KR101643936B1 - Monitor security system - Google Patents

Abstract

[0001] The present invention relates to a monitor security system capable of blocking information leaked in a screen capturing mode during an image operation, comprising: an image sensing unit (100) for sensing an image in front of a monitor unit; A security operation unit 220 for operating the monitor unit as a security mode when the security condition is satisfied, And a local control unit (200) including the local control unit (200). Therefore, the security of the information leaked from the video of the monitor itself can be surely achieved.

Description

Monitor security system {MONITOR SECURITY SYSTEM}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to security of a PC, and more particularly, to a monitor security system capable of blocking information leaked by a screen capturing method during image processing in advance.

As the information society grows, there is a growing demand for security for companies and institutions in recent years.

In recent years, it has been pointed out that the file containing the information requiring security is leaked to the outside by the inside party of the file, and it becomes a social problem. Typically, the leakage of customer information by a credit card company employee, the leakage of private information of an entertainer by an advertising agency, and the leakage of customer account information by a bank employee.

Because illegally leased files have the characteristic of spreading rapidly through the Internet, there is a problem that it is practically impossible to collect information leaked out only by enforcement and punishment regulations.

In many cases, the intangible assets of a company are illegally handed over to other companies such as know-how, customer information, personnel information, and facility information. This causes not only a huge loss for the enterprise itself but also illegal information transferred overseas, This is a serious national problem.

Due to the development of information and communication technology, the internal workforce is accustomed to sending and receiving data through the network, which means that the accessibility and the possibility of information leakage are increased. Because messengers and e-mail programs can be used as a tool to illegally lease files, companies have their own security solutions to limit access to messengers and request and approve security codes. It is setting the contrast.

In recent years, in order to prevent information duplication and leakage to a flash memory or a hard disk, a method of recognizing and accessing a memory and a physical security checking process are increasingly included in the system.

Korean Patent Publication No. 2000-0061447 proposes a computer security device and a method for preventing such leakage of information.

1 shows the configuration of such a prior art computer security device.

In the network system to which the control computer 20 and the plurality of computers 21, 22, 23, ... to be controlled are connected, And has a configuration for centrally managing and securing each computer using a screen saver installed in each computer.

Specifically, the computer security device comprises a central control unit and a screen protection unit, the central control unit is included in the control computer 200, and the screen protection unit is included in each of the plurality of computers 21, 22, 23, . Also, the control computer 20 itself includes a screen protection unit so that all computers connected to the network can be secured and managed.

However, in recent years, most people have smart phones that have camera functions, and smartphone cameras have the same shooting capabilities as digital cameras. The spread of such smart phones is very likely to be used for leakage of corporate information.

That is, even if the company itself has a security solution, it restricts access to the screen or the user as a security code. Therefore, consideration is given to the act of shooting the image displayed on the screen with a smartphone or a digital camera from the outside .

SUMMARY OF THE INVENTION It is an object of the present invention to provide a monitor security system capable of preventing unauthorized outflow of information displayed on a screen by an external photographing apparatus.

A security condition determination unit 210 receives a video signal from the image sensing unit and determines a security condition for shooting the display, And a security control unit 220 for allowing the display to be operated as a security mode when the security condition is satisfied. Therefore, the security of the information leaked from the video of the monitor itself can be surely achieved.

The security condition determination unit may determine that the security condition is satisfied when the video line 110 connected to the image sensing unit is short-circuited.

Preferably, the security condition determination unit determines whether or not shooting is performed after determining whether the video line is short-circuited.

And a filter unit for limiting the angle of view of the display so as to guide the user to the front side of the display.

The local control unit may further include a storage unit 240 for storing image information before and after the start of the security mode operation.

The central control unit 300 further includes a monitoring unit 310 connected to the plurality of local control units and monitoring the operation of the security mode, and a security management unit 330 for limiting the security release to each local control unit. . Thus, efficient security management of the network is possible.

According to the monitor security system of the present invention, it is possible to prevent leakage of information of a photographing method using a digital camera or a smart phone, So that the function for protecting important information can be dramatically improved.

In addition, it is possible to optimize the determination as to whether or not the individual security mode is operated for each display and perform centralized management through the central control unit, thereby achieving efficient resource management.

1 is a block diagram of a prior art computer security device.
2 is a conceptual diagram of a monitor security system of the present invention.
3 is a block diagram showing the configuration of the monitor security system of the present invention.
FIG. 4 shows an embodiment of the security condition determination unit of FIG.
5 shows an embodiment of the central control of FIG.
6 is a flowchart illustrating an operation method of the monitor security system of the present invention.

Hereinafter, a monitor security system will be described in more detail with reference to the accompanying drawings.

2 is a conceptual diagram of a monitor security system of the present invention.

The present invention provides a monitor security system capable of judging a predetermined security condition so as to prevent shooting of a monitor unit that outputs image information, and entering a security mode.

In the description of the present invention, the monitor unit is described as a main example of a monitor included in a PC connected to a predetermined network, but it should be understood that the monitor unit includes a monitor, a tablet PC, a smart phone, do. The concept of the present invention can be applied to devices having a microcomputer capable of independently operating a security mode and determining a security condition through a local control unit even if the device is not connected to a predetermined network, Of course it is.

The monitor security system of the present invention will be described in detail with reference to the drawings. The monitor security system of the present invention includes an image sensing unit 100 provided on a monitor unit side, and an image sensing unit 100 receiving image information from the image sensing unit 100, And a local control unit 200 for initiating the operation of the security mode through the monitoring unit 310.

The image sensing unit 100 is arranged to face the monitor unit so as to detect an image on the front side of the monitor unit and transmit the image to the local control unit 200.

The image sensing unit 100 may selectively receive various visible light rays or infrared rays, such as a ccd camera, and convert it into an electronic image signal. Alternatively, the image sensing unit 100 may be integrated with the monitor unit or may be a separate device All of which can be considered.

It is preferable that the photographing range of the image sensing unit 100 is arranged so as to cover a visual recognition of the monitor unit or a predetermined angle of view range on the front side of the monitor unit capable of photographing, . ≪ / RTI >

The image sensing unit 100 is connected to the local control unit 200 through a video line 110. The connection between the image sensing unit 100 and the local control unit 200 can be applied to both wired and wireless systems. However, as will be described later, the security condition judged by the present invention can be determined not only by the photographing on the front side of the monitor unit but also by the interception of the video line 110, ) Is preferably made in a wired manner.

The local control unit 200 refers to an information processing apparatus in a main body such as a PC in the example of the drawing, but refers to a predetermined algorithm itself operated through control signals stored in the PC or transmitted from the central control unit 300 .

The local control unit 200 may receive a video signal from a front side of a monitor unit transmitted from the image sensing unit 100 and determine a predetermined security condition to start or stop the operation of a security mode for the monitor unit .

Accordingly, the local control unit 200 is connected to the monitor unit by the display line 20. The display line 20 may basically mean a video output line itself such as an HDMI, DVI or RGB line of the PC If the local control unit 200 has a configuration different from that of the PC, the display line 20 may be separate from the video output line.

As described above, the local control unit 200 can start the operation of the security mode through the display line 20. Here, the security mode is a function of activating the screen saver of the monitor unit, the operation of the power saving mode, . ≪ / RTI >

The local control unit 200 for the security judgment and operation itself can control the operation of the monitor unit according to a unique algorithm. However, for more efficient security management, the local control unit 200 is connected to and controlled together with the central control unit 300 desirable.

The connection between the local control unit 200 and the central control unit 300 may be performed through various communication networks such as 2G, 3G, and 4G, a wired / wireless network using a router or a shared server, And a method of transmitting / receiving data using equipment or a terminal.

The central control unit 300 may be connected to a plurality of local control units 200 to monitor the status of security operations, and more importantly, to transmit a predetermined release command for releasing the security mode. The concept of the present invention is to prevent the risk of leakage of security information through photographing of the image itself. When the operation of the security mode is canceled independently in a terminal connected through a predetermined network such as an intranet, There is a problem in achieving the object of prevention of leakage. Therefore, as described later, when the central control unit 300 monopolizes the transmission of the release command or the predetermined security condition is satisfied, the local control unit 200 is controlled Lt; / RTI >

Meanwhile, the monitor unit may further include a security auxiliary unit 11. The security auxiliary unit 11 may prevent the operation of external photographing devices such as a predetermined camera or a smart phone, A variety of devices that can be used. For example, the security auxiliary unit 11 may be a film to which a polarizing scheme is applied that makes it difficult to recognize information display in a range beyond a predetermined angle of view, or an IR emission Device or the like.

In the concept of the present invention, as described later, the local control unit 200 functions to determine whether or not the image is photographed. Therefore, it may be difficult to determine whether the photographed image is accurately photographed when the image is photographed in an oblique direction with respect to the monitor. In the case of the polarizing film, since it is possible to derive the position of the monitor part in front of the user with respect to the user, it can be meaningful to improve the accuracy of recognition.

Since the prior art has considered only the concept of security for accessibility to predetermined information, there has been a problem that there is no countermeasure against the leakage of visual information from the monitor itself.

According to the present invention, in order to prevent the leakage of information, the information is captured by the monitor itself so as to prevent the leakage of physical information, It is important to note that the security of the information can be dramatically improved compared to the simplicity of the structure.

3 is a block diagram illustrating a configuration of a monitor security system according to the present invention.

The local control unit 200 includes a security condition determination unit 210 for determining a security condition and a security operation unit 220 for initiating an operation of a security mode for the monitor unit according to the determined security condition.

The security condition determination unit 210 determines whether the image is captured through the image on the front side of the monitor unit, determines whether the image line 110 is disconnected, or if there is no change in the front image even though a predetermined control command is input And transmits a signal to the security operation unit 220 as to whether or not the security condition is satisfied.

This security condition will be described later.

The security operation unit 220 can operate the security mode through the display line 20 in such a manner that the operation of the screen saver is started to the monitor unit, the power saving mode is changed, or the power input is blocked. have.

When the security condition is satisfied and the security mode is activated, the release condition determination unit 230 may be further provided to release the security mode when the predetermined security release condition is satisfied. It goes without saying that the release condition determination unit 230 may be provided only in the central control unit 300, not in the local control unit 200. [

The unlock condition determining unit 230 can determine whether the security cancellation condition is satisfied by determining the security code of the previously authenticated user or the like. Accordingly, the security operation unit 220 can operate the security mode Can be released.

On the other hand, when the outputting of information to the monitor unit is blocked when the security condition is satisfied, the purpose of security may be satisfied. However, in order to prepare for the leakage and attempt to leak the information, The local control unit 200 may further include a storage unit 240. [

The storage unit 240 receives and stores video signals from the video sensing unit 100 continuously or at predetermined time intervals. The storage unit 240 is a predetermined buffer for repeatedly storing and deleting data in chronological order And a long-term storage unit for storing a security image for a predetermined time range when the security condition is satisfied.

If the security condition determining unit 210 determines that the security condition is satisfied, the long term storage unit stores the video signal for a predetermined range of time before and after the security mode starting time, Allows you to see what happened in front of the monitor.

In this case, the storage of the image information into the long-term storage unit may be realized by merging the two methods. The image information of the past time in the set time range from the security mode start time is called from the temporary storage unit and stored in the long- , The security image can be stored in real time in the long term storage after the start time.

The time range for storing the secure image before and after the security mode start time is optional, and the time range after the start time may be determined until the release condition is satisfied.

When the monitor security system of the present invention is connected to the central control unit 300 and integrated management is performed, the local control unit 200 includes the communication and management unit 250 and controls the central control unit 300 through a predetermined wired / Lt; RTI ID = 0.0 > 300 < / RTI >

Operation of the central control unit 300 will be described later.

3 is a conceptual diagram showing an embodiment of the above-described security operation unit.

The security condition determination unit 210 includes a photographing determination unit that determines whether the camera satisfies the security condition according to a condition that can determine whether the image is captured or not from the image signal received from the image sensing unit 100. [

Here, the image for the camera may be an image of a predetermined digital camera or a preset image for the shape of the lens, and the security condition determination unit 210 determines whether the image of the front surface of the received monitor unit includes the set image .

In addition, it is also possible to set the operation of the user for photographing in a camera or a smart phone in advance and judge it as a security condition.

In addition, it is possible to determine whether or not the security condition is satisfied by recognizing an alarm sound emitted when a photograph is taken in a smart phone or the like. In this case, the image sensing unit 100 may additionally include an acoustic receiver (not shown) can do.

Meanwhile, in the present invention, the security condition is satisfied by performing a determination as to whether or not an image is captured. However, when a specific user disconnects the connection state between the image sensing unit 100 and the local control unit 200, This may not be possible. Accordingly, in the present invention, the security condition determination unit 210 may detect whether the connection state of the image sensing unit 100 and the local control unit 200 is disconnected, and may determine that the connection condition is a security condition when the connection is disconnected. For this purpose, a short-circuit detection unit may be additionally provided.

Here, the disconnection of the connection state between the image sensing unit 100 and the local control unit 200 can be detected by measuring the power of a signal exchanged with the image line 110, but the present invention is not limited thereto.

In this case, the security condition determination unit 210 determines that the video line 110 is not disconnected from the local area, It is also possible to determine that the image is not changed due to the video signal received by the control unit 200 as a security condition. This configuration is defined as an image determination unit.

Since the determination of the security condition by the fixed state of the image can be meaningless in an environment in which the operation by the user is not performed, the fingerprint recognition or security code input by the user is performed and the operation by the predetermined command is performed It can be judged only when the image is not changed due to the video signal in the environment where the image is displayed.

5 is a conceptual diagram showing a preferred embodiment of a central control unit for managing local control units.

The local control unit 200 basically includes a communication module 340 connected to each of the local control units 200 and a monitoring unit 310 for detecting the operation of each local control unit 200 and collecting and managing the information And an alarm unit 320 for sending an alarm signal to a predetermined manager.

The communication module 340 is a device capable of interworking with individual local control units 200 through a network. In addition, the communication module 340 can be connected to a user terminal of a remote user through a communication line such as GSM, 3G, or 4G Lt; / RTI > device.

The monitoring unit 310 receives the status of the local control unit 200, more precisely, whether or not an event satisfying the security condition is generated for each of the monitors and whether or not the security mode is being operated It functions to integrate and manage this data.

The monitoring unit 310 may also function as a back-up storage for receiving image information stored in the storage unit 240 in the local control unit 200 and storing the image information separately for each local control unit 200. [

When the operation of the security mode is started in the specific local control unit 200 as a result of the determination by the monitoring unit 310, the alarm unit 320 may provide an alarm to recognize the occurrence of an event through the administrator. The alert unit 320 may provide alerts such as MMS, SMS, or voice call to a remote administrator with a user terminal as well as a visual or audible alert on the system.

The central control unit 300 may further include a security management unit 330 for checking the security operation of the individual local control unit 200, determining the release conditions therefor, and releasing the security conditions.

As described above, when each of the local control units 200 is provided with the release condition determination unit 230 and the individual security mode can be released through this, a problem may arise in achieving the object of security, and the central control unit 300 Need to be configured such that only the central control unit 300 can be released when the operation of the security mode is canceled or when the security release condition is not satisfied.

Here, the unsecured security condition is not satisfied in the individual local control unit 200, for example, when an error occurs in the security code input for security release two or more times. In this case, the security management unit 330 may function to limit the release operation of the local control unit 200 as a result of intrusion or security problems. In this case, the release condition determination unit 230 and the security operation unit 220 The active operation of the device is limited.

6 is a flowchart illustrating a method of operating a monitor security system according to the monitor security system of the present invention.

After the image sensing unit 100 is turned on and the image sensing is performed (S110), it is possible to make a security decision under the condition that the monitor unit is turned on.

Here, in order to reduce the power consumption and the load on the storage unit 240, the display ON state may be preceded by the image sensing unit ON (S110). However, in the case of performing the determination of the disconnection for the video line 110 as one embodiment of the security condition as described above, when the disconnection is performed first and the photographing for the security information outflow is made, Therefore, it is preferable that the image sensing unit is ON (S110).

From this, the judgment of the security condition and the activation and deactivation of the security mode can be operated as follows.

If the security condition determination unit 210 detects a short circuit of the video line 110 (S210) as a first condition of the security condition and the security operation unit 220 determines that there is a short circuit, (S230).

At this time, the short circuit of the video line 110 means that a video signal can not be input, such as cutting of a lead wire, breakage of an image sensing unit, or disconnection of a contact such as USB.

In addition, the security mode may mean the operation of the screen saver, the operation of the power saving mode, or the interruption of the power input at the monitor unit.

Also, this security mode may include an operation of a failure to take a picture by the security auxiliary unit 11.

If the first condition is not satisfied, the photographing is sensed (S220), and the second condition, that is, the security condition, can be determined.

Here, if the second condition is satisfied, the security mode (S230) is similarly entered, and if the security conditions are not satisfied, the above-described shooting state can be continuously performed. Here, the security condition may be determined by determining a third condition for image variation or another security discrimination method.

In addition, as described above, the image information before and after the start of the security mode may be stored in the storage unit 240 with respect to the state ahead of the monitor unit sensed through the image sensing unit 100. [

The operation of the security mode can be monitored and alarmed by the central control unit 300 and called by the administrator. In the individual local control unit 200, the release condition determination unit 230 receives a predetermined security code It is determined whether the release condition is satisfied (S310), and if satisfied, the security can be released (S320).

It is needless to say that the central control unit 300 can determine whether the release condition is satisfied (S310).

At this time, if it is determined that the release condition is not satisfied by the release condition determination unit 230, the security can be locked (S330). At this time, the release local condition control unit 230 The operation of the security operation unit 220 can be restricted and the security function can be improved by intensively releasing only through the security management unit 330 of the central control unit 300. [

As described above, the monitor security system according to the present invention can prevent the leakage of information of a photographing system using a digital camera or a smart phone, It is advantageous in that the function for protecting important information can be dramatically improved.

In addition, it is possible to optimize the determination as to whether or not each of the monitor units operates in the security mode and perform centralized management through the central control unit, thereby effectively managing the resources.

In the foregoing, the present invention has been described in detail based on the embodiments and the accompanying drawings. However, the scope of the present invention is not limited by the above embodiments and drawings, and the scope of the present invention will be limited only by the content of the following claims.

10 ... monitor part 11 ... security assistant
20 ... display line 30 ... communication line
100 ... image sensing unit 110 ... video line
200 ... Local control unit 210 ... Security condition judging unit
220 ... security operation unit 230 ... release condition determination unit
240 ... storage unit 250 ... communication and management unit
300 ... central control unit 310 ... monitoring unit
320 ... alarm unit 330 ... security management unit
340 ... communication module

Claims (6)

An image sensing unit (100) for sensing an image in front of the monitor unit; And
A security condition determination unit 210 that receives a video signal from the image sensing unit and determines a security condition for capturing the monitor unit; And a local control unit (200) having a security operation unit (220)
The security condition determination unit may determine,
When the video line (110) connected to the video sensing unit is short-circuited. delete The method according to claim 1,
The security condition determination unit may determine,
Wherein the determination unit determines whether a photographing operation is performed after determining whether the video line is short-circuited. An image sensing unit (100) for sensing an image in front of the monitor unit;
A security condition determination unit 210 that receives a video signal from the image sensing unit and determines a security condition for capturing the monitor unit; A local control unit (200) having a security operation unit (220) for controlling the security operation unit (220). And
And a filter unit for limiting a viewing angle of the monitor unit to guide the user to the front of the monitor unit. The method according to claim 1 or 4,
The local control unit,
And a storage unit (240) for storing image information before and after the start time of the security mode operation. An image sensing unit (100) for sensing an image in front of the monitor unit;
A security condition determination unit 210 that receives a video signal from the image sensing unit and determines a security condition for capturing the monitor unit; A local control unit (200) having a security operation unit (220) for controlling the security operation unit (220). And
A central control unit 300 connected to the plurality of local control units and monitoring the operation of the security mode, and a security management unit 330 for limiting the security release to each local control unit Wherein the monitor security system comprises:

Images