KR101714426B1 - Usb security system and security method thereof - Google Patents

Abstract

The USB security system of the present invention comprises a security module connected between a terminal USB port installed in a user terminal and a peripheral device to secure a terminal USB port, and a recording and storing unit installed in the security module and storing the history of the terminal when the media of the user terminal is booted and transmitting the history of the terminal to the management server when the user terminal is booted normally. The media boot of the user terminal is monitored to store a media boot content and inform an administrator of the media boot content. So, it is possible to prevent data leakage through the USB port.

Description

USB SECURITY SYSTEM AND SECURITY METHOD THEREOF [0002]

The present invention relates to a USB security system and a security method capable of preventing data leakage by allowing a USB port, peripheral devices such as a keyboard, a mouse, and a USB memory, and external devices to be connected only through a USB security device.

BACKGROUND ART [0002] Generally, a universal serial bus (USB) refers to a bus standard for connecting a personal computer (PC) and a peripheral device, and means an interface means for connection between a computer and an external device.

Such a USB can easily connect an external device to a computer without opening the computer terminal. For example, USB has the advantage of easily connecting external devices such as printers, modems, scanners, digital cameras, and USB memories using standard port and plug combinations.

Since USB memory can easily be illegally copied data stored in a computer terminal by connecting to a USB port installed in a computer terminal, most of the information leakage is currently performed through a USB memory.

A conventional security device between a USB host device and a peripheral device is disclosed in Patent Document 10-1388893 (Apr. 17, 2014), in which a first security module And a second security module, one end of which is coupled to the first security module and the other end of which is coupled to the plug of the peripheral device, wherein the first security module and the second security module are coupled to each other A plug of the peripheral device is connected to the second security module, and the second security module is coupled to the first security module so that a signal can be exchanged with the USB host device.

In the conventional USB security device, when the first security module and the second security module are formed into a general connector portion and a socket portion, when the connector portion is inserted into the socket portion, the first and second security modules are physically and electrically connected As a structure to be connected, there is a problem that the structure is complicated and the socket portion is structured to be connectable by using electric wires, iron pieces, and the like in addition to specific connector portions.

In addition, since the conventional USB security device has one security device installed in one USB host device port, it is necessary to install a security device in each USB host device port, so that the operation is complicated and difficult to manage .

In addition, in the conventional USB security device, when data is leaked through a USB port, it is difficult to check whether the data is leaked or leaked.

Patent Document 1: Registered Patent Publication No. 10-1388893 (April 17, 2014)

An object of the present invention is to provide a USB security system and a security method that are installed between a terminal USB port, a peripheral device, and an external device to prevent data leakage through a USB port.

It is another object of the present invention to provide a USB security system and a security method for monitoring media boot of a user terminal, storing media boot contents, and notifying an administrator thereof.

The USB security system of the present invention comprises a security module connected between a terminal USB port installed in a user terminal and a peripheral device to secure a USB port of the terminal, And a record storage unit for transmitting the terminal usage contents to the management server when the terminal is normally booted.

The security module includes a lock connector for permanently locking a terminal USB port installed in a user terminal, a first connection port to which a connection connector connected with the lock connector is connected, a plurality of second connections And a locking cover which is installed in the security unit to cover the first connection port and the second connection port so that the first connection port and the second connection port are not exposed to the outside, And may include a lock unit for unlocking.

The storage unit may include a memory installed in the security module and storing a usage history of the user terminal, a hub electrically connected to the connection port and electrically connected to the memory, And a time delay unit for delaying the electrical connection time of the memory so that the media is electrically connected between the hub and the memory when the medium booting is completed.

A locking protrusion protruding from at least one of an upper surface and a lower surface of the main body to be detached from the terminal USB port to prevent the main body from being detached from the UBS port of the terminal, And a plurality of terminal units installed inside the main body and connected to terminals of the terminal USB port.

The security unit includes a base plate, a main PCB mounted on the base plate and provided with a plurality of connection ports, a main body mounted on the base plate, on which the lock unit is installed and on which the lock cover is slidably mounted .

Slide protrusions are formed on both side surfaces of the main body, and slide grooves are formed on inner surfaces of both sides of the lock cover to be inserted into the slide protrusions and slide along the slide protrusions.

The lock unit includes a key bundle mounted on the main body, a key member inserted into the key bundle to lock and unlock the key bundle, and a key member rotatably installed on the key bundle, And a locking protrusion that is engaged with the lock slot formed in the second housing.

According to another aspect of the present invention, there is provided a USB security method comprising the steps of: connecting a power source to a memory at a time when a media boot is completed when the user terminal is booting a medium, storing usage contents of the user terminal in a memory, Transmitting the content of the user terminal stored in the memory to the management server, and deleting the record stored in the memory when the content of the user terminal is transferred to the management server.

As described above, the USB security system of the present invention is installed between a terminal USB port, a peripheral device connected to the USB port, and an external device, thereby preventing data leakage through the USB port.

In addition, the USB security system of the present invention monitors the media boot of the user terminal, stores the media boot content, and informs the administrator.

1 is a block diagram of a USB security system according to an embodiment of the present invention.
2 is a perspective view of a security module with a lock cover locked according to an embodiment of the present invention.
3 is a perspective view of a security module in which a lock cover is detached according to an embodiment of the present invention.
4 is an exploded perspective view of a security module according to an embodiment of the present invention.
5 is a perspective view of a lock connector of a security module according to an embodiment of the present invention.
6 is a perspective view of an auxiliary lock connector of a security module according to an embodiment of the present invention.
7 is a partial cross-sectional perspective view showing a locked state of a lock unit of a security module according to an embodiment of the present invention.
8 is a partial cross-sectional perspective view showing a locked state of a lock unit of a security module according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The sizes and shapes of the components shown in the drawings may be exaggerated for clarity and convenience. In addition, terms defined in consideration of the configuration and operation of the present invention may be changed according to the intention or custom of the user, the operator. Definitions of these terms should be based on the content of this specification.

1 is a block diagram of a USB security system according to an embodiment of the present invention.

1, a USB security system according to an embodiment of the present invention includes a security module 200 connected between a terminal USB port 100 installed in a user terminal 110 and a peripheral device to secure a terminal USB port 100, And a record storage unit 300 installed in the security module 200 and storing the content of the terminal at the media boot time of the user terminal and transmitting the stored content to the management server 500.

2 to 5, the security module 200 includes a lock connector 50 mounted on the terminal USB port 100 installed in the user terminal 110 to permanently close the terminal USB port 100, (10) having a plurality of connection ports (40, 42) electrically connected to the external device (50) and to which peripheral devices and external devices are connected, and a plurality of connection ports And a lock unit 30 installed in the security unit 10 for locking the lock cover 20. The lock unit 20 includes a lock unit 20,

The recording and storing unit 300 includes a memory 320 installed in the security unit 10 and storing the usage history of the user terminal and a memory 320 electrically connected to the memory 320, The hub 310 and the memory 320 are installed between the hub 310 and the memory 320 so that the media 310 is electrically connected to the memory 320 when the medium booting of the user terminal is completed, And a time delay unit for delaying the connection time.

Generally, when a medium boot is performed using a USB memory or the like, the operating system of the user terminal is disabled. Therefore, when the data stored in the user terminal is leaked after booting the medium, the user does not know the details of the outflow route and the outflow data.

The USB security system of the present invention stores usage contents of the user terminal in the medium booting unit 300 and transmits the stored record to the management server 500 when the user terminal is normally booted, To the administrator.

The memory 320 has a capacity enough to store usage contents of the user terminal. When the contents stored in the memory 320 are completely transferred to the management server 500, the contents stored in the memory 320 are automatically deleted do. That is, if the contents remain in the memory, the capacity of the memory becomes small and the usage history of the user terminal can not be stored at the time of booting the other media, so that it is controlled to be automatically deleted when the transfer to the management server 500 is completed.

The delay of the time delay unit 330 is generally preferably used, and the delay time of the time delay unit 330 is set to a time at which the medium boot is completed and the media boot is completed.

A security method of such a USB security system will be described below.

When the user terminal 110 is booting the media, the power is connected to the memory 320 at the time when the media booting is completed. That is, the power supply time to the memory 320 is delayed in the time delay unit 330, and the power is connected to the memory 320 when the medium booting is completed.

Then, the usage contents of the user terminal 110 are stored in the memory 320. At this time, when the user terminal is booted by the normal operating system, the usage contents of the user terminal are not stored in the memory.

When the user terminal 110 is booted normally, the usage contents of the user terminal stored in the memory 320 are transmitted to the management server 500.

When the use of the user terminal 110 is transferred to the management server 500, the record stored in the memory 320 is deleted.

As described above, in the USB security method of the present invention, when the user terminal is booting the media, the usage contents of the user terminal 110 are stored in the memory 320 and transmitted to the management server 500, It is possible to check the contents of the use.

6, the lock connector 50 includes a main body 52 to be inserted into the terminal USB port 100, and a locking connector 50 which protrudes from the upper and lower surfaces of the main body 52 and is inserted into the terminal USB port 100 A protrusion 54 protruding from the UBS port 100 to prevent the main body 52 from being detached from the terminal UBS port 100 when the main body 52 is hooked on the hooking protrusion 102 of the terminal USB port 100, And a plurality of terminal portions 56 contacting the terminals.

The lock connector 50 is provided with a cable 58 electrically connected to the plurality of terminals 56 and a connector 58 inserted at the end of the cable 58 into the connection port 40 of the security unit 10. [ (59).

The user terminal is provided with a plurality of USB ports for wired connection so that a signal can be exchanged between the terminal and the external device and the peripheral device. Therefore, there is a fear that data may be leaked through the remaining USB port of the terminal other than the terminal USB port connected to the security unit 10. Therefore, the terminal USB port other than the terminal USB port connected to the security unit 10 must be permanently locked. For this, an auxiliary lock connector 60 as shown in FIG. 7 is attached to the terminal USB other than the terminal USB port connected to the security unit 10 to permanently close the terminal USB port.

The auxiliary locking connector 60 includes a main body 62 to be inserted into the terminal USB port 100 and a locking protrusion 102 protruding from the upper and lower surfaces of the main body 62 and installed inside the terminal USB port 100 And an escape preventing protrusion 64 for preventing the main body 62 from being detached from the terminal UBS port 100 by being hooked.

Since the auxiliary locking connector 60 does not require a signal connection, no terminal is provided.

Since the plurality of terminal USB ports 100 installed in the user terminal are permanently locked by the lock connector 50 and the auxiliary lock connector 60, the external device such as the USB memory is connected through the terminal USB port 100 And can only be connected to the peripheral device and the external device through the security unit 10 only.

The security unit 10 includes a base plate 12, a main PCB 14 mounted on the base plate 12 for controlling the signal connection and security unit and a main PCB 14 mounted on the main PCB 14, And a body portion 16 fixed to the base plate 12 to which the lock unit 30 is installed and to which the lock cover 20 is openably connected.

The main PCB 14 is mounted with various components for controlling the security unit 10 and a power connection terminal 72 to which an external power source is connected is mounted on one side of the main PCB 14, A plurality of LED lamps 74 are provided to inform the user of the status.

The connection ports 40 and 42 are connected to a first connection port 40 connected to the USB port 100 of the terminal and a plurality of second connection ports 40 and 40 to which the peripheral devices and USB connectors 82, (42).

The first connection port 40 is formed as a micro 5 pin port when the connection connector 59 connected to the lock connector 50 and the cable 58 is a micro 5 pin and the second connection port 42 is formed as a USB And may be formed as a USB port so that the connectors 82, 84, 86 can be connected.

For example, the second connection port 42 may include a first USB port 43 connected to a keyboard, a second USB port 44 connected to a mouse, and a third USB port 45 connected to an external device such as a USB memory .

When the lock cover 20 is in the closed state, the connection ports 40 and 42 are protected by the lock pin and are not exposed to the outside, so that the external devices can not be connected to the connection ports 40 and 42. Therefore, Can be performed.

The main body portion 16 is formed with slide protrusions 92 protruding in the longitudinal direction on both sides thereof and a slide groove portion 94 is formed on the inner side surfaces of both sides of the lock cover 20 to press the slide protrusions 92 The slide groove portion 94 is inserted and the lock cover 20 is slidably mounted on the main body portion 16. [

The locking cover 20 is formed to be open on the lower side and the other side and is slidably mounted on the main body portion 16. A plurality of cable passage portions 96 are formed on one side of the locking cover 20, And a cable connected to an external device or a peripheral device are inserted into the cable passage portion 96 and connected to the connection ports 40 and 42. [

When the lock cover 20 is covered with the body portion 16 as described above, the lock cover 20 covers the connection ports 40 and 42 to arbitrarily connect the connectors to the connection ports 40 and 42 It becomes impossible. When the lock cover 20 is detached from the main body 16, the connection ports 40 and 42 are opened to the outside, and the connector can be connected to the connection ports 40 and 42.

The lock unit 30 includes a key bundle 32 mounted on the main body 16, a key member inserted into the key bundle 32 to unlock the key bundle 32, And a lock protrusion 34 formed on the inner surface of the upper side of the lock cover 20 and inserted into the lock protrusion 34. The lock protrusion 34 is formed on the inner surface of the lock cover 20, 36).

The body portion 16 is formed with a draw-out hole 37 through which the locking projection 34 is drawn out to the outside of the main body portion 16.

The lock slot portion 36 is formed to protrude from the inner surface of the lock cover 20, and the lock protrusion 34 is engaged. That is, when the locking protrusion 34 is drawn out through the draw-out hole formed in the main body 16 and hooked on the lock slot part, the lock cover 20 is locked.

FIG. 7 is a partial cross-sectional perspective view illustrating a locked state of a lock unit of a USB security device according to an embodiment of the present invention. FIG. 8 is a cross- And Fig.

The operation of the USB security device will be described as follows. A connection connector 59 connected to the user terminal is inserted into the first connection port 40 provided in the security unit 10, And a USB connector 82, 84, 86 connected to the peripheral device.

Then, the body cover 16 is covered with the lock cover 20. That is, when the lock cover 20 is slidably moved, the lock cover 20 is covered on the upper surface of the main body portion 16. 6, when the key member is inserted into the key bundle 32 and rotated, the locking protrusion 34 is rotated and the locking protrusion 34 is inserted into the lock slot portion 36 of the lock cover 20 So that the lock cover 20 is locked.

Then, when unlocking the security unit 10, when the key member is turned in the opposite direction, the locking protrusion 34 is disengaged from the lock slot portion 36 and the lock cover 20 is unlocked.

As described above, since the USB security device of the present invention can connect a plurality of USB ports installed in a user terminal to a peripheral device, an external device or a USB memory only by a security unit, data leakage through a USB port can be essentially blocked.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be construed as limited to the embodiments set forth herein. Various changes and modifications may be made by those skilled in the art.

10: security unit 12: base plate
14: main PC 16: main body part
20: lock cover 30: lock unit
32: key bundle 34: locking protrusion
36: lock slot part 40: first connection port
42: second connection port 50: lock connector
52: main body 54:
56: terminal portion 100: terminal USB port
110: user terminal 300:
320: memory 330: time delay unit
310: Hub 500: Management Server

Claims (8)

A security module connected between the terminal USB port and a peripheral device installed in the user terminal to secure the terminal USB port;
And a recording and storing unit installed in the security module for storing contents of terminal use at the time of media booting of the user terminal and transmitting contents of terminal use at normal boot of the user terminal to the management server,
Wherein the record storage unit comprises: a memory installed in the security module and storing usage history of the user terminal;
A hub electrically connected to the connection port of the security module and electrically connected to the memory,
And a time delay unit installed between the hub and the memory for delaying an electrical connection time of the memory so that the hub and the memory are electrically connected when the medium booting of the user terminal is completed. The method according to claim 1,
The security module includes: a lock connector for permanently locking a terminal USB port installed in a user terminal;
A security unit having a first connection port to which the connection connector connected to the lock connector and a connector are connected, a plurality of second connection ports to which a peripheral device and an external device are connected,
A lock cover which is openably and closably mounted on the security unit and covers the first connection port and the second connection port such that the first connection port and the second connection port are not exposed to the outside; And
And a lock unit installed in the security unit to lock and unlock the lock cover. delete 3. The method of claim 2,
The lock connector includes a main body inserted into a USB port of the terminal,
A protrusion protruding from at least one of an upper surface and a lower surface of the main body to prevent the main body from being detached from the UBS port of the terminal,
And a plurality of terminal units installed inside the main body and connected to terminals of the terminal USB port. 3. The method of claim 2,
The security unit includes a base plate,
A main PCB mounted on the base plate and having a plurality of connection ports,
And a main body part mounted on the base plate, the main body part having the lock unit installed and the lock cover slidably mounted. 6. The method of claim 5,
Wherein slide protrusions are formed on both side surfaces of the main body, and slide grooves are formed on inner side surfaces of the lock cover, the slide grooves being inserted into the slide protrusions to slide along the slide protrusions. 6. The method of claim 5,
The lock unit includes a key bundle mounted on the main body, a key member inserted into the key bundle to lock and unlock the key bundle, and a key member rotatably installed on the key bundle, And a locking protrusion that is engaged with the lock slot formed in the main body of the USB security system.


delete

Images