TW201409270A - An information safety control system, authentication management module and control method thereof - Google Patents

Abstract

An information safety control system is disclosed. The system comprises a power supply, a terminal apparatus, a sensation interface and an authorizing module. The power supply supplies electric power. The terminal apparatus is used to processing data for users. The sensation interface is used for sensing an authentication data carried by the users. The authorizing module is electrically connected to the power supply, the terminal apparatus and the sensation interface. The authorizing module receives the authentication data to execute a boot procedure and a shutdown procedure. Furthermore, a control method of the information safety control system is disclosed.

Description

Information security monitoring system, its authorization management module and control method

The invention relates to an information security monitoring system, in particular to an information security monitoring system that takes into consideration the use of security and information security.

According to the conventional data processing equipment (for example, a personal computer or a server), the user can perform related data processing operations, for example, performing "document processing", "trial spreadsheet", "presentation production", "database" Operations such as "management", "sending and receiving mail" or "computer soft/hardware development", the security monitoring method for the conventional data processing equipment usually adopts a password mechanism to protect the data processing device and its internal data. When the user needs to use the data processing device, the user can activate the data processing device (or boot, boot) and manually input the correct authentication data (for example, account number and password), after passing the identity authentication. Log-in the data processing device to perform related operations.

The account and password entered by the user must be verified by the operation system (OS) of the data processing device before logging in to the data processing device for data access and the like, when the user wants to leave the data processing device. When you need to log-out the operating system, shut down the data processing device, or lock the display screen to prevent the user's login identity from being fraudulent or data being used. Tampering and other things.

However, in the process of manually inputting the authentication data for authentication by the user, in addition to the inconvenience of use, the following situations are faced:

(1) If the user forgets the authentication information, he/she will not be able to log in to the data processing device to perform any work. He can only ask the system administrator to retrieve or reset the account or password.

(2) If the account and password for authenticating the user's identity are known or too simple for others, or when the user leaves the data processing device, forgetting to log out of the data processing device, the login identity of the user is generated by others. Use doubts.

(3) The data processing equipment is directly powered by the power supply, and is authenticated by the login mechanism of the operating system. It is impossible to force the user to shut down after use, which may cause unnecessary waste of electric energy.

(4) When the user wants to turn off the power, the power of the data processing device may be cut off due to factors such as rushing time or improper operation, etc., before the shutdown process of the operating system is still completed. Data corruption within the data processing device, such as missing file links or hard disk bad tracks.

(5) The system is unable to know the user's usage situation immediately, for example, whether the usage time is too long, and therefore, it is impossible to time limit or issue a warning signal to the user who has used the time.

In summary, there are system security issues such as "forget the authentication information" and "login identity is vulnerable to fraudulent use", and there will be "wasted power", "data corruption" and "use time". Doubt and other doubts, in the actual use of different limitations and shortcomings, there are inconveniences, and further improvement is needed to enhance its practicality.

The object of the present invention is to improve the above disadvantages, and to provide an information security monitoring system for identifying the authentication data carried by the user by means of wireless sensing, so as to automatically control the terminal device to perform an on/off program.

A second object of the present invention is to provide an authorization management module for an information security monitoring system to identify authentication data carried by a user and automatically control the terminal device to perform an on/off procedure.

Another object of the present invention is to provide a method for controlling an information security monitoring system to identify authentication data carried by a user and automatically control the terminal device to perform an on/off procedure.

An information security monitoring system includes: a power supply for providing power; a terminal device for performing data processing operations; a sensing interface for sensing authentication data carried by the user; and an authorization The management module is electrically connected to the power supply, the terminal device and the sensing interface for receiving the authentication data, and performing a booting procedure and a shutdown procedure according to the authentication data.

The authorization management module includes: a reading unit electrically connected to the sensing interface; an authorization control unit electrically connected to the reading unit; a power management unit electrically connected to the authorization control unit, the power supply a supplier and the terminal device; and a power storage unit electrically connected to the reading unit, the authorization control unit and the power management unit.

An authorization management module for an information security monitoring system, comprising: a reading unit for reading authentication data sensed by a sensing interface; an authorization control unit electrically connected to the reading unit for performing a control a program, and according to the authentication data, the authorization level of the user is read; a power management unit is electrically connected to the authorization control unit for producing the authorization level according to the authorization level Generating a power supply signal, a power-on signal and a power-off signal; and a power storage unit electrically connected to the reading unit, the authorization control unit and the power management unit for supplying power to the reading unit, the authorization control unit, and The power management unit.

The authorization management module executes a control program, confirms an authorization level according to the authentication data sensed by the sensing interface, and supplies power to the terminal device. After the terminal device performs the booting process, the authorization device controls the The data processing operation performed by the terminal device performs the shutdown process when the authorization management module can no longer receive the authentication data.

The shutdown process is performed when the authorization management module determines that the usage time of the user exceeds a usage time limit.

The authorization management module further includes a timing status indication unit, and the timing status indication unit is electrically connected to the authorization control unit.

The authorization management module further includes a wireless sensing network node, and the wireless sensing network node is electrically connected to the authorization control unit and the power storage unit.

The wireless sensing network node is a wireless sensing network node that uses a ZigBee communication protocol.

The authorization management module further includes an antenna coupled to the wireless sensing network node.

The sensing interface is a short-point point-to-point transmission reading interface, and the reading unit is a short-distance point-to-point transmission reading device.

The sensing interface is a scanning interface of a biometric feature, and the reading unit is a biometric identification device.

Wherein, the power storage unit is a lithium polymer battery.

The switch further includes a switch, and the switch is electrically connected to the authorization management module.

The output interface is electrically connected to the authorization management module.

A method for controlling an information security monitoring system is applied to the above information security monitoring system, wherein the control method comprises: sensing the user's authentication data by the sensing interface of the information security monitoring system, and transmitting the authentication data to the information security monitoring system Authorizing the management module; the authorization management module confirms an authorization level according to the certification data, and drives the power supply of the information security monitoring system to the terminal device of the information security monitoring system according to the authorization level, and indicates the terminal device Performing a booting process and controlling the data processing operation performed by the terminal device according to the authorization level; and continuously sensing the user's authentication data by the sensing interface and transmitting the authentication data to the authorization management module, when the authorization management module cannot When receiving the authentication data, the terminal device is instructed to perform a shutdown procedure.

The shutdown process is performed when the authorization management module determines that the usage time of the user exceeds a usage time limit.

The above and other objects, features and advantages of the present invention will become more <RTIgt; "Coupling" refers to the communication between the two ends via a wireless medium, such as electromagnetic induction, optical sensing or touch sensing, so that data communication between the two ends is possible. Those with ordinary knowledge in the field can understand.

The "boot procedure" as described in the full text of the present invention refers to a process in which a computer is used to load a required resource by a working system, so that a user can perform a data processing operation by a computer, which is a technical field to which the present invention pertains. Those with ordinary knowledge can understand.

The "shutdown procedure" as used throughout the present invention refers to the process of unloading the resources required by the operating system of the computer to facilitate the power supply required to shut down the computer, as will be understood by those of ordinary skill in the art to which the present invention pertains.

Please refer to FIG. 1 , which is a schematic diagram of a system according to a preferred embodiment of the information security monitoring system of the present invention. The system includes a power supply 1 , a terminal device 2 , a sensing interface 3 and an authorization management module 4 . The authorization management module 4 is electrically connected to the power supply 1, the terminal device 2, and the sensing interface 3.

The power supply device 1 can select a power supply device of a conventional data processing device, such as various power supply, UPS, or a combination thereof, to provide the terminal device 2 The power supply.

The terminal device 2 can be modified by using a conventional data processing device, for example, a personal computer or a server without a power supply, or a device having functions such as data processing and storage, for example, a microcomputer system (Micro- Computer system); or, a computer terminal device connected to a server, the computer terminal device only has a computer terminal device for data output/input interface, such as a computer screen, a mouse, and a keyboard. The terminal device 2 is configured for the user to perform a data processing operation, for example, executing an "instrument Operations such as "processing", "trial spreadsheet", "newsletter production", "database management", "sending and receiving mail" or "computer soft/hardware development".

The sensing interface 3 may be provided with a device for sensing the stored data or biometrics at close range, for example, using infrared transmission (IrDA), radio frequency identification (RFID), wireless universal serial bus (Wireless USB) or near field communication. (NFC) and other short-range point-to-point transmission reading interface, or use a biometric reader such as iris scanning, fingerprint scanning, face scanning or sound sensing. The sensing interface 3 is used to sense the authentication data carried by the user, for example, a user account (account) and a password (encrypted) stored in the reading interface, or a biometric characteristic unique to the user. Such as to identify different users of the data. In this embodiment, the sensing interface 3 is implemented by using an RFID reading interface. When the user carries the RFID chip, the user account and password in the RFID chip can be read, but not limited thereto. .

The authorization management module 4 can be configured with a signal processing function, such as a programmable single chip microprocessor (Programmable MCU), a digital signal processor (DSP), a special function integrated circuit (ASIC), or a signal processing function. The circuit board or the like is configured to receive the authentication data, and perform a booting process and a shutdown process according to the authentication data. In this embodiment, the authorization management module 4 is configured as a special function integrated circuit, and includes a reading unit 41, an authorization control unit 42, a power management unit 43, and a power storage unit 44. The taking unit 41 is corresponding to the sensing interface 3, and the device for recognizing the data transmitted by the sensing interface 3 is selected, for example, infrared transmission (IrDA), radio frequency identification system (RFID), wireless universal serial bus (Wireless USB) ) or near field communication (NFC) The identification device of the point-to-point transmission, or the biometric identification device such as iris scanning, fingerprint scanning, face scanning or sound sensing, the reading unit 41 is electrically connected to the sensing interface 3 for reading a sensing The authentication data sensed by the interface, and the authentication data transmitted by the sensing interface 3 is converted into a format that the authorization control unit 42 can receive; the authorization control unit 42 is electrically connected to the reading unit 41 for executing the control program. And determining, according to the authentication information, the authorization level of the user; the power management unit 43 is electrically connected to the authorization control unit 42, the power supply 1 and the terminal device 2, so as to generate the power supply signal according to the authorization level, booting The power storage unit 44 (for example, a high-capacity battery such as a lithium polymer battery) is electrically connected to the reading unit 41, the authorization control unit 42, and the power management unit 43 to supply power to the reading unit 41. The authorization control unit 42 and the power management unit 43. In addition, the authorization management module 4 further includes a timing state indicating unit 45, a wireless sensing network node 46, and an antenna 47. The timing state indicating unit 45 (for example, various types of indicator lights) is electrically connected to the authorization control. The unit 42 is configured to indicate the remaining usage time of the user; the wireless sensing network node 46 is electrically connected to the authorization control unit 42 and the power storage unit 44 for transmitting and receiving data of other authorization management modules 4; The wireless sensing network node 46 is coupled to the wireless sensing network node 46, wherein the wireless sensing network node 46 can use a wireless sensing network node (WSN node) of the ZigBee protocol, and is coupled to other authorization management by the antenna 47. Module 4 or central management server (not shown) to form a security monitoring network, but not limited to this.

In more detail, when the user wants to use the terminal device 2, the authentication interface carried by the user can be sensed by the sensing interface 3, for example: The RFID reading interface is coupled to the RFID chip carried by the user to read the user account and password in the RFID chip. The authorization management module 4 executes a control program to confirm an authorization level according to the authentication data sensed by the sensing interface 3. For example, the user account belongs to an administrator, a user, a guest, or Non-user level. At the same time, the authorization management module 4 sends a power supply signal to the power supply 1 according to the authorization level, so that the power supply 1 can supply power to the terminal device 2, and send a power-on signal to the terminal device 2, so that the The terminal device 2 performs the booting process. After the terminal device 2 performs the booting process, the terminal device 2 controls the data processing operation performed by the terminal device 2 according to the authorization level. For example, the administrator authority may use all data processing operations in an indefinite manner. The user authority can use part of the data processing job, and the guest authority can only query the data processing job result within a time limit, and the non-user has no right to use the terminal device 2. When the user performs the above operation by using the terminal device 2, the authorization management module 4 can continuously obtain the authentication data sent by the sensing interface 3, and if the user finishes the operation, only the authentication data needs to be removed, for example, The RFID chip is removed from the RFID reading interface, so that the sensing interface 3 can no longer transmit the authentication data to the authorization management module 4. After the authorization management module 4 can no longer receive the authentication data, for example, If the authentication data has not been received for more than one time (for example, 10 seconds), the authorization management module 4 can transmit a shutdown signal to the terminal device 2, so that the terminal device 2 performs the shutdown procedure; or When the authorization management module 4 determines that the user's usage time exceeds one usage time limit (ie, exceeds the time limit for which the user is authorized to use, for example, 60 minutes), the authorization management module 4 can also transmit the shutdown signal to The terminal device 2, causing the terminal device 2 to perform the shutdown program. The authorization management module 4 and the terminal device 2 can be integrated into one another or separately. The authorization management module 4 and the conventional data processing device can be integrated with each other to meet actual application requirements.

In this way, the authorization management module 4 not only automatically controls the terminal device 2 to perform the on/off procedure, but also prevents system security problems such as “forgetting the authentication data” and “logging the identity vulnerable to fraudulent use”. Moreover, the authentication unit 3 senses the authentication data and transmits the authentication data to the authorization management module 4, and the authorization management module 4 controls the power supply 1 to supply power to the terminal device 2, thereby achieving “saving power”. "Prevent data corruption" and "avoid use too long" and other effects.

In addition, the preferred embodiment of the information security monitoring system of the present invention may further include a switch 5 (for example, various switches or switching elements, etc.) and an output interface 6 (for example, various types of displays), the switch 5 and the output interface. 6 is electrically connected to the authorization management module 4, for the user to switch the state of the authorization management module 4, and display the status of the authorization management module 4. In this embodiment, the switch 5 is electrically connected to the power management unit 43 for the user to manually switch the power management unit 43 to enable the terminal device 2 to perform the on/off procedure; the output interface 6 is electrically connected to the The authorization control unit 42 is configured to display an on/off state of the terminal device 2.

Please refer to FIG. 2, which is a flowchart of a control method of a preferred embodiment of the information security monitoring system of the present invention, wherein the control method of the information security monitoring system includes steps S1, S2 and S3.

In step S1, the user's authentication data is sensed by the sensing interface 3 and transmitted to the authorization management module 4.

The step S2 is performed by the authorization management module 4 according to the authentication data. The authorization level is recognized, and the power supply 1 is driven to the terminal device 2 according to the authorization level, and the terminal device 2 is instructed to perform the booting process, and the data processing operation performed by the terminal device 2 is controlled according to the authorization level.

In step S3, the authentication interface is continuously sensed by the sensing interface 3 and transmitted to the authorization management module 4. When the authorization management module 4 can no longer receive the authentication data, for example, receiving the authentication data. The time has been interrupted, and the interruption time has exceeded the timeout period; or, in the case that the usage time (ie, the user's authorized usage time has exceeded), the authorization management module 4 indicates the terminal device 2 Perform this shutdown procedure.

The main features of the preferred embodiment of the information security monitoring system of the present invention are as follows: When the user wants to use the terminal device 2, the authentication carried by the user can be read by the sensing interface 3. data. The authorization management module 4 confirms the authorization level according to the authentication data sensed by the sensing interface 3, and simultaneously supplies the power supply 1 to the terminal device 2 according to the authorization level, and causes the terminal device 2 to perform the booting. The program, after the terminal device 2 performs the booting process, controls the data processing operation performed by the terminal device 2 according to the authorization level. When the user performs the above operation by using the terminal device 2, the authorization management module 4 can continuously obtain the authentication data sent by the sensing interface 3, and if the user finishes the operation, only the authentication data needs to be removed. The sensing interface 3 can no longer transmit the authentication data to the authorization management module 4. After the authorization management module 4 cannot sense the authentication data and timeout, a shutdown signal is transmitted to the terminal device 2, so that the The terminal device 2 performs the shutdown procedure.

In summary, the authorization management module 4 can not only automatically control the terminal. The device 2 performs the on/off procedure to prevent system security problems such as "forget the authentication data" and "login identity is vulnerable to fraudulent use", and it is possible to dispense with "wasted power", "data corruption" and "use". This is the effect of the present invention.

While the invention has been described in connection with the preferred embodiments described above, it is not intended to limit the scope of the invention. The technical scope of the invention is protected, and therefore the scope of the invention is defined by the scope of the appended claims.

〔this invention〕

1‧‧‧Power supply

2‧‧‧ Terminal equipment

3‧‧‧Sense interface

4‧‧‧Authorization Management Module

41‧‧‧Reading unit

42‧‧‧Authorized Control Unit

43‧‧‧Power Management Unit

44‧‧‧Power storage unit

45‧‧‧Timekeeping indicator unit

46‧‧‧Wireless sensing network node

47‧‧‧Antenna

5‧‧‧Switcher

6‧‧‧Output interface

S1, S2, S3‧‧ steps

Figure 1 is a schematic diagram of a system of a preferred embodiment of the information security monitoring system of the present invention.

Figure 2 is a flow chart showing the control method of the preferred embodiment of the information security monitoring system of the present invention.

1‧‧‧Power supply

2‧‧‧ Terminal equipment

3‧‧‧Sense interface

4‧‧‧Authorization Management Module

41‧‧‧Reading unit

42‧‧‧Authorized Control Unit

43‧‧‧Power Management Unit

44‧‧‧Power storage unit

45‧‧‧Timekeeping indicator unit

46‧‧‧Wireless sensing network node

47‧‧‧Antenna

5‧‧‧Switcher

6‧‧‧Output interface

Claims (21)

An information security monitoring system includes: a power supply for providing power; a terminal device for performing data processing operations; a sensing interface for sensing authentication data carried by the user; and an authorization The management module is electrically connected to the power supply, the terminal device and the sensing interface for receiving the authentication data sensed by the sensing interface, and performing a booting procedure and a shutdown procedure according to the authentication data. The information security monitoring system of claim 1, wherein the authorization management module executes a control program, confirms an authorization level according to the authentication data sensed by the sensing interface, and supplies power to the terminal device, waiting for the After the terminal device performs the booting process, the data processing operation performed by the terminal device is controlled according to the authorization level, and when the authorization management module can no longer receive the authentication data, the shutdown process is performed. The information security monitoring system of claim 2, wherein the shutdown management procedure is performed when the authorization management module determines that the user's usage time exceeds a usage time limit. The information security monitoring system of claim 1, wherein the authorization management module comprises: a reading unit electrically connected to the sensing interface; an authorization control unit electrically connected to the reading unit; a power management unit electrically connected to the authorization control unit, the power supply and the terminal device; and a power storage unit electrically connected to the reading unit, the authorization control unit, and The power management unit. The information security monitoring system of claim 4, wherein the authorization management module further comprises a timing status indicating unit electrically connected to the authorization control unit. The information security monitoring system of claim 4, wherein the authorization management module further comprises a wireless sensing network node, the wireless sensing network node being electrically connected to the authorization control unit and the power storage unit. The information security monitoring system of claim 6, wherein the wireless sensing network node is a wireless sensing network node that uses a ZigBee communication protocol. The information security monitoring system of claim 6, wherein the authorization management module further comprises an antenna coupled to the wireless sensing network node. The information security monitoring system of claim 4, wherein the sensing interface is a short-range point-to-point transmission reading interface, and the reading unit is a short-range point-to-point transmission reading device. The information security monitoring system of claim 4, wherein the sensing interface is a scanning interface of a biometric feature, and the reading unit is a biometric identification device. The information security monitoring system of claim 1, further comprising a switch, the switch electrically connected to the authorization management module. The information security monitoring system of claim 1, further comprising an output interface electrically connected to the authorization management module. An authorization management module of an information security monitoring system, comprising: a reading unit for reading authentication data sensed by a sensing interface; An authorization control unit is electrically connected to the reading unit for executing a control program, and the authorization level of the user is determined according to the authentication data; a power management unit is electrically connected to the authorization control unit for The authorization level generates a power supply signal, a power-on signal and a power-off signal; and an power storage unit electrically connected to the reading unit, the authorization control unit and the power management unit for supplying power to the reading unit, the authorization control Unit and the power management unit. The authorization management module of the information security monitoring system of claim 13 further includes a timing status indicating unit electrically connected to the authorization control unit. The authorization management module of the information security monitoring system of claim 13 further includes a wireless sensing network node, the wireless sensing network node being electrically connected to the authorization control unit and the power storage unit. The authorization management module of the information security monitoring system according to claim 15, wherein the wireless sensing network node is a wireless sensing network node adopting a ZigBee communication protocol. The authorization management module of the information security monitoring system of claim 15 further includes an antenna coupled to the wireless sensing network node. For example, the authorization management module of the information security monitoring system described in claim 13 is wherein the reading unit is a short-distance point-to-point transmission reading device. For example, the authorization management module of the information security monitoring system described in claim 13 wherein the reading unit is a biometric identification device. A method for controlling an information security monitoring system is applied to an information security monitoring system as described in claim 1, wherein the control method comprises: sensing information of a user by a sensing interface of the information security monitoring system, And transmitting to the authorization management module of the information security monitoring system; the authorization management module confirms an authorization level according to the certification data, and drives the power supply of the information security monitoring system to the information security monitoring system according to the authorization level The terminal device, and instructing the terminal device to perform a booting process, and controlling the data processing operation performed by the terminal device according to the authorization level; and continuously sensing the user's authentication data by the sensing interface and transmitting the authentication data to the authorized management module The group, when the authorization management module can no longer receive the authentication data, instructs the terminal device to perform a shutdown procedure. The method for controlling an information security monitoring system according to claim 20, wherein the shutdown management procedure is performed when the authorization management module determines that the usage time of the user exceeds a usage time limit.