KR20160046767A - Server for assessing personal information protection - Google Patents

Abstract

The present invention provides a sever and a method for guaranteeing systematic management in order to take a managerial and technical measure against a low-grade indicator item and easily comprehend a problem of a company by combining two indicators: an indicator configured to measure a level of a protection status of personal information, which is currently managed in the company, per item by systemizing an indicator to comply with a personal information protection act; and an indicator configured to measure the technical measure by interlocking a security solution of the company.

Description

[0001] Server for assessing personal information protection [

The present invention relates to a system for measuring whether a personal information protection law is complied with by a public agency or a corporation.

Currently, in Korea, personal information protection, such as the collection, use, provision, and destruction of personal information protection law and strengthened measures to strengthen the law, March 30, 2012 is being implemented in earnest. Accordingly, the Personal Information Protection Act extends the personal information protection obligation that has been applied to some organizations such as public institutions, information communication providers, and credit information providers to more than 3.5 million personal information processors, including public institutions, service companies, .

Accordingly, in order to comply with the Personal Information Protection Act, public institutions and companies perform technical measures and administrative measures to protect personal information. However, the management situation is insufficient, and the management of personal information protection is totally serious, such as overestimation of personal information retention period, inadequate personal information management, and non-compliance with the destruction procedure.

Therefore, there is a need for a system that can easily remotely grasp the compliance with the Personal Information Protection Act in public institutions or corporations, and find out any deficiencies and correct or correct them.

Korean Registered Patent No. 10-1166568 (public announcement date: 2012. 07. 18) Korean Patent Publication No. 10-2004-0104853 (published on December 13, 2004)

The technical problem to be solved by the present invention is to provide a system for measuring and evaluating whether a public institution or a corporation complies with the Personal Information Protection Act.

According to an aspect of the present invention, there is provided a personal information protection measurement system for measuring compliance of personal information protection for a first target company. This personal information protection measurement system includes a server group composed of at least one of a web server for providing services to the outside or a server such as a DBMS (Data Base Management System) server and an intranet server for internal business,

A user terminal group consisting of at least one user terminal used by an employee of the first target company or a security officer, and another security equipment group including at least one security equipment installed in the first target company by another security company A security device group including at least one security device for performing a security operation according to the security policy for the server group, the user terminal group, and the other security device group, and a security device group located between the external Internet and the internal network, A plurality of administrative action items and a plurality of technical action items based on security assurance measures provided in the Personal Information Protection Act for the server group, the user terminal group, the other security equipment group, and the security equipment group, An information protection measure server that performs action measures, managerial measures, and item evaluations, The internal network of the first target enterprise including the security device group, the server group, the user terminal group, and the other security device group is formed.

The information protection measurement server may be installed in a firewall, and the information protection measurement server may be equipped with United Threat Management (UTM).

The security device group includes an intrusion detection system (IDS), an intrusion prevention system (IPS), a firewall, a United Threat Management (UTM), an L2 switch, an L3 switch, an L4 switch, And DDOS (Distributed Denial of Service) prevention equipment.

In the above, the administrative action item is an action item that is checked by the information security officer and provided through the terminal of the person in charge, among the action items based on the safety assurance measure presented in the Personal Information Protection Act, and the technical action item is the security device group, The user terminal, and the other security equipment group.

In the above description, the technical measures measure the specific data related to the technical measures obtained in conjunction with each configuration and security solution constituting the internal network, measure and quantify the numerical values, compare the numerical values with the corresponding reference values, . The managerial measure measures the result data of the administrative action item acquired from the terminal of the information protection person and the data indicating the existence of the evidence document, and quantifies the resultant data. Then, the numerical value is compared with the corresponding reference value, .

The item evaluation is performed by measuring the technical measures and the management measures, and finally obtaining the administrative action items and their detailed items presented in the personal information protection law at the first target company, the technical action items and the details thereof Is compared with the corresponding reference value to determine the degree to which the measured result corresponds to the set reference value, and the evaluation is performed on the corresponding item.

According to the embodiment of the present invention, various items for protecting personal information in a public institution or a company are measured and evaluated based on the personal information protection law remotely, and the evaluation result of each item is provided as an index, We will immediately notify you of any deficiencies or improvements to your privacy.

1 is a network configuration diagram of a personal information protection measurement system according to a first embodiment of the present invention.
2 is a block diagram of a personal information protection measurement network according to a second embodiment of the present invention.
FIG. 3 is a data flow chart showing an initial item registration procedure of an action item in the personal information protection measurement method according to the embodiment of the present invention.
FIG. 4 is a data flow chart illustrating a procedure of managing an evidence item in the personal information protection measurement method according to the embodiment of the present invention.
FIG. 5 is a data flow chart showing a process of managing an action item in the personal information protection measurement method according to the embodiment of the present invention.
FIG. 6 is a data flow chart illustrating a personal information protection measurement process according to an embodiment of the present invention.
FIG. 7 is a first exemplary view illustrating a personal information protection measurement result according to an embodiment of the present invention.
FIG. 8 is a second exemplary view illustrating a personal information protection measurement result according to an embodiment of the present invention.
FIG. 9 is a third exemplary view illustrating a personal information protection measurement result according to an embodiment of the present invention.
FIG. 10 is a fourth exemplary view showing a personal information protection measurement result according to an embodiment of the present invention.
FIG. 11 is a fifth exemplary view illustrating a personal information protection measurement result according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly illustrate the present invention, parts not related to the description are omitted, and similar parts are denoted by like reference characters throughout the specification.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A personal information protection measurement system and method according to an embodiment of the present invention will now be described in detail with reference to the drawings.

1 is a network configuration diagram of a personal information protection measurement system according to a first embodiment of the present invention. The personal information protection measurement system shown in FIG. 1 is for a case where a company or an institution is located only at a local place. That is, the case where a company or an institution does not have a branch point or a branch point at a remote place.

1, the personal information protection measurement system according to the first embodiment of the present invention includes an information protection measurement server 100, a security device group 200, a server group 300, a user terminal group 400, And a group of security devices 500.

The information protection measurement server 100 is located between the external Internet and the internal network. For example, the information protection measurement server 100 is installed in a firewall. The information protection measurement server 100 is connected to the responsible person terminal 10 in a wired or wireless manner and operates under the control of the responsible person terminal 10. The information protection measurement server 100 sets various action items based on the security assurance measures presented in the Personal Information Protection Act and measures and evaluates the various action items set up to determine the degree of satisfaction with the standards based on the personal information protection law .

Performs item data collection, measurement of technical measures, measurement of managerial measures, and item evaluation for information security management action items and technical action items.

The administrative action item and the technical action item are items to be addressed by the Personal Information Protection Act. The administrative action item is an action item provided by the information security officer, that is, the person using or handling the equipment of the internal network. An action item obtained from the security device group 200, the server group 300, the user terminal 400, and the other security device group 500. The administrative action items and the technical action items consist of a plurality of sub-items.

Technical Measures Measures measure and quantify specific data related to the technical measures acquired in conjunction with each of the devices (200, 300, 400, 500) and the security solution of the internal network, (Eg, score) by comparing the measured value with the measured value (which may be different for each item). In this case, the specific data is data indicating the number or the number of times, etc., or whether or not the condition is satisfied. For example, as in the server security item of the system configuration item shown in Table 4 below, whether or not the backup rule was enforced such as the execution of a full backup every one month or the like, "Is history management on system interworking?"

The managerial measure measures the result data of the managerial action item acquired from the person in charge terminal (not shown) included in the user terminal group 400 and the data informing the presence or absence of the evidence data, and quantifies the resultant data. (Which may be different for each item) to calculate the measurement result (eg, score). In administrative measures, the evidence related to the item must be registered for each item to be reflected in the measurement results.

Item evaluation refers to the administrative action item and its sub-items and technical measures presented in the Personal Information Protection Act at the end of the measurement result obtained through measurement of technical measures and managerial measures The score of the item and its detail is compared with a reference value (that is, a value that is a criterion for judging whether the security is appropriate or insecure), and the evaluation of the item is performed by determining the degree of the corresponding score in comparison with the reference value.

In addition, the information protection measurement server 100 performs functions such as item management, provision of evidence data, and security equipment interworking. The indicator management function is a function of registering and managing an action item, and generating a measurement schedule for a measurement time for an action item by an automatic scheduler. The provisional document setting function is a function for presenting related documentary evidence for an action item requiring documentary evidence for each action item so that the person in charge can refer to it and provide the document to the information security measurement server 100 . The interlocking function of security equipment collects each device / solution event information in conjunction with the security equipment and solution for compliance with the personal information protection law, indexes the technical action item based on the collected solution / device event, It is a function that enables to calculate the score.

The group of security devices 200 collectively refers to various devices that perform security operations according to the security policies of the internal network devices. Examples of the security equipment included in the security device group 200 include an Intrusion Detection System (IDS), an Intrusion Prevention System (IPS), a firewall, and a United Threat Management (UTM). L2 switch, L3 switch, L4 switch, DDOS (Distributed Denial of Service) prevention device, and the security device group 200 constitute two or more security devices.

The server group 300 is a constituent element of the internal network. The server group 300 includes a web server for providing services externally to a company or an institution, a DBMS (DataBase Management System) server, a local server and a server such as an intranet server.

The user terminal group 400 includes a computer or a notebook computer used by an employee of an enterprise or an institution and includes a terminal (such as a computer or a notebook computer) of a person in charge of protecting personal information within the enterprise or organization. The other security equipment group 500 is a security equipment of a third party installed in a company or an institution, and includes a CCTV installed by an outside company, a detection sensor installed in a door or a window, and an alarm device.

Meanwhile, the UTM included in the security device group 200 can be loaded in the information protection measurement server. 1, the personal information protection measurement system according to the embodiment of the present invention may further include a control server, and the control server receives the result measured by the information protection measurement server 100 The information security officer can remotely monitor the security server through a digital server or an institution or a plurality of companies or organizations to check whether they satisfy the security measures according to the Personal Information Protection Act.

Here, the administrative action items and the detailed items, and the technical action items and the detailed items thereof are shown in the following Tables 1 to 6. The action item described in the following table is an example of a case where the business place to which the personal information protection measurement system according to the embodiment of the present invention is applied is a bank. The various action items based on the safety assurance measures provided by the Personal Information Protection Act differ slightly depending on the type and nature of the workplaces to which they apply.

In the following, Tables 1 to 3 relate to administrative action items, and Tables 4 to 6 relate to technical action items.

As shown in Table 1, the administrative action item includes an item related to the expense, and the details of the item related to the expense include the expense of the item, the duty for the duty, the accident prevention, and the emergency communication network. The person in charge of the managerial action item checks whether or not the check item for each detail item is available, and provides it to the personal information protection server 100 through the contact person terminal.

As shown in the above Tables 2 and 3, the management action items include action items related to security, facilities, fire fighting, equipment, and other items, the details of security include daily security, Out door and automation corner. Details of fire fighting include gas facilities, fire extinguishers and fire, and details of equipment include CCTV, security equipment and emergency bell.

In addition to Table 1, the person in charge of the management action items listed in Tables 2 and 3 checks whether or not the check items for each detail item are available, and provides them to the personal information protection server 100 through the contact person terminal. The description of each detail item of the administrative action item is described in the check items of Tables 1 to 3, and a detailed description thereof will be omitted.

As shown in Tables 3 to 6, the technical measures include system construction, system interlocking, system remote meter reading, system remote access, application development, and personal information.

Details of system construction include server security, access control system acceptance, vulnerability diagnosis and action, and server security. The details of system interworking include interworking between in-house network systems and interworking between in-house and out-of-network systems. Details of the system remote connection include remote connection, and system remote connection includes remote connection, access right, and access log management. The details of application development include personal information handling, privacy policy, personal information encryption, application development, access control and log management.

For this technical measure item, the information protection measurement server 100 acquires relevant information from each security device of the security device group 200 and a DBMS server of the server group 300 and the like.

2 is a network configuration diagram of a personal information protection measurement system according to a second embodiment of the present invention. The personal information protection measurement system shown in FIG. 2 is for a case where there is a head office and does not have a branch point or a branch point at a remote place. For example, in the case where the head office is located in Seoul, and there is a branch office in Seongnam, Incheon, Daegu, Daejeon, Busan, and the like, the following embodiments are applied to a company or an organization having one head office and two branches will be.

The personal information protection measuring system according to the second embodiment of the present invention includes a head office server 100a, a first branch server 100b, a second branch server 100c, a main office network equipment A forming an internal network at the head office, A first point network equipment B forming an internal network at a first point, and a second point network equipment C forming an internal network at a second point.

The head office server 100a, the first branch server 100b and the second branch server 100c are the same as the information protection measurement server 100 in the first embodiment of the present invention.

However, unlike the first embodiment of the present invention, the head office server 100a is configured to be capable of data communication between the first point server 100b and the second point server 100c, (A, B, C) of the head office, the first point and the second point by receiving the measurement result or the item evaluation on the administrative action item and the technical action item received from the two-point server 100c Perform item evaluation. The first and second branch servers 100b and 100c may also perform item measurement or item evaluation on the technical action item and the administrative action item for the first branch network device B or the second branch network device C, (100a).

The main office network equipment A and the first and second branch network equipments B and C correspond to the security equipment group 200, the server group 300 and the user terminal group 400 described in the first embodiment of the present invention. And a group of other security devices 500. Of course, if the security device group 200 is not installed at the first point or the second point, the security device group 200 is excluded from the network devices B and C.

Hereinafter, the operation of the personal information protection measurement system according to the embodiment of the present invention will be described with reference to FIG. 3 to FIG.

FIG. 3 is a data flow chart showing an initial item registration procedure of an action item in the personal information protection measurement method according to the embodiment of the present invention. As shown in Fig. 3, the responsible person responsible for measuring whether or not satisfying the safety assurance measure presented in the personal information protection law accesses the head office server 100a through the responsible person terminal 10 (S301) After performing connection authentication, the main office 100a requests registration of an action item (S302).

The headquarters server 100a provides a registration screen (registration window) for registering an action item to the responsible person terminal 10 (S303) And each technical measure item and its detailed items are input (S304), and registration is requested (S305).

The headquarters server 100a receives the action item and its sub items from the responsible person terminal 10 and registers information of each item received according to the registration request (S306). At the same time, the headquarters server 100a transmits information about each registered action item and its detailed items to the first and second branch servers 100b and 100c (S307 and S309).

When the first and second branch servers 100b and 100c receive information on each action item and its detailed items from the headquarters server 100a, the first and second branch servers 100b and 100c register the same item in response to the registration request, (Synchronized) (S308, S310).

Through the above process, the technical action items and their detailed items and the administrative action items and their detailed items in accordance with the Personal Information Protection Act for the relevant institution or company requested by the responsible person in charge are stored in the headquarters server 100a and each of the branch servers 100b and 100c Are registered in synchronization with each other.

FIG. 4 is a data flow chart illustrating a procedure of managing an evidence item in the personal information protection measurement method according to the embodiment of the present invention. Among the details of the administrative action items, there are items that require proof for practical confirmation, in addition to the items to be checked by the person in charge. To this end, the information protection measurement server 100 according to the embodiment of the present invention, or the head office server 100a and each of the branch servers 100b and 100c, confirms whether or not the function of enabling the attachment of the evidence data and the attachment of the supporting document .

4, the person in charge connects to the headquarters server 100a through the responsible person terminal 10 and performs connection authentication (S401), and requests editing (or registration) of the evidence item (S402) ). The headquarters server 100a provides the proof sheet editing screen to the responsible person terminal 10 in step S403 and the responsible person edits the proof sheet editing menu displayed on the proof sheet editing screen displayed on the screen of the responsible person terminal 10 (Step S404), and the responsible person terminal 10 transmits the edit item to the head office server 100a by editing And requests registration of the result (S405).

The headquarters server 100a newly registers (corrects the type information of the proof material to be registered) or corrects or deletes the evidence item related to the corresponding action item or detail item, and registers the result thereof (S406) .

At the same time, the headquarters server 100a sends registration results (e.g., new registration, correction or deletion) to the first and second branch servers 100b and 100c to request registration (S407 and S409) .

Upon receiving the editing result of the registered document from the head office server 100a, the first and second point servers 100b and 100c register the same in response to the registration request, The documents are synchronized so as to be matched (S408, S410).

FIG. 5 is a data flow chart showing a process of managing an action item in the personal information protection measurement method according to the embodiment of the present invention. Here, the management process of the action item is to register an additional new action item or detail item for the previously registered technical action item and its detailed item, the administrative action item and the detailed item thereof, delete the existing action item or the detailed item , And the process of modification.

5, the responsible person accesses the head office server 100a through the responsible person terminal 10 (S501), performs connection authentication, and requests the head office server 100a to edit the action item (S502 ).

The headquarters server 100a provides an edit screen (edit window) capable of editing an action item to the responsible person terminal 10 (S503), and the person in charge is allowed to edit the edit item displayed on the screen of the responsible person terminal 10 (Menu) to select a specific action item or detail item, and set a new registration, modification, or deletion for the selected specific action item or detail item, and accordingly, the responsible person terminal 10 transmits it to the headquarters server 100a (S504).

Also, the responsible person inputs the schedule information about the personal information protection measurement time with respect to the newly registered or modified item on the editing screen displayed on the screen of the responsible person terminal 10, and accordingly, the responsible person terminal 10 transmits the schedule information to the head office server (Step S505).

In step S506, the headquarters server 100a performs an editing operation on the previously stored action items and the editing information on the corresponding action items or detailed items and the schedule information, and registers the edited results in step S506.

At the same time, the headquarters server 100a transmits the edit information and the schedule information received from the responsible person terminal 10 to the first and second branch servers 100b and 100c to request registration (S507 and S509).

When the first and second branch servers 100b and 100c receive the edit information and schedule information from the head office server 100a, the first and second branch servers 100b and 100c register the edit information and the schedule information according to the registration request and synchronize the head office server 100a, (S508, S510).

Then, the main office server 100a and the first and second branch servers 100b and 100c perform a current time check through a timer (not shown) and check whether the checked current time corresponds to the registered schedule information (S511). At this time, since the main server 100a and the first and second branch servers 100b and 100c have the same schedule information for each action item or sub-item, the same monitoring event (that is, an event corresponding to the schedule information ).

Therefore, the headquarters server 100a and the first and second branch servers 100b and 100c simultaneously grasp the start of performance of the personal information protection measurement operation according to the new turn (S512), and notify each person in charge thereof (S513) .

Here, each action item or detail item may have different schedule information, and accordingly, a notice operation is performed to measure personal information protection for the item at different times or notify the person in charge for measurement. In the case where the schedule server 100a, the first and second branch servers 100b and 100c accumulate the collected information according to different schedule information, Then, at the time when the evaluation for each item is made, the measure, the measurement and the evaluation are carried out on each item of the measure and its detailed items.

FIG. 6 is a data flow chart illustrating a personal information protection measurement process according to an embodiment of the present invention. In FIG. 6, since the first point server 100b and the second point server 100c perform the same operation, only the operation of the first point server 100b is shown for the sake of understanding.

The main server 100a and the first branch server 100b compare the current time with the registered schedule information to perform schedule monitoring (S601). If the schedule monitoring result, the current day or the current time is the personal information protection measurement point, the main office server 100a and the first branch server 100b start the personal information protection measurement and evaluation operation.

That is, the headquarters server 100a informs the head office 20 of performing the managerial action with the terminal 20 (hereinafter referred to as the "agent A terminal") of the person in charge A who is in charge of securing personal information protection (S603) Invokes a managerial action execution input screen of the format set through the agent A terminal 20, creates a security result for each managerial action item and detail items through the managerial action execution input screen, and also requests the attachment of the evidence (S) shall be accompanied by supporting evidence. Then, the person in charge A provides the security result for each administrative action item, the detailed item, and the supporting document to the headquarters server 100a through the contact person A terminal 20 (S605).

The first point server 100b also informs the terminal 30 of the person in charge B (hereinafter, referred to as the "person in charge B") who is in charge of security according to personal information protection at the first point (step S604) The person in charge B invokes the management action execution input screen of the format set through the contact person B terminal 30 and creates the security result for each managerial action item and the detailed item through the managerial action execution input screen, (S) shall be attached. Then, the person in charge B provides the security result for each administrative action item and the detailed item and the supporting document to the headquarters server 100a through the contact person B terminal 30 (S606).

The head office and the first branch servers 100a and 100b request security data related to the administrative action items and their detailed items from the security device groups 200a and 200b and the server groups 300a and 300b connected thereto (S607, S608), and receives the corresponding security data in response thereto (S609, S610).

At this time, the head office server 100a and the first branch server 100b collect log event information, setting information, and other security related information from each security device of the security device groups 200a and 200b, DB encryption, access control, intrusion detection, personal information leakage, intrusion prevention, network security interworking, and the like, by collecting log event information and DB setting information from DBMS servers and other servers of servers 300a, 300b, User authentication, etc., to measure the physical measures and their detailed items, to measure the results of each action item by measurement, and to compare the numerical values with the reference values to calculate the score (S611, S612).

Here, the reference value for the physical action item is a value for the quantity or number (or number), the quantity for the traffic analysis / monitoring, the number for the access control, etc., and the number for the certain condition . And the reference value for the administrative action item is the number or number.

Therefore, in the case of a physical action item, the headquarters server 100a calculates a score according to how much the measurement result is in relation to the reference value. If the item is a management action item, ), The score is calculated.

As a result, the physical measures, the administrative measures, and each of these sub-items are scored according to the measurement results. Of course, the physical and administrative measures are scored according to the scores of the sub-items.

When the first point server 100b calculates a score for the physical action item, the administrative action item, and the detailed items thereof, the first point server 100b provides information on the physical action item, the administrative action item, and the detailed items to the headquarters server 100a (S613) The physical action item for the internal network, the administrative action item and the score for the detailed items thereof, the physical action items received from the first branch server 100b, the administrative action items, Physical measures, administrative action items and their detailed items (S614).

Evaluation is the identification of each physical action item and each administrative action item by identifying whether the protection of personal information is normal or not. It is the identification and the quantification of whether information security is normal or caution, warning or danger.

Numerical results obtained through such evaluation are represented by graph information as shown in FIG. 7 to FIG. 11 and can be confirmed at a remote place.

The embodiments of the present invention described above are not only implemented by the apparatus and method but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded, The embodiments can be easily implemented by those skilled in the art from the description of the embodiments described above.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

Claims (1)

1. A privacy measurement system for measuring compliance of personal information protection to a first target company,
The main office 100a,
The first point server 100b,
The second point server 100c,
The main office network equipment (A), which forms the internal network at the main office,
A first point network equipment (B) forming an internal network at a first point, and
And a second branch network equipment (C) forming an internal network at a second point,
Wherein the information protection measurement server collects item data on the administrative action item from the user terminal of the user terminal group and receives the technical measure item from the security device group, the server group, the user terminal, And the like,
Wherein the administrative action item includes an action item related to security, facilities, fire fighting, equipment, and other items, the subset of security includes daily security, the subset of the facility includes an after-hours gate and an automation corner , The details of the fire fighting include gas facilities, fire extinguishers and fire, the details of which include CCTV, security equipment and emergency bell,
The technical action items include system construction, system interlocking, system remote meter reading, system remote access, application development, and measures related to personal information. Details of the system construction include server security, access control system acceptance, vulnerability diagnosis And a server security. The details of the system interworking include interworking between intra-company network systems and interworking between the intra-company network and the inter-network network system, and the details of the system remote connection include a remote connection, Details of system remote access include remote access, access right and access log management, and the details of application development include personal information handling, personal information handling policy, personal information encryption, application development, access control and log management. In addition,
The information protection measurement server is installed in a firewall,
The technical measure measurement is performed by measuring and quantifying specific data related to the technical measure item interlocked with each configuration and security solution constituting the internal network, comparing the numerical value with the set reference value, and calculating the measurement result ,
Wherein the managerial measure measures the data on whether the management action item acquired from the user terminal of the user terminal group includes data on whether the management action item is available and whether or not the data includes evidence, To calculate the measurement result,
Forming the internal network of the first target enterprise including the security device group, the server group, the user terminal group and the other security device group,
The item evaluation is performed by measuring the technical measures and the management measures, and finally obtaining the administrative action items and their detailed items presented in the personal information protection law at the first target company, the technical action items and the details thereof , And comparing the score with the corresponding reference value to determine the degree to which the measured result corresponds to the set reference value, and evaluating the corresponding item.

Images