KR20190071419A - Method and apparatus for location based document security - Google Patents

Abstract

Disclosed is a location-based document security method, which comprises the following steps: collecting location information of a user terminal; and setting location-based security in an electronic document file by using the collected location information. According to the present invention, document security can be enhanced by a location-based document security solution without the assistance of a location information collecting server and an authentication server.

Description

[0001] METHOD AND APPARATUS FOR LOCATION BASED DOCUMENT SECURITY [0002]

The present invention relates to a location-based document security method and a document security device, and more particularly, to a document security method and a document security method by allowing a document to be viewed at a specific location or a certain range of positions using location- The present invention relates to a document security method and a document security apparatus capable of preventing the leakage of information that may occur due to copying of a document, outflow of a document, exposure of a password of a user having a right to the document, and the like.

Document security for corporate information leakage prevention, internal control, and efficient data management is critical to business growth. Of particular concern is security regarding electronic documents. Here, it is necessary to examine what an electronic document is.

According to the Act on the Promotion of Information Network Usage and Information Protection, etc., an electronic document refers to 'a document that is created in an electronic form by a device having information processing capability such as a computer and is standardized as a document type data transmitted or received or stored.

Briefly, an electronic document is a document created using an electronic device such as a computer, and is a standardized document file created and stored by a document editing or conversion program such as Hangul, MS Office, Acrobat or the like. In addition, a file including an object other than text, such as a CAD drawing, a picture file such as a GIF / JPG, can be included in the electronic document.

Currently, there are various solutions for electronic document security. Let's take a look at some examples of electronic document security solutions.

Digital rights management (DRM) is the first-ever electronic document security technology. DRM is a technology that encrypts electronic documents so that only authorized persons can decrypt them, which is the easiest and most powerful method. However, it is not easy to systematically manage passwords within organizations as the size of organizations handling electronic documents grows.

Data loss prevention (DLP) is a security control measure that blocks or permits various paths to the outside of an electronic document, records the contents of the data in a log, and tracks the occurrence of an accident. However, it is a disadvantage of DLP that it is impossible to stop the whole path for the group work because of the divergence of the outflow route, and it is also impossible to recover the leaked electronic document.

Document centralization is the automatic and forced transfer of electronic documents generated by a PC to a central server after a certain period of time. And cloud-PC server-based computing, which creates and stores electronic documents within a virtual PC environment provided by a central server. In the case of document centralization, loopholes may occur in security before being moved to a central server, and registration of document information for systematic management of electronic documents is cumbersome. Cloud-PC has a disadvantage that it costs a lot to build a cloud system in different PC environment for each user.

In addition, there is an output security. For example, an output device is authenticated using an ID card authentication device installed in the device, for example, outputting, faxing, or copying an electronic document using a printer or a multifunctional apparatus as an OA device. Output security is distinguished from primary security in that it needs to be in parallel with the primary security corresponding to the above example as secondary security.

DRM is one of the easiest and most powerful electronic document security solutions, but it is pointed out that information is leaked because the password is not managed properly. Therefore, there is a need for a method that can prevent the possibility that an electronic document can easily be leaked due to the lack of password management by eliminating the need for the user to directly designate and store the password.

Figure 1 is an exemplary diagram of a location based document security system environment in accordance with the prior art.

Referring to FIG. 1, a document security system environment according to a related art includes a user terminal 100, a location information collection server 210, and a secure document authentication server 220. The problem of the related art is that the network security may be additionally problematic in that the location information collection server 210 and the secure document authentication server 220 are used through the network, It is expensive to pay.

The location-based document security method and the document security device according to the embodiment of the present invention include a location-based document security platform including a location information collection server and an authentication server, And information collection and authentication processes. In this respect, a location-based document security method and a document security device according to an embodiment of the present invention are disclosed to solve the problems of the prior art, which is different from the prior art described above.

Patent Registration No. 10-1271488 (May 30, 2013)

The present invention has been made to solve the above problems, and it is an object of the present invention to provide a solution for location-based document security without the assistance of a location information collection server and an authentication server.

It is a further object of the present invention to provide a document security method and a document security apparatus capable of document security using position information at a user terminal line.

A further object of the present invention is to provide a solution for location-based document security using a document editing application module interlocked with computer hardware.

The location-based document security method according to an embodiment of the present invention includes: collecting location information of a user terminal; And setting location-based security in the electronic document file using the collected location information.

Here, the location-based document security method may include detecting access of a viewer to the electronic document file; Confirming whether the electronic document is a location-based secured document; And performing browsing authentication to allow the access.

Here, the step of collecting the location information of the user terminal collects the network information of the user terminal.

Here, the network information may include IP information, AP ID, GPS information, and a beacon ID.

Here, the step of setting the location-based security may include: designating the type and / or range of the location information in the collected location information; And including the specified location information in the document file.

Here, the step of designating the type and / or the range of the position information is characterized by directly specifying the position of the user terminal on the map by using the GPS information.

Here, the step of including the designated location information in the document file includes the step of including the encrypted location information in the document file.

Herein, the step of sensing access by the visitor may detect access to a local document stored in the visitor terminal or a remote document stored in the server.

Here, the step of verifying whether the location-based security is established may include: decrypting the encrypted location information; And determining the type and / or the range of the set location information using the decoded location information.

The step of performing the browser authentication includes: collecting location information of a visitor terminal; And performing the browser authentication by comparing the location information used in the security setting with the location information of the terminal of the visitor terminal.

A location-based document security apparatus according to an embodiment of the present invention includes a location information collection module for collecting location information of a user terminal; And a security setting module for setting location-based security in the electronic document file using the collected location information and determining whether the electronic document is a location-based security-established document.

Here, the location-based document security apparatus may further include: an execution module that detects access of a viewer to the electronic document file; And an authentication module for performing browser authentication to allow the access.

Here, the location information collection module collects network information of the user terminal.

Here, the network information may include IP information, AP ID, GPS information, and a beacon ID.

Here, the security setting module specifies the type and / or range of the location information in the collected location information and includes the specified location information in the document file.

Here, the security setting module directly specifies the location of the user terminal on the map using the GPS information.

Here, the location-based document security apparatus may further include an encryption module for encrypting the collected location information, and the security setting module may include the step of including the encrypted location information in a document file.

Here, the execution module executes a local document stored in the visitor terminal or a remote document stored in the server.

The location-based document security apparatus may further include a decryption module for decrypting the encrypted location information, and the security setting module may determine the type and / or range of the set location information using the decrypted location information .

Here, the authentication module performs browser auditing by comparing location information used in security setting with location information of the collected viewer terminal.

According to the present invention, document security can be enhanced by a location-based document security solution without the assistance of a location information collection server and an authentication server.

Also, document security can be enhanced by using position information at the user terminal line.

In addition, document security can be enhanced only by a software method using a document editing application module linked with computer hardware.

1 is an exemplary diagram of a location based document security system environment including a server according to the prior art.
2 is an exemplary diagram of a system environment of location based document security including a location based document security device according to an embodiment of the present invention.
3 is a block diagram of a user terminal corresponding to a location based document security device according to an embodiment of the present invention.
4 is a detailed block diagram of the control unit of FIG.
5 is a block diagram of a computing device corresponding to a location based document security device according to an embodiment of the present invention.
6 is a flowchart illustrating a method of securing a location based document according to an exemplary embodiment of the present invention.
7 is a flow diagram of a document security method in accordance with an embodiment of the present invention on a user terminal.
8 is a diagram illustrating an example of a system environment for explaining a location-based document security method according to an embodiment of the present invention.

Hereinafter, preferred embodiments of a location-based document security method and a document security device according to the present invention will be described in detail with reference to the accompanying drawings.

Like reference symbols in the drawings denote like elements. Furthermore, specific structural and functional descriptions for embodiments of the present invention are presented for the purpose of describing an embodiment of the present invention only, and, unless otherwise defined, all terms used herein, including technical or scientific terms Have the same meaning as commonly understood by those of ordinary skill in the art to which the present invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as ideal or overly formal in the sense of the art unless explicitly defined herein .

The electronic document referred to in the present invention may be an electronic document that can be created by a writing tool and stored as an electronic file and readable, for example, a word processor, a spreadsheet, a presentation software, Documents. In addition, the electronic document may include electronic drawings and video images. Accordingly, the Editor / Viewer application module according to an embodiment of the present invention includes a word processor, a spreadsheet, a presentation software, a CAD program, an image retouching program, and a video editing program.

Hereinafter, a system environment 1 including a location-based document security apparatus 100 according to an embodiment of the present invention will be described.

2 is an exemplary diagram of a location based document security system environment including a location based document security apparatus according to an embodiment of the present invention.

Referring to FIG. 2, a system environment 1 including a location-based document security apparatus 100 according to an embodiment of the present invention includes a user terminal 100, a server 200, An apparatus 300 for providing location information, an attached relay server 350 and a network 400. [

The user terminal 100 corresponding to the location-based document security apparatus according to the embodiment of the present invention can configure a location-based document security platform without involvement of the location information collection server and the authentication server. The server 200 performs a process other than the location information collection and authentication.

The user terminal 100 is a location-based document security device having an electronic document creation and / or viewing function. Here, the user terminal 100 is a device for creating an electronic document, and includes a viewer dedicated for viewing an electronic document, a dedicated device capable of creating and editing an electronic document, a document editor, a document editing device, an electronic typewriter ( an electric type writer, or a computing device, a terminal, and a wireless terminal capable of performing general-purpose operations in addition to creation and editing of a document.

Various embodiments of the wireless terminal may be implemented in a cellular phone, a smart phone having wireless communication capability, a personal digital assistant (PDA) having wireless communication capability, a wireless modem, a portable computer having wireless communication capability, A gaming device with wireless communication capability, a music storage and playback appliance with wireless communication capability, a portable unit incorporating such a combination of Internet home appliances capable of wireless Internet access and browsing, But are not limited to, terminals.

The location-based document security apparatus 100 according to an exemplary embodiment of the present invention corresponding to the user terminal 100 may include a location-based document security method (S100) And a file containing the Editor / Viewer application module 177. The user terminal 100 may be classified into the Editor terminal 101 or the Viewer terminal 102, as the case may be. Here, the Editor terminal 101 is a terminal of a user who creates or distributes an electronic document, and the Viewer terminal 102 corresponds to a terminal of a user who browses electronic documents created or distributed.

The user terminal 100 can read the media stored in the installed Editor / Viewer application module, install the installed media, and install the installed media in the location-based document security apparatus 100. The media includes optical storage media, such as CD-ROM and DVD-ROM. In addition, the integrated platform may be provided in the form of a downloaded binary file from the server 300. The collaborative apparatus 100 can download various files from the server 300 via the network 400 and update the Editor / Viewer application module.

The server 200 may include, but is not limited to, a file server, an update server, an FTP server, a cloud server, a web server, and a file server and a database server storing electronic documents storing an Editor / Viewer application module . The file server 200, the FTP server 200, and / or the update server 200 storing the Editor / Viewer application module may store various files used by the user terminal 100, for example, an Editor / Viewer application module file, Stores the application module file and the service pack file, and allows connection of the user terminal 100 to provide reception / transmission or update of the files by file downloading.

The cloud server 200 may store all or a part of the Editor / Viewer application module in the cloud server 200 and provide it to the user terminal 100 through the web server 200. Accordingly, the user terminal 100 can receive all or a part of the functions provided by the Editor / Viewer application module through the remote cloud server 200 and the web server 200.

The file server 200 storing the electronic document stores the electronic document requested by the user terminal 100 in its own storage device instead of the local area of the user terminal 100 so that the user terminal 100 can access the electronic document at any time Edit, or browse. Of course, the user terminal 100 may store the electronic document in the storage device 140 of the local area as well as the server 200. [

In addition, the database server 200 stores document data, data for a cloud service, web application data, and the like, and provides them to the requesting user terminal 100.

In the present invention, the user terminal 100 may collect location information through various routes. Referring again to FIG. 2, there are shown some examples of an apparatus 300 for providing location information, and the present invention is not limited to the above example. The device 300 for providing location information may be widely used in a global navigation system (GNSS), a global positioning system (GPS) in the United States, It includes Japan's QZSS (Quasi-Zenith Satellite System) as a regional navigation satellite system, including GLONASS in Russia, Galileo in EU, Vadoo in China and COMPASS. , Korea's IRNSS, and the development of an ultra-precise GPS calibration system, Korea's SBAS (Satellite Based Augmentation System), and AP equipment using WiFi, Wibro, etc., Bluetooth, And may include a beacon to be used. In order to use the AP apparatus and the beacon, a relay server 350 connected to the network 400 must be provided together.

The network 400 may be a wired and wireless network such as the Internet, an intranet and an extranet, a cellular such as a wireless telephone network, a local area network (LAN), a wide area network ), A WiFi network, an ad hoc network, and combinations thereof.

Network 400 may include connections of network elements such as hubs, bridges, routers, switches and gateways. The network 400 may include one or more connected networks, such as a multi-network environment, including a public network such as the Internet and a private network such as a secure corporate private network.

Access to the network 400 may be provided via one or more wired or wireless access networks. The user terminal 100 can use the IP address assigned to itself through the network 400 connection as location information.

3 is a block diagram of a user terminal corresponding to a location based document security device 100 according to an embodiment of the present invention.

3, the location based document security apparatus 100 includes an input device 110, a display device 120, an output device 130, a storage device 130, a communication device 150, a power device 160 and a control unit 170. The control unit 170 controls the operation of the mobile communication terminal.

The input device 110 includes a keyboard, a touch screen, a mouse, an electronic pen, and a voice input device, for example, a microphone, for inputting data necessary for creating an electronic document and information for setting various parameters of the user's work environment But is not limited thereto. Through substantially user input, the input device 110 inputs characters and objects into the document. Here, characters are concepts including numbers, symbols, and spaces, and objects include various kinds of form objects such as icons, pictures, figures, tables, and charts.

The display device 120 includes a cathode-ray tube (CRT), a liquid crystal display (LCD), a plasma display panel (PDP), and a plasma display panel But are not limited to, light emitting diode (LED) displays, organic light emitting diode (OLED) displays, and the like.

The output device 130 includes, but is not limited to, a printer, a plotter, a beam projector, a text to sound (TTS) device, a speaker and an earphone.

The storage device 140 may be any type of removable / non-removable from the location based document security device 100 and may be of any type such as magnetic tape, magnetic drum, floppy disk, ZIP drive, and hard disk drive An electronic storage device and a CD-ROM drive using a flash memory such as an SD card, a USB memory and a solid state drive (SSD), a DVD-ROM drive, a blu-ray disc ) Drives. ≪ / RTI >

The communication device 150 includes a communication module corresponding to various communication networks of the network 400, for example, a Bluetooth module, a WiFi module, an Ethernet interface card, a USB module, a cellular wireless communication module, a modem and a wireless router. It is not.

The power supply 160 may include, but is not limited to, a power supply that converts AC to DC, an adapter, a secondary battery such as a SMPS and a lithium ion battery, a lead acid battery, a fuel cell, and a bioethanol battery, It is not.

Since the control unit 170 is configured as a memory area in which all the modules included in the processor, the operating system, and the Editor / Viewer application module 177 are loaded, the control unit 170 executes a control command included in the Editor / Viewer application module do. In particular, the control unit 170 controls the local area and / or the server 300 so that the changed data in the local area is reflected in the electronic document stored in the storage device 140 and / or in the electronic document stored in the remote, ). ≪ / RTI > Hereinafter, the control unit 170 will be described in detail.

4 is a detailed block diagram of the control unit of FIG.

4, the control unit 170 includes a central processing unit (CPU) 179C, an operating system 178, and an Editor / Viewer application module 177 related to the location-based document security method according to an embodiment of the present invention. ) Loaded in the memory 179M. In detail, the control unit 170 includes a security setting module 171, an authentication module 172, a location information setting unit 173, An acquisition module 173, an execution module 174, an encryption module 175, and a decryption module 176. The control unit 170 controls each component and modules in the location-based document security apparatus 100 such that a location-based document security method according to an exemplary embodiment of the present invention is implemented.

Specifically, the control unit 170 receives the user input through the input device 110 by the location-based document security apparatus 100 and generates an electronic document according to the location-based document security method, a display 120 representing the created electronic document, A process of outputting a screen frame, a process of outputting or outputting a generated electronic document such as a report or a drawing on paper, outputting a generated electronic document to the storage device 140, A process of receiving various data necessary for creation or transmitting the prepared electronic document to the server 300 or the external terminal through the network 400 using the communication device 150 and the power supply process through the power supply device 160, (CPU), an operating system (OS), and a location-based document security method according to an embodiment of the present invention The control by the memory (179M), the Editor / Viewer application module 177 is loaded, comprising computer instruction set.

The operating system 179C is a computer operating program for managing the file system of the location-based document security apparatus 100, managing various interfaces, and controlling the operation of the components. The operating system 179C includes, but is not limited to, an operating system of a wired and mobile device, such as MS Windows, Unix, Linux, XOS, Android, iOS operating systems.

The Editor / Viewer application module 177 is an executable program configured to run on the operating system 178 to provide various functions as described in the present invention. The Editor / Viewer application module 177 includes an office program, an image retouching program, and a moving picture editing program capable of editing and / or viewing an electronic document as described above.

The Editor / Viewer application module 177 includes a security setting module 171, an authentication module 172, a location information collection module 173, an execution module 174, an encryption module 175 and a decryption module 176 . A detailed description of the various modules 171 to 176 included in the Editor / Viewer application module 177 will be described later.

In the configuration of the location-based document security apparatus 100 shown in FIG. 4, the configuration in the Editor / Viewer application module 177 is configured to be functionally separated for the sake of convenience of description. And it is not intended to limit the present invention in any way.

In addition, the connection relationship between the respective components is shown as a connection line, or the connection relationship between the components is not expressed individually, but communication or transmission for control or data exchange may occur between configurations in which the connection line is not shown. The present invention is not limited thereto.

The location-based document security device 100 according to an embodiment of the present invention corresponding to the computing device 500 may be described in further detail with reference to another embodiment.

The location based document security device 100 may include a computing system comprised of one or more central processing units (CPUs), a memory, a mass storage, an input interface device, and an output interface device. The elements of the computing system may communicate with each other via a bus.

The hardware platform of a computing device may be a distributed computing environment, such as a personal computer, a handheld or laptop device, a multiprocessor system, a microprocessor-based system, a program product, and any of the above systems or devices, And the like.

5 is a block diagram of a computing device corresponding to a location based document security device according to an embodiment of the present invention.

5, a computing device 500 includes an input interface device 510, an output interface device 520, a memory 531, a storage device 532, a power supply 540, a processor 550, Device 560, a wireless communication device 570, and a bus 580.

The input interface device 510 inputs characters or objects necessary for document creation according to the input of the user. The input interface device 510 includes, but is not limited to, a keyboard, a touch screen, a mouse, a stylus pen, and a pen tablet.

The output interface device 520 includes a display for displaying a user interface related to a document editor and a printer for printing out a document. The output interface device 520 also includes a speaker, a head-phone, and a head-set for outputting the characters in the document by voice using a text to speech (TTS) engine. do.

The processor 550 may execute a set of computer instructions contained in the memory 531 and / or the collaboration application module 175 relating to the collaboration method according to an embodiment of the present invention stored in the storage device 532. [ The processor 550 may refer to a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which the methods according to the present invention are performed. The memory 531 and the storage device 532 may be composed of a volatile storage medium and / or a non-volatile storage medium. For example, the memory 531 may be comprised of read only memory (ROM) and / or random access memory (RAM).

The wireless communication device 570 includes devices for short-range wireless communication, wireless data communication, and wireless voice communication.

Each component included in computing device 500 is connected by bus 580 to communicate with each other.

Based document security method according to an embodiment of the present invention in which the above-described location-based document security apparatus 100 is executed through an operation of a computer instruction set included in the Editor / Viewer application module 177, 4 and Figs. 6 to 8. Fig.

6 is a flowchart illustrating a method of securing a location based document according to an exemplary embodiment of the present invention.

Referring to FIG. 6, a location-based document security method (SlOO) according to an embodiment of the present invention includes steps S110 to S232.

First, the location information collection module 173 of the Editor application module 177 acquires location information of the user terminal (S110). This step is characterized by collecting the network information of the user terminal. Here, the network information includes Internet protocol (IP) information, an access point identification (ID), a GPS information, and a beacon ID. Since the GPS information corresponds to one embodiment, the position information of various satellite navigation systems described above may be included in the embodiment of the present invention.

The security setting module 171 sets location-based security in the electronic document file using the collected location information (S120). Step S120 includes steps S121 to S123.

The security setting module 171 specifies the type and / or range of the location information from the collected location information (S121). The user terminal 100 can set security by selecting at least one of a plurality of types of location information and specifying the location information through the security setting module 171. [ In the case of a plurality of location information, the viewer terminal must perform the authentication process for the entire location information specified in the authentication process.

If GPS information is used in this step, the position of the user terminal on the map can be directly specified by the user. The geographical location information including the GPS information indicates the location of the user terminal 100 using latitude and longitude. Here, the user can designate a certain range of latitude and longitude on the map.

The encryption module 175 encrypts the location information (S122) and includes the encrypted location information in the electronic document file (S123). Various types of encryption algorithms currently in use can be used for the encryption method. The encrypted location information is stored in the header portion of the electronic document file. The encryption process is performed to prevent the location information from being leaked by hacking when the location information is stored in the electronic document file as it is.

Next, the steps performed by the visitor terminal 102 will be described. The execution module 175 of the viewer application module 177 detects the access of the viewer to the electronic document file (S210). Here, access detection means that the reader senses an attempt to open an electronic document file. The execution module 175 can sense an instruction for executing an electronic document file according to an operation for executing an instruction of a viewer, for example, a mouse click or a keyboard enter operation. In this case, the electronic document to be executed by the reader may be a local document stored in the terminal of the viewer or a remote document stored in the cloud server 200, for example.

Next, the authentication module 172 determines whether the electronic document is a location-based security document (S220). Step S220 includes steps S221 and S222. The authentication module 172 receives an interrupt of the application module from the execution module 174 while the application module is executed but the electronic document is not opened. If it is determined by the authentication module 172 that the electronic document to be accessed by the visitor terminal is a location-based security-secured document, then it is confirmed whether or not the location information is decrypted.

The decryption module 176 receiving the interrupt from the authentication module 172 decrypts the encrypted location information (S221).

Next, the authentication module 172 determines the type and / or the range of the set location information using the decoded location information (S222). The type and / or range of the location information set here is based on the items designated and set in step S121.

Next, the authentication module 172 performs a browser authentication to allow access by the viewers (S230). Step S230 includes steps S231 and S232.

The location information collection module 173 collects location information of the visitor terminal (S231). This step is similar to the process in which the user terminal 100 collects the location information in step S110.

The authentication module 172 compares the location information used in the security setting with the location information of the visitor terminal to perform the visitor authentication (S232). In order for the visitor terminal to pass the authentication, the identity of the location information used for security setting by the editor terminal 101 and the location information of the viewer terminal 102 used for authentication should be recognized. Here, the Editor terminal 101 can determine the degree of identity at the time of security setting. For example, when GPS information is used as location information, the Editor terminal 101 can set the validity period of latitude and longitude narrow or wide. In addition, when IP information is used as location information, the Editor terminal 101 can securely set an interval to be displayed in digits rather than specifying an IP address.

Let's take a look at the process by which a writer or distributor creates an electronic document, stores it, distributes it, and then the reader accesses the distributed electronic document.

7 is a flow diagram of a document security method in accordance with an embodiment of the present invention on a user terminal.

Referring to FIG. 7, steps S101 to S124 are performed by the editor terminal 101 on the user side which has created or distributes an electronic document among the user terminals 100. FIG. Steps S200 to S232 are performed by the Viewer terminal 102 on the viewer side to access the electronic document that is apt or distributed among the user terminals 100. [ The location-based document security apparatus 100 according to the embodiment of the present invention can be applied to the structure of the editor terminal 101 and the viewer terminal 102 in the same manner.

The location-based document security method (S100) according to an exemplary embodiment of the present invention may include, for example, registering the user terminal 100 and performing authentication on the user terminal 100, for example, registering a user's ID, May be performed in combination with other existing security methods, such as user authentication by a user. A location based document security method in combination with authentication using a smart phone, which is a personal mobile communication device, with no additional input operation by a user will be described.

8 is a diagram illustrating an example of a system environment for explaining a location-based document security method according to an embodiment of the present invention.

Referring to FIG. 8, a configuration in which a smart phone 100M as a user's mobile communication device is added as a component is shown in FIG. 8 as compared with FIG. Here, the user terminal 100 corresponds to the viewer terminal 102 on the viewer side. The device 300 for collecting location information can specify the collected location information and transmit the registered smart phone 100M. In this case, hardware information of the smartphone 100M, for example, a MAC address or a telephone number may be used as an ID used for registration and authentication of the smartphone 100M.

 The smartphone 100M having received the location information transmits the location information to the Viewer terminal 102 using a USB interface or a short distance communication such as Bluetooth. In this process, information on the smartphone 100M used for authentication can be recorded in the relay server 350 that transmitted the location information. The security of the location based document security method can be further enhanced by combining the authentication process of the personal portable terminal.

As described above, according to the embodiment of the present invention, document security can be enhanced by a location-based document security solution without the assistance of a location information collection server and an authentication server.

Also, document security can be enhanced by using position information at the user terminal line.

In addition, document security can be enhanced only by a software method using a document editing application module linked with computer hardware.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, I will understand the point. Accordingly, the technical scope of the present invention should be determined by the following claims.

100: user terminal, location-based document security device
101: Editor terminal
102: Viewer terminal
110: input device
120: Display device
130: output device
140: Storage device
150: Communication device
160: Power supply
170:
171: Security setting module
172: Authentication module
173: Position information collection module
174: Execution module
175: Encryption module
176: Decryption module
177: Editor / Viewer application module
178: Operating System
179C: CPU
179M: Memory
200: Server
300: Position information collecting device
350: Relay server
400: Network
500: computing device
510: input interface device
520: output interface device
531: Memory
532: Storage device
540: Power supply unit
550: Processor
560: Network interface device
570: Wireless communication device
580: Bus

Claims (20)

Collecting location information of the user terminal; And
And setting location-based security in the electronic document file using the collected location information. The method according to claim 1,
Detecting an access of a viewer to the electronic document file;
Confirming whether the electronic document is a location-based secured document; And
Further comprising the step of performing browser auditing to allow said access. The method according to claim 1,
The step of collecting the location information of the user terminal comprises:
And collecting network information of the user terminal. The method of claim 3,
The network information includes:
(IP) information, an AP ID, GPS information, and a beacon ID. The method of claim 4,
The step of establishing the location-
Designating a type and / or a range of position information in the collected position information; And
Further comprising the step of including the specified location information in a document file. The method of claim 5,
Wherein the step of specifying the type and /
And the location of the user terminal is directly specified on the map using the GPS information. The method of claim 5,
The step of including the designated location information in a document file comprises:
And the encrypted location information is included in the document file. The method of claim 2,
The method of claim 1,
And detecting access to a local document stored in the viewer terminal or a remote document stored in the server. The method of claim 2,
Wherein the step of verifying whether the location-
Decrypting the encrypted location information; And
Further comprising the step of determining the type and / or the range of the set location information using the decoded location information. The method of claim 2,
The step of performing the thin client authentication includes:
Collecting location information of a visitor terminal; And
Further comprising the step of comparing the location information used in the security setting with the location information of the terminal of the visitor to perform the browser authentication. A location information collection module for collecting location information of a user terminal; And
And a security setting module for setting location-based security in the electronic document file using the collected location information, and determining whether the electronic document is a location-based security-enabled document. The method of claim 11,
An execution module for detecting access of a viewer to the electronic document file; And
Further comprising an authentication module for performing browser authentication to allow said access. The method of claim 11,
The location information collecting module,
And collects network information of the user terminal. 14. The method of claim 13,
The network information includes:
(IP) information, an AP ID, GPS information, and a beacon ID. 15. The method of claim 14,
The security setting module includes:
A step of specifying a type and / or a range of the position information in the collected position information and inclusion of the specified position information in the document file. 16. The method of claim 15,
The security setting module includes:
And the location of the user terminal is directly specified on the map by using the GPS information. 16. The method of claim 15,
Further comprising an encryption module for encrypting the collected location information,
The security setting module includes:
And the step of embedding the encrypted location information into the document file. The method of claim 12,
Wherein the execution module comprises:
And executes a local document stored in the viewer terminal or a remote document stored in the server. The method of claim 12,
Further comprising a decryption module for decrypting the encrypted location information,
The security setting module includes:
Further comprising the step of determining the type and / or the range of the set location information using the decoded location information. The method of claim 12,
The authentication module includes:
And performs browser browsing by comparing location information used in the security setting with location information of the collected browser terminal.

Images