KR20200017155A - Smartphone Camera Control System in connection with Personnel Access Rights - Google Patents

Abstract

A smartphone camera control system (SCPA) is linked with personnel entrance authority controlling a smartphone camera in which a mobile camera program (MCP) for blocking a data communication function of the smartphone and a mobile camera control system (MCS) program (10) are installed to prevent information sharing. The SCPA comprises: an MCS module (100) including an MSSQL DB and an ORACLE DB storing the status of the smartphone in which the MCS program (10) is installed; an interface module (200) which receives data from the MSSQL DB through the MCS module (100), stores the received data in the ORACLE DB and manages the installation status of the MCS program (10); an SCPA module (300) managing the personnel entrance authority; and an MCP module (400) which operates the MCP function by comparing an entrance area and the entrance authority granted by an information security manager.

Description

Smartphone Camera Control System in connection with Personnel Access Rights {Smartphone Camera Control System in connection with Personnel Access Rights}

The present invention discloses a smartphone camera control system in conjunction with personnel access rights that allow sharing of photographed data for authorized users and photographed data only within an enterprise.

With the development of ICT, smartphone management systems are developing day by day. As a result, it is easy to collect and process information due to the increase in the use of mobile devices, but the loss of information is increasing. In the global industrial era, asset information (such as product drawings or production lines) held by a company is an important measure of the company's competitiveness. In order to prevent information leakage due to the loss or theft of smartphones, MDM (Mobile Device Management) technology is used.In particular, information generated using smartphone camera among mobile devices can be easily shared with each other. Information leakage is more and more information leaks using mobile office programs inside the company than from external malicious users.

Information leaks by malicious users inside and outside the enterprise can threaten the cost, image fall, and even existence of the company due to legal disputes. In order to prevent the leakage of information by internal and external malicious users, companies have continuously introduced DRM (Digital Right Management) and DLP (Data Loss Prevention) [6]. However, the information leakage management system operated by companies is installed on personal computers (PC, LAPTOP) to prevent information leakage, but information leakage using mobile devices cannot be prevented in advance. The personnel access control system is a system that allows only authorized personnel to access the system and does not allow unauthorized personnel to access due to a thorough analysis of information security managers.

Recently, to prevent information leakage using a lost smartphone, a method of authenticating a user using an operation-based password technique and an application that eliminates the authentication process to provide convenience to a user when accurate user authentication is not required. have. An effective wired / wireless information leakage management system should be able to prevent the leakage of information using a malicious user's mobile device in advance, and satisfy both cases at the same time without degrading the work efficiency caused by the legal user's mobile device. In this situation, a new control system is needed to efficiently manage the information of the enterprise.

KR 10-1403670 B1 KR 10-0995583 B1

The present invention discloses a smartphone camera control system in connection with personnel access authority to solve this problem, because there are a variety of ways that employees, partner employees and visitors can leak information in the enterprise by smartphone camera shooting. .

Smartphone camera control in connection with personnel access authority controlling smartphone camera equipped with Mobile Camera Control System (MCS) program 10 and MCP (Mobile Camera Program) to block data communication function of smartphone to prevent information sharing In the system (SCPA), MCS module 100 including MSSQL DB and ORACLE DB that stores the current state of the smart phone installed the MCS program 10; An interface module (200) for receiving data from the MSSQL DB through the MCS module (100) and storing the data in the ORACLE DB and managing the installation state of the MCS program (10); SCPA module 300 for managing personnel access rights and MCP module 400 for operating the MCP function by comparing the access authority and the access area granted by the information security administrator, characterized in that it comprises.

The present invention advances that the employee or partner employees of the company using the smartphone camera to take out the document stored in the company's product drawings or the work that was in progress during the product development to ensure confidentiality with a smartphone camera to leak out to the outside Has the effect of blocking.

In addition, the cost saving effect is reduced by eliminating the trouble of attaching a seal sticker to prevent taking pictures through a smartphone camera.

1 is an MCS system according to the present invention.
2 is an SCPA system in accordance with the present invention.
3 is a data flow diagram of the SCPA system in accordance with the present invention.
4 is a module flow diagram of the SCPA system in accordance with the present invention.
5 is an execution screen of the MCS program installation status data transmission according to an embodiment of the present invention.
6 is an MCS program installation status management program execution screen according to an embodiment of the present invention.
7 is an operation screen of the MCP according to an embodiment of the present invention.
8 is a flowchart of an operating method of a smartphone camera control system according to the present invention.

Hereinafter, although described with reference to the drawings according to an embodiment of the present invention, this is for easier understanding of the present invention, the scope of the present invention is not limited thereto.

When a part of the specification is to "include" any component, this means that it may further include other components, except to exclude other components unless specifically stated otherwise. In addition, the terms "... unit", "module", etc. described in the specification mean a unit for processing at least one function or operation, which may be implemented in hardware or software or a combination of hardware and software. .

In the present specification, when one component 'transmits' data or a signal to another component, the component may directly transmit the data or signal to another component, and through at least one other component. This means that data or signals can be transmitted to other components.

In the present specification, the module may mean a functional and structural combination of hardware for performing the technical idea of the present invention and software for driving the hardware. For example, the module may mean a logical unit of a predetermined code and a hardware resource for performing the predetermined code, and means a code that is physically connected or does not necessarily mean one kind of hardware. It can be easily deduced for the average expert in the art.

Prior to the description, a number of aspects and embodiments are described herein, which are merely illustrative and not limiting.

After reading this specification, skilled artisans will appreciate that other aspects and embodiments are possible without departing from the scope of the invention.

1 is an MCS system according to the present invention, FIG. 2 is an SCPA system according to the present invention, FIG. 3 is a data flow diagram of the SCPA system according to the present invention, FIG. 4 is a module flowchart of the SCPA system according to the present invention, 5 is an MCS program installation status data transmission execution screen according to an embodiment of the present invention, Figure 6 is an MCS program installation status management program execution screen according to an embodiment of the present invention, Figure 7 according to an embodiment of the present invention The operation screen of the MCP, Figure 8 is a flow chart of the operating method of the smartphone camera control system according to the present invention.

Smartphone camera control in connection with personnel access authority controlling smartphone camera equipped with Mobile Camera Control System (MCS) program 10 and MCP (Mobile Camera Program) to block data communication function of smartphone to prevent information sharing In the system (SCPA), MCS module 100 including MSSQL DB and ORACLE DB that stores the current state of the smart phone installed the MCS program 10; An interface module 200 for receiving data from the MSSQL DB through the MCS module 100 and storing the data in the ORACLE DB and managing the installation state of the MCS program 10; SCPA module 300 for managing personnel access rights and MCP module 400 for operating the MCP function by comparing the access authority and the access area granted by the information security administrator, characterized in that it comprises.

In addition, with reference to Figure 8, in the operating method of the smartphone camera control system, the MCS module 100 is the interface module 200 for the installation status of the smartphone camera control system at a predetermined time by the information security manager in advance. Transmitting the address four times with the Mac address (S100); In the step S100, the interface module 200 modifies the data if there is an inquiry result compared with the existing data stored in the MSSQL DB, and if not, newly registers the data (S200) and the SCPA module 300. It is characterized in that it comprises a step (S300) of querying the data from the interface module for the personnel access authority to analyze the work of the accessor and grant access authority.

Businesses share information by capturing video of meeting-related meetings or facilities within the company with the rapid spread of smartphones. The MCS (Mobile Camera Control System) program introduced to prevent such indiscriminate sharing of information is an authentication function that makes resources available to multiple sites in a device through a single authentication process by interworking with the in-house portal service after installation (SSO: Single Sign). -On) and a method of authenticating users with randomly generated passwords (OTP: One Time Password) instead of fixed passwords. When both authentication methods are implemented, photography can be taken in all areas of the enterprise. Therefore, the system for preventing information leakage using the smartphone camera was introduced by analyzing the case of the company's system configuration and work flow. To prevent information leakage, employees, partner employees and visitors access the company's portal system and install the MCS program on their personal smartphones. If the MCS program is deleted, the flashing light will be activated automatically when entering the office with IDCARD, and the employee can install the MCS program.

The installed MCS program is automatically activated when entering and exiting the company, and automatically stopped when leaving the company. When the MCS program is activated, the camera function built into the smartphone is not activated, and the Mobile Camera Program (MCP) is activated to block the data communication function of the smartphone and use only corporate Wi-Fi.

When the MCP is activated, Wi-Fi can be connected to the company's information leakage monitoring system to check the captured data in real time. The data taken by the MCP is stored in an encrypted state in the hidden area of the smartphone and cannot be checked if it is out of the company. Here, the hidden area of the smartphone is an encrypted area of memory that is displayed to the user only when the MCP is in operation. The information leakage prevention system using a smart phone as shown in FIG.

Since the MCS program is installed with the approval of the information security manager, it can be operated anywhere from inside or outside the company. However, MCPs within an MCS program should only be operated in an access area approved by the information security manager. Therefore, we propose a smartphone camera control system in connection with the management of MCS program installation status of employees, partner employees and visitors, and personnel access rights.

The purpose of the SCPA system proposed in the present invention is to quickly grasp the installation status of the MCS program installed on the existing smartphone and to prevent information leakage through the smartphone camera in advance through information linkage with the personnel access authority. In addition, it is possible to reduce the cost of the seal sticker that is attached to the smartphone camera to prevent information leakage for visitors visiting the enterprise.

Next will be described in detail the configuration, data flow, system implementation of the smart phone camera control system (SCPA) associated with the personnel access authority according to the present invention.

The SCPA system monitors the installation status of the MCS program to prevent employees, partner employees and visitors from entering the office and leaking product drawings, office layouts, production lines, etc. to smartphones for malicious purposes. Send to the operation DB every 10 minutes. Then, the information security manager can check the installation status of the transmitted MCS program. Information security managers notify employees, partner employees and visitors who do not have the MCS program online (SMS) to minimize the installation of the MCS program. In addition, the information security manager analyzes the accessor's work accurately and grants access authority.

Referring to Figure 2 in more detail about the configuration of the SCPA system, SCPA system is composed of the installation status and personnel access authority of the MCS program. The installation status of the MCS program is stored in the MSSQL DB of the MCS program installed in the smartphones of employees, partner employees and visitors. Interface Module of SCPA system receives MSSQL DB data where MCS program installation status is stored and saves in ORACLE DB. The information security manager grants access to the personnel who installed the MCS program in the ORACLE DB. The MCS program controls MCP operation according to the accessible area.

Next, the data flow of the SCPA system will be described in detail with reference to FIG. 3.

The data of the SCPA system is divided into the installation status of the MCS program and the authority for personnel access. The installation status of the MCS program is transmitted every 10 minutes through the Interface Module to the MacA system's installation status table. In addition, the personnel access authority is granted by the information security manager analyzes the work of the accessor.

The following describes the implementation of the SCPA system in detail through the embodiment. The implementation environment of the SCPA system consists of a hardware domain and a software domain. In addition, it defines parameters for protocol design of SCPA system and implements data flow step-by-step for module-specific protocol design.

In an embodiment according to the present invention, the module environment includes a server and software in a hardware area in a system implementation environment. The server's operating system is Window7, and the databases are MSSQL and ORACLE. The software is Weblogic, Java, Jsp. The implementation environment and modules of such SCPA system are shown in Table 1 below.

Div. Component Qty Model
H / W Server CPU One Intel Core
i7-2670QM Memory One 8 GB
S / W OS Window7 Enterprise Edition 64bit WAS weblogic8.1.6 Language jdk1.4, jdk1.6 Database MSSQL2008, Oracle 10g

Table 1. Implementation Environment and Module of SCPA System According to Embodiment of the Present Invention

This is a recommendation and may vary depending on the setting and environment of the operator, and it is natural that the above numerical values are not limited to the present invention.

Next, the flow of the module will be described in detail with reference to FIG. 4. Four modules are required to implement the SCPA system. First, it transfers the MCS program installation status data to the SCPA system installation status table. The second module manages the installation status of MCS programs. Third is the module that manages the personnel access authority. Fourth, this module compares the access authority and access area granted by the information security manager to activate the MCP function.

The following describes the parameters used in the protocol of SCPA system in detail with reference to Table 2 below.

code Description MCSDBSERVER, MCSDB Mobile Control System DB
Server, DB InfArr1 Interface Module Array EmpNo Employee Number Name Name MacAddress Mobile Mac Address Device Mobile sequence Factory Factory code Dept Department Mobileno Mobile Number Status Mobile Use Status SearchText Search MCS Setup Status Text ResultArr1 Result Array ResultStr1 Entrance User SCPADBSERVER, SCPADB SCPA DB Server, DB EnterArr1 Entrance Auth, Array h (*) One-way hash function

Table 2, Protocols Used by SCPA

Next, the implementation procedure of the four module protocols of the SCPA system will be described in more detail.

(1) Interface Module (200) Protocol

Interface module is a protocol to transfer MCS program installation status data to SCPA _DB installation status table using Interface Module. MCS installation status table transfer protocol compares number and MacAddress, and if it is correct, it registers. Status of MCS Program Installation Steps for executing the interface module protocol are as follows.

Step 1: Interface Module inquires MCS program installation status in MCSDB and saves it in InfArr1.

InfArr1 = (h (EmpNo), Name, MacAddress, Device,

Factory, Dept, MobileNo, Status)

Step 2: Compare the MCS program installation status table of SCPA system with the number stored in InfArr1 of Interface Module and MacAddress. If the number stored in InfArr1 and MacAddress are not in the MCS program installation status table of the SCPA system, add the number stored in InfArr1, MacAddress, Device, Factory, Dept, MobileNo, and Status. If the number and MacAddress stored in InfArr1 are in the MCS program installation status table of SCPA system, modify Name, Device, Factory, Dept, MobileNo, and Status using the condition and the MacAddress saved in InfArr1.

(2) lookup module (100) protocol

Inquiry module inquires MCS installation status sent to SCSPDB installation status table. Keywords to search MCS installation status are department, name and company number. Inquiry of MCS program installation status module protocol in SCPA system Searches SCSPDB by department, name, number, etc. and saves MCS program installation status in ResultAttr1.

(Dept, Name, EmpNo) => SCPA _DB

ResultArr1 = (EmpNo, Name, MacAddress, Device, Factory, Dept, MobileNo, Status)

(3) Person access authority inquiry module 300 protocol

The Person Access Rights Lookup Module is a protocol for managing the person access rights of the SCPA system. The information security manager checks the access authority and finds out the exact work of the accessor and grants or retrieves the access authority. Step-by-step contents of the management module protocol for the access to the SCPA system are as follows.

Step 1: The information security manager searches the SCPA _DB by name and number, and stores the access numbers in ResultStr1.

(SearchText) => SCPA _DB

ResultStr1 = (EmpNo, Name, Dept, MobileNo, EnterArr)

Step 2: The information security manager adds or deletes the access authority after checking the access authority.

if (Incorrect Entrance Auth is exist) =>

Delete Entrance Auth from SCPA _DB

if (Correct Entrance Auth is not exist) =>

Insert Entrance Auth from SCPA _DB

(4) MCP Operation Module (400) Protocol

The MCS program operates the MCP by comparing the access rights and access areas granted by the information security manager. The normal operation of the MCP and the failure of the MCP are stored in the SCPA _DB . The step-by-step implementation of the MCP Operation Module Protocol is as follows:

Step 1: The MCS program installed on the smartphone of the access person inquires the access authority of the access person stored in the SCPA _DB .

(MCS Check Entrance Auth) => SCPA _DB

Step 2: Activate the MCP if the SCPA _DB has access authority. If no access authority is available, do not operate the MCP.

if (Entrance Auth is exist) =>

MCP working

if (Entrance Auth is not exist) =>

MCP not working

Step 3: Store the history of MCP operation and non-operation in SCPA _DB .

(EmpNo, Wdate, Ent_Area) => SCPA _DB

Through the above embodiment, it can be seen an example of executing the program installation status data transmission as shown in FIG. In addition, the MCS program installation status management program that allows the information security manager to query the installation status of the MCS program to identify the uninstaller status and minimize the non-installation, as shown in FIG. 6. If the MCP of the SCPA system is in operation as shown in FIG.

Although described with reference to the drawings according to an embodiment of the present invention, those of ordinary skill in the art will be able to perform various applications and modifications within the scope of the present invention based on the above contents.

10: MCS Program
100: MCS module
200: interface module
300: SCPA module
400: MCP Module

Claims (2)

Smartphone camera control in conjunction with personnel access authority that controls smartphone camera equipped with Mobile Camera Control System (MCS) program 10 and MCP (Mobile Camera Program) that blocks data communication function of smartphone to prevent information sharing In the system (SCPA),
An MCS module 100 including an MSSQL DB and an ORACLE DB in which a current state of a smartphone on which the MCS program 10 is installed is stored;
An interface module 200 for receiving data from the MSSQL DB through the MCS module 100 and storing the data in the ORACLE DB and managing the installation state of the MCS program 10;
SCPA module 300 for managing personnel access rights and
Smartphone access control system comprising an MCP module (400) for operating the MCP function by comparing the access authority and the access area granted by the information security manager.
In the operating method of the smartphone camera control system of claim 1,
The MCS module 100 transmits the installation status of the smartphone camera control system to the interface module 200 at four times designated by the information security manager in advance (S100);
In the step S100, the interface module 200 corrects the data if there is an inquiry result compared with the existing data stored in the MSSQL DB, and if not, registers a new one (S200);
The SCPA module 300 includes a step (S300) of inquiring data from the interface module and granting an access right by analyzing information of a person's access authority by an information security manager (S300). How to operate.

Images