KR20130138542A - Physical and it security device control method and system based on security incident response process - Google Patents

Abstract

The present invention relates to an apparatus and a method for controlling a physical/IT security equipment based on a security incident response process comprising: a response process management part for determining a response policy according to information on the security incident detected by an integrated security system and generating information on processes to be performed; a response process processing part for performing the processes generated by the response process management part and generating unified commands for controlling the physical security equipment and the IT security equipment required to be linked with the response policy; a space calculation processing part for searching for the security equipment required to be linked with the response policy, performing the space calculation based on a space phase relation between a corresponding security equipment and a position of the security incident in order to calculate parameters necessary for controlling the searched security equipment; a control proxy agent based equipment controller for performing multiple connections between the physical security equipment and the IT security equipment and transmitting the control commands to a corresponding security equipment; and a database for storing the information on the security incident, the response policy and the scripts of the process. The present invention can take a unified measure with respect to a physical/IT security area against the incident at a converged security space and provide an extendable and flexible structure with respect to various possible security incident types and an addition to or a change of the security equipment. [Reference numerals] (10) Security incident analysis/detection unit;(110) Response process management part;(120) Response process processing part;(130) Space calculation processing part;(140) Equipment controller;(151) Security incident detection information DB;(152) Security equipment DB;(154) Response policy DB;(155) Process script repository;(160) GUI part;(20) Commercial security equipment (physical/IT}

Description

Physical and IT Security Device Control Method and System based on Security Incident Response process

The present invention relates to the control of physical and information technology (IT) security equipment based on the security breach response process, and more specifically, analysis and detection in an integrated security system in which various physical security devices and IT security devices operate in conjunction. In order to respond to security breaches, security breach response policy and response process are defined, and based on this, simultaneous control of multiple physical / IT security equipments in the space where security breach occurs is performed to increase the efficiency of security breach response. The present invention relates to a physical and IT security equipment control apparatus and method based on the infringement response process.

As is well known, security control is divided into physical area control, IT security area control, disaster prevention and environmental safety area control, and independent control solutions and services are provided for each area. Physical area control includes intrusion notification, video surveillance, access control, asset movement management, location recognition, etc., and IT security area control includes firewall, server security, network security, IPS (Intrusion Prevention System), DDoS (Distributed Denial of Service (Application), Application Security, Enterprise Security Management (ESM), Server, Network, DB, etc. Controls of disaster prevention and environmental safety areas include fire, gas monitoring, energy, air conditioning, air conditioning, and facility control.

On the other hand, in the security control, the installation of advanced individual security equipment has become the mainstream of security investment in the enterprise, but recently it has been changed to efficiently integrate, operate, and manage the physical security and IT technologies. Underlying security is a convergence of information security.

In line with these trends, efforts are being made to develop and manage technologies to integrate and manage the control area and to prevent security accidents caused by enterprise-wide risk management and proactive response. In particular, in order to effectively prevent the leakage of important information in the enterprise, physical security control and IT security control are integrated and converged. Accordingly, one type of interworking technology integrating physical security equipment and IT security equipment is PSIM (Physical Security Information Management). It provides visualization of security situation and surveillance equipment through integration of security equipment through network and Geographic Information System (GIS) mapping, and analysis of surveillance information.

However, while providing security device control functions to respond to security breaches, the diversity of physical security equipment and IT security equipment and the unique interface by security equipment manufacturers, spatial characteristics between IT security and physical security, and expansion of the scope of security targets Due to the increased complexity, it is difficult to effectively and physically cope with the security breach because it is difficult to control the physical security devices and IT security devices that need to be linked independently and unified for integrated security.

Although related companies are working together to standardize the interworking interface between security surveillance equipment, the security equipment that is being installed or operated is still a problem because it is limited to specific security equipment such as CCTV (Closed-Circuit TeleVision). Have In addition, in response to security breaches, the demand for improved response and intelligence through cycles that perform feedback after security breaches is increasing.

US Patent No. 7467400, filed December 16, 2008.

The present invention has been proposed to solve the problems of the prior art as described above, and a security breach response policy defined according to the type of security breach detected and analyzed in an integrated security system in which various physical security devices and IT security devices operate in conjunction with each other. Define and carry out the corresponding process accordingly.

In addition, the present invention performs the unified simultaneous control of multiple physical / IT security equipment on the security breach generation space, and improves the efficiency of the security breach response through feedback through the confirmation of the result.

As a first aspect of the present invention, a physical / IT security equipment control apparatus based on a security breach response process determines a response policy according to security breach information detected by an integrated security system, and generates a response process for generating information of a process to be performed. A management unit, a corresponding process processing unit that performs the process generated by the corresponding process management unit, and generates a unified command for controlling a physical security device and an IT security device that require interworking with the response policy; In order to search for the security equipment required to be linked to the response policy, and to calculate the parameters necessary for the control of the retrieved security equipment, a spatial operation is performed based on the spatial phase relationship between the security equipment and the location of the infringement. The space operation processing unit provided to the process processing unit, the physical security equipment and image May include multiple connections to the control command of IT security equipment and control proxy agent-based control equipment to deliver to the appropriate security equipment, parts of the database that stores the script of the security threat and the corresponding policies and the process.

Here, the response process management unit, the intrusion detection information processing unit for extracting the security infringement information from the security breach detection information DB based on the infringement incident information detected and transmitted by the integrated security system, and the security breach provided from the infringement investigation information processing unit It may include a policy determination unit for extracting and determining a response policy from the response policy DB based on the information, and a response information generation unit for generating process performance information according to the response policy provided from the policy determination unit.

The function of determining the response policy by the policy determining unit and the corresponding information generating unit and generating the corresponding process execution information may have a thread form.

The corresponding process performance information transmitted from the corresponding process manager to the corresponding process processor may be delivered as a message in XML format.

The corresponding process processor may load a XML definition script of a corresponding process from a process script repository by analyzing a corresponding information receiving unit receiving process performance information from the corresponding process management unit and process performance information provided from the corresponding information receiving unit, and loading the process. An XML parsing unit for parsing the defined XML definition script, an execution command tree building unit constituting an execution command tree for controlling a security device according to the XML definition script parsing information provided from the XML parsing unit, and the execution command tree building unit Security equipment control information including a command tree processing unit for processing the execution command tree provided by the control unit, and the corresponding equipment and location, path, and control parameters in the infringed space from the spatial operation processing unit according to the command tree provided from the control command generation unit Get delivered It may include a control command generator and the command supplied from the tree performs processing command and the control command generator unit command forwarding router to forward the control information provided to the control unit from the equipment.

The spatial calculation processing unit may include a query processing unit that receives a corresponding device search and a corresponding location / path request query from the corresponding process processing unit, and a violation occurs from a security device DB and a map DB according to the corresponding device search and the corresponding location / path request query. A phase relationship generation unit for searching for space-based corresponding equipment to generate and construct a spatial phase relationship therefor, and a position / path calculation unit for calculating a corresponding position / path based on the phase relationship generated by the phase relationship generation unit And a control parameter calculator configured to calculate a control parameter for the commercial security equipment using the installation information of the commercial security equipment on the basis of the phase relationship generated by the phase relationship generator, and the correspondence provided from the position / path calculation unit. Position / path and control parameters provided from the control parameter calculator It may include the equipment / control information transmission unit for transmitting to the process processor.

The equipment control unit may include a command proxy unit for generating a command proxy according to a unitary command provided from the corresponding process processor, a command queue manager for inputting and outputting a command according to the command proxy generated by the command proxy unit; The adapter request unit constituting the security equipment adapter for each type of the commercial security equipment, and if the security equipment adapter generates a device control proxy consisting of a control execution module performs a control to perform a control command for the multiple commercial security equipment It may include wealth.

As a second aspect of the present invention, a method for controlling a physical / IT security device based on a security breach response process includes determining a response policy according to security breach information detected by an integrated security system, and generating information on a process to be performed; Performing the generated process, generating a unified command for controlling a physical security device and an IT security device that requires interworking with the corresponding policy; Searching a security device and performing a spatial operation based on a spatial phase relationship between the security device and the location of the infringement in order to calculate a parameter necessary for controlling the retrieved security device; and the physical security device and the IT security device. Transmitting multiple connection and control commands of the security device to the security device; It may comprise the step of storing the script in the process.

The generating of the process information may include extracting security breach information from a security breach detection information DB based on the breach information detected and transmitted by the integrated security system, and responding based on the security breach information. The method may include extracting and determining a corresponding policy from a policy DB, and generating process performance information according to the provided corresponding policy.

The generating of the command may include receiving the process performance information, analyzing the process performance information, loading an XML definition script of the process from a process script repository, parsing the loaded XML definition script, Constructing an execution command tree for controlling the security device according to the provided XML definition script parsing information, and controlling the security device including a corresponding device and a location, a path, and a control parameter in the infringement space according to the provided execution command tree; And receiving information, and providing the performance command and the control information provided for the control of the security device.

The performing of the spatial operation may include receiving the corresponding device search and the corresponding location / path request query, and based on the occurrence of infringement space from the security device DB and the map DB according to the corresponding device search and the corresponding location / path request query. Retrieving corresponding equipment of the device and generating and constructing a spatial phase relationship therewith; calculating a corresponding position / path based on the generated phase relationship; and based on the generated phase relationship. Calculating control parameters for the commercial security equipment using installation information, and communicating the corresponding location / path and the control parameters for processing of the corresponding process.

The transmitting of the multiple connection and control commands to the security device may include generating a command proxy according to the unified command, performing input / output of the command according to the generated command proxy, and the commercial security device. Configuring a security equipment adapter for each type of, and if the security equipment adapter generates a device control proxy consisting of a control performing module may perform a control command for a plurality of commercial security equipment.

According to an embodiment of the present invention, in the integrated security system of various environments in which people, information, infrastructure, and systems are organically combined, a response process is performed according to a response policy to respond to a security breach incident in a converged security space, By performing vendor-independent and unified multiple simultaneous control of / IT security equipment, it is possible to comprehensively respond to the physical / IT security area against the breach of the converged security space, and to add various types of security breaches and security equipment that can occur. It has the effect of providing a scalable and flexible structure for change.

1 is a block diagram of an apparatus for controlling physical / IT security equipment based on a security breach response process according to an exemplary embodiment of the present invention.
2 is a detailed block diagram of a corresponding process manager according to an exemplary embodiment of the present invention.
3 is a detailed block diagram of a corresponding process processor according to an exemplary embodiment of the present invention.
4 is a detailed block diagram of a spatial operation processor in accordance with an embodiment of the present invention.
5 is a detailed block diagram of an equipment control unit according to an embodiment of the present invention.
6 is a flowchart illustrating a process of a response process processor that is a main component of a physical / IT security equipment control apparatus based on a security breach response process according to an exemplary embodiment of the present invention.
7 is a flowchart illustrating a process of an equipment control unit which is a main component of a physical / IT security equipment control apparatus based on a security breach response process according to an exemplary embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention and the manner of achieving them will become apparent with reference to the embodiments described in detail below with reference to the accompanying drawings. The present invention may, however, be embodied in many different forms and should not be construed as being limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the concept of the invention to those skilled in the art. Is provided to fully convey the scope of the invention to those skilled in the art, and the invention is only defined by the scope of the claims.

In describing the embodiments of the present disclosure, when it is determined that a detailed description of a known function or configuration may unnecessarily obscure the subject matter of the present disclosure, the detailed description thereof will be omitted. Terms to be described below are terms defined in consideration of functions in the embodiments of the present invention, and may vary according to intentions or customs of users or operators. Therefore, the definition should be based on the contents throughout this specification.

1 is a block diagram of an apparatus for controlling physical / IT security equipment based on a security breach response process according to an exemplary embodiment of the present invention.

As shown in the figure, the physical / IT security equipment control apparatus includes a corresponding process management unit 110, a corresponding process processing unit 120, a space computation processing unit 130, an equipment control unit 140, and a database unit 151, 152, 153, 154. 155, a graphical user interface (GUI) unit 160, and the like.

The response process manager 110 determines a response policy according to the security breach information detected by the integrated security system, and generates information of a process to be performed.

The response process processing unit 120 performs the process generated by the response process management unit 110 and unifies the commercial security equipment 20 including the physical security equipment and the IT security equipment required to be linked to the response policy. Create a Unified Command.

The space operation processor 130 searches for the commercial security equipment 20 required to be interlocked in the response policy, and calculates a parameter necessary for controlling the searched commercial security equipment 20 with the corresponding commercial security equipment and the location of the infringement. A spatial operation is performed based on the spatial phase relationship and provided to the corresponding process processor 110.

The equipment control unit 140 is based on a control proxy agent that transmits multiple connection and control commands of the physical security equipment and the IT security equipment to the corresponding commercial security equipment 20.

The database unit stores a security breach detection information DB 151 for storing the security breach information detected by the security breach analysis / detector 10 of the integrated security system, a security device DB 152 for storing the security equipment information, and location information. And a map DB 153, a response policy DB 154 storing response policy information according to the security breach information, a process script repository 155 storing a script of the process, and the like.

The GUI unit 160 displays the execution process and the result of the response policy determined according to the security breach information detected by the integrated security system.

2 is a detailed block diagram of a corresponding process manager according to an exemplary embodiment of the present invention.

As shown here, the response process management unit 110 includes an infringement detection information processing unit 111, a policy determination unit 112, a response information generation unit 113, and the like.

The breach detection information processing unit 111 extracts the security breach information from the breach detection information DB 151 based on the breach incident information detected and transmitted by the security breach analysis / detector 10 of the integrated security system to determine the policy decision unit ( 112).

The policy decision unit 112 extracts and determines a response policy from the response policy DB 154 based on the security breach information provided from the infringement detection information processing unit 111 and provides the response information to the response information generation unit 113.

The response information generation unit 113 generates process performance information according to the response policy provided from the policy determination unit 112 and provides the process performance information to the response process processing unit 120. The response information generation unit 113 may generate process performance information for supporting the security device by direct control and manual response of the security manager through the GUI unit 160 and provide the corresponding process processor 120 to the corresponding process processing unit 120. .

The function of determining the response policy and generating the response process execution information by the policy determination unit 112 and the response information generation unit 113 has a thread form, which is a structure for processing security breach information received simultaneously. to be.

The corresponding process performance information transmitted from the corresponding process management unit 110 to the corresponding process processing unit 120 may be delivered as a message in the following XML format.

3 is a detailed block diagram of a corresponding process processor according to an exemplary embodiment of the present invention.

As shown in the drawing, the corresponding process processing unit 120 includes a corresponding information receiving unit 121, an XML parsing unit 122, an execution command tree building unit 123, a command tree processing unit 124, a control command generating unit 125, Command delivery router section 126 and the like.

The correspondence information receiver 121 receives the process performance information from the correspondence process manager 110 and provides it to the XML parser 122.

The XML parsing unit 122 analyzes the process execution information provided from the corresponding information receiving unit 121, loads the XML definition script of the process from the process script repository 155, parses the loaded XML definition script, and executes the execution command tree. The building unit 123 is provided.

The execution command tree building unit 123 constructs an execution command tree for controlling the security device according to the XML definition script parsing information provided from the XML parsing unit 122 and delivers the execution command tree to the command tree processing unit 124.

The command tree processing unit 124 processes the execution command tree provided from the execution command tree building unit 123 and provides it to the control command generation unit 125 and the command transfer router unit 126.

The control command generator 125 transmits the security equipment control information such as the corresponding equipment and the location, the path, the control parameter, and the like in the infringed space from the spatial operation processor 130 according to the command tree provided from the control command generator 125. It receives and provides the command delivery router 126.

The command transfer router unit 126 transfers the performance command provided from the command tree processing unit 124 and the control information provided from the control command generation unit 125 to the equipment control unit 140.

The corresponding process processor 120 processes the corresponding process by repeating the process of checking the processing result of each step unit of the execution command tree, and processes the corresponding security device, the corresponding position and path, and the corresponding result in the GUI process. It is delivered to (160) to be visualized to support the security manager to recognize it intuitively.

The form of the unified instruction set constituting the execution command tree generated through the process script analysis in the corresponding process processor 120 is as follows.

4 is a detailed block diagram of a spatial operation processor in accordance with an embodiment of the present invention.

As shown in the figure, the space operation processor 130 automatically responds based on the spatial location of the occurrence location and the installation location of the commercial security equipment 20 including the physical security equipment and the IT security equipment, and the coverage for the detected security breach. It is responsible for processing the relevant spatial information to perform the function, for this purpose query processing unit 131, phase relationship generation unit 132, position / path operation unit 133, control parameter operation unit 134, equipment / Control information transmission unit 135;

The query processor 131 receives a corresponding device search and a corresponding location / path request query from the corresponding process processor 120.

The phase relationship generation unit 132 searches for the corresponding equipment based on the infringement space from the security device DB 152 and the map DB 153 according to the corresponding device search and the corresponding location / path request query, and searches for a spatial phase relationship therefor. Create and configure.

The position / path calculator 133 calculates the corresponding position / path based on the phase relationship generated by the phase relationship generator 132 and provides the calculated position / path to the equipment / control information transmitter 135.

The control parameter calculator 134 calculates a control parameter (for example, PZT control value) for the commercial security equipment using the installation information of the commercial security equipment based on the phase relationship generated by the phase relationship generator 132. / To the control information transmission unit 135.

The equipment / control information transmitter 135 transmits the corresponding position / path provided from the position / path calculator 133 and the control parameter provided from the control parameter operator 134 to the corresponding process processor 120.

5 is a detailed block diagram of an equipment control unit according to an embodiment of the present invention.

The equipment control unit 140 converts the security equipment control command and control information for the corresponding performance generated by the corresponding process processor 120 into actual control commands of the commercial security equipment 20 linked to the integrated security system, and multiple equipment It is responsible for configuring the proxy agent for connecting to the commercial security equipment (20) and performing the command so as to simultaneously control the command, for this purpose, command proxy unit 141, command queue management unit 142, adapter request The unit 143, the control performing unit 144 and the like.

The command proxy unit 141 generates a command proxy according to the unified command provided from the corresponding process processor 120.

The command queue manager 142 performs input / output of a command according to the command proxy generated by the command proxy unit 141.

The adapter request unit 143 configures a security device adapter for each security device type by using an API or a related device interworking standard interface provided by the manufacturer of the commercial security device 20 linked to the integrated security system.

When the control execution unit 144 generates a device control proxy configured with the actual security device adapter according to the control target security equipment consisting of the control execution module, and performs a control command for the multiple commercial security equipment 20 to perform simultaneous control Provides interlocking and control functions.

6 is a flowchart illustrating a process of a corresponding process processor that is a main component of a physical / IT security equipment control apparatus based on a security breach response process according to an exemplary embodiment of the present invention, and FIG. 7 is a flowchart of an embodiment of the present invention. This is a flowchart for explaining the process of the equipment control unit, which is a main component of the physical / IT security equipment control apparatus based on the security breach response process.

First, referring to FIG. 7, a processing process of the corresponding process processor 120 includes a process processing process of receiving process performance information and generating a performance command tree, and a thread processing process of processing the performance command tree. It is a structure to handle the response process for multiple security breaches.

When the corresponding information receiving unit 121 receives the process execution information (S301), the XML parsing unit 122 loads the process execution script corresponding to the process ID in the process execution information from the process script store 155 (S302) and parses the XML. In operation S303, the interpreted result is transferred to the execution command tree building unit 123 to generate an execution command tree to be performed (S304). The generated command tree is received by the command tree processing unit 124 (S306) to generate a control command (S307), and the generated control command syntax is transmitted by the command transfer router unit 126 to the equipment control unit 140. The command tree processing unit 124 checks the execution result thereof (S308) and repeats the process of processing the next execution command on the command tree to process the execution of the corresponding process.

Next, referring to FIG. 6, the processing by the equipment control unit 140 will be described. In step S201, the device control commands may be received from the corresponding process processing unit 120 to generate a command queue, and the command queue may be dispatched. (S203) to continuously extract the control command in the command queue, and requests a security device adapter configured using the API provided by the vendor of the commercial security equipment (20) (S204) to the device control proxy in the form of a thread Configure and process the command (S205), create a connection with the commercial security equipment (20) by using the actual equipment control function (equipment connection, control, response check) of the security equipment adapter used through this (S206) and the corresponding security Convert to the equipment command (S207) to perform a control command (S208), and check the response (results) (S209) to perform a process of transmitting to the response process processing unit 120 in the breach occurrence space for the security breach response The process of simultaneous control of the security equipment.

Combinations of each block of the block diagrams and respective steps of the flowcharts attached to the present invention may be performed by computer program instructions. These computer program instructions may be loaded into a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus so that the instructions, which may be executed by a processor of a computer or other programmable data processing apparatus, And means for performing the functions described in each step are created. These computer program instructions may also be stored in a computer usable or computer readable memory capable of directing a computer or other programmable data processing apparatus to implement the functionality in a particular manner so that the computer usable or computer readable memory It is also possible for the instructions stored in the block diagram to produce a manufacturing item containing instruction means for performing the functions described in each block or flowchart of the block diagram. Computer program instructions may also be mounted on a computer or other programmable data processing equipment, such that a series of operating steps may be performed on the computer or other programmable data processing equipment to create a computer-implemented process to create a computer or other programmable data. Instructions that perform processing equipment may also provide steps for performing the functions described in each block of the block diagram and in each step of the flowchart.

Also, each block or each step may represent a module, segment, or portion of code that includes one or more executable instructions for executing the specified logical function (s). It should also be noted that in some alternative embodiments, the functions mentioned in the blocks or steps may occur out of order. For example, the two blocks or steps shown in succession may in fact be executed substantially concurrently or the blocks or steps may sometimes be performed in the reverse order, depending on the functionality involved.

The above description is merely illustrative of the technical idea of the present invention, and those skilled in the art to which the present invention pertains may make various modifications and variations without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

110: response process management unit 111: intrusion detection information processing unit
112: policy determination unit 113: response information generation unit
120: correspondence process processing unit 121: correspondence information receiving unit
122: XML parsing unit 123: execution command tree building unit
124: command tree processing unit 125: control command generation unit
126: command transfer router 130: space operation processing unit
131: query processing unit 132: phase relationship generation unit
133: position / path calculator 134: control parameter calculator
135: equipment / control information transmission unit 140: equipment control unit
141: command proxy unit 142: command queue management unit
143: adapter request unit 144: control execution unit

Claims (12)

A response process manager that determines a response policy according to the security breach information detected by the integrated security system, and generates information of a process to be performed;
A corresponding process processing unit which performs the process generated by the corresponding process management unit and generates a unified command for controlling the physical security device and the IT security device required to be linked to the response policy;
The correspondence process is performed by searching for the security device that needs to be linked to the response policy and performing a spatial operation based on the spatial topological relationship between the security device and the location of the infringement in order to calculate a parameter necessary for controlling the retrieved security device. A space calculation processing unit provided to the processing unit,
A control proxy agent-based device controller for transmitting multiple connection and control commands of the physical security device and the IT security device to the corresponding security device;
Database unit for storing the security breach information, the response policy and the script of the process
Physical / IT security equipment control device based on the security breach response process comprising a.
The method of claim 1,
The response process management unit, an intrusion detection information processing unit for extracting the security infringement information from the security breach detection information DB based on the infringement incident information detected and transmitted by the integrated security system;
A policy decision unit for extracting and determining a response policy from the response policy DB based on the security breach information provided from the infringement detection information processing unit;
Response information generation unit for generating process performance information according to the response policy provided from the policy determination unit
Physical / IT security equipment control device based on the security breach response process comprising a.
3. The method of claim 2,
The function of determining the corresponding policy and generating the corresponding process execution information by the policy determining unit and the corresponding information generating unit has a thread form.
Physical / IT security equipment control device based on security breach response process.
The method of claim 3, wherein
The corresponding process performance information transmitted from the corresponding process manager to the corresponding process processor is delivered as a message in XML format.
Physical / IT security equipment control device based on security breach response process.
The method of claim 1,
The corresponding process processor may include a corresponding information receiver configured to receive process performance information from the corresponding process manager;
An XML parsing unit which analyzes the process execution information provided from the corresponding information receiving unit, loads the XML definition script of the process from the process script repository, and parses the loaded XML definition script;
An execution command tree building unit constituting an execution command tree for controlling security equipment according to XML definition script parsing information provided from the XML parsing unit;
An instruction tree processing unit for processing the execution command tree provided from the execution command tree building unit;
A control command generation unit for receiving security device control information including a corresponding device, a location, a path, and a control parameter in the infringement space from the spatial operation processing unit according to the command tree provided from the control command generation unit;
A command transfer router for transmitting the execution command provided from the command tree processing unit and the control information provided from the control command generation unit to the equipment controller.
Physical / IT security equipment control device based on the security breach response process comprising a.
The method of claim 1,
The spatial calculation processing unit may include a query processing unit receiving a corresponding device search and a corresponding location / path request query from the corresponding process processing unit;
A phase relationship generation unit for searching for a corresponding device based on the infringement space from the security device DB and the map DB according to the corresponding device search and the corresponding location / path request query, and generating and configuring a spatial phase relationship thereto;
A position / path calculator for calculating a corresponding position / path based on the phase relationship generated by the phase relationship generator;
A control parameter calculator configured to calculate a control parameter for the commercial security device using the installation information of the commercial security device based on the phase relationship generated by the phase relationship generator;
Equipment / control information transmission unit which transmits the corresponding position / path provided from the position / path calculating unit and the control parameter provided from the control parameter calculating unit to the corresponding process processor.
Physical / IT security equipment control device based on the security breach response process comprising a.
The method of claim 1,
The equipment control unit may include a command proxy unit for generating a command proxy according to a unitary command provided from the corresponding process processor;
A command queue management unit that performs input / output of a command according to the command proxy generated by the command proxy unit;
Adapter request unit for configuring the security equipment adapter for each type of the commercial security equipment,
Control execution unit for performing a control command for the plurality of commercial security equipment when the security equipment adapter generates a device control proxy consisting of a control execution module
Physical / IT security equipment control device based on the security breach response process comprising a.
Determining a response policy according to the security breach information detected by the integrated security system, and generating information of a process to be performed;
Performing the generated process and generating a unified command for controlling a physical security device and an IT security device requiring interworking with the corresponding policy;
Performing a spatial operation based on a spatial topological relationship between the security device and the location of the infringement to search for the security device that requires interworking with the corresponding policy, and to calculate parameters necessary for controlling the retrieved security device;
Transmitting multiple connection and control commands of the physical security device and the IT security device to the corresponding security device;
Storing the security breach information and the response policy and script of the process
Physical / IT security equipment control method based on the security breach response process comprising a.
The method of claim 8,
The generating of the process information may include extracting security breach information from a security breach detection information DB based on the breach incident information detected and transmitted by the integrated security system;
Extracting and determining a response policy from the response policy DB based on the security breach information;
Generating process performance information according to the provided response policy
Physical / IT security equipment control method based on the security breach response process comprising a.
The method of claim 8,
Generating the command may include receiving the process performance information;
Analyzing the process execution information to load the XML definition script of the process from the process script repository, parsing the loaded XML definition script,
Constructing an execution command tree for controlling a security device according to the XML definition script parsing information provided;
Receiving security device control information including a corresponding device and a location, a path, and a control parameter in the infringement space according to the provided execution command tree;
Providing the performance command and the control information provided for the control of the security equipment
Physical / IT security equipment control method based on the security breach response process comprising a.
The method of claim 8,
The performing of the spatial operation may include receiving the corresponding device search and the corresponding location / path request query;
Searching for the corresponding equipment based on the infringement space from the security equipment DB and the map DB according to the corresponding equipment search and the corresponding location / path request query, and creating and configuring a spatial topological relationship thereof;
Calculating a corresponding position / path based on the generated phase relationship;
Calculating control parameters for the commercial security equipment using the installation information of the commercial security equipment based on the generated phase relationship;
Communicating the corresponding location / path and the control parameter for the corresponding process processing
Physical / IT security equipment control method based on the security breach response process comprising a.
The method of claim 8,
Delivering the multiple connection and control command to the security device, generating a command proxy according to the unified command,
Performing input / output of a command according to the generated command proxy;
Configuring a security equipment adapter for each type of commercial security equipment;
Performing a control command for a plurality of commercial security devices when the security device adapter generates a device control proxy composed of a control execution module;
Physical / IT security equipment control method based on the security breach response process comprising a.

Images