PERSONAL INFORMATION PROTECTION SYSTEM FOR PROVIDING SPECIALIZED FUNCTION FOR HOST TERMINAL BASED ON UNIX AND LINUX

• US 20140157426A1
• Filed: 01/04/2013
• Published: 06/05/2014
• Est. Priority Date: 11/30/2012
• Status: Active Grant

• Current Assignee: Somansa Co., Ltd.
• Original Assignee: Somansa Co., Ltd.
• Inventors: PAEK, Seung Tae, KIM, Tae Wan, CHOI, Il Hoon
• Granted Patent: US 8,949,984 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

Provided are an information protection apparatus and system. The information protection apparatus based on Windows, Unix, or Linux includes a first check unit, a second check unit, and a security measure unit. The first check unit checks whether there is a file including monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy. The second check unit checks whether there is a file including the monitoring information among the check target files in a sharing storage area of a file system that is shared in a network drive type in an NFS scheme. The security measure unit performs a security measure conforming to a predetermined security policy for the file including the monitoring information.

Claims

1. An information protection apparatus based on Windows, Unix, or Linux, comprising:

a first check unit checking whether there is a file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy;

a second check unit checking whether there is a file comprising the monitoring information among the check target files in a sharing storage area of a file system that is shared in a network drive type in a Network File System (NFS) scheme; and

a security measure unit performing a security measure conforming to a predetermined security policy for the file comprising the monitoring information.

2. The information protection apparatus of claim 1, wherein,

in a first check, the first and second check units generate index data comprising the security measure and file attribute information on the check target files, encrypt the index data, and store the encrypted index data in the local storage area, and

in subsequent checks, the first and second check units check whether there is a file comprising the monitoring information among files having different file attribute information in the check target files using the index data that is decrypted.

3. The information protection apparatus of claim 1, wherein the first and second check units transmit a check result, comprising at least one of a name of a file comprising the monitoring information, a file size, a file format, a check time, detected contents of the monitoring information, and the number of detections of each monitoring information, to a management server.

4. The information protection apparatus of claim 1, wherein the check target files comprise at least one of a file, generated in a Windows-based office application program which of the file extension is at least one of *.hwp, *.doc, *.docx, *.ppt, *.pptx, *.xls, *.xlsx, *.pdf, and *.gul, and a file from which a text stream is extractable.

5. The information protection apparatus of claim 1, wherein the first and second check units division-check the check target files with respect to the number of files conforming to the check policy.

6. The information protection apparatus of claim 1, wherein the first and second check units perform an effectiveness check that checks whether an extension type of the check target file is matched with extension information based on signature information extracted from a header of the check target file, and check whether the monitoring information is comprised in the check target file which of the effectiveness has been verified as the effectiveness check result.

7. The information protection apparatus of claim 1, wherein when the check target file is compressed in a Windows-based compression format or a Unix or Linux-based compression format, the first and second check units check whether the monitoring information is comprised in a decompressed original file.

8. An information protection apparatus based on Unix or Linux, comprising:

a check unit checking whether there is a file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy; and

a security measure unit performing a security measure conforming to a predetermined security policy for the file comprising the monitoring information.

9. The information protection apparatus of claim 8, wherein,

in a first check, the check unit generates index data comprising the security measure and file attribute information on the check target files, encrypts the index data, and stores the encrypted index data in the local storage area, and

in subsequent checks, the check units check whether there is a file comprising the monitoring information among files having different file attribute information in the check target files using the index data that is decrypted.

10. The information protection apparatus of claim 8, wherein the check target files comprise at least one of a file, generated in a Windows-based office application program which of the file extension is at least one of *.hwp, *.doc, *.docx, *.ppt, *.pptx, *.xls, *.xlsx, *.pdf, and *.gul, and a file from which a text stream is extractable.

11. An information protection system, comprising:

an agent checking whether there is a file comprising monitoring information among a plurality of monitoring target files in at least one of a local disk and a network storage, and performing a protection measure conforming to a predetermined security policy for the file comprising the monitoring information, the agent being comprised in a terminal based on Linux, Unix, or Windows; and

a management server checking whether a table comprising monitoring information is stored in a commercial database, and providing the security policy to the agent.

12. The information protection system of claim 11, wherein,

the agent is connected to the network storage in a network drive type by a Network File System (NFS), and checks whether a file comprising the monitoring information is stored in the network storage, and

when a file generated in a Windows-based application program is stored in the network storage, the agent checks whether the file comprising the monitoring information is stored in the network storage using a Windows-based resource.

13. The information protection system of claim 11, wherein,

the agent performs the protection measure, and transmits a check result, comprising at least one of a name of a file comprising the monitoring information, a file size, a file format, and a check time, to a management server, and

the management server calculates a check time for each file size based on an operating system using the check result.

14. The information protection system of claim 11, wherein when it is requested to check an estimated use time for all checks, the management server requests information to the agent to receive the information on the monitoring target file, checks the number of monitoring target files by file size, and calculates the estimated use time by multiplying a check time by file size, corresponding to an operating system of a terminal with the agent installed therein, to the number of monitoring target files by file size.

15. The information protection system of claim 14, wherein,

the management server displays a table comprising a file name and a file size, which are comprised in the information of the monitoring target file, and the estimated use time, and

the table provides an interface for determining a file to be excluded from a check by the agent among the monitoring target files and designating a check order.