KR101591770B1 - Recording apparatus for deleting security data automatically and the security method thereof - Google Patents

Abstract

The present invention is implemented as a nonvolatile recording apparatus mounted on a computer system such as a military apparatus, and automatically deletes security data recorded in a nonvolatile recording apparatus after a predetermined time elapses when a power shutdown or a malfunction occurs in the driving apparatus The present invention relates to a data recording apparatus having a security data automatic deletion function and a method thereof,
The data recording apparatus includes an interface unit for performing data transmission / reception with an external input unit, an output unit, a central processing unit, or a temporary storage unit; A permanent recording unit for permanently storing data; A battery unit for supplying power when power supply by the power source of the drive unit in which the data recording device is mounted is interrupted; A timer unit for counting a predetermined time after a power supply interruption or malfunction of the driving unit; And a security controller for erasing the data of the permanent recording unit when a predetermined time is exceeded by driving the timer unit when the driving unit stops or malfunctions,
It is possible to prevent the data of the permanent recording device from being leaked to the outside.

Description

TECHNICAL FIELD [0001] The present invention relates to a data recording apparatus having a security data automatic deletion function and a data security method therefor.

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to data security, and more particularly, to a data security system that is installed in a computer system such as a military equipment and operates as a nonvolatile recording apparatus, The present invention relates to a data recording apparatus and a method for automatically deleting security data recorded in a device, and having a function of automatically deleting secure data to prevent the leakage of secure data.

In general, a computer apparatus is a system in which a permanent recording apparatus such as a recording apparatus such as a hard disk for permanent storage of data and a read-only memory (ROM) of various functions, and a program and data variables for driving the central processing apparatus are temporarily loaded And a temporary storage unit such as a random access memory which can be read and written only when power is applied so as to be stored.

Of these recording devices, persistent recording devices such as a mask ROM, an EEPROM (Electrically Erasable and Programmable Read Only Memory), an EPROM (Erasable and Programmable Read Only Memory) and a hard disk and a flash driver store stored data even when the power is off .

In addition to the recent advances in computer technology, important data for military, cultural, and industrial applications are digitally coded and stored. These data will include national defense, core technologies in the industrial sector, and key technologies in advanced products.

In addition, due to the development of the smartphone technology, the storage capacity of the smartphone has rapidly increased, and the availability of the smartphone has increased, and the information stored in the smartphone has become important for many individuals such as personal certificates, Information.

Hacking techniques such as keylogging, sniffing, and phishing are becoming more and more sophisticated in order to secure illegal access to these core technologies.

For this reason, network security products such as keystroke hacking security programs, firewalls, and intrusion detection systems are applied to prevent data leakage of computer systems. However, this security method is based on an approach using authentication information, and it is a method of blocking computer access. Therefore, there is a problem that access to the data acquired by the permanent recording apparatus itself such as a hard disk or a nonvolatile memory can not be prevented.

For security of recorded data in a non-volatile memory of a smart phone or a general computer device, Korean Patent No. 808948 generates and stores a checksum for each data page for reading non-volatile memory, and when there is a read command The page is stored in the working buffer and the checksum is calculated and compared with the checksum data previously stored in the checksum buffer. Otherwise, an error handling signal is output, and in the same case, it is recognized as a legitimate reading, Related technology of a non-volatile memory that detects an intruder's intrusion by detecting an intruder's intrusion into the non-volatile memory, thereby preventing external intrusion into the non-volatile memory.

However, even in the case of the above-mentioned registered patent, a military apparatus or the like equipped with a permanent recording device in which confidential data is recorded may be stolen by an enemy, or an industrial apparatus equipped with a permanent recording apparatus storing an industrial secret may be used There is no way to prevent the data stored in the permanent recording device from being leaked when the permanent recording device is passed over to another person.

In the case of military equipment, damage to military secrets is stored in permanent recorders, so the damage is very large.

SUMMARY OF THE INVENTION Accordingly, the present invention has been made keeping in mind the above problems occurring in the conventional technology, and it is an object of the present invention to provide a data recording / A data recording apparatus having a security data automatic deletion function capable of maintaining security of recorded data even when a permanent recording apparatus recording data requiring security is acquired by another person, and a method thereof .

delete

According to another aspect of the present invention, there is provided a data recording apparatus having an automatic deletion function for secure data, comprising: an interface unit for performing data transmission / reception with an external input unit, an output unit, a central processing unit or a temporary storage unit; A permanent recording section for permanently storing data requiring security; A battery unit for supplying power when power supply by the power source of the drive unit in which the data recording device is mounted is interrupted; A timer unit for counting a predetermined time after a power supply interruption or malfunction of the driving unit; And a security controller for deleting the data of the permanent recording unit, wherein the security controller includes a security drive setting function in which security drive is set by inputting an external security drive command, The data recording apparatus comprising the permanent recording section for permanently storing the data requiring security when the timer section is driven for a predetermined period of time when the driving section stops or malfunctions, And deletes the data of the permanent recording unit.
Wherein the security control unit determines whether the power supply is restarted and restarted before a predetermined time in a state in which the timer is activated after a malfunction of the driving unit or a driving stop of the driving unit, Or the like.

delete

The data security device of the data recording device having the security data automatic deletion function of the present invention may be configured as an embedded recording device.
According to another aspect of the present invention, there is provided a data security method for a data recording apparatus having an automatic deletion function of security data, including an interface unit, a persistent recording unit, a battery unit, a timer unit and a security control unit, A data security method for a data recording apparatus for permanent storage, comprising: a security drive setting step of setting a security drive to delete data of a permanent recording unit when a drive is stopped or malfunction; A drive stop determining step of determining whether the security control unit drives the drive unit equipped with the data recording device; A timer driving process of driving the timer unit when the driving unit is stopped as a result of the driving stop determination process; Determining whether the timer driving process is not restarted for a time period exceeding a predetermined time; And a persistent recording unit for permanently storing data requiring security if the security controller does not restart the drive until a preset time is exceeded as a result of the determination of the set timeout period, And a data erasing step of erasing the data of the permanent recording unit when it is determined that the data recording apparatus is learned by another person.
The data security method of the data recording apparatus may further include a step of determining whether the driving apparatus is restarted after the timer is driven by the timer driving process by the security control unit, And determining whether the set time is exceeded when the mobile station is in a stop state.

delete

delete

delete

The secure driving is performed when power supply from the driving unit to the data recording unit is interrupted or when a malfunction signal of the driving unit is received.

According to the present invention having the above-described configuration, when a permanent recording apparatus such as a nonvolatile memory becomes in a state in which it can not be recovered due to an unexpected accident or the like, by automatically deleting recorded data after a lapse of a predetermined time, It is possible to maintain the security of the recorded data even when the permanent recording apparatus records data requiring security such as industrial secrets.

1 is a functional block diagram of a computer apparatus 1 equipped with a data recording apparatus 100 according to an embodiment of the present invention.
BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a data recording apparatus and a data security method.

Hereinafter, the present invention will be described in more detail with reference to the accompanying drawings showing embodiments of the present invention.

In the following description of the present invention, detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

The embodiments according to the concept of the present invention can make various changes and can take various forms, so that specific embodiments are illustrated in the drawings and described in detail in this specification or application. It should be understood, however, that the embodiments according to the concepts of the present invention are not intended to be limited to any particular mode of disclosure, but rather all variations, equivalents, and alternatives falling within the spirit and scope of the present invention.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between. Other expressions that describe the relationship between components, such as "between" and "between" or "neighboring to" and "directly adjacent to" should be interpreted as well.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms "comprises ",or" having ", or the like, specify that there is a stated feature, number, step, operation, , Steps, operations, components, parts, or combinations thereof, as a matter of principle.

1 is a functional block diagram of a computer apparatus 1 equipped with a data recording apparatus 100 according to an embodiment of the present invention.

1, the data recording apparatus 100 of the present invention includes an interface unit 110, a persistent recording unit 120, a timer unit 140, and a security control unit 150. The input unit 10 ), An output unit 20, a temporary storage unit 30, and a central processing unit 40. The computer unit 1 includes a central processing unit 40,

In the above-described configuration, the interface unit 110 transmits / receives data between the data recording apparatus 100 and the input unit 10, the output unit 20, the temporary storage unit 30, or the central processing unit 40 of the computer apparatus 1 And I2C for data interfaces.

The permanent recording unit 120 includes a magnetic recording medium such as a nonvolatile memory and an HDD that can perform electrical reading and writing operations, such as a ROM and an EEPROM. In addition, the security controller may further include an ultraviolet generator when the ROM is configured to erase data by ultraviolet rays.

The timer unit 140 includes a clock circuit that counts time after receiving a synchronization signal from a clock reference pulse generator such as an internal oscillator. The timer unit 140 having the above-described configuration provides a reference time for determining whether or not the preset time is exceeded.

The security control unit 150 is driven when power supply by the power supply unit 50 of the computer apparatus 1 is interrupted or malfunctions. At this time, when the power supply by the power supply unit 50 is stopped, the security controller 150 drives the timer unit by the power of the battery unit. And deleting the data of the permanent recording unit when a predetermined time is exceeded. For this, the security control unit 150 controls the power supply unit 50 before a preset time in a state where the timer unit 130 is in operation after the power supply unit 50 stops or malfunctions due to malfunction, The power supply by the computer device 1 is resumed to determine whether the driving device, that is, the driving device controlled by the computer device 1 is restarted. If the external device is re-driven as a result of the determination, the process returns to the drive stop determination process (S20) to re-monitor whether the drive device stops or malfunctions.

In addition, the security control unit 150 has a security drive setting function in which security drive is set by inputting an external security drive command. That is, when the external device is in normal use, the security function is canceled to prevent unnecessary data deletion when the system is turned off. However, in the case of driving in a situation where it is difficult to recover when the operation of the display or the like is stopped, by setting the security drive function, the data of the permanent recording unit 120 is deleted when a preset time elapses after the operation stop or malfunction of the drive device So as to maintain security.

In addition, the input unit 10 constituting the computer apparatus 1 includes a keyboard, a data reader, a scanner, and the like. In addition, the output unit 20 includes a display, a printer, an external tester transmitting device, or a communication device. The temporary playback section 30 includes a random access memory such as a RAM and a register. The central processing unit includes a CPU, an MCU, and the like.

The data security device of the data recording device having the security data automatic deletion function of the present invention may be configured as an embedded recording device.

2 is a flowchart illustrating a process of a data security method of a data recording apparatus having an automatic deletion function of secure data according to the present invention.

The security method by the data recording apparatus 100 having the security data automatic deletion function having the configuration of FIG. 1 includes a security drive setting step S10, a drive stop judging step S20, a timer driving step S30, A determining step S40, a setting time-over determining step S50, and a data deleting step S60.

The secure drive setting process S10 is a function for preventing unnecessary deletion of data stored in the persistent recording unit 120. [ That is, when the external apparatus to which the data recording apparatus 100 is mounted is in the normal driving and driving off state, the data of the permanent recording unit 120 must be recorded. In addition, when the external device is in a state of being unable to recover due to a drive stop or a malfunction in the case of display or the like, the data of the permanent recording unit 120 should be deleted. Therefore, the security drive setting process S10 is a process of setting a security drive only when an external device needs security drive.

The subsequent process is a process performed after the security drive is set in the secure drive setup process (S10).

The driving stop determination process S20 is a process in which the security controller 150 determines whether the driving device equipped with the data recording device 100 is driven. That is, the drive stop determination process S20 determines whether the security controller 150 receives power from the computer device 1 or the drive device, or whether a malfunction signal is input.

The timer driving step S30 is a step of receiving a malfunctioning error signal when the power is not supplied from the power source 50 in the driving stop determination step S20 or when the power source of the driving device is supplied but the driving device malfunctions . That is, when the power supply of the power supply unit 50 of the driving unit is interrupted, the security control unit 150 drives the timer unit 140 while driving the battery 130 using the power of the battery unit 130. Also, even if the power supply of the power supply unit 50 continues to be supplied to the power supply unit, the power supply unit 50 may be operated to operate the timer unit 140 to determine whether a predetermined time has elapsed for data deletion.

The re-drive determination process S40 determines whether the drive unit is restarted after the timer unit 140 is driven. If the driving device is restarted in this process, the process returns to the driving stop determination process S20 and repeats the process. Otherwise, if the driving and standby state is in the stop or malfunction state, the following step S50 is performed.

In step S50, the security controller 150 determines whether a predetermined time has elapsed since the timer was activated in step S30. If the predetermined time has elapsed in this process, the following data deletion process (S60) is performed. Otherwise, if the predetermined time is not exceeded, the timer is continuously driven, and the process returns to the re-driving determination process (S40) and the process is repeated. At this time, the setting time exceeding determination step (S50) may be performed at a predetermined time interval to prevent unnecessary calculation processing.

If it is determined that the set time has elapsed as a result of the determination of the set time-out exceeding time (S50), the controller determines that the drive has not been restarted normally and performs the data deletion process (S60). In the data deletion process (S60), the security controller 150 deletes the data of the persistent recording unit 140. [ If no power is supplied from the driving unit, the security controller 150 receives power from the battery unit 130 and deletes the stored data of the permanent recording unit 140. [ This makes it impossible to acquire security data such as national secrets and industrial information even if another person acquires the drive device, so that complete security is ensured for the recorded data.

In the above description of the present invention, the driving device may be a military equipment such as a tank, a fighter or the like, or an industrial equipment equipped with a core technology of an industry.

1: Computer device
100: data recording apparatus 110: interface unit
120: permanent recording unit 130: battery unit
140: Timer unit 150: Security control unit

Claims (7)

An interface unit for performing data transmission / reception with an external input unit, an output unit, a central processing unit, or a temporary storage unit;
A permanent recording section for permanently storing data requiring security;
A battery unit for supplying power when power supply by the power source of the drive unit in which the data recording device is mounted is interrupted;
A timer unit for counting a predetermined time after a power supply interruption or malfunction of the driving unit; And
And a security control unit for erasing the data of the permanent recording unit,
Wherein the security control unit includes a security driving setting function in which security driving is set by inputting an external security driving command, and when the security driving is set, the security control unit drives the timer unit when the driving unit stops or malfunctions, Wherein the data recording apparatus is configured to delete data of the permanent recording unit when it is determined that the data recording apparatus having the permanent recording unit permanently storing the data requiring security is learned by another person, Data recording apparatus.
The security system of claim 1,
It is determined whether the power supply is restarted and restarted before a predetermined time in a state in which the timer is activated after a malfunction of the driving device or a driving stop, and if the power supply is restarted, whether or not the driving device is driven again is monitored Wherein the security data is automatically erased. delete A data security method for a data recording apparatus for permanently storing data requiring security, including an interface unit, a permanent recording unit, a battery unit, a timer unit, and a security control unit,
A security drive setting step of setting a security drive to delete data of the permanent recording part when the drive device stops or malfunctions;
A drive stop determining step of determining whether the security control unit drives the drive unit equipped with the data recording device;
A timer driving process of driving the timer unit when the driving unit is stopped as a result of the driving stop determination process;
Determining whether the timer driving process is not restarted for a time period exceeding a predetermined time; And
Wherein the security control unit permanently stores data required for security when the drive unit does not restart until a preset time is exceeded as a result of the determination of the set timeout period, And erasing the data of the permanent recording unit when it is determined that the recording apparatus has been acquired by another person. [5] The data security method of claim 1,
delete The method according to claim 4, wherein after the timer is driven by the timer driving process,
It is determined whether the driving apparatus is restarted, and in the case of the rebuild, the process returns to the driving stop determination process,
Wherein the predetermined period of time is longer than the predetermined period of time. The method of claim 1, further comprising:
The method of claim 4,
Wherein the data recording device is configured to perform power-off to the data recording device, to stop the system operation, or to receive a malfunction signal.

Images