KR20020093188A - System and method for protecting of information in information offering system - Google Patents

Abstract

PURPOSE: A system and method for security of information in an information supplying system is provided to maintain information, set a right to each user, and supply coded information according to the set rights in the system. CONSTITUTION: A network interface(110) is connected to a data communication network and performs an interface of data being transmitted and received. A server control unit(130) controls a supply of initial information in accordance with a server connection and controls a confirmation of a right and a supply of right-confirmed data with respect to data having a security grade. A data storage(140) stores user information in accordance with a grade of data to be supplied, sets a right of each user, and stores a file which was set by a grade and a right. A history managing unit(150) stores a usage history of the data having a grade. A data distribution path(120) supplies paths of data and a control signal being transmitted among the network interface(110), the history managing unit(150), and the server control unit(130).

Description

SYSTEM AND METHOD FOR PROTECTING OF INFORMATION IN INFORMATION OFFERING SYSTEM}

The present invention relates to a security device and method, and more particularly to an information security device and method provided in a system for providing information.

In recent years, thanks to the rapid development of communication technology, information can be easily accessed in various ways. As such, a representative method of using the information is Internet communication. Internet communication has become a common means of connecting and receiving a large amount of information by connecting to a predetermined server through a wired or wireless network. Thanks to this trend, the company's documents can also be accessed using the Internet, and sites that can download data for a fee are continuously increasing. The downloaded data can be read by the user at any time and can also be distributed to other users and used by unauthorized users.

On the other hand, in recent years, strict usage control is required for data on the Internet related to copyright. Therefore, much research and development is being done to protect copyrights on the Internet. In order to protect copyrights on the Internet, the technology of Digital Rights Management (DRM) is emerging as the interest of information technology (IT) companies around the world. One method for digital rights management is encryption of data. The technology for digital rights management requires a high level of encryption technology, which has been developed by companies such as US Intertrust, Microsoft, and IBM.

In the above-described encryption technique, data is encrypted according to an encryption code, and then a decryption code of a cipher is given to a user who is allowed to use it. Therefore, the user who is given the decryption code once can read the downloaded data at any time. In addition, if a dissemination code is added to the encrypted data and disseminated there is a problem that even unauthenticated users can read it at any time.

This will be described as an example. If the user wants to buy a music file from a predetermined server on the Internet communication, the encrypted music file can be received, and the decryption code for the encrypted music file can be notified with the payment. In this case, since the user has a decryption code, the user can read the music file and listen to the music at any time. However, if the user who purchased the music file delivers the music file along with the decryption code to another user, an unauthorized user can listen to the music file. Therefore, a problem arises in that digital copyright is not managed.

In addition, the above-mentioned encryption technology alone may give each user a rating in a system that provides predetermined information for a fee so as to enable only reading, download, or modification of information. Can't. In other words, there was no way of granting authority. Thus, no change of authority could be made.

The company also requires the security of numerous documents. This is required to prevent trade secrets or the leakage of intellectual property in the enterprise. Therefore, generally, the above encryption method is used. However, such encryption alone cannot achieve complete security. That is, as described above, the user can read the downloaded data at any time. In addition, if you want to leak it, if you leak the decryption code granted to the encrypted data, there is a problem that the virtual security is not achieved. There is also no way to retrieve documents acquired by a company even if the employee retires. Therefore, the security of the company's confidentiality was difficult.

In addition, there is no way for the company to know who and when and which file was read when the document of the company is read by the above encryption method alone.

Accordingly, an object of the present invention is to provide a system and method capable of maintaining the security of information provided in a system for providing information.

It is another object of the present invention to provide a system and method for setting authority for each user in a system for providing information and providing differentially encrypted information according to the set authority.

Still another object of the present invention is to provide a system and a method for checking a file viewer and a viewing date and time of a file provided by a system for providing information.

A system according to an embodiment of the present invention for achieving the above objects is a system for performing the security of the information provided in the system for providing information, which is connected to the data communication network to perform the interface of the transmitted and received data The server control unit controls the network interface, the provision of initial information according to the server connection, the server control unit that controls the checking of the authority and the provision of the authority-confirmed data when required for data having a security level, and according to the class of the data to be provided. A data storage unit for storing user information, setting rights for each user, and storing the class and the file in which the level is set; a history manager for storing the user history data of the data in which the class exists; Data transferred between a network interface, the history manager, and the server controller And a data distribution path providing a path for the control signal.

A method according to an embodiment of the present invention for achieving the above object is a method for performing the security of information provided to users in a system for providing information, in the information providing system to a signal received from an operator computer Setting a security level according to the security level, assigning the authority of each user to the data for which the security level is set, storing the user list and the authority of each user together with the provision information file, and requesting the stored provision information file. When the data and the provided information file according to the authority of the user is encrypted, the process is provided.

1 is a diagram illustrating a connection between an information providing system and a terminal receiving information;

2 is an internal block diagram of an information providing server according to an embodiment of the present invention;

3 is a control flowchart for setting and updating a grade of information stored in an information providing server according to an embodiment of the present invention;

4 is a diagram showing a window for displaying information of a file to be loaded on the information providing server according to an embodiment of the present invention;

5 is a diagram illustrating an address book of users that may be added for authorization to document information according to an embodiment of the present invention;

6 is a diagram illustrating a window displayed on a monitor when setting a user's authority according to an embodiment of the present invention;

7 is a flowchart of signals and data between an information providing server and a user terminal according to an embodiment of the present invention;

8 is a control flowchart of reading an information file downloaded from a user computer according to a preferred embodiment of the present invention;

9 is a control flow chart during usage history processing according to a preferred embodiment of the present invention;

10A to 10B are flowcharts of main processing operations performed in an information providing server according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. First of all, in adding reference numerals to the components of each drawing, it should be noted that the same reference numerals have the same reference numerals as much as possible even if displayed on different drawings.

In addition, in the following description, many specific matters such as a specific circuit configuration and elements are shown, which are provided to help a more general understanding of the present invention, and the present invention may be practiced without these specific matters. It will be obvious to those of ordinary skill in the field. In the following description of the present invention, if it is determined that a detailed description of a related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a network diagram illustrating a connection between an information providing system and a terminal receiving information. Hereinafter, a network configuration of an information providing system and a terminal receiving information will be described in detail with reference to FIG. 1.

The information providing server 100 is a system that can be connected to each user through the PSDN 10, which is a data communication network, and provides a system for providing information for a fee or providing data from a predetermined company according to the present invention. In addition, the information providing server 100 provides users with an encrypted file according to the present invention, controls the authentication process of the user, and stores the usage history of each user. The configuration and operation of the information providing server 100 will be described in more detail with reference to FIG. 2 to be described later.

The information providing server 100 is connected to the operator computer 40, and stores, changes or deletes information to be provided by a command received from the operator computer. In addition, the information providing server 100 may record information according to the ID and password of each user received from the operator computer 40 or the grade assigned to each user. In addition, the information providing server 100 receives and stores information such as usage history of users. Therefore, the operator computer 40 can read the data from the information providing server 100 and confirm.

A user connected via a public data network (hereinafter referred to as PSDN) 10 may access the information providing server 100 through a personal computer 11. In addition, the PSDN 10 is generally configured to be connected to a base station controller (hereinafter referred to as BSC) 31 so as to perform Internet communication with a mobile communication terminal of a wireless network. The BSC 31 is connected to a plurality of base stations (hereinafter referred to as BTSs) below, but only one BTS 32 is illustrated in FIG. 1. The BTS 32 may transmit and receive various data with the mobile communication terminal 33 through a wireless channel, and basically perform data communication using a data communication network as well as a voice call. The mobile communication terminal 33 may be a cellular phone, a PCS phone, a PDA, an IMT-2000 terminal, or the like.

On the other hand, the BSC 31 is basically connected to a mobile communication switching system (hereinafter referred to as MSC) 30, and is connected to a public switching network (hereinafter referred to as PSTN) that performs a mobile communication network and a general telephone service. Therefore, when the mobile communication terminal 33 communicates with the information providing server 100, the mobile communication terminal 33 may access the information providing server 100 via the BTS 32, the BSC 31, and the PDSN 10. When connected in this way, the mobile communication terminal 33 can be provided with encrypted information according to the present invention.

In addition, the user computer 11 may be connected to the information providing server 100 through the PSDN 10 to receive encrypted information according to the present invention. Alternatively, it may be connected to the information providing server 100 using a local area network (LAN) or a local area network (WAN), which will be described as being included in the PSDN 10.

2 is an internal block diagram of an information providing server according to an exemplary embodiment of the present invention. Hereinafter, the configuration of an information providing server according to the present invention will be described in detail with reference to FIGS. 1 and 2.

The information providing server 100 according to the present invention includes a network interface 110, a data distribution path 120, a server control unit 130, a data storage unit 140, a history management unit 150, and an operator computer interface 160. It consists of. Next, the operation and detailed configuration of each component will be described.

The network interface 110 is connected to the PSDN 10 and transmits data received from user terminals to the data distribution path 120, and transmits data input from the data distribution path 120 through the PSDN 10 to each user. Deliver to the terminal. The data distribution path may be configured differently according to the configuration of the system. For example, if the system is configured as one system, it may be configured as a bus for transferring data between processing units. As another example, when each processing unit is configured as an independent system, it may be connected using a local area network (LAN) or the like. In addition, when the several processing units form an independent system and are connected to each other, the independent systems may be connected to a local area network, and the devices connected therein may be configured as a bus. As such, the data distribution path 120 may be configured using any method for transferring data.

When the information providing system 100 is composed of one server constituting a predetermined site of the Internet, the server controller 130 displays various kinds of processing information for displaying screen information at the time of initial access to the server and materials that are not available for rating. Perform In addition, it provides a device for providing information for processing data that does not require the security of various information, such as providing bulletin board and general operator mail information. In addition, even when the information providing system 100 is configured as a company's data server, general control information for providing initial access screen information and the like is provided. In addition, according to the present invention, when access to data having a security level is required, the control of the operation for checking the use authority and granting the use authority is performed. As described above, the processing of operations required when accessing data having a security level will be described in more detail with reference to flowcharts described below.

The data storage unit 140 includes an interface 141, an encryption processor 143, a provision information processor 143, and a right storage memory 144. The interface 141 outputs each processor or reads data from a memory according to a destination of data input from the outside and transfers the data to another processor. For example, when a request for confirmation of a use right is requested from the server controller 130, the authority control memory 144 may be inquired to determine whether authentication is possible. The interface 141 receives the information on whether the authentication is possible from the authority storage memory 144 and transmits the information to the server controller 130. In addition, when data is received from an operator computer, the data is transmitted to the encryption processor 142 to perform encryption processing on the input data. When the data connection of the user authorized by the network interface 110 is required, the data is transmitted.

The encryption processor 142 encrypts the data or information input from the interface 141 and transmits the encrypted data or information to the provision information processor 143. In this case, the encryption may be configured using any of the methods mentioned in the prior art, and other encryption methods developed in the future may also be used. The information providing processor 143 receives the encrypted data and stores the encrypted data in a corresponding area divided according to the type of the received data. The provision information processor 143 transfers the data to the interface 141 when the corresponding data is requested from the interface 141. The authority storage memory 144 stores an ID (ID) and a password for each user. Configure so that authentication can be performed through such ID and password.

The history manager 150 may be classified into a history manager 151 and a usage history memory 152. When the history management device 151 receives information according to the browsing history of the information provided from the network interface 110, the history management device 151 divides the information into pieces of information and stores the information in the usage history memory 152. This history information becomes more necessary for the higher security level information.

3 is a control flowchart of setting and updating a grade of information stored in an information providing server according to an exemplary embodiment. Hereinafter, a process of storing information provided to the provision information processor 143 of the information provision server 100 according to the present invention will be described in detail with reference to FIGS. 1 to 3.

3 is a flowchart that can be performed between the operator computer 40 and the information providing server 100, and data processing is performed by the operator computer 40. FIG.

When the operator saves the file or needs to update the operator computer 40, the operator reads the list of files in step 200. First, the case of saving. When uploading a specific file stored in a predetermined directory to the information providing server 100, the operator must select the file stored in the predetermined directory of the operator computer (40). Therefore, in step 200, the file list of the directory selected by the operator is read and displayed on the monitor. Then, when the operator selects a file having information to be uploaded to the information providing server 100, the process proceeds to step 202 to display information about the file.

The information displayed in this way may be illustrated in FIG. 4. FIG. 4 is a diagram illustrating a window displaying information of a file uploaded to an information providing server according to an exemplary embodiment.

Information on a file displayed with reference to the drawing shown in FIG. 4 will be described. If the data to be uploaded to the information providing server 100 is a document file, basic information such as the title of the document, the name and type of the document file, and the owner of the summary information of the document is displayed. . In addition, according to the present invention, an authority designation area indicating whether the user is accessible is displayed. In addition, an icon for addition or removal for updating the access information is provided, and the swimming of authority and the like are displayed.

When the operator selects the additional area in the display area, that is, when the user is selected in step 204, the process proceeds to step 206 to read the address book list as shown in FIG. 5 and display it on the monitor. FIG. 5 is a diagram illustrating an address book of users that may be added for authorization to document information according to an embodiment of the present invention. Such an address book may be configured to have a rating for each user and to have a different address book according to each rating. That is, in setting the location to import the address book illustrated in FIG. 5, the user may easily store the address book in different locations according to the grade set for each user.

This will be described as an example in which a service is provided at a paid site. If users are classified into four grades of users by viewing, saving, printing, and all privileges, the users of each grade are classified in advance and configured as address books having different locations or different names. In addition, all users included in each address book can be added or deleted, thereby easily setting the authority. Although not shown in the drawings for the addition of all of these icons, it will be described in detail because it is easy for those skilled in the art.

Therefore, the list of users can be updated according to the operator's selection. As such, the list of users may be updated for the file to be uploaded to the information providing server 100. When the update of step 208 is completed as described above, the process proceeds to step 210 to check whether the authority setting for a predetermined user is required. If the user's authority is set as a result of the inspection, the process proceeds to step 212 to change the details of the user's authority. An area for changing the authority of the user will be described with reference to FIG. 6.

6 is a diagram illustrating a window displayed on a monitor when setting a user's authority according to an embodiment of the present invention. Hereinafter, the setting or updating of a predetermined user's authority will be described in detail with reference to FIG. 6.

The user's authority can be the first to distinguish between uses. Some examples of use of the user are as follows. First, the use can be divided into (1) example, (2) storage, and (3) printing. Secondly, the user's authority can place a limitation on the time period for viewing the information file. Third, the user's authority can be a right for the number of times of use. With this information, the information file may be informed at the time of disposal as an option of the information file, and may be informed through buckling when the information file is stored. Through this, when the user discards and stores the document, the user can manage the history in the information providing server 100. In addition to this, other kinds of usage restrictions may be provided, but may be performed by changing the above example.

Accordingly, the information of the user who is allowed to be added to the provided information file may be shown in Table 1 below.

User information purpose of use Period of use Frequency of use Usage Information XXX example 01-02-21 through 01-06-20 4 Check at disposal XXY print - - Confirm on save … … … … …

In addition, in Table 1, the user information may be an ID of a user. Such user information is configured differently according to the purpose of use of the information providing server 100. That is, the purpose of using the information providing server 100 may be configured with only the user's ID or ID, name, social security number or the like in the case of an Internet site providing paid information. On the contrary, when the purpose of using the information providing server 100 is to provide a material for a predetermined purpose in a company, the information providing server 100 may be configured as a user's ID, a department name, and the like.

In addition, the use can be configured to further include the above-described three or other uses, it is possible to set the use period. If the usage period is not set, there is no limit on the usage period. The same applies to the frequency of use. In addition, the use information may optionally be checked or not configured when discarding or mailing service when storing. In Table 1, the confirmation of discarding means a process of checking whether or not the file is discarded by accessing a server every time a user wants to access a file with very high security level. In addition, when checking the information, when the information is updated, it means that the mailing service is performed to notify the corresponding users who can read the document file of the new update.

In addition, the setting of the special authority may be configured to automatically set the special authority when the operator of the server stores the document or uploads the predetermined data to the information providing server 100 even if the user is not the operator. have. That is, this may be performed even when the special authority is set when the user is added in the process of FIG. 5, but this is also performed when the document file is stored in the information providing server 100 or the stored data is updated. Through this, it is possible to configure such that the authority information is set for each document. That is, the special authority is set not only during the process of FIG. 3 but also when data is stored in the information providing server 100.

In this way, a predetermined user may give different authority to the stored document and control the same. When the authority information is stored as described above, the process proceeds to step 214 and it is checked whether all the tasks are finished. In this case, if the check result of step 214 is not confirmed, the process proceeds to step 204 to check whether there is an additional user. As described above, the addition of the user is checked and the information on the user authority setting in step 210 is checked. If the work on the information file to be uploaded to the information providing server 100 is completed through the above processes, it is checked in step 214 whether a confirmation signal is received. The confirmation signal may be a case of clicking a confirmation icon shown in FIG. 4 or inputting a key corresponding to the confirmation. When the confirmation signal is input as described above, the process proceeds to step 216 to encrypt the file to be uploaded to the information providing server 100. That is, since the distributed file is distributed in an encrypted state, the file is converted into a state that can be distributed. When the encryption task is finished, the process proceeds to step 218 to deliver the encrypted file along with the information on the user and authority to the information providing server 100 for storage.

Through the above process, a user's authority and a viewable user are selected and stored in a file registered first. The information providing server 100 then receives it via the operator computer interface 160. Thus, operator computer interface 160 delivers data to interface 141 of data store 140 via data distribution path 120. Accordingly, the interface 141 encrypts the input data through the encryption processor 142 and transfers the data to the provision information processor 143 to store the data in a predetermined area.

The above process has described the case where the initial data is stored in the information providing server. In contrast, when updating the stored information file, the operator reads the information of the information providing server 100 through the operator computer (40). That is, the information file is read from the provision information processor 143 of the information provision server 100 and transferred to the interface 141, the data distribution path 120, and the operator computer interface 160. When the data is transmitted in this way, the operator computer 40 receives it and displays it on the monitor. That is, a 200 step process is established. Subsequent processing can be performed in the same way as the initial storage of information.

7 is a flowchart illustrating signals and data between an information providing server and a user terminal according to an exemplary embodiment. Hereinafter, a flow of signals and data between an information providing server and a user terminal will be described in detail with reference to FIGS. 1 to 7.

When the user accesses the server providing the information in step 300 using the user terminal, for example, the user computer 11 or the mobile communication terminal 33, and logs in, the user provides general information in step 302. This general information refers to general initial information provided on the homepage. As described above, in the state where general information is provided, a user may perform various tasks that do not require security using his terminal. Providing general information in this way is provided or processed by the server control unit 130 of the information providing server 100.

In this case, if the user requests to view the file for which security is required in step 304, the information providing server 100 checks the usage right in step 306. The verification of the usage right may be performed by the server controller 130 inquiring about the authority storage memory 144 of the data storage unit 140 using the user's information. The server controller 130 transfers the information to the user terminal according to the information received from the authority storage memory 144. In other words, if the user has authority, an Ack signal is transmitted in step 308, and if a user does not have authority, a Nack signal is transmitted. In the following description, a case where a user is given authority is described.

When the information providing server 100 transmits an acknowledgment (Ack) signal as described above, the information providing server 100 transmits the information requested for reading to the user terminal. In this case, the requested information may be transferred directly from the provided information processor 143 to the user terminal. Alternatively, the server control unit 130 may be configured to process this. In this case, the transmitted information is configured to deliver only the encrypted information in the file. That is, the authority information of the user described through FIGS. 3 to 6 and the information of the authorized users may be configured not to be transmitted.

Referring to FIG. 7 again, in step 310, the information providing server 100 transmits an information file to a user terminal. When the transmitted information file is first viewed by the user or when a report on the usage history is required, the user terminal reports the usage history in step 312. Through this process, the information file is provided from the information providing server 100 to the user terminal.

What has been described above has been described taking the case of downloading a file as an example. As such, when a file download is performed, the rating information of a corresponding user may be encrypted and specified and then transmitted. This is to configure the file not to remain on-line every time the file is viewed. That is, it may be configured to store and provide the details shown in Table 1 and other details according to the grade that may be provided as needed. As such, the information of the details provided to the user may be encrypted together with the file and transferred to the personal terminal such as the personal computer 11 or the mobile communication terminal 33. Then, it can be configured to check the details when viewing the encrypted file in the application (application) of each personal computer 11 or mobile communication terminal 33. This will be described in more detail with reference to the control flowcharts described below.

8 is a control flowchart of reading an information file downloaded from a user computer according to a preferred embodiment of the present invention. Hereinafter, a process of reading an information file downloaded from a user computer according to the present invention will be described in detail with reference to FIGS. 1 to 8.

The user terminal maintains the standby state in step 400. This standby state includes all of the on / off lines. If the user's request exists in the standby state as described above, the process proceeds to step 402 to check whether security information is required to be viewed. If a security file is requested to be viewed as a result of the check, the process proceeds to step 406; otherwise, the process proceeds to step 404 to perform a corresponding function.

If the result of the check in step 402 is to view the security information file is set, the user terminal proceeds to step 406 and requests the information providing server to check the usage rights. This is configured to be performed whenever a security information file is required to be viewed. However, you can configure it not to do this in certain cases. It can also be configured to not require confirmation of permissions from the information provision server. If it is not necessary to check the usage rights, it may be configured to directly view the file without performing steps 468, 468, and 414 to 420. You can also check the security status in your application while you are offline. This may be done when the information about the user's rating is added together with the file and transmitted when the file is downloaded in FIG. 7. In the present embodiment, for convenience of explanation, it will be described that the use authority is checked online for the security information file. However, when the user's rating information is received together on the offline, the user's rating information can be confirmed in the same offline state using the user's rating information.

In step 406, the user terminal transmits the user information and the password to the information providing server 100 together with the information of the file to be viewed and requests confirmation of the use authority. Thereafter, the process proceeds to step 408 to check whether a response signal is received from the information providing server 100. When the test result response signal is received, the process proceeds to step 414. However, if the response signal is not received, the process proceeds to step 410 to check whether there is no response during the timeout period set to the predetermined time. If a timeout occurs because a response signal is not received for a predetermined time as a result of the inspection, the process proceeds to step 412 and performs processing according to the timeout. This timeout processing may be configured to automatically require reconfirmation, or may be configured to notify the user of a message that there is no response, such as a web browser.

If a response signal is received in step 408, the user terminal proceeds to step 414 and checks whether the received response signal is a grant response signal. If the result of the check is the permission response signal, the process proceeds to step 416 and, if not, to step 422.

First, explain the case of disallowing access. If access is denied, the user terminal proceeds to step 422 and performs a process according to the failure. As described above, the processing according to the failure may be configured to display only the impossibility of the access or to indicate the reason for the impossibility. The routine proceeds to step 424 to perform a routine for processing the usage history. The routine for processing such a usage history will be described in more detail later with reference to FIG. 9.

On the other hand, if the process proceeds to step 416, the user terminal decrypts the file. That is, the distributed information file is an encrypted file for security, so it must be decrypted. In addition, since the Ack signal is received from the information providing server 100 approving the use, the file is decrypted. Then proceed to step 418 to perform the operation according to the given authority. That is, the operation according to the usage right described above with reference to FIGS. 3 and 6 may be performed. Even during such work, if processing of the usage history is necessary, processing according to the usage history is performed. When the file ends, the usage history is processed in step 420. However, the usage history process of step 420 may be configured not to be performed.

As such, even when an information file exists for a user, the user can always be authenticated with permission to maintain security of a file requiring security. In addition, it is possible to confirm who has read what information when and by using the configuration to continuously inform the information providing server 100. Confirmation of such information may be performed by reading data stored in the history management unit 150 of the information providing server 100 in the operator computer 40.

9 is a control flowchart of a usage history process according to an exemplary embodiment of the present invention. Hereinafter, a usage history processing process according to the present invention will be described in detail with reference to FIG. 9.

When the user terminal performs the usage history processing routine, the user terminal encrypts information on a file attempted to access in step 500. In this case, if the access fails, the failed information is encrypted. In operation 502, the encrypted information is stored in a database of a user terminal. The user terminal proceeds to step 504 and stores the encrypted information as described above in a DB and compares the current value and the threshold stored in the DB. As a result of the comparison, if the current value is greater than or equal to the threshold value, the process proceeds to step 508; otherwise, the process proceeds to step 506.

First, we look at the case where the current value stored in the current DB is less than or equal to the threshold. If the current value is less than or equal to the threshold value, the user terminal checks whether the information providing server 100 should be notified of the access immediately in step 506. As such, when the access information should be immediately known, there may be a case of confirming a waste document and a mailing service during storage as shown in FIG. 6. It can also be configured to only notify you when you need special security. In this case, the user terminal proceeds to step 508. However, if it is not necessary to immediately inform the fact that the information has been accessed, the routine is terminated.

Meanwhile, in step 504 or 506 to 508, the user terminal generates usage history. In this case, the details generated when the current value is greater than or equal to the threshold value newly generate all the details stored in the DB of the user terminal. However, in the case of the information to be immediately known in step 506, the usage history information is generated only with the information. After generating the usage history information as described above, the routine transmits the information to the information providing server 100 and ends the routine. In this case, when the value stored in the current DB is greater than or equal to the threshold value, it may be configured to delete the DB after delivering it.

In the above-described embodiment, a configuration for always informing the details to the server in the online state has been described. However, if the file is not a very important class, the user application can be configured to check whether or not to read through the comparison of the threshold value. In this case, if the threshold is exceeded, the user may be configured to update and use the file's permissions while online. This will be described as an example.

If a user is using a file configured to be read four times in a predetermined file, the number of readings is recorded in the rating information of the file at the first reading. Then, since the number of available readings is four times or less set as a threshold, three readings are possible afterwards. However, if the user attempts to read the file again after performing four times of reading, the reading of the file may be exceeded. In this case, through the update of the authority information from the information providing server 100 can be configured to enable the four times of reading again or set to more than the number of times.

10A to 10B are control flowcharts of main processing operations performed in an information providing server according to an exemplary embodiment of the present invention. Hereinafter, a control process performed in the information providing server according to the present invention will be described in detail with reference to FIGS. 1 to 10A and 10B.

Each processing unit of the information providing server 100 maintains a standby state in step 600 and checks whether a predetermined signal is generated or received. Such a check is mainly received from the network interface 110 or from the operator computer interface 160, but there are also operations that are periodically performed according to the characteristics of each processor. However, the flowchart according to the present embodiment is configured to be limited to the case where a predetermined signal is received from the operator computer 40 or the user terminal, which will be described.

Each processing unit of the information providing server 100 maintains the standby state in step 600, and if a predetermined signal occurs, the process proceeds to step 602 to check whether the received signal is a signal requesting a list of information provided. The request of the list of the information provided in this way is possible even when the user terminal is only connected to the information providing server 100 in the login or logoff state. The signal is received by the network interface 110 through the PSDN 10, and the network interface 110 transmits the signal to the server controller 130. In operation 604, the server controller 130 reads a list through the provision information processor 143 or reads a list stored in the server controller 130. Thereafter, the server controller 130 provides the list information to the requesting user terminal through the network interface 110. Then wait again.

On the other hand, if the list of the test result providing information of the generated signal is not requested, the process proceeds to step 606 to check whether the signal is required to authenticate the authority. At this time, authorization can be classified into two cases. The two cases are cases where a user requests authentication for login and a case where authentication is required to use a security file. The case of requesting the login is a general case, which is a process of reading and processing from the authority storage memory 144 and thus will not be described in detail. That is, according to the present invention, only the case where the authority authentication is required for the use of a predetermined file will be examined.

If there is a right authentication request, the server controller 130 proceeds to step 608 to check the right. At this time, the server controller 130 transmits the user ID, password, version of the file to be used, for example, the last modified date information or the actual version, etc., received from the user terminal requesting permission to the data storage 140. . In this case, when the first file is first viewed, the version does not exist. Then, the interface 141 of the data storage unit 140 receives it and delivers it to the provision information processor 143. The provided information processor 143 uses the received information to check whether the user can use the file that is required to be used. This information is inspected for authority according to the details stored by the process of FIGS. 3 to 6 described above. The provided information processing unit 143 transmits the information on the use authority and the comparison information of the requested version to the server controller 130 according to the inspection result. At this time, in the case of the first reading, the version information does not exist as described above. Therefore, in this case, the provision information processor 143 stores information about no version. The provision information processor 143 transmits the information file to the user terminal after the transmission of the information according to the authority to the server controller 130, if the authority exists. In this case, the transmission of the information file may be performed after a predetermined time after transmitting the authority information or under the control of the server controller 130.

When the server controller 130 receives the authority information, the server controller 130 generates the response information and transmits it to the network interface 110. Then, the network interface 110 transmits the response signal to the terminal requesting to view the information file. In this case, when the access is granted, as described above with reference to FIG. 7, an acknowledgment (Ack) signal is transmitted.

When the server control unit 130 transmits the response signal as described above and then transmits the grant response signal, the server controller 130 checks whether the file needs to be downloaded. That is, when the file needs to be downloaded, the first time the file is viewed or the version is different. That is, when the file needs to be downloaded in this way, the process proceeds to step 614 and the information information processor 143 transmits the information file under the control of the server controller 130.

In another case, that is, if the generated signal is not the authority approval request signal, the information providing server 100 proceeds from step 606 to step 616 to check whether data upload is required. This can be done via operator computer interface 160 or via a network interface. When uploading data is required as described above, the server controller 130 controls the data storage 140 to store the data in step 618. In this case, the stored data is encrypted by the encryption processor 142 and then transferred to the provision information processor 143 to store the data in a predetermined area. In the process of such storage, the method described with reference to FIGS. 3 to 6 is the most general method. However, the user terminal may be stored through the process of FIGS. 3 to 6. In the present invention, there is no particular limitation on the manner of storing.

In addition, if the generated signal is not a request for uploading data of the test result in step 616, the method proceeds to step 620 to check whether data update is required. If update of the test result data is required, the process proceeds to step 622 to update the data. At this time, the authority is checked as in step 608 before updating the data. In other words, the data can be updated only by a user who is allowed to update the data. The data update is also stored in the data storage unit 140 under the control of the server controller 130. Therefore, the encryption processor 142 performs encryption, and the encrypted information is transferred to the provision information processor 143 to update the data. This may be the case of simply updating the file and updating the information of the file, and updating the file or updating the file information may be performed through the same process.

In addition, if the generated signal is not a request for updating the test result in step 620, the method proceeds to step 626 to check whether the history data request signal is applied. If history data is required, the process proceeds to step 628 to generate history data for the user or the information file. The history management device 151 reads the information of the usage history memory 152 and generates history data under the control of the server controller 130. This history information generates only the history of the user when the general user requests it, and when the operator checks the history through the operator's computer, the history information of the information file and the history of the predetermined user's information access are configured to be examined. When the history information is generated, the server controller 130 transmits the generated history data to the user terminal or the operator computer in step 630.

The transmission of the history data may be configured to automatically generate and deliver a price when a specific file is read, that is, when an additional fee is required for a predetermined paid site. In this case, the signal is generated internally.

If the signal generated in the information providing server 100 is not a test result history data request signal of step 626, the method proceeds to step 632. If the signal is automatically received from the user terminal according to the access of a predetermined file, the method proceeds to step 634. do. In operation 634, the server controller 130 controls the history management device 151 to analyze the received history data. That is, it analyzes which user has performed an operation such as viewing / printing / saving / deleting which information file. According to the analysis result, the history management device 151 proceeds to step 636 and stores it in the corresponding history list. Through this, it is possible to check the history of the predetermined file.

In addition, there may be other operations performed, but other operations are not further examined as parts of the present invention.

As described above, there is an advantage of maintaining the security of information by setting a user for a file uploaded to an information providing server and granting discriminating rights to each user. In addition, there is an advantage that can prevent data from being illegally distributed when providing paid information of the Internet. In addition, since the user's rating can be updated in real time, it is easy to maintain the security of information in a company, etc., and at the same time, it is easy to recover files.

Claims (12)

In the system for performing the security of the information provided by the system for providing information, A network interface connected to a data communication network to interface data transmitted and received; A server controller which controls the provision of initial information according to the server connection and controls the checking of the authority and the provision of the authority verified data when required for data having a security level; A data storage unit for storing user information according to a grade of data to be provided, setting rights for each user, and storing the grade and authority set file; A history management unit for storing the usage history data of the data in which the grade exists; And a data circulation path providing a path for data and control signals transmitted between the network interface, the history management unit, and the server control unit. The method of claim 1, wherein the data storage unit, An information processing processor for storing user information and permission information according to a grade when storing a file of information to be provided, and configuring and providing user information and permission in the information file to be provided when the stored file is requested; An encryption processor for performing encryption at the time of storing and providing the provided information; System for the security of information in the information providing system comprising an interface for transmitting the signal and data received by the data storage to the processor. The method of claim 2, wherein the data storage unit, And a privilege storage memory for storing data of users whose authority is set to request access to the stored information in the provision information processor and providing authentication. The method according to claim 1 or 2, wherein the history management unit, A history management device that controls the storage by inspecting a corresponding data storage area when the usage history data of the provided information file is received; A system for security of information in an information providing system, characterized by comprising a usage history memory having areas for storing data according to the usage history for each data. The method according to any one of claims 1 to 4, And an operator computer interface connected to the operator computer to interface with data and control signals received from the operator computer. What is claimed is: 1. A method for securing information provided to users in a system providing information, the method comprising: Setting a security level in accordance with a signal received from an operator computer in the information providing system, and assigning authority of each user to data in which the security level is set; Storing the user list and the authority of each user together with the provided information file; And encrypting and providing the data and the provision information file according to the user's authority when the stored provision information file is requested. The method of claim 6, And storing history data in a history information storage area of a corresponding file when history information of the provided file is received. The method of claim 7, wherein And forwarding the stored history information to the operator computer when the history information is requested from the operator computer. The method according to any one of claims 6 to 8, Providing the information to the operator computer when the user list stored with the provision information file and the authority of each user are requested from the operator computer; And storing updated details together with the provided information file when updated data is received from the operator computer. In the security method of the encrypted file consisting of the user's authorization information and file information, Requesting input of a user's information when the user requests a reading, and checking whether the user's information matches the user's authority information; If the user is permitted to use the test result, decrypting and using the encrypted file; And a process of performing a usage history process on the data processed to be usable. The method of claim 10, If the security level is a file that the user's authorization check should always be received from the information providing server, and passing the input user information to the information providing server, And encrypting the encrypted file to enable the encrypted file when the use is approved by the information providing server. The method according to claim 10 or 11, wherein Generating history information when the security level is set to notify history information to a security providing server when a file is viewed; And providing the generated history information to the security providing server.