METHOD AND APPARATUS FOR MANAGING DATA HAVING ACCESS RESTRICTION INFORMATION

• US 20100023523A1
• Filed: 01/28/2009
• Published: 01/28/2010
• Est. Priority Date: 07/28/2008
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: CHUNG, Boheung, BAIK, Kwangho, KIM, Kiyoung
• Application Number:
  US12/361,132
• Publication Number:
  US 20100023523A1
• Time in Patent Office: Days
• US Class Current: N/A
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

A method and an apparatus for managing data for providing a predetermined piece of information according to access restriction information established with regard to each piece of data are provided. The method includes: establishing the access restriction information with regard to the data when the data is stored; and determining whether an access to the data is permitted by detecting access valid time of the data from the access restriction information. The present invention establishes access valid time with regard to importance data accessed by a user and establishes a user'"'"'s access denial to the importance data having access valid time exceeding the established access valid time so as to reinforce security, thereby preventing the important information from being externally leaked. Also, the present invention establishes a time limit and a cycle of each piece of important information, thereby facilitating the management of important information.

Claims

1. A data managing method of providing a predetermined piece of information according to access restriction information established with regard to each piece of data, the method comprising:

establishing the access restriction information with regard to the data when the data is stored;

determining whether an access to the data is permitted by detecting access valid time of the data from the access restriction information; and

establishing that an access to the data is permitted or restricted according to the determination result.

2. The method of claim 1, wherein the access restriction information comprises at least one of access valid time, information about access permission establishment status and data processing status with regard to the data.

3. The method of claim 1, wherein the access valid time comprises at least one of access permission starting time and an access permission cycle with regard to the data.

4. The method of claim 1, wherein the access valid time comprises at least one of the access permission stating time, access permission ending time, and access permission continuation time with regard to the data.

5. The method of claim 1, wherein it is confirmed whether the data reaches the access valid time, and, when the data reaches the access valid time, it is established that the access to the data is permitted.

6. The method of claim 5, further comprising:

when an additional access restriction instruction is input in a status where the data reaches the access valid time, establishing that the access to the data is restricted.

7. The method of claim 6, further comprising:

when it is established that the access to the data is restricted in the status where the data reaches the access valid time, cancelling the establishment that the access to the data is restricted if an additional access restriction cancellation instruction is input.

8. The method of claim 1, further comprising:

when it is confirmed whether the access valid time of the data expires, and the access valid time of the data expires, establishing that the access to the data is denied.

9. The method of claim 8, further comprising:

when the access valid time of the data expires, confirming whether to keep the data and keeping or discarding the data.

10. A data managing apparatus for providing a predetermined piece of information according to access restriction information established with regard to each piece of data, the apparatus comprising:

a time limit managing unit managing access valid time of the data based on access restriction information established with regard to the data;

a DB managing unit managing an access to the data based on information about the access valid time of the data detected by the time limit managing unit; and

a controller establishing access restriction information with regard to the data, and generating a control instruction to control the operation of the time limit managing unit and the DB managing unit based on the established access restriction information.

11. The apparatus of claim 10, wherein the access valid time comprises at least one of an access permission starting time and an access permission cycle with regard to the data.

12. The apparatus of claim 10, wherein the time limit managing unit detects current time information from an internal or external timer, and compares the detected current time information with the access valid time of the data.

13. The apparatus of claim 10, wherein the DB managing unit establishes access permission with regard to data that reaches the access valid time, and, if the data does not reach the access valid time, establishes an access restriction with regard to the data.

14. The apparatus of claim 10, wherein the DB managing unit establishes an access denial with regard to data having the access valid time expired.

15. The apparatus of claim 14, wherein the DB managing unit confirms whether to keep the data having the access valid time expired, and keeps or discards the data.

16. The apparatus of claim 10, further comprising:

a DB storing the data and access restriction information corresponding to the data.