KR20100062045A - System and method for automatic watermarking - Google Patents

Abstract

PURPOSE: An automatic watermark processing system and a method thereof for providing the security of a high level are provided to automatically process the watermark according to a security policy. CONSTITUTION: A security policy setup module(206) performs the setting change of a security policy. A security policy determining module(202) decides a watermark inserting whether a file is based on the fixed security policy. A file system filter driver module(200) transfers the user information and file information to the security policy decision point. The file system filter driver module controls the file access. A watermarking module inserts the crystallization of the security policy decision point.

Description

Watermark automatic processing system and method {SYSTEM AND METHOD FOR AUTOMATIC WATERMARKING}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technique for processing a watermark on a file, and in particular, when the user tries to access a file stored on a computer hard disk, the user automatically recognizes the watermark according to a predefined security policy. A watermark automatic processing system and method suitable for processing the present invention.

This research was conducted as part of the joint research project of IT new growth engine core technology development project [2005-S-604-03, virtual production technology development] of the Ministry of Knowledge Economy and ICT and the Fraunhofer IGD in Germany.

Today, intellectual property disputes are increasing day by day, and various measures are being discussed to protect such intellectual property rights. The VSI Alliance Intellectual Property Protection Development Working Group offers three ways to address intellectual property rights. First, as a deterrent method, an owner wants to distribute illegally through appropriate legal methods such as patents, copyrights, trade secrets, agreements or litigation without using any physical method. It's a way to stop intentions. Second, protection is a way to prevent unauthorized use by owners through encryption and license agreements. This method is often used in the dispensing step. That is, the buyer must have a decryption key for decryption. However, this method is not secure when a trusting agency, an employee, a broker, etc. leak the decryption key. The third detection method uses watermarking and fingerprinting to detect and track owners' illegal use of intellectual property. This tracking method should be clear enough to be taken as evidence in a court of law if necessary.

As such, watermarking technologies are classified according to the type of media medium to which they are applied, and image, audio, and video watermarking technologies are now mainstream. Recently, as the use of 3D data based on CAD has increased rapidly and the sales of products using such data in virtual space have increased, watermarking technology for 3D data has been developed. Problems such as illegal copying and distribution of data can be prevented by inserting information such as an identification card for a copyright holder, such as a watermark, into the data. Copyright holders can use watermarks to identify sources of illegal distribution of data. The watermark inserts additional data that is not visible to the naked eye and does not change in any format conversion. This additional data can be used for a variety of purposes, including document approval, document tracking, and copyright management.

1 is a flowchart illustrating a general watermark processing procedure.

Referring to FIG. 1, in step 100, a user or a security manager selects one of a file or an input file previously stored in a computing device to determine whether to insert a watermark for the file selected in step 102. If watermark insertion is required for the file selected in step 104, the process proceeds to step 106, and watermark insertion is performed for the selected file. After performing the insertion, the process returns to step 100 to select another file and determines whether or not to process the watermark.

As such, when the user or the security manager wants to insert a watermark into a specific file, the watermark is inserted through an application operation for performing watermarking. However, in this case, although the watermark should be inserted, there is a security threat that can be omitted due to the wrong intention or mistake of the user or the security administrator.

In the watermarking processing method according to the prior art operating as described above, since the watermark is manually inserted by the user or the security manager into the data requiring watermarking, the file to which the watermark is to be inserted, or the intention of the user or the security manager is illegal. Or, if a leak has been illegally leaked without a watermark due to a mistake or the like, end users cannot be tracked and proof of ownership cannot be obtained.

Accordingly, the present invention provides a watermark automatic processing system capable of automatically processing a watermark according to a predefined security policy in a state in which the user does not recognize when a user attempts to access a file stored in a computer hard disk; Provide a method.

The present invention also provides a watermark automatic processing system and method that can automatically process a watermark according to a security policy using a file system filter driver operating in the kernel mode of the computing device.

The present invention also determines whether to insert a watermark by comparing the information related to file access monitored by the file system filter driver with a predefined security policy, and according to the determination result, the user access file without further manipulation of the user. Provided are an automatic watermark processing system and method for embedding a watermark in a watermark.

An embodiment system of the present invention, a security policy database for storing a set security policy, a security policy setting module for changing the setting of the security policy, and determines whether to insert a watermark of the file based on the set security policy A security policy determination module configured to transmit the user information and the file information to the security policy determination module, a file system filter driver module to control file access, and a watermark according to the security policy determination module. It includes a watermarking module to insert.

According to an embodiment of the present invention, a method of loading a security policy stored in a security policy database into an operating system during operation of a computing device, and user information for accessing a file from a file system filter driver operating in a kernel mode of the computing device is provided. And monitoring information on the file, determining whether to insert a watermark by comparing the monitored information with the security policy, and allowing a user to access a file according to the determination result. The process of performing mark insertion is included.

In the present invention, the effects obtained by the representative ones of the disclosed inventions will be briefly described as follows.

According to the present invention, when a user accesses a file stored in a computer hard disk, the user may not recognize the file, thereby inserting a watermark in the file according to a predefined security policy. Enable end-user tracking. Therefore, it provides the high level of security by proving ownership of important data stored in the computer and preventing illegal data leakage, thereby preventing economic loss due to data leakage and providing a safe computing environment.

Hereinafter, the operating principle of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, if it is determined that a detailed description of a known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, terms to be described below are terms defined in consideration of functions in the present invention, which may vary according to a user's or operator's intention or custom. Therefore, the definition should be made based on the contents throughout the specification.

The present invention provides a module for setting and determining a security policy, a kernel system file system filter driver module for monitoring file access and controlling file access stored in a computer hard disk, a watermarking module for inserting a watermark, and a security policy. By providing the security policy DB to store, watermark can be automatically inserted according to the security policy set up in advance without the user's or the security administrator's additional operation. It is possible to eliminate security threats that do not embed watermarks.

Hereinafter, exemplary embodiments of the present invention will be described in more detail with reference to the accompanying drawings.

2 is a block diagram showing the structure of an automatic watermark processing system according to a preferred embodiment of the present invention.

Referring to FIG. 2, a watermark automatic processing system for automatically processing a watermark according to a security policy using a file system filter driver includes a filter driver module 200, a security policy determination module 202, and a security policy DB ( 204, a security policy setting module 206, and a watermarking module 208.

The filter driver module 200 monitors user-related information and information about a file to be accessed in real time when a user accesses a file stored in a computer hard disk, and provides information related to the user-related information and a file to be accessed and a dictionary. Control user access to files until the end of comparing defined security policies.

The security policy determination module 202 compares the predefined security policy with the information monitored by the file system filter driver module 200 to determine whether to insert the watermark. The security policy DB 204 is a database that stores a security policy related to watermark processing. The security policy DB 204 supports setting change of a security policy used to determine whether to insert a watermark in the security policy setting module 206, and a new security policy. In the case of introducing a new security policy into the security policy setting module 206, the security policy setting module 206 uploads the new security policy to the security policy DB 204. Accordingly, the security policy DB 204 reflects the new security policy and transfers it to the security policy determination module 202.

Herein, the security policy may be condition information, and when the security policy determination module 202 determines whether to insert a watermark for a specific file, one or more corresponding information may be applied to the condition information of the security policy among user-related information and information about a file to be accessed. If the information is included, watermark embedding is performed for this file.

In addition, by classifying and setting the security level for each user and file, the security policy determination module 202 may apply a more flexible security policy.

For example, if the user information accessing the file is included in the security policy, the name or IP address of the accessing user is inserted into the file as a watermark. In addition, the security policy is to set whether to insert a watermark for each file type, such as a document file or a music file. When a user accesses a document file, the watermark is inserted.

In this case, the watermark may include user information including a user access time, an IP address, a user name and ID, etc., which may track the end user or enable proof of ownership, and may include letters, numbers, symbols, codes, It can be produced using at least one of the company mark.

The watermarking module 208 performs watermarking on the file based on the set security policy. When the security policy determination module 202 decides to insert a watermark on a specific file, the watermarking watermarking of the decision information is performed. By delivering to module 208, watermarking module 208 performs a watermark embedding operation on the file.

3 is a flowchart illustrating a watermark processing procedure in an automatic watermark processing system according to a preferred embodiment of the present invention.

Referring to FIG. 3, a watermark is automatically processed according to a security policy using a file system filter driver of a computing device. When the computing device is operated in operation 300, the security policy determination module 202 is loaded. The security policy list stored in the security policy DB 104 is taken and stored in a memory variable inside the computing device.

In operation 302, when a user attempts to access a file stored in a hard disk while the computing device is in operation, that is, when the user selects a cursor by clicking or clicking a specific file on an application screen of the computing device, the computing device is selected. The file system filter driver module 200 operating in the operating system installed in the system recognizes that the cursor is located in the file and recognizes it as a point in time when the user attempts to access the file. The file system filter driver module 200 monitors the user's file access information and controls the user's file access until the end of comparing the information monitored by the security policy determination module 202 with the predefined security policy. do.

In step 304, the security policy determination module 202 compares the file access information received from the file system filter driver module 200 with the security policy obtained from the security policy DB 204.

If the file access information and the security policy match or there is a part corresponding to the file access information in the security policy conditions, the process proceeds to step 306 to allow the user to access the file and call the watermarking module 208 to access the user. This will insert a watermark into the file. However, if the file access information and the security policy are inconsistent, if the user tracking is not required or the file is of low importance, the process proceeds to step 308 where watermark insertion is not performed.

On the other hand, in step 308, the file can be accessed according to the security policy, but it may be divided into a case in which a watermark insertion is not required and a file access denial occurs. This happens when the security policy is set to deny access for the selected file. That is, it is also possible to perform the file access permission and deny according to the security policy set in advance.

Meanwhile, the watermarking processing technology that can be used in an embodiment of the present invention includes inserting a watermark specific code, type, logo, etc. into each frame of an image or a video, or user network IP, By recording the user name or ID, such functions as copyright management and document tracking are performed. In the case of a voice file, a watermarking specific code, type, logo, or the like is inserted into the file, or copyright voice information or a specific sound that is not recognized by the user is inserted.

This allows watermarks to be inserted into files according to a predefined security policy without the user's knowledge when accessing the files stored on the computer's hard disk. Enable end-user tracking. Therefore, it is possible to prevent ownership of illegal data and leakage of important data stored on the computer.

As described above, the present invention provides a module for setting and determining a security policy, a file system filter driver module for monitoring file access and controlling file access stored in a computer hard disk, a watermarking module for inserting a watermark, and security. By providing the security policy DB that stores the policy, watermark can be automatically inserted according to the preset security policy without additional user or security administrator's operation. It makes it possible to eliminate security threats that do not inadvertently insert a watermark.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments, but is capable of various modifications within the scope of the invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the scope of the following claims, but also by those equivalent to the scope of the claims.

1 is a flowchart illustrating a general watermark processing procedure;

2 is a block diagram showing the structure of an automatic watermark processing system according to a preferred embodiment of the present invention;

3 is a flowchart illustrating a watermark processing procedure in an automatic watermark processing system according to a preferred embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

200: file system filter driver module

202: security policy decision module

204: Security Policy DB

206: security policy setting module

208: Watermarking Module

Claims (10)

A security policy database for storing the set security policy, A security policy setting module for changing a setting of the security policy; A security policy determination module for determining whether to insert a watermark of a file based on the set security policy; A file system filter driver module for transferring user information and file information to the security policy determination module and controlling file access; Watermarking module to insert a watermark according to the security policy decision module Watermark automatic processing system comprising a. The method of claim 1, The file system filter driver module, When a user accesses a file, it monitors in real time information about the user and the file to be accessed, The security policy determination module controls the user's file access until the end of the comparison operation between the information and the security policy. 3. The method of claim 2, The security policy determination module, Comparing the user-related information and the information about the file to be accessed with the security policy, if at least one of the information, the information set in the security policy corresponds to watermark insertion is performed. Watermark automatic processing system. The method of claim 1, The security policy is, Watermark automatic processing system characterized in that it comprises the user-related information and the file-related information that needs to be inserted. The method of claim 1, The watermark is, Watermark automatic processing system, characterized in that produced using at least one of letters, numbers, symbols, codes, company marks capable of tracking and proof of ownership of the end user. Loading the security policy stored in the security policy database into the operating system when the computing device operates; A file system filter driver operating in a kernel mode of the computing device to monitor user information accessing the file and information on the file; Determining whether to insert a watermark by comparing the monitored information with the security policy; A process of allowing a user to access a file according to the determination result and inserting a watermark Watermark automatic processing method comprising a. The method of claim 6, The monitoring process, If the file is selected by the user, real-time monitoring of user-related information and information about a file to be accessed; Controlling a user's file access until the watermark embedding determination result is derived Watermark automatic processing method comprising a. The method of claim 6, The process of determining whether to insert the watermark, And if at least one of the monitored information corresponds to information set in the security policy, inserting a watermark. The method of claim 6, The security policy is, Watermark automatic processing method characterized in that it comprises the user-related information and the file-related information that needs to be inserted. The method of claim 6, The watermark is, Watermark automatic processing method characterized in that produced by using at least any one of letters, numbers, symbols, codes, company marks capable of tracking and proof of ownership of the end user.

Images