KR20110067332A - System for network duplication and method thereof - Google Patents

Abstract

PURPOSE: A network duplication system and providing method thereof are provided to supply a network duplication function based on software through the design of an application program or an agent program. CONSTITUTION: A data processing device(100) is selectively connected to a first network and a second network which have different network environments. An agent(110) is installed in the data processing device. The data processing device can be connected to a memory device(200). The memory device can be attached/detached to/from the data processing device. The memory device can be a memory device with a USB (Universal Serial Bus) interface. The data processing device comprises a network device(400). A network duplication system includes an authentication server(300).

Description

Network redundancy system and its providing method

The present invention relates to a network redundancy system and a method of providing the same, and more particularly, to provide network redundancy using a network device that can be selectively connected to two or more networks and that can be physically shorted to a network that is not connected. It relates to a system that can be done and a method of providing the same.

Large organizations, such as public institutions or large corporations, use a separate closed network for performing tasks within the organization and for sharing information that should only be used within the organization. For example, an intranet may be a representative example.

However, in addition to these closed networks, members of an organization may need to access an open network (eg, the Internet).

However, if a closed network is set up and connected in the same manner as an open network, and two networks are used at the same time, it may cause serious security problems. In order to solve this problem, the network redundancy method that physically separates the network must be used.

In the existing network redundancy method, a method of physically separating two networks by separately providing a closed network and an open network-specific data processing device (for example, a computer) has been used.

However, this approach has resulted in significant resource waste (investment of redundant equipment and programs, waste of energy) and business inefficiencies.

Therefore, there is an urgent need for a network redundancy system and method capable of minimizing resource waste while ensuring security and supporting efficient business processes.

The technical problem to be achieved by the present invention is to be able to selectively connect to a plurality of networks using only one network device, and to physically separate the data processing device from the network which is not connected to maximize security while minimizing waste of resources. It is to provide a network redundancy system and method.

Another object of the present invention is to provide a network redundancy system and method for limiting an application program executable in an open network using a memory device.

In addition, it is to provide a system and method that all disk I / O that can be performed on the open network can occur through the memory device, so that the process or operation that was performed in the open network environment on the system is not affected.

In addition, the present invention provides a system and method for maintaining security by providing a separate web client running in an open network through a memory device.

In addition, the present invention provides a system and method that can guarantee the security of information stored in a memory device by providing an encryption function to the memory device.

The network redundancy system for achieving the technical problem includes a data processing device including a network device that can be selectively connected to the first network and the second network having a different network environment, and an agent installed in the data processing device, When the data processing apparatus connects to the second network, the agent executes execution of an application program other than an application program stored in a specific area of a memory device detachable from the data processing apparatus or a storage device included in the data processing apparatus. It is characterized by preventing.

When the data processing device is connected to either the first network or the second network, the network device may be shorted to the remaining unconnected network.

The memory device stores user authentication information, and the agent may authenticate a user in the first network environment based on the user authentication information stored in the memory device.

The network device includes a network port unit including a first network port for connecting to the first network and a second network port for connecting to the second network, a host interface unit for interfacing with the data processing device, and a network controller. One of a network port included in the network controller and the network port unit is connected, and the other network port may include a port switching unit including a switching circuit for shorting.

When the agent switches from the first network environment to the second network environment, the agent terminates applications and processes in the first network environment, shorts the first network port, and disconnects the second network port from the network controller. A first control signal can be output to the network device for connection.

The agent may control the disk I / O to occur only in a specific region of the memory device or the storage device in the second network environment.

When the agent switches from the second network environment to the first network environment, the agent terminates an application and a process in the second network environment, shorts the second network port, and shortens the first network port and the network. In order to connect a controller, a second control signal may be output to the network device.

The first network and the second network may be an intranet and the Internet, respectively.

The application program stored in the memory device or the specific area of the storage device includes a secure web client, and the secure web client may include a disk I / O generated through the secure web client in a specific area of the memory device or the storage device. You can only control it to happen.

The network device connects the port switching unit and the host interface unit, and further includes at least one control line for outputting a control signal output from the data processing apparatus to the port switching unit, wherein the port switching unit One network port included in the network port may be connected in response to the control signal received through one control line.

The port switching unit may short-circuit both the first network port and the second network port when a predetermined response signal is not received from the agent for a preset time.

The network redundancy system for solving the technical problem includes a data processing device including a network device that can be selectively connected to a first network and a second network having a different network environment, the network device is the first network Or, when connected to any one of the second network, characterized in that for shorting the remaining unconnected network and the data processing device.

A network redundancy system for solving the technical problem includes a data processing device including a network device that can be selectively connected to a first network and a second network having different network environments, an agent installed in the data processing device, and the data. And a memory device detachable from the processing device, wherein the data processing device is connected to either the first network or the second network, and the remaining unconnected network and the data processing device are short-circuited. When connected to either the first network or the second network, the storage of data in the connected network can be controlled to occur only in the memory device.

The network redundancy system for solving the technical problem includes a data processing device including a network device that can be selectively connected to the first network and the second network having a different network environment, and the agent installed in the data processing device and When the network device is not in communication for a predetermined time, the network device may short both the first network and the second network.

Method for providing a network redundancy system for solving the technical problem is a data processing device comprising a network device that can be selectively connected to a first network and a second network having a different network environment access to the second network and Preventing the execution of an application program other than an application program stored in a specific area of a memory device detachable to the data processing apparatus or a storage device included in the data processing apparatus, by an agent installed in the data processing apparatus.

To provide a network redundancy system for solving the technical problem, a network device capable of being selectively connected to a first network and a second network having a different network environment may receive a control signal for connecting to the second network from a data processing device. And receiving and shorting the network device from the first network in response to the received control signal.

In a method for providing a network redundancy system for solving the technical problem, a network device capable of being selectively connected to a first network and a second network having a different network environment may not communicate with an agent installed in a data processing device for a predetermined time or more. The network device may include shorting both the first network and the second network when no communication is performed for more than the predetermined time. The redundant system providing method may be stored in a computer-readable recording medium recording a program.

The network duplication system and the method of providing the same according to the present invention have the effect of minimizing the waste of resources by physically separating only the minimum resources (that is, network devices) necessary to provide a physically separated network environment.

In addition, it is possible to increase the applicability by providing a software-based network redundancy function through the design of an application program or an agent program provided to a memory device.

In addition, by using a removable memory device, all disk I / O that can be performed on an open network can be performed through the memory device or only authorized applications can be executed, thereby simplifying security while maintaining network-specific systems. Independence of the effect is effective.

In addition, by providing an encryption function to the memory device, there is an effect of ensuring the security of information that can be managed separately from the system.

In order to fully understand the present invention, the operational advantages of the present invention, and the objects achieved by the practice of the present invention, reference should be made to the accompanying drawings which illustrate preferred embodiments of the present invention and the contents described in the accompanying drawings.

Also, in this specification, when any one element 'transmits' data to another element, the element may transmit the data directly to the other element, or may be transmitted through at least one other element And may transmit the data to the other component.

Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Like reference numerals in the drawings denote like elements.

1 is a schematic block diagram of a network redundancy system using a memory device according to an embodiment of the present invention.

Referring to FIG. 1, a network duplication system using a memory device according to an embodiment of the present invention includes a data processing device 100. The data processing device 100 may be connected to the memory device 200, and the memory device 200 may be embodied in a form detachable from the data processing device 100. For example, the memory device 200 may be a memory device having a universal serial bus (USB) interface.

In the data processing apparatus 100, an agent 110 program for implementing a network redundancy method according to an exemplary embodiment of the present invention may be installed. In addition, the data processing device 100 may be provided with a network device 400. In addition, the network redundancy system according to an embodiment of the present invention may further include an authentication server 300 for authenticating a user who uses the data processing apparatus 100 through a first network.

In this specification, two different network environments and a network device 400 that can be selectively connected to the two different network environments are described as an example, but according to an implementation example, two or more network environments and two or more network environments are described. It can be easily inferred by the average expert in the art that a network duplication method and system using a selectively connectable network device can be applied to the technical idea of the present invention.

The technical idea of the present invention provides a technical idea that can duplicate a network in an environment in which different networks are used by physically separating networks while using minimal resources. The present applicant has filed a Korean patent application (Application No. 10-2008-0085426, "Network Redundancy System Using Memory Device and Its Provision Method", hereinafter "Previous Application 1") for the technical idea, The technical spirit and contents described may be treated as the contents described herein, and may be used as a reference of the specification.

Previous application 1 provides a technical idea of a network duplication system using different network devices and memory devices in one data processing device. The network redundancy system and method disclosed in the previous application 1 uses different independent network devices to separate applications and / or data between one network and another network, thereby ensuring security and efficient use of resources. do.

On the other hand, the applicant in the Korean patent application (application number 10-2009-0041033, "network interface card including a port switching circuit," "previous application 2") to one of the plurality of networks using one network device Disclosed is a network interface card that is selectively connectable and that can physically block a connection with unconnected networks. The technical spirit and its description described in the previous application 2 may be treated as a description of the present specification, and may be used as a reference of the present specification.

The technical idea of the present invention may be derived using the technical idea of the previous application 1 and the previous application 2. That is, the technical idea of the present invention is to selectively connect to any one of the plurality of networks as disclosed in the previous application 2, instead of using a plurality of network devices that are independent of each other in the technical idea of the previous application 1, a network that is not connected By using a network interface card that can physically block the connection with the network, it blocks the simultaneous access of heterogeneous networks and prevents the use and access of applications and / or data used in other environments. Network redundancy system can be provided. At the same time, there is an effect to provide a network redundancy system that can prevent the waste of resources compared to the previous application.

In addition, the technical idea of the present invention includes a technical idea that disk I / O occurs only in the security area by using a specific area of the data processing device as the security area in addition to the memory device for the security mechanism disclosed in the previous application 1. This technical idea may be implemented using, for example, the technical idea disclosed in Korean Patent Registration (Registration No. 10-0911345, “Contents Security Method and Apparatus”, hereinafter “Registered Patent”) applied by Terten Corporation. have. In this case, the security area may be implemented as a virtual disk drive as disclosed in the registered patent. Of course, in order to implement the technical spirit of the present invention, in addition to the above-described patents, a specific area of the storage device provided in the data processing device is set as the security area, so that the technology to perform only an authorized process or an authorized operation is provided. It may be applicable to the technical idea of. The technical idea disclosed in the registered patent and its contents can be utilized as a reference of the present invention when treated as described in the present specification.

Hereinafter, look at the configuration of the network duplication system according to an embodiment of the present invention in more detail.

In this specification, the network device 400 may mean a communication device for selectively connecting the data processing apparatus 100 to any one of a first network and a second network. For example, the network device 400 may be implemented as a network interface card, but is not limited thereto.

The data processing apparatus 100 may be used as a meaning including all devices capable of performing data processing in different network environments. For example, the data processing device may be a computer, a PDA, or the like.

The agent 110 is a storage device (eg, hard drive, solid state drive) provided in the memory device 200 or the data processing device 100 to implement a network redundancy method according to an embodiment of the present invention. ), Or a software and / or process capable of controlling data input / output for a specific region of a flash drive or the like, or accessing or using information stored in the memory device 200 or the specific region. In addition, the agent 110 may control the network device 400 to selectively connect the network device 400 to either the first network or the second network. Alternatively, a message / call between the OS of the data processing apparatus 100 and an application program or a process may be controlled as necessary.

The memory device 200 is detachable from the data processing device 100 and has a memory having a predetermined capacity or more, so that the data processing device 100 is used in at least one of the first network and the second network. Basically, it can support the required capacity.

For example, the memory device 200 may be connected to the data processing device 100 through a universal serial bus (USB) port. In addition, the memory device 200 may be combined with other peripheral devices required for the data processing device 100 as well as a device for simply storing information.

For example, the memory device 200 may be embedded in one of the input / output devices of the data processing device 100 (eg, a mouse, a keyboard, a joystick, etc.). Of course, the memory device 200 may be a separate independent information storage device.

Meanwhile, a specific area of a storage device (not shown) provided in the data processing device 100 may be used as the memory device 200. For example, the specific area may be an area set as a virtual drive as described in the registered patent. Then, the specific region may be accessible only to authorized processes, and information stored in the specific region may not use a predetermined specific function (eg, file I / O, clipboard interface, network I / O, etc.). . In addition, in a specific network (eg, the second network), as described below, the disk I / O may occur only in the specific area, so that the security mechanism in the network duplication system according to the technical idea of the present invention may be applied. Hereinafter, an embodiment using the memory device 200 will be described for convenience of description, but an average expert in the technical field of the present disclosure may replace at least some of the functions of the memory device 200 with the specific area. Can be easily deduced.

In the following description, the first network is an intranet, and the second network is the Internet. However, the present invention is not limited thereto, and the scope of the present invention may extend to at least two different networks requiring network redundancy in a data processing apparatus that is accessible to different network environments.

First, the agent 110 may be installed in the data processing apparatus 100. Then, the agent 110 may authenticate the user by using the memory device 200 at the time of booting or at a time point set by the system and / or the user.

The memory device 200 may store user authentication information uniquely set for each user. According to an embodiment of the present disclosure, the user authentication information may use a unique identification number of the memory device 200 and / or information generated based on the unique identification number.

For example, when the data processing apparatus 100 is booted, the agent 110 may be automatically executed to extract user authentication information in the memory device 200. Then, the agent 110 may be connected to the authentication server 300 through a first network (eg, an intranet) to authenticate a user.

In addition, the memory device 200 may further store environment setting information of the first network and / or environment setting information of the second network, and the agent 110 may be booted as the data processing device 100 is booted. The network environment may be automatically set based on the stored configuration information of the first network and / or the second network.

The network environment after booting may be a first network environment that is a basic network environment. Thus, the network device 400 may be connected to the first network. To this end, the network device 400 controls a predetermined configuration (port switching unit 420, which will be described later) provided in the network device 400, so that the data processing apparatus 100 is connected to the first network. You can do that. Hereinafter, the network device 400 will be described in detail.

5 schematically illustrates a configuration of a network device according to an embodiment of the present invention.

Referring to FIG. 5, a network device 400 according to an embodiment of the present invention includes a network controller 410, a port switching unit 420, a host interface 430, and a network port unit 440. The network device 400 may be implemented as a network interface card. The network controller 110 or the network device 400 may further include various well-known components (eg, DMA, FIFO, ARP device, etc.), but the detailed description is omitted to clarify the gist of the present invention. do.

The network controller 410 allocates a media access control (MAC) address to a host (not shown) connected through the host interface (eg, PCI interface) 430 like a conventional network interface card so that the host can access a network. It has a role to connect.

The port switching unit 420 physically connects the network controller 410 and the network port unit 440. In particular, the port switching unit 420 allows only one network port of a plurality of network ports included in the network port unit 440 to be connected to the network controller 410, and physically shorts the remaining network ports. Can be. Therefore, the network device 400 according to the embodiment of the present invention through the port switching unit 420 selectively blocks physical connection between the network controller 410 and the network port, thereby being connected to different networks at the same time. Can be blocked by

The host interface 430 serves to connect the data processing device 100 and the network device 400, and the network device 400 is connected to an expansion slot of the data processing device through the host interface 130. Can be mounted.

The network port unit 440 may include a first network port 441 for connecting to a first network (eg, an intranet network) and a second network port (eg, 442 for being connected to a second network (eg, an internet network). ). Of course, more network ports may be provided in the network port unit 440.

Meanwhile, a predetermined control signal for controlling the port switching unit 420 may be output from the agent 110.

In this case, the agent 110 may output the control signal to the port switching unit 420 through the network controller 410, but may output the control signal through at least one separate control line 450. It may be. As such, by separately providing the at least one control line 450, the port switching unit 420 may be prevented from being controlled by an illegal application installed in the data processing apparatus 100. Only the agent 110 may control the port switching unit 420. In addition, by providing the control line 450 separately, the data processing apparatus 100 controls the network device 400 and / or through the control line 450 while maintaining the consistency of the interface. In addition, the port switching unit 420 may be controlled.

On the other hand, when the authorized application (eg, the agent 110) is terminated or abnormally operated by a predetermined malicious attack, the network device 400 of the present invention, the network device 400 to maintain security ) Can not be connected to any network. To this end, a network device driver (not shown) according to an exemplary embodiment of the present invention may be installed in the data processing apparatus 100 to terminate or abnormally operate the authorized application (eg, the agent 110). You can check. To this end, the network device driver may periodically receive a predetermined signal (eg, ACK) from the authorized application (eg, the agent 110). Of course, the status of the authorized application (eg, the agent 110) may be checked by various other implementations. If the agent 110 is terminated or does not perform a normal operation, the network device driver controls the control line 450 so that the network device 400 may be connected through the network port unit 440. A predetermined forced blocking signal may be output to the host interface 430 so as not to be connected to any network. Then, in response to the forced blocking signal, the port switching unit 420 may be shorted so that the network port unit 440 is not connected to any network.

Meanwhile, according to another exemplary embodiment of the present disclosure, in order to apply a security mechanism when the authorized application (eg, the agent 110) terminates or operates abnormally, the port switching unit 420 may include a predetermined processor. It may also include (not shown). Then, the processor included in the port switching unit 420 may periodically receive a control signal from the agent 110, and controls the port switching unit 420 according to the received control signal to the control signal. A corresponding network and the data processing device 100 may be connected. At this time, when the processor does not receive any control signal from the agent 110 for a predetermined time, the processor is the data processing apparatus 100 with any network port of the network port unit 440 The port switching unit 420 may be shorted so as not to be connected. That is, the agent 110 is configured to periodically transmit the control signal to the port switching unit 420. When the control signal is not received for a predetermined time or more, the agent 110 is attacked by a malicious attack. In this case, the security mechanism is operated by the agent 110 while being connected to a predetermined network by controlling the data processing apparatus 100 not to be connected to any network. Can be guaranteed.

The number of control lines 450 may vary depending on the number of network ports included in the network port unit 440. That is, at least one control line 450 may be required to select two network ports. In some implementations, a control signal for a state in which no network port is connected may be required. Therefore, the network device 400 according to an embodiment of the present invention will be described as an example in which at least two control lines 450 are provided for two network ports.

6A to 6C are diagrams for describing an operation of a port switching unit of a network device according to an embodiment of the present invention.

First, referring to FIG. 6A, when the value of the control signal is “11” or “00”, the port switching unit 420 according to the embodiment of the present invention connects the network controller 410 to any network port. Control not to. That is, the data processing apparatus 100 is in a state where it is not physically connected to the network.

Referring to FIG. 6B, when a control signal of “01” is received from the data processing apparatus 100, that is, the agent 110, the port switching unit 420 may connect the network controller 410 to the first network. Port 141 may be connected. In this case, all network ports except for the first network port 441 may be shorted.

In addition, referring to FIG. 6C, when a control signal of “10” is received from the agent 110, the port switching unit 420 may connect the network controller 410 to the second network port 442. have. Of course, all network ports except for the second network port 442 may be shorted.

Therefore, the specific program (eg, the agent 110) of the data processing apparatus 100 outputs the control signal to the port switching unit 420 through the control line 450, thereby selectively providing the first network. And the second network is not connected to the network at the same time, and is physically short-circuited with a network other than the network to which the second network is connected. Access or malicious attacks can be blocked at source. It can be easily inferred by the average expert in the art that the port switching unit 420 may have various embodiments in order to perform the switching function as described above.

On the other hand, when the network device 400 is initialized, for example, when the network device 400 is powered on, one of a specific network port (for example, the first network port 441 or the second network port 442). The port switching unit 420 may be set so as to always be connected. For example, in the initialization state, it may always be connected to a secure intranet network, and in order to be connected to an insecure internet network, it may be connected to the internet network only by receiving a predetermined control signal from the agent 110 artificially. have.

In addition, the first network port 441 and the second network port 442 may be implemented as different types of network ports. For example, the first network port 441 may be implemented as an RJ-11 type, and the second network port 442 may be implemented as an RJ-45 type. By using different types of network ports as described above, the network to which the data processing apparatus 100 is physically connected can be distinguished.

Referring back to FIG. 1, a user authentication process may be performed using the memory device 200 as described above. If the user's authentication is successful, the user can use all the applications (applications) allowed in the first network environment in the first network (eg, intranet) use environment, and the storage provided in the data processing apparatus 100 can be used. Devices (eg, hard disks, etc.) may also be accessible. That is, in the first network, which is a basic use environment of the data processing apparatus 100, a user may perform necessary tasks with little restriction. Restriction of a user in an environment in a first network may include, for example, access of the agent 110 itself or access of a part of the memory device 200 (eg, access to user authentication information). have.

It is preferable that a user cannot access the agent 110 itself and change necessary functions or settings. In addition, when the predetermined file is stored in the memory device 200 in the first network use environment, encryption may be performed without performing the encryption. However, when the predetermined file is stored in the memory device 200, the encrypted file may be stored. It may be. Therefore, security of the memory device 200, which can be managed separately from the data processing device 100, can be guaranteed. An encryption process can be performed by the agent 110. According to an exemplary embodiment, when a predetermined processor is provided in the memory device 200, an encryption process may be performed by the memory device 200.

For example, when the data processing apparatus 100 attempts to write a file to the memory device 200, the agent 110 may perform encryption using a predetermined encryption method and store the encrypted data. The agent 110 may perform encryption by using the unique identification number of the memory device 200 as an encryption key.

Meanwhile, a user may need to access the second network while using the data processing apparatus 100 in the first network environment.

At this time, a procedure as shown in FIG. 2 may proceed.

2 is a data flowchart of a method of providing a network redundancy system using a memory device according to an embodiment of the present invention.

1 and 2, as described above, the agent 110 may extract authentication information from the memory device 200 to authenticate a user (S100). A network redundancy system according to an embodiment of the present invention may be used (S110).

Thereafter, the user may request the agent 110 to switch the network (S120). To request network switching, the user may select a predetermined UI (eg, a button, etc.) provided by the agent 110. Then, the agent 110 performs a predetermined process to switch the network environment.

First, the agent 110 may terminate all the application programs running in the usage environment of the first network (S130). Of course, the agent 110 is not included in all the applications.

Thereafter, the agent 110 outputs a predetermined control signal to the network device 400 as described above, so that the network controller 410 is shorted with the first network port 441, and the second It may be connected to the network port 442 (S140).

Then, the data processing apparatus 100 is connected to the second network (S150).

Since the second network is not a basic environment of the data processing apparatus 100, a security mechanism or a restriction of various usage environments may be necessary for security or function.

According to an embodiment of the present invention, the security mechanism is a second network environment, but only an application program stored in a specific area of the memory device 200 or a storage device (not shown) of the data processing device 100 as described above. This may include the mechanism by which it is executed.

A process as shown in FIG. 3 may be performed to execute only an application program stored in the memory device 200 or the specific region.

3 illustrates a data flow of a security mechanism of a network redundancy system according to an embodiment of the present invention.

Referring to FIG. 3, the agent 110 may monitor an application program called in a second network environment (S151). Then, the agent 110 may determine whether the called application program is an application program stored in the memory device 200 (S152). As described above, a specific region of a storage device (not shown) included in the data processing device 100 may serve as the memory device 200 according to an embodiment. That is, the agent 110 may determine whether the called application program is an application program stored in the specific area. Whether an application program stored in the memory device 200 or the specific region is called is not only whether the application program itself is called, but also an application program corresponding to the called application program is stored in the memory device 200. It can be used to mean whether it is.

For example, the agent 110 hooks a call of an application program output from a user to an OS, and if the application program corresponding to the call of the hooked application program exists in the memory device 200 or a specific region, The path or the message may be changed by the application stored in the memory device 200 or a specific region. For example, when a web browser stored in the data processing apparatus 100 is called, a secure web client corresponding to the web browser stored in the memory device 200 or the specific region may be called.

If an application program corresponding to the called application program does not exist in the memory device 200 or the specific region, no application program may be executed.

The application program stored in the memory device 200 or the specific area may be an authenticated application program that is permitted to be used in a second network environment. In particular, the application may include a secure web client (eg, a web browser) when the second network is the Internet.

The secure web client (eg, web browser) may have its own security mechanism. For example, the secure web client (for example, a web browser) may be stored in the memory device 200 or the specific area, and may be set to not move.

That is, when the security mechanism of the network redundancy system according to the embodiment of the present invention is provided using the memory device 200, the secure web client is stored in the memory device 200 and the data processing device 100. ), The secure web client (eg, a web browser) may be executed only through the memory device 200.

In addition, the secure web client (eg, web browser) may control the disk I / O occurring through the secure web client (eg, web browser) to occur only to the memory device 200. That is, I / O to other storage devices provided in the data processing apparatus 100 may be prevented from occurring. Therefore, it is possible to prevent the basic use environment from affecting the first network environment. For example, the secure web client (eg, web browser) can prevent the installation of a program such as an ActiveX, which can be installed automatically or manually during web browsing. Of course, not only ActiveX but also all other files can be prevented from being stored in the data processing apparatus 100.

According to an embodiment, when a security mechanism of a network redundancy system according to an embodiment of the present invention is provided using the specific area (eg, a virtual drive), the secure web client is stored in the specific area, and the data processing device The secure web client (for example, a web browser) may be executed only through the specific area.

In addition, the secure web client (eg, web browser) may control the disk I / O occurring through the secure web client (eg, web browser) to occur only in the specific area. That is, it is possible to prevent I / O to occur in another storage area provided in the data processing apparatus 100.

Meanwhile, predetermined temporary files may be generated and stored while the secure web client is executed in the second network environment. The temporary files may be a memory (eg, a main memory (RAM) provided in the data processing apparatus 100). Can be stored in some designated area). That is, a partial area of the memory may be set as an area in which the temporary file is to be stored, and the temporary file is stored in the partial area of the memory so that the temporary file is stored in the memory device 200 or the data processing device 100. Unlike the case in which the storage device is provided in the storage device, all of the temporary files stored when the system is shut down or powered off are also lost. Accordingly, even after the system is shut down, even if the system is powered on to the first network environment, the temporary network, which is a product of the second network environment, is lost.

If the network environment of the data processing apparatus 100 is changed from the second network environment to the first network environment, the agent 110 performs a function of deleting temporary files stored in some regions of the memory. do. Therefore, there is an effect that can completely eliminate the problem of information security that can occur due to the temporary files created in the open network environment and the elements that can be attacked by the system.

4 is a diagram illustrating a disk I / O control process according to an embodiment of the present invention.

Referring to FIG. 4, the secure web client (eg, a web browser) may monitor the disk I / O when a disk I / O (eg, file storage, etc.) occurs in the data processing apparatus 100. There is (S153). If the path information included in the disk I / O is not the memory device 200 (or the specific area), the disk I is automatically transferred to the memory device 200 (or the specific area) with the user's consent or automatically. It is possible to change the path where the / O will occur (S154). Alternatively, when a user needs to designate a path of the disk I / O, the designation of a path corresponding to the storage provided in the data processing apparatus 100 may be disabled.

Thereafter, the data processing apparatus 100 may perform disk I / O with a designated path.

As such, the network redundancy method according to the embodiment of the present invention may include a mechanism for executing only an application program stored in the memory device 200 (or the specific region) and / or a mechanism of the application program itself. .

In addition, the network redundancy method according to an embodiment of the present invention may further control disk I / O through the agent 110.

For example, when the disk I / O is not performed by the secure web client (eg, a web browser) in a second network environment, or when disk I / O occurs in another process operation, the agent 110 may be configured to execute the memory device ( 200) (or the specific region), it is possible to control the disk I / O to occur. Since the process of the agent 110 performing the disk I / O is similar to that described in FIG. 4, a detailed description thereof will be omitted.

As described above, the network redundancy system according to the embodiment of the present invention only executes an application program that is authenticated (that is, stored in the memory device 200 (or the specific area)) in the second network environment, not the basic use environment. Allowing the disk I / O to occur only through the memory device 200 (or the specific region) can provide a duplication method physically and logically separated from the first network.

Meanwhile, in the second network environment, the user may make a request for the network switch back to the first network environment to the agent 110.

Then, the agent 110 terminates applications and processes in the second network environment, shorts the second network port 442 and connects the first network port 441 with the network controller. As a result, the first network can be accessed.

Since the second network environment is not a basic use environment and thus may be vulnerable for security, the agent 110 may forcibly terminate not only an application program executed in the second network environment, but also a user process. If the process that is performed in the second network environment is not terminated, the data processing device (eg, by performing a predetermined operation on the data processing device 100 in the first network environment even after being converted to the first network environment) Because it may affect 100).

Thereafter, the user may use the data processing apparatus 100 with minimal restrictions in the first network, which is a basic use environment. In a first network environment, access and / or use of the memory device 200 (or the specific area) may be restricted, and in the first network environment, the memory device 200 (or the specific area) may be restricted. It may also allow access and / or use.

The method for providing a network redundancy system according to an embodiment of the present invention may be embodied as computer readable codes on a computer readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include USB storage devices, ROMs, RAM, CD-ROMs, magnetic tapes, hard disks, floppy disks, optical data storage devices, and the like. Transmission). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. And functional programs, codes and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

Although the present invention has been described with reference to one embodiment shown in the drawings, this is merely exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

BRIEF DESCRIPTION OF THE DRAWINGS In order to better understand the drawings cited in the detailed description of the invention, a brief description of each drawing is provided.

1 is a schematic diagram of a network redundancy system according to an exemplary embodiment of the present invention.

2 is a data flowchart of a method for providing a network redundancy system according to an exemplary embodiment of the present invention.

3 illustrates a data flow of a security mechanism of a method for providing a network redundancy system according to an exemplary embodiment of the present invention.

4 is a diagram illustrating a disk I / O control process of a network duplication system according to an exemplary embodiment of the present invention.

5 is a diagram illustrating a schematic configuration of a network device of a network redundancy system according to an embodiment of the present invention.

6A to 6C are diagrams for describing an operation of a port switching unit of a network device according to an embodiment of the present invention.

Claims (21)

A data processing device including a network device selectively connected to a first network and a second network having different network environments; And An agent installed in the data processing apparatus, When the data processing apparatus connects to the second network, the agent executes execution of an application program other than an application program stored in a specific area of a memory device detachable from the data processing apparatus or a storage device included in the data processing apparatus. Network redundancy system characterized in that it prevents. The method of claim 1, wherein the network device, And when the data processing apparatus is connected to either the first network or the second network, short-circuits with the other unconnected networks. The memory device of claim 1, wherein the memory device comprises: Stores your credentials, And the agent authenticates a user in the first network environment based on the user authentication information stored in the memory device. The method of claim 2, wherein the network device, A network port unit including a first network port for connecting to the first network and a second network port for connecting to the second network; A host interface for interfacing with the data processing device; Network controller; And And one of a network port included in the network controller and the network port unit is connected, and the other network port includes a port switching unit including a switching circuit for shorting. The method of claim 4, wherein the agent, When switching from the first network environment to the second network environment, Terminating applications and processes in the first network environment; And outputting a first control signal to the network device for shorting the first network port and connecting the second network port and the network controller. The method of claim 4, wherein the agent, And network I / O only occurs in a specific region of the memory device or the storage device in the second network environment. The method of claim 5, wherein the agent, When switching from the second network environment to the first network environment, Terminating applications and processes in the second network environment; And outputting a second control signal to the network device for shorting the second network port and connecting the first network port and the network controller. The method of claim 1, wherein the first network and the second network, Network redundancy systems, which are intranets and the Internet, respectively. The method of claim 1, wherein the application program stored in the memory device or a specific area of the storage device, Includes a secure web client, The secure web client, And network I / O occurring through the secure web client to occur only in a specific area of the memory device or the storage device. The method of claim 9, And a temporary file generated while the secure web client is executed in the second network environment is stored in a partial region of a memory included in the data processing apparatus. The method of claim 10, The agent, When switching from the second network environment to the first network environment, And deleting the temporary file stored in the partial region of the memory. The network device of claim 4, wherein the network device comprises: At least one control line connecting the port switching unit to the host interface unit and outputting a control signal output from the data processing apparatus to the port switching unit, And the port switching unit connects one network port included in the network port unit in response to the control signal received through the at least one control line. The method of claim 12, wherein the port switching unit, If a predetermined response signal is not received from the agent for a preset time, A network redundancy system shorting both the first network port and the second network port. It includes a data processing device including a network device that can be selectively connected to the first network and the second network having a different network environment, And the network device short-circuits the remaining unconnected network and the data processing device when the network device is connected to either the first network or the second network. A data processing device including a network device selectively connected to a first network and a second network having different network environments; An agent installed in the data processing device; And A memory device detachable from the data processing device; When the data processing apparatus is connected to either the first network or the second network, the remaining network which is not connected and the data processing apparatus are short-circuited, The agent, When connected to either the first network or the second network, The network redundancy system of claim 1, wherein the storage of data in the connected network is controlled to occur only in the memory device. It includes a data processing device including a network device that can be selectively connected to the first network and the second network having a different network environment, When the agent installed in the data processing device and the network device does not communicate for a preset time, The network device short-circuits both the first network and the second network. A data processing device including a network device selectively connected to a first network and a second network having different network environments; And An agent installed in the data processing apparatus, When the data processing apparatus accesses the second network, the agent controls to browse the second network with a memory device detachable from the data processing apparatus or a secure web client included in the data processing apparatus. , And a temporary file generated while the secure web client is executed in the second network environment is stored in a partial region of a memory included in the data processing apparatus. Accessing the second network by a data processing apparatus including a first network having a different network environment and a network device capable of being selectively connected to the second network; And An agent installed in the data processing apparatus provides a network redundancy system comprising the step of preventing execution of an application other than an application stored in a specific area of a memory device detachable to the data processing apparatus or a storage device provided in the data processing apparatus. Way. Receiving a control signal for connecting to the second network from a data processing apparatus by a network device capable of being selectively connected to a first network and a second network having different network environments; And connecting the network device to the second network in response to the received control signal, and shorting the first network. Determining whether a network device that can be selectively connected to a first network and a second network having a different network environment is not communicating with an agent installed in the data processing device for a preset time or more; And And if the communication is not performed for more than the preset time, determining that the network device short-circuits both the first network and the second network. A computer-readable recording medium having recorded thereon a program for performing the method according to any one of claims 18 to 20.

Images