KR20100011142A - Resource security system and resource security method - Google Patents

Abstract

PURPOSE: A resource security system and a resource security method are provided to require a access to a resource by supplying cooki file including the authentication result and access authority information from an authorization control server. CONSTITUTION: External devices(100a,100b) require an access to a resource stored inside a predetermined terminal device. An authorization control server(200) stores certification-related information according to the kind of terminals. The authorization control server authorizes the access to the external devices according to access-request based on the certification-related information. The authorization control server offers access authority information access to the resource corresponding to the external device. The terminal device(300) receives a access-request signal according to the access authority information requesting the access to resource from the external device. The terminal device permits the access to the resource from the external device based on the access authority information.

Description

Resource Security System and Resource Security Methods {RESOURCE SECURITY SYSTEM AND RESOURCE SECURITY METHOD}

The present invention relates to a resource security system. More particularly, when a resource inside a wireless terminal device is disclosed to an external device in an Internet environment, a security scheme suitable for and effective in consideration of the unique characteristic environment of a wireless mobile communication environment is provided. The present invention relates to a resource security system and a resource security method that can be provided, an authentication management server and a terminal device supporting the same, and a control method thereof.

In a WCDMA environment, each wireless communication terminal device has a unique IP. In such an environment, the terminal device may open resources, such as data or services, to the Internet environment so that other external devices can access and use the resources. As such, when releasing resources inside a terminal device to an external device including another external device, a security method for authenticating whether the external device is a legitimate user is required.

On the other hand, in the existing wired communication environment, in order for external external devices to access resources embedded in the terminal device, an additional user authentication module is provided in the corresponding terminal device and the terminal device itself is requested when access from the external device is requested. It adopts a security method that uses the user authentication module to authenticate / determine whether the corresponding external device is a user with appropriate authority. However, it is not appropriate to apply this security method to a wireless communication environment as it is.

That is, unlike a general PC environment and a wired communication environment, in a wireless communication environment, when a terminal device communicates with another external device through an internet network and performs data communication, a relatively expensive network usage fee must be paid. In addition, unlike the general wired communication environment, since the wireless communication environment uses a limited amount of battery for the mobility of the terminal device, when the terminal device maintains a connection state with other external devices, the battery amount may be insufficient. have.

Therefore, when the security method adopted in the conventional wired communication environment is applied to the wireless communication environment as it is, when the external device requests access to the resource of the terminal device through the network, the terminal device maintains a connection with the external device. Because the authentication process must be performed according to the security method, the network usage will increase, resulting in a problem in terms of battery usage and the cost of using the network.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an authentication for storing authentication-related information for each terminal device when an external device requests access to a resource stored in a predetermined terminal device. When the management server is requested to access the resource from the external device, the management server authenticates whether the external device is allowed to access the terminal device based on the authentication related information. When the access right information is received from the authentication management server, the external device provides an access request signal according to the access right information to the terminal device. The terminal device receives the access request signal for requesting access to a resource from the external device. And a resource security system and a resource security method including a configuration for allowing access from the external device to the resource based on the access right information of the access request signal. It is to provide a security method suitable for a wireless communication environment by reducing.

The present invention has been made in view of the above circumstances, and another object of the present invention is to provide an authentication related information manager for pre-store authentication related information for each terminal device and an internal device of a predetermined terminal device from an external device connected from the outside. When the access to the resource stored in the request is requested, the external device authenticates whether the external device is allowed to access the terminal device based on the authentication related information of the authentication related information manager, and if the connection is allowed, the terminal device. By providing a control method of the authentication management server and the authentication management server including an authentication manager for providing the access authority information of the external device to the external device of the resource, wireless communication by reducing the network usage of the terminal device during the authentication procedure It is to provide a security method suitable for the environment.

The present invention has been made in view of the above circumstances, and another object of the present invention is to request access to at least one resource and the at least one resource stored therein from an external device connected from the outside. When the access request signal according to the predetermined access authority information is received, the terminal device and a control device including a built-in web server that allows access from the external device to the at least one resource based on the access authority information The present invention provides a security method suitable for a wireless communication environment by reducing network usage of a terminal device when performing an authentication procedure.

According to a first aspect of the present invention, there is provided a resource security system comprising: an external device for requesting access to a resource stored in a predetermined terminal device; Pre-store authentication-related information for each terminal device, and upon requesting access to the resource from the external device, authenticates whether the external device is allowed to access the terminal device based on the authentication-related information, and access is established. An authentication management server that provides access authority information of the external device to the external device with respect to the resource of the terminal device, when permitted; And a terminal device for allowing access from the external device to the resource based on the access right information when receiving an access request signal according to the access right information requesting access to a resource from the external device. do.

Preferably, the external device requests a connection to the authentication management server to request access to a resource stored in the terminal device, and a password input for accessing the terminal device is requested from the authentication management server. If it is possible to provide a password input by the user to the authentication management server.

Preferably, when the external device receives a cookie file including at least one of an authentication result of authenticating whether the external device is allowed to access the terminal device and the access right information from the authentication management server. The cookie file may be stored, and the access request signal may be provided to the terminal device based on the cookie file according to a redirection signal to the terminal device received from the authentication management server.

Preferably, the authentication related information stored for each terminal device, the external device list information that can be connected to the terminal device for each terminal device, password information for authenticating the connection to the terminal device, the external device that can be connected to the terminal device It may include at least one of the access authority information for the resource for each device.

Preferably, when access to a resource stored in a predetermined terminal device is requested from the external device, authentication management server address information for accessing a corresponding authentication management server managing the authentication of the terminal device to the external device. A DNS server for replying further; The external device may access the authentication management server based on the authentication management server address information returned from the DNS server in response to a request for access to a resource stored in the terminal device.

Authentication management server according to a second aspect of the present invention for achieving the above object, the authentication-related information manager for pre-store authentication-related information for each terminal device; And when access to a resource stored in a predetermined terminal device is requested from an external device connected from the outside, whether the external device is allowed to access the terminal device based on the authentication related information of the authentication related information manager. And an authentication manager for providing access authority information of the external device to the external device with respect to the resource of the terminal device when access is permitted.

Preferably, the authentication related information manager, for each terminal device to the external device list information that can be connected to the terminal device, password information for authenticating the connection to the terminal device, resources for each external device that can be connected to the terminal device The authentication related information including at least one of the access authority information for the can be stored.

Preferably, the authentication manager is based on the external device list information that can be accessed from among the authentication-related information corresponding to the terminal device stored in the authentication-related information manager to the external device that can be connected to the terminal device. If not applicable, request a password input from the external device to compare the password received from the external device with password information among authentication related information corresponding to the terminal device, and allow the external device to access the terminal device. Can be authenticated.

Preferably, the authentication manager provides a cookie file to the external device, the cookie file including the authentication result and the access authority information that the external device is authenticated whether the connection to the terminal device is permitted. A redirection signal may be provided to the external device to induce connection of the device.

Preferably, further comprising a connection address information manager for pre-store the connection address information for connecting to the terminal device for each terminal device; The authentication manager obtains access address information corresponding to the terminal device requested by the external device from the access address information of the access address information manager, and provides the redirection signal including the access address information to the external device. can do.

Terminal device according to a third aspect of the present invention for achieving the above object, at least one resource; And when an access request signal according to predetermined access right information for requesting access to the at least one resource stored therein is received from an external device connected from the outside, the access request information for the at least one resource based on the access right information. It includes a built-in web server that allows access from the external device.

Preferably, the access request signal includes at least one of an authentication result of authenticating whether the external device is allowed to access the terminal device and access authority information of the external device with respect to the at least one resource. It may be based on the cookie file stored in the external device.

Preferably, the embedded web server, if the access request signal is based on the legitimate cookie file authenticated through a predetermined authentication management server, the authentication result and the access authority information of the cookie file stored in the external device The resource may be provided to the external device by allowing the external device to access the corresponding resource that is requested to be accessed from the external device.

Preferably, further comprising a web browser requesting access to the at least one resource; The embedded web server prestores master access right information corresponding to the at least one resource, and includes the master access right information requested for access when the access to the at least one resource is requested from the web browser. A master cookie file can be provided to the web browser.

Preferably, when the master cookie file is received from the embedded web server, the web browser provides an access request signal to the embedded web server requesting access to the at least one resource based on the master cookie file. When the access request signal is based on the master cookie file, the embedded web server may provide access to the corresponding resource requested to be accessed from the web browser and provide the resource to the web browser.

A resource security system according to a fourth aspect of the present invention for achieving the above object, the external device for requesting access to the resources stored in the predetermined terminal device; An access rights management server for pre-store access right information on resources for each external device for each terminal device; Pre-store access authentication information for each terminal device, and when access to the resource is requested from the external device, authenticates whether the external device is allowed to access the terminal device based on the connection authentication related information, and connects. The authentication server which obtains the access right information of the external device with respect to the resource of the terminal device from the access rights management server and provides the external device to the external device; And a terminal device allowing access from the external device to the resource based on the access right information when receiving an access request signal according to the access right information requesting access to a resource from the external device. .

In accordance with a fifth aspect of the present invention, there is provided a resource security method comprising: requesting, by an external device, access to a resource stored in a predetermined terminal device; When the authentication management server which stores authentication related information for each terminal device is requested to access the resource from the external device, the authentication management server authenticates whether the external device is allowed to access the terminal device based on the authentication related information. And providing access authority information of the external device to the external device with respect to the resource of the terminal device when the connection is allowed; When the access right information is received from the authentication management server, providing an access request signal according to the access right information to the terminal device by the external device; And when the terminal device receives the access request signal requesting access to a resource from the external device, granting access to the resource from the external device based on the access right information of the access request signal. It includes.

Preferably, the step of providing the access request signal to the terminal device, at least one of the authentication result and the access authority information for authenticating whether the connection to the terminal device is permitted from the authentication management server to the external device; When the cookie file including any one is received, the external device stores the cookie file, and when a redirection signal for inducing a connection from the authentication management server to the terminal device is received, the external device is received. The method may include providing the access request signal to the terminal device based on the cookie file according to the redirection signal.

Preferably, the authentication related information stored for each terminal device, the external device list information that can be connected to the terminal device for each terminal device, password information for authenticating the connection to the terminal device, the external device that can be connected to the terminal device It may include at least one of the access authority information for the resource for each device.

A control method of an authentication management server according to a sixth aspect of the present invention for achieving the above object comprises the steps of: pre-store authentication-related information for each terminal device; Authenticating whether the external device is allowed to access the terminal device based on the authentication related information, when access to a resource stored in the predetermined terminal device is requested from the external device; Generating a cookie file including at least one of an authentication result of the authenticating step and access authority information of the external device with respect to a resource of the terminal device when the access is permitted; have.

Preferably, the authentication related information stored for each terminal device, the external device list information that can be connected to the terminal device for each terminal device, password information for authenticating the connection to the terminal device, the external device that can be connected to the terminal device It may include at least one of the access authority information for the resource for each device.

Preferably, the method may further include providing a redirection signal to the external device to induce connection to the terminal device including access address information corresponding to the terminal device.

A control method of a terminal device according to a seventh aspect of the present invention for achieving the above object comprises: determining whether a predetermined access request signal for requesting access to at least one resource stored therein is received; When the access request signal is received from an external device connected from the outside, when the access request signal is based on the legitimate cookie file authenticated through a predetermined authentication management server, an authentication result of the cookie file stored in the external device; And allowing the external device to access the corresponding resource requested to be accessed from the external device based on the access right information.

Therefore, according to the resource security system and the resource security method of the present invention, if the legitimate external device intends to access the resource of the terminal device, the cookie file is received from the legitimate authentication management server, the cookie file including the authentication result and access authority information. Since the terminal accesses the resource through a request for access to the resource through the terminal device, the terminal device can determine whether to allow access for a short time checking only the cookie file of the external device requesting access to the resource.

Therefore, according to the resource security system and the resource security method of the present invention, when an external device requests access to a resource of a terminal device through a network, it is determined that the external device is a user having appropriate authority from the terminal device's point of view, and thus is determined / processed. In order to perform the security process to improve the conventional problem of maintaining the connection with an external device for a long time, reducing the network usage, and consequently wireless communication to solve the problem of the cost of the battery usage and network usage of the terminal device You can provide a security approach that is appropriate for your environment.

Hereinafter, with reference to the accompanying drawings will be described a preferred embodiment of the present invention.

1 is a diagram schematically illustrating a resource security system according to an embodiment of the present invention.

As shown in FIG. 1, the resource security system according to the present invention includes an external device (100a, 100b ...) requesting access to a resource stored in a predetermined terminal device 300, and authentication for each terminal device. Pre-store related information, and when access to a resource is requested from an external device (for example, 100a), authenticates whether the external device 100a is allowed to access the terminal device 300 based on the authentication related information, and connects. If this is allowed, the authentication management server 200 for providing the access authority information corresponding to the external device 100a to the resource of the terminal device 300 to the external device 100a, and from the external device 100a to the resource. When the access request signal according to the access right information requesting access is received, the terminal device 300 to allow access from the external device (100a) to the resource based on the access right information.

The authentication related information stored for each terminal device stored in the authentication server 200 includes external device list information that can be connected to the corresponding terminal device for each terminal device of the plurality of terminal devices 300, and authenticates the connection to the corresponding terminal device. It is preferable to include at least one of the password information, the access authority information on the resource for each external device that can be connected to the terminal device.

Here, the external devices (100a, 100b ...) is a device that wants to access resources in the terminal device 300 through the network (1), hereinafter will be described with reference to the external device (100a) for convenience of description. Do it. In addition, for convenience of description, in FIG. 1, the terminal device 300 is illustrated as a single piece, but a plurality of terminal devices 300 may be provided.

The external device 100a connects to the authentication management server 200 to request access to resources stored in the desired terminal device 300 and requests a connection to the terminal device 300. At this time, when the password input for accessing the terminal device 300 is requested from the authentication management server 200, the external device 100a receives the password input by the user using the external device 100a. 200).

The external device 100a may include a cookie including at least one of an authentication result and predetermined access authority information for authenticating whether the external device 100a is allowed to access the terminal device 300 from the authentication management server 200. When the file is received, save the cookie file. The external device 100a receives an access request signal based on a pre-stored cookie file according to the redirection signal when a redirection signal for inducing a connection from the authentication management server 200 to the terminal device 300 is received. Provided by 300.

Here, the access request signal, the external device 100a is a signal for requesting access to a desired resource in the terminal device 300 through the network (1), the external device 100a is a cookie stored in advance the access request signal The terminal device 300 is accessed and provided using a file. In this case, the external device 100a may also include a cookie file in the access request signal.

Here, the redirection signal received from the authentication management server 200 to the external device 100a includes connection address information of the corresponding terminal device 300 (eg, IP address information of the terminal device 300). It is preferable.

On the other hand, when a plurality of authentication management server 200 for managing a plurality of terminal devices 300 is provided, a corresponding terminal device that the external device (100a) of the plurality of authentication management server 200 wants to connect ( In order to access the corresponding authentication management server 200 for managing the authentication of 300, a separate server for managing access to the appropriate authentication management server 200 may be required.

Accordingly, in the resource security system of the present invention, when access to a resource stored in the predetermined terminal device 300 is requested from the external device 100a, as shown in FIG. It may further include a DNS server 400 for returning the authentication management server address information that can be connected to the corresponding authentication management server 200 for managing authentication to the external device 100a.

DNS server 400, each of the authentication management server address information that can be connected to a plurality of authentication management server 200, and the authentication management server address for matching and storing the terminal devices that each authentication management server 200 manages authentication Information 410 is stored. Accordingly, when the DNS server 400 is requested to access a resource stored in the predetermined terminal device 300 from the external device 100a, the corresponding terminal device 300 is based on the authentication management server address information 410. Identify the authentication management server address information of the corresponding authentication management server 200 managing the authentication of the reply to the external device (100a). For example, when the external device 100a provides a phone number of the terminal device 300 to the DNS server 400 and requests access to resources stored in the terminal device 300, the DNS server 400 ) Is the authentication management server address information of the corresponding authentication management server 200 matched to the telephone number of the terminal device 300 based on the authentication management server address information 410 (for example, URL (Uniform Resource Locator, domain)) Can be returned to the external device 100a.

Accordingly, the external device 100a may access the corresponding authentication management server 200 based on the authentication management server address information returned from the DNS server 400 and request a connection to the corresponding terminal device 300.

Hereinafter, the configuration of the authentication management server 200 and the terminal device 300 of the resource security system according to the first embodiment will be described with reference to FIGS. 2 and 3.

First, referring to FIG. 2, the authentication management server 200 will be described. The authentication management server 200 may include an authentication related information manager 230 which stores authentication related information for each terminal device, and an external device connected from the outside ( When a request for access to a resource stored in the predetermined terminal device 300 is requested from 100a, the external device 100a is allowed to access the terminal device 300 based on the authentication related information of the authentication related information manager 230. The authentication manager 210 for providing access authority information corresponding to the external device 100a to the external device 100a to the resource of the terminal device 300 and access address information when access is permitted. Manager 220 is included.

The authentication related information manager 230 is a function unit that stores the authentication related information 235 including the authentication related information 231, 232, 233, etc. for each terminal device, and the authentication related information of each terminal device. For example, 231 may include at least one of external device list information accessible to the corresponding terminal device, password information for authenticating the connection to the corresponding terminal device, and access authority information for resources for each external device accessible to the terminal device. It includes either.

Here, the external device list information that can be accessed includes specific external devices that allow access to the terminal device 300 from the terminal device 300 when the terminal device 300 is registered in the authentication management server 200. It is desirable to register and store unique number, telephone number or Mac Address information.

In addition, the password information, when the terminal device 300 is registered in the authentication management server 200, the password information to allow any external device to access the terminal device 300 itself from the terminal device 300; It is preferable to register and store.

In addition, the access right information, when the terminal device 300 is registered in the authentication management server 200, the terminal device 300 accesses its own resources for each external device connected through a specific external device or password. It is desirable to register and store the access right information on the authority to allow.

For example, in the access right information corresponding to the terminal device 300 among the access right information of the authentication related information 231 of the terminal device 300, the previously registered specific external device 1 included in the external device list information that can be accessed. In response to the access authority information for allowing access to all resources (A, B, C) in the terminal device 300, the terminal device corresponding to the specific registered external device 2 included in the external device list information that can be accessed. Access permission information allowing access to some resources (B, C) in the (300), access to some resources (B) in the terminal device 300 in response to any external device connected via a password Allowed access rights information may be included.

When the authentication manager 210 requests access to a resource stored in the predetermined terminal device 300 from an external device 100a connected from the outside, the authentication manager 210 receives an external information based on the authentication related information of the authentication related information manager 230. The device 100a authenticates whether the connection to the terminal device 300 is allowed, and if the connection is permitted, access authority information corresponding to the external device 100a for the resource of the terminal device 300 is external device 100a. It serves as).

When the authentication manager 210 requests access to resources stored in the predetermined terminal device 300 from an external device 100a connected through the network 1, the authentication manager 210 stores the terminal in the authentication related information manager 230. Search for authentication related information (eg, 231) corresponding to the device 300. Accordingly, the authentication manager 210 determines whether the external device 100a is previously registered as an external device that can be connected to the terminal device 300 based on the external device list information that can be accessed among the authentication related information 231. . That is, the authentication manager 210 determines whether the external device 100a corresponds to a specific external device that is registered as being accessible to the terminal device 300, and if not, inputs a password to the external device 100a. request.

Accordingly, the authentication manager 210 compares the password received from the external device 100a with the password information of the authentication related information 231 and determines whether they match. If both password information does not match, it is preferable that the authentication manager 210 authenticates the external device 100a as an invalid user and does not allow access to the terminal device 300.

When the external device 100a corresponds to a specific external device included in accessible external device list information among the authentication related information 231 corresponding to the terminal device 300, or the external device 100a. If the password received from the password information among the authentication related information 231 corresponding to the terminal device 300 matches, the external device 100a is authenticated as a legitimate user who can access the terminal device 300.

The authentication manager 210 obtains access right information corresponding to the external device 100a based on the access right information of the authentication related information 231 of the authentication related information manager 230. Thus, the authentication manager 210, the authentication result of the authentication whether the external device 100a is allowed to access the terminal device 300 (whether it is a specific external device, whether it is any external device connected via a password, In case of any external device, a cookie file including the input password information and the identified access right information is generated and provided to the external device 100a.

In addition, the authentication manager 210 provides a redirection signal to the external device 100a to induce a connection to the corresponding terminal device 300 by using a redirection standard defined in the HTTP 1.1 standard. Redirect 100a to the terminal device 300.

Here, referring to the access address information manager 220, the access address information manager 220 stores the access address information for accessing the terminal device for each terminal device, and corresponds to the request of the authentication manager 210. It provides a connection address information corresponding to the terminal device to the authentication manager (210).

Here, the pre-stored access address information of the access address information manager 220, when the terminal device (for example 300) is registered in the authentication management server 200, the terminal device 300 from the terminal device 300 It is desirable to register and store access address information (eg, IP address information) for accessing itself.

Thus, after providing the cookie file to the external device 100a, the authentication manager 210 obtains access address information (eg, IP address information) corresponding to the terminal device 300 from the access address information manager 220. By providing a redirection signal based on the connection address information (for example, IP address information) to the external device 100a, the external device 100a is redirected to the corresponding terminal device 300. In this case, the redirection signal preferably includes access address information (eg, IP address information).

Thus, according to the resource security system according to the present invention, when the external device (100a) wants to access the resources of the terminal device 300, the authentication management server 200 instead of the terminal device 300 to the external device (100a) A cookie file including authentication results and access authority information by performing authentication on access to the terminal device 300 and grasping right access authority information on the resources of the terminal device 300 in response to the external device 100a. By providing to the external device 100a and redirected to the terminal device 300, the external device 100a sends the access request signal based on the cookie file to the terminal device 300 according to the redirection from the authentication management server 200. By doing so, an attempt is made to access resources of the terminal device 300.

Hereinafter, the configuration of the terminal device 300 will be described with reference to FIG. 3. The terminal device 300 accesses at least one resource 320 and predetermined access authority information for requesting access to at least one resource 320 stored therein from an external device 100a connected from the outside. When the request signal is received, an embedded web server 310 that allows access from the external device 100a to at least one resource 320 based on the access right information, and a web browser 330.

The at least one resource 320 is a resource embedded in the terminal device 300 and includes mp3 as well as call-related address book data 321, photo data 322, and video data 323 embedded in the terminal device 300. It may include various resources such as sound source data (not shown) according to a function and a game application (not shown) downloaded from a game server.

The embedded web server 310 is configured to serve as a server for actively processing resource access requests from the inside of the terminal device 300, and includes at least one stored therein from an external device 100a connected from the outside. When an access request signal is received according to predetermined access right information requesting access to the resource 320, the access from the external device 100a to the at least one resource 320 is allowed based on the access right information. do. Here, the access request signal received from the external device (100a), the authentication result of whether the external device (100a) is allowed to connect to the terminal device 300 (authentication of a specific external device, random access via a password) Is a signal based on a cookie file stored in the external device 100a including information on whether the external device is a password, input password information in the case of any external device) and access permission information on at least one resource 320.

In detail, when the embedded web server 310 receives an access request signal requesting access to at least one resource 320 stored therein from an external device 100a connected from the outside, the access request signal is authenticated. It is determined whether the signal is based on the authenticated valid cookie file generated / issued by the management server 200. If it is determined that the access request signal is a signal based on the authorized valid cookie file generated / issued by the authentication management server 200, the embedded web server 310 checks the cookie value of the cookie file stored in the external device 100a. Based on the authentication result and the access authority information, the access of the corresponding external device 100a is allowed to the corresponding resource (eg, photo data 323) that is requested to be accessed from the external device 100a. 323) to the external device 100a. In this case, when the access right information of the cookie file includes only the access right of the address book data 321 but does not include the access right for the resource (eg, the picture data 323) requested by the external device 100a, the embedded web The server 310 may not allow access of the external device 100a to a corresponding resource (eg, photo data 323) requested to be accessed from the external device 100a.

Thus, according to the resource security system according to the present invention, when the external device (100a) wants to access the resources of the terminal device 300, the authentication management server 200 to the terminal device 300 with respect to the external device (100a). In response to the access authentication and the external device 100a, the terminal performs a legitimate access right information on the resource of the terminal device 300 to generate a cookie file including the authentication result and the access right information, and provides it to the external device 100a. By redirecting to the terminal device 300, the external device 100a provides the terminal device 300 with an access request signal based on the cookie file in accordance with the redirection from the authentication management server 200. Attempt to access the resource.

Thus, according to the resource security system according to the present invention, if the legitimate external device 100a attempting to access the resource of the terminal device 300, the cookie containing the authentication result and access authority information from the legitimate authentication management server 200 Since the terminal receives the file and connects to the terminal device 300 through the cookie file to request access to the resource, the terminal device 300 checks only the cookie file of the external device 100a requesting access to the resource. The decision is made to allow access for a short time.

Therefore, according to the resource security system according to the present invention, when the external device 100a requests access to a resource of the terminal device 300 through the network 1, the external device 100a is in the position of the terminal device 300. To improve the conventional problem of maintaining a connection with the external device 100a for a long time in order to perform a security process of authenticating and processing a user having proper authority, it reduces the network 1 usage and consequently reduces the terminal device. It is possible to solve the problem of the cost of the battery usage and the network usage of 300.

The web browser 330 may serve to request access to at least one resource 320 internally of the terminal device 300 using a web environment.

Thus, the embedded web server 310, pre-store the master access rights information corresponding to the at least one resource 320, the access request is requested when access to the at least one resource 320 from the web browser 330 The master cookie file including the master access authority information corresponding to the resource is generated and provided to the web browser 330. Here, the master access right information preferably includes DRM (Digital Rights Management) information corresponding to each resource.

Accordingly, the web browser 330 provides the embedded web server 310 with an access request signal requesting access to at least one resource 330 based on the master cookie file received from the embedded web server 310. If the access request signal is based on a legitimate master cookie file, the embedded web server 310 may allow access to the corresponding resource that is requested to be accessed from the web browser 330 and provide the resource to the web browser 330. have.

This is assuming that a user attempting to access resources internally of the terminal device 300 through the web browser 330 is a legitimate user. Similarly to accessing resources from the outside, accessing resources from the inside is also included in the embedded web server ( 310 is configured to allow access based on the access right information of the cookie file. Thus, a user attempting to access resources internally of the terminal device 300 through the web browser 330 will always be allowed access.

Therefore, according to the resource security system according to the present invention, not only the resource access request from the outside but also the resource access request from the inside are based on the access right information of the cookie file or the master cookie file on the embedded web server 310 side. By unified to allow access to resources, you can prevent errors when accessing resources internally.

Meanwhile, when the resource security system according to the second embodiment of the present invention is described with reference to FIG. 4, the resource security system of the present invention is an external device for requesting access to a resource stored in a predetermined terminal device 300. (100a, 100b ...), an access authority management server 600 that stores access authority information for resources by external device for each terminal device, and access authentication information for each terminal device, and the external device 100a. When access to a resource is requested, the external device 100a authenticates whether the connection to the terminal device 300 is allowed based on the access connection authentication information, and if the access is allowed, the access right from the access right management server 600. The authentication server 200 'which obtains the access right information corresponding to the external device 100a for the resource of the terminal device 300 and provides it to the external device 100a, and accesses the resource from the external device 100a. According to the requested access information When the other access request signal is received, the terminal device 300 which allows access from the external device 100a to the resource based on the access right information includes a terminal IP management server 500, DNS server 400 ' do.

Here, the terminal device 300 and the external devices 100a and 100b having the same configuration as the resource security system of the first embodiment described above have the same reference numerals as those in FIG. 1, and detailed descriptions thereof will be omitted.

The access right management server 600 includes an access right information manager 620 that pre-stores access right information for resources for each external device for each terminal device, and the access right information manager 620 includes a certificate server 200 '. Access authority information of the corresponding terminal device 300 requested from the extracted and provided to the authentication server (200 '). Here, the access right information stored in the access right information manager 620, when the terminal device 300 is registered in the access rights management server 600, for each external device connected through a specific external device or a password It is preferable that the terminal device 300 receives and stores access authority information on authority for allowing access to its own resources.

For example, in the access right information corresponding to the terminal device 300 among the access right information of the access right information manager 620, the terminal corresponding to the previously registered specific external device 1 included in the accessible external device list information. The access right information that allows access to all resources A, B, and C in the device 300 corresponds to the specific registered external device 2 included in the accessible external device list information in the terminal device 300. Access right information for allowing access to some resources (B, C), access right information for allowing access to some resources (B) in the terminal device 300 corresponding to any external device connected through a password May be included.

The terminal IP management server 500 plays a role of a terminal access address management server including an access address information manager 520 which stores preliminarily stored access address information for accessing a corresponding terminal device for each terminal device. Here, the pre-stored access address information of the access address information manager 520, when the terminal device (for example 300) is registered in the terminal IP management server 500, the terminal device 300 from the terminal device 300 ) It is desirable to register and store access address information (eg IP address information) for accessing itself.

Accordingly, the access address information manager 520 of the terminal IP management server 500 provides the access address information corresponding to the terminal device corresponding to the request of the authentication server 200 'to the authentication server 200'.

DNS server 400 ', the authentication server address information for storing each of the authentication server address information that can be connected to the plurality of authentication server (200') and the terminal device that each authentication server 200 'manages authentication ( 410 '). Accordingly, when the DNS server 400 'is requested to access a resource stored in the predetermined terminal device 300 from the external device 100a, the corresponding terminal device 300 is based on the authentication server address information 410'. Obtains the authentication server address information of the corresponding authentication server 200 'managing the authentication and returns it to the external device 100a.

Accordingly, the external device 100a may access the authentication server 200 'based on the authentication server address information returned from the DNS server 400' and request a connection to the terminal device 300.

The authentication server 200 ', the access authentication information manager 230' for storing the access authentication information for each terminal device, and the access authentication information when access to the resources of the terminal device 300 is requested from the external device 100a. The external device 100a authenticates whether the connection to the terminal device 300 is allowed based on the access authentication information of the manager 230 ', and if the connection is permitted, the terminal device 300 from the access authority management server 600. Acquisition access authority information of the external device (100a) for the resource of the), and generates a cookie file containing the authentication result and the obtained access authority information according to the authentication manager for providing to the external device (100a) 210 ' ).

The access authentication information manager 230 ′ is a function unit for storing access authentication information for each terminal device. The access authentication information of each terminal device includes external device list information that can be connected to the corresponding terminal device for each terminal device. Password information for authenticating the connection to the terminal device.

Here, the external device list information that can be accessed includes a list of specific external devices that allow access to the terminal device 300 from the terminal device 300 when the terminal device 300 is registered in the authentication server 200 ′. It is desirable to register and store unique number, telephone number or Mac Address information.

In addition, the password information, when the terminal device 300 is registered in the authentication server 200 ', the password information to allow any external device to access the terminal device 300 itself from the terminal device 300; It is preferable to register and store.

When the authentication manager 210 'is requested to access a resource stored in the predetermined terminal device 300 from the external device 100a connected through the network 1, the authentication manager 210' is stored in the access authentication information manager 230 '. The connection authentication information corresponding to the terminal device 300 is searched for. Accordingly, the authentication manager 210 'determines whether the external device 100a is previously registered as an external device that can be connected to the terminal device 300 based on the external device list information that can be accessed from the access authentication information. That is, the authentication manager 210 'determines whether the external device 100a corresponds to a specific external device that is registered as being accessible to the terminal device 300, and if not, inputs the password to the external device 100a. Ask.

Accordingly, the authentication manager 210 'compares the password received from the external device 100a with the password information of the access authentication information and determines whether they match. If the two password information does not match, it is preferable that the authentication manager 210 'not authenticate the external device 100a as an invalid user and not allow access to the terminal device 300.

The authentication manager 210 'may correspond to a specific external device included in the accessible external device list information among the connection authentication information 231 corresponding to the terminal device 300, or the external device ( If the password received from 100a and the password information among the connection authentication information corresponding to the terminal device 300 match, the external device 100a is authenticated as a legitimate user who can access the terminal device 300.

The authentication manager 210 ′ requests the access right management server 600 for access right information corresponding to the external device 100a for the resource of the terminal device 300. Therefore, when the access right information corresponding to the external device 100a for the terminal device 300 is received from the access right management server 600, the authentication manager 210 ', the external device 100a is the terminal device 300 Authentication result (authentication of a specific external device, whether it is an external device connected via a password, password information entered in case of any external device) and the obtained access authority information. The cookie file is generated and provided to the external device 100a.

In addition, the authentication manager 210 ′ receives and receives access address information corresponding to the terminal device 300 from the terminal IP management server 500, and redirects based on the access address information (eg, IP address information). Redirection) signal is provided to the external device 100a to redirect the external device 100a to the corresponding terminal device 300. In this case, the redirection signal preferably includes access address information (eg, IP address information).

Thus, according to the resource security system according to the second embodiment of the present invention, when the external device 100a tries to access a resource of the terminal device 300, the authentication server 200 'is connected to the external device 100a. In response to the authentication for access to the 300 and the external device 100a, the user may perform legitimate access right information on the resources of the terminal device 300 to generate a cookie file including the authentication result and the access right information to the external device 100a. By redirecting to the terminal device 300, the external device 100a provides the terminal device 300 with an access request signal based on the cookie file according to the redirection from the authentication server 200 '. Attempt to access the resource at 300.

Thus, according to the resource security system according to the present invention, if the legitimate external device 100a attempting to access the resource of the terminal device 300, a cookie file containing the authentication result and access authority information from the legitimate authentication server 200 ' Since the terminal is connected to the terminal device 300 through the cookie file to request access to the resource, the terminal device 300 checks only the cookie file of the external device 100a requesting access to the resource. It will decide whether to allow access for the time.

Therefore, according to the resource security system according to the present invention, when the external device 100a requests access to a resource of the terminal device 300 through the network 1, the external device 100a is in the position of the terminal device 300. To improve the conventional problem of maintaining a connection with the external device 100a for a long time in order to perform a security process of authenticating and processing a user having proper authority, it reduces the network 1 usage and consequently reduces the terminal device. It is possible to solve the problem of the cost of the battery usage and the network usage of 300.

Hereinafter, a control flow of a resource security method according to a first embodiment of the present invention will be described with reference to FIGS. 5 to 7. Here, for the convenience of description, the configuration shown in FIGS. 1 to 3 described above will be described with reference to the corresponding reference numerals.

First, the control flow of the resource security method according to the first embodiment of the present invention will be briefly described with reference to FIG. 5.

The external device 100a requesting access to a resource stored in the predetermined terminal device 300 accesses the authentication management server 200 and requests access (S41).

Therefore, when the authentication management server 200 which stores authentication related information for each terminal device is requested to access resources from the external device 100a, the external device 100a is transferred to the terminal device based on the authentication related information. It is determined whether the connection is allowed by authenticating whether the connection is allowed (S85). If the authentication result connection is permitted, the access authority information corresponding to the external device 100a for the resources of the authentication management server 200 terminal device 300 is provided to the external device 100a (S121).

Thus, when the access right information is received from the authentication management server 200, the external device 100a provides an access request signal according to the access right information to the terminal device 300 (S151).

Accordingly, when an access request signal for access to a resource is received from the external device 100a, the terminal device 300 receives an access request signal from the external device 100a for the resource requesting access based on the access right information of the access request signal. Allow access to (S161).

Hereinafter, the control flow of the resource security method according to the first embodiment will be described in more detail with reference to FIG. 6.

First, when the external device 100a requests access to a resource stored in the predetermined terminal device 300 by accessing the DNS server 400 (S10), the DNS server 400 has its own authentication management server address information. Based on the operation 410, the authentication management server address information of the corresponding authentication management server 200 managing the authentication of the corresponding terminal device 300 is identified and returned to the external device 100a (S20).

Accordingly, the external device 100a accesses the corresponding authentication management server 200 based on the authentication management server address information returned from the DNS server 400 (S30) and requests access to the corresponding terminal device 300. (S40).

The authentication management server 200 that is requested to access a resource stored in the terminal device 300 includes authentication related information (eg, 231) corresponding to the terminal device 300 stored in its authentication related information manager 230. ). Accordingly, the authentication management server 200 determines whether the external device 100a is previously registered as an external device that can be connected to the terminal device 300 based on the external device list information that can be accessed among the authentication related information 231. (S50). That is, the authentication management server 200 determines whether the external device 100a corresponds to a specific external device that is registered as being accessible to the terminal device 300, and if not, the password is transmitted to the external device 100a. Request an input (S60).

Accordingly, as the user of the external device 100a, which has been requested to input a password, inputs a password, the external device 100a provides a password to the authentication management server 200 (S70), and the authentication management server 200 transmits the external device. The password received from 100a is compared with the password information of the authentication related information 231, and it is determined whether the received password is valid (S80). If the two password information does not match, it is preferable that the authentication management server 200 authenticates the external device 100a as an invalid user and does not allow access to the terminal device 300.

When the external device 100a corresponds to a specific external device included in the accessible external device list information among the authentication related information 231 corresponding to the terminal device 300 in step S50 (YES), or in step S80 When the password received from the 100a and the password information among the authentication related information 231 corresponding to the terminal device 300 match (YES), the authentication management server 200 converts the external device 100a to the terminal device ( Authenticate as a legitimate user with access to 300).

In addition, the authentication management server 200 which authenticates the external device 100a as a legitimate user who can access the terminal device 300 is based on the access right information of the authentication related information 231 corresponding to the terminal device 300. In step S90, the access right information corresponding to the external device 100a is obtained / obtained. Accordingly, the authentication management server 200, the authentication result of the authentication whether the external device 100a is allowed to access the terminal device 300 (whether it is a specific external device, or whether it is any external device connected through a password). In the case of any external device, a cookie file including the input password information and the identified access right information is generated (S110), and the cookie file is provided to the external device 100a (S120).

Thus, the external device 100a stores the cookie file received from the authentication management server 200 (S130).

Then, the authentication management server 200 from the access address information manager 220 to redirect the external device 100a to the terminal device 300 by using the redirection standard defined in the HTTP 1.1 standard. Redirection for acquiring connection address information (eg, IP address information) corresponding to the terminal device 300 and inducing connection to the corresponding terminal device 300 based on the connection address information (eg, IP address information). The signal is provided to the external device 100a (S140).

Accordingly, the external device 100a according to the redirection signal for inducing a connection from the authentication management server 200 to the terminal device 300, in step S130 based on the cookie file previously stored in the terminal device 300 An access request signal for requesting access to a resource of the terminal device 300 is provided (S150).

Accordingly, when the access request signal is received from the external device 100a, the terminal device 300 checks the cookie value of the cookie file stored in the external device 100a and based on the authentication result and access authority information, the external device 100a. Allows the access of the external device 100a to the corresponding resource (eg, photo data 323) requested to be accessed from (S160).

Here, the control flow in the terminal device 300 will be described in detail with reference to FIG. 7.

When the access request signal for requesting access to the resource of the terminal device 300 is received from the external device 100a connected through the network 1 as in step S150 described above, the embedded web server 310 stores the cookie file. By checking (S152), it is determined whether the received access request signal is a signal based on the authenticated valid cookie file generated / issued by the authentication management server 200 (S154). If it is determined that the access request signal is not a signal based on the authenticated legitimate cookie file generated / issued by the authentication management server 200, the embedded web server 310 will inform the external device 100a of the access permission (S156). .

If it is determined that the access request signal is a signal based on the authorized valid cookie file generated / issued by the authentication management server 200, the embedded web server 310 checks the cookie value of the cookie file stored in the external device 100a. On the basis of the authentication result and the access authority information to allow the access of the external device 100a to the corresponding resource (eg, photo data 323) that is requested to access from the external device (100a) (S162), and the corresponding resource (for example : Photo data 323) will be provided to the external device (100a) (S164).

Of course, the access rights information of the cookie file includes only the access rights of the address book data 321, but does not include the access rights for resources (eg, photo data 323) requested by the external device 100a. The server 310 may not allow access of the external device 100a to a corresponding resource (eg, photo data 323) requested to be accessed from the external device 100a.

Meanwhile, when the user attempts to access resources internally of the terminal device 300 through the web browser 330, and the web browser 330 requests access to at least one resource 320 (S170), the embedded web The server 310 generates a master cookie file including master access authority information corresponding to the resource requested to be accessed (S172). The embedded web server 310 provides the generated master cookie file to the web browser 330 (S174). Here, the master access right information preferably includes DRM (Digital Rights Management) information corresponding to each resource.

Accordingly, the web browser 330 provides the embedded web server 310 with an access request signal requesting access to at least one resource 330 based on the master cookie file received from the embedded web server 310 ( S176), the embedded web server 310 determines whether the access request signal received from the web browser 330 is based on a valid master cookie file (S180).

When the access request signal is based on a legitimate master cookie file, the embedded web server 310 allows access to the corresponding resource that is requested to be accessed from the web browser 330 (S184), and the resource is transferred to the web browser 330. Can be provided as (S188). On the other hand, when the access request signal is not based on the legitimate master cookie file, the embedded web server 310 informs the web browser 330 of the access permission (S182).

This is assuming that a user attempting to access resources internally of the terminal device 300 through the web browser 330 is a legitimate user. Similarly to accessing resources from the outside, accessing resources from the inside is also included in the embedded web server ( 310 is configured to allow access based on the access right information of the cookie file. Thus, a user attempting to access resources internally of the terminal device 300 through the web browser 330 will always be allowed access.

Thus, according to the resource security method according to the present invention, when the external device (100a) wants to access the resources of the terminal device 300, the authentication management server 200 to the terminal device 300 with respect to the external device (100a) In response to the access authentication and the external device 100a, the terminal performs a legitimate access right information on the resource of the terminal device 300 to generate a cookie file including the authentication result and the access right information, and provides it to the external device 100a. By redirecting to the terminal device 300, the external device 100a provides the terminal device 300 with an access request signal based on the cookie file in accordance with the redirection from the authentication management server 200. Attempt to access the resource.

Therefore, according to the resource security method according to the present invention, if the legitimate external device 100a trying to access the resources of the terminal device 300, a cookie file containing the authentication result and access authority information from the legitimate authentication management server 200 The terminal device 300 checks only the cookie file of the external device 100a requesting access to the resource because it receives the request and accesses the terminal device 300 through the cookie file. The decision is made to allow access for a short time.

Therefore, according to the resource security method according to the present invention, when the external device (100a) requests access to the resources of the terminal device 300 through the network (1), the external device (100a) in the terminal device 300 position To improve the conventional problem of maintaining a connection with the external device 100a for a long time in order to perform a security process of authenticating and processing a user having proper authority, it reduces the network 1 usage and consequently reduces the terminal device. It is possible to solve the problem of the cost of the battery usage and the network usage of 300.

Hereinafter, a control flow of a resource security method according to a second embodiment of the present invention will be described with reference to FIG. 8. Here, for the convenience of description, the configuration shown in FIG. 4 described above will be described with reference to the corresponding reference numerals.

First, when the external device 100a accesses the DNS server 400 'and requests access to a resource stored in the predetermined terminal device 300 (S10'), the DNS server 400 'has its own authentication server. Based on the address information 410 ', the server verifies the authentication server address information of the authentication server 200' that manages the authentication of the terminal device 300, and returns it to the external device 100a (S20 '). .

Accordingly, the external device 100a accesses the authentication server 200 'based on the authentication server address information returned from the DNS server 400' (S30 '), and requests a connection to the terminal device 300. (S40 ').

The authentication server 200 'that is requested to access a resource stored in the terminal device 300 searches for connection authentication information corresponding to the terminal device 300 stored in its connection authentication information manager 230'. In operation S50 ′, the external device 100a is determined as an external device that can be connected to the terminal device 300 based on the list of available external device information. That is, the authentication server 200 ′ determines whether the external device 100a corresponds to a specific external device that is pre-registered as being accessible to the terminal device 300, and if not, the authentication server 200 ′ may determine the password as the external device 100a. Request an input (S60 ').

Accordingly, as the user of the external device 100a, which has been requested to input a password, inputs a password, the external device 100a provides a password to the authentication server 200 '(S70'), and the authentication server 200 'is external. The password received from the device 100a and the password information of the connection authentication information are compared to determine whether the received password is valid (S80 '). If the two password information does not match, it is preferable that the authentication server 200 'authenticates the external device 100a as an invalid user and does not allow access to the terminal device 300.

If the external device 100a corresponds to a specific external device included in the accessible external device list information among the access authentication information corresponding to the terminal device 300 in step S50 '(YES), or in step S80', the external device ( If the password received from 100a and the password information among the connection authentication information corresponding to the terminal device 300 match (YES), the authentication server 200 'may connect the external device 100a to the terminal device 300. Authenticate as a legitimate user.

In addition, the authentication server 200 'that authenticates the external device 100a as a legitimate user who can access the terminal device 300 has access authority information corresponding to the external device 100a for the resource of the terminal device 300. Requests to the access rights management server 600 (S100). Therefore, when the access right information corresponding to the external device 100a for the terminal device 300 is received from the access right management server 600 (S105), the authentication server 200 ', the external device 100a is a terminal Authentication result (or whether it is a specific external device, whether it is a specific external device connected via a password, or a password information input in the case of any external device) that authenticates whether access to the device 300 is permitted and the obtained access authority A cookie file including information is generated (S110 ') and the cookie file is provided to the external device 100a (S120').

Accordingly, the external device 100a stores the cookie file received from the authentication server 200 '(S130').

Then, the authentication server 200 ', the terminal IP management server 500 requests the access address information corresponding to the terminal device 300 (S115), the terminal IP management server 500 is a terminal device 300 It provides the connection address information (for example, IP address information) corresponding to the authentication server (200 ') (S117). Accordingly, the authentication server 200 'is configured to redirect the external device 100a to the corresponding terminal device 300, and the terminal device 300 based on the connection address information (eg, IP address information) of the terminal device 300. A redirection signal for inducing connection to the network is provided to the external device 100a (S140 ').

Accordingly, the external device 100a according to the redirection signal for inducing connection from the authentication server 200 'to the terminal device 300, based on the cookie file previously stored in step S130' terminal device 300 Provides an access request signal for requesting access to the resource of the terminal device 300 (S150 ').

Accordingly, when the access request signal is received from the external device 100a, the terminal device 300 checks the cookie value of the cookie file stored in the external device 100a and based on the authentication result and access authority information, the external device 100a. Allows access of the external device 100a to a corresponding resource (eg, photo data 323) that is requested to access from (S160 ').

Here, since a specific control flow of the terminal device 300 in the resource security system according to the second embodiment is the same as in FIG. 7 described above, description thereof will be omitted.

Thus, according to the resource security method according to the present invention, when the external device 100a attempts to access a resource of the terminal device 300, the authentication server 200 'is connected to the terminal device 300 with respect to the external device 100a. In response to the access authentication and the external device 100a, the terminal performs a legitimate access right information on the resource of the terminal device 300 to generate a cookie file including the authentication result and the access right information, and provides it to the external device 100a. By redirecting to the terminal device 300, the external device 100a provides the terminal device 300 with an access request signal based on the cookie file in accordance with the redirection from the authentication server 200 '. Attempt to access the resource.

Accordingly, according to the resource security method according to the present invention, if the legitimate external device 100a attempting to access the resource of the terminal device 300, a cookie file containing the authentication result and access authority information from the legitimate authentication server 200 ' Since the terminal device 300 is connected to the terminal device 300 through the cookie file to request access to a resource, the terminal device 300 checks only the cookie file of the external device 100a requesting access to the resource. It will decide whether to allow access for the time.

Therefore, according to the resource security method according to the present invention, when the external device (100a) requests access to the resources of the terminal device 300 through the network (1), the external device (100a) in the terminal device 300 position To improve the conventional problem of maintaining a connection with the external device 100a for a long time in order to perform a security process of authenticating and processing a user having proper authority, it reduces the network 1 usage and consequently reduces the terminal device. It is possible to solve the problem of the cost of the battery usage and the network usage of 300.

Although the present invention has been described in detail with reference to preferred embodiments, the present invention is not limited to the above-described embodiments, and the technical field to which the present invention belongs without departing from the gist of the present invention as claimed in the following claims. Anyone skilled in the art will have the technical idea of the present invention to the extent that various modifications or changes are possible.

If the external device is a legitimate external device that wants to access the resources of the terminal device, it receives a cookie file containing the authentication result and access authority information from the legitimate authentication management server, requests access to the resource by accessing the terminal device through the cookie file, The terminal device determines whether to allow access for a short time checking only the cookie file of the external device requesting access to a resource, thereby performing a security process of determining / processing whether the external device is a user having appropriate authority. In case of applying a resource security system and a resource security method that can solve the problems of the terminal device's battery usage and the cost of using the network by improving the conventional problem of maintaining the connection with an external device for a long time, Resource Security Effect of Terminal Device Considered, Efficiency of Resource Usage of Terminal Device It is an invention with industrial applicability because it can bring a great progress in terms of gender, and it is not only a sufficient possibility of marketing or sales of the applied authentication management server, terminal equipment, and security system, but also practically obvious.

1 is a schematic control block diagram of a resource security system according to a first embodiment of the present invention.

2 is a control block diagram of an authentication management server of a resource security system according to a first embodiment of the present invention.

3 is a control block diagram of a terminal device of a resource security system according to a first embodiment of the present invention.

4 is a control block diagram of a resource security system according to a second embodiment of the present invention.

5 is a schematic control flowchart of a resource security method according to a first embodiment of the present invention.

6 is a detailed control flowchart of a resource security method according to a first embodiment of the present invention.

7 is a control flowchart illustrating a control method of a terminal device in a resource security method according to a first embodiment of the present invention.

8 is a control flowchart of a resource security method according to a second embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

1: network 100a, 100b: external device

200: authentication management server 300: terminal device

400: DNS server

Claims (25)

In a resource security system, An external device for requesting access to a resource stored in a predetermined terminal device; Pre-store authentication-related information for each terminal device, and upon requesting access to the resource from the external device, authenticates whether the external device is allowed to access the terminal device based on the authentication-related information, and access is established. An authentication management server providing access authority information corresponding to the external device with respect to the resource of the terminal device to the external device, when permitted; And When the access request signal according to the access right information requesting access to the resource from the external device is received, including a terminal device that allows access to the resource from the external device based on the access right information; Featured resource security system. The method of claim 1, The external device, In order to request access to a resource stored in the terminal device, a connection request is made to the authentication management server, and when a password input for accessing the terminal device is requested from the authentication management server, a password input by a user is inputted. Resource security system, characterized in that provided to the authentication management server. The method of claim 1, The external device, If a cookie file including at least one of an authentication result and the access authority information that authenticates whether the external device is allowed to access the terminal device is received from the authentication management server, the cookie file is stored, and the authentication is performed. And providing the access request signal to the terminal device based on the cookie file according to a redirection signal to the terminal device received from a management server. The method according to any one of claims 1 to 3, The authentication related information stored for each terminal device, Each terminal device includes at least one of external device list information accessible to the corresponding terminal device, password information for authenticating the connection to the corresponding terminal device, and access authority information for resources for each external device accessible to the terminal device. Resource security system, characterized in that. The method of claim 4, wherein When a request for access to a resource stored in a predetermined terminal device is requested from the external device, a DNS server for returning authentication management server address information to the external device to access the corresponding authentication management server managing the authentication of the terminal device. Further comprising; The external device, And accessing the authentication management server based on the authentication management server address information returned from the DNS server in response to a request for access to a resource stored in the terminal device. In the authentication management server, Authentication related information manager for pre-store the authentication related information for each terminal device; And When an external device connected from the outside is requested to access a resource stored in a predetermined terminal device, whether the external device is allowed to access the terminal device based on the authentication related information of the authentication related information manager. And an authentication manager for authenticating and providing access authority information corresponding to the external device with respect to the resource of the terminal device to the external device when access is permitted. The method of claim 6, The authentication related information manager, Each terminal device includes at least one of external device list information accessible to the terminal device, password information for authenticating the connection to the terminal device, and access authority information for resources for each external device accessible to the terminal device. Authentication management server, characterized in that for storing the authentication-related information. The method of claim 7, wherein The authentication manager, If the external device does not correspond to an external device capable of accessing the terminal device based on the external device list information accessible from among authentication related information stored in the authentication related information manager, the external device may be transferred to the external device. Requesting a password input, comparing password received from the external device with password information among authentication related information corresponding to the terminal device, and authenticating whether the external device is allowed to access the terminal device; Authentication Management Server. The method of claim 6, wherein The authentication manager, Redirection to provide the external device with a cookie file including the authentication result and the access authority information, which authenticates whether the external device is allowed to access the terminal device, and induces connection to the terminal device. Authentication management server, characterized in that to provide a signal to the external device. The method of claim 9, A connection address information manager for storing connection address information for accessing the corresponding terminal device for each terminal device; The authentication manager, Obtaining access address information corresponding to the terminal apparatus requested by the external apparatus from the access address information of the access address information manager, and providing the redirection signal including the access address information to the external apparatus; Authentication Management Server. In the terminal device, At least one resource; And When an access request signal according to predetermined access right information requesting access to the at least one resource stored therein is received from an external device connected from the outside, the access to the at least one resource is based on the access right information. Terminal device comprising a built-in web server that allows access from an external device. The method of claim 11, The access request signal, Based on a cookie file stored in the external device, including at least one of an authentication result for authenticating whether the external device is allowed to access the terminal device and access authority information of the external device with respect to the at least one resource Terminal device, characterized in that. The method of claim 12, The embedded web server, When the access request signal is based on the legitimate cookie file authenticated through a predetermined authentication management server, an access request is made from the external device based on the authentication result and the access right information of the cookie file stored in the external device. The terminal device, characterized in that for allowing the access of the external device to the resource to provide the resource to the external device. The method of claim 11, Further comprising a web browser requesting access to the at least one resource; The embedded web server, A master cookie which prestores master access right information corresponding to the at least one resource, and includes the master access right information corresponding to the resource requested to access when the web browser requests access to the at least one resource; Terminal device, characterized in that for providing a file to the web browser. The method of claim 14, When the master cookie file is received from the embedded web server, the web browser provides an access request signal to the embedded web server requesting access to the at least one resource based on the master cookie file. The embedded web server, when the access request signal is based on the master cookie file, the terminal device characterized in that to allow access to the resource requested to access from the web browser to provide the resource to the web browser. . In a resource security system, An external device for requesting access to a resource stored in a predetermined terminal device; An access rights management server for pre-store access right information on resources for each external device for each terminal device; Pre-store access authentication information for each terminal device, and when access to the resource is requested from the external device, authenticates whether the external device is allowed to access the terminal device based on the connection authentication related information, and connects. The authentication server obtaining access right information corresponding to the external device for the resource of the terminal device from the access right management server and providing the same to the external device; And When the access request signal according to the access right information requesting access to the resource from the external device is received, including a terminal device that allows access to the resource from the external device based on the access right information; Featured resource security system. The method of claim 6, The authentication server, A connection authentication information manager for pre-store access authentication information for each terminal device, and when the access request is made from the external device to the resource, the external device accesses the terminal device based on the connection authentication information of the connection authentication information manager. Is authenticated or not, and if access is permitted, obtain access authority information of the external device with respect to the resource of the terminal device from the access authority management server, and the authentication result according to the authentication and the obtained access authority information. Resource security system comprising an authentication manager for providing a cookie file comprising a to the external device. The method according to claim 16 or 17, A terminal access address management server for storing access address information for accessing the terminal device for each terminal device; The authentication server, When the external device is allowed to access the terminal device, providing the cookie file according to the authenticated authentication result and the access right information to the external device, and the request made by the external device from the terminal access address management server. And a redirection signal for acquiring connection address information corresponding to the terminal device to the terminal device based on the connection address information and providing a redirection signal to the external device. In the resource security method, Requesting an external device to access a resource stored in a predetermined terminal device; When the authentication management server which stores authentication related information for each terminal device is requested to access the resource from the external device, the authentication management server authenticates whether the external device is allowed to access the terminal device based on the authentication related information. And providing access authority information corresponding to the external device with respect to the resource of the terminal device to the external device when access is allowed; When the access right information is received from the authentication management server, providing an access request signal according to the access right information to the terminal device by the external device; And When the terminal device receives the access request signal requesting access to a resource from the external device, allowing access from the external device to the resource based on the access right information of the access request signal; Resource security method comprising a. The method of claim 19, Providing the access request signal to the terminal device, If a cookie file including at least one of an authentication result and the access right information for authenticating whether the connection to the terminal device is permitted to the external device is received from the authentication management server, the external device receives the cookie file. Storing the step; When a redirection signal for inducing a connection to the terminal device from the authentication management server is received, the external device providing the access request signal to the terminal device based on the cookie file in accordance with the redirection signal Resource security method comprising a. The method of claim 19 or 20, The authentication related information stored for each terminal device, Each terminal device includes at least one of external device list information accessible to the corresponding terminal device, password information for authenticating the connection to the corresponding terminal device, and access authority information for resources for each external device accessible to the terminal device. Resource security method, characterized in that. In the control method of the authentication management server, Pre-storing authentication related information for each terminal device; Authenticating whether the external device is allowed to access the terminal device based on the authentication related information, when access to a resource stored in the predetermined terminal device is requested from the external device; Generating a cookie file including at least one of an authentication result of the authenticating step and access authority information corresponding to the external device with respect to a resource of the terminal device, if the connection is permitted; Control method of the authentication management server, characterized in that. The method of claim 22, The authentication related information stored for each terminal device, Each terminal device includes at least one of external device list information accessible to the corresponding terminal device, password information for authenticating the connection to the corresponding terminal device, and access authority information for resources for each external device accessible to the terminal device. Control method of the authentication management server, characterized in that. The method of claim 22 or 23, And providing a redirection signal to the external device to induce connection to the terminal device, including access address information corresponding to the terminal device. In the control method of the terminal device, Determining whether a predetermined access request signal for requesting access to at least one resource stored therein is received; When the access request signal is received from an external device connected from the outside, when the access request signal is based on the legitimate cookie file authenticated through a predetermined authentication management server, an authentication result of the cookie file stored in the external device; And allowing access of the corresponding external device to a corresponding resource requested to be accessed from the external device based on the access right information.

Images