WO2017119698A1

WO2017119698A1 - System for providing solution for permanent deletion and destruction of storage device data

Info

Publication number: WO2017119698A1
Application number: PCT/KR2017/000051
Authority: WO
Inventors: 고영준
Original assignee: (주)우영테크
Priority date: 2016-01-05
Filing date: 2017-01-03
Publication date: 2017-07-13
Also published as: KR101661731B1

Abstract

The present invention relates to a storage device removal system, which monitors all processes from collection to removal of a storage device through a management server, thereby preventing data leakage. The storage device removal system comprises: a storage device recognition unit; a storage device reception unit; a storage device carriage unit; a data deletion unit; a storage device destruction unit; and a management server for receiving a serial number obtained by the storage device recognition unit and receiving location information of a first GPS chip from the storage device reception unit, wherein the management server receives a permanent data deletion completion signal from the data deletion unit, and generates a storage device data removal completion report upon receiving a storage device destruction completion signal from the storage device destruction unit, and the storage device data removal completion report includes the serial number and the location information of the first GPS chip.

Description

A system that provides a solution for permanently deleting and destroying storage data

The present invention relates to a system for providing a solution for permanently deleting and destroying storage data. More particularly, the present invention relates to a storage system for monitoring a process of collecting and removing storage data through a management server to prevent leakage of data. A device removal system.

In general, important data is stored in a storage device such as a hard disk installed in a computer, a notebook, a server, and the like. When disposing of a computer, a notebook, a server, or the like, data in the storage device must be completely removed.

In order to completely remove data stored in a storage device, a method of physically destroying a hard disk or completely deleting data stored by a strong magnetic field is used. Deletion software may also be used for complete deletion of data.

However, it is difficult for an individual to process the data removal work in the storage device alone, and in general, referral to an information removal company is common. However, as is reported in many news cases, the data removal company's employees frequently leak the customer's data, so the information removal company has a system that can confirm the entire process of storage data removal to the customer. Needed.

Storage device removal system according to an embodiment of the present invention has the following object.

(1) Provide a system to prevent the leakage of storage by monitoring the location of the storage in real time.

(2) It provides a system to prevent the leakage of the storage device by monitoring the surrounding situation in real time when the storage device is moved.

(3) Provide a system that prevents copying data from storage prior to scanning the storage.

(4) Provide a system in which the storage box of the storage device can be opened only after arriving at the removal area after moving the storage device.

(5) If the storage device is determined to be stolen, provide a system for physically remotely destroying the storage device.

(6) Provide a system in which the requested storage devices must all be contained in the accommodating box without omission so that the next removal procedure can proceed.

(7) After removing the data from the storage device, provide the system to send the data removal completion report to the customer.

The object of the present invention is not limited to those mentioned above, and other objects not mentioned will be clearly understood by those skilled in the art from the following description.

A storage device removal system according to an embodiment of the present invention, the storage device recognition unit for obtaining a serial number of the storage device; A storage device accommodating at least one storage device and having a first GPS chip therein; A storage moving unit for moving the storage containing unit to a removal area; A data deletion unit for permanently deleting data of the storage device in the removal area; A storage device destroying unit physically destroying the storage device in the removal area; And a management server receiving the serial number acquired by the storage device recognition unit, and receiving the location information of the first GPS chip from the storage device receiving unit, wherein the management server is configured to permanently delete data from the data deletion unit. When the storage device destruction complete signal is received from the storage device destruction unit receives a storage data removal completion report, the storage device data removal completion report includes the serial number, the location information of the first GPS chip Is disclosed.

The storage device moving unit is provided with a second GPS chip, and transmits the location information of the second GPS chip to the management server, the storage device data removal complete report includes the location information of the second GPS chip. Is initiated.

The storage device moving unit is provided with an external recording device to record an external situation of the storage device moving unit while the storage device moving unit moves, and the storage device moving unit transmits the recorded image to the management server. It is disclosed that the data removal completion report includes the recorded video of the external recording device.

The storage recognition unit scanner for scanning the serial number of the storage device; An input / output port locking device detachably connected to the scanner and inserted into an input / output port of the storage device; And a storage device recognizing unit communication device communicating with the management server, wherein the scanner is in a scanable state when connected to an input / output port locking device inserted into the input / output port, and when the scanner scans a serial number of the storage device. And the input / output port lock device is separated from the scanner, the input / output port lock device is in a locked state that is not separated from the input / output port, and the input / output port lock device is connected to the storage recognition unit communication device. Randomly generating a first password for releasing the locked state of the lock and transmitting the random password to the storage device recognizing unit communication device, wherein the storage device recognizing unit communication device transmits the first password to the management server; Initiating the transmission of the first password to the data deletion unit The.

The storage device receiving portion includes a receiving box for receiving the storage device; A locking device attached to the accommodation box to lock the accommodation box; And a storage device communication unit communicating with the management server, wherein the locking device randomly generates a second password for locking the accommodation box and releasing the lock state of the accommodation box. And transmitting the second password to the management server, wherein the management server transmits the second password to the data deletion unit.

The storage device receiving portion includes a receiving box for receiving the storage device; A locking device attached to the accommodation box to lock the accommodation box; A storage receiver communication device in communication with the management server; And a heating wire arranged inside the accommodating box and operated by a storage accommodating part communication device, wherein in a locked state of the accommodating box, a distance between the first GPS chip and the second GPS chip is a reference time. If the state is kept longer than the reference distance, the management server is started to transmit the operation signal of the hot wire to the storage receiver communication device.

The storage device receiving portion includes a receiving box for receiving the storage devices; A locking device attached to the accommodation box to lock the accommodation box; A storage device scanner attached to the housing box to scan a serial number of the storage device; And a storage receptacle communication device in communication with the management server, wherein the storage receptacle scanner scans the serial numbers of the storage devices when the storage devices are accommodated in the accommodating box. Only when the serial numbers of the storage devices transmitted to the management server and the serial numbers scanned by the storage device scanner are matched, the locking device is started to operate.

According to an embodiment of the present invention provides the following effects.

(1) The GPS chip is installed in the storage receiving unit and the storage moving unit to provide a system capable of accurately monitoring the location of the storage device in real time.

(2) An external recording device is installed in the storage device moving unit to provide a system for monitoring the surrounding situation in real time when the storage device is moved.

(3) Provide a system that can prevent copying data from storage prior to scanning the storage.

(4) After the storage device is moved to the storage moving part, a system is provided in which the storage device receiving part can be opened only after arriving at the removal area.

(6) Provide a system in which the requested storage devices must all be contained in the storage compartment without omission so that the next removal procedure can proceed.

The effects of the present invention are not limited to those mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the following description.

1 is a schematic diagram of a storage removal system according to an embodiment of the present invention.

Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings. In the following description of the present invention, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

Storage device removal system according to an embodiment of the present invention is to permanently remove the data of the storage device, the storage device recognition unit 110, storage device receiving unit 120, storage device moving unit 130, data deletion The unit 210, a storage destroyer 220, and a management server 310 are included.

The storage recognizer 110 acquires a serial number of the storage device. Typically the serial number is attached as a barcode to the storage surface. The storage recognizing unit 110 may include a scanner, an input / output port locking device, and a storage recognizing unit communication device.

The scanner scans the serial number of the storage device (preferably a security guard visits the customer and scans the serial number with the scanner), and the storage device communication unit connected to the scanner wirelessly or wirelessly communicates with the management server 310. do. The scanner transmits the serial number of the scanned storage device to the storage device recognition unit communication device, and the storage device communication unit communication device transmits the received serial number to the management server 310.

The input / output port lock is inserted into the input / output port of the storage device and detachably connected to the scanner. The scanner is set to be in a scannable state when connected to an input / output port lock inserted in the input / output port. When the scanner scans the serial number of the storage device, the input / output port lock is configured to be separated from the scanner and locked to the input / output port.

The locked I / O port locker randomly generates and transmits a first password to the storage recognizer communication device to the storage recognizer communication device to the storage recognizer communication device. Transmits the first password to the management server 310, and the management server 310 transmits the first password to the data deletion unit 210.

Accordingly, the I / O port locking device connected to the I / O port in the locked state is released from the data deleting unit 210 and removed from the I / O port. The data deleting unit 210 may be connected to the storage device through the input / output port from which the input / output port lock device is removed, and permanently deletes data with the permanent deletion software.

The storage device receiving unit 120 accommodates a storage device, and may accommodate a plurality of storage devices. The storage receiving unit 120 preferably includes a receiving box, a locking device and a storage receiving communication unit, and a first GPS chip is attached to the receiving box. The storage receptacle 120 preferably includes a receiving box, a lock and a storage receptacle communication device.

The accommodation box is a security box that houses the storage device. A lock is attached to the housing box to lock the housing box. The storage device communication unit, which is attached to the accommodation box and connected to the lock device and wired or wireless, communicates with the management server 310.

The lock device locks the receiving box, randomly generates a second password for unlocking the receiving box, and transmits it to the storage receiving communication device, and the storage receiving communication device transmits the second password to the management server 310. To send). The management server 310 transmits the second password to the data deletion unit 210. Accordingly, the lock box is in the locked state until the lock state is released from the data deletion unit 210, and the storage box can be taken out of the accommodation box and connected to the data deletion unit 210.

In addition, the storage box is preferably attached to the storage device scanner for scanning the serial number of the storage device. When a plurality of storage devices are accommodated in the receiving box, the storage device scanner scans the serial numbers of the storage devices, and the storage device serial number and the storage numbers of the storage devices transmitted to the management server 310 by the storage device recognition unit 110 are stored. Device Receptacle The lock will only work if the serial numbers scanned by the scanner match. Therefore, all the storage devices recognized by the storage device recognition unit 110 must be accommodated in the accommodation box so that they can be loaded into the storage device moving unit 130.

Furthermore, it is preferable that a plurality of heating wires operated by the storage receiving unit communication device are arranged along the inner wall in the housing box, and the heating wires are used to remotely destroy the storage device housed inside the receiving box. This will be described later.

The storage moving unit 130 moves the storage receiving unit 120 to the removal area 200. Storage device moving unit 130 is preferably a van-shaped secure transport vehicle that can be stored storage device 120. The removal area 200 indicates a factory or a research institute where a storage device removal operation is performed, and the data deletion unit 210 and the storage device destruction unit 220 are located in the removal area 200. The term "removal" is defined here as a combination of data destruction and storage destruction.

In the removal area 200, the movement of the storage device moving unit 130 is monitored by the door sensor and the surveillance camera.

The storage device moving unit 130 may be provided with a second GPS chip, and transmits the location information of the second GPS chip to the management server 310.

In the locked state of the accommodating box, if the distance between the first GPS chip and the second GPS chip remains open for more than the reference distance (eg, more than 1 km) during the reference time (for example, for 5 minutes) In addition, the storage box is determined not to be stored in the storage moving unit 130 but moves to another path (for example, theft), so that the management server 310 is connected to the storage receiving unit communication device to prevent data leakage. Transmit the operation signal of the heating wire. Accordingly, the storage device accommodated in the receiving box is melted and destroyed by the heat of the hot wire. To this end, the accommodating box is preferably configured to include a heat insulating material is blocked the heat conduction to the outside.

An external recording device such as a black box may be installed in the storage device moving unit 130, and records an external situation of the storage device moving unit 130 while the storage device moving unit 130 moves. 130 transmits the recorded video to the management server 310.

The data deleting unit 210 permanently deletes data of the storage device. Since the data deletion unit 210 deletes the data using known data permanent deletion software (National Intelligence Service permanent deletion program), a detailed deletion algorithm will be omitted.

The storage destroyer 220 physically destroys the storage device. It is desirable to destroy the storage device using a crusher.

The management server 310 is connected to the storage device recognition unit 110, the storage device receiving unit 120, the storage device moving unit 130, the data deleting unit 210, and the storage device destroying unit 220 through a wireless network. do. The management server 310 receives the serial number acquired by the storage device recognition unit 110, receives the position information of the first GPS chip from the storage device receiving unit 120, and receives the second GPS information from the storage device moving unit 130. GPS chip location information is received.

When the management server 310 receives the data permanent deletion completion signal from the data deletion unit 210 and receives the storage destruction completion signal from the storage destruction unit 220, the management server 310 generates a storage device data removal completion report, and generates the generated data. The storage data removal complete report to the customer. The storage data removal completion report may include a serial number, location information of the first GPS chip, location information of the second GPS chip, and / or recorded video of an external recording device, and a data destruction certificate and a removal report by serial number. May be included.

While specific embodiments have been described above, it will be apparent to those skilled in the art that various modifications may be made without departing from the scope of the present invention.

110: storage device recognition unit

120: storage unit receiving portion

130: storage device moving unit 130

200: removal area

210: data deletion unit

220: storage device destruction

310: management server

Claims

A storage removal system for permanently removing data in a storage device,

A storage device recognition unit for obtaining a serial number of the storage device;

A storage device accommodating at least one storage device and having a first GPS chip therein;

A storage moving unit for moving the storage containing unit to a removal area;

A data deletion unit for permanently deleting data of the storage device in the removal area;

A storage device destroying unit physically destroying the storage device in the removal area; And

And a management server receiving the serial number acquired by the storage recognizer and receiving the location information of the first GPS chip from the storage receiving unit.

The management server receives a data permanent deletion completion signal from the data deletion unit, and generates a storage device data removal completion report when the storage destruction destruction signal is received from the storage destruction unit.

The storage data removal completion report includes the serial number and location information of the first GPS chip;

The storage device recognition unit

A scanner scanning a serial number of the storage device;

An input / output port locking device detachably connected to the scanner and inserted into an input / output port of the storage device; And

A storage device recognizing unit communicating with the management server;

When the scanner is connected to an input / output port lock device inserted into the input / output port, the scanner becomes a scannable state.

When the scanner scans the serial number of the storage device, the input / output port lock device is separated from the scanner, and the input / output port lock device is in a locked state not separated from the input / output port,

The input / output port locking device randomly generates a first password for releasing the lock state of the input / output port locking device to the storage device communication device, and transmits the generated password to the storage device communication device.

The storage device recognition unit communication device transmits the first password to the management server,

The management server is characterized in that for transmitting the first password to the data deletion unit.
The method of claim 1,

The storage device moving unit is provided with a second GPS chip, and transmits the location information of the second GPS chip to the management server,

The storage data removal complete report includes the location information of the second GPS chip.
The method of claim 1,

An external recording device is installed in the storage device moving unit to record an external situation of the storage device moving unit while the storage device moving unit moves, the storage device moving unit transmits the recorded image to the management server.

The storage device data removal complete report includes a recorded video of the external recording device.
The method of claim 1, wherein the storage device receiving portion

A housing box for receiving the storage device;

A locking device attached to the accommodation box to lock the accommodation box; And

A storage device communication unit communicating with the management server,

The locking device locks the accommodation box, randomly generates a second password for releasing the lock state of the accommodation box, and transmits the password to the storage device communication device.

The storage receiving unit communication device transmits the second password to the management server,

The management server is characterized in that for transmitting the second password to the data deletion unit.
The method of claim 2, wherein the storage device receiving portion

A housing box for receiving the storage device;

A locking device attached to the accommodation box to lock the accommodation box;

A storage receiver communication device in communication with the management server; And

Is arranged inside the receiving box, including a heating wire operated by the storage device receiving unit communication device,

In the locked state of the housing box, if the distance between the first GPS chip and the second GPS chip is more than the reference distance for a reference time is maintained, the management server is connected to the storage device communication device of the hot wire. And a system for transmitting an actuation signal.
The method of claim 1, wherein the storage device receiving portion

A housing box for receiving the storage devices;

A locking device attached to the accommodation box to lock the accommodation box;

A storage device scanner attached to the housing box to scan a serial number of the storage device; And

A storage device communication unit communicating with the management server,

When the storage devices are housed in a receiving box, the storage device scanner scans the serial numbers of the storage devices,

And the lock device operates only when the serial numbers of the storage devices transmitted by the storage recognition unit to the management server and the serial numbers scanned by the storage device scanner match.