KR102744985B1 - Method for controlling external access to security information using dual control - Google Patents

Abstract

A method for controlling external access to security information using dual control is disclosed. According to one aspect of the present invention, a method for controlling external access to security information using dual control performed in a computing device includes the steps of: providing a security interface that allows an internal access user to set a file or program containing security information as security data by dual control when external control for maintenance is performed; monitoring external access to security data when external control is performed; and blocking an attempted external access to security data.

Description

{Method for controlling external access to security information using dual control}

The present invention relates to a method for controlling external access to security information using dual control.

We provide security solutions for a wide range of corporate applications for security on the Internet, and our security solutions are used in a wide variety of fields, including web security, e-mail security, remote access, electronic documents, and e-commerce applications.

In particular, as computer and communication technology develops, the use of computers is expanding in various industrial fields as well as in daily life. Accordingly, remote control technology between computers is being developed and widely used as a means to support not only general users who are not familiar with using computers and the Internet, but also industrial workers who handle a significant portion of their work with computers.

Remote control is a method in which a user of a remote control computer operates a controlled computer connected to the Internet through the Internet. During this process, the screen information of the controlled computer is transmitted to the control computer, and the controlled computer is operated as if the user of the control computer were operating it directly, so that the computer itself as well as various output devices and peripheral devices are operated.

At this time, as remote control is in progress, the screen displayed on the monitor of the controlled computer is transmitted to the control computer, and the user of the control computer can check the screen of the controlled computer in real time. However, as the screen of the controlled computer is transmitted to the control computer without any addition or subtraction in this way in remote control between computers, there is a concern that personal information or security information such as trade secrets of the user of the controlled computer, which is displayed on the screen of the control computer, may be leaked.

Republic of Korea registered patent No. 10-1931082

Accordingly, the present invention has been devised to solve the above-described problem, and to provide a method for controlling external access to security information using dual control capable of blocking unprotected exposure of security information during remote control.

Other objects of the present invention will become more apparent through the preferred embodiments described below.

According to one aspect of the present invention, in an external access control method performed in a computing device, when external control for maintenance is performed, a step of providing a security interface that allows an internal access user to set a file or program containing security information as security data by dual control is provided; a step of monitoring external access to the security data when the external control is performed; and a step of blocking an attempted external access to the security data, the method including a program for executing the method and a method for controlling external access to security information using dual control are provided.

Here, a second mouse pointer that is operated only by an internally connected mouse device as the security interface is displayed on the screen, and security data is set only by the second mouse pointer.

In addition, it searches for files or programs containing security information and displays them on the screen, and sets security data according to user selection using the second mouse pointer.

Additionally, it searches for security data targeting the current screen and execution window.

In addition, when external access is requested for the above security data, external access is permitted when permission input is entered using the second mouse pointer.

In addition, when performing external control, the screen is captured and the monitoring video is saved, and when external access to security data is requested, the relevant monitoring video is extracted and displayed on the screen.

Additionally, the playback speed is determined based on the playback time of the monitoring video.

Additionally, the screen area dragged and dropped using the second mouse pointer is hidden as a security area.

In addition, in the security area, benefits corresponding to the time at which the advertisement information is displayed are provided.

Additionally, the above advertising information is selected by the remote control user.

Other aspects, features and advantages other than those described above will become apparent from the following drawings, claims and detailed description of the invention.

According to the present invention, by providing a dual control interface to internal access users, security can be strengthened by controlling unprotected external access to security information.

FIG. 1 is a schematic diagram illustrating the entire system for controlling external access to security information during remote control according to one embodiment of the present invention.
FIG. 2 is a flowchart illustrating an external access control process for security information using dual control performed in a computing device according to one embodiment of the present invention.
FIG. 3 is an exemplary diagram illustrating a security interface providing a dual control mouse point according to one embodiment of the present invention.
FIG. 4 is a flowchart illustrating an external access processing process for security data during remote control according to one embodiment of the present invention.
FIG. 5 is an exemplary diagram illustrating an interface for allowing external access to security data according to one embodiment of the present invention.
FIG. 6 is an exemplary diagram illustrating a security area setting interface using a dual control mouse point according to one embodiment of the present invention.

The present invention can have various modifications and various embodiments, and specific embodiments are illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to specific embodiments, but should be understood to include all modifications, equivalents, or substitutes included in the spirit and technical scope of the present invention.

When it is said that a component is "connected" or "connected" to another component, it should be understood that it may be directly connected or connected to that other component, but that there may be other components in between. On the other hand, when it is said that a component is "directly connected" or "directly connected" to another component, it should be understood that there are no other components in between.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are only used to distinguish one component from another. For example, the terms first threshold value, second threshold value, etc., which will be described later, may be pre-designated as threshold values that are substantially different from each other or have some of the same values, but since there is room for confusion when expressed with the same word threshold value, the terms first, second, etc. will be used together for convenience of distinction.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the present invention. The singular expression includes the plural expression unless the context clearly indicates otherwise. As used herein, the terms "comprises" or "has" and the like are intended to specify the presence of a feature, number, step, operation, component, part or combination thereof described in the specification, but should be understood to not exclude in advance the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts or combinations thereof.

In addition, it is to be understood that the components of the embodiments described with reference to each drawing are not limited to the embodiments described herein, and may be implemented to be included in other embodiments within the scope in which the technical spirit of the present invention is maintained, and that multiple embodiments may be reimplemented as one integrated embodiment even if a separate description is omitted.

In addition, when describing with reference to the attached drawings, regardless of the drawing symbols, identical components are given identical or related reference symbols, and redundant descriptions thereof are omitted. When describing the present invention, if it is determined that a detailed description of a related known technology may unnecessarily obscure the gist of the present invention, the detailed description thereof is omitted.

FIG. 1 is a schematic diagram illustrating an entire system for controlling external access to security information during remote control according to one embodiment of the present invention, FIG. 2 is a flowchart illustrating a process for controlling external access to security information using dual control performed in a computing device according to one embodiment of the present invention, and FIG. 3 is an exemplary diagram illustrating a security interface that provides a dual control mouse point according to one embodiment of the present invention.

Referring to FIG. 1, the entire system includes a target computer (10) and a remote control computer (30), and a security agent (12) for controlling access to security information from the remote control computer (30) is installed in the form of an application program on the target computer (10).

Access by remote control users must be controlled for files or programs containing security information (hereinafter referred to as “security data”) that is accessible only to authorized users, such as personal information or confidential information.

The remote control computer (30) connects to the target computer (10) through a communication network such as the Internet and controls it remotely. In other words, a user other than the internal access user of the target computer (10) uses the target computer (10) remotely. In general, a remote control program periodically captures the screen of the target computer (10) and transmits it to the remote control computer (30), and the remote control computer (30) controls the target computer (10) by remotely manipulating the mouse pointer or inputting through the keyboard while viewing the received screen. Of course, this is just one example, and any method for remote control may be used.

However, the security agent (12) installed on the target computer (10) controls (blocks or allows use with the permission of the user of the target computer (10)) the remote control computer (30) from accessing the security data.

Referring to Figure 2, which illustrates an external access control process performed on a target computer (10), when external control is performed for purposes such as maintenance, a security interface capable of dual control is provided (S210).

Referring to FIG. 3 as an example of a security interface, in addition to a mouse pointer (310) controlled by a remote control computer (30), a second mouse pointer (320, hereinafter referred to as a dual control mouse pointer) controlled only by an internal access user is operated. An internal access user can control the second mouse pointer (320) to set a desired file or program as security data. As shown in the drawing, right-clicking can be used to set or release security data.

According to another example, the security agent (12) may automatically search for a file or program containing security information and set it as security data. That is, the setting of security data may be automatically set by searching for a file or application containing personal information such as a resident registration number or address. According to another example, a file or program containing security information may be searched for, a security data setting interface screen including the searched information may be displayed, and the security data may be set according to a user selection using a second mouse pointer (320). That is, the target computer (10) may provide a user interface screen that allows the user to directly select and set security data based on the searched information determined to be security data, or may provide a user interface screen that allows the user to directly search for and set security data.

And, according to an example, the target computer (10) may determine whether all files or applications are secure data, but for efficient processing, it determines whether only files and applications existing in the current screen and the window being executed are secure data, and this may be performed periodically or whenever a change occurs in the screen or the execution window.

Accordingly, a remote control computer (30) user can perform maintenance on a target computer (10) remotely using the first mouse pointer, and at the same time, an internal access user can block external access by setting a file or application program currently existing on the screen as security data using the second mouse pointer.

And, when security data is set, the security data can be specifically displayed. As shown in the drawing, the security data (security file 1) is processed with a red block on the exterior so that the target computer user (hereinafter referred to as an internal access user) and the remote control computer (30) user (hereinafter referred to as a remote control user) recognize that it is security data.

Referring again to Figure 2, external access according to external control is monitored (S230). For example, the screen is captured and saved periodically, and whether a remote control user attempts to access security data is monitored.

When external access to security data is recognized, control processing such as blocking or inquiries to internal access users is performed (S240).

FIG. 4 is a flowchart illustrating a process for processing external access to security data during remote control according to one embodiment of the present invention, and FIG. 5 is an exemplary diagram illustrating an interface for allowing external access to security data according to one embodiment of the present invention.

Referring to Fig. 4, when external control is performed and access to security data is recognized by the external control (S410), an internal access user is requested for authentication (S420). Referring to Fig. 5, when external access is requested for security file 1, which is security data (e.g., mouse click by external control for security file 1), an authentication window (530) that the internal access user can confirm is displayed.

The authentication window restricts input to only be possible by a second mouse pointer operated by internal access users.

At this time, according to an example, a monitoring video (440) for external access is displayed on one side of the authentication window (530). That is, the stored monitoring video is provided as a video so that the internal access user can immediately check what kind of history the external access user has when attempting to access the security data. Here, for quick confirmation, only the monitoring video for a certain period of time (e.g., 20 seconds or 1/3 of the total volume, etc.) prior to the external access request for the security data is extracted and displayed, and the playback speed is varied according to the playback time of the video (e.g., the longer the playback time, the faster the playback speed).

Authentication is processed (S430) by determining whether access permission using the second mouse pointer is entered through the authentication window (530).

If authentication is successful, external access to the security data is permitted (S440), and if authentication fails, access is denied (S450, for example, an access denied message is displayed on the screen).

In addition, although not shown in the drawing, a dialogue window between internal access users and external access users is displayed on one side of the screen as a security interface, allowing a dialogue between the two to inquire about access to secure data.

FIG. 6 is an exemplary diagram illustrating a security area setting interface using a dual control mouse point according to one embodiment of the present invention.

Referring to FIG. 6, the security agent provides a function to hide the screen area that has been dragged and dropped using the second mouse pointer as a security area (610).

Therefore, internal users can hide some parts of the screen from remote control users by simply dragging and dropping.

And, according to an example, advertisement information is displayed in the security area (610), and benefits corresponding to the time at which the advertisement information is displayed are provided to internal access users or remote control users. For example, part or all of the maintenance cost due to remote control being performed for maintenance of the target computer (10) is applied to the advertisement revenue due to advertisement information being displayed in the security area. Therefore, internal access users can save on maintenance costs.

In addition, according to an example, advertising information can be selected by a remote control user, thereby allowing the remote control user to display the advertisement of his/her choice to internally connected users.

A computer program stored in a computer-readable medium can be provided that performs a method for controlling external access to security information using dual control according to the present invention described above.

In addition, the method for controlling external access to security information using the above-described dual control can be implemented as a computer-readable code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording media that store data that can be deciphered by a computer system. For example, there may be a ROM (Read Only Memory), a RAM (Random Access Memory), a magnetic tape, a magnetic disk, a flash memory, an optical data storage device, etc. In addition, the computer-readable recording medium can be distributed to computer systems connected to a computer communications network, and stored and executed as a code that can be read in a distributed manner.

In addition, although the above has been described with reference to preferred embodiments of the present invention, it will be understood by those skilled in the art that various modifications and changes can be made to the present invention without departing from the spirit and scope of the present invention as set forth in the claims below.

10: Target computer
30 : Remote Control Computer

Claims (11)

In a method for controlling external access performed on a computing device,
When external control for maintenance is performed, a step for providing a security interface that allows internal access users to set up security data through dual control for files or programs containing security information;
A step of monitoring external access to the security data when the above external control is performed; and
Including a step of blocking external access to the above security data,
A method for controlling external access to security information using dual control, in which a second mouse pointer that is operated only by an internally connected mouse device as the above security interface is displayed on the screen, and security data is set only by the second mouse pointer.
delete In claim 1,
A method for controlling external access to security information using dual control, which searches for a file or program containing security information and displays it on the screen, and sets security data according to a user's selection using the second mouse pointer.
In claim 3,
A method for controlling external access to security information using dual control, which searches for security data targeting the current screen and execution window.
In claim 4,
A method for controlling external access to security information using dual control, which allows external access when external access is requested for the above security data and a permission input is entered using the second mouse pointer.
In claim 5,
A method for controlling external access to security information using dual control, which captures the screen when performing external control, saves the monitoring image, and extracts the relevant monitoring image and displays it on the screen when external access to security data is requested.
In claim 6,
A method for controlling external access to security information using dual control, which determines the playback speed according to the playback time of the monitoring video.
In claim 1,
A method for controlling external access to security information using dual control, in which the screen area dragged and dropped using the second mouse pointer is hidden as a security area.
In claim 8,
Advertising information is displayed in the above security area,
A method for controlling external access to security information using dual control, in which benefits corresponding to the time at which the above advertising information is displayed are provided to internal access users.
In claim 9,
The above advertising information is a method for controlling external access to security information, selected by a user performing the above external control.
A computer program stored in a computer-readable medium that performs a method of controlling external access to security information using dual control, wherein the computer program causes a computer to perform the following steps, wherein the steps are:
When external control for maintenance is performed, a step for providing a security interface that allows internal access users to set up security data through dual control for files or programs containing security information;
A step of monitoring external access to the security data when the above external control is performed; and
Including a step of blocking external access to the above security data,
A computer program stored in a computer-readable medium, which displays a second mouse pointer that is operated only by an internally connected mouse device as the above security interface, and sets security data only by the second mouse pointer.