KR101046332B1 - IP address allocation system and its method according to security level of internal network - Google Patents

Abstract

Checking the validity of the personal information input from the IP address request device of the device to be connected to the internal network so as to identify the user's identity and assign an IP address according to the user's security level, and utilize the input information to identify the user's identity. And identifying the security level, generating the IP address request signal by integrating the acquired information and the user identity information, encrypting and transmitting the IP address request signal, and receiving the encrypted request signal. Decrypting at the server, authenticating the security level through a database, assigning an IP address using user identity information and security level authentication information, and encrypting the IP address and transmitting it to the IP address requesting device. And the IP address received from the IP address requesting device It provides the IP address allocation method according to the security level of an internal network including a prescribed step.

Network, IP, address, assignment, security level, authentication, request, privacy, password

Description

IP address assignment system and method according to security level of internal network {Assignment System of IP Adress According to Security Level for Internal Network and Assigment Method of The Same}

The present invention relates to an IP address allocation system according to a security level of an internal network, and more particularly, to an IP address for an internal communication device that performs communication based on a TCP / IP protocol through an internal network. The present invention relates to an IP address allocation system according to the security level of an internal network that allows an allocated DCC server to recognize a department and a user and to allocate a specific IP address according to a security level.

In general, a device that constitutes a network is assigned an IP address, and each device such as each computer is provided with a fixed IP or a floating IP address.

Conventionally, a device used to assign an IP address to each device constituting an internal network includes a hub and a router, and the hub and router are configured to automatically assign an IP address to each device constituting a network.

In the prior art configured as described above, it is possible to connect with the same security level and authority through each device constituting the internal network, it is difficult to effectively maintain the security of the entire system.

The object of the present invention was achieved by taking a view of the above, and added a security function to the IP address allocation function of the DHCP server to request the user's IP address to access the network. The ID information is sent to the DCC server, and the DCC server searches the database to identify the user's identity and assigns an IP address according to the user's security level. And to provide a method, for that purpose.

IP address allocation method according to the security level of the internal network proposed by the present invention comprises the steps of checking the validity of the personal information input from the IP address request device of the device to access the internal network, by using the input information and the user identity and Identifying the security level, integrating the acquired information and user identity information, generating an IP address request signal, encrypting and transmitting an IP address request signal, and receiving the encrypted request signal Decrypting a password, authenticating a security level through a database, allocating an IP address using user identity information and security level authentication information, and encrypting an IP address and transmitting the IP address to the IP address requesting device. Step, the IP address received from the IP address request device And it comprises the step of setting.

The step of authenticating the security level may include receiving personal information from the decrypted and decrypted information in the DCC server, querying the personal information into a database, receiving a query result from the database, and For example, the method may include checking a security level based on a result of the database transmission, and selecting an IP address corresponding to the security level.

The IP address allocation system according to the security level of the internal network of the present invention includes an IP address request device used for equipment to access the internal network, and a DCC for allocating IP addresses for each security level according to the request of the IP address request device. Configure including the server.

The IP address request device integrates a module for checking personal information input by a user who wants to access an internal network, a module for checking a physical address of a device that wants to access an internal network, and a personal information and a physical address input by the user. It includes a module for requesting an IP address, and an encryption module for encrypting and transmitting information requesting an IP address.

The DCC server includes an encryption module for interpreting data transmitted by the IP address request device, an authentication module for checking a security level (personal information) of an individual attempting to access an internal network, and a physical address received together. It includes a module for checking, and a module for assigning an IP address after completing the authentication.

The DC server may further include a history management module for recording a process of allocating an IP address and leaving a surveillance record.

According to the IP address assignment system and the method according to the security level of the internal network according to the present invention, IP addresses having different security levels are allocated intentionally or inadvertently according to identity information of a user who wants to access the internal network. You can proactively block the possibility of unauthorized people gaining access to sensitive information.

Next, a preferred embodiment of the IP address allocation system and its method according to the security level of the internal network according to the present invention will be described in detail with reference to the drawings.

First, an embodiment of the IP address allocation system according to the security level of the internal network according to the present invention is an IP address request device 100 for requesting an IP address to access an internal network, as shown in FIG. In accordance with the request of the address request device 100 is made of a DC server for providing the IP address for each security level.

The DC server 200 is connected to the database 300.

The IP address request device 100 includes a module 110 for checking personal information input by a user who wants to access an internal network, a module 120 that checks a physical address of a device for accessing an internal network, and a user input. It comprises a module 130 for requesting an IP address by integrating one personal information and a physical address, and an encryption module 140 for encrypting and transmitting the information for requesting an IP address.

The module 110 for confirming the personal information serves to determine what security level IP address to request to the DC server 200 by checking the user ID and password to access the internal network.

2 shows a structure of a data table for confirming personal information used in the module 110 for confirming personal information.

For example, in the module 110 for confirming personal information, personal information such as a unique number of a device to access an internal network, an ID, a password, a security level, a name, a department, a position, a contact number, etc. of a user attempting to access the internal network. It manages its own storage.

In addition, when the personal information is changed, the module 110 for confirming the personal information stores the changed information and transmits the latest information to the DC server 200 to notify that the information has been changed.

It is also possible to use a data table having the same or similar structure as the data table used in the module 110 for identifying the personal information in the database 300 connected to the DC server 200.

The module 130 for requesting an IP address generates data for requesting an IP address by integrating a user's personal information and a physical address of a device.

In the embodiment of the present invention, each device (computer, etc.) has a user list that can access the internal network through the corresponding device, each user may have a plurality of IDs and passwords with different security levels, It is also possible to configure the security level by using the ID and password entered.

As illustrated in FIG. 1, the DC server 200 includes a cryptographic module 210 for interpreting data transmitted by the IP address requesting apparatus 100, and a security level of an individual attempting to access an internal network. It comprises an authentication module 220 for confirming (personal information), a module 230 for confirming the physical address received together, and a module 240 for assigning the IP address after the authentication is completed.

The DC server 200 may further include a history management module 250 to record the process of allocating the IP address to leave a monitoring record.

Next, a process of allocating an IP address in an embodiment of the IP address allocation system according to the security level of the internal network according to the present invention configured as described above will be described.

One embodiment of the IP address allocation method according to the security level of the internal network according to the present invention, as shown in Figure 3, confirms the validity of the personal information input from the IP address request device 100 of the device to be connected to the internal network (S20), identifying the user identity and the security level using the input information (S20), integrating the acquired information and the user identity information, and generating an IP address request signal (S30); Encrypting and transmitting an IP address request signal (S40), decrypting a password in the DCC server 200 receiving the encrypted request signal (S50), and authenticating a security level through the database 300 Step S60, the step of assigning the IP address using the user identity information and the security level authentication information (S70), and encrypts the IP address to the IP address request device 100 Comprises the step (S80), a step (S90) of the IP address requires the IP address received from the analysis device, blue 100, and set to transmit.

In the step of confirming the validity of the personal information (S10) proceeds to step (S20) of identifying the user identity and security level only if the user's logon information (ID and password, etc.) is valid.

Identifying the user identity and security level (S20) is performed by using the information input from the module 110 for confirming the personal information of the IP address request apparatus 100.

The generating of the IP address request signal (S20) may be performed by integrating the information obtained in the module 120 for identifying the physical address and the user identity information checked in the module 110 for verifying the personal information. The requesting module 130 may generate a signal for requesting an IP address.

Encrypting and transmitting the IP address request signal (S30) encrypts the signal for requesting the IP address in the encryption module 140 of the IP address request apparatus 100 to transmit to the DC server 200 Is done.

The decrypting step (S50) performs a function of receiving and decrypting an IP address request signal encrypted and transmitted by the encryption module 210 of the DC server 200.

The step (S60) of authenticating the security level is performed by the authentication module 220 of the DC server 200.

As shown in FIG. 4, the step of authenticating the security level includes receiving personal information from the decrypted information by decrypting the password at the DCC server 200 (S61), and storing the personal information in a database. Querying (S62), receiving the query result from the database 300 (S63), checking the security level based on the transmission result of the database 300 (S64), and security In step S65, the IP address corresponding to the level is selected.

If it is confirmed in the step (S64) of checking the security level that the security level is not valid information that does not exist, it is possible to maintain security by implementing all procedures and not assigning an IP address. Alternatively, if the personal information is not included in the security level list or needs to be changed, it may be implemented to assign an IP address having the lowest security level.

In step S64 of checking the security level, it is determined as valid information only when a security level exists, and the process proceeds to step S70 of selecting and assigning an IP address according to the security level (S70).

The authentication module 220 authenticates the security level through data tables such as personal information and security level stored in the database 300.

In the step of assigning the IP address (S70), the IP address in the IP address assignment module 240 using the information received from the module 230 for identifying the physical address and the security level authentication information of the authentication module 220. Allocate

In step S80 of transmitting the allocated IP address to the IP address requesting apparatus 100, the IP address is encrypted and transmitted through the encryption module 210.

When the IP address allocated from the DC server 200 is transmitted to the IP address requesting device 100 through the above process, the IP received from the encryption module 140 of the IP address requesting device 100. Decoding and setting the address (S90) is performed.

In case of assigning a corresponding IP address by checking the security level or assigning an IP address of the lowest security level because it cannot confirm the security level, the history management module displays the device, the user ID, the assigned IP address, etc., which requested the IP address. It is also possible to further include the process of recording at 250 and leaving a surveillance record.

In the step of authenticating the security level according to the personal information (S60) to authenticate the security level assigned to each of a plurality of IDs and passwords assigned to a user, and to configure the IP address according to the security level based on this It is possible.

In the above description of the preferred embodiment of the IP address allocation system and method according to the security level of the internal network according to the present invention, the present invention is not limited thereto, but the claims and the detailed description of the invention and the accompanying drawings Various modifications can be made within the scope, and this also belongs to the scope of the present invention.

1 is a block diagram schematically showing an embodiment of an IP address allocation system according to a security level of an internal network according to the present invention.

2 is a block diagram illustrating a data table used in a module for checking personal information in an embodiment of an IP address allocation system according to a security level of an internal network according to the present invention.

3 is a flowchart illustrating an embodiment of an IP address allocation method according to a security level of an internal network according to the present invention.

Figure 4 is a flow chart illustrating the step of authenticating the security level in an embodiment of the IP address allocation method according to the security level of the internal network according to the present invention.

Claims (8)

delete delete delete IP address request device used for the equipment to access the internal network, the IP address for each security level according to the request of the IP address request device includes a DC server connected to the database, The IP address request device integrates a module for checking personal information input by a user who wants to access an internal network, a module for checking a physical address of a device that wants to access an internal network, and a personal information and a physical address input by the user. A module for requesting an IP address and an encryption module for encrypting and transmitting information requesting an IP address, The DC server is an encryption module for interpreting the data transmitted by the IP address request device encrypted, an authentication module for checking the security level from the personal information attempting to access the internal network, and confirms the physical address received with A module, a module for allocating an IP address after completing the authentication, and the DCC server includes a history management module for recording a process of allocating an IP address to leave a surveillance record, In the module for checking personal information, a personal table consisting of a unique number of a device to access an internal network, a user ID, a password, a security level, a name, a department, a position, and a contact is stored as a data table. IP address allocation system according to the security level of the internal network. delete The method according to claim 4, In the module for checking the personal information of the IP address requesting device, an internal network that checks the ID and password of a user who wants to access the internal network to determine what security level IP address to request to the DCC server. IP address allocation system according to security level delete The method according to claim 4, The module for checking the personal information, if the personal information is changed IP address allocation system according to the security level of the internal network to store the changed information, and to send the latest information to the DCC server to inform that the information has changed.

Images