KR20020005401A - Total system for preventing information outflow from inside - Google Patents

Abstract

PURPOSE: A total system for preventing leakage of internal information is provided so that important information cannot be leaked from an internal system by monitoring offline information leakage by an output device and a movable storing device and online information leakage by a communication program. CONSTITUTION: When a program(1300) stores a file in a movable storing device(1200) such as a floppy disk, a security management client(1100) of a user computer(1000) automatically encrypts the file through a file security control unit(1110) according to a previously-set encryption key, and stores the encrypted file in the movable storing device(1200) so as to prevent offline information leakage through the movable storing device(1200). Thereafter, the corresponding log data such as a file name, user and time information and the encrypted key information are transmitted to a security management server(2000), and stored in an entire security group management database(2100) and a file leakage log database(2200). When the security management client(1100) is installed in the user computer(1000), the encrypted key is generated and stored in a security group management database(1120) of the security management client(1100). The security group management database(1120) stores and manages encrypted keys of the user computers(1000) in the same security group.

Description

Integrated system for preventing information outflow from inside

The present invention relates to an integrated internal information leakage prevention system, and more particularly, to prevent and monitor the leakage of offline information through the output device and the removable storage device and the leakage of online information by the communication program at the source, thereby important information from the internal system of the organization. The present invention relates to an integrated internal information leakage prevention system for preventing leakage of information.

Today's widespread computer dissemination has led to the emergence of an information society that conventionally processes document data into digital data.

However, such information society does not always have a net function, and recently, a dysfunctional accident has occurred. One of them is the information leakage problem which leaks important information from the organization and uses it maliciously.

In general, information leakage incidents are more often caused by insiders than by systems attacked from outside the organization.

Looking at the possible information leakage by the insider with reference to Figure 1 as follows.

First, information leakage and offline communication through output devices such as printers and monitors connected to computer systems in the organization, and removable storage devices such as diskettes, hard disks, CD-Rs, ZIP drives, and CD-RWs. If you leak information by connecting to the Internet or a telephone network (PSTN) via, for example, uploading files to bulletin boards or archives, leaking information via E-mail and Web-mail, leaking files via ftp, Internet hard disk services (Webhard) Information leaked through), information leaked through chat programs, etc.).

The existing methods and their problems to cope with such information leakage are as follows.

o Countermeasures against information leakage through floppy disk

Existing plan 1: To prevent information leakage through floppy disk, remove the floppy disk drive from all PCs of general users.

Existing plan 2: If the floppy disk is leaked out of the institution, the floppy disk cannot be read.

Problem: In case of existing solution 1, there is a problem that a normal user can not use floppy disk. In case of existing solution 2, it is necessary to distinguish between floppy disk which is used in the organization and floppy disk which is generally used. There is a problem that it is impossible to know whether the floppy disk is used internally by the organization, an unformatted floppy disk, or a file that is physically damaged and cannot be read. In addition, there is a problem in that it is not possible to grasp the attempt to leak information through the floppy disk because it does not generate log information about the leakage of information through the floppy disk.

o Countermeasures against information leakage through hard disk

Workaround: Encrypt the master boot record to prevent other users from booting the system.

Problem: If the owner of a hard disk leaks information, it cannot be prevented.

o Countermeasures against information leakage through removable storage media such as ZIP-Disk and CD-R

Existing Measures: Media such as ZIP-Disk and CD-R are secondary storage devices that have been widely distributed in recent years, but their utility is very high.However, in order to prevent internal information leakage, ZIPs can be stored on all PCs of general users. -Communication interface (USB, serial port, parallel port, wireless port, etc.) to connect MP3 Player and PC to remove information such as Disk Drive and CD-R Drive and to prevent information leakage through "MP3 Player" digital audio player. ).

Problem: A normal user cannot use the removable storage media.

o Information leak through printer printout or monitor printout

Existing Measures: The present applicant can prevent the information currently being output through the management server through the application number 2000-30133, "Data leakage monitoring and prevention system through output device," which is filed with the Korean Patent Office. .

o Countermeasures against information leakage through the Internet or the telephone network (PSTN)

-Information leakage through e-mail

. Attach important file

. Copy and paste important file contents into the text of the message

. Browse important files and enter their contents in the mail text

Existing Measure: Examine the contents of mail and attachments to decide whether to block / send.

Problem: This method also cannot search the contents if a little modification is made, such as encrypting and compressing the attached file.

-Upload data via HTTP (including web mail)

Existing Method: Since information is leaked through the Web Site through the HTTP protocol internal command, it is possible to prohibit the post itself to the external site through individual control over the command available in HTTP through the firewall. Can be.

Problem: Since file transfer is blocked in all cases, there is a problem of reducing work efficiency because it is impossible to perform file transfer necessary for normal work.

-Put data via FTP

Existing solution: The information leakage is carried out through FTP through the file transfer command called put. It is possible to prohibit the put itself to external site because individual control of the commands available in FTP is possible through the firewall. .

Problem: Since file transfer is blocked in all cases, there is a problem of reducing work efficiency because it is impossible to perform file transfer necessary for normal work.

-Upload data through TELNET, RLOGIN (Z-modem, KERMIT, etc.)

Existing plan: Among the information leaking methods through TELNET, the first method to consider is the data uploading method. The protocols used are Z-modem and KERMIT. Through firewall, it is possible to restrict Download / Upload using Z-modem and KERMIT protocol in TELNET.

Problem: The only way to leak information through TELNET is to upload it. Instead of simply sending the information in plain text, it is not detected by keyword search if it is transmitted through encoding such as encryption. There are obvious limitations to spill prevention.

-Modem communication through PSTN

Existing solution: Information leakage through modem is more difficult to control. The solution to this problem is to remove modem from all PCs. In fact, with the exception of modem removal, it would be very difficult to find a way to prevent information leakage through the modem.

-Data leakage through internet storage service (WebHard)

Data leak through network file system

In addition to the above-mentioned protocols, there are many communication protocols available on the Internet, and using them increases the possibility of internal information leakage. In fact, the information leakage prevention measures mentioned above are countermeasures for the most commonly used communication protocols, and there are limitations in the countermeasures. After all, according to the existing plan, "the best way to prevent the leakage of internal information through the network is the best way not to use the network itself." However, this is a method of ignoring the benefits of the Internet and modem communication, there is a problem to reduce the work efficiency.

Accordingly, the present invention has been made to solve such a problem, and prevents and monitors the leakage of offline information through an output device and a portable storage device and the leakage of online information by a communication program, thereby leaking important information from an internal system of the organization. The purpose is to prevent that.

1 shows the types of information leakage possible by insiders,

2 illustrates an integrated security service process for multiple user computers through an information leakage prevention and monitoring system according to the present invention.

Figure 3 illustrates an integrated internal information leakage prevention system according to the present invention,

4A illustrates an example of an offline export reason input window for inputting a reason for export when a file is exported to a movable storage device through a file security control unit according to the present invention;

Figure 4b illustrates that the contents entered in the offline export reason input window is stored in the offline file export log database (DB) of the security management server,

5A shows the format (SDFA) of an online export file exported by a communication program according to the present invention,

Figure 5b illustrates an execution screen when executing the online export file by the receiver,

6A illustrates an online export reason input window for inputting a reason for export when a file is exported to a network through the communication security control unit according to the present invention.

Figure 6b illustrates that the contents entered in the online export reason input window is stored in the online file export log database (DB) of the security management server,

7 illustrates a file transfer security policy according to a security level of a file transfer destination for each communication program type according to the present invention.

8A illustrates a configuration of a security group management database (DB) of user computers A, B, and C.

8B illustrates a configuration of a security group management database (DB) of user computers D and E.

8c illustrates a concept of access control based on removable storage device sharing and network sharing in the same security group according to the present invention;

9 shows a boot sequence of a typical computer system,

10A illustrates a system access process through master boot record (MBR) encryption according to the present invention.

Figure 10b shows the MBR information DB of the security management server for storing and managing the MBR password for master boot record password processing,

11 shows an example of a control panel of the security management server according to the present invention.

According to the present invention for achieving the above object, a program for storing a file in a storage device and when storing the file in the storage device to encrypt the content of the file to store in the storage device and to store the log information for the file storage A security management client including a file security control unit; Disclosed is an integrated internal information leakage prevention system including a security management server for communicating with the file security control unit and receiving the log information and a decryption key for the encrypted file to decrypt the encrypted file.

Advantageously, said storage device is at least one of a remote storage device or a removable storage device connected to a network.

Preferably, the security management client, a communication program for transmitting a file and a communication security control unit for encrypting the contents of the file when transmitting the file to the network to transmit to the transmission destination of the network and to store the log information for the file transmission Further, the security management server, in communication with the communication security control unit receives a decryption key for the encrypted file, and receives the log information and the transfer destination in accordance with the file transfer security policy for the transfer destination And an automatic key transmitting unit for transmitting the decryption key to the transmission destination.

Preferably, when the file transfer event occurs through the communication program, the communication security controller receives the file contents and the reason for transmission from the user.

Preferably, the file transfer security policy defines a security level for the transmission destination, and automatically transmits only the decryption key to the transmission destination if the trust level is reliable according to the security level, and cooperates for business cooperation. In case of a grade, the decryption key is transmitted to the transmission destination, and at the same time, the log information is stored. In case of an untrusted untrusted grade, only the log information is stored and managed.

Advantageously, said encrypted file to be transmitted consists of a file format combined with code to decrypt said cryptographic file.

Preferably, the communication security control unit, based on the file transfer security policy when transmitting the file to the network controls the presence or absence of the file transfer according to the transfer destination.

Preferably, the file transfer security policy transmits the file to the transfer destination if the transfer destination is the trust level, and transmits the file to the transfer destination and simultaneously the log information when the transfer destination is the cooperative grade. If the transfer destination is the untrusted class, the file transfer is blocked and only log information is stored and managed.

Preferably, the communication security control unit, when the communication request from the network to the security management client, if the communication source address (source address) does not exist in the predetermined security group, and blocks the communication, from the security management client to the network If the communication destination address does not exist in the predetermined security group, the communication is blocked when the communication request is made.

Preferably, the predetermined security group is set as an IP address group by the security management server.

Preferably, the communication security control unit clears the clipboard of the computer executing the communication program and deactivates another program when the communication program is active.

Preferably, the communication security control unit, if the communication program is active (stored) and stores the keyboard input information of the computer that executes the communication program and transmits to the security management server for storage management.

Preferably, the security management client further includes a print control unit for generating print data and performing a print job and intercepting the print data and transmitting the print data to the security management server, wherein the security control server includes the print control unit. The print data is received and output while communicating with the printhead.

Preferably, the security management client further comprises a hardware control unit for transmitting the content output to the monitor in response to the request of the security management server to the security management server.

Preferably, the hardware control unit enables / disables an input device function of the security management client according to a request of the security management server.

Preferably, the file security control unit, the program and hardware information installed in the security management client delivers to the security management server.

Preferably, the file security control unit blocks the opening of the installed program by blocking the opening of the installed program at the request of the security management server.

Preferably, the security management server, by managing the list of available programs in the security management client to block the start of the program not included in the available program list of the installed program.

Preferably, the master boot record (MBR) of the computer storage device is encrypted to control access of the computer on which the security management client is installed, and the encryption key value is configured with a unique hardware number of the computer hardware.

Preferably, the hardware number is stored and managed in the security management server.

Preferably, the file security control unit decrypts an encrypted file stored in the storage device through the decryption key, stores the encrypted file in the storage device, receives an export reason, and transmits the reason for export to the security management server.

Preferably, the file security control unit decrypts an encrypted file stored in the storage device through the decryption key and transmits the encrypted file to the program in response to a read request by the security management client program.

Preferably, the security management server, by sharing the decryption key value with each file security control unit of the security management clients in the predetermined security group to decrypt the file stored in the storage group encrypted in the security group Make it readable.

Preferably, the security management client is installed and operated in a plurality of user computers, characterized in that the authentication from the security management server to remove from the user computer.

Preferably, the file security controller, according to the request of the security management server controls the operation of the storage device.

Preferably, the file security control unit receives the reason for export when the file is stored in the storage device through the program and transmits it to the security management server.

Preferably, the security management client further comprises a temporary storage unit for storing the log information when the communication with the security management server is lost, and when the communication with the security management server is resumed the stored log information Send to management server.

Hereinafter, the objects, features, and advantages of the present invention described above will be described in more detail with reference to the preferred embodiments of the present invention shown in the accompanying drawings.

The terms to be described below are terms defined in consideration of functions in the present invention, and may vary according to the intention or custom of a person skilled in the art, and the definitions should be made based on the contents throughout the specification.

In particular, since the encryption system used for the export file encryption in the preferred embodiment of the present invention is a symmetric encryption system, the encryption key and the decryption key have the same value. Therefore, since the file encrypted with the encryption key can be decrypted with the decryption key (that is, the encryption key), the encryption key and the decryption key or the file encryption key and the file decryption key are used in combination.

Looking at the integrated internal information leakage prevention system according to the present invention with reference to the accompanying drawings.

First, the security management client 1100 of the user computer 1000 is a removable storage device

Removable storage device (eg, floppy disk, ZIP-Disk and flesh memory, MP3-player, small digital storage) in program 1300 to prevent off-line information leakage through 1200 Device) and automatically encrypts the file through the file security control unit 1110 with a preset encryption key and stores the file in the removable storage device 1200.

The log data (for example, file name, user, time information, etc.) and encryption key information for this are transmitted to the security management server 2000 and stored in the entire security group management database 2100 and the file outflow log database 2200. .

Preferably, the encryption key is generated when the security management client 1100 is installed in the user computer 1000, the security group management database of the security management client 1100

Stored in 1120, the security group management database 1120 stores and manages encryption keys of user computers in the same security group, and the entire security group management database 2100 of the security management server 2000 is in all security groups. Stores and manages encryption keys of user computers.

Looking at the automatic encryption of the file in more detail, when the file storage event occurs, retrieves the encryption key of the user computer 1000 from the security group management database 1120 and inputs it to the file security control unit 1110, the file security control unit 1110 receives the contents of a file to be stored currently, encrypts the information using an encryption key of the user computer 1000, and stores the encrypted content in the removable storage device 1200.

The file security control unit 1110 may control the operation of the removable storage device 1200 according to the request of the security management server 2000, and the removable storage device through the program 1300.

Security management server receives the reason for export from the user when storing the file at (1200)

(2000). For example, in case of exporting a file through a CD-Recorder, the security management server 2000 permits the use of the CD-R after receiving an export reason for using the CD-R.

On the other hand, the file security control unit 1110 is a decryption key (encryption) of the user computer 1000 from the security group management database 1120 in response to a read request by the program 1300 for the encrypted file stored in the removable storage device 1200 Key) and receives the decrypted cipher file and transmits it to the program 1300.

Through this, the program 1300 may work by reading a password file stored in the removable storage device 1200 and automatically encrypting and storing the encrypted file in the removable storage device 1200 after the operation.

The security management server 2000 may configure a security group under the control of the security manager. Since the encryption key of each user computer 1000 is shared within the same security group, the file encrypted and stored in the removable storage device in the group Can be read freely. Detailed description of such an embodiment will be described later with reference to FIG. 8.

According to a preferred embodiment of the present invention, in order for a user to legally export an encrypted file stored in the removable storage device 1200, the user manages the security group of the user computer 1000 by the file security control unit 1110. The decryption key (same as the encryption key) is received from the database 1120, and the decryption file is decrypted through the decryption key and stored in the removable storage device 1200. At this time, the user inputs the reason for export through the offline export reason input window as shown in FIG. 4A, and the input content is stored in the offline file export log database of the file export log database 2200 of the security management server 2000 as shown in FIG. 4B. .

As shown in Figure 4, the file name currently attempting to export is

"Research results.txt" and the reason for the export is "to share the research results ...."

In another preferred embodiment of the present invention, the security management server control unit 2300 is a decryption key of the system encrypting the encryption file stored in the entire security group management database 2100 encrypted file recorded in the removable storage device 1200 It can be input and decrypted.

In addition, the security manager can move the storage device through the log data for file leakage

Attempt to leak information through 1200 may be identified. Preferably, the same operation as described above also applies to a storage device (not shown) connected to a network instead of a removable storage device.

Meanwhile, in order to prevent information leakage through an output device such as the printer 1400, the print control unit 1130 of the user computer 1000 intercepts the print data generated by the application program 1500 through the print control unit 1130. After transmitting to the security management server 2000 and stored in the printer log database 2400, and outputs according to the security manager request through the control panel 2500.

On the other hand, in order to prevent the leakage of online information through the communication program 1600, the security management client 1100 of the user computer 1000 is connected to the network (e.g., a web browser, SMTP mail agent, etc.) through the communication program 1600 3000; for example, when transmitting to the Internet, PSTN, wireless network, etc.) by automatically encrypting the file by the communication security control unit 1140 on the network 3000 via a network device (1700; for example, modem, wired and wireless LAN card, etc.) It transmits to the destination, and transmits the log data (for example, destination, filename, user, time information, etc.) and encryption key information for this to the security management server (2000).

In more detail, the file is automatically encrypted and transmitted. When a file open event occurs from the hard disk 1800, the communication security control unit 1140 currently opens through a session encryption key generated from a session key generation unit (not shown). The content of the file to be encrypted is transmitted to the receiver through the network 3000. At this time, the communication security control unit 1140 may attach the decryption program code to the encrypted file as shown in FIG. 5A and transmit the decryption program code if the receiver receives only the decryption key (see FIG. 5B).

In a preferred embodiment, the communication program 1600 means a web mail program through a web browser.

On the other hand, since the encrypted file is transmitted as a file (formatted as shown in FIG. 5A) only through the decryption key received from the security management client 1100, the decryption key is not received from the security management server 2000. Hacker 4000 can not see the contents of the file can block information leakage.

When a file transfer event occurs through the communication program 1600, the communication security control unit 1140 receives a file content, a reason for transmission, and receiver information from the user through the online export reason input window of FIG. ) Is stored in the online file export log database of the file export log database 2200 (see FIG. 6B).

Preferably, the automatic key transmission unit 2310 of the security management server 2000 is a user computer

Decryption key for the encrypted file according to the file transfer security policy set in the file transfer security policy database (2600) by receiving log information and transmission destination and recipient information about the encrypted file transfer from the security management client (1100) of (1000) Will be sent automatically.

The security manager defines the security level for the destination and the receiver, so the file transfer security policy is established.

Fig. 7 shows the above-described file transfer security policy when using SMTP mail and when using Web-mail.

Preferably, the automatic key transmission unit 2310 automatically transmits only the decryption key to the transmission destination when the destination and the recipient are included in the reliable trust level according to the defined security level, and decrypts when it is a cooperation level for business cooperation. At the same time, the log information is stored in the file export log database 2200, and the log information is stored and managed in the file export log database 2200 in the case of an unreliable untrusted level (see FIG. 7).

According to another preferred embodiment, when the communication program 1600 is a mail agent program using the SMTP protocol, the communication security control unit 1140 of the security management client 1100 uses the communication program 1600 to transfer files to the network 3000. File transfer security policy controls file transfer based on the transfer destination.

The file transfer security policy transmits the file to the transfer destination if the transfer destination is a trust level, and transfers the file to the transfer destination when the transfer destination is the cooperative grade, and simultaneously stores log information in the security management server 2000. In the case of untrusted level, the file transfer is blocked and only the log information is stored and managed in the security management server 2000 (see FIG. 7).

When the communication security control unit 1140 requests a communication from the network 3000 to the security management client 1100, the communication source IP address has a security group management database.

If it does not exist in the security group preset in 1120, the communication is blocked, and a communication destination IP address when a communication request is made from the security management client 1100 to the network 3000.

If the destination IP address does not exist in the security group preset in the security group management database 1120, communication is blocked.

The technique of blocking a specific communication can be easily implemented by those of ordinary skill in the art, so detailed description thereof will be omitted.

The security group management database 1120 of the security management client 1100 is set by the administrator through the control panel 2500 of the security management server 2000, and constitutes an IP address list and a file encryption key list in the same security group.

In accordance with the present invention, a password file stored in a removable storage device in the same security group is shared with each other and the access control between each other through a network will be described with reference to FIG. 8.

First, the security group management database 1120 of user A's computer 1000 is the same as that of FIG. 8A. In this case, when a user's computer 1000 exports a file from the user A's computer 1000 to the removable storage device 1200, the user's B or C user computer ( 1000), the security group management database as shown in FIG.

1120, the file encryption key of user A's computer 1000 stored therein.

("12345678y") is used to read the file through each file security control unit 1110. On the other hand, the D or E user computer 1000 has a security group management database 1120 as shown in FIG. 8B, and thus it is impossible to read the encrypted file from the A user computer 1000.

Meanwhile, the user A computer 1000 may access the user B computer 1000, but may not access the user D 1000 that is outside the same security group. In addition, user A computer 1000 allows access from user B or computer C 1000, but blocks access from user D or user E 1000 outside the same security group. This is controlled by each communication security control unit 1140 with reference to the security group management database 1120 of each user computer 1000.

Preferably, the communication security control unit 1140 is a communication program in the user computer 1000

When 1600 is active, that is, when the communication program window is maximized, the clipboard (not shown) of the user computer 1000 that executes the communication program is cleared and all other currently active programs are deactivated ( That is, Minimize all program windows).

In this way, after starting a communication program, the contents of the important file can be opened and copied and pasted to the communication program text, or the important file can be browsed to prevent the text from being entered into the communication program. .

In addition, the communication security control unit 1140 stores the keyboard input information and transmits it to the security management server 2000 when the communication program is activated in the user computer 1000.

The hardware control unit 1150 of the security management client 1100 transmits the contents output to the monitor 1900a to the security management server 2000 in real time to the control panel 2500 according to the request of the security management server 2000. The monitor 1900a periodically transmits screen capture data to the security management server 2000 and stores the screen capture data in the screen capture database 2800. In addition, the hardware controller 1150 enables / disables the function of the input device 1900b according to the request of the security management server 2000.

The security management client 1100 transmits program and hardware information installed in the user computer 1000 to the security management server 2000 in response to a request of the security management server 2000. In this case, the security management client 1100 retrieves registry (not shown) information, program registration information, and device manager information from the user computer 1000.

The security management client 1100 may prevent the opening of a program by preventing the opening of a specific program in response to a request of the security management server 2000, and the security management server 2000 manages a list of currently available genuine software to manage the security management client. Among the programs installed in the user computer 1000 transmitted through 1100, the use is disabled for a program not included in the genuine software list. This prevents the use of illegal software within the organization.

The security management client 1100 is installed and operated in the user computer 1000 and needs to be authenticated by the security management server 2000 in order to be removed from the user computer 1000. For example, the security management server during the uninstall routine.

(2000) can be checked for permission to uninstall and only security administrators can be uninstalled.

The security management client 1100 temporarily logs log information (eg, all file export information, network usage status, etc.) to be transmitted to the security management server 2000 when communication with the security management server 2000 is lost. And when the communication with the security management server 2000 is resumed, and transmits the log information stored in the log temporary storage unit 1160 to the security management server (2000). This provides the same security service as described above even in case of communication loss due to user intention or network failure.

Preferably, in the present invention, the master boot record of the user computer (1000)

(Master Boot Recorder: hereinafter referred to as "MBR") is encrypted to configure the system to boot normally only on the user computer 1000 when booting the user computer. In this case, the key value consists of a unique hardware number (eg, a communication card serial number (MCA), a processor (CPU) serial number, etc.) in the user computer hardware.

On the other hand, the security management server (2000) manages the hardware unique number for booting the hard disk of each user computer (1000), so that later, when the hard disk is legally moved to another computer and used to reset it.

By doing so, even when the hard disk is leaked by a computer user or another person, the hard disk can be made unreadable, and information leakage through the hard disk can be blocked.

A boot sequence and an access control of a general computer system will be briefly described with reference to FIG. 9 as follows.

First, a booting method may be roughly divided into booting using a floppy boot disk and booting using a hard disk. When a computer system is powered on, the system checks the system state, which is called a power on self test. At this time, if a floppy disk is inserted, the boot sector of the floppy boot disk is read and the hard partition (partition) information is read and loaded into the memory address 0000: 7C00 to proceed with system booting. On the other hand, if the floppy disk is not inserted after the power-on self test, the boot sector of the hard disk is read to execute the MBR code, and the hard partition information is read and loaded at the memory address 0000: 7C00. In this case, enter the authentication code for the system access control in the MBR code and the partition if the correct password is entered

You can control system access in a way that allows access to partition information.

Looking at the system access process through the master boot record (MBR) encryption process in accordance with the present invention with reference to Figure 10, when installing the security management client 1100 in the user computer 1000, the system hardware information is extracted and encrypted with MD5 The result is stored in the MBR information database 2700 of the security management server 2000 as shown in FIG. 10B and the user computer 1000 using the MBR access password.

When booting after installing the security management client 1100, if the password that processed the hardware information with MD5 and the existing generated password match, proceed with booting normally, and if it does not match, open the MBR password input window. Input string of 128bit through and check for match. That is, in order to use the hard disk normally by installing the hard disk on which the security management client 1100 is installed, the MBR password input window for the user computer equipped with the hard disk is obtained from the MBR information database 2700. You can use the hard disk by typing in.

The security manager controls all security management clients 1100 through the control panel 2500 of the security management server 2000 as shown in FIG. 11 to perform all the functions of the present invention described above.

As described above, according to the present invention, by preventing and monitoring the leakage of offline information through the output device and the removable storage device and the leakage of the online information by the communication program, the important information is prevented from being leaked from the internal system of the organization. There is.

Although the preferred embodiments of the present invention have been described in detail above, those skilled in the art will appreciate that the present invention may be modified without departing from the spirit and scope of the invention as defined in the appended claims. It will be appreciated that modifications or variations may be made.

For example, the present invention can be equally applied to all files leaked by connecting a storage device to a communication and output interface (eg, a serial port, a parallel port, a USB port, an IEEE1394 port, a wireless port, etc.) installed in a user computer. .

Also, in the above-described embodiment, the database of the security manager server is managed on a user computer basis. You can manage the database on a per-user basis.

Therefore, changes in the future embodiments of the present invention will not be able to escape the technology of the present invention.

Claims (27)

Programs for storing files on storage devices; and A security management client including a file security control unit for encrypting the file contents when storing the file in the storage device, storing the file in the storage device, and storing log information about the file storage; And a security management server configured to receive the log information and the decryption key for the encrypted file while communicating with the file security control unit to decrypt the encrypted file. The method of claim 1, wherein the storage device, Integrated internal information leakage prevention system, characterized in that at least one of a remote storage device or a removable storage device connected to the network. The method of claim 1, wherein the security management client, A communication program for transferring files and Further comprising a communication security control unit for encrypting the contents of the file when transmitting the file to the network to transmit to the transmission destination of the network and to store the log information for the file transmission, The security management server, Receiving a decryption key for the encrypted file while communicating with the communication security control unit, and receiving the log information and the transfer destination and automatically transfers the decryption key to the transfer destination in accordance with the file transfer security policy for the transfer destination Integrated internal information leakage prevention system comprising a key transmission unit. The method of claim 3, wherein the communication security control unit, When the file transfer event occurs through the communication program, the integrated internal information leakage prevention system, characterized in that for receiving the file content and the reason for transmission from the user. The method of claim 3, wherein the file transfer security policy, Define a security level for the transmission destination, and automatically transmits only the decryption key to the transmission destination if the trust level is reliable according to the security level, and if the cooperation level for business cooperation, the decryption key is transmitted to the transmission destination. And at the same time storing the log information, if the unreliable untrusted rating only internal log information management, characterized in that the storage management. 4. The system of claim 3, wherein the transmitted encrypted file is configured in a file format coupled with a code for decrypting the encrypted file. The method of claim 3, wherein the communication security control unit, Integrated information leakage prevention system, characterized in that for controlling the transmission of the file according to the transfer destination based on the file transfer security policy when transmitting the file to the network. The method of claim 7, wherein the file transfer security policy, If the transmission destination is the confidence level, the file is transmitted to the transmission destination. If the transmission destination is the cooperative level, the file is transmitted to the transmission destination and the log information is stored at the same time. Integrated information leakage prevention system, characterized in that the case of the trust rating block the file transfer and store and manage only log information. The method of claim 3, wherein the communication security control unit, Blocks communication when a communication source address does not exist in a preset security group when requesting communication from the network to the security management client, and a communication destination address when requesting communication from the security management client to the network. The internal communication leakage prevention system, characterized in that the communication is blocked if not present in the predetermined security group. The method of claim 9, wherein the predetermined security group, Integrated internal information leakage prevention system, characterized in that configured as the IP address group by the security management server. The method of claim 3, wherein the communication security control unit, When the communication program is activated (active), the integrated internal information leakage prevention system, characterized in that to clear the clipboard of the computer running the communication program and to deactivate other programs. The method of claim 3, wherein the communication security control unit, And the keyboard input information of the computer executing the communication program is stored and transmitted to the security management server when the communication program is activated. The method of claim 1, wherein the security management client, An application that generates print data and performs printing operations; and Further comprising a print control unit for intercepting the print data and transmitting to the security management server, The security management server is an integrated internal information leakage prevention system, characterized in that for transmitting and receiving the print data while communicating with the print control unit. The method of claim 1, wherein the security management client, Integrated internal information leakage prevention system further comprises a hardware control unit for transmitting the content output to the monitor in response to the request of the security management server. The method of claim 14, wherein the hardware control unit, Integrated information leakage prevention system, characterized in that to enable / disable the input device function of the security management client in response to a request of the security management server. The method of claim 1, wherein the file security control unit, Integrated internal information leakage prevention system, characterized in that for transmitting the program and hardware information installed in the security management client to the security management server. The method of claim 16, wherein the file security control unit, Integrated internal information leakage prevention system, characterized in that for preventing the opening of the installed program by blocking the opening of the installed program in response to a request of the security management server. The method of claim 17, wherein the security management server, The internal management information leakage prevention system, characterized in that for managing the list of available programs in the security management client to block the start of a program that is not included in the available program list of the installed program. 2. The method of claim 1, wherein the master boot record (MBR) of the computer storage device is encrypted to control access of the computer on which the security management client is installed, and an encryption key value is configured as a unique hardware number of the computer hardware. Integrated internal information leakage prevention system. 20. The system of claim 19, wherein the hardware number is Integrated internal information leakage prevention system, characterized in that the storage management in the security management server. The method of claim 1, wherein the file security control unit, An integrated internal information leakage prevention system, characterized in that for decrypting the encrypted file stored in the storage device through the decryption key, stored in the storage device, receiving the reason for export and sending it to the security management server along with the contents of the file. . The method of claim 1, wherein the file security control unit, Integrated internal information leakage prevention system, characterized in that for decrypting the encrypted file stored in the storage device through the decryption key in accordance with the read request by the security management client and forwarded to the program. The method of claim 9 or 22, wherein the security management server, The decryption key value is shared with each file security control unit of the security management clients in the predetermined security group to decrypt and read a file encrypted and stored in the storage device in the security group. Integrated internal information leakage prevention system. According to claim 1 or 3, wherein the security management client, Integrated internal information leakage prevention system, characterized in that to be installed and operated in a plurality of user computers and to be authenticated from the security management server in order to remove from the user computer. The method of claim 1, wherein the file security control unit, Integrated internal information leakage prevention system, characterized in that for controlling the operation of the storage device in accordance with the request of the security management server. The method of claim 1, wherein the file security control unit, Integrated internal information leakage prevention system, characterized in that for receiving the reason for the export when the file is stored in the storage device through the program and transmitted to the security management server. The method of claim 1, wherein the security management client, And further comprising a temporary storage unit for storing the log information when communication with the security management server is lost, and transmitting the stored log information to the security management server when communication with the security management server is resumed. Integrated internal information leakage prevention system.