KR20190031947A - External storage device using beacon signal and storage managing method - Google Patents

Abstract

Disclosed are an external storage apparatus using a beacon signal, and a storage management method thereof. According to an aspect of the present invention, the storage management method performed in the external storage apparatus comprises the following steps: receiving a beacon signal from the outside when a connection to a computing device is recognized; performing effectiveness verification of the beacon signal; and exposing data of prepared storage to the computing device if the effectiveness verification is successful.

Description

[0001] The present invention relates to an external storage device using a beacon signal,

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an external storage, and more particularly, to an external storage device and a storage management method using the beacon signal.

When using external storage (USB memory, etc.) in the office environment, there are many security issues such as theft and loss of information. Existing security external storage requires a separate authentication server and agent, which increases manufacturing cost and operation cost.

Korean Published Patent No. 10-2009-0062199 (Published Date June 17, 2009) Security United States Memory Management System

SUMMARY OF THE INVENTION Accordingly, the present invention has been made keeping in mind the above problems occurring in the prior art, and it is an object of the present invention to provide an external storage device and a method of managing the same by enhancing security using a beacon signal by a beacon device having relatively simple construction and operation.

Other objects of the present invention will become more apparent through the following preferred embodiments.

According to an aspect of the present invention, there is provided a storage management method performed in an external storage device, comprising: receiving a beacon signal from an external device when a connection to a computing device is recognized; Performing validation of the beacon signal; And exposing data of the provided storage to the computing device when the validity verification is successful, and a recording medium on which a program for executing the method is recorded.

Here, the method may further include determining an access right as the result of the validation, and may expose only the data in the area according to the access right to the computing device.

In addition, when the validity verification is successful, the step of determining the exposure value using the signal intensity of the beacon signal may further comprise determining the exposure amount of the data according to the exposure value.

In addition, beacon packet information periodically received from the computing device may be used for the validation.

If the beacon packet information is not received for a preset period of time, the method may further include encrypting the data with a preset password.

According to another aspect of the present invention, there is provided a storage for storing data; A wireless communication module for receiving a beacon signal from the outside; And an access control module that performs validation of the beacon signal received from the outside by the wireless communication module when the connection to the computing device is recognized and that permits access to the storage device to the computing device only when the validation is successful. An external storage device using a beacon signal including a module is provided.

Here, the access control module may determine an access right as a result of the validation and expose only the data in the area corresponding to the access right among the areas of the storage to the computing device.

The access control module may determine an exposure value using the signal strength of the beacon signal and determine an exposure amount of the data according to the exposure value when the validity verification is successful.

In addition, the access control module may periodically use the beacon packet information received by the wireless communication module from the predetermined computing device for the validation.

Also, the access control module may encrypt the data with a preset password if the beacon packet information is not received for a predetermined period.

According to the present invention, security can be enhanced by using a beacon signal generated by a beacon device, which is relatively simple to construct and operate.

Also, according to the present invention, a beacon signal, which is a wireless signal, may be used to provide a security class service having different access rights according to signal strength of a beacon device.

1 is a block diagram schematically illustrating an entire system including an external storage apparatus using a beacon signal according to an embodiment of the present invention;
2 is a block diagram showing the configuration of an external storage device according to an embodiment of the present invention;
3 to 5 are flowcharts illustrating a storage management process in an external storage apparatus according to each embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It is to be understood, however, that the invention is not to be limited to the specific embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, terms such as a first threshold value, a second threshold value, and the like which will be described later may be previously designated with threshold values that are substantially different from each other or some of which are the same value, Because there is room, the terms such as the first and the second are to be mentioned for convenience of division.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In this specification, the terms "comprises" or "having" and the like refer to the presence of stated features, integers, steps, operations, elements, components, or combinations thereof, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

It is to be understood that the components of the embodiments described with reference to the drawings are not limited to the embodiments and may be embodied in other embodiments without departing from the spirit of the invention. It is to be understood that although the description is omitted, multiple embodiments may be implemented again in one integrated embodiment.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail.

FIG. 1 is a block diagram schematically showing an entire system including an external storage device using a beacon signal according to an embodiment of the present invention. FIG. 2 is a block diagram illustrating the configuration of an external storage device according to an embodiment of the present invention. Fig.

Referring to FIG. 1, the overall system according to the present embodiment includes an external storage device 10, a computing device 20, and a beacon device 30.

The external storage device 10, as a security function, determines whether or not the computing device 20 can access the storage by using whether or not a specific beacon signal is received from a predetermined beacon device 30.

That is, when the external storage device 10 is connected to the computing device 20 such as a personal computer or a notebook computer and receives power, the external storage device 10 checks whether a beacon signal is received from a specific beacon device 30, Whether to allow access to data in one storage, and so on.

2, the external storage device 10 includes a storage 11 for storing data, an access control module 13 for controlling access to the storage 11 with respect to the computing device 20, And a wireless communication module 15 such as a bluetooth module for receiving the beacon signal from the wireless communication module 30. Although it is not shown in the drawing, it is obvious to those skilled in the art that the external storage device 10 may further include a USB module connected to a USB port of the computing device 20 to receive and communicate power, It will be omitted.

Hereinafter, a storage management method using a beacon signal performed by the access control module 13 of the external storage apparatus 10 will be described in detail.

3 to 5 are flowcharts illustrating a storage management process in an external storage apparatus according to each embodiment of the present invention.

 Referring to FIG. 3 according to an example, the connection of the computing device 20 is recognized (S310). When the external storage device 10 is typically connected to the computing device 20 by a connector such as a USB, a method driven by a power source applied from the computing device 20 may be used. However, the present invention is not limited thereto, and a method of recognizing the connection using the signal received by the connection of the computing device 20 may be used.

When the connection of the computing device 20 is recognized, validation is performed by receiving the beacon signal emitted from the external beacon device 30 (S320). The validity verification is to confirm whether or not it is a beacon signal from the beacon device 30 that has been set in advance. In general, the beacon signal has a unique value UUID, Major ID, and Minor ID, and the access control module 13 of the external storage device 10 identifies the beacon signal using the above-described values of the beacon signal, .

Here, the beacon device 30 may periodically change the information of the beacon signal in order to enhance the security in response to the forgery and falsification of the beacon signal. According to an example of this, the beacon device 30 may periodically change packet information of a beacon signal using specific information (for example, a MAC address, etc.) received from the external storage device 10. [ In this case, the external storage device 10 must be previously agreed with the beacon device 30 so that it can determine whether the changed packet is a valid packet.

According to another example, the beacon device 30 should provide beacon packet information to the external storage device 10 as information on the periodically changed beacon signal. According to an example, the external storage device 10 may store version information (e.g., serial number, date of receipt, etc.) of the beacon packet information received from the beacon device 30, The validity thereof can be verified. An embodiment of this will be described later with reference to the related drawing (FIG. 5).

The validation result of S320 is checked (S330). If the validation fails, the access of the storage (i.e., access to the stored data) is failed to prevent the computing device 20 from accessing the data stored in the storage (S340).

Otherwise, if a valid beacon signal is received and the validation is successful, the connected computing device 20 is allowed to access the storage (S350).

In summary, when the computing device 20 is connected, it checks whether the beacon signal is a valid beacon signal before it is mounted, and allows access to the storage if it is a valid beacon signal. In this case, according to the beacon authentication area, the access right may be different according to the beacon authentication area, thereby enabling the access control according to the security level. For example, in the office room (using the beacon signal by the beacon unit 30 provided in the office room), all the files are authorized, while in the office of the employees (beacon signal by the other beacon unit 30) It is possible to make it possible.

In other words, the access control module 13 of the external storage device 10 confirms the previously set access right according to the ID value of the succeeded beacon signal by validation, and accordingly, accesses the storage area (physical / logical area only But may be divided into file types, etc.).

And according to another example, it is possible to vary the exposure of data as well as access rights. For example, it exposes information about the file title, but not the actual data.

Referring to FIG. 4 illustrating one embodiment of the present invention, if validity verification is successful, an exposure value according to a signal intensity of a beacon signal is determined (S351), and an exposure amount of data is determined according to the exposure value (S353).

For example, the higher the signal intensity of the beacon signal, the higher the exposure amount. Since the security of the beacon device 30 can be judged to be close to that of the beacon device 30, it is possible to increase the exposure of the data.

Referring to FIG. 5 according to another example, when the beacon device 30 periodically changes packet information of the beacon signal and transmits the packet information to enhance security as described above, the external storage device 10 is powered (Step S510). In step S510, the beacon information is received. As described above, the beacon device 30 periodically transmits new beacon packet information, and when the new beacon packet information is received, the external storage device 10 uses it for subsequent validation.

It is checked whether the reception date of the beacon packet information exceeds a threshold period which is a predetermined period (S520). For example, if a week (i.e., 168 hours) is a critical period and the reception date is eight days ago, the beacon packet information may be determined to be information that can no longer be used for validity verification.

If the threshold period is not exceeded, normal processing for performing validity verification on the beacon signal received using the current beacon packet information is performed (S540).

Alternatively, if the threshold period is exceeded, the data stored in the storage may be encrypted with a preset password, or an interface screen asking for the password may be output to the computing device.

In this case, beacon packet information is newly received and updated from the beacon device 30 only when the password is input correctly, and validity verification is performed using the updated information.

The storage management method in the external storage device 10 using the beacon signal according to the present invention can be implemented as a computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording media storing data that can be decoded by a computer system. For example, it may be a ROM (Read Only Memory), a RAM (Random Access Memory), a magnetic tape, a magnetic disk, a flash memory, an optical data storage device, or the like. In addition, the computer-readable recording medium may be distributed and executed in a computer system connected to a computer network, and may be stored and executed as a code readable in a distributed manner.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention as defined in the appended claims. It will be understood that various modifications and changes may be made.

10: External storage device
20: computing device
30: Beacon device

Claims (11)

A storage management method performed in an external storage device,
If a connection to the computing device is recognized, receiving a beacon signal from the outside;
Performing validation of the beacon signal; And
And exposing data of the provided storage to the computing device if the validation is successful.
The method according to claim 1,
Further comprising the step of determining an access right as a result of the validation,
And exposes only data in the area of the storage to the computing device according to the access authority.
The method according to claim 1,
If the validation is successful, determining the exposure value using the signal strength of the beacon signal,
And determines an exposure amount of the data according to the exposure value.
The method according to claim 1,
And uses beacon packet information periodically received from the computing device for the validation.
The method of claim 4,
And encrypting the data with a preset password if the beacon packet information is not received for a predetermined period of time.
A recording medium on which a program for carrying out the method according to any one of claims 1 to 5 is recorded so as to be read by a computer.
Storage for storing data;
A wireless communication module for receiving a beacon signal from the outside; And
The access control module is configured to perform validation of the beacon signal received from the outside by the wireless communication module when the connection to the computing device is recognized and to allow the computing device to access the storage only when the validation is successful. Wherein the beacon signal comprises a beacon signal.
The method of claim 7,
Wherein the access control module determines an access right as a result of the validation and exposes only data in an area corresponding to the access right among the areas of the storage to the computing device.
The method of claim 7,
Wherein the access control module determines an exposure value using the signal strength of the beacon signal and determines an exposure amount of the data according to the exposure value when the validity verification is successful.
The method of claim 7,
Wherein the access control module uses a beacon signal that periodically uses beacon packet information received by the wireless communication module from the predetermined computing device for the validation.
The method of claim 10,
The access control module encrypts the data with a preset password if the beacon packet information is not received for a preset period of time. An external storage device using a beacon signal.

Images