KR20160109436A - Method and Apparatus for Document Secure - Google Patents

Abstract

The specification relates to a method and apparatus for securing a document. The method for securing a document, which is performed by an apparatus for securing a document, comprises the following steps of: decoding a security file and decompressing the same; analyzing a header of the security file; extracting a PDF file from the security file to display the extracted PDF file on a screen; and performing an original file editing process when an edition of an original file included in the security file is required by a user. The original file editing process includes the following steps of: generating a security directory; extracting the original file and storing the extracted original file in the security directory; editing the original file; and storing the edited original file in the security directory.

Description

TECHNICAL FIELD [0001] The present invention relates to a method and apparatus for document security,

The present invention relates to a security device, and more particularly, to a document security method and apparatus.

In modern society, it is frequently required to issue or submit documents such as certificates or IDs in the form of electronic documents, and security-enhanced documents are increasingly handled.

However, since the document security software that can be used in the PC terminal has to edit the document while being connected to the server at all times in real time, it is necessary to increase the load on the server and to use the unnecessary resources of the PC terminal continuously There is. On the other hand, in the case of the document security software that provides only the viewing of the security document to the user, there is an inconvenience that the user's desire to edit the document can not be satisfied.

Accordingly, there is a need in the art for a method and apparatus for applying document security to reduce the load on a server and a user PC, and to provide a function for easily editing a security document by completing the above-mentioned disadvantages.

SUMMARY OF THE INVENTION The present invention provides a document security method and apparatus that can reduce the load on a server and a user PC.

Another aspect of the present invention is to provide a document security method and apparatus for providing a security document editing function even when a user's PC is not accessing a server in real time.

According to an aspect of the present invention, a document security method performed by a document security apparatus is provided. The document security method may be implemented by decrypting and decompressing the security file, analyzing the header of the security file, and extracting the PDF file from the security file and displaying it on the screen.

According to another aspect of the present invention, the security file may include at least one of an original file, a PDF file obtained by converting the original file into a PDF document format, a hash value obtained by digitizing the characteristics of the security file, A file authority unit for storing information on a person who has authority to view or modify the security file, and an encryption and compression unit including encryption information or compression information of the security file, Can be implemented.

According to another aspect of the present invention, there is provided a security method for a document, comprising the steps of: determining whether the user is authorized to edit the original file when editing is requested by the user; Extracting the original file and storing the extracted original file in the secure directory, opening the original file using a connection or dedicated editing program, screen capture prevention, copy and paste prevention, and storage prevention function Storing an edited original file in the secure directory; generating a hash value for the edited original file; and adding information about the edited original file to a header of the secure file; And compressing and encrypting the hash value and the original file.

According to another aspect of the present invention, the document security method includes: determining whether the user is authorized to edit the PDF file when the user requests editing of the PDF file; Extracting the original file and storing the extracted original file in the secure directory, opening the original file using a connection or dedicated editing program, screen capture prevention, copy and paste prevention, and storage prevention function Storing an edited original file in the secure directory; generating a hash value for the edited original file; and adding information about the edited original file to a header of the secure file; And compressing and encrypting the hash value and the original file.

According to another aspect of the present invention, the document security method includes: determining whether the user is authorized to output the security file when output of the security file is requested by the user; Selecting a printer, determining whether the printer selected by the user is a virtual printer or a shared printer, generating output data composed of the PDF file if the printer selected by the user is not a virtual printer or a shared printer Creating a two-dimensional barcode and adding it to the output data; generating a copy protection code to add to the output data; generating user information in the background and adding the output data to the output data; And outputting to the selected printer.

According to another aspect of the present invention, a document security device is provided. The document security apparatus includes an original editor for editing a source file of a security file, a PDF editor for editing a PDF file of a security file, and a source file editing unit for editing the source file or the PDF file, Or a security file packaging unit for adding a PDF file to the security file or applying the edited part to the security file, and an output unit for outputting the security file.

According to another aspect of the present invention, the security file may include at least one of an original file, a PDF file obtained by converting the original file into a PDF document format, a hash value obtained by digesting characteristics of the security file, A file authority section for storing information about a person who has authority to view or modify the security file, and an encryption and compression section including encryption information or compression information of the security file .

According to another aspect of the present invention, the original editor may be configured to create a security directory and to edit and store the original file in the secure directory.

According to another aspect of the present invention, the PDF editing unit may be configured to create a security directory and a layer, and to edit and store the layer in the secure directory.

According to another aspect of the present invention, the output unit may be configured to generate a two-dimensional barcode, a copy protection code, and user information, add the same to the security file, and output the same.

According to the present invention, it is possible to provide a document security method and apparatus that can reduce the load of a server and a user PC.

According to another aspect of the present invention, there is provided a document security method and apparatus for providing a security document editing function even when a user's PC is not accessing a server in real time.

1 shows a structure of a security file according to an embodiment of the present invention.
2 is a block diagram illustrating a structure of a document security system according to an embodiment of the present invention.
3 is a flowchart illustrating a method of creating and adding a 2D barcode to a security file according to an exemplary embodiment of the present invention.
4 is a flowchart illustrating a method of generating a security file including personal information deleted or replaced according to an exemplary embodiment of the present invention.
5 is a flowchart illustrating a file display method of a secure file viewer according to an embodiment of the present invention.
6 is a flowchart illustrating a method of editing an original file of an original editing unit according to an exemplary embodiment of the present invention.
7 is a flowchart illustrating a PDF file editing method of the PDF editing unit according to an embodiment of the present invention.
8 is a flowchart illustrating a security file output method of an output unit according to an embodiment of the present invention.

Hereinafter, some embodiments will be described in detail with reference to exemplary drawings. It should be noted that, in adding reference numerals to the constituent elements of the drawings, the same constituent elements are denoted by the same reference symbols as possible even if they are shown in different drawings. In the following description of the embodiments of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present disclosure rather unclear.

1 shows a structure of a security file 100 according to an embodiment of the present invention. In this specification, a security file defines a document to which security is applied by a document security apparatus or a document security method according to an object of the present invention. The security file 100 converts a document into a PDF (Portable Document Format) at a server when a user logs in after viewing a document or a certificate in an environment such as groupware, EDMS, CS, , Adding an original file, and the like.

The security file 100 according to the present invention includes a PDF file 110, an original file 120, a hash value 130, a creator information 140, a file authority 150, and an encryption and compression unit 160 . The PDF file 110 converts the original file 120 of the security file into the format of the PDF document and stores it. The original file 120 copies and saves the original file before the document security method according to the present invention is applied. The hash value 130 represents a value obtained by reducing the characteristics of the file. The constructor information unit 140 stores information on the creator that generated the security file 100. [ The file authority unit 150 stores information about a person who is authorized to view, modify, and so on the security file 100. The encryption and compression unit 160 encrypts and compresses the original file and includes the stored information.

2 is a block diagram illustrating the structure of a document security system 200 according to an embodiment of the present invention. The document security system 200 according to an exemplary embodiment of the present invention includes an interworking module 210, a document security server 220, a database 230, and a secure file viewer 240.

The interworking module 210 provides the document security server 220 with a document requiring security.

The document security server 220 receives a document from the interworking module 210 and generates a security file. The document security server 220 includes a document receiving unit 221, a document converting unit 223, a security file generating unit 225, and an administrator unit 227. The document receiving unit 221 receives a document requiring security from the interworking module 210 and transmits the document to the document converting unit 223. [ The document converting unit 223 converts the document received from the document receiving unit 221 into a PDF file and transmits the PDF file to the security file generating unit 225. [ The security file generation unit 225 receives the PDF file from the document conversion unit 223 and generates a security file by searching the database 230 for the user who is authorized for the document by document or by user. The manager unit 227 manages information on the authorized user of each document stored in the database 230. [ For example, you can add or delete users.

The database 230 stores information on authorized users for each document.

The security file viewer 240 includes an original editing unit 241, a PDF editing unit 243, a security file packaging unit 245, and an output unit 247. In the present invention, a document security method is described with respect to the security file viewer 240, and the security file viewer 240 can be defined as a document security device. The original editing unit 241 edits the original file 120 of the security file 100. Specifically, the original editing unit 241 starts editing the original file when the user selects the original editing button while the original editing button among the menus of the security file viewer 240 is activated. Since the original file must be temporarily stored in a specific directory, a security directory is created and the original file is stored in the secure directory. The security directory is set so that access can not be made other than a predetermined editing program. The predetermined editing program may correspond to a connected program or a dedicated editing program in the present invention. The original file automatically executes a connection program or a dedicated editing program so that the user can perform editing work. In this case, the dedicated security viewer audits the connection or dedicated editing process, and controls functions such as copy and paste, screen capture, and different name saving to prevent the file from being leaked. When the user completes editing the original using the original editing unit 241 and executes the file saving function, the security file viewer 240 automatically saves the edited file in the security directory and adds editing information to the security file header Package the security file containing the edited source. The edited file information and files can be used to track the document history in future document distribution. Every time a document is edited, information about the edited file and file is added to the security file.

The PDF editing unit 243 edits the PDF file 110 of the security file 100. [ Specifically, the PDF editing unit 243 starts editing the PDF file when the user selects the PDF editing button while the PDF editing button among the menus of the security file viewer 240 is activated. When the editing of the PDF file starts, the PDF editing unit 243 adds a new transparent layer on the screen of the security file viewer 240. The user can freely edit the added transparency layers, such as test and drawing. In the transparent layer, the functions of saving, copying and pasting, and screen capturing are disabled. When the user completes the editing of the layer using the PDF editing unit 243 and executes the file saving function, the edited layer is automatically stored in the security directory and the editing information is added to the security file header, And packages the security file newly. The edited file information and layers can be used to track the document history in subsequent document distribution. Every time a new layer is added, information about edited layers and editing is added to the security file.

When the original file or the PDF file is edited in the original editing unit 241 or the PDF editing unit 243, the security file packaging unit 245 adds the edited original file or the PDF file to the security file, or adds the edited portion to the security file And packages it as a final security file. The output unit 247 adds the forgery prevention code to the security file and prints it. Specifically, the output unit includes a forgery prevention code such as a two-dimensional bar code or a copy protection code when the user selects the print button in a state where the print button among the menus of the security file viewer 240 is activated.

3 is a flowchart illustrating a method of creating and adding a 2D barcode to a security file according to an exemplary embodiment of the present invention.

Referring to FIG. 3, the original file is converted into a PDF format (S310). When the original file is converted into the PDF format, the text is extracted from the converted PDF document (S320). When the text is extracted, an electronic signature value for the extracted text is generated (S330). When a digital signature value for the text is generated, a two-dimensional barcode including information on the generated digital signature value, the user's certificate, and extracted text information is generated (S340). Next, the generated two-dimensional barcode is added to the security file (S350), and the final security file is generated. The 2D barcode may be added to the PDF file in the security file. The two-dimensional barcode may be added to the output data when the security file is being output, and the output data may have the format of the PDF file.

4 is a flowchart illustrating a method of generating a security file including personal information deleted or replaced according to an exemplary embodiment of the present invention.

Referring to FIG. 4, first, an original file is converted into a PDF format (S410). When the original file is converted into the PDF format, information on the location of the text and the text in the converted PDF document is extracted (S420). Next, personal information is retrieved from the text extracted through the pattern search (S430). In step S440, it is determined whether the extracted personal information exists in the extracted text. If the extracted personal information exists, the location of the found personal information is checked in step S450. And the personal information is deleted (S460). The particular character may be, for example, a space character, "*", "?" , And the background color of the text may be white, for example. Next, the document in which the personal information is changed is stored in the PDF format (S470), and the stored PDF is added to the security file to generate the final security file (S480). On the other hand, if it is determined in step S440 that no personal information exists in the extracted text, the personal information is stored in the PDF format without changing the personal information (S470), and the stored PDF is added to the security file to generate the final security file S480).

5 is a flowchart illustrating a file display method of the secure file viewer 240 according to an embodiment of the present invention. When the security file is downloaded from the server, the secure file viewer is executed (S510). When the security file viewer is executed, the security file is decrypted and decompressed (S520). Next, the security file header is analyzed (S530), the PDF document is extracted from the security file and displayed on the screen (S540).

6 is a flowchart illustrating a method of editing an original file 120 of the original editing unit 241 according to an embodiment of the present invention.

Referring to FIG. 6, the original editing unit 241 determines whether the user has the right to edit the original file (S610) when executing the original file editing function (S605) The secure file viewer 240 creates a secure directory accessible only by the secure file viewer 240 (S615). When the security directory is created, the source file is extracted from the security file and stored in the generated security directory (S620). If the original file is stored in the secure directory, the original file is opened using a connection program or a dedicated editing program (S625). When the original file is opened, the user edits the original file using the connection program or the dedicated editing program (S630). At this time, the opened original file may be restricted by a security file viewer such as a screen capture function such as screen capture, copy & paste, and saving as a name or a document editing function. When the user completes editing and executes file saving (S635), the edited file is stored in the secure directory (S640). Next, a hash value for the edited original file is generated (S645), and information about the edited file is added to the security file header (S650), thereby managing the history of the file modification. When the information about the edited file is added to the security file header, the hash value of the edited file and the edited original file are compressed and encrypted, and then added to the security file (S655) do.

On the other hand, if it is determined in step S610 that there is no authority to edit the original file, an uneditable message is output (S660) and the original file editing process is terminated.

7 is a flowchart illustrating a method of editing a PDF file 110 of the PDF editing unit 243 according to an embodiment of the present invention.

7, when the user executes the PDF file editing function (S705), the PDF editing unit 243 determines whether the user has the right to edit the PDF file (S710) The secure directory accessible only by the secure file viewer is created (S715). When a secure directory is created, a layer for editing the user is created on the PDF file (S720), and the PDF file can be edited on the secure file viewer. Next, the user performs an editing operation such as adding a note, a memo, a highlight pen, etc. (S725). When the editing operation is completed and the user performs the edited document storage function (S730) (S735). Next, a hash value for the edited layer is generated (S740), and the edited file information is added to the header of the security file (745) to manage the history of the file modification. When the information about the edited file is added to the security file header, the hash value of the edited file and the edited PDF file are compressed and encrypted (S750), added to the security file (S755) . If the user does not have the right to edit the PDF file in step S710, the user is notified that the PDF file can not be edited (S760), and the PDF file editing function is terminated.

On the other hand, if it is determined in step S710 that the user does not have the authority to edit the PDF file, an uneditable message is output (S760) and the PDF file editing process is terminated.

8 is a flowchart illustrating a security file output method of the output unit 247 according to an embodiment of the present invention.

Referring to FIG. 8, the output unit 247 determines whether the user has an authority to output a security file (S810) when the user executes an output function for the security file (S805) The user is prompted to select the printer (S815). If the virtual printer or the shared printer is selected by the user (S820), the virtual printer or the shared printer is displayed on the screen (S850). If the printer selected by the user is a directly connected printer or a network-connected printer, the output data is generated as a PDF (S825), and a two-dimensional barcode is generated and added to the output data generated in the PDF (S830). The method of generating the two-dimensional bar code can be performed according to the procedure of FIG. Next, a copy protection code suitable for the corresponding printer is generated and added to the output data (S835). When the copy protection code is generated in the output data, the information about the user is generated in the background and added to the output data (S840). The information about the user can be added to the output data by, for example, generating a background in a watermark format. When the 2D barcode, the copy protection code, and the user information are added to the output data, the final output data is generated and output to the corresponding printer (S845).

According to the present invention, it is possible to provide a document security method and apparatus that can reduce the load of a server and a user PC.

According to another aspect of the present invention, there is provided a document security method and apparatus for providing a security document editing function even when a user's PC is not accessing a server in real time.

The foregoing description is merely illustrative of the technical idea of the present invention and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The scope of protection of the present invention should be construed according to the following claims, and all technical ideas within the scope of equivalents should be construed as falling within the scope of the present invention.

Claims (19)

A document security method performed by a document security device,
Decrypting and decompressing the security file;
Analyzing a header of the secure file;
Extracting a PDF (Portable Document Format) file from the security file based on a result of analyzing the header of the security file and displaying the extracted PDF file on a screen; And
Performing editing on the original file using the PDF file when editing of an original file included in the security file is requested;
Lt; / RTI >
The editing of the original file may include:
Creating a secure directory accessible only by a predetermined program;
Extracting an original file from the secure file and storing the extracted file in the secure directory;
Editing the stored original file; And
Storing the edited original file in the secure directory
The method comprising the steps of:
The method of claim 1, wherein the editing of the original file further comprises determining whether the user is authorized to edit the original file, If there is no document file, displays that the editing of the original file is not possible and ends the process.
The method of claim 1, wherein editing the stored original file comprises:
The original file is opened with a connection program or a dedicated editing program, and the original file is edited using the connection program or the dedicated editing program.
The method of claim 1, wherein the step of editing the original file comprises:
Generating a hash value for the edited original file;
Adding information on the edited original file to the header of the secure file; And
And compressing and encrypting the hash value and the original file
The method comprising the steps of:
The method of claim 1, wherein the document security method further comprises the step of performing editing on the PDF file when editing is requested to the PDF file included in the security file by the user
Lt; / RTI >
The step of performing the editing on the PDF file
Creating the secure directory;
Creating a layer for editing the user on the PDF file;
Editing the PDF file; And
Storing the edited layer in the secure directory
The method comprising the steps of:
6. The method of claim 5, wherein the step of editing the PDF file further comprises determining whether the user is authorized to edit the PDF file, Is displayed on the screen, and the process ends.
6. The method of claim 5, wherein the step of performing the editing on the PDF file comprises:
Generating a hash value for the edited layer;
Adding information on the edited PDF file to the header of the secure file; And
Performing compression and encryption on the hash value and the PDF file
Further comprising the step of:
2. The method of claim 1, wherein the document security method further comprises the step of, when the output of the security file is requested by the user,
Lt; / RTI >
The step of outputting to the secure file
Selecting a printer by the user;
Generating output data based on the security file;
Generating a two-dimensional barcode and adding it to the output data; And
Outputting the output data using the printer
The method comprising the steps of:
The method as claimed in claim 8, wherein the step of outputting the security file further comprises a step of determining whether the user is authorized to output the security file, And if it is determined that the security file does not exist, displaying on the screen that the output of the security file is invalid is terminated.
9. The method of claim 8, wherein the outputting of the security file comprises: determining whether the printer selected by the user is a virtual printer or a shared printer; if the printer selected by the user is a virtual printer or a shared printer, And a step of displaying on the screen that the output to the security file is not possible is terminated.
9. The method of claim 8, wherein the step of outputting to the secure file further comprises generating a copy protection code and adding the copy protection code to the output data.
The method of claim 8, wherein the outputting of the security file further comprises: generating information about the user based on the security file and adding the information to the output data.
13. The method of claim 12, wherein the information about the user is generated in the background and added to the output data.
9. The method as claimed in claim 8, wherein the step of generating and adding the two-
Converting the original file into the PDF file;
Extracting text from the PDF file;
Generating an electronic signature value for the text; And
Generating a two-dimensional barcode including the generated digital signature value, the user's certificate, and the text information
The document security method comprising the steps of:

A document security device comprising:
An original editor for editing the original file of the security file;
A PDF editor for editing a PDF file of a security file;
A security file packaging unit for adding the edited original file or PDF file to the security file or applying the edited part to the security file when the original file or the PDF file is edited by the original editor or the PDF editing unit; And
An output unit for outputting the security file;
The document security device comprising:
16. The method of claim 15,
Original file;
A PDF file obtained by converting the original file into a format of a PDF document;
A hash value obtained by digitizing the characteristics of the security file;
The creator information of the security file;
A file authority unit for storing information about a person who has authority to view or modify the security file;
The encryption and compression unit including encryption information or compression information of the security file,
The document security device comprising:
16. The document security apparatus of claim 15, wherein the original editor edits a security directory and edits and saves the original file in the secure directory.
The document security apparatus of claim 15, wherein the PDF editing unit generates a security directory and a layer, and edits and stores the layer in the secure directory.
16. The document security apparatus of claim 15, wherein the output unit generates a two-dimensional bar code, a copy protection code, and user information, and adds the generated two-dimensional bar code, copy protection code and user information to the security file.

Images