WO2017119698A1 - Système pour fournir une solution pour une suppression permanente et la destruction de données de dispositif de mémoire - Google Patents

Système pour fournir une solution pour une suppression permanente et la destruction de données de dispositif de mémoire Download PDF

Info

Publication number
WO2017119698A1
WO2017119698A1 PCT/KR2017/000051 KR2017000051W WO2017119698A1 WO 2017119698 A1 WO2017119698 A1 WO 2017119698A1 KR 2017000051 W KR2017000051 W KR 2017000051W WO 2017119698 A1 WO2017119698 A1 WO 2017119698A1
Authority
WO
WIPO (PCT)
Prior art keywords
storage device
storage
unit
management server
data
Prior art date
Application number
PCT/KR2017/000051
Other languages
English (en)
Korean (ko)
Inventor
고영준
Original Assignee
(주)우영테크
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by (주)우영테크 filed Critical (주)우영테크
Publication of WO2017119698A1 publication Critical patent/WO2017119698A1/fr

Links

Images

Classifications

    • G—PHYSICS
    • G01—MEASURING; TESTING
    • G01S—RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES
    • G01S19/00—Satellite radio beacon positioning systems; Determining position, velocity or attitude using signals transmitted by such systems
    • G01S19/01—Satellite radio beacon positioning systems transmitting time-stamped messages, e.g. GPS [Global Positioning System], GLONASS [Global Orbiting Navigation Satellite System] or GALILEO
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/73—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by creating or determining hardware identification, e.g. serial numbers
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/86—Secure or tamper-resistant housings
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/88—Detecting or preventing theft or loss
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers

Definitions

  • the present invention relates to a system for providing a solution for permanently deleting and destroying storage data. More particularly, the present invention relates to a storage system for monitoring a process of collecting and removing storage data through a management server to prevent leakage of data. A device removal system.
  • a storage device such as a hard disk installed in a computer, a notebook, a server, and the like.
  • data in the storage device must be completely removed.
  • a method of physically destroying a hard disk or completely deleting data stored by a strong magnetic field is used.
  • Deletion software may also be used for complete deletion of data.
  • Storage device removal system has the following object.
  • a storage device removal system for obtaining a serial number of the storage device;
  • a storage device accommodating at least one storage device and having a first GPS chip therein;
  • a storage moving unit for moving the storage containing unit to a removal area;
  • a data deletion unit for permanently deleting data of the storage device in the removal area;
  • a storage device destroying unit physically destroying the storage device in the removal area;
  • a management server receiving the serial number acquired by the storage device recognition unit, and receiving the location information of the first GPS chip from the storage device receiving unit, wherein the management server is configured to permanently delete data from the data deletion unit.
  • the storage device destruction complete signal is received from the storage device destruction unit receives a storage data removal completion report
  • the storage device data removal completion report includes the serial number, the location information of the first GPS chip Is disclosed.
  • the storage device moving unit is provided with a second GPS chip, and transmits the location information of the second GPS chip to the management server, the storage device data removal complete report includes the location information of the second GPS chip. Is initiated.
  • the storage device moving unit is provided with an external recording device to record an external situation of the storage device moving unit while the storage device moving unit moves, and the storage device moving unit transmits the recorded image to the management server. It is disclosed that the data removal completion report includes the recorded video of the external recording device.
  • the storage recognition unit scanner for scanning the serial number of the storage device; An input / output port locking device detachably connected to the scanner and inserted into an input / output port of the storage device; And a storage device recognizing unit communication device communicating with the management server, wherein the scanner is in a scanable state when connected to an input / output port locking device inserted into the input / output port, and when the scanner scans a serial number of the storage device. And the input / output port lock device is separated from the scanner, the input / output port lock device is in a locked state that is not separated from the input / output port, and the input / output port lock device is connected to the storage recognition unit communication device.
  • the storage device receiving portion includes a receiving box for receiving the storage device; A locking device attached to the accommodation box to lock the accommodation box; And a storage device communication unit communicating with the management server, wherein the locking device randomly generates a second password for locking the accommodation box and releasing the lock state of the accommodation box. And transmitting the second password to the management server, wherein the management server transmits the second password to the data deletion unit.
  • the storage device receiving portion includes a receiving box for receiving the storage device; A locking device attached to the accommodation box to lock the accommodation box; A storage receiver communication device in communication with the management server; And a heating wire arranged inside the accommodating box and operated by a storage accommodating part communication device, wherein in a locked state of the accommodating box, a distance between the first GPS chip and the second GPS chip is a reference time. If the state is kept longer than the reference distance, the management server is started to transmit the operation signal of the hot wire to the storage receiver communication device.
  • the storage device receiving portion includes a receiving box for receiving the storage devices; A locking device attached to the accommodation box to lock the accommodation box; A storage device scanner attached to the housing box to scan a serial number of the storage device; And a storage receptacle communication device in communication with the management server, wherein the storage receptacle scanner scans the serial numbers of the storage devices when the storage devices are accommodated in the accommodating box. Only when the serial numbers of the storage devices transmitted to the management server and the serial numbers scanned by the storage device scanner are matched, the locking device is started to operate.
  • the GPS chip is installed in the storage receiving unit and the storage moving unit to provide a system capable of accurately monitoring the location of the storage device in real time.
  • An external recording device is installed in the storage device moving unit to provide a system for monitoring the surrounding situation in real time when the storage device is moved.
  • a system is provided in which the storage device receiving part can be opened only after arriving at the removal area.
  • FIG. 1 is a schematic diagram of a storage removal system according to an embodiment of the present invention.
  • Storage device removal system is to permanently remove the data of the storage device, the storage device recognition unit 110, storage device receiving unit 120, storage device moving unit 130, data deletion
  • the unit 210, a storage destroyer 220, and a management server 310 are included.
  • the storage recognizer 110 acquires a serial number of the storage device. Typically the serial number is attached as a barcode to the storage surface.
  • the storage recognizing unit 110 may include a scanner, an input / output port locking device, and a storage recognizing unit communication device.
  • the scanner scans the serial number of the storage device (preferably a security guard visits the customer and scans the serial number with the scanner), and the storage device communication unit connected to the scanner wirelessly or wirelessly communicates with the management server 310. do.
  • the scanner transmits the serial number of the scanned storage device to the storage device recognition unit communication device, and the storage device communication unit communication device transmits the received serial number to the management server 310.
  • the input / output port lock is inserted into the input / output port of the storage device and detachably connected to the scanner.
  • the scanner is set to be in a scannable state when connected to an input / output port lock inserted in the input / output port.
  • the input / output port lock is configured to be separated from the scanner and locked to the input / output port.
  • the locked I / O port locker randomly generates and transmits a first password to the storage recognizer communication device to the storage recognizer communication device to the storage recognizer communication device. Transmits the first password to the management server 310, and the management server 310 transmits the first password to the data deletion unit 210.
  • the I / O port locking device connected to the I / O port in the locked state is released from the data deleting unit 210 and removed from the I / O port.
  • the data deleting unit 210 may be connected to the storage device through the input / output port from which the input / output port lock device is removed, and permanently deletes data with the permanent deletion software.
  • the storage device receiving unit 120 accommodates a storage device, and may accommodate a plurality of storage devices.
  • the storage receiving unit 120 preferably includes a receiving box, a locking device and a storage receiving communication unit, and a first GPS chip is attached to the receiving box.
  • the storage receptacle 120 preferably includes a receiving box, a lock and a storage receptacle communication device.
  • the accommodation box is a security box that houses the storage device.
  • a lock is attached to the housing box to lock the housing box.
  • the storage device communication unit which is attached to the accommodation box and connected to the lock device and wired or wireless, communicates with the management server 310.
  • the lock device locks the receiving box, randomly generates a second password for unlocking the receiving box, and transmits it to the storage receiving communication device, and the storage receiving communication device transmits the second password to the management server 310. To send).
  • the management server 310 transmits the second password to the data deletion unit 210. Accordingly, the lock box is in the locked state until the lock state is released from the data deletion unit 210, and the storage box can be taken out of the accommodation box and connected to the data deletion unit 210.
  • the storage box is preferably attached to the storage device scanner for scanning the serial number of the storage device.
  • the storage device scanner scans the serial numbers of the storage devices, and the storage device serial number and the storage numbers of the storage devices transmitted to the management server 310 by the storage device recognition unit 110 are stored.
  • Device Receptacle The lock will only work if the serial numbers scanned by the scanner match. Therefore, all the storage devices recognized by the storage device recognition unit 110 must be accommodated in the accommodation box so that they can be loaded into the storage device moving unit 130.
  • a plurality of heating wires operated by the storage receiving unit communication device are arranged along the inner wall in the housing box, and the heating wires are used to remotely destroy the storage device housed inside the receiving box. This will be described later.
  • the storage moving unit 130 moves the storage receiving unit 120 to the removal area 200.
  • Storage device moving unit 130 is preferably a van-shaped secure transport vehicle that can be stored storage device 120.
  • the removal area 200 indicates a factory or a research institute where a storage device removal operation is performed, and the data deletion unit 210 and the storage device destruction unit 220 are located in the removal area 200.
  • the term "removal" is defined here as a combination of data destruction and storage destruction.
  • the movement of the storage device moving unit 130 is monitored by the door sensor and the surveillance camera.
  • the storage device moving unit 130 may be provided with a second GPS chip, and transmits the location information of the second GPS chip to the management server 310.
  • the accommodating box In the locked state of the accommodating box, if the distance between the first GPS chip and the second GPS chip remains open for more than the reference distance (eg, more than 1 km) during the reference time (for example, for 5 minutes) In addition, the storage box is determined not to be stored in the storage moving unit 130 but moves to another path (for example, theft), so that the management server 310 is connected to the storage receiving unit communication device to prevent data leakage. Transmit the operation signal of the heating wire. Accordingly, the storage device accommodated in the receiving box is melted and destroyed by the heat of the hot wire. To this end, the accommodating box is preferably configured to include a heat insulating material is blocked the heat conduction to the outside.
  • the accommodating box is preferably configured to include a heat insulating material is blocked the heat conduction to the outside.
  • An external recording device such as a black box may be installed in the storage device moving unit 130, and records an external situation of the storage device moving unit 130 while the storage device moving unit 130 moves. 130 transmits the recorded video to the management server 310.
  • the data deleting unit 210 permanently deletes data of the storage device. Since the data deletion unit 210 deletes the data using known data permanent deletion software (National Intelligence Service permanent deletion program), a detailed deletion algorithm will be omitted.
  • the storage destroyer 220 physically destroys the storage device. It is desirable to destroy the storage device using a crusher.
  • the management server 310 is connected to the storage device recognition unit 110, the storage device receiving unit 120, the storage device moving unit 130, the data deleting unit 210, and the storage device destroying unit 220 through a wireless network. do.
  • the management server 310 receives the serial number acquired by the storage device recognition unit 110, receives the position information of the first GPS chip from the storage device receiving unit 120, and receives the second GPS information from the storage device moving unit 130. GPS chip location information is received.
  • the management server 310 When the management server 310 receives the data permanent deletion completion signal from the data deletion unit 210 and receives the storage destruction completion signal from the storage destruction unit 220, the management server 310 generates a storage device data removal completion report, and generates the generated data.
  • the storage data removal complete report to the customer.
  • the storage data removal completion report may include a serial number, location information of the first GPS chip, location information of the second GPS chip, and / or recorded video of an external recording device, and a data destruction certificate and a removal report by serial number. May be included.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Radar, Positioning & Navigation (AREA)
  • Remote Sensing (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Human Computer Interaction (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Mathematical Physics (AREA)
  • Storage Device Security (AREA)

Abstract

La présente invention concerne un système de suppression de dispositif de stockage, qui surveille tous les processus de la collecte à la suppression d'un dispositif de stockage au moyen d'un serveur de gestion, ce qui permet d'empêcher une fuite de données. Le système de suppression de dispositif de stockage comprend : une unité de reconnaissance de dispositif de stockage ; une unité de réception de dispositif de stockage ; une unité de transport de dispositif de stockage ; une unité de suppression de données ; une unité de destruction de dispositif de stockage ; un serveur de gestion pour recevoir un numéro de série obtenu par l'unité de reconnaissance de dispositif de stockage et pour recevoir des informations d'emplacement d'une première puce GPS provenant de l'unité de réception de dispositif de stockage, le serveur de gestion recevant un signal de fin de suppression de données permanentes de l'unité de suppression de données et générant un rapport de fin de suppression de données de dispositif de stockage lors de la réception d'un signal de fin de destruction de dispositif de stockage de l'unité de destruction de dispositif de stockage, le rapport de fin de suppression de données de dispositif de stockage comprenant le numéro de série et les informations d'emplacement de la première puce GPS.
PCT/KR2017/000051 2016-01-05 2017-01-03 Système pour fournir une solution pour une suppression permanente et la destruction de données de dispositif de mémoire WO2017119698A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
KR10-2016-0001192 2016-01-05
KR1020160001192A KR101661731B1 (ko) 2016-01-05 2016-01-05 저장장치 데이터 영구 삭제 및 파괴 솔루션을 제공하는 시스템

Publications (1)

Publication Number Publication Date
WO2017119698A1 true WO2017119698A1 (fr) 2017-07-13

Family

ID=57079731

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2017/000051 WO2017119698A1 (fr) 2016-01-05 2017-01-03 Système pour fournir une solution pour une suppression permanente et la destruction de données de dispositif de mémoire

Country Status (2)

Country Link
KR (1) KR101661731B1 (fr)
WO (1) WO2017119698A1 (fr)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR102221249B1 (ko) 2018-08-24 2021-03-02 한국과학기술원 데이터 영구 파괴 장치 및 그 방법
KR20210133087A (ko) 2020-04-28 2021-11-05 삼성전자주식회사 데이터의 안전한 폐기 기능을 제공하는 스토리지 장치 및 그 동작방법

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR19990083542A (ko) * 1998-04-28 1999-11-25 가나이 쓰토무 디스크카트리지
JP2010255362A (ja) * 2009-04-28 2010-11-11 Nec Fielding Ltd コンテナの施錠・解錠システム、その方法及びそのプログラム
KR101494095B1 (ko) * 2013-09-11 2015-02-16 한국컴퓨터재생센터주식회사 하드디스크 데이터 삭제 모니터링 시스템 및 방법
KR101540017B1 (ko) * 2014-01-27 2015-07-28 정천섭 데이터를 소거한 저장드라이브 파쇄장치

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR19990083542A (ko) * 1998-04-28 1999-11-25 가나이 쓰토무 디스크카트리지
JP2010255362A (ja) * 2009-04-28 2010-11-11 Nec Fielding Ltd コンテナの施錠・解錠システム、その方法及びそのプログラム
KR101494095B1 (ko) * 2013-09-11 2015-02-16 한국컴퓨터재생센터주식회사 하드디스크 데이터 삭제 모니터링 시스템 및 방법
KR101540017B1 (ko) * 2014-01-27 2015-07-28 정천섭 데이터를 소거한 저장드라이브 파쇄장치

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
"Archive Data Solutions", HARD DRIVE DESTRUCTION SERVICES, 2012, Retrieved from the Internet <URL:https://www.archivedata.com/Data-Center-Services/Hard-Drive-Destruction-Services.pdf> *

Also Published As

Publication number Publication date
KR101661731B1 (ko) 2016-09-30

Similar Documents

Publication Publication Date Title
WO2013069841A1 (fr) Appareil de verrouillage à sécurité renforcée utilisant une image de l&#39;iris
WO2012081857A2 (fr) Système permettant de surveiller l&#39;utilisation abusive d&#39;informations d&#39;images
WO2017119698A1 (fr) Système pour fournir une solution pour une suppression permanente et la destruction de données de dispositif de mémoire
WO2013176526A1 (fr) Télécommande de coffre-fort et système de sécurité utilisant un terminal portable ayant une fonction de communication, télécommande de coffre-fort et procédé de sécurité l&#39;utilisant
WO1999012354A1 (fr) Systeme de surveillance d&#39;evenements
CN101135208A (zh) 进入控制系统和进入控制方法
WO2015037771A1 (fr) Dispositif de scellage électronique de conteneur au moyen d&#39;une communication sans fil de proximité et système et procédé d&#39;actionnement associés
CN104616371A (zh) 门禁视频联动监控方法和系统
CN105913513A (zh) 门锁系统的控制方法及其系统
US20080129501A1 (en) Secure chassis with integrated tamper detection sensor
US10832507B2 (en) Electronic locking system for use with mobile end device
KR102532210B1 (ko) 고정형 @(Crazy A)불법촬영카메라 탐지 배선반 시스템
CN111311863A (zh) 一种基于无人看守的财务室内安全预警方法
CN107980136B (zh) 数据处理装置和用于运行该数据处理装置的方法
KR101080820B1 (ko) 저장장치를 이용한 보안 디지털 도어록
KR20120041571A (ko) 유에스비형 무선식별리더기를 이용한 데이터 모니터링시스템
KR101744571B1 (ko) 스마트 도어록
KR20180136014A (ko) 보안 기능을 갖는 도어로봇 및 이를 이용한 보안 감시방법
JP2005094642A (ja) 監視カメラシステム
JP4703880B2 (ja) 出入管理システム
JP7323121B2 (ja) 重要物収納装置
JP2021510415A (ja) コンテナの密封及び開封をリモートでモニタリングするためのタンパリング防止システム及び方法
JP2020000640A (ja) 荷物管理システム
KR100681754B1 (ko) 이중 인증을 통한 보관함 관리 시스템 및 그 방법
KR20230127426A (ko) 스마트 금고 인증 방법 및 이를 이용한 시스템

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17736071

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 06.11.2018)

122 Ep: pct application non-entry in european phase

Ref document number: 17736071

Country of ref document: EP

Kind code of ref document: A1