KR20100006458A - User defined type information security service system and method - Google Patents

Abstract

PURPOSE: A user customized information security service system and a method thereof are provided to register a work characteristic and a security service per a department, thereby quickly providing work contents and a customized information security service of a specific department. CONSTITUTION: A work characteristic database(110) stores information handled in a corresponding department according to work contents and characteristics per a department. A security service database(120) stores a security service defined for security of information that the corresponding department handles. An information security server(130) searches a security service corresponding to handling information of the corresponding department through the work characteristic database and the security service database and provides it to a user.

Description

User defined type information security service system and method}

The present invention relates to a customized information security service system and method, and more specifically, to analyze in advance departmental work characteristics, derive and define a security service that can be provided and utilized for enhanced security, grouping and registering a database, and registering a specific department. The present invention relates to a customized information security service system and method for promptly providing a customized information security service suited to the business content and characteristics of a specific department when a request is made for an information security service.

In general, in each department, the security of the information to handle the task is often required.

In the past, the unit information security service was managed separately, so that the security service could not be provided unless the person in charge of the security service.

Accordingly, when a specific department requested information security service, the service representatives analyzed the characteristics of the department together and decided whether each information security service was required and how to provide it.

Therefore, there is a problem that a lot of time and effort of many people are required to provide the information security service.

In order to solve the above problems, the present invention analyzes the business characteristics of each department in advance, derives and defines a security service that can be provided and utilized for enhanced security, and groups and registers the database, and requests information security services from specific departments. The purpose is to provide a customized information security service system and method, which enables the rapid provision of a customized information security service suited to the business content and characteristics of the specific department.

Information security service system according to the present invention for solving the above object, the business characteristic database that stores and stores the information handled by the department according to the business content and business characteristics of each department; A security service database storing a security service defined for security of information handled by the corresponding department; And classifying the work contents and the business characteristics for each department so as to be stored in the business characteristic database as information handled by the corresponding department, and controlling the security service to be stored in the security service database corresponding to the information handled by the corresponding department. And an information security server that searches for and provides a security service corresponding to the handling information of the corresponding department through the work characteristic database and the security service database when a user requests the information security service of the corresponding department. do.

The information security server analyzes the work content and work characteristics of each department, classifies the information handled by the corresponding department based on the analysis result, and the work characteristics of each department based on the analyzed result and the classified results. A matrix is constructed and stored in the business characteristic database.

In addition, the information security server derives a security service that can be provided and utilized for the security of information handled by the department, and defines the security service according to the function, configuration, and process of the department.

In addition, the information security server groups the security services according to the business life cycle of the corresponding department and stores them in the security service database.

The apparatus may further include a client terminal accessing the information security server for each department or user and requesting an information security service to receive the information security service from the information security server.

In addition, the information security server extracts a formal security service for each department according to a business life cycle, department characteristics, handling information, and business content from the business characteristic database and the security service database, and provides the same to the client terminal.

In addition, the information security server provides the client terminal with the extracted departmental formalized security service as a security service group suitable for an individual department.

In addition, the information security server provides the client terminal with query terms relating to work life cycle, department characteristics, handling information, and work contents, and receives input of the granular query words from the client terminal.

The information security server analyzes the granular query word selected and input from the client terminal, searches for a security service corresponding to the granular query word through the work characteristic database and the security service database, and tailors it to the client terminal. Provide security service groups.

On the other hand, the information security server according to the present invention for achieving the above-described object, the data input and output by communicating with the security service database storing the business characteristic database and the predefined security service for storing information handled by each department An information security server, comprising: a communication unit for communicating with the business characteristic database, the security service database, and a client terminal; An input unit configured to receive data or a command for the data input / output; A work characteristic classification unit for classifying work content and work characteristics of each department; An information classification unit for classifying information handled for each department; A security service extraction unit for extracting a security service that can be provided and utilized for the security of the information; Control the information to be handled by the department to be stored in the work characteristic database corresponding to the work content and work characteristics of each department, and to control the security service to be stored in the security service database corresponding to the information handled by each department, A controller for searching for a security service corresponding to information handled by each department and providing the same to the client terminal when the information security service is requested from the client terminal; And a security service provider that provides a security service corresponding to the information handled by each department.

In addition, the control unit, the business characteristic matrix for each department based on the result of analyzing the work content and business characteristics of each department through the business characteristic classification unit, and the information to be handled for each department through the information classification unit is classified into It is configured and stored in the business characteristic database.

The control unit may define the security service according to a function, configuration, or process of each department, for the security service extracted through the security service extraction unit to secure the information handled by each department. Will be stored in.

The control unit may group security services according to the business life cycle of each department and store the security services in the security service database.

In addition, the controller extracts a formal security service for each department according to a business life cycle, department characteristics, handling information, and business content from the business characteristic database and the security service database, and provides the same to the client terminal.

The control unit may provide the client terminal with the extracted departmental standardized security service as a security service group suitable for an individual department.

The control unit may provide the client terminal with a query word relating to a work life cycle, department characteristics, handling information, and work content, and receive a selection of a query word from the client terminal.

The controller may analyze a query word selected and input from the client terminal, search for a security service corresponding to the query word through the work characteristic database and the security service database, and provide a customized security service group to the client terminal. do.

On the other hand, the client terminal according to the present invention for achieving the above object, a communication unit for communicating with an information security server for providing an information security service; An input unit for selecting and inputting a query for requesting the information security service and the information security service; A display unit for displaying an information security service provided from the information security server on a screen; And a control unit controlling a request for the information security service, a selection input of the query word, and a display of the information security service.

The control unit selects and inputs the granular query terms related to the work life cycle, department characteristics, handling information, and work contents from the user to the information security server through the input unit.

According to the present invention, it is possible to analyze the business characteristics of the department to provide an information security service for the department in real time.

In addition, even when there is a request for information security service as a query word for information security of the corresponding department, an information security service customized to the query word may be provided in real time through query analysis.

In addition, the time for providing the information security service is shortened, the accuracy is increased, and the manpower cost for the information security service can be greatly reduced.

Details of the object and technical configuration of the present invention and the resulting effects thereof will be more clearly understood by the following detailed description based on the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram schematically showing the configuration of an information security service system according to an embodiment of the present invention.

Referring to FIG. 1, the information security service system 100 according to the present invention includes a business characteristic database 110, a security service database 120, an information security server 130, a communication network 140, and a client terminal 150. It includes.

The work characteristic database 110 classifies and stores information handled by a corresponding department according to work content and work characteristics of each department.

Security service database 120 stores a security service defined for the security of information handled by the department.

The information security server 130 classifies the work content and work characteristics of each department and controls it to be stored in the work characteristic database 110 as information handled by the corresponding department, and the security service database corresponding to the information handled by the security department. Security information corresponding to the handling information of the department is controlled to be stored in the 120, the client terminal 150, the request of the information security service of the corresponding department from the work characteristic database 110 and the security service database 120 Search for and provide it to the client terminal 150.

In addition, the information security server 130 analyzes the work content and business characteristics of each department, classifies the information handled by the department based on the analysis result, and the business characteristics of each department based on the analysis results and the classified results. The matrix is configured and stored in the business characteristic database 110.

In addition, the information security server 130 derives a security service that can be provided and utilized for the security of information handled by the department, and defines the security service according to the function, configuration, and process of the department.

In addition, the information security server 130 stores the security services in the security service database 120 by grouping the security services according to the business life cycle of the department.

In addition, the information security server 130 extracts the standardized security service for each department according to the business life cycle, department characteristics, handling information, and business content from the business characteristic database 110 and the security service database 120, and then the client terminal ( 150).

In addition, the information security server 130 provides the extracted departmental formalized security service to the client terminal 150 as a security service group suitable for each department.

In addition, the information security server 130 provides the client terminal 150 with a query word relating to a work life cycle, department characteristics, handling information, and work content, and receives a selected query word from the client terminal 150.

In addition, the information security server 130 analyzes the granular query selected and received from the client terminal 150 and performs a security service corresponding to the granular query through the work characteristic database 110 and the security service database 120. The search provides the client terminal 150 with a customized security service group.

The communication network 140 provides a connection path so that the client terminal 150 can access the information security server 150 and receive the information security service.

In this case, when the client terminal 150 is a mobile terminal, the communication network 140 may be a mobile communication network such as WCDMA, and when the client terminal 150 is a wired terminal such as a PC, the communication network 140 may be connected to the Internet. It can be a wired network.

The client terminal 150 requests the information security service by accessing the information security server 130 for each department or user, and receives the information security service from the information security server 130.

2 is a block diagram illustrating a functional block in which an information security server according to an embodiment of the present invention is configured according to a function.

Referring to FIG. 2, the information security server 130 according to the present invention includes a communication unit 202, an input unit 204, a work characteristic classifier 206, an information classifier 208, and a security service extractor 210. , A control unit 212 and a security service providing unit 214.

The communication unit 202 communicates with the business characteristic database 110, the security service database 120, and the client terminal 150.

The input unit 204 receives a data or command for data input / output.

The work characteristic classification unit 206 classifies work content and work characteristics for each department.

The information classification unit 208 classifies information handled by department.

The security service extractor 210 extracts a security service that can be provided and utilized for the security of information.

The control unit 212 controls the information handled by departments to be stored in the work characteristic database 110 to correspond to the work content and work characteristics of each department, and the security service database security service database 120 corresponding to the information handled by each department Control to be stored in

In addition, the control unit 212, when the request for the information security service from the client terminal 150, controls to be provided to the client terminal 150 to search for a security service corresponding to the information handled by each department.

In addition, the control unit 212 is based on the results of analyzing the work content and business characteristics of each department through the business characteristic classification unit 206, and the information to be handled for each department through the information classification unit 208 is based on each result A departmental work characteristic matrix is configured and stored in the work characteristic database 110.

In addition, the control unit 212 defines a security service according to the function, configuration, and process of each department for the security service extracted through the security service extraction unit 210 to secure the information handled by each department, security service database It is stored at 120.

In addition, the controller 212 stores the security services in the security service database 120 by grouping the security services according to the business life cycle of each department.

In addition, the control unit 212 extracts a formalized security service for each department according to the business life cycle, department characteristics, handling information, and business content from the business characteristic database 110 and the security service database 120 to the client terminal 150. Will be provided.

In addition, the controller 212 provides the extracted departmental formalized security service to the client terminal 150 as a security service group suitable for an individual department.

In addition, the controller 212 provides the query terminal regarding the work life cycle, the department characteristics, the handling information, and the work content to the client terminal 150, and receives the selected query word from the client terminal 150. In addition, the controller 212 analyzes the selected query word from the client terminal 150, searches for the security service corresponding to the query word through the work characteristic database 110 and the security service database 120, and then searches the client terminal 150. Will provide customized security service groups.

The security service provider 214 may provide a security service corresponding to information handled by each department.

Figure 3 is a functional block diagram showing the internal configuration of the client terminal according to the function according to the present invention.

Referring to FIG. 3, the client terminal 150 according to the present invention includes a communication unit 310, an input unit 320, a display unit 330, a control unit 340, and a storage unit 350.

The communication unit 310 communicates with the information security server 130 that provides the information security service.

The input unit 320 selects and inputs a query to receive a request for an information security service and an information security service.

The display unit 330 displays the information security service provided from the information security server 130 on the screen.

The controller 340 controls the request for the information security service, the selection input of the query word, and the display of the information security service.

In addition, the controller 340 selects and inputs a subdivided query word related to a work life cycle, department characteristics, handling information, and work contents from the user through the input unit 320 and transmits the selected query word to the information security server 130.

The storage unit 350 stores data about the information security service received from the information security server 130.

4 is a flowchart illustrating a customized information security service method according to an embodiment of the present invention.

Referring to FIG. 4, first, the information security server 130 analyzes a business characteristic as shown in FIG. 5 based on the work content of each department received from an administrator (S410) and treats each department based on the analyzed result. Classify the information into a database and store it in the business characteristic database (110) (S420). 5 is a view showing a process of analyzing and analyzing the business characteristics of each department according to an embodiment of the present invention to a database.

At this time, the administrator who manages the information security server 130 connects the storage medium recording the business content of each department in the company to the information security server 130, and then from each storage unit to the information security server 130 for each department Can provide work content. In addition, an administrator may input work content of each department to the information security server 130.

The information security server 130 configures a work characteristic database for each department as shown in FIG. 5 based on a result of analyzing work characteristics of each department and a result of classifying information handled by each department. ).

In addition, the information security server 130 derives a security service that can be provided and utilized as shown in FIG. 6 for the security of information handled by each department (S410), and the function or function of each department for the derived security service. Define according to the configuration, the process, and grouped according to the business life cycle of each department and stored in the security service database 120 to make a database (S420). 6 is a diagram illustrating deriving, grouping, and storing a security service in a database according to an embodiment of the present invention.

Meanwhile, the client terminal 150 accesses the information security server 130 and requests the information security service according to the user's operation to receive the security service according to the information handled by each department (S430).

On the other hand, the information security server 130 is to provide a security service corresponding to the information handled by each department, as shown in FIG. 7, according to the life cycle of the work, department characteristics, handling information, work content by department The standardized security service is extracted and provided to the client terminal 150 (S440). 7 is a diagram illustrating providing a standardized departmental security service for each department according to an embodiment of the present invention.

In this case, the information security server 130 provides the extracted standardized security service for each department to the client terminal as a security service group suitable for each department as shown in FIG. 7.

In addition, the information security server 130 may provide the client terminal 150 with a query word about a work life cycle or a department characteristic, handling information, and work content for the information security service (S440).

Accordingly, the client terminal 150 may selectively input the refined query word as shown in FIG. 8 (S450). 8 is a diagram illustrating providing a customized security service group corresponding to a query selection input according to an embodiment of the present invention.

Therefore, the information security server 130 analyzes the granular query selected and input from the client terminal 150, searches for the security service corresponding to the fragmented query from the security service database 120 according to the analysis result, and the client terminal. Provide a customized security service group to 150 (S460). That is, the information security server 130 does not provide a single service item for the information security service corresponding to the query, but, for example, in the case of the work of the planning department, the law, tax, administration, etc. related thereto are customized. It is provided as a service group.

As those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features, the embodiments described above should be understood as illustrative and not restrictive in all aspects. Should be. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

The present invention can be applied to an information security system that must handle the security of information for each department in a company having a plurality of departments. In addition, it can be applied to a system that takes a long time due to information security issues. It can also be applied to systems that require a lot of manpower to handle information security.

1 is a configuration diagram schematically showing the configuration of an information security service system according to an embodiment of the present invention.

2 is a block diagram illustrating a functional block in which an information security server according to an embodiment of the present invention is configured according to a function.

3 is a functional block diagram showing the internal structure of the client terminal according to the function according to the present invention.

4 is a flowchart illustrating a customized information security service method according to an embodiment of the present invention.

5 is a view showing a process of analyzing and analyzing the business characteristics of each department according to an embodiment of the present invention to a database.

6 is a diagram illustrating deriving, grouping, and storing a security service in a database according to an embodiment of the present invention.

7 is a diagram illustrating providing a standardized departmental security service for each department according to an embodiment of the present invention.

8 is a diagram illustrating providing a customized security service group corresponding to a query selection input according to an embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

100: information security service system 110: business characteristics database

120: security service database 130: information security server

140: communication network 150: client terminal

202: communication unit 204: input unit

206: work characteristic classification unit 208: information classification unit

210: security service extraction unit 212: control unit

214: security service provider 310: communication unit

320: input unit 330: display unit

340: control unit 350: storage unit

Claims (30)

A business characteristic database that stores and classifies information handled by the department according to the business content and business characteristics of each department; A security service database storing a security service defined for security of information handled by the corresponding department; And Classify the work content and work characteristics of each department and control the data to be stored in the work characteristic database as information handled by the corresponding department, and control the security service to be stored in the security service database corresponding to the information handled by the corresponding department; An information security server that searches for and provides a security service corresponding to the handling information of the corresponding department through the business characteristic database and the security service database when a user requests the information security service of the corresponding department; Information security service system comprising a. The method of claim 1, The information security server analyzes the work content and work characteristics of each department, classifies the information handled by the corresponding department based on the analyzed result, and calculates a work characteristic matrix of each department based on the analyzed result and the classified results. And storing the data in the work characteristic database. The method of claim 1, The information security server derives a security service that can be provided and utilized for the security of information handled by the department, and defines the security service according to the function, configuration, and process of the department. Service system. The method of claim 3, wherein The information security server, the information security service system, characterized in that for grouping the security service according to the business life cycle (Life Cycle) of the department to store in the security service database. The method of claim 1, A client terminal accessing the information security server for each department or user and requesting an information security service, and receiving an information security service from the information security server; Information security service system further comprises. The method of claim 5, wherein The information security server extracts and provides a formal security service for each department according to a business life cycle, department characteristics, handling information, and business content from the business characteristic database and the security service database and provides the same to the client terminal. Security service system. The method of claim 6, The information security server, the information security service system, characterized in that for providing the extracted security service for each department to the client terminal in a security service group suitable for each department. The method of claim 5, wherein The information security server is an information security service system, characterized in that to provide the client terminal with query terms relating to work life cycle, department characteristics, handling information, and work content, and to receive input of a granular query term from the client terminal. The method of claim 8, The information security server analyzes the granular query selected and input from the client terminal, searches for a security service corresponding to the granular query through the business characteristic database and the security service database, and tailors the security service to the client terminal. An information security service system comprising providing a group. An information security server that controls data input and output by communicating with a business characteristic database that stores information handled by each department and a security service database that stores predefined security services. A communication unit for communicating with the business characteristic database, the security service database, and a client terminal; An input unit configured to receive data or a command for the data input / output; A work characteristic classification unit for classifying work content and work characteristics of each department; An information classification unit for classifying information handled for each department; A security service extraction unit for extracting a security service that can be provided and utilized for the security of the information; Control the information to be handled by the department to be stored in the work characteristic database corresponding to the work content and work characteristics of each department, and to control the security service to be stored in the security service database corresponding to the information handled by each department, A controller for searching for a security service corresponding to information handled by each department and providing the same to the client terminal when the information security service is requested from the client terminal; And A security service provider for providing a security service corresponding to the information handled by each department; Information security server comprising a. The method of claim 10, The control unit configures a work characteristic matrix for each department based on a result of analyzing the work content and the work characteristic of each department through the work characteristic classification unit and the result of classifying the information handled by each department through the information classification unit. Information security server, characterized in that for storing in the business characteristic database. The method of claim 10, The control unit defines the security service according to a function, configuration, and process of each department and stores the security service extracted through the security service extraction unit for security of information handled by each department, and stores the security service in the security service database. Information security server, characterized in that. The method of claim 12, The control unit may group security services according to a business life cycle of each department and store the security services in the security service database. The method of claim 10, The control unit extracts a standardized security service for each department according to a business life cycle, department characteristics, handling information, and business content from the business characteristic database and the security service database, and provides the same to the client terminal. . The method of claim 14, The controller provides the extracted security service for each department to the client terminal as a security service group suitable for an individual department. The method of claim 10, The control unit is configured to provide a query word related to a work life cycle, department characteristics, handling information, and work content to the client terminal, and to receive a selection of a query word from the client terminal. The method of claim 16, The controller analyzes a query word selected and input from the client terminal, searches for a security service corresponding to the query word through the work characteristic database and the security service database, and provides a customized security service group to the client terminal. Information security server. A communication unit for communicating with an information security server that provides an information security service; An input unit for selecting and inputting a query for requesting the information security service and the information security service; A display unit for displaying an information security service provided from the information security server on a screen; A storage unit which stores data relating to an information security service received from the information security server; And A control unit controlling a request for the information security service, a selection input of the query word, and a display of the information security service; Client terminal comprising a. The method of claim 18, The control unit, the user terminal via the input unit, characterized in that the selected query for the business life cycle, department characteristics, handling information, work content and input to the information security server, characterized in that for transmitting to the information security server. (a) storing the information handled by each department in a database; (b) database-saving a security service defined for the security of the information; And (c) providing a security service corresponding to the information handled by the department; Customized information security service method comprising a. The method of claim 20, In the step (a), the business content and business characteristics of each department are analyzed, and based on the analysis result, the personalized information security service method characterized in that the classification and storing the information handled by each department. The method of claim 20, The step (a), the personalized information security service method, characterized in that for constructing and storing the business characteristic matrix for each department based on the analysis result and the classified result. The method of claim 20, In step (b), a security service that can be provided and utilized for the security of information handled by each department is derived, and the security service defined according to the function, configuration, and process of each department is stored as a database. Customized information security services. The method of claim 23, The step (b), the personalized information security service method characterized in that for storing the security services grouped according to the business life cycle (Life Cycle) of each department. The method of claim 20, The step (c) is a customized information security service method, characterized in that for extracting the standardized security services for each department according to the business life cycle, department characteristics, handling information, work content and provide them to the client terminal. The method of claim 25, In the step (c), the information security service method according to claim 1, wherein the standardized security service for each department is provided to the client terminal as a security service group suitable for an individual department. The method of claim 20, In the step (c), the personal information security service method comprising providing a query word related to a work life cycle, department characteristics, handling information, and work content to a client terminal, and receiving a selected query word from the client terminal. The method of claim 27, In the step (c), the granular query selected by the client terminal is analyzed, and a security service corresponding to the granular query is searched according to the analysis result to provide a customized security service group to the client terminal. Customized information security services. An information security service method of a client terminal that communicates with an information security server that stores a database of information handled by each department and stores a database of security services defined for the security of the information. (a) requesting an information security service from the information security server; (b) receiving a query from the information security server; (c) sending a selection input for the query to the information security server; And (d) receiving an information security service corresponding to the query word from the information security server; Information security service method of a client terminal comprising a. The method of claim 29, In the step (c), the client terminal receives the granular query terms related to the work life cycle, department characteristics, handling information, and work contents, and transmits them to the information security server.

Images