KR102611045B1 - Various trust factor based access control system - Google Patents

Abstract

The present invention includes a first trust evaluation index management unit 110 that collects terminal-related information, a second trust evaluation index management unit 120 that collects user-related information, and a third trust evaluation index that collects trust and security-related information. An indicator management unit 130, a multiple reliability evaluation unit 140 that calculates an integrated trust score, an access control engine unit 150 that determines whether access to the non-face-to-face service portal server 200 is permitted, and an access request is transmitted. Including the trust-based authentication control unit 160, which receives and transmits whether access is permitted, determines the organic reliability of various information such as user security level, terminal trust score, network access method, and security level of non-face-to-face service/system to be accessed. A multi-reliability-based access control system that can determine authorization is disclosed.

Description

Multiple reliability-based access control system {VARIOUS TRUST FACTOR BASED ACCESS CONTROL SYSTEM}

The present invention is a multiple reliability-based approach that can determine whether or not to authorize by determining the organic reliability of various information such as user security level, terminal trust score, network connection method, and security level of the non-face-to-face service/system to be accessed. It's about control systems.

As is well known, cyber attacks are carried out systematically and intelligently, and in particular, APT (Advanced Persistent Threat) is a method in which hacking organizations secretly and continuously carry out intelligent attacks against specific attack targets for economic purposes. (Continuous threat) attacks are rapidly increasing and are becoming a major social problem.

In particular, APT attacks occur when a hacker or hacking organization infiltrates malicious code into the target organization in order to illegally extort important information from the organization, and then infects the host of the person with access to important information with malicious code through continuous malicious code updates. , It is an attack method that leaks important information.

In addition, computers used by an unspecified number of people, such as computers in public places and PC rooms, can be easily exposed to viruses, worms, and adware at any time, and computers connected to communication networks can be targets of hackers.

Meanwhile, there is a trend to improve the security level of servers through various security H/W and S/W, but security at the level of each individual PC has many vulnerabilities compared to servers.

These vulnerabilities have the potential to be a potential threat to overall security, but in order to improve this, security administrators are suggesting various ways to users to remove vulnerabilities. It was not easy, and many potential security problems were exposed.

In addition, control is carried out through fragmented and determined authority and policy settings, judgment is made based on individual settings for information to determine whether access is permitted, and the problem is that it is not easy to determine the reliability of the information entered for access. There is.

Korean Patent Publication No. 10-1744631 (Network security system and security method, 2017.06.20) Korean Patent Publication No. 10-1359378 (Security integrity test device and method, 2014.02.07)

The technical task to be achieved by the idea of the present invention is to determine the organic reliability of various information such as user security level, terminal trust score, network connection method, and security level of the non-face-to-face service/system to be accessed, in addition to the traditional access control system. to determine whether to grant authorization, and to store the vulnerability information of the terminal in a blockchain-based storage to secure the integrity of the latest information status and history, thereby preventing damage to the integrity of the collected and entered information by illegal manipulation. The goal is to provide a multi-reliability-based access control system.

In order to achieve the above-described object, an embodiment of the present invention includes a first trust evaluation index management unit that collects a terminal inventory of terminal identifier, terminal user mapping information, and terminal additional information; a second trust evaluation index management unit that collects user information including user ID, authentication information, user job type information, and user additional information; A third trust evaluation index management unit that collects user trust level and access action information, security level by access action, access network-related security level, and security policy of trust score inference weight setting; By evaluating the terminal inventory, the user information, and the security policy from the first trust evaluation index management unit or the third trust evaluation indicator management unit, the terminal trust score, user trust level, business security level, and access network security level are determined. a multiple reliability evaluation unit that evaluates and calculates an integrated trust score; an access control engine unit that determines whether to allow access to non-face-to-face services and non-face-to-face systems through a non-face-to-face service portal server based on the access network environment, according to the integrated trust score; and a trust-based authentication control unit that receives an access request from a user terminal to the non-face-to-face service portal server and transmits whether the access is permitted to the non-face-to-face service portal server. do.

Here, when the trust-based authentication control unit receives an access request based on a connection network environment by the user ID and the terminal identifier from the non-face-to-face service portal server, the non-face-to-face service portal server receives the integrated trust score from the trust-based authentication control unit. And you can receive notification of whether the access is permitted.

In addition, a vulnerability check agent is installed on the user terminal, and the vulnerability check agent periodically performs a vulnerability check of the user terminal, uploads the check results to a blockchain-based terminal vulnerability history management system, and records the terminal vulnerability history. The management system can transmit the latest terminal security status information according to the updated terminal vulnerability inspection history to the terminal inventory.

Additionally, the vulnerability check agent may transmit additional information to the non-face-to-face service portal server when the user terminal accesses the non-face-to-face service portal server.

In addition, the multi-trust evaluation unit determines the integrated trust score based on the reliability of the access action request out of 100 based on the terminal inventory, the user information, the access connection information of the security policy, and the latest terminal security status information. can be calculated.

In addition, the multiple trust evaluation unit retrieves a user trust score based on a 100-point scale corresponding to the user ID from the user information DB set by differentially assigning it to each user type, and assigns it to each check item of the terminal vulnerability check history of the user terminal. Get the received terminal trust score out of 100, take the network trust score out of 100 according to the network status being accessed, and make the total of the user trust score, the terminal trust score, and the network trust score equal to 1.0. The integrated trust score can be calculated by assigning weights between 0.1 and 1.0 and adding them up.

Additionally, the access control engine unit may compare the integrated trust score with a minimum required trust score for the security level of the access action to determine whether the access is permitted.

Additionally, the non-face-to-face service and the non-face-to-face system may be servers that provide video services, interview services, conference services, or work-from-home services.

Additionally, the trust-based authentication control unit may receive access and action requests of the user terminal to non-face-to-face services and non-face-to-face systems through the non-face-to-face service portal server through API.

In addition, the vulnerability check items include whether the user account password is set, the complexity of the password, whether a vaccine is installed, and whether the real-time vaccine detection function is activated, and the network status can be the connected company's internal network, general home network, and external public Wi-Fi network. there is.

According to the present invention, it is possible to overcome the limitations of access control methods based on statically preset policies and to enable access control that can respond in real time to security situations such as dynamically changing users, terminals, and access environments.

In addition, the security status of the terminal to be accessed is stored in an tamper-proof storage such as a blockchain, and real-time linking has the effect of fundamentally preventing access attempts through malicious modification of access request data.

Furthermore, additional trust judgment elements according to the development of security technology can be easily incorporated, and in the same way, there is an effect of providing more detailed trust judgment and authorization for access requests.

Figure 1 shows the configuration of a multi-reliability-based access control system according to an embodiment of the present invention.
FIG. 2 illustrates a multiple reliability-based access control method implemented by the multiple reliability-based access control system of FIG. 1.
FIG. 3 illustrates security levels according to access actions of the multiple trust-based access control system of FIG. 1.
FIG. 4 illustrates trust level settings for each user type in the multiple trust-based access control system of FIG. 1.
Figure 5 illustrates a terminal-user mapping screen of the multi-trust based access control system of Figure 1.
Figure 6 illustrates the security policy setting screen of the multi-trust based access control system of Figure 1.
FIG. 7 illustrates a screen for monitoring the vulnerability check history of a terminal of the multiple reliability-based access control system of FIG. 1.

Hereinafter, embodiments of the present invention having the above-described features will be described in more detail with reference to the attached drawings.

The multiple reliability-based access control system according to an embodiment of the present invention includes a first trust evaluation index management unit 110 that collects terminal-related information, a second trust evaluation index management unit 120 that collects user-related information, and trust and a third trust evaluation index management unit 130 that collects security-related information, a multi-trust evaluation unit 140 that calculates an integrated trust score, and a non-face-to-face service and non-face-to-face system through a non-face-to-face service portal server 200. Including an access control engine unit 150 that determines whether access is permitted, and a trust-based authentication control unit 160 that receives an access request and communicates whether access is permitted, user security level, terminal trust score, and network access method. The point is to determine whether or not to authorize by judging the organic reliability of various information on the security level of the non-face-to-face service/system to be accessed.

Hereinafter, with reference to FIGS. 1 and 2, the multi-reliability-based access control system of the above-described configuration will be described in detail as follows.

First, the first trust evaluation index management unit 110 collects and manages terminal-related information. Specifically, it collects and manages terminal inventory of terminal identifier (fingerprint), terminal user mapping information, and terminal additional information.

Here, terminal user mapping information refers to user information allocated and mapped to each terminal, as illustrated in FIG. 5.

Next, the second trust evaluation index management unit 120 collects and manages user-related information. Specifically, it collects and manages user information including user ID, authentication information, user job type information, and user additional information.

Next, the third trust evaluation indicator management unit 130 collects and manages trust and security-related information, specifically, user (by type) trust level (see FIG. 4), access action (task) information, and access action (task). Collects and manages security policies for star security levels, access network-related security levels, and trust score inference weight settings.

Here, as illustrated in Figure 3, the access actions include Paint printing, Paint saving, Paint writing, recording, document upload, media upload, service opening, service participation, sending a message, chatting, video service access, conference service access, and meeting. It refers to preset user actions such as uploading a file in the service, turning on the microphone, or opening a conference room. The corresponding actions are preset and registered, and individual action codes and security levels can be set for each.

In addition, Figure 6 illustrates a security policy setting screen, setting the minimum required trust score for the set action level, setting the trust score for the user trust level, and setting the weight for the user terminal 300 and the user trust score. This is an example.

Next, the multiple trust evaluation unit 140 collects and evaluates multiple trust evaluation indicators of the terminal inventory, user information, and security policy from the first trust evaluation indicator management unit 110 to the third trust evaluation indicator management unit 130. Therefore, an integrated trust score is calculated by evaluating the terminal trust score, user trust level, business security level, and access network security level.

That is, the multi-trust evaluation unit 140 determines the status of the user terminal 300 based on the terminal inventory, access linkage information of user information and security policy, and the latest terminal security status information of the terminal vulnerability history management system 400. An integrated trust score can be calculated based on the reliability of requests for access actions to non-face-to-face services and non-face-to-face systems through the non-face-to-face service portal server 200 on a 100-point scale.

Here, when the terminal vulnerability history management system 400 receives a request for terminal vulnerabilities for the user terminal 300 of the terminal identifier for which access has been requested, the terminal vulnerability history management system 400 may transmit the latest terminal vulnerability check details to the trust-based authentication control unit 160.

Specifically, the multi-trust evaluation unit 140 retrieves the user trust score based on a 100-point scale corresponding to the user ID from the user information DB set differentially by user type such as administrator, general member, and guest, and calculates the terminal vulnerability history. Retrieves the terminal trust score based on 100 points given for each inspection item of the terminal vulnerability inspection details of the user terminal 300 in the management system 400, and retrieves the network trust score based on 100 points based on the network status being accessed. , the user trust score, terminal trust score, and network trust score can each be weighted between 0.1 and 1.0 so that the total is 1.0, and then added together to calculate the final integrated trust score.

For example, inspection items may include whether or not a password is set for the user account, the complexity of the password, whether a vaccine is installed, and whether the real-time anti-virus detection function is activated, and the network status may include the connected company's internal network, general home network, and coffee shop. It may be an external public Wi-Fi network such as .

Meanwhile, an active vulnerability check agent is installed on the user terminal 300, and the vulnerability check agent periodically performs a vulnerability check of the user terminal 300 and sends the check results to the blockchain-based terminal vulnerability history management system 400. Upload, and the terminal vulnerability history management system 400 transmits the latest terminal security status information according to the latest updated terminal vulnerability inspection history to the terminal inventory of the first trust evaluation index management unit 110, thereby ensuring the integrity of the latest information status and history. It is possible to fundamentally prevent damage to the integrity of input information by illegal manipulation.

In addition, the vulnerability inspection agent performs vulnerability inspections such as security status inspection, virus and malicious code scanning, and uploads and stores the inspection results to the terminal vulnerability history management system 400 and the non-face-to-face service portal of the user terminal 300. When accessing a non-face-to-face service or a non-face-to-face system through the server 200, additional information such as terminal ID and connection network environment can be transmitted to the non-face-to-face service portal server 200.

In addition, the terminal security status information is user terminal security environment information of various items such as whether there is a malicious code infection, security status for account management, security update status, security management status such as whether a vaccine is installed, and system status to prevent hacking.

Additionally, the terminal vulnerability history management system 400 can monitor the vulnerability check history and terminal trust score for each user terminal 300, as illustrated in FIG. 7 .

Next, the access control engine unit 150 determines whether to allow (authorize) access to the non-face-to-face service and non-face-to-face system through the non-face-to-face service portal server 200 based on the access network environment, according to the integrated trust score calculated previously. Determine.

That is, the access control engine unit 150 compares the previously calculated integrated trust score with the minimum required trust score for the security level of the access action to the non-face-to-face service and non-face-to-face system through the non-face-to-face service portal server 200. Thus, it is possible to determine whether access to the non-face-to-face service and non-face-to-face system through the non-face-to-face service portal server 200 of the user terminal 300 is permitted.

Here, the access network environment may refer to information that can infer the security status of networks such as an in-house work network, a home network, and a Wi-Fi network in a public place, and non-face-to-face services and non-face-to-face systems are video images for users. It may be a server that provides services, interview services, conference services, work-from-home services, etc.

Next, the trust-based authentication control unit 160 receives the access and action request of the user terminal 300 to the non-face-to-face service and non-face-to-face system through the non-face-to-face service portal server 200 through RESTful API, and receives the previously determined Depending on the result, whether to allow access to the non-face-to-face service and the non-face-to-face system through the non-face-to-face service portal server 200 is communicated.

Here, when the trust-based authentication control unit 160 receives an access request based on the connection network environment by user ID and terminal identifier from the non-face-to-face service portal server 200, the non-face-to-face service portal server 200 receives the trust-based authentication control unit ( 160), you can receive an integrated trust score and whether access to non-face-to-face services and non-face-to-face systems is permitted.

As an example, in the integrated trust score calculation and access permission process mentioned above, the user trust score can be set according to the user type, such as 90 points if the user is an administrator, 70 points if the user is a general member, and 50 points if the user is a guest. The terminal trust score is given for each check item for a total score of 100. If the account password is set, 5 points, if the password is complex, 3 points, if an anti-virus software is installed, 10 points, and if the real-time anti-virus detection function is turned on, the terminal trust score is 100 points. You can assign 10 points, etc., and the network trust score is given out of 100 for the current network status, with 100 points when connected from the company's internal network, 70 points when connected to a general home network, and 70 points when connected to an external network such as a coffee shop. If it is a public Wi-Fi network, 30 points can be given, the user trust score weight can be set to 0.3, the terminal trust score weight can be set to 0.5, and the network trust score weight can be set to 0.2. The final calculated integrated trust score and the access requested action You can determine whether to allow access by comparing the minimum required trust score for the security level. The integrated trust score is 75, and the minimum required trust score for the file upload security level in the request action is set to 90. If so, access can be determined as not permitted.

Therefore, by configuring the multiple reliability-based access control system as described above, in addition to the traditional access control system, various information such as user security level, terminal trust score, network access method, and security level of the non-face-to-face service/system to be accessed are collected. The organic trustworthiness of the information is judged to determine whether to authorize it, and the vulnerability information of the terminal is stored in a blockchain-based storage to ensure the integrity of the latest information status and history, and the integrity of the collected and input information is damaged by illegal manipulation. can be prevented.

The embodiments described in this specification and the configurations shown in the drawings are only one of the most preferred embodiments of the present invention and do not represent the entire technical idea of the present invention, so various equivalents may be substituted for them at the time of filing the present application. It should be understood that variations and variations may exist.

================================================================================= =============

[Ministry Name] Ministry of Science and ICT

[Responsible agency] Korea Internet & Security Agency

[Project name] Non-face-to-face service security pilot project applying new technology

[Task name] Provide non-face-to-face work environment security service using AI-based active vulnerability inspection technology and blockchain

================================================================================= =============

110: 1st trust evaluation index management department
120: 2nd trust evaluation index management department
130: 3rd Trust Evaluation Index Management Department
140: Multiple reliability evaluation unit
150: Access control engine unit
160: Trust-based authentication control unit
200: Non-face-to-face service portal server
300: user terminal
400: Terminal vulnerability history management system

Claims (10)

a first trust evaluation index management unit that collects a terminal inventory of terminal identifier, terminal user mapping information, and terminal additional information;
a second trust evaluation index management unit that collects user information including user ID, authentication information, user job type information, and user additional information;
A third trust evaluation index management unit that collects user trust level and access action information, security level by access action, access network-related security level, and security policy of trust score inference weight setting;
By evaluating the terminal inventory, the user information, and the security policy from the first trust evaluation index management unit or the third trust evaluation indicator management unit, the terminal trust score, user trust level, business security level, and access network security level are determined. a multiple reliability evaluation unit that evaluates and calculates an integrated trust score;
an access control engine unit that determines whether to allow access to non-face-to-face services and non-face-to-face systems through a non-face-to-face service portal server based on the access network environment, according to the integrated trust score; and
It includes a trust-based authentication control unit that receives an access request from a user terminal to the non-face-to-face service portal server and transmits whether the access is permitted to the non-face-to-face service portal server,
A vulnerability check agent is installed in the user terminal, the vulnerability check agent periodically performs a vulnerability check of the user terminal, uploads the check results to a blockchain-based terminal vulnerability history management system, and the terminal vulnerability history management system. Delivers the latest terminal security status information according to the updated terminal vulnerability inspection history to the terminal inventory,
The multi-trust evaluation unit calculates the integrated trust score based on the reliability of the access action request out of 100 based on the terminal inventory, the user information, access connection information of the security policy, and the latest terminal security status information. do,
The multiple trust evaluation unit retrieves a user trust score based on a 100-point scale corresponding to the user ID from a user information DB set differentially for each user type, and receives 100 points for each check item of the terminal vulnerability check history of the user terminal. Get a terminal trust score based on a perfect score, get a network trust score based on a perfect score of 100 according to the network state being accessed, and add 0.1 to 0.1 to the user trust score, the terminal trust score, and the network trust score so that the total is 1.0. By assigning weights between 1.0 and adding them up, the integrated trust score is calculated,
The above access actions include printing in Paint, saving in Paint, writing in Paint, recording, uploading documents, uploading media, opening a service, participating in a service, sending a message, chatting, accessing a video service, accessing a conference service, uploading a file in the conference service, turning on the microphone, It is a preset user action for opening a conference room, the action is preset and registered, and an individual action code and security level are set for each,
The above check items include whether the user account password is set, the complexity of the password, whether a vaccine is installed, and whether the real-time vaccine detection function is activated.
The terminal security status information is user terminal security environment information such as whether there is a malicious code infection, security status for account management, security update status, security management status whether or not a vaccine is installed, and system status to prevent hacking.
Multiple reliability-based access control system.
According to paragraph 1,
When the trust-based authentication control unit receives an access request based on the access network environment based on the user ID and the terminal identifier from the non-face-to-face service portal server,
The non-face-to-face service portal server is a multi-trust based access control system, characterized in that the integrated trust score and whether the access is permitted are transmitted from the trust-based authentication control unit.
delete According to paragraph 1,
The vulnerability check agent is characterized in that it transmits additional information to the non-face-to-face service portal server when the user terminal accesses the non-face-to-face service portal server.
Multiple reliability-based access control system.
delete delete According to paragraph 1,
The access control engine unit,
A multi-trust based access control system, characterized in that whether the access is permitted is determined by comparing the integrated trust score with the minimum required trust score for the security level of the access action.
According to paragraph 1,
A multi-reliability-based access control system, wherein the non-face-to-face service and the non-face-to-face system are servers that provide video services, interview services, conference services, or work-from-home services.
According to paragraph 1,
The trust-based authentication control unit is a multi-trust based access control system, characterized in that the user terminal's access and action requests for non-face-to-face services and non-face-to-face systems through the non-face-to-face service portal server are transmitted through API.
According to paragraph 1,
The items of the vulnerability check include whether the user account password is set, the complexity of the password, whether a vaccine is installed, and whether the real-time vaccine detection function is activated.
The network status is a multi-reliability-based access control system, characterized in that the connected company's internal network, a general home network, and an external public Wi-Fi network.