KR101928525B1 - Physical and IT Security Device Control Method and System based on Security Incident Response process - Google Patents

Abstract

The present invention relates to an apparatus and method for controlling a physical / IT security device based on a security violation countermeasure process, and more particularly, A management unit, and a process execution unit that executes a process through the process execution information generated by the corresponding process management unit, and generates a unified command for controlling the physical security equipment and the IT security equipment that are required to be linked to the corresponding policy And a security processing unit for searching the security equipment which is requested to be interlocked with the corresponding policy and calculating a parameter required for controlling the searched security equipment based on a spatial phase relation between the security equipment and the occurrence position of the infringement, And provides it to the corresponding process processing unit An equipment control unit based on a control proxy agent for transferring multiple connection and control commands of the physical security equipment and the IT security equipment to the corresponding security equipment; and a storage unit for storing the security violation information and the corresponding policy and the script of the process It provides a scalable and flexible structure for various types of security breaches and security equipment additions and changes that can be performed, including a database part that can be integrated into physical / IT security areas against intrusion accidents in a converged security space. .

Description

TECHNICAL FIELD [0001] The present invention relates to a physical and IT security device control method and apparatus based on a security violation response process,

The present invention relates to control of physical / information technology (IT) security equipment based on a security violation response process, and more particularly, to an integrated security system in which various physical security equipment and IT security equipment are interlocked, The security breach response policy and its corresponding process are defined to cope with the security breach, and the simultaneous control of multiple physical / IT security equipments in the security breach occurrence space based on the same defines the security And an apparatus and method for controlling physical / IT security equipment based on an infringement countermeasure process.

As will be known, the security control is divided into physical area control, IT security area control, disaster prevention and environmental safety area, and independent control solutions and services are provided for each area. The management of the physical area includes firewall, server security, network security, IPS (Intrusion Prevention System), DDoS (Distributed Denial of Service), DDoS Service, application security, ESM (Enterprise Security Management), server, network, and DB. Fire and gas monitoring, energy, air conditioning, heating,

In the meantime, in the security management system, it has been the mainstream of security investment in enterprises to install advanced security equipment, but recently it has been changed into the direction of effective integration and management and management. Among these, physical security and IT technology Based security is a tendency to integrate the information security domain itself.

In accordance with this trend, efforts are being actively pursued to integrate management of control areas and to prevent security accidents caused by enterprise risk management and proactive response. Particularly, in order to effectively prevent the leakage of important information in the enterprise, the physical security control and the IT security control are integrated and integrated. Accordingly, a form of interlocking technology that integrates physical security equipment and IT security equipment is called Physical Security Information Management ), Which provides security functions through the integration of security equipment through network and mapping of GIS (Geographic Information System), visualization of surveillance equipment, and analysis of surveillance information.

However, although the security equipment control function is provided to cope with security breach like this, diversity of physical security equipment and IT security equipment, unique interface by security equipment manufacturer, spatial characteristic between IT security and physical security, expansion of scope of security target It is difficult to control physical security equipment and IT security devices that need to be linked together in an independent and unified manner for the purpose of integrated security.

Although related companies are collaborating to standardize interworking interface between security monitoring devices, it is still limited to specific security equipment field like CCTV (Closed-Circuit TeleVision). Therefore, Lt; / RTI > In addition, countermeasures to security breaches are also increasingly required to improve the level of response and intelligence through cycles that perform feedback after responding to security breaches.

United States Patent No. 7467400, registered on December 16, 2008.

The present invention has been proposed in order to solve the problems of the prior art as described above, and it is an object of the present invention to provide a security breach response policy defined according to a security breach type analyzed and detected in an integrated security system operated by interlocking various physical security equipment and IT security equipment And defines and performs the corresponding process accordingly.

In addition, the present invention performs unified simultaneous control of multiple physical / IT security devices in a security breach occurrence space, and enhances the efficiency of security breach response through feedback through confirmation of the result.

According to a first aspect of the present invention, there is provided a physical / IT security device control apparatus based on a security violation countermeasure process, comprising: a countermeasure process for determining a countermeasure policy in accordance with security violation information detected by the integrated security system, A management unit, and a process execution unit that executes a process through the process execution information generated by the corresponding process management unit, and generates a unified command for controlling the physical security equipment and the IT security equipment that are required to be linked to the corresponding policy And a security processing unit for searching the security equipment which is requested to be interlocked with the corresponding policy and calculating a parameter required for controlling the searched security equipment based on a spatial phase relation between the security equipment and the occurrence position of the infringement, To the corresponding process processor, An equipment control unit based on a control proxy agent for transferring multiple connection and control commands of the physical security equipment and the IT security equipment to the corresponding security equipment; and a database for storing the security violation information, the corresponding policy, Section.

Here, the corresponding process management unit may include an infringement detection information processing unit for extracting security infringement information from the security infringement detection information DB based on the infringement incident information detected and transmitted in the integrated security system, A policy determination unit for extracting and determining a response policy from the response policy DB based on the information, and a correspondence information generation unit for generating process execution information according to a response policy provided from the policy determination unit.

The policy determination unit and the correspondence information generation unit may determine a corresponding policy and generate corresponding process execution information may have a thread type.

The corresponding process execution information transmitted from the corresponding process management unit to the corresponding process processing unit may be transmitted as an XML-formatted message.

Wherein the corresponding process processing unit comprises: a corresponding information receiving unit for receiving the process execution information from the corresponding process management unit; an XML definition script for the process from the process script repository by analyzing the process execution information provided from the corresponding information receiving unit; An execution parser for parsing the parsed XML definition script; an execution command tree building unit for constructing an execution command tree for controlling the security equipment according to the XML definition script parsing information provided from the XML parsing unit; And a control command generation unit for generating a control tree including a plurality of pieces of security equipment control information including a position, a path, and a control parameter corresponding to equipment in the invasion occurrence space from the spatial operation processing unit according to an instruction tree provided from the control command generation unit, Receive It may include a control command generator and the command supplied from the tree performs processing command and the control command generator unit command forwarding router to forward the control information provided to the control unit from the equipment.

The spatial processing unit includes a query processing unit for receiving a corresponding device search and a corresponding location / path request query from the corresponding process processing unit, and an infringement occurrence from the security device DB and the map DB according to the corresponding device search and corresponding location / A position / path calculation unit for calculating a corresponding position / path based on the phase relation generated by the phase relation generation unit, for searching for a space-based corresponding equipment and generating and configuring a spatial phase relationship therebetween; A control parameter calculator for calculating a control parameter for the commercial security equipment using the installation information of the commercial security equipment on the basis of the phase relation generated by the phase relation generator; Path / path and the control parameter provided from the control-parameter calculating unit, And a device / control information transmitting unit for transmitting the control information to the process processing unit.

The apparatus control unit includes an instruction proxy unit for generating a command proxy according to the unified command provided from the corresponding process processing unit, an instruction queue management unit for performing input / output of a command according to the instruction proxy generated by the instruction proxy unit, An adapter request unit for configuring a security device adapter for each type of commercial security equipment and a device control proxy for configuring the security appliance adapter as a control execution module to perform control for executing multiple control commands for the commercial security equipment Section.

According to a second aspect of the present invention, there is provided a method of controlling a physical / IT security device based on a security violation countermeasure process, comprising the steps of: determining a response policy according to security violation information detected by the integrated security system; Generating a unified command for controlling a physical security device and an IT security device that are required to be interlocked with the corresponding policy, performing a process through the created process execution information, Performing a spatial operation on the basis of a spatial phase relationship between the security device and a violation occurrence position in order to search for the security device requiring interworking and to calculate parameters necessary for controlling the searched security device; And transmitting multiple connection and control commands of the IT security device to the corresponding security device, Information with the response policy and may include the step of storing the script in the process.

The step of generating the information of the process may include the steps of extracting security violation information from the security violation detection information DB based on the intrusion accident information detected and transmitted in the integrated security system, Extracting and determining a response policy from the policy DB, and generating process execution information according to the provided response policy.

The step of generating the command may include receiving the process execution information, analyzing the process execution information, loading an XML definition script of the process from the process script repository, and parsing the loaded XML definition script, Configuring an execution command tree for controlling the security device according to the provided XML definition script parsing information; and controlling security equipment control including the corresponding equipment in the infringement space and the location, path, and control parameters according to the provided execution command tree Receiving the information, and providing the execution command and the control information provided for the control of the security equipment.

Wherein the step of performing the spatial operation comprises: receiving the corresponding equipment search and corresponding location / path request inquiry; and receiving a location / path request from the security device DB and the map DB according to the corresponding equipment search and corresponding location / Searching for a corresponding device of the security device and generating and configuring a spatial phase relationship therebetween; calculating a corresponding position / path based on the generated phase relationship; Calculating the control parameters for the commercial security equipment using installation information, and communicating the corresponding location / path and the control parameters for the corresponding process processing.

The step of transferring the multiple connection and control commands to the corresponding security device comprises: generating a command proxy according to the unified command; performing input and output of a command according to the generated command proxy; Configuring a security device adapter for each type of security device, and performing a control command for the plurality of commercial security devices when the security device adapter generates an equipment control proxy configured as a control performing module.

According to an embodiment of the present invention, in an integrated security system of various environments in which people, information, infrastructure, system, and the like are organically combined, a corresponding process is performed according to a corresponding policy for responding to security breach accidents in a converged security space, / It is possible to comprehensively cope with physical / IT security area against intrusion of intrusion of confidential security space by performing multiple vendor independent and unified multiple concurrent control for IT security equipment, It is effective to provide a scalable and flexible structure for modification and the like.

1 is a block diagram of a physical / IT security device control apparatus based on a security violation countermeasure process according to an embodiment of the present invention.
2 is a detailed block diagram of a corresponding process management unit according to an embodiment of the present invention.
3 is a detailed block diagram of a corresponding process processor according to an embodiment of the present invention.
4 is a detailed block diagram of a spatial operation processing unit according to an embodiment of the present invention.
5 is a detailed block diagram of an apparatus control unit according to an embodiment of the present invention.
6 is a flowchart illustrating a process of a corresponding process processor, which is a main component of a physical / IT security device control apparatus based on a security violation countermeasure process according to an embodiment of the present invention.
FIG. 7 is a flowchart illustrating a process of a device control unit, which is a main component of a physical / IT security device control apparatus based on a security violation countermeasure process according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims.

In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear. The following terms are defined in consideration of the functions in the embodiments of the present invention, which may vary depending on the intention of the user, the intention or the custom of the operator. Therefore, the definition should be based on the contents throughout this specification.

1 is a block diagram of a physical / IT security device control apparatus based on a security violation countermeasure process according to an embodiment of the present invention.

The physical / IT security equipment control device includes a corresponding process management unit 110, a corresponding process processing unit 120, a spatial operation processing unit 130, an equipment control unit 140, a database unit 151, 152, 153, 154 , A GUI (Graphical User Interface) unit 160, and the like.

The corresponding process management unit 110 determines a corresponding policy according to the security violation information detected by the integrated security system, and generates process execution information to be performed.

The corresponding process processing unit 120 performs a process through the process execution information generated by the corresponding process management unit 110 and executes the process using the commercial security equipment 20 including the physical security equipment and the IT security equipment, (Unified Command) for controlling the mobile terminal.

The spatial operation processing unit 130 searches for commercial security equipment 20 that is required to be interlocked with the corresponding policy and calculates the parameters required for controlling the searched commercial security equipment 20, And provides spatial processing to the corresponding process processing unit 110 based on the spatial phase relation.

The equipment control unit 140 is based on a control proxy agent that transfers multiple connection and control commands of the physical security equipment and the IT security equipment to the corresponding commercial security equipment 20.

The database unit includes a security violation detection information DB 151 for storing security violation information detected by the security violation analysis / detector 10 of the integrated security system, a security equipment DB 152 for storing security equipment information, A correspondence policy DB 154 for storing correspondence policy information according to security violation information, a process script repository 155 for storing a script of a process, and the like.

The GUI unit 160 displays the process and result of the response policy determined according to the security violation information detected by the integrated security system.

2 is a detailed block diagram of a corresponding process management unit according to an embodiment of the present invention.

As shown, the corresponding process management unit 110 includes an intrusion detection information processing unit 111, a policy determination unit 112, a corresponding information generation unit 113, and the like.

The intrusion detection information processing unit 111 extracts security intrusion information from the security intrusion detection information DB 151 based on the intrusion incident information detected and transmitted from the security intrusion analysis / detector 10 of the integrated security system, 112).

The policy determination unit 112 extracts and determines a corresponding policy from the corresponding policy DB 154 based on the security violation information provided from the intrusion detection information processing unit 111, and provides the corresponding policy to the corresponding information generation unit 113.

The correspondence information generation unit 113 generates process execution information according to the corresponding policy provided from the policy determination unit 112 and provides the process execution information to the corresponding process processing unit 120. The correspondence information generation unit 113 may generate the process execution information for supporting the direct security equipment and manual response of the security manager through the GUI unit 160 and provide the generated process execution information to the corresponding process processing unit 120 .

The determination of the corresponding policy by the policy decision unit 112 and the corresponding information generation unit 113 and the generation of the corresponding process execution information have a thread type, which is a structure for processing the security violation information received concurrently to be.

The corresponding process execution information transmitted from the corresponding process management unit 110 to the corresponding process processing unit 120 may be transmitted in the following XML format message.

3 is a detailed block diagram of a corresponding process processor according to an embodiment of the present invention.

As shown, the corresponding process processing unit 120 includes a corresponding information receiving unit 121, an XML parsing unit 122, an execution command tree building unit 123, an instruction tree processing unit 124, a control command generating unit 125, An instruction forwarding router unit 126, and the like.

The corresponding information receiving unit 121 receives the process execution information from the corresponding process management unit 110 and provides the process execution information to the XML parsing unit 122.

The XML parsing unit 122 analyzes the process execution information provided from the corresponding information receiving unit 121, loads the XML definition script of the process from the process script repository 155, parses the loaded XML definition script, And provides it to the building section 123.

The execution command tree building unit 123 constructs an execution command tree for controlling the security apparatus according to the XML definition script parsing information provided from the XML parsing unit 122 and transmits the execution command tree to the command tree processing unit 124.

The instruction tree processing unit 124 processes the execution instruction tree provided from the execution instruction tree building unit 123 and provides the processing instruction tree to the control instruction generating unit 125 and the instruction forwarding router unit 126.

The control command generation unit 125 receives security equipment control information such as a location, a path, a control parameter, and the like from the corresponding equipment in the invasion occurrence space from the spatial operation processing unit 130 according to the command tree provided from the command tree processing unit 124 To the command forwarding router unit 126.

The command forwarding router unit 126 transmits the execution command provided from the command tree processing unit 124 and the control information provided from the control command generation unit 125 to the equipment control unit 140.

The corresponding process processor 120 processes the corresponding process by repeating the process of confirming the processing result of each step unit of the execution command tree, and outputs the corresponding security device, corresponding position and path, (160) so as to be visualized so that the security manager intuitively recognizes it.

The form of the unified instruction set constituting the execution instruction tree generated through the process script analysis in the corresponding process processing unit 120 is as follows.

4 is a detailed block diagram of a spatial operation processing unit according to an embodiment of the present invention.

As shown in the figure, the spatial operation processing unit 130 detects the location of the detected security violation, the installation location of the commercial security equipment 20 including the physical security equipment and the IT security equipment, and the automatic correspondence based on the spatial relation with the coverage A phase relation generating unit 132, a position / path calculating unit 133, a control parameter calculating unit 134, a device / parameter calculating unit 134, A control information transmitting unit 135, and the like.

The query processing unit 131 receives the corresponding device search and the corresponding location / path request query from the corresponding process processing unit 120. [

The phase relation generation unit 132 searches the correspondence equipment based on the infringement space from the security equipment DB 152 and the map DB 153 according to the corresponding equipment search and the corresponding location / path request inquiry, Creating and configuring.

The position / path calculator 133 calculates a corresponding position / path based on the phase relation generated by the phase relation generator 132 and provides it to the equipment / control information transmitter 135.

The control parameter calculator 134 calculates a control parameter (for example, a PZT control value) for commercial security equipment using the installation information of the commercial security equipment based on the phase relationship generated by the phase relation generator 132, / Control information transmission unit 135. [

The equipment / control information transmission unit 135 transfers the corresponding position / path provided from the position / path operation unit 133 and the control parameter provided from the control parameter operation unit 134 to the corresponding process processing unit 120.

5 is a detailed block diagram of an apparatus control unit according to an embodiment of the present invention.

The equipment control unit 140 converts the security equipment control command and control information for corresponding performance generated by the corresponding process processing unit 120 into actual control commands of the commercial security equipment 20 interlocked with the integrated security system, The command proxy unit 141, the command queue management unit 142, the adapter request unit 142, and the proxy request unit 144. The command proxy unit 141, the command queue management unit 142, A controller 143, a control performing unit 144, and the like.

The instruction proxy unit 141 generates a command proxy in accordance with the unified command provided from the corresponding process processing unit 120. [

The command queue management unit 142 performs input / output of a command according to the command proxy generated by the command proxy unit 141. [

The adapter request unit 143 configures a security device adapter for each type of security device using an API or a standard interface that is provided by a manufacturer of the commercial security device 20 linked to the integrated security system or related equipment.

The control performing unit 144 performs a control command to the plurality of commercial security devices 20 when an actual security device adapter corresponding to the controlled security device generates an equipment control proxy including the control performing module, Provides interworking and control functions.

FIG. 6 is a flowchart illustrating a process of a corresponding process processor, which is a main component of a physical / IT security device control apparatus based on a security violation countermeasure process according to an embodiment of the present invention. This is a flowchart for explaining the process of the equipment control unit, which is a main component of the physical / IT security equipment control device based on the security violation countermeasure process.

Referring to FIG. 7, the process of the corresponding process processor 120 includes a process process for generating an execution command tree by receiving process execution information and a thread process for processing an execution command tree, It is a structure for dealing with the coping process against multiple security breaches.

When the corresponding information receiving unit 121 receives the process execution information (S301), the XML parsing unit 122 loads the process execution script corresponding to the process ID in the process execution information from the process script repository 155 (S302) (S303), transfers the interpreted result to the execution command tree building unit 123, and generates an execution command tree to be executed (S304). The created command tree is received by the command tree processing unit 124 (S306), and a control command is generated (S307). The created command tree is sent to the equipment control unit 140 by the command transferring router unit 126. The instruction tree processing unit 124 confirms the execution result thereof (S308), and repeats the process of processing the next execution command on the instruction tree to process the corresponding process.

Next, referring to FIG. 6, the process performed by the equipment control unit 140 will be described. The equipment control commands are received from the corresponding process processing unit 120 (S201) to generate a command queue (S202) (S203), the control command in the command queue is continuously extracted, and a security device adapter configured using an API provided by the vendor of the commercial security device 20 is requested (S204), and the device control proxy is sent in a thread form And creates a connection with the commercial security device 20 (S206) by using the actual device control function (device connection, control, and response confirmation) of the used security device adapter (S206) (S207), the control command is executed (S208), the response (result) is confirmed (S209), and the process is transferred to the corresponding process processing unit (120) The process of simultaneous control of the security equipment.

Combinations of each step of the flowchart and each block of the block diagrams appended to the present invention may be performed by computer program instructions. These computer program instructions may be loaded into a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus so that the instructions, which may be executed by a processor of a computer or other programmable data processing apparatus, And means for performing the functions described in each step are created. These computer program instructions may also be stored in a computer usable or computer readable memory capable of directing a computer or other programmable data processing apparatus to implement the functionality in a particular manner so that the computer usable or computer readable memory It is also possible for the instructions stored in the block diagram to produce a manufacturing item containing instruction means for performing the functions described in each block or flowchart of the block diagram. Computer program instructions may also be stored on a computer or other programmable data processing equipment so that a series of operating steps may be performed on a computer or other programmable data processing equipment to create a computer- It is also possible that the instructions that perform the processing equipment provide the steps for executing the functions described in each block of the block diagram and at each step of the flowchart.

Also, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function (s). It should also be noted that in some alternative embodiments, the functions mentioned in the blocks or steps may occur out of order. For example, two blocks or steps shown in succession may in fact be performed substantially concurrently, or the blocks or steps may sometimes be performed in reverse order according to the corresponding function.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas falling within the scope of the same shall be construed as falling within the scope of the present invention.

110: Corresponding process management unit 111: Infringement detection information processing unit
112: policy decision unit 113: correspondence information generation unit
120: corresponding process processing section 121: corresponding information receiving section
122: XML parsing unit 123: Execution command tree building unit
124: command tree processing unit 125: control command generation unit
126: Command forwarding router unit 130: Spatial operation processor
131: Query processing unit 132:
133: position / path computing unit 134: control parameter computing unit
135: Equipment / control information transmission unit 140: Equipment control unit
141: Command Proxy Unit 142: Command Queue Management Unit
143: adapter requesting unit 144: control performing unit

Claims (12)

A corresponding process management unit for determining a response policy according to the security violation information detected by the integrated security system and generating process execution information to be performed;
A corresponding process for executing a process through the process execution information generated by the corresponding process management unit, generating a unified command for controlling the physical security equipment and the IT security equipment, A processing section,
Searching for the security equipment that is required to be interlocked with the corresponding policy and performing a spatial operation based on a spatial phase relationship between the security device and the infringement occurrence location to calculate parameters necessary for controlling the searched security equipment, A spatial operation processing unit for providing the spatial operation processing unit to the processing unit,
An equipment control unit based on a control proxy agent for transferring multiple connection and control commands of the physical security equipment and the IT security equipment to the corresponding security equipment;
A database unit for storing the security violation information, the response policy, and a script of the process;
Based on a security violation countermeasure process.
The method according to claim 1,
Wherein the corresponding process management unit comprises an intrusion detection information processing unit for extracting security intrusion information from the security intrusion detection information DB based on the intrusion incident information detected and transmitted in the integrated security system,
A policy determination unit for extracting and determining a response policy from the response policy DB based on the security violation information provided from the intrusion detection information processing unit;
A corresponding information generating unit for generating process execution information according to a corresponding policy provided from the policy determining unit,
Based on a security violation countermeasure process.
3. The method of claim 2,
Wherein the policy decision unit and the corresponding information generation unit determine the corresponding policy and generate the corresponding process execution information,
Physical / IT security device control device based on security infringement response process.
The method of claim 3,
The corresponding process execution information transmitted from the corresponding process management unit to the corresponding process processing unit is transmitted as an XML-formatted message
Physical / IT security device control device based on security infringement response process.
The method according to claim 1,
The process-
A corresponding information receiving unit for receiving process execution information from the corresponding process management unit;
An XML parser for parsing the process execution information provided from the corresponding information receiver and loading the XML definition script of the process from the process script repository and parsing the loaded XML definition script,
An execution command tree building unit configuring an execution command tree for controlling the security equipment according to the XML definition script parsing information provided from the XML parsing unit,
An instruction tree processing unit for processing an execution instruction tree provided from the execution instruction tree building unit;
A control command generator for receiving security equipment control information including a location, a path, and a control parameter from a corresponding operation equipment in the invasion generating space according to an instruction tree provided from the instruction tree processing unit;
A command transmission router unit for transmitting an execution command provided from the command tree processing unit and control information provided from the control command generation unit to the equipment control unit,
Based on a security violation countermeasure process.
The method according to claim 1,
Wherein the spatial processing unit comprises: a query processing unit for receiving a corresponding device search and a corresponding location / path request query from the corresponding process processing unit;
A phase relation generation unit for searching for a corresponding device based on the infringement space from the security device DB and the map DB according to the corresponding device search and the corresponding location / route request query, and generating and configuring a spatial phase relationship therebetween;
A position / path computing unit for computing a corresponding position / path based on the phase relation generated by the phase relation generating unit;
A control parameter calculation unit for calculating a control parameter for the commercial security equipment using the installation information of the commercial security equipment based on the phase relationship generated by the phase relation generation unit;
A device / control information transmitting unit for transmitting the corresponding position / path provided from the position / path calculating unit and the control parameter provided from the control parameter calculating unit to the corresponding process processing unit,
Based on a security violation countermeasure process.
The method according to claim 1,
The apparatus control unit includes:
An instruction proxy unit for generating a command proxy in accordance with the unified command provided from the corresponding process processing unit;
A command queue management unit for performing input / output of a command according to the command proxy generated by the command proxy unit;
An adapter request unit for configuring a security device adapter for each type of commercial security equipment,
When the security device adapter generates an equipment control proxy configured by a control performing module, the control performing unit executes a control command for multiple commercial security equipment
Based on a security violation countermeasure process.
Determining a response policy according to the security violation information detected by the integrated security system and generating process execution information to be performed;
Generating a Unified Command for controlling the physical security equipment and the IT security equipment that are required to be interlocked with the corresponding policy, performing a process through the created process execution information,
Performing a spatial operation based on a spatial phase relationship between a security device and an infringement occurrence location in order to search for the security device that is requested to be interlocked with the corresponding policy and to calculate parameters necessary for controlling the searched security device;
Transmitting multiple connection and control commands of the physical security device and the IT security device to the corresponding security device;
Storing the security violation information, the response policy, and a script of the process
A security / IT security device control method based on a security violation countermeasure process.
9. The method of claim 8,
The step of generating the information of the process includes the steps of extracting security violation information from the security violation detection information DB based on the intrusion accident information detected and transmitted in the integrated security system,
Extracting and determining a response policy from the response policy DB based on the security violation information,
Generating process execution information according to the provided response policy
A security / IT security device control method based on a security violation countermeasure process.
9. The method of claim 8,
Wherein the step of generating the instruction comprises:
Receiving the process execution information;
Analyzing the process execution information, loading an XML definition script of the process from the process script repository, and parsing the loaded XML definition script,
Constructing an execution command tree for controlling the security apparatus according to the provided XML definition script parsing information;
Receiving security equipment control information including a location, a path, and a control parameter corresponding equipment in an infringement space according to the provided execution command tree;
Providing the provided execution command and the control information for control of the security equipment
A security / IT security device control method based on a security violation countermeasure process.
9. The method of claim 8,
Wherein performing the spatial operation comprises receiving a corresponding equipment search and a corresponding location / path request query,
Searching for a corresponding device based on the infringement space from the security device DB and the map DB according to the corresponding device search and the corresponding location / route request query, creating and configuring a spatial topological relationship therebetween,
Calculating a corresponding position / path based on the generated phase relationship;
Calculating a control parameter for the commercial security equipment using installation information of the commercial security equipment on the basis of the generated phase relationship;
And transferring the corresponding location / path and the control parameter to generate the unified command (Unified Command)
A security / IT security device control method based on a security violation countermeasure process.
9. The method of claim 8,
The step of transmitting the multiple connection and control commands to the corresponding security equipment comprises: generating a command proxy according to the unified command;
Performing input / output of a command according to the generated command proxy;
Configuring a security device adapter for each type of commercial security device;
Performing a control command for a plurality of the commercial security devices when the security device adapter generates an equipment control proxy configured as a control performing module
A security / IT security device control method based on a security violation countermeasure process.

Images