KR20220072541A - Integrated system for blocking leakage of core technology information - Google Patents

Abstract

The integrated security system of the present invention has the advantage of blocking various types of technology leakage by limiting the access of people to the security area, the export of security devices or security documents, and the leakage of security data according to the preset security level. have. In addition, the present invention uses a 900 MHz location tracking memory chip mounted on an access card or security device and an antenna installed in the security area to constantly monitor the movement of the access card or security device, thereby providing access or security of unauthorized persons to the security area. It has the advantage of enabling rapid control by determining whether the device is taken out in real time and immediately notifying the security guard or security officer.

Description

Integrated security system for blocking leakage of core technology information

The present invention relates to a security system, and more particularly, to an integrated security system for blocking the leakage of core technology information.

Recently, the number of security incidents related to key technology leakage has increased due to insufficient measures to block access to key facilities to outsiders, such as employees of partner companies, and timely blocking measures by issuing alarms, and inadequate control and monitoring measures for people unrelated to work. are doing In particular, such core technology leakage is occurring not only through the intrusion of personnel, but also through complex and diverse means such as USB, PC, e-mail, and document printouts.

As a result, the number of leaks of key technologies and trade secrets from domestic companies as well as government agencies and public institutions increases, causing economic damage to an astronomical level, and there is a problem of lowering international competitiveness.

In order to prevent damage due to information leakage as described above, Korean Patent Registration No. 10-1997236, registered on July 1, 2019, discloses a system for tracking the location of an occupant for managing an access control area. The registered patent includes a plurality of transmitters provided to visitors, a control program installed in a control room or guard station to perform management, and one or more gateways installed in a management area to enable communication between the transmitter and the control program, The transmitter includes a location information determination and transmission unit that determines the location of the transmitter and generates and transmits location information based on the GPS based on the determined location, and an alarm that generates an alarm when the transmitter is located in a prohibited area; It is configured to include a camera unit capable of photographing a surrounding image, and an image transmission unit for transmitting the image captured from the camera unit as image information, so that it is possible to determine the location of the occupant within the management area, and the occupant to the access control area In the case of access to the , alerting is raised through a notification, and if the continuous access of the person in question is determined, the information can be used to promptly mobilize the manager.

However, the registered patent has an inaccurate problem of indoor location tracking by generating location information of entrants based on GPS, and is a core technology that occurs using complex and diverse means such as USB, PC, e-mail, and document printouts. There is a problem that cannot fundamentally prevent the outflow of

Therefore, there is a need for an integrated convergence security system that blocks technology leakage by various means and utilizes integrated information and communication technology.

Korean Patent No. 10-1997236

Therefore, the present invention blocks the leakage of core technical information that can block various types of technology leakage by limiting the access of people to the security area, the export of security devices or security documents, and the leakage of security data according to the preset security level. To provide an integrated security system for

In addition, the present invention uses a 900 MHz location tracking memory chip mounted on an access card or security device and an antenna installed in the security area to constantly monitor the movement of the access card or security device, thereby providing access or security of unauthorized persons to the security area. We want to provide an integrated security system for blocking the leakage of core technical information so that the device can be taken out in real time and immediately notified to a security guard or security officer so that it can be quickly controlled.

In addition, the present invention intends to provide an integrated security system for blocking the leakage of core technical information that can prevent the leakage of unauthorized data in advance by constantly monitoring the output of security data or transmission to an external network.

In addition, the present invention is to provide an integrated security system that can help prevent security accidents by storing the history of each of the actions detected based on the monitoring, by identifying and analyzing the situation even after the occurrence of an event.

In order to achieve the above object, the integrated security system provided by the present invention is limited information for restricting the access of people to the security area, the export of security devices or security documents, and the leakage of security data according to the preset security level. Restriction information storage unit for storing; a memory chip mounted on the access card or the security device to store the user of the access card or the security level of the security device; a location tracking signal receiving unit for receiving the user of the access card or the security level of the security device and the current location of the memory chip from the memory chip; a job information receiving unit for receiving a security level and security information of a job target from an external device that processes output or transmission of documents or data; Behavior analysis unit that determines whether the behavior specified by the information received through the location tracking signal receiving unit or the job information receiving unit is an activity authorized for security maintenance, based on the restriction information registered in the restriction information storage unit ; and a transmitter for transmitting an alarm message for notifying a security agent or a system administrator to a terminal device possessed by the security agent or an external security management system when an unauthorized behavior is detected through the behavior analysis unit .

Preferably, the integrated security system may further include a history information storage unit for storing history information on the action when an authorized action is detected through the action analysis unit.

Preferably, the history information storage unit may store a transmission history of the alert message.

Preferably, the integrated security system provides an interface with the integrated security system administrator, the user interface for receiving the selection information of the administrator for updating the restriction information previously registered in the restriction information storage unit; and a display unit for displaying the analysis result of the behavior analysis unit to the manager.

Preferably, the restriction information storage unit includes location information for each of at least one security zone, a security level for each zone for determining access restriction or permission for each of the security zones, and an access restriction including the access restriction or allow time Information; Device export restriction information including location information where export is restricted or allowed for each of the security devices, a security level for each device for determining export restrictions or permission for each of the security devices, and the export limit or allow time ; Document export restriction information including document identification information for each of the security documents, a security level for each document for determining export or output restriction or permission for each of the security documents, and a time limit or allow time for export or output; and data identification information for each of the security data, a security level for each data for determining transmission restriction or permission for each of the security data, and data transmission restriction information including a transmission limit or allow time of the data at least You can save one.

Preferably, the memory chip includes: a storage unit for storing identification information of the access card user or the security device, and the security level of the access card user or the security device; and a transmitter that transmits the information stored in the storage unit to the outside at every preset sending cycle.

Preferably, the transmitter includes: a first transmitter that transmits the information stored in the storage unit using a high-frequency signal in a band of 120 to 140 kHz or 13.56 MHz; and a second transmitter for transmitting the information stored in the storage unit using a signal of 900 MHz bandwidth.

Preferably, the location tracking signal receiver is implemented with an antenna of a 900 MHz bandwidth, is installed at the entrance to the security area, and can receive the identification information and security level of the memory chip from the memory chip located within a predetermined distance.

The integrated security system of the present invention has the advantage of blocking various types of technology leakage by limiting the access of people to the security area, the export of security devices or security documents, and the leakage of security data according to the preset security level. have. In addition, the present invention uses a 900MHz location tracking memory chip mounted on an access card or security device and an antenna installed in the security area to constantly monitor the movement of the access card or security device, thereby allowing unauthorized persons to access or secure the security zone. It has the advantage of enabling rapid control by determining whether the device is taken out in real time and immediately notifying the security guard or security officer.

In addition, the present invention has an advantage in that the leakage of unauthorized data can be prevented in advance by constantly monitoring the output of security data or transmission to an external network.

In addition, the present invention has an advantage in that by storing the history of each of the actions detected based on the monitoring, the situation can be grasped and analyzed even after the occurrence of an event to help prevent security accidents.

1 is a diagram for explaining the concept of an integrated security system according to an embodiment of the present invention.
2 is a schematic block diagram of an integrated security system according to an embodiment of the present invention.
3 is a schematic block diagram of a memory chip according to an embodiment of the present invention.
4 to 7 are diagrams for explaining a case-by-case processing procedure using the integrated security system according to an embodiment of the present invention.

Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings, but it will be described in detail so that those of ordinary skill in the art to which the present invention pertains can easily practice the present invention. However, the present invention may be implemented in several different forms and is not limited to the embodiments described herein. On the other hand, in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and similar reference numerals are attached to similar parts throughout the specification. In addition, even if the detailed description is omitted, descriptions of parts that can be easily understood by those skilled in the art are omitted.

Throughout the specification and claims, when a part includes a certain element, it means that other elements may be further included, rather than excluding other elements, unless specifically stated to the contrary.

1 is a diagram for explaining the concept of an integrated security system according to an embodiment of the present invention. In the example of FIG. 1 , a smart security system according to an embodiment of the present invention is denoted as a smart security system 50 . Referring to FIG. 1 , a smart security system 50 that is an integrated security system according to an embodiment of the present invention operates as follows.

First, in step S10, location information (10) of an occupant with an access card, external export information (20) of security devices such as USB and PC, data transmission information (30) of security data, and document management information of security documents At least one piece of information in (40) is transmitted to the smart security system (50).

The location information 10 of the visitor is collected by mutual communication between the location tracking memory chip inserted inside the access card possessed by the person and the location tracking antenna installed at the entrance to the security area, and the access date, time, door, reader, approval Includes information such as availability, number of floors, name of person entering, company, department, position, etc., and the information taken out of the security device 20 includes access date, time, door, reader, approval status, number of floors, type of equipment, and name can do.

External export information 20 of the security device may be collected by mutual communication between the location tracking memory chip attached to the security device and the location tracking antenna installed in the restricted area, and includes access date, time, door, reader, approval It can include whether or not, the number of floors, the type of equipment, and the name.

On the other hand, for mutual communication between the location tracking memory chip and the location tracking antenna as described above, the location tracking memory chip transmits data in a 900 MHz bandwidth, and the location tracking antenna receives a signal of a 900 MHz bandwidth, but at a predetermined distance ( For example, it is possible to recognize a location tracking memory chip located within 11m), and transmit the location information to the smart security system 50 . In addition, the location tracking antenna may further include an alarm, and by monitoring the recognized location tracking memory chip in real time, when an unauthorized person approaches, an alarm may be sounded through the alarm.

The data transmission information 30 may be collected by a data transmission program installed in a PC connected to an internal business network. In this case, the data transmission program may collect data transmission details by monitoring data transmission to an external network through the PC. The data transmission details may include a requester ID, name, department, file name, and size.

The document management information 40 may include document output information collected from a document output device (eg, a printer, etc.) or document discharging information collected from a registration device that registers document discharging information. The document management information 40 may include a user ID, name, department, job type, fax status, number of copies, IP, and job date and time.

In the smart security system 50 that has received the information, an action specified based on the information (eg, entering a security area, taking out a security device or security document, outputting data or transmitting data, etc.) is authorized in advance. decide whether or not an action has been taken. That is, it determines whether an action is permitted by the security level. To this end, the smart security system 50 may store reference information for determining whether the authorized action is performed.

For example, the smart security system 50 stores the access right information for the security area and the double security area information, and when an access action to the security area is detected, the access action for the access action is based on the stored information. You can decide whether to approve or not. At this time, the smart security system 50 establishes a double security system with important facility security and protection area security within the facility by granting the rights of the partner employees and internal employees differently, and in step S10, the location information of the access card ( That is, when the access information) 10 is delivered, details such as access date, time, door, reader, approval status, number of floors, occupant name, company, department, rank, etc. are derived and output on the screen in real time, and the history is displayed It can be stored in internal storage.

In addition, the smart security system 50 stores at least one of export restriction information, document export restriction information, and data transmission restriction information of the security device (eg, USB, PC, etc.), and the information and the information received in step S10 It is possible to determine whether or not to authorize a specific action by using the fields 20, 30, and 40.

In step S20, when it is determined that the specified action is an authorized action based on the information transmitted in step S10, the action information is stored. That is, the smart security system 50 leaves the authorized action as a log record 60 .

In step S30, when it is determined that the specified action is not authorized based on the information transmitted in step S10, that is, when it is determined that the action is unauthorized, an alert message is generated to notify this. That is, the smart security system 50 informs the guard post 70 or the security officer 80 of the unauthorized action, so that rapid control can be achieved.

2 is a schematic block diagram of an integrated security system according to an embodiment of the present invention. Referring to FIG. 2 , the integrated security system 100 according to an embodiment of the present invention includes a restriction information storage unit 110 , a history information storage unit 120 , a user interface unit (I/F) 130 , a location It includes a tracking signal receiving unit 140 , a job information receiving unit 150 , a control unit 160 , an action analyzing unit 170 , a display unit 180 , and a transmitting unit 190 .

The restriction information storage unit 110 stores restriction information for restricting access of a person to a security area, export of a security device or security document, and leakage of security data according to a preset security level. In this case, the restriction information may be at least one of access restriction information, device export restriction information, document export restriction information, and data transmission restriction information.

The access restriction information is reference information for restricting access of a person to the security zone, and location information for each of at least one security zone, a security level for each zone for determining access restriction or permission for each of the security zones; and the access restriction or allowable time, wherein the device export restriction information includes location information where export is restricted or permitted for each of the security devices (eg, USB, PC, etc.), export restrictions for each of the security devices, or a security level for each device for determining permission, and the export limit or allow time, wherein the document export restriction information includes document identification information for each of the security documents, and restrictions or permission for export or output for each of the security documents It includes a security level for each document for determining a security level for each document, and the export or output limit or allow time, and the data transmission restriction information includes data identification information for each of the security data, and limits or permits transmission of each of the security data. It may include a security level for each data for determining, and a limit or allow time for transmission of the data.

The history information storage unit 120 stores an operation-related history of the integrated security system 100 . That is, the history information storage unit 120 provides integrated security according to whether the action specified based on the information received through the location tracking signal receiver 140 and the job information receiver 150, which will be described later, is an action authorized in advance. It is possible to store history information related to the processing of the system 100 . For example, as a result of the analysis by the behavior analysis unit 170 to be described later, if the specified behavior is a previously authorized behavior, history information for the behavior is stored, otherwise, a transmission history of an alert message is stored. can

The user interface unit (I/F) 130 provides an interface with the integrated security system 100 manager. That is, the user interface unit (I/F) 130 may receive an operation signal of an administrator for controlling the operation of the integrated security system 100 . In particular, the user interface unit (I/F) 130 may receive the manager's selection information and integrated information for updating the previously registered restriction information in the restriction information storage unit 110 .

The location tracking signal receiving unit 140 receives a location tracking signal from a separate location tracking memory chip. At this time, the location tracking memory chip is a device that stores identification information and security level information therein, and transmits the identification information and security level information every preset transmission cycle, and is embedded in an access card possessed by an occupant or security It can be attached to a device (eg, USB, PC, etc.).

Accordingly, the location tracking signal receiving unit 140 may receive the security level of the user of the access card or the security device and the current location of the memory chip from the location tracking memory chip. To this end, the location tracking signal receiver 140 is implemented as an antenna of a 900 MHz bandwidth, is installed at the entrance of the security area, and is a location tracking memory located within a predetermined distance (eg, 11 m) in units of a predetermined time (eg, 1 second). Receives ultra-high frequency (UHF) from the chip. Accordingly, it is possible to receive the identification information and security level of the location tracking memory chip located within a predetermined distance (eg, 11m).

The job information receiving unit 150 receives the security level and security information of the job target from an external device (eg, a PC or printer connected to an internal business network) that processes the output or transmission of documents or data. At this time, the received information may be the data transmission information 30 or the document management information 40 illustrated in FIG. 1 , and the data transmission information 30 is transmitted by a data transmission program installed in a PC connected to the internal business network. Collected and may include requester ID, name, department, file name, and size. On the other hand, the document management information 40 includes document output information collected from a document output device (eg, a printer, etc.) or document export information collected from a registration device that registers information when taking out documents, and includes a user ID, name , department, job type, fax status, number of copies, IP, and job date and time can be included.

The control unit 160 controls the overall operation of the integrated security system 100 based on a preset control algorithm or an operation signal of an administrator input through the user I/F 130 . That is, when a signal is received from the location tracking signal receiving unit 140 or the work information receiving unit 150, the control unit 160 controls an action specified by the received signal (eg, entering a secure area, taking out a security device or a security document). , data output or data transmission, etc.) is an act authorized in advance, and the result is displayed on the screen or delivered to an external device (e.g., a security officer's terminal device or a security management system, etc.) The analysis unit 170 , the display unit 180 , and the transmitter 190 are controlled.

The behavior analysis unit 170 is an action for which the specified action (eg, entering a security area, taking out a security device or security document, outputting data or transmitting data, etc.) is previously authorized under the control of the control unit 160 . Check whether or not To this end, the behavior analysis unit 170 determines the corresponding behavior based on the information received through the location tracking signal receiving unit 140 or the work information receiving unit 150 to enter the security area, take out security devices or security documents, and First, the process of determining whether it corresponds to either output or data transmission is performed. In addition, the behavior analysis unit 170 determines whether the specified behavior is a previously authorized behavior for security maintenance based on the restriction information registered in the restriction information storage unit 110 .

The display unit 180 operates under the control of the control unit 160 and is a device for displaying the operating state of the integrated security system 100 , and in particular, displays the analysis result of the behavior analysis unit 170 to inform the administrator of this. .

The transmitter 190 operates under the control of the controller 160 and transmits the security state information detected by the integrated security system 100 to an external device (eg, a security agent's terminal device or a security management system, etc.). For example, when an unauthorized behavior is detected by the behavior analysis unit 170, the transmission unit 190 sends an alarm message for notifying the security personnel or system administrator to the terminal device possessed by the security personnel or an external security management system. can transmit

3 is a schematic block diagram of a memory chip according to an embodiment of the present invention. Referring to FIG. 3 , the memory chip 200 according to an embodiment of the present invention includes a storage unit 210 and a transmission unit 220 .

The storage unit 210 stores identification information of the access card user or security device, and the corresponding access card user or security level of the security device.

The transmitter 220 transmits the information stored in the storage 220 to the outside at every preset sending cycle. To this end, the transmitter 220 uses a high-frequency signal of a band of 120 to 140 kHz or 13.56 MHz to transmit the information stored in the storage unit (not shown) and a location implemented with the information as a 900 MHz antenna. It may include a second transmitter (not shown) that transmits information stored in a corresponding memory chip using a signal of a 900 MHz bandwidth so that the tracking signal receiver 140 can receive it.

In this case, the first transmitter is a transmitter typically provided in a general RF access card, and the second transmitter is a transmitter additionally provided for location tracking according to the present invention.

As described above, the memory chip 200 of the present invention superimposes a general RF chip having the first transmitter and a 900 MHz chip having the second transmitter on one memory chip, thereby controlling access to a specific area and tracking location. to be possible at the same time. That is, the general RF chip restricts the access of only permitted persons to a specific door, and the 900 MHz chip transmits ultra-high frequency (UHF) within a predetermined distance (eg, 11m) so that the radius range is within a predetermined distance (eg, . Due to this, the present invention can block the leakage of core technical information.

Meanwhile, the memory chip 200 is mounted on an access card or security device, and stores the security level of the user of the access card or the security device.

4 to 7 are diagrams for explaining a case-by-case processing procedure using the integrated security system according to an embodiment of the present invention. 5 exemplifies a processing procedure for a case of attempting to take out a security device, FIG. 6 exemplifies a processing procedure for a case of attempting to print or export a security document, and FIG. 7 is a transmission for security data It exemplifies the processing procedure for the case of attempting

2 and 4 , in step S105 , the control unit 160 determines whether an arbitrary occupant attempts to access the secure area. To this end, the control unit 160 receives a signal transmitted from the access card through the location tracking signal receiver 140 , and determines whether the holder of the corresponding access card attempts to access the secure area. For example, the control unit 160 collects information such as access date, time, door, reader, approval status, number of floors, name of person, company, department, rank, etc. through the location tracking signal receiving unit 140, and Based on this, it can be determined whether the holder of the corresponding access card attempts to access a specific security area.

On the other hand, in order to strengthen the security of the security zone, a double security system can be built. FIG. 4 exemplifies a case in which the security system for the security zone is built in a double layer as described above, in step S105, the security zone If it is determined to attempt access to the , in steps S110 and S115, the behavior analysis unit 170 determines whether or not the first-step access permission of the entrant who wants to enter the security area (eg, whether or not the entrance to the protected area is authorized) do. That is, in step S110, the behavior analysis unit 170, based on the security level received from the access card possessed by the visitor, and the restriction information pre-stored in the restriction information storage unit 110, It is checked whether the access authority of the above-mentioned person is present. For example, the security level received from the access card possessed by the visitor is level 2, and for the corresponding security area, the access level registered in the restriction information storage unit 110 is level 2 or less (ie, level 1). , level 2), the behavior analysis unit 170 determines that access is possible for the corresponding person.

If it is determined in steps S110 and S115 that the first-stage access of the entrant to the security area is possible, in step S120, the first-stage access of the entrant is permitted. For example, the entry of the person entering the protected area is allowed.

In step S125, it is determined whether or not the entrant who is allowed to enter the first step attempts a second step access to the corresponding security area (eg, access to the inside of the protected area). To this end, the control unit 160 collects information such as access date, time, door, reader, approval status, number of floors, occupant name, company, department, rank, etc. through the location tracking signal receiving unit 140, and based on the information Thus, it is possible to determine whether the holder of the corresponding access card attempts second-level access to the security area.

If it is determined in step S125 to attempt the second-step access to the secure area, in steps S130 and S135, the behavior analysis unit 170 determines whether the person who wants to access the secure area has the second-step access permission (eg, the protected area) internal access permission). That is, in step S130 , the behavior analysis unit 170 , based on the security level received from the access card possessed by the entrant and the restriction information pre-stored in the restriction information storage unit 110 , enters and exits the corresponding security area. Check whether the accessor's authority to For example, if the security level received from the access card possessed by the visitor is level 1, and the access permission level is level 1 in the restriction information, the behavior analysis unit 170 determines that access is possible for the corresponding person. do.

If it is determined in steps S130 and S135 that the second-stage access of the entrant to the secure area is possible, in step S140, the second-stage access of the entrant is permitted. For example, the entrance of the person inside the protected area is allowed.

In step S145 , the control unit 160 stores the security area access history information in the history information storage unit 120 . In this case, the stored access history information may include security area identification information, occupant identification information, and access time.

On the other hand, if it is determined that step 1 or step 2 entry is not possible in either step S115 or S135, in step S150, the control unit 160 detects that there has been an unauthorized entry attempt as described above by a security officer or Creates and displays a warning message to notify the security management system administrator. To this end, the control unit 160 may display the warning message on the display unit 180 or transmit the warning message to a security personnel terminal device or a security management system through the transmission unit 190 to be displayed.

In step S155 , the control unit 160 stores the transmission history of the warning message as described above, that is, the alarm history information, in the history information storage unit 120 .

2 and 5 , in step S205, the control unit 160 determines whether a certain security device is attempted to be taken out. To this end, the control unit 160 receives a signal transmitted from the memory chip attached to the security device through the location tracking signal receiving unit 140 , and determines whether to attempt to take out the device. For example, the control unit 160 collects information such as access date, time, door, reader, approval status, number of floors, type of equipment, name, etc. through the location tracking signal receiving unit 140, and based on the information, It is possible to determine whether or not the export of the security device is attempted.

If it is determined in step S205 to attempt to take out the security device, in steps S210 and S215, the behavior analysis unit 170 determines whether to approve the export of the security device. That is, in step S210, the behavior analysis unit 170, based on the security level received from the memory chip attached to the security device, and the restriction information pre-stored in the restriction information storage unit 110, take out the security device Check for approval. For example, when the security level received from the memory chip attached to the security device is level 2, and the export approval level in the restricted information is level 2 or less (ie, level 1 or level 2), the behavior analysis unit 170 ) determines that the security device can be taken out.

In steps S210 and S215, if it is determined that the security device can be taken out, the security device is allowed to be taken out in step S220, and in step S225, the control unit 160 returns the security device export history information to the history information. It is stored in the storage unit 120 . In this case, the stored device unloading history information may include unloading device identification information, a unloading place, a person carrying out, and the like.

On the other hand, if it is determined in step S215 that it is not possible to take out the security device, in step S230, the control unit 160, to notify the security personnel or the security management system manager that there has been such an unauthorized export attempt. Generates and displays a warning message. To this end, the control unit 160 may display the warning message on the display unit 180 or transmit the warning message to a security personnel terminal device or a security management system through the transmission unit 190 to be displayed.

In step S235 , the control unit 160 stores the transmission history of the warning message as described above, that is, the alarm history information, in the history information storage unit 120 .

2 and 6 , in step S305 , the control unit 160 determines whether output or export of an arbitrary security document is attempted. To this end, the control unit 160, through the job information receiving unit 150, document output information collected from a document output device (eg, a printer, etc.) It receives the information and decides whether to print or export the security document. For example, the control unit 160 collects information such as user ID, name, department, job type, fax status, number of copies, IP, job date and time through the job information receiving unit 150, and based on the information, the corresponding security It can be determined whether the output or export of the document is attempted.

If it is determined in step S305 to try to output or export the secure document, in steps S310 and S315, the behavior analysis unit 170 determines whether to approve the output or export of the security document. That is, in step S310, the behavior analysis unit 170, based on the restriction information pre-stored in the restriction information storage unit 110, may check whether the output or export approval of the corresponding security document.

In steps S310 and S315, if it is determined that the output or export of the secure document is possible, in step S320, the output or export of the secure document is allowed, and in step S325, the control unit 160 controls the security document. It stores output or export history information about the data in the history information storage unit 120 . In this case, the stored secure document output or export history information may include user ID, name, department, job type, fax status, number of copies, IP, job date and time, document identification information, and the like.

On the other hand, if it is determined in step S315 that it is not possible to output or take out the security document, in step S330, the control unit 160 detects that there has been an attempt to output or take out not permitted as described above by the security personnel or the security management system. Creates and displays a warning message to notify the administrator. To this end, the control unit 160 may display the warning message on the display unit 180 or transmit the warning message to a security personnel terminal device or a security management system through the transmission unit 190 to be displayed.

In step S335 , the control unit 160 stores the transmission history of the warning message as described above, that is, the alarm history information, in the history information storage unit 120 .

2 and 7, in step S405, the control unit 160 determines whether transmission of any security data is attempted. To this end, the control unit 160 receives the data transmission information through the work information receiving unit 150, but may collect the data transmission information by a data transmission program installed in a PC connected to the internal business network. In this case, the data transmission program may collect data transmission details by monitoring data transmission to an external network through the PC. The data transmission details may include a requester ID, name, department, file name, and size. In step S405, the controller 160 may determine whether to attempt to transmit the security data based on the data transmission information.

If it is determined in step S405 to attempt transmission of the security data, in steps S410 and S415, the behavior analysis unit 170 determines whether to transmit the security data. That is, in step S410, the behavior analysis unit 170, based on the restriction information pre-stored in the restriction information storage unit 110, may check whether the transmission of the corresponding security data is possible.

In steps S410 and S415, if it is determined that the transmission of the security data is possible, in step S420, the transmission of the security data is allowed, and in step S425, the control unit 160 transmits information on the transmission history of the security data. is stored in the history information storage unit 120 . In this case, the stored security information transmission history information may include a requester ID, name, department, file name, size, work date and time, data identification information, and the like.

On the other hand, if it is determined in step S415 that the transmission of the security data is not possible, in step S430, the control unit 160 notifies the security personnel or security management system administrator that there has been such an unauthorized output or export attempt. Generates and displays a warning message to notify. To this end, the control unit 160 may display the warning message on the display unit 180 or transmit the warning message to a security personnel terminal device or a security management system through the transmission unit 190 to be displayed.

In step S435 , the control unit 160 stores the transmission history of the warning message as described above, that is, the alarm history information, in the history information storage unit 120 .

By doing so, the present invention blocks various types of technology leakage, and when leakage is detected, it immediately informs a security guard or security officer, thereby enabling rapid control.

In the above, embodiments of the present invention have been described, but the scope of the present invention is not limited thereto, and the present invention is easily changed from the embodiments by those of ordinary skill in the art to which the present invention belongs and recognized as equivalent. including all changes and modifications to the scope of

100: integrated security system 110: limited information storage unit
120: history information storage unit 130: user I/F
140: location tracking signal receiving unit 150: work information receiving unit
160: control unit 170: behavior analysis unit
180: display unit 190: transmitter

Claims (8)

Restriction information storage unit for storing restriction information for restricting a person's access to the security area, export of security devices or security documents, and leakage of security data according to a preset security level;
a memory chip mounted on the access card or the security device to store the security level of the user of the access card or the security device;
a location tracking signal receiving unit for receiving the user of the access card or the security level of the security device and the current location of the memory chip from the memory chip;
a job information receiving unit for receiving a security level and security information of a job target from an external device that processes output or transmission of documents or data;
Behavior analysis unit that determines whether the behavior specified by the information received through the location tracking signal receiving unit or the job information receiving unit is an activity authorized for security maintenance based on the restriction information registered in the restriction information storage unit ; and
and a transmitter for transmitting an alarm message for notifying a security agent or a system administrator to a terminal device possessed by the security agent or an external security management system when an unauthorized behavior is detected through the behavior analysis unit Integrated security system to block technical information leakage. The method of claim 1,
When an authorized action is detected through the action analysis unit, the integrated security system for blocking the leakage of core technology information, characterized in that it further comprises a history information storage unit for storing history information about the action. The method of claim 2, wherein the history information storage unit
An integrated security system for blocking the leakage of core technology information, characterized in that storing the transmission history of the alert message. The method of claim 1,
a user interface unit that provides an interface with the integrated security system administrator and receives selection information of an administrator for updating the restriction information previously registered in the restriction information storage unit; and
The integrated security system for blocking the leakage of core technology information, characterized in that it further comprises a display unit for displaying the analysis result of the behavior analysis unit to the manager. The method of claim 1, wherein the restriction information storage unit
Access restriction information including location information for each of at least one security zone, a security level for each zone for determining access restriction or permission for each of the security zones, and the access restriction or allow time;
Device export restriction information including location information on which export is restricted or allowed for each of the security devices, a security level for each device for determining export restrictions or permission for each of the security devices, and the export limit or allow time ;
Document export restriction information including document identification information for each of the security documents, a security level for each document for determining export or output restriction or permission for each of the security documents, and a time limit or allow time for export or output; and
At least one of data transmission restriction information including data identification information for each of the security data, a security level for each data for determining transmission restriction or permission for each of the security data, and a transmission limit or allow time of the data An integrated security system for blocking the leakage of core technology information, characterized in that it stores The memory chip of claim 1 , wherein the memory chip
a storage unit for storing identification information of the access card user or the security device, and the security level of the access card user or the security device; and
An integrated security system for blocking the leakage of core technology information, characterized in that it includes a transmitter that transmits the information stored in the storage to the outside at every preset sending cycle. The method of claim 6, wherein the transmitter
a first transmitter for transmitting information stored in the storage unit using a high-frequency signal in a band of 120 to 140 kHz or 13.56 MHz; and
An integrated security system for blocking the leakage of core technology information, characterized in that it comprises a second transmitter for transmitting the information stored in the storage unit using a signal of 900 MHz bandwidth. The method of claim 7, wherein the location tracking signal receiving unit
It is implemented with an antenna with a bandwidth of 900 MHz,
It is installed at the entrance of the security area,
An integrated security system for blocking the leakage of core technology information, characterized in that the identification information and security level of the memory chip are received from the memory chip located within a predetermined distance.

Images