KR20030044086A - System and Method for Providing the Protect-Mail in Mobile Internet - Google Patents

Abstract

PURPOSE: A method and a system for providing a wireless Internet security mail are provided to automatically remove the mail transmitted to the receiver before the receiver is exposed to the warm virus when opening the mail, and to basically block and eliminate the warm virus by automatically sending the alarm mail to the receiver previously infected with the warm virus. CONSTITUTION: A system for providing a wireless Internet security mail includes the steps of; generating a security policy for the wireless Internet mail to the mail transmitted from the wireless mail sending client, after the generated security policy from the wireless mail sending client is encrypted with a given encryption method, applying the encryption method to the sent mail and transmitting the sent mail applied the security policy thereto to the wireless mail sending client, creating an encryption key and a decryption key accessible to the wireless Internet mail and transferring the mail to a mail control center(225) ,and restricting and managing the access to the receiving client for the sent mail applied the mail security policy thereto through the encryption key and the decryption key transmitted to the mail control center(225).

Description

System and Method for Providing the Protect-Mail in Mobile Internet}

The present invention relates to a wireless Internet secure mail system, wherein the mail sender connected to the wireless Internet creates an E-mail policy for wireless Internet mail, and the mail is sent to the wireless Internet mail sent from the mail sender. After applying the policy, it encrypts and compresses it according to the given encryption method and sends it to the mail recipient on the wireless Internet, and sends the encryption key and the decryption key to access the wireless Internet mail to the mail control center on the wireless internet. To restrict access rights, such as reading, copying, storing, printing, and forwarding of mail recipients to wireless Internet mail through the assigned mail policy and mail control center as described above; How to change and apply Internet mail access rights in real time And a method and system for randomly deleting a wireless Internet mail delivered to a mail receiver by security needs.

Wireless Internet provides wireless communication through wireless devices such as Global System for Mobile communications (GSM), Personal Digital Cellular (PDC), Personal Handyphone System (PHS), Personal Digital Assistant (PDA), and Smart Phones. It refers to the architecture, technology, and service that provides data communication or Internet service by connecting to a server on the wired Internet by using a wireless Internet. It supports wireless Internet protocols such as WAP (Wireless Application Protocol) or Mobile Explorer (ME). It refers to a technology for accessing a wired Internet based on Transmission Control Protocol / Internet Protocol (TCP / IP) and HyperText Transfer Protocol (HTTP) through a terminal.

In other words, the wireless Internet was not developed by applying various standards of the existing wired Internet to the characteristics of the wireless network, but was newly created to be optimized for the characteristics of the wireless Internet terminal and the wireless network, ignoring the existing wired network communication standards. In order for a wireless Internet terminal to access the wired Internet through the wireless Internet, a gateway that performs a buffer function between the wireless network and the wired network is required. The gateway converts WAP or ME, which is a wireless Internet protocol, into a TCP / IP and HTTP format, which is a wired Internet protocol, and serves as a caching and proxy server for smooth data data communication.

The wireless Internet mail based on the wireless internet technology also connects the wireless internet and the wireless internet, or the wireless internet and the wired internet through a gateway. Accordingly, the wireless internet mail includes not only the wireless internet terminal and the wireless internet terminal sending and receiving mails but also the wireless internet terminal and the mail client on the wired internet.

1 is a simple block diagram of a representative wireless Internet mail system.

Wireless Internet terminals (hereinafter referred to as "wireless mail clients") equipped with a mail browser supporting WAP or ME connect to the gateway via wireless communications based on mobile communications technologies such as Code Division Multiple Access (CDMA). Gateway is a mail server over a wired Internet that supports mail protocols such as Simple Mail Transfer Protocol (SMTP), Post Office Protocol 3 (POP3), and Internet Message Access Protocol (IMAP) based on TCP / IP, or You are connected to the mail client. The process of sending, delivering, and receiving mail through the wireless Internet mail system as shown in FIG. 1 will be briefly described as follows.

When a wireless mail client sends mail to a mail client on the wired Internet, mail sent by the wireless mail client is delivered to the gateway through a wireless Internet mail protocol such as WAP or ME, which is based on TCP / IP and SMTP. When delivered to a mail server via a wired Internet mail protocol, the mail server delivers the mail sent by the wireless mail client to the mail server used by the mail client on the wired Internet according to the existing mail protocol on the wired Internet. Then, the mail client on the wired Internet accesses mail sent by the wireless mail client through a wired Internet mail protocol such as POP3 or IMAP based on TCP / IP, or a web mail method based on HTTP and HTML. .

When a mail client on the wired Internet sends mail to a wireless mail client, mail sent by the mail client on the wired Internet is delivered to the mail server through wired Internet mail protocols such as TCP / IP and SMTP, and the mail server The Internet mail system delivers this to the mail server used by the wireless mail client. Then, the wireless mail client accesses the delivered mail by accessing the mail server used by the user through the gateway through a wireless Internet mail protocol such as WAP or ME.

When sending mail from a wireless mail client to a wireless mail client, mail sent by the wireless mail client is delivered to the gateway through a wireless Internet mail protocol such as WAP or ME, which is based on TCP / IP and SMTP. When delivered to a mail server via a wired Internet mail protocol, the mail server delivers it to the mail server used by the receiving wireless mail client through a mail delivery system on the existing wired Internet. Then, the receiving wireless mail client accesses the delivered mail by accessing its own mail server through the gateway through a wireless Internet mail protocol such as WAP or ME.

Meanwhile, the wireless Internet mail system may include a terminal storage mail system and a server storage mail system.

The terminal storage type wireless Internet mail system is divided into an automatic mail reception type in which mail is automatically received from a mail server to a wireless mail client, and a manual mail reception type in which a mail must be manually read by operating a wireless Internet terminal. The terminal does not need to directly access the mail server to check the mail, and the address book can be stored inside the terminal.

The terminal storage type wireless Internet mail system is a mail system using a mail client method such as Outlook Express on the wired Internet, and is a representative wireless Internet mail system of i-mode in Japan which currently uses a packet transmission method.

The automatic receiving type of the terminal storage type wireless internet mail system is a method in which a mail server delivers the mail directly to the wireless internet terminal through a gateway when the mail is delivered to the mail server used by the wireless internet terminal. It can be used when the mail browser is always running.

The passive reception type of the terminal storage type wireless Internet mail system is a method in which a user operates a wireless Internet terminal to read mail stored in the mail server after the mail is delivered to a mail server used by the wireless Internet terminal. When the wireless Internet terminal reads the mail, the mail browser can be used.

The server-stored wireless Internet mail system is divided into an automatic incoming notification type and a manual incoming notification type according to a method of notifying the wireless Internet terminal after the mail is delivered to the mail server. Although it is necessary to connect directly to the server, the address book does not need to be stored inside the terminal, but any type of terminal capable of accessing the mail server is characterized by using wireless Internet mail.

The server-stored wireless Internet mail system is a system that can check mail only when it is connected to a mail server, such as web mail on the wired Internet. It is mainly used in Korea, which is currently used in mobile communication systems using circuit switching. In other words, SMS (Short Message Service) is used to notify a wireless internet terminal of mail stored in a mail server.

The automatic call notification type of the server-stored wireless Internet mail system is a short message indicating that the mail has arrived through the Short Message Center (SMC) of the mobile communication system when the mail is delivered to the mail server used by the wireless Internet terminal. It is a method of transmitting to a wireless Internet terminal and connecting the mail server to the mail server to check mail, and can be used when the mail server is linked with the SMC of the mobile communication company.

In the server-received wireless Internet mail system, the incoming call notification type is a mail message that is sent to a mail server used by a wireless Internet terminal, and the user operates the wireless Internet terminal to check whether the mail arrives. This function informs the wireless internet mail server that the mail has arrived and the wireless internet terminal checks the mail stored in the mail server through this information. The mail server can be used even if it is not necessarily linked with the mobile carrier's SMC. There is this. That is, if there is a wireless Internet mail agent linked to the SMC of the mobile communication company, and there is only a mail server convertible to wireless Internet mail, it is possible to access the mail server and check the mail received by the user.

However, the biggest disadvantage of such a wireless Internet mail system is that once a mail sent from a mail client on a wired or wireless Internet is stored in a mail server or stored in a wireless Internet terminal, once the wireless Internet mail is sent from a mail sender. In other words, you can't see what status the mail is in, to whom it is forwarded to, or how it is abused.

In particular, unlike the wired Internet, in the case of wireless Internet mail which has to pay for each mail transmission and reception, if the worm virus is spread through the wireless Internet mail, the damage of the wireless worm virus spread through the wireless Internet mail is It is much more destructive than damage to the statue. In addition, since most wireless Internet terminals are linked to securities information or financial information, the financial and material damages that result from them are beyond imagination unless they can block early wireless worm viruses that spread via wireless Internet mail. Becomes enormous.

An object of the present invention to solve the above problems is to create an E-mail policy for wireless Internet mail in the mail sender connected to the wireless Internet, and to the wireless Internet mail sent from the mail sender to the outside After applying the mail policy, it encrypts and compresses it according to the given encryption method and sends it to the mail recipient on the wireless Internet, and simultaneously sends the encryption key and the decryption key to access the wireless Internet mail to the mail control center on the wireless Internet. To restrict access rights such as read, copy, save, print, and forward mail recipients to wireless Internet mail through the assigned mail policy and mail control center. How to change and apply wireless internet mail access in real time, Lorca is a method and system to delete any e-mail sender is a Wireless Internet mail delivery to the mail recipient by the need to provide security.

1 is a simple block diagram of a representative wireless Internet mail system.

2 is a simple block diagram of the concept of a wireless Internet secure mail system for enforcing a security policy applied to wireless Internet mail.

3 is a simple block diagram for enforcing the security policy applied to the mail through the mail control center.

4 is a simple block diagram of a mail control center that enforces the security policy of wireless Internet mail.

5 is a simple flowchart of a process of creating and applying a security policy through a mail sending system and a mail sending agent.

6 is an exemplary diagram of a terminal for creating a wireless Internet mail to be sent to a mail recipient.

Figure 7 is a simple terminal example showing the access rights, the number of access, the policy violation function, the access time limit, and the expiration time of the mail for wireless Internet mail.

8 is a simple flowchart of a process of a wireless Internet mail receiver accessing wireless Internet mail received by the wireless Internet terminal.

FIG. 9 is a simple flowchart of a process in which a wireless Internet mail sender tracks wireless Internet mail sent by him and changes a policy through a mail control center.

<Description of main parts of drawing>

200: mail sending system205: mail sending agent

210: mail receiving system215: mail receiving agent

220: mail server 225: mail control center

The present invention relates to a wireless Internet secure mail system that allows a mail sender to directly control wireless Internet mail. The present invention provides a security policy for all wireless Internet mails sent through a mail sending plug-in mounted in a wireless Internet mail sender. Step, the mail sending plug-in mounted in the mail sender applies a security policy assigned to the sending mail, encrypts, compresses and sends the mail using a given encryption method, and an encryption key for accessing the wireless Internet mail. And generating a decryption key and forwarding it to a mail control center on the wireless internet, and restricting and managing a recipient's access rights to the wireless internet mail to which a mail security policy is applied through the encryption key and the decryption key delivered to the mail control center. Step and the like; According to the security policy installed on the Internet mail, the mail sender directly deletes the mail delivered to the recipient.

According to the present invention, the wireless Internet mail security policy is the same regardless of whether the wireless Internet mail sent from the mail sender is stored in the mail server or the wireless recipient's wireless Internet terminal, regardless of the storage location of the wireless Internet mail. The wireless Internet mail security policy of the present invention is enforced at the step of requesting a key for decrypting the password applied to the mail from the mail control center in order for the wireless Internet mail recipient to access the wireless internet mail to which the security policy is applied. do.

In particular, the application of the security policy to the wireless Internet mail in the present invention, the wireless Internet mail sent from the sender to the receiver, the access rights restriction policy and automatic extinction code of the receiver is encrypted and mounted according to a given encryption method After that, by transmitting the encryption key and the decryption key for the encryption code to the mail control center, the mail control center restricts the recipient's access to the wireless Internet mail to which the security policy is applied and, if necessary, can be automatically destroyed. it means.

Further, in the present invention, enforcing the security policy applied to the wireless Internet mail means that the wireless Internet mail receiver accesses the wireless Internet mail received from the mail control center in the process of accessing the mail to which the security policy is applied as described above. In order to acquire the authority for the security policy, the recipient of the wireless Internet mail to which the security policy is applied can access the wireless Internet mail only through a method approved by the security policy assigned to the mail.

In particular, the wireless Internet mail to which the security policy is applied may be forcibly deleted by an automatic extinction command transmitted from the mail control center, and in this case, the automatic extinction command for the wireless internet mail is executed from the mail control center.

2 is a wireless Internet security mail that creates and applies a security policy for wireless Internet mail in a mail sending system, delivers it to a mail receiving system, and enforces a security policy applied to wireless Internet mail delivered through a mail control center. A simple block diagram of the concept of the system.

The mail sending system 200 creates a security policy on the wireless Internet mail through the mail sending agent 205, applies the mail to the recipient, and the mail receiving system 210 sends the mail receiving agent 215. In the process of accessing the received mail, the mail control center 225 that enforces the security policy serves to substantially execute the policy applied to the wireless Internet mail.

That is, the mail sending system 200 and the mail receiving system 210 are a wireless Internet mail processing module mounted inside a server system or a wireless Internet terminal connected to a wireless Internet terminal using a wireless protocol. In the case of the stored wireless Internet mail system, the mail sending system 200 and the mail receiving system 210 are mounted inside the wireless Internet terminal that substantially sends the wireless Internet mail. The wireless Internet terminal is connected and mounted in the mail service providing server 220 on the wireless Internet using the mail service.

However, according to the present invention, the wireless Internet mail to which the security policy is applied is not applied only to the mail between the wireless Internet terminals.

Therefore, when transmitting a wireless Internet mail with a security policy from a mail client on a wired Internet to a wireless Internet terminal, the mail sending system 200 may be configured such as Outlook Express or Eudora mounted on the mail client. A mail client application program and the like, and the mail sending agent 205 means a mail sending plug-in that is connected to the mail client application. However, at this time, the mail receiving system 210 is a mail processing module mounted in the wireless internet terminal or inside the mail service providing server 220 used by the wireless internet terminal, and is wired through the mail receiving agent 215. It executes and executes the policy of wireless Internet mail to which the security policy sent by the mail client on the Internet is applied.

In addition, when transmitting a wireless Internet mail to which a security policy is applied to the mail client on the wired Internet from the wireless Internet terminal, the mail sending system 200 is a mail service providing server 220 used in or inside the wireless Internet terminal. As a mail processing module mounted inside the, it plays a role of creating, applying and sending a security policy to wireless Internet mail sent from the wireless Internet terminal through the mail sending agent 205. In this case, the mail receiving system refers to a mail client application such as Outlook Express or Eudora mounted on the mail client on the wired Internet, and the mail receiving agent 215 receives the mail mounted on the mail client application. As a plug-in, it executes and enforces the policy of wireless Internet mail to which the security policy sent by the wireless Internet terminal is applied.

The mail server 220 serves to deliver the mail sent from the mail sender to the mail receiver through the wireless Internet in the same manner as the mail server on the wired / wireless internet, and the mail currently delivered by the mail server 220 is a security policy. There is no need to check whether this is an applied mail or not. The mail server 220 may forward the wireless Internet mail to which the security policy is applied to the recipient through the same process as the existing mail, and the execution of the security policy may be performed by the mail receiving system 210 and the mail receiving agent mounted on the mail receiver. 215 and through a mail control center 225 connected to them.

The mail control center 225 executes a policy of wireless Internet mail to which the security policy is applied, and the security policy applied to the wireless Internet includes the expiration date and time of the mail and information access policies (Read, Write, Copy, Includes various information such as Print etc, Authentication, Authorization, Event Logging, and Self Destruction. The security policy as described above is stored in the mail control center 225 until all of the wireless Internet mails are deleted on the wireless Internet. When the wireless Internet mail to which the security policy is applied is extinguished, the security policy applied to the wireless Internet mail is also deleted. It is deleted.

In particular, the security policies applied to the wireless Internet mail can be changed at any time through the mail control center 225, and the changed security policy can be accessed by the mail recipient through the mail control center 225 for the corresponding wireless internet mail. It is executed immediately in the process of requesting grant.

When the mail receiver accesses the received wireless Internet mail, the mail receiving agent 215 mounted in the mail receiving system 210 tracks all the processes of the mail receiver accessing the received wireless Internet mail, and this information is tracked. Recorded by sending to the mail control center (225). In particular, when the mail recipient attempts to access restricted by the security policy applied to the received wireless Internet mail, the mail receiving agent 215 analyzes the access process and sends the mail to the mail control center 225, thereby providing the mail. The recipient requests the mail control center to grant permission to access the received wireless Internet mail. Then, the mail control center 225 analyzes the security policy applied to the wireless Internet mail, and then transmits a decryption key only for the authorized access to the recipient requesting access permission, thereby applying the wireless internet mail. Enforce security policy.

In particular, according to the present invention, the security policy applied by the initial mail sending system 200 is inherited as it is in the process of transferring the corresponding wireless Internet mail to other recipients. For example, if the original mail sender has authorized the forwarding of wireless Internet mail currently sent through the mail sending system 200 and the mail sending agent 205 to a recipient other than the current recipient, the corresponding mail is received. One mail recipient can forward this to another. However, instead of creating and applying a new security policy to the current recipient who delivers the mail to another recipient, the mail is sent to the other recipients while retaining the security policy that the original mailer applied to that wireless Internet mail.

Therefore, even if the mail sender allows the mail sent by the recipient to be forwarded to another recipient, the mail control center records log records such as which recipients the wireless Internet mail was forwarded to, or which recipient accessed the mail at any time. 225 may be confirmed, and in some cases, the wireless Internet mail sent by the user may be forcibly destroyed on the wireless Internet.

According to the present invention, the mail sending system 200 applies a security policy to the wireless Internet mail, the mail control center 225 enforces a security policy applied to the wireless Internet mail, and the mail receiving system 210 The encryption method used in the process of accessing the wireless Internet mail to which the security policy is applied includes all existing types of encryption methods and algorithms applicable to the wireless Internet, and the present invention is based on a specific encryption method and algorithm. It is not restricted. That is, the encryption scheme, algorithm, and key usage method used in the present invention include all kinds applicable to the wireless Internet. For example, the encryption method applied to the wireless Internet mail can use both a symmetric key encryption method and an asymmetric key encryption method, and can use both an electronic signature method and an electronic envelope method depending on the encryption key usage method, and DES ( Any kind of encryption algorithm can be used, including Data Encryption Standard (RSA), Rivest, Shamir, Adleman (RSA), Digital Signature Algorithm (DSA), and International Data Encryption Algorithm (IDEA).

However, all encryption methods used in the present invention must be applicable to the wireless Internet, and are forged, unforgability, authenticity, non-repudiation, non-reusability, and The cryptographic features and algorithms, such as message integrity, must be fully satisfied.

Hereinafter, the features of the present invention will be described in detail with reference to the accompanying drawings. However, the following drawings and descriptions are for a typical method using a wireless Internet mail system to which a security policy is applied among various methods for properly describing the present invention, and the present invention is not limited to the following drawings and descriptions only.

The following accompanying drawings and descriptions are for the case of transferring wireless Internet mail to which a security policy is applied from the wireless Internet terminal to the wireless Internet terminal, and each wireless Internet terminal uses a terminal storage type wireless Internet mail system. Accordingly, the mail sending system 200 and the mail receiving system 210 are mounted inside the respective wireless Internet terminals, and the wireless Internet mail to which the security policy is applied is a gateway from the wireless Internet terminal on which the mail sending system 200 is mounted. And a mail server 220 to be delivered to the wireless Internet terminal on which the mail receiving system 210 is mounted.

3 shows the wireless Internet mail to which the security policy is applied from the wireless Internet terminal equipped with the mail sending system 200 to the wireless Internet terminal equipped with the mail receiving system 210, and then through the mail control center 225. This is a simple block diagram for enforcing the security policy applied to the mail.

The wireless Internet terminals of the mail sender and the mail receiver are connected to a gateway through a wireless Internet protocol such as WAP or ME, and the gateways connect respective wireless Internet terminals to the mail server 220 and the mail control center 225.

The mail sender's wireless Internet terminal is equipped with a mail sending system 200 capable of sending wireless Internet mail, and the mail sending system 200 is provided with a wireless Internet mail sent through a VM (Virtual Machine) of the corresponding wireless internet terminal. A mail sending agent 205 that can create and apply a security policy is mounted.

The mail sending agent 205 mounted in the mail sending system 200 provides an interface for creating a security policy through the VM mounted in the wireless Internet terminal, and converts the created security policy into executable code. After encrypting and compressing, the encryption key and the decryption key used in the encryption process are transmitted to the mail control center 225 according to a given encryption method.

When the encryption key and the decryption key generated by the mail sending agent 200 are completed to the mail control center 225, the mail sending system 200 transmits the wireless internet mail to which the security policy is applied. Accordingly, the mail is delivered to the mail receiver via the gateway and the mail server 220.

The wireless Internet terminal of the mail receiver is equipped with a mail receiving system 210 capable of processing mail delivered from the mail sender, and the mail receiving system 210 is a mail control center 225 through the VM of the corresponding wireless Internet terminal. The mail receiving agent 215 is configured to enforce the security policy.

The mail receiving agent 215 mounted in the mail receiving system 210 analyzes, in real time, a process of accessing the mail by a wireless Internet mail receiver through a VM mounted in the corresponding wireless Internet terminal, and then analyzes the corresponding mail. It delivers the information to the mail control center 225 to enforce the given security policy. The process is continuously performed while the wireless Internet mail recipient attempts to access the mail.

When the wireless Internet mail recipient makes a request for access to wireless Internet mail received through the mail receiving agent 215, the mail receiving agent 215 analyzes the access request of the wireless Internet mail recipient and transmits the corresponding information to the mail control center ( 225). Then, the mail control center 225 checks whether the access request of the wireless Internet mail recipient violates the applied security policy. If the access request of the wireless Internet mail receiver does not violate the applied security policy, the mail control center 225 transmits the decryption key to the mail receiving agent 215 to enforce the security policy applied to the wireless Internet mail. do. The mail receiving agent 215, which has received the decryption key, executes a policy so that the mail receiver can access the corresponding wireless Internet mail through a given encryption scheme.

In addition, the mail control center 225 may transmit a policy enforcement command to the mail receiving agent 215 according to the security policy applied to the wireless Internet mail. For example, if the expiration time of the mail delivered to the wireless Internet mail recipient exceeds the time or the mail developed by the mail sender needs to be deleted due to the need of the mail sender, the mail receiving agent 215 controls the mail as described above. In the process of requesting the center 225 to enforce the security policy, by transmitting the policy enforcement command to the mail receiving agent 215 instead of the decryption key, the wireless Internet mail stored in the mail receiver can be automatically destroyed.

In addition, if the worm virus is found in the outgoing mail sent from the mail sender, the security policy may automatically transmit a worm virus warning mail and a vaccine, and add a policy to extinguish the worm virus itself.

A worm for checking whether or not the worm virus alert mail, the vaccine automatic transmission policy, the worm virus self-extinguish policy, and the worm virus exist in the sent mail in the process of sending the mail with the security policy to the wireless mail receiving client. The virus pattern information data is transmitted to the mail control center 225, and the mail control center 225 compares the worm virus pattern information data transmitted from the vaccine provider with the worm virus pattern information data and compares the worm virus with the worm virus. You can check the existence.

As a result of checking whether or not a worm virus exists in the sent mail, if the worm virus exists, the automatic execution code mounted in the sent mail is remotely driven from the mail control center 225, so that the worm virus automatic transmission policy or worm virus self-extinguish. Enforce the policy.

4 is a simple block diagram of a mail control center 225 that enforces the security policy of wireless Internet mail.

The mail control center 225 may include a policy update unit 400, a security policy D / B 405, a mail information update unit 410, a mail information D / B 415, a mail information processing unit 420, and a policy enforcement unit ( 425 and a worm virus diagnosis unit 430 or the like.

The policy updater 400 receives and stores the wireless Internet mail security policy generated from the mail sending agent 205 of the mail sending system 200 in the security policy D / B 405 and manages the mail. The sending system 200 may change the security policy for the mail sent by the user through the policy update unit 400 from time to time, and the changed security policy is immediately applied.

The security policy D / B 405 stores a security policy updated by the policy updater 400. The security policy D / B 405 includes security policy information, encryption key, and decryption key for wireless Internet mail to which the security policy is applied. Information about the sender and receiver of the wireless Internet mail is stored, and the wireless Internet mail policy, encryption key, and decryption key are stored until the corresponding wireless Internet mail is completely destroyed on the network.

The mail information updating unit 410 updates the process of accessing the received wireless Internet mail and the processing information of the security policy through the mail receiving agent 215 of the mail receiving system 210. . In particular, when the wireless Internet mail to which the security policy is applied is delivered to a plurality of recipients or retransmitted from the primary recipient to other recipients, the mail information updating unit 410 accesses the mail by all recipients who have received the wireless Internet mail. It updates all the processes and the security policy processing information executed for each mail recipient.

In addition, when the wireless Internet mail receiver attempts to access restricted by the security policy, the mail information update unit 410 forwards the access request of the wireless Internet mail receiver to the policy enforcement unit 425, whereby the policy enforcement unit 425 With reference to security policy D / B 405, the security policy for the wireless Internet mail recipient access request is enforced.

The mail information D / B 415 stores mail access information, security policy processing information, and the like, updated by the mail information updating unit 410, and is stored in the wireless Internet mail delivered to each mail recipient. It keeps track of the recipients' access and checks whether inappropriate methods are being passed to other recipients.

The mail information processing unit 420 provides an interface for the mail sending system 200 to check the security policy and the mail information for the wireless Internet mail to which the security policy is applied, and to perform additional operations. For example, the mail sending system 200 uses the mail information processing unit 420 of the mail control center 225 so that the mail receiving system reads, copies, stores, and prints wireless Internet mail to which the security policy is applied. You can check whether it has been delivered and to which recipients it was delivered, and whether each operation was performed normally according to the security policy applied.

The policy enforcement unit 425 executes a security policy applied to the mail delivered to the mail recipient, and when a request for access to the wireless Internet mail is received from the mail reception agent 215 mounted on the mail recipient, After checking whether the received mail access request violates the security policy applied to the wireless Internet mail, the decryption key for accessing the wireless internet mail to the mail receiving agent 215 for the access allowed by the security policy is sent to the mail receiving agent 215. send.

The worm virus diagnosis unit 430 receives worm virus pattern information data transmitted from the mail sending agent 205 and worm virus pattern information for diagnosing worm virus infection from a vaccine provider, and compares the two data. It detects the presence of worm virus. If, as a result of the comparison, the presence of the worm virus is detected, the automatic execution code mounted in the sent mail is remotely driven from the mail control center 225 to automatically transmit the warning mail and vaccine for the worm virus or the worm virus self extinction. Send a policy command to the mail receiving agent 215.

In particular, when the mail sending system 200 issues an automatic extinction command for the mail sent by the user through the policy update unit 400, the policy execution unit 425 generates an automatic extinguish code for the corresponding wireless Internet mail. By transmitting this to the mail receiving agent 215 of the mail receiving system 210 and executing the automatic extinction code installed in the corresponding wireless internet mail, the wireless internet mail sent by the user can be automatically deleted. Of course, such a wireless Internet automatic extinction command may be pushed to the mail receiving system 210 by the policy execution unit 425, but in most cases, the mail receiving system 210 is the mail control center 225. In the process of connecting to the network, the mail control center 225 and the mail receiving agent 210 of the mail receiving system 210 is automatically executed according to the protocol promised.

5 is a simple flowchart of a process of creating and applying a security policy through the mail sending system 200 and the mail sending agent 205 in the process of sending wireless Internet mail from the mail sender's wireless Internet terminal.

The wireless Internet mail sender creates a wireless Internet mail sent to the mail receiver as shown in FIG. 6 (500). The mail created at this time may be in the form of text for simple message delivery, or may be mail containing an attachment or a script.

When the wireless Internet mail to be sent to the mail recipient is created as shown in FIG. 6, the wireless Internet mail sender decides whether to send the mail by applying a security policy or to send the mail without a security policy (505). If the wireless Internet mail sender decides to write a security policy on the mail (510), the mail sending agent 205 converts the mail sending system 200 to the security policy writing mode as shown in FIG. However, if the mail sender wants to send the mail without security policy (520), the mail is sent to the receiver in the same manner as the existing wireless Internet mail sending process.

According to FIG. 7, the security policy created by the mail sending agent 205 mounted in the mail sending system 200 includes access rights, the number of times, functions in case of policy violation, access time limit, And the expiration time of the mail.

The access right to the outgoing wireless Internet mail is to restrict the recipient's access to the mail. In FIG. 7, only the read and reply to the wireless Internet mail is allowed. That is, the wireless Internet mail recipient who receives the mail as shown in FIG. 6 can only read and reply to the mail, and cannot copy, store, print, and forward the mail to other recipients.

The number of accesses is to limit the number of times that the wireless Internet mail receiver can access the mail for reading or replying. In FIG. 7, the access is limited to only two accesses. Therefore, the wireless Internet mail recipient cannot access the mail more than once unless the mail sender increases the number of accesses.

The policy violation function is an automatic execution code that is applied to the mail when a wireless Internet mail recipient attempts to violate the policy restricted by the security policy or changes it arbitrarily. It is to be automatically destroyed.

The access time limit is a time limit for the wireless Internet mail recipient to access the mail. After the access time limit, only the sender of the mail can access the wireless Internet mail to which the security policy is applied through the mail control center 225. have.

The e-mail expiration time is a time when the wireless Internet mail to which the security policy is applied is automatically deleted on the wireless internet. After the e-mail expiration time, not only the recipient but also the sender cannot access the e-mail. That is, if the mail expiration time is exceeded, the mail to which the security policy is applied no longer exists, and the mail expiration time must be set to infinity in order to prevent the mail from being automatically destroyed.

When the security policy is created through the method as shown in FIG. 7, the wireless Internet mail sender inputs a command to apply the security policy to the sent mail (525). Then, the mail sending agent 205 of the mail sending system 200 encrypts the wireless Internet mail created as shown in FIG. 6 and the security policy created as shown in FIG. 7 as applicable to the wireless Internet (530). The encryption method applied at this time is applicable to the wireless Internet, and the mail sending agent 205 generates an encryption key and a decryption key for accessing the encrypted wireless Internet mail.

As described above, when the wireless Internet mail to which the security policy is applied is encrypted, the mail sending agent 205 transmits the security policy and the encryption key and the decryption key generated during the encryption process to the mail control center 225 as shown in FIG. The policy D / B 405 is stored (535). This process is repeated until the security policy, encryption key, and decryption key are stored in the policy D / B 405 of the mail control center 225, and if the transmission is not completed (540), the wireless policy is applied. Do not send Internet mail.

When the security policy, the encryption key, and the decryption key are transmitted to the mail control center 225 and ready to be executed at any time (545), the mail sending agent 205 transmits the wireless internet mail with the security policy encrypted to the wireless Internet. Compress it into a form usable by 550. When the compression is completed, the mail sending agent 205 sends the wireless Internet mail to which the security policy is applied to the receiver in the same manner as the conventional wireless internet mail sending process (555).

8 illustrates a process of accessing wireless Internet mail received by the wireless Internet terminal through the mail receiving agent 215 and the mail control center 225 of the mail receiving system 210. This is a simple flowchart of the case of enforcing the applied security policy.

According to FIG. 8, there is almost no special operation performed by the wireless Internet mail receiver by arbitrarily operating a keyboard to access the wireless Internet mail to which the security policy is applied, and may be accessed through the same method as that of the existing wireless Internet mail.

When the wireless Internet mail to which the security policy is applied is received at the wireless Internet terminal equipped with the mail receiving system 210 (800), the mail receiver opens the mailbox and selects the wireless Internet mail to which the security policy is applied (805). Of course, this process is the same as the initial process of accessing the existing wireless Internet mail, there may be a slight difference depending on the wireless Internet terminal.

When the wireless Internet mail receiver selects the wireless Internet mail to which the security policy is applied, the mail receiving agent 215 extracts the mail receiver's information and transmits the information to the mail control center 225 (810). The information of the mail recipient is stored inside the terminal, or is stored in the mobile location's Home Location Register (HLR) or the VLR (Visitor Location Register). As described above, when the information of the wireless Internet mail recipient from the mail receiving agent 215 is transmitted to the mail control center 225, the policy enforcement unit 425 of the mail control center 225 is sent from the security policy D / B 405. The security policy applied to the wireless Internet mail received to the mail recipient is extracted (815), and this process is repeated until the security policy extraction is completed normally.

When the extraction of the security policy applied to the wireless Internet mail to which the security policy is applied in the mail control center 225 is completed (820), the mail receiving agent 215 performs all processes and tasks for the wireless Internet mail recipient to access the received mail. And so on (825). At this time, the mail receiving agent 215 checks whether there is a need for an access authorization request to the mail control center 225 among the work of the wireless Internet mail receiver (830). If the mail receiving agent 215 needs to grant access from the access procedure and operation of the wireless Internet mail receiver (835), the mail receiving agent 215 transmits the corresponding information to the mail control center 225. In step 840, the access procedure of the wireless Internet mail receiver is allowed to be permitted by the policy applied to the wireless Internet mail. However, if the access authorization request is not required for the access process and operation of the wireless Internet mail recipient (845), the mail receiving agent 215 transmits all the information generated from the wireless Internet mail recipient to the mail control center 225. The mail information is stored in the mail information D / B 415 (850).

If the access authorization request sent from the mail receiving agent 215 to the mail control center 225 is allowed by the policy applied to the wireless Internet terminal (855), the policy enforcement unit 425 of the mail control center 225 Extracts a decryption key for decrypting the password applied to the wireless Internet mail and transmits the decryption key to the mail receiving agent 215 (860). However, if, on the contrary, the access process and operation of the wireless Internet mail recipient are in violation of the security policy applied to the wireless Internet mail (865), the policy enforcement unit 425 of the mail control center 225 causes the mail receiving agent 215 to cause the mail receiving agent 215 to execute. In operation 870, a message indicating that the wireless Internet mail to which the security policy is applied is not accessible is output to the terminal.

9 is a simple flowchart of a process in which a wireless Internet mail sender tracks the wireless Internet mail sent by him and changes a policy through the mail control center 225.

According to FIG. 9, the tracking of the wireless Internet mail to which the security policy is applied, that is, the mail information confirmation and the security policy change are simultaneously performed. However, this is done at the same time for convenience, and in general, the mail information check and the security policy change are performed independently.

In order to track the wireless Internet mail sent by the wireless Internet mail sender through the mail control center 225 and change the policy, the mail sending system 200 accesses the mail control center 225 (900). In step 905, the wireless Internet mail to be tracked or changed through the mail information processor 420 is selected.

When the mail of the wireless Internet sender to be tracked by the mail control center 225 is selected, the mail information processing unit 420 extracts the information of the corresponding mail from the mail information D / B 415 (910) and the wireless Internet of the mail sender. The mail sending system 200 mounted on the wireless internet terminal outputs the received mail information on the screen (915).

When the mail information check for the wireless Internet mail is completed as described above, the mail sending system 200 determines whether to change the security policy of the wireless Internet mail to which the mail information is output (920). If you want to change the security policy of the wireless Internet mail output mail information (925), the security policy update unit 410 of the mail control center 225, the security policy of the mail in the security policy D / B (405) Extract the data to be sent to the mail sending system 200 (930), and the mail sending system 200 changes the security policy received through the mail sending agent 205 (935).

The process of changing the security policy is the same as the process of creating a security policy as shown in FIG. Update to 405 (940).

The security policy updated as described above is executed in the process of interworking with the mail control center 225 to access the mail for the same wireless Internet mail, and automatically expires after the expiration time of the corresponding wireless Internet mail passes. Is maintained until.

According to the present invention, by establishing a security policy (policy) for the mail sent to the outside through the mail sending agent mounted on the wireless mail sending client, the receiving client receiving the wireless sending mail to access the received mail Permissions may be restricted, and self-destruction code included in the received mail may be executed to cause the received mail to expire on its own, and the wireless mail receiving client may copy, store, print, reply, and otherwise It can enhance and maintain the security of wireless mail that has already been sent, such as allowing only reading functions so that it cannot be delivered to the recipients. In particular, wireless worm virus may become a social problem in the future, such as in the case of wired Internet. In view of the above, By establishing a security policy, if the sender's wireless mail contains a worm or virus, or if the wireless mail itself is a worm virus, the recipient automatically opens the mail and forwards the mail delivered to the recipient before it is exposed to the worm virus. It extinguishes and automatically sends warning mails and vaccines to recipients who are already infected with the worm virus, providing the effect of automatically blocking and destroying the worm virus.

Claims (18)

Creating a security policy for wireless Internet mail in mail sent from the wireless mail originating client; Encrypting the generated security policy from the wireless mail sending client with a given encryption method and applying the same to the sending mail, and sending the sending mail to which the security policy is applied to the wireless mail receiving client; Generating an encryption key and a decryption key for accessing the wireless Internet mail and transmitting the encrypted key and the decryption key to a mail control center on the wireless Internet; Restricting and managing access rights of a receiving client to the outgoing mail to which the mail security policy is applied through an encryption key and a decryption key delivered to the mail control center, the wireless Internet security mail providing comprising: Way. The method of claim 1, And directly deleting, by the wireless mail sending client, the mail delivered to the wireless mail receiving client in accordance with a security policy mounted in the wireless internet mail. The method of claim 1, wherein the security policy, Whether the wireless Internet mail sent from the wireless mail sending client is stored in the mail server or stored in the wireless Internet terminal of the wireless mail receiving client, the same applies regardless of the storage location of the wireless Internet mail. To provide wireless Internet security mail. The method of claim 1, wherein the security policy, Encrypt and mount the access right restriction policy and the automatic extinction policy of the wireless mail receiving client according to a given encryption method for wireless Internet mail sent from the wireless mail sending client to the wireless mail receiving client, and then encrypts the corresponding encryption code. By transmitting a key and a decryption key to the mail control center, the mail control center may restrict the access of the wireless mail receiving client to the wireless Internet mail to which the security policy is applied, and may automatically extinguish in some cases. To provide wireless Internet security mail. The method of claim 1, wherein the security policy, And a method for automatically transmitting a worm virus warning mail and a vaccine and a worm virus self-extinction policy when the worm virus is found in the sent mail. The method of claim 1, When sending the mail with the security policy to the wireless mail receiving client, the automatic transmission policy of the worm virus warning mail and the vaccine, the worm virus self-extinguish policy, and the mail pattern information for confirming the presence or absence of the worm virus in the sent mail. Transmitting data (or worm virus pattern information data) to the mail control center; Receiving wireless mail from the wireless mail sending client by comparing the worm virus pattern information data for diagnosing the worm virus infection transmitted from the vaccine provider in the mail control center with the mail pattern information data transmitted from the wireless mail sending client. Checking whether a worm virus exists in the mail sent to the client; And If a worm virus exists in the mail transmitted from the wireless mail sending client to the wireless mail receiving client with reference to the worm virus existence check result, the automatic execution code mounted in the sent mail is remotely driven from the mail control center. And executing the automatic transmission policy of the worm virus warning mail and the vaccine or the worm virus self-extinguishing policy. The method of claim 1, And mounting a mail sending agent for mounting the security policy for the wireless Internet mail in the outgoing mail and a mail receiving agent for executing the security policy on the wireless mail sending client terminal and the wireless mail receiving client terminal. Characterized in that the wireless Internet security mail providing method. The method of claim 1, wherein the security policy, An expiration date establishment policy of the outgoing mail; A policy for acquiring time, reception time, read time, resent time information of the outgoing mail; Access policy (read, write, copy) for the outgoing mail; Method for providing wireless Internet security mail, characterized in that further comprises the authentication (Authentication), Authorization (Authorization), Event Logging (Event Logging) policy. The method of claim 1, wherein enforcing the security policy comprises: Limiting the right of the wireless mail receiving client to access the received mail; or Executing the self-destruction code included in the received mail so that the received mail disappears by itself; or And only allowing a read function to prevent the wireless mail receiving client from copying, storing, printing, replying to, and forwarding the mail to another recipient. The method of claim 1 or 8, wherein the security policy, A method for providing wireless Internet security mail, characterized in that it is immediately applied to all mails currently sent from the wireless mail sending client and all mails already sent in the past and stored on the wireless mail client side. A mail sending agent for generating a security policy to be applied to an outgoing mail sent from a wireless mail originating client (or a wireless terminal) and mounting the security policy on the outgoing mail; A policy enforcement unit for transmitting, to the wireless mail receiving client, security policy enforcement command data applied to the outgoing mail to which the security policy is applied by the mail sending agent; And a mail reception agent configured to receive a security policy enforcement command transmitted through the policy enforcement unit and to enforce the security policy on the sent mail. The method of claim 11, wherein the security policy, Means for restricting the right of the wireless mail receiving client to access the received mail; or Means for executing the self-destruction code included in the received mail so that the received mail disappears by itself; or And means for allowing only the read function to prevent the mail receiving client from copying, storing, printing, replying, and forwarding the mail to another recipient. The method of claim 11, Security policy processing information for the outgoing mail to which the security policy is applied by the mail dispatch agent, when and how to read, copy, store, and print the outgoing mail, and mail information providing a function of confirming the delivery process of the outgoing mail. Wireless Internet security mail providing system, characterized in that further processing. The method of claim 11, Through the mail receiving agent of the wireless mail receiving client (receiving terminal), the wireless mail receiving client further comprises the step of accessing the received wireless Internet mail and the mail information updating unit for updating the processing information of the security policy Wireless Internet secure mail delivery system. The method of claim 11, And a policy update unit for updating the security policy applied by the mail sending agent. The method of claim 11, wherein the policy enforcement unit, When the request for access to the outgoing mail is received from the wireless mail receiving client, a function of transmitting a decryption key for accessing the wireless Internet mail to the mail receiving agent for the access allowed by the security policy is made. Wireless Internet security mail providing system, characterized in that. The method according to claim 11 or 14 or 15, Stores security policy data updated by the policy update unit, and stores security policy information, encryption key and decryption key for wireless Internet mail to which the security policy is applied, and information about a wireless mail originating client and a wireless mail receiving client. Security policy D / B (Data Base); And And a mail information D / B (Data Base) for storing mail access information and security policy processing information updated by the mail information updating unit. The method of claim 11, Receiving mail pattern information data (or worm virus pattern information data) for confirming whether or not a worm virus exists in the outgoing mail transmitted from the mail sending agent; Receiving worm virus pattern information data capable of diagnosing worm virus infection transmitted from the vaccine provider; The mail transmitted from the wireless mail sending client to the wireless mail receiving client by comparing the mail pattern information data transmitted from the mail sending agent and the worm virus pattern information data for diagnosing whether the virus is infected with a worm virus. The ability to check for the presence of a worm virus; If a worm virus exists in the mail sent from the wireless mail sending client to the wireless mail receiving client with reference to the worm virus check result, the automatic execution code mounted in the sent mail is remotely driven from the mail control center. And providing a worm virus diagnosis unit further comprising a function of transmitting an automatic transmission policy of the worm virus warning mail and a vaccine or a worm virus self-extinguish policy execution command to the mail receiving agent. system.