that of the unique identification code, When the port is inserted into the port, the management system 160 transmits a signal to the management system 160. The management system 160 notifies the administrator of the security warning while generating the security warning.

The IC chip 16 may be of a type having no unique identification code. That is, when the lock unit 10 is inserted into or withdrawn from the USB port 100, it is also possible to provide a sensing unit that detects only the opening and closing of the USB port 100 that applies the signal to the management system 160.

When the IC chip 16 is inserted into a USB port of a terminal such as a PC, a unique identification code input window is created so that the user can assign a unique identification code.

Of course, it is also possible to give a unique identification code to the IC chip at the production stage and inform the user of the unique identification code.

The lock unit 10 may be integrally formed by insert injection after arranging the IC chip 16 and the metal plate 18 on the mold.

The lock unit 10 may have no IC chip. That is, the lock unit 10 has a structure for simply locking the USB port without the IC chip.

11, the locking unit may include a main body 80 having the same size as that of the USB port 100 to be inserted into the USB port 100, A metal plate 18 fixed to one surface of the main body 80 and a latching protrusion 84 formed on the outer surface of the main body 80 and hooked to the USB port so as to be permanently fixed to the USB port .

The locking unit according to another embodiment has a locking protrusion formed on the outer surface of the main body, and when the locking unit is inserted into the USB port, the locking protrusion 84 is caught by the USB port and fixed so as not to be drawn out from the USB port.

Such a lock unit is used to prevent a USB port from being used by blocking a remaining USB port in addition to a necessary USB port when a plurality of USB ports are installed in a terminal such as a PC.

It is also possible that the lock unit according to this other embodiment does not have an IC chip. In other words, it is a structure that blocks the USB port without IC chip.

Further, the body of the lock unit can be used in a rectangular parallelepiped shape without an inclined surface, and can be used in a form having a locking projection, a form without a locking projection, a form with an IC chip, a form without an IC chip, May be used in combination in various forms.

The locking unit may be a locking unit which is provided inside the main body 80 and includes a main body 80 having the same size as that of the USB port 100 to be inserted into the USB port 100, A sensing unit for sensing whether the USB port is opened or closed and transmitting the signal to the management server, and a metal plate 18 fixed to one surface of the main body 80. [

The sensing unit senses whether or not the USB port is open or closed, and various types of sensors such as an on / off switch type can be used.

In this way, according to another embodiment of the present invention, when the locking unit is inserted into the USB port, the sensing unit senses this and applies the signal to the management server or the terminal.

The operation of the USB locking device of the present invention thus constructed will be described below.

First, when the lock unit 10 is inserted into the lock unit port 30 of the lock release unit 20, the unique identification code of the lock unit is displayed on the display unit 28. The operator confirms whether the unique identification code displayed on the display unit 28 matches the unique identification code of the terminal.

That is, when the lock unit 10 is inserted into the lock unit port 30, the signal of the IC chip 16 to which the unique identification code provided in the lock unit 10 is applied is transmitted to the PCB 46, The unique identification code is displayed on the display unit.

As described above, according to the present invention, since the unique identification code of the lock unit 10 can be confirmed in the unlock unit 20, it is troublesome to check whether the unique identification code is matched after inserting the lock unit 10 into the terminal It is easy to use.

Then, if it is confirmed that the unique identification code of the lock unit 20 matches, the corresponding lock unit 10 is inserted into the USB port of the terminal.

Then, the control unit receives a signal from the IC chip 16 of the lock unit 10 to determine whether the USB port 100 is open or closed. Then, the control unit transmits to the management server whether or not the USB port 100 is opened or closed, and stores it. The management server periodically monitors whether the USB port 100 is open or closed.

Here, if a unique identification code is assigned to the IC chip 16, the terminal can be locked only if it is an IC chip that matches the unique identification code of the terminal, and if the unique identification code is inconsistent or has no unique identification code The control unit judges this and generates a security warning and notifies the manager.

When the lock unit 10 is removed from the USB port 100, a security warning is generated and notified to the administrator. That is, the control unit activates the warning unit 24 when the lock unit 10 is removed from the USB port 100 and the USB port 100 is opened according to a signal applied from the IC chip 16, And notifies the manager of the occurrence.

When the lock unit 10 is detached from the USB port 100 to use the USB port 100, the engagement protrusion 40 formed at the end of the release member 26 of the release unit 20 (12) of the lock unit (10).

That is, when the rotary member 24 is rotated, the coupling protrusion 40, which is in the form of a male screw, is screwed into the coupling groove 12 in the form of a female screw. At this time, when the USB port 100 is disposed in a dark place, the LED lamp switch 52 is turned on to turn on the USB lamp 48 to illuminate the light.

Then, when the unlocking unit 20 is pulled, the lock unit 10 is disconnected from the USB port 100.

The management system 160 includes a control unit 150 that receives a signal from the IC chip 60 of the lock unit 30 and determines whether the USB port 100 is open or closed, A management server 162 that periodically monitors whether the USB port 100 is open or closed and a security warning when the USB port 100 is opened according to a signal applied from the control unit 150, And an alert unit 164 for notifying the administrator.

The USB security method of the USB security system configured as described above will be described below. 12 is a flowchart of a USB security method according to an embodiment of the present invention.

The USB security method according to an embodiment of the present invention first locks the USB port 100 using the USB lock device 140 (S10). That is, as described above, the lock unit 10 is inserted into the USB port 100 by using the unlocking unit 20 to lock the USB port 100.

Then, whether or not the USB port 100 is opened or closed by the USB lock device 140 is transmitted to the management server 162, and is stored and periodically monitored (S20). That is, the control unit 150 receives a signal from the IC chip 16 provided in the USB lock device 140 to determine whether the USB port 100 is open or closed. Then, the control unit 150 transmits to the management server 162 whether or not the USB port 100 is open or closed, and stores it. The management server 162 periodically monitors whether the USB port 100 is open or closed.

Here, if a unique identification code is assigned to the IC chip 16, the terminal can be locked only if it is an IC chip that matches the unique identification code of the terminal, and if the unique identification code is inconsistent or has no unique identification code The control unit judges this and generates a security warning and notifies the manager.

When the lock unit 10 is removed from the USB port 50, a security warning is generated and notified to the administrator (S30). That is, the control unit 150 operates the warning unit 164 when the lock unit 30 is removed from the USB port 50 and the USB port 50 is opened according to a signal applied from the IC chip 16 Generates a security alert and notifies the administrator.

As described above, the USB security system and the security method according to the embodiment of the present invention physically lock the USB port by using the USB lock device, and determine whether the USB port is opened or closed in the management system, Thereby improving the security performance by generating a security warning and notifying the administrator of the security warning.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be construed as limited to the embodiments set forth herein. Various changes and modifications may be made by those skilled in the art.

10: locking unit 12: engaging groove
14: main body 16: IC chip
18: metal plate 20: unlocking unit
22: Case 24: Rotating member
26: releasing member 28:
30: lock unit port 40: engaging projection
46: PCB 48: LED lamp
100: USB port
110, 120, and 130:
150: control unit 160: management system
162: Management server 164: Warning unit

Claims (12)

A USB lock device inserted into the USB port to physically lock the USB port; And
And a management system that monitors whether the USB port is open or closed by the USB lock device and generates a security warning when the USB port is opened,
The USB lock device includes a lock unit inserted into a USB port to lock the USB port, and a lock release unit that detaches the lock unit from the USB port,
Wherein an IC chip having a unique identification code is attached to the lock unit, and the unlock unit includes a display unit for displaying a unique identification code of the lock unit so that the unique identification code can be visually confirmed. delete The method according to claim 1,
The unlocking unit includes a case,
A rotating member rotatably installed in the case,
A release member connected to the rotary member and rotated together and protruded from one end of the case and coupled to the lock unit;
A display unit disposed on one side of the case and displaying a unique identification code of the lock unit so that the unique identification code can be visually confirmed;
And a lock unit port installed at the other end of the case and into which the lock unit is inserted. The method of claim 3,
And a PCB for fixing a unique identification code of the lock unit to the display unit when the lock unit is inserted into the lock unit port is installed in the case, USB security system. The method of claim 3,
Wherein the releasing member is provided at its end with a coupling protrusion coupled to a coupling groove formed in the locking unit,
Wherein the coupling protrusion is formed as a male screw portion having a thread on an outer surface thereof, the coupling groove is formed as a female screw portion having a thread on the inner surface,
Wherein the male screw portion and the female screw portion are formed to have different dimensions of the thread and the shape of the thread of the USB screw. 6. The method of claim 5,
The locking unit includes a main body having the same size as a USB port to be inserted into the USB port,
An IC chip fixed in the main body and given a unique identification code;
And a metal plate fixed to one surface of the main body and having the coupling groove formed therein. 6. The method of claim 5,
The locking unit includes a main body having the same size as a USB port to be inserted into the USB port,
An IC chip fixed in the main body and given a unique identification code;
And a metal plate fixed to one surface of the body and having the coupling groove formed therein,
Wherein a locking protrusion is formed on an outer surface of the main body so as to engage with the USB port so as to be permanently fixed to the USB port. The method according to claim 1,
The IC chip is provided with a unique identification code so that only the IC chip matching the unique identification code of the terminal can be locked,
And generates a security warning when the unique identification code is inconsistent or does not have a unique identification code. The method according to claim 1,
The management system includes a control unit for receiving a signal from the IC chip of the USB lock device and determining whether the USB port is opened or closed,
A management server that stores data transmitted from the control unit, periodically monitors whether the USB port is open or closed,
And a warning unit for generating a security warning when the USB port is opened according to a signal applied from the control unit. Locking the USB port using a USB lock;
Transmitting and storing to the management server whether the USB port is open or closed by the USB lock device and periodically monitoring the USB port; And
Generating a security alert and notifying an administrator when the USB lock unit is removed from the USB port,
The method of claim 1, wherein the step of determining whether the USB port is opened or closed according to a signal applied from an IC chip installed in the USB lock unit,
The method comprising the steps of: determining whether the USB port is open or closed, and transmitting the USB port open / close status to a management server; and periodically monitoring whether the USB port is open or closed. delete 11. The method of claim 10,
The IC chip may be provided with a unique identification code so that only the IC chip matching the unique identification code of the terminal can be locked and the security warning can be generated when the unique identification code is inconsistent or the unique identification code is not included USB security method.

Images