KR20080068418A - Computer comprising search-blocking function on file system, the service method thereof, and storage media comprising program source thereof - Google Patents

Abstract

A computer having a file system search blocking function, a method of providing file system search blocking service, and a recording medium storing a file system search blocking program source are provided to prevent a specific file or file structure stored in a storage medium of a computer from being searched so as to protect the file or file structure from hacking. A computer(100) includes a storage medium(150) which stores at least one file in a file structure divided into drives according to a predetermined file system and an X-folder processor(173). The X-folder processor hides a part of at least one file, the file structure and the drives, which is selected by a user, such that the part is not searched.

Description

Computer Comprising Search-Blocking Function on File System, the Service Method About, and Storage Media Comprising Program Source kind}

1 is a block diagram of a computer device having a file system search blocking function according to an embodiment of the present invention;

2 is a block diagram of a computer device having a file system search blocking function according to another embodiment of the present invention; and

3 is a view provided to explain the file system search blocking method of the computer device of the present invention.

The present invention provides a file system search blocking function that enhances the protection function of a user's specific file or file structure by preventing a search for a specific file or file structure recorded on a storage medium of a computer device from being searched by a conventional search means. The present invention relates to a recording medium having a computer device and a file system search blocking program source provided therein, and furthermore, to a file system search blocking service method which is a business model connected to an external server.

A personal computer according to an operating system such as Microsoft's Windows, such as Microsoft, stores and manages files in a storage medium based on a predetermined multi-level folder structure.

Ordinary users feel the need to safeguard their own files for special management needs, especially when multiple users use a computer.

Currently known safeguards include setting passwords, such as passwords, or specifying file attributes as hidden. The term 'hidden' herein means to simply not visually search by the file searching means according to the setting of the file searching means, and is to block the access of other users who are somewhat outside of the computer. Therefore, by changing the setting of the search means, anyone can search the file.

In addition, the method of setting a password to block the execution of the file can be exposed to other users by releasing the password, etc., but also to the extent that the contents can be identified from the title by searching the file. .

Recently, with the development of networking, including the Internet, hacking of outsiders through the network also becomes a problem. Various methods for solving problems such as hacking have been proposed, but until now the user has already connected to the network and downloaded various kinds of information, there has not been provided a method that is substantially secured from such hacking.

An object of the present invention is to block a file system search, which enhances the protection function of a specific file or file structure of a user by preventing a search for a specific file or file structure recorded on a storage medium of a computer device from being searched by ordinary search means. The present invention provides a recording medium on which a computer device having a function and a file system search blocking program source are recorded.

Another object of the present invention is to provide a file system search blocking service method which is a business model in which the file system search blocking function is established by connecting to an external server.

In order to achieve the above object, according to the present invention, a predetermined computer device including a storage medium in which at least one file is stored on a file structure divided into at least one drive according to a predetermined file system includes: X-Folder) processing unit.

The expander processor hides a portion selected by the user among at least one file, a file structure, and a drive on the storage medium from being searched.

Another embodiment of the present invention may be formed of a recording medium in which a source of a program that can be installed in a computer device through a predetermined installation process is recorded. Here, the computer device includes a storage medium in which at least one file is stored on a file structure divided into at least one drive according to a predetermined file system. The program source may be configured to hide a portion selected by the user among at least one file, a file structure, and a drive on the storage medium such that the program source is not searched.

The file system search blocking service method of the server according to another embodiment of the present invention is performed through a plurality of steps.

The first step is that a given computer device comprising a storage medium storing at least one file on a file structure divided into at least one drive according to a given file system is connected via the Internet.

In a next step, the server includes a user account for authentication and information of the computer device for use of the search blocking function such that at least one file, file structure, and a portion selected by the user on the storage medium are not searched. An authentication request is received from the computer device.

Thereafter, when there is a match between the received user account and the computer device information among the plurality of registered and stored attribute information, the server determines that the authentication is completed. When it is determined that the authentication is completed according to the determination, the server transmits corresponding authentication completion information to the computer device, and controls the computer device to perform the search blocking function.

In the determining step, it is preferable that the authentication is completed when there is the matching attribute information and is within the registration validity period of the computer device user according to the payment of a predetermined fee.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 is a block diagram of a computer device having a file system search blocking function according to an embodiment of the present invention.

The computer device 100 of the present invention comprises a file system such as files stored in its internal storage medium, a file structure (commonly referred to as a folder), or a drive (e.g., D: \) by means of conventional searching means. It provides a "file system search block function" to prevent searching. The 'file system search blocking function' of the present invention means that a specific file, a file structure or a drive (hereinafter referred to as a 'file structure') is processed in the same way as if it was not deleted or deleted from the beginning, and is simply a normal file search. It is not to be searched by the setting of the means, and even if the setting of the normal file search means is changed, it is not to be searched by the normal file search means. Here, the normal file retrieval means refers to a file retrieval means provided by the operating system of the computer device 100.

Hereinafter, in order to distinguish it from the hiding function of the prior art, the 'file system search blocking' function of the present invention is referred to as an 'X-folder' function. Therefore, hereinafter, the "folder setting" means that the file structure is completely hidden to block the search for the file structure and the like so that no one can check the file without accessing the specific file or procedure. Release means to release the complete hidden of the folder structure and the like.

The computer device 100 of the present invention corresponds to a device for storing and managing a file on a storage medium by a predetermined file system, such as a personal computer, a notebook, a portable multimedia player (PMP), or the like. In this case, the term 'file system' refers to an operating system (hereinafter referred to as an 'operating system') such as Microsoft's Windows series, Apple Computer's Macintosh series, or Linux series. Refers to the rules and systems for storing and managing files on a storage medium or the organization of files on the operating system for them.

All operating systems, including DOS, Windows, OS / 2, Macintosh, and Unix, have a file system, such as FAT16, FAT32, NTFS on Windows, and ext2, raiserFS, and ext3 on Linux. do. Hereinafter, for convenience of description, the computer device 100 of the present invention will be described based on the Windows operating system.

The computer device 100 includes a separate means for the X-folder function, and the user does not search the hidden file system without the user.

Referring to FIG. 1, the computer device 100 of the present invention includes a user interface unit 110, a network interface unit 130, a storage medium 150, and a controller 170.

The user interface unit 110 includes a display unit 111 and an input unit 113.

The display unit 111 displays a predetermined video signal output from the controller 170 to the user. The display unit 111 is a monitor based on an LCD, a liquid crystal display (PDP), a plasma display panel (PDP), a cathode ray tube (CRT), an organic light emitting diode (OLED), and the like. Or a display device.

The input unit 113 is a device for inputting a user's control command and may correspond to a keyboard, a mouse, a tablet, and the like. The input unit 113 receives various control commands from the user and transmits them to the controller 170.

The network interface unit 130 is a device capable of connecting to various networks including the Internet. The network interface unit 130 may correspond to a wired or wireless LAN card.

The storage medium 150 is managed by a file system of the controller 170, and stores a program such as an operating system, files for various application programs, and various user-generated files.

The storage medium 150 may include a memory, a flash memory, a hard disk, and the like, and various storage media may be installed in one computer device 100.

When the storage medium 150 is a hard disk, the storage medium 150 may be divided into several logical drives, and the folder setting may be performed on at least one of several logical drives.

The controller 170 controls the overall operation of the computer device 100 of the present invention. Hereinafter, the function of the control unit 170 based on the file system will be described. For this function, the control unit 170 includes a file system management unit 171 and the folder processing unit 173.

The file system management unit 171 operates when the control system of the user through the input unit 113 relates to the file system, and the program files, data files, folder structures, and types of various drives stored in the storage medium 150. The list of the is displayed to the user through the display unit 111.

The file system manager 171 performs a change and copy of a storage location of a specific file, a change of attribute information, etc. according to a user's command, and displays the result of the execution through the display 111. Normally, a predetermined control command is transmitted to the file system management unit 171 by a user by clicking an icon such as a 'file explorer' on the display unit 111.

The expander processor 173 performs an expander function. The expander processor 173 basically provides a predetermined graphical user interface (GUI) on the display 111 so that a user may input a command related to an expander function. The graphical user interface also includes a click of a specific folder executable file or a click of an icon of the executable file.

In addition, the folder processing unit 173 may limit the user's authority by having the user go through an authentication procedure for using the folder function. The authentication procedure may correspond to a method of using a user account including an ID and a password.

In addition, according to an embodiment, the folder processing unit 173 of the computer device 100 connects to an external network server through the network interface unit 130, and only a user who has been authenticated by the server has an folder function. Can be used. The method of using such an external network server will be described again below.

When the folder processing unit 173 receives the user's request for setting a folder for a specific file structure through the input unit 113, the folder processing unit 173 completely hides the file structure.

The expander processor 173 stores the list of the folder structure, etc., in the storage medium 150 through a separate encryption process. Even if the user instructs the file system manager 171 to display the entire file structure in the storage medium 150, the file structure set by the folder processor 173 is not displayed.

In addition, when the folder processing unit 173 receives the user's release of the folder setting for the specific file structure through the input unit 113, the folder processing unit 173 releases the folder function set for the file structure and the like so as to be searchable in the general explorer. The expander processing unit 173 may provide a list of the folder structure, etc., set through the display unit 111, for a user's command to release the folder. The user may request the folder processing unit 173 to release the folder setting for the selected file structure or the like by selecting a file structure or the like to perform the folder release based on the displayed list.

The function of the expander processor 173 or the expander processor 173 of the computer device 100 of the present invention may be implemented as a computer-processable program. Such a program is installed as one application based on the operating system of a conventional computer device. In other words, a typical computer device operating by an operating system or the like may be the computer device 100 of the present invention by going through the installation process of such a program. Therefore, the present invention can be implemented as a computer-readable recording medium storing a program for implementing the functions of the folder processing unit 173.

The computer apparatus equipped with the file system search blocking function of the present invention has been described above. Hereinafter, another embodiment of the present invention will be described.

2 is a block diagram of a file system search blocking system including a computer device of the present invention.

As described above, the file system search blocking system 200 of FIG. 2 relates to a system in which the user of a specific computer device can use the folder function only when the user is authenticated by a separate server connected to a network. Therefore, when a user wants to use the X-Folder function on his or her computer device, the user must first register his or her attribute information (with a certain fee in some cases) on the server, and then access the server every time to use a predetermined authentication procedure. do.

The above authentication process is performed by relaying the additional folder processing of each computer device between the user and the server, and the processing unit receiving the notification of the completion of authentication according to the authentication process receives and processes the folder command from the user.

Referring to FIG. 2, the file system search blocking system 200 includes at least one computer device and a server 210 connected to the Internet 230. Each computer device is connected to the server 210 via the Internet 230. 2, computer devices 250, 270, and 290 are shown on behalf of at least one computer device.

First, the server 210 includes a database unit 211 and a member authentication unit 213.

The database unit 211 registers, stores, and manages attribute information about pre-registered computer devices 250, 270, and 290. Such attribute information includes user information, computer information of the user, and the like. The user information is for basic user authentication and includes the user's account (ID and password). Computer information is information for identifying the identity of a computer to perform an X-Folder function. The computer information includes MAC (Medium Access Control) address information of the user's computer, central processing unit (CPU) information, and the like. Include. The user may access the server 210 through the Internet 230 and register attribute information for using the folder function through a predetermined registration procedure.

Furthermore, when the folder function is used in a predetermined business model, the attribute information may include payment information of a fee for the use of the folder function. In this case, when used as a business model, a program for the folder function may be provided to the computer devices 250, 270, and 290 through the Internet 230 from the server 210 after the registration process. Of course, the program source of the X-folder function is stored and supplied to the user in a computer-readable recording medium, and the user can implement his / her computer as the computer device of the present invention by installing the corresponding program in his / her own computer.

The member authentication unit 213 performs an authentication function for allowing the user of the computer device 250, 270, or 290 to use the folder function based on the registered attribute information.

For authentication of the connected computer device, the member authentication unit 213 receives the authentication information from the corresponding computer device, and determines whether there is a match with the transmitted authentication information among the attribute information previously registered and stored in the database unit 211. By performing the authentication process. The authentication information is part of user information and computer information previously registered in the database unit 211, and user account and Mac address information are preferable. According to an embodiment, the member authentication unit 213 may determine whether to authenticate by determining whether the user of the user account is the user within the registration validity period according to the payment of a predetermined fee.

Accordingly, when the connected computer device is authenticated, the member authentication unit 213 notifies the computer device of the completion of authentication, thereby controlling the computer device to perform the folder function for the user.

The computer device that has received the authentication completion may display a graphic user interface on the screen (display unit) for allowing the user to use the expander function and receive a command such as setting or releasing the expander from the user.

When the connected computer device is not registered, the member authentication unit 213 notifies the computer device of the incomplete completion. Accordingly, the computer device does not provide the folder function to the user. If the member authentication unit 213 does not match any one of the user account and the Mac address received from the computer device, or if the registration period has passed according to the fee paid, the computer that has not registered the computer device is not registered. It can be determined by the device.

In addition, the member authentication unit 213 may perform a member registration process for a new new user. This new member registration process can be carried out by conventional known methods. However, the user connects to the server 210 using his computer device to use the folder function, and the member authentication unit 213 grasps and registers the computer information of the computer device to be newly registered.

The plurality of computer devices 250, 270, and 290 correspond to the computer device 100 of FIG. 1 and may be described in the same manner. Accordingly, the user interface unit 251, the network interface unit 257, the storage medium 259, and the control unit 261 included in the computer devices 250, 270, and 290 are the same as those of the computer device of FIG. 1. The same function as the user interface unit 110, the network interface unit 130, the storage medium 150, and the controller 170 of the 100 may be described in the same manner.

Since the folder functions of the computer devices 250, 270, and 290 are the same as the folder functions of the computer device 100 of FIG. 1, the following description will focus on user authentication associated with the server 210. In addition, the description will be made mainly on the computer device 250 for convenience of description.

The folder processing unit 265 included in the control unit 261 also performs the same function as the folder processing unit 173 of FIG. 1. However, in order for the user to perform the folder function in his computer device 250, the user must go through a predetermined authentication procedure performed by the server 210, and the folder manager 265 included in the controller 261 is used by the user. Performs a separate function for authentication.

The expander processing unit 265 accesses the server 210 to provide the user with a graphic user interface through the display unit 253 for performing an authentication procedure, and guides the user to input a user account. When the folder processing unit 265 receives a user account from the user, the folder processing unit 265 accesses the server 210 through the network interface unit 257.

The expander processing unit 265 transmits its pre-stored MAC address together with the user account input from the user to the server 210 and requests authentication from the server 210.

When receiving the authentication completion from the server 210, the folder processing unit 265 may display the authentication completion fact to the user through the display unit 253 and provide the user with a graphic user interface for the folder function.

When the folder processing unit 265 receives a message for not authenticating from the server 210, the expander processing unit 265 may display information on the corresponding authentication impossible, information indicating that the folder function cannot be used, guide information for authentication, and the like.

3 is a view provided to explain the file system search blocking method of the computer device of the present invention. Hereinafter, the file system search blocking method of FIG. 3 will be described with reference to FIGS. 1 to 3. In addition, a description will be given based on the computer device 250 among the plurality of computer devices 250, 270, and 290.

When the user approaches the folder processing unit 265 to use the folder function of his computer device 250, the folder processing unit 265 guides the user to input a user account and receives the user account ( S301).

The expander processor 265 transmits the input user account and the MAC address of the computer device 250 to the server 210 to request authentication (S303).

When the server 210 receives the authentication request from the connected computer device 250, the server 210 checks whether any of the registered attribute information matches the information included in the authentication request. According to an embodiment, the server 210 may additionally check whether or not it is within a registration valid period based on payment information of the user of the corresponding computer device 250 (S305).

The server 210 transmits an authentication result (authentication completed or impossible to authenticate) to the computer device 250 that requested the authentication, based on the determination result of step S305 (S307).

The expander processing unit 265 of the computer device 250 receives the authentication result transmitted from the server 210 through the network interface unit 257, and determines whether the corresponding authentication result is authentication completion (S309).

If the determination result of step S309 is the authentication completion, the folder processing unit 265 provides the user with a graphical user interface so that the user can use the folder function (S311).

If the determination result of step S309 is not the authentication completion, the X-folder processing unit 265 provides the user with information such as the fact that authentication is not possible and the guidance for authentication, and does not provide an X-folder function (S313). ).

By the above method, the file system search blocking function (ex folder function) of the computer device of the present invention is performed.

The invention can be implemented in methods, devices and systems. In addition, when the present invention is implemented in computer software, the components of the present invention may be replaced with code segments necessary for performing necessary operations. The program or code segment may be stored in a medium that can be processed by a microprocessor and transmitted as computer data coupled with carrier waves via a transmission medium or communication network.

The media that can be processed by the microprocessor include electronic circuits, semiconductor memory devices, ROMs, flash memory, electrically erasable programmable read-only memory (EEPROM), floppy disks, optical disks, and hard disks. (Hard) Includes the ability to transmit and store information such as disks, fiber optics, wireless networks, and the like. Computer data also includes data that can be transmitted over electrical network channels, optical fibers, electromagnetic fields, wireless networks, and the like.

In addition, although the preferred embodiment of the present invention has been shown and described above, the present invention is not limited to the above-described specific embodiment, the technical field to which the invention belongs without departing from the spirit of the invention claimed in the claims. Of course, various modifications can be made by those skilled in the art, and these modifications should not be individually understood from the technical spirit or the prospect of the present invention.

As described in detail above, the present invention prevents a search for a specific file or file structure recorded on a storage medium of a computer device from being searched by a conventional search means, thereby allowing a user to search for a specific file and file structure of another user or the Internet. You can protect it from hacking.

In addition, this function can be presented as a new business model by only having the computer registered on the external server.

Claims (4)

A predetermined computer device including a storage medium storing at least one file on a file structure divided into at least one drive according to a predetermined file system. And an X-folder processing unit to hide a portion selected by the user among at least one file, a file structure, and a drive on the storage medium. A computer device including a storage medium in which at least one file is stored on a file structure divided into at least one drive according to a predetermined file system, on a recording medium on which a source of a program that can be installed through a predetermined installation process is recorded. In The program source, And a function of hiding at least one of a file, a file structure, and a drive selected by a user from the storage medium such that the selected part of the storage medium is not searched. Connecting a predetermined computer device including a storage medium storing at least one file on a file structure divided into at least one drive according to a predetermined file system through the Internet; Requesting an authentication request including information of the user device for authentication and information of the computer device for use of the search blocking function to prevent the selected part of the at least one file, file structure and drive on the storage medium from being searched; Receiving from the device; Determining that authentication is complete when there is a match between the received user account and computer device information among a plurality of previously stored attribute information; If it is determined that the authentication is completed, transmitting the corresponding authentication completion information to the computer device, and controlling the computer device to perform the search blocking function. Block service method. The method of claim 3, wherein The determining step, And determining that the authentication is completed when the matching attribute information exists and is within the registration validity period of the computer device user according to payment of a predetermined fee.

Images