Abstract:
Disclosed is a data security system using a USB device for maintaining security for files made while various kinds of application programs are used. The data security system comprises: a local computer having the various kinds of application programs installed therein and performing various works by executing the installed various kinds of application programs; and a USB device connected to the local computer via a USB communicating means, wherein, when the USB device is connected to the local computer, a security program is automatically installed from the USB device into the local computer, and the automatically-installed security program performs a security service for works in the local computer.

Description:
BACKGROUND OF THE INVENTION 
       [0001]    1. Field of the Invention 
         [0002]    The present invention relates to a data security system, apparatus and method, and more particularly, to a data security system, apparatus and method using a USB device, which is capable of providing data security by processing data based on authentication of the USB device. 
         [0003]    2. Description of the Related Art 
         [0004]    Internet has had a tremendous effect on our life, and with rapid development of information and telecommunication technology, many efforts have been made to provide various kinds of useful information for us at higher speed and with greater precision. The Internet, being a reservoir of information, has an enormous number of cyber spaces, being called “web site,” in which numerous kinds of materials are contained. Spread of information through the Internet has been accelerated with development of various kinds of communication networks. 
         [0005]    However, although the fast-growing Internet allows us to acquire a large amount of information with ease, it is always vulnerable to hackers&#39; attack. 
         [0006]    At present, various kinds of hacking techniques have spread all over the world, and security techniques against such hacking techniques have been devised. Whenever the hacking techniques defeat the security techniques, accompanying damages to Internet users have spread. 
         [0007]    In addition, when confidential documents of companies are leaked out of the companies due to carelessness of users or by ill-intentioned users, the companies may be confronted with a crisis. Such leakage of information not only deals a serious blow to the companies, but also weakens their competitive power. Thus, some companies tighten security by strictly controlling the flow of storage media in and out of the companies, which costs them a substantial amount of money. 
         [0008]      FIG. 1  is a view showing an information leakage path in a general network. Referring to  FIG. 1 , important company information made in a company may be leaked out via various paths. 
         [0009]    For example, data made in a local computer  100  in the company may be leaked out by a hacker who accesses  110  the local computer  100  through a network. Also, the data may be leaked out through a web site  120  of a cooperating company connected to the company via Internet. Furthermore, an employee of the company may leak out information and documents directly or by illegally using a name of a document manager. 
         [0010]    While the hacking technique is being developed day by day, information and system protection techniques using password authentication have a limitation on their verification and spread. 
         [0011]    Accordingly, there is a keen need for an effective method to maintain information security through authentication for works in networked local computers. 
       SUMMARY OF THE INVENTION 
       [0012]    Accordingly, it is an object of the present invention to provide a data security system, apparatus and method using a USB device, which is capable of maintaining document security by connecting a USB device to a local computer, automatically installing an automatic installation program stored in the USB device in the local computer, and coding and storing documents made by a user according to the automatically installed program. 
         [0013]    It is another object of the present invention to provide a data security system, apparatus and method using a USB device, which is capable of maintaining document security by connecting a USB device to a local computer, automatically installing an automatic installation program stored in the USB device in the local computer, and capturing and storing a work screen on which a user works with a document according to the automatically installed program. 
         [0014]    It is still another object of the present invention to provide a data security system, apparatus and method using a USB device, which is capable of maintaining document security by connecting a USB device to a local computer, automatically installing an automatic installation program stored in the USB device in the local computer, capturing a work screen on which a user works with a document, and transmitting the captured work screen to a server according to the automatically installed program. 
         [0015]    It is still another object of the present invention to provide a data security system, apparatus and method using a USB device, which is capable of maintaining document security by connecting a USB device to a local computer, automatically installing an automatic installation program stored in the USB device in the local computer, and transmitting use history of the local computer to a server when a user works with a document according to the automatically installed program. 
         [0016]    It is still another object of the present invention to provide a data security system, apparatus and method using a USB device, which is capable of maintaining document security by connecting a USB device to a local computer, automatically installing an automatic installation program stored in the USB device in the local computer, and controlling output of a monitor connected to the local computer when a user works with a document according to the automatically installed program. 
         [0017]    It is still another object of the present invention to provide a data security system, apparatus and method using a USB device connected to a local computer and including a fingerprint recognition means, which is capable of performing an authentication function through the fingerprint recognition means. 
         [0018]    It is still another object of the present invention to provide a data security system, apparatus and method using a USB device connected to a local computer and including an RF module, which is capable of using the USB device to allow a user to come in and go out a building. 
         [0019]    To achieve the above objects, according to an aspect, the present invention provides a data security system using a USB device for maintaining security for files made while various kinds of application programs are used, comprising: a local computer having the various kinds of application programs installed therein and performing various works by executing the installed various kinds of application programs; and a USB device connected to the local computer via a USB communicating means, wherein, when the USB device is connected to the local computer, a security program is automatically installed from the USB device into the local computer, and the automatically-installed security program performs a security service for works in the local computer. 
         [0020]    Preferably, the data security system further comprises a management server for receiving work-related information via a network after completion of authentication through the security program installed from the USB device. 
         [0021]    Preferably, the data security system further comprises a remote computer remotely connected to the local computer via a network, the remote computer monitoring a work situation of the local computer and controlling the local computer remotely. 
         [0022]    Preferably, the security program automatically installed in the local computer requests the USB device to provide authentication information to the local computer and authenticates the works in the local computer when the local computer receives the authentication information from the USB device. 
         [0023]    Preferably, the authentication information comprises user fingerprint information input through a fingerprint authentication means included in the USB device. 
         [0024]    Preferably, if the authentication through the USB device is not normally performed, an output signal of a monitor is interrupted by the security program automatically installed in the local computer. 
         [0025]    Preferably, the security program automatically installed in the local computer codes and stores the files made in the process of work through the various kinds of application programs executed in the local computer. 
         [0026]    Preferably, the security program automatically installed in the local computer decodes the files coded and stored in the local computer in order to allow a user to read the files. 
         [0027]    Preferably, the security program automatically installed in the local computer generates work history information in the process of work through the various kinds of application programs executed in the local computer and transmits the generated work history information to a management server connected to a network. 
         [0028]    Preferably, the USB device includes an RF module to perform authentication through RF communication, the RF module being used for an admission ticket of a building. 
         [0029]    According to another aspect, the present invention provides a data security apparatus for maintaining security for files made while an application program installed in a local computer is used, comprising: a first storing part that stores an automatic execution program to be automatically installed in the local computer when the data security apparatus is connected to the local computer; a port that provides a connecting point between the data security apparatus and the local computer; a USB hub that includes a switching function for communication connection control for controlling connection between the data security apparatus and the local computer; a virtual CD-ROM driver that controls the data security device to be recognized as a virtual CD-ROM device when the data security device is connected to the local computer; and a first controller that is connected to the local computer through the USB hub and drives the virtual CD-ROM driver to control the local computer to recognize the data security apparatus as the virtual CD-ROM device. 
         [0030]    Preferably, the data security apparatus further comprises a second storing part that stores an image captured and compressed when work is performed in the local computer. 
         [0031]    Preferably, the first storing part and the second storing part are used as two regions into which one memory is divided. 
         [0032]    Preferably, the automatic execution program automatically installed in the local computer requests the data security apparatus to provide authentication information to the local computer and authenticates work in the local computer when the local computer receives the authentication information from the data security apparatus. 
         [0033]    Preferably, the data security apparatus further comprises a fingerprint authentication means that receives fingerprint information from a user and transmits the received fingerprint information to the local computer for user authentication. 
         [0034]    Preferably, the data security apparatus further comprises an RF module to perform authentication through RF communication, the RF model being used for an admission ticket of a building. 
         [0035]    According to still another aspect, the present invention provides a data security method for maintaining security for files made while an application program installed in a local computer is used, comprising the steps of: connecting a USB device to the local computer and receiving at the local computer an automatic execution program from the USB device; automatically installing and executing the received automatic execution program in the local computer; requesting a user to input user fingerprint information and authenticating the user based on the input user fingerprint information; after completion of the authentication, executing the application program installed in the local computer and performing a work in the local computer; and coding and storing the files made in the work according to the automatic execution program automatically installed in the local computer. 
         [0036]    Preferably, the data security method further comprises the steps of: capturing a work screen in the process of work according to the automatic execution program; and compressing and storing the captured work screen. 
         [0037]    Preferably, the data security method further comprises the step of: after the step of storing the captured work screen, transmitting the compressed and stored work screen to a management server connected to the local computer via a network. 
         [0038]    Preferably, the data security method further comprises the step of: after the step of storing the captured work screen, transmitting the compressed and stored work screen to the USB device connected to the local computer through USB communication means. 
         [0039]    Preferably, the data security method further comprises the steps of: generating and storing work history information in the process of work according to the automatic execution program; and transmitting the generated and stored work history information to a management server connected to the local computer via a network. 
         [0040]    Preferably, the automatic execution program automatically installed in the local computer decodes the files coded and stored in the local computer in order to allow the user to read the files. 
         [0041]    Preferably, if the authentication through the USB device is not normally performed, an output signal of a monitor is interrupted by the automatic execution program automatically installed in the local computer. 
         [0042]    The present invention suggests a method of maintaining security of work files (for example, document files) when a user executes an application program in a local computer connected to a network to perform a work. To this end, the present invention provides various additional functions as well as security of the work files using a USB (Universal Serial Bus) device. 
         [0043]    Specifically, when the USB device is connected to the local computer, an automatic installation program stored in the USB device is automatically installed in the local computer to provide the security and the various additional functions to the local computer. 
         [0044]    The automatic installation program includes a program for coding and decoding files contained in a Window kernel. This program allows files made in the local computer to be automatically coded and stored in the Window kernel and allows the stored files to be decoded when a user tries to open and see the stored files. 
         [0045]    In addition, the automatic installation program includes a program for capturing and storing a work screen of the local computer. This program monitors an operation of an application program executed in the local computer and captures and stores the work screen of the local computer so that a work history of a user can be checked. The captured and stored work screen may be transmitted to a server connected to a network so that a manager can monitor works of the user. 
         [0046]    In addition, the automatic installation program includes a program for transmitting a use history of a user in the local computer to a server connected to a network. Thus, this program allows a manager who operates the server to monitor the use history of the user. 
         [0047]    In addition, the automatic installation program includes a program for controlling output of a monitor connected to the local computer depending on whether or not the USB device authenticates a user. This program may prevent an unauthorized person from using the local computer by restricting output of the monitor connected to the local computer depending on the authentication for the user. 
         [0048]    The above-mentioned various programs automatically installed in the local computer by the USB device may be automatically updated by a management server through a network (for example, Internet). 
         [0049]    In addition, the USB device includes a fingerprint recognition means performing an authentication function, which is capable of preventing an unauthorized person or a person who illegally takes the USB device from accessing the local computer. In addition, the USB device includes an RF module by means of which the USB device may be used to allow a user to come in and go out a building. 
     
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0050]    The above and/or other aspects and advantages of the present invention will become apparent and more readily appreciated from the following description of the embodiments, taken in conjunction with the accompanying drawings of which: 
           [0051]      FIG. 1  is a view showing an information leakage path in a general network; 
           [0052]      FIG. 2  is a view illustrating a data security system using a USB device according to an embodiment of the present invention; 
           [0053]      FIG. 3  is a view illustrating a detailed configuration of a local computer according to an embodiment of the present invention; 
           [0054]      FIG. 4  is a view illustrating a detailed configuration of a USB device according to an embodiment of the present invention; 
           [0055]      FIG. 5  is a plan view of a USB device according to an embodiment of the present invention; 
           [0056]      FIG. 6  is a flow chart illustrating an operation of a data security system using a USB device according to an embodiment of the present invention; and 
           [0057]      FIG. 7  is a view illustrating a data authentication service according to an embodiment of the present invention. 
       
    
    
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
       [0058]    Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the following detailed description of the present invention, concrete description on related functions or constructions will be omitted if it is deemed that the functions and/or constructions may unnecessarily obscure the gist of the present invention. 
         [0059]    First, detailed configuration of a system and a device according to an embodiment of the present invention will be described with reference to  FIGS. 2 to 4 . 
         [0060]      FIG. 2  is a view illustrating a data security system using a USB device according to an embodiment of the present invention. Referring to  FIG. 2 , a data security system using a USB device according to an embodiment of the present invention may comprise a remote computer  200 , a network  210 , a management server  220 , a local computer  230 , a monitor  240  and a USB device  250 . 
         [0061]    Various application programs (for example, a word processor, a graphic tool, a spread sheet are installed in the local computer  200 , and a user executes the application programs installed in the local computer  230  to perform various works. 
         [0062]    The local computer  230  is connected to the monitor  240  by a cable line such as D-sub, and work situation in the local computer  230  is displayed on the monitor  240 . Also, the local computer  230  communicates with the remote computer  200  or the management server  220  via the network  210  by TCP/IP (Transmission Control Protocol/Internet Protocol). 
         [0063]    When the USB device  250  is connected to the local computer  230  by a USB communication means, various programs stored in the USB device  250  are automatically installed in the local computer  230 , and then, the automatically-installed programs perform various data securities when the user performs works using the local computer  230 . 
         [0064]    Specifically, when the user executes an application program to perform a work, files which are being made through the work are coded and stored in a kernel. The coded files can be decoded and readable only when the USB device  250  is connected to the local computer  230  to perform normal authentication. 
         [0065]    In addition, when the user performs the work using the local computer  230 , the programs automatically installed in the local computer  230  monitors operations of the application programs executed in the local computer  230 , and captures and stored a work screen of the local computer  230 . At this time, the captured and stored work screen may be transmitted to the management server  220  via the network  210  so that a manager can watch the work of the user. 
         [0066]    In addition to the work screen, a work history may be stored and transmitted to the management server  220  via the network  210  so that the manager can know a work situation of the user who uses the local computer  230 . 
         [0067]    Specifically, in the management server  220  are stored user authentication information of the local computer  230  for documents and contents, chief use history information of the user who accesses the local computer  230 , capture information of the local computer  230 , fingerprint information of the user, etc. to provide various functions of the present invention. 
         [0068]    In the mean time, the remote computer  200  may access the local computer  230  via the network  210  to check works performed in the local computer  210  or files stored in the local computer  230 . 
         [0069]      FIG. 3  is a view illustrating a detailed configuration of the local computer  230  according to an embodiment of the present invention. Referring to  FIG. 3 , the local computer  230  may comprise a first storing part  310 , a fingerprint authenticating part  320 , a network communicating part  330 , a coding/decoding part  340 , a controller  350 , a file compressing part  360 , a second storing part  370 , a USB driver  380 , a video card  390 , etc. 
         [0070]    When the local computer  230  is connected to the USB device  250  via the USB driver  380 , an automatic execution program stored in the USB device  250  is transmitted to the local computer  230  via the USB driver  380  and automatically installed in the local computer  230 . Then, the automatically-installed program creates the fingerprint authenticating part  320 , the network communicating part  330 , the coding/decoding part  340 , the file compressing part  360 , etc. 
         [0071]    When fingerprint recognition information is transmitted to the local computer  230  through a fingerprint recognizing part of the USB device  250 , the fingerprint recognition information is provided to the fingerprint authenticating part  320  of the local computer  230  through the controller  350  and the fingerprint authenticating part  320  performs authentication for a user based on the fingerprint recognition information. 
         [0072]    After completion of the authentication, when an application program  311  stored in the first storing part  310  is executed, the controller  350  codes files made in the execution of the application program through the coding/decoding part  340  and stores the coded files in the second storing part  370 . 
         [0073]    In addition, the controller  350  monitors operation of the application program  311 , captures an image output to the monitor  240  through the video card  390 , and stores the captured image in the second storing part  370 . In this case, the captured image is compressed by the file compressing part  360  and then stored in the second storing part  370 . The compressed image may be transmitted to the management server  220  through the network communicating part  330  and the network  210 . In addition, the controller  350  monitors a use history of the user in the local compute  230  and transmits the use history to the management server  220  through the network communicating part  330  and the network  210 . 
         [0074]    The remote computer  200  controls the local computer  230  remotely through network  210  and the network communicating part  330  or monitors a work situation of the user who uses the local computer  230 . 
         [0075]      FIG. 4  is a view illustrating a detailed configuration of the USB device  250  according to an embodiment of the present invention. Referring to  FIG. 4 , the USB device  250  may comprise a port  410 , a virtual CD-ROM device  420 , a USB hub  430 , an RF module  440 , a fingerprint sensor  450 , a first controller  460 , a second controller  470 , a first storing part  480 , a second storing part  490 , etc. In this embodiment, the USB device  250  may have a form of dongle. 
         [0076]    As shown in  FIG. 4 , the first storing part  480  and the second storing part  490  may be used as two regions into which one memory (for example, a flash memory) is divided. When the USB device  250  is connected to the local computer  230 , an automatic execution software  481  to be automatically installed is stored in the first storing part  480  and an image captured when a user works in the local computer  230  is compressed and stored as an image data  491  in the second storing part  490 . 
         [0077]    The port  410  is provided as a connection point between the USB device  250  and the local computer  230 . The USB hub  430  controls connection between a main connection device (i.e., the local computer  230 ) and a sub connection device (i.e., the USB device  250 ) and has a USB hub function or a switching function for control of communication connection. In other words, the USB hub  430  controls communication between the local computer  230  and the first controller  460  or the second controller  470 . 
         [0078]    First, when the USB device  250  is connected to the local computer  230  via the port  410 , the USB hub  430  connects the local computer  230  to the first controller  460 , drives the virtual CD-ROM driver  420 , and controls the local computer  230  to recognize the USB device  250  as a virtual CD-ROM device. 
         [0079]    At this time, in the USB device  250  recognized as the virtual CD-ROM device, the automatic execution software  481  stored in the first storing part  480  is automatically executed and installed in the local computer  230 . Various security-related functions of the present invention are performed by the automatic execution software  481  automatically installed in the local computer  230 . 
         [0080]    After the automatic execution software  481  is installed in the local computer  230 , user authentication can be performed through the fingerprint sensor  450  of the USB device  250 . Specifically, the user inputs his/her fingerprint through the fingerprint sensor  450  and information on the input fingerprint is transmitted to the local computer  230  through the second controller  470 , the USB hub  430  and the port  410 . As described with reference to  FIG. 3 , the fingerprint authenticating part  320  of the local computer  230  performs the user authentication based on the transmitted fingerprint information. Alternatively, the fingerprint information may be transmitted to the management server  220  via the network  210  and user authentication may be performed by the management server  220 . 
         [0081]    The automatic execution software  481  automatically executed in the local computer  230  may include an algorithm to code and decode documents contained in a Window kernel and made by the user, a function to capture, compress and store a picture displayed on the local computer  230 , a function to decode and reproduce the stored picture and transmit the stored picture to the management server  220 , a function to transmit a chief use history of the local computer  230  to the management server  220 , a function to switch on/off the monitor  240  depending on whether or not the USB device  250  is connected to the local computer  230 , a function to set the right to communicate with the management server  220 , etc. 
         [0082]    The RF module  440  performs an RF communication function to allow the user to come in and go out a building when the USB device  250  is used for an admission ticket. The RF module  440  may comprise an RF antenna and a memory. 
         [0083]      FIG. 5  is a plan view of a USB device according to an embodiment of the present invention. Referring to  FIG. 5 , a USB device  500  can be used for authentication and an admission ticket of a company, as described above. 
         [0084]    Specifically, in order to use the USB device  500  as the admission ticket, a company&#39;s name  510 , a user&#39;s photograph  530 , a bar code  540 , etc. can be printed on a surface of the USB device  500 . In addition, as described above, in the USB device  500  is contained the RF module  440  to authenticate a user who comes in and goes out of a company. 
         [0085]    In addition, on the surface of the USB device  500  is further provided a fingerprint identifying part  520  through which fingerprint information of the user is input. In addition, the USB device  500  further includes a USB connector  550  to connect the USB device  500  to the local computer  230  for USB communication therebetween. 
         [0086]      FIG. 6  is a flow chart illustrating an operation of the data security system using the USB device according to an embodiment of the present invention. Referring to  FIG. 6 , first, when the USB device  250  is connected to the local computer  230  at Step S 601 , the local computer  230  receives an automatic execution software from the USB device  250  at Step S 602 . Then, the local computer  230  automatically installs and executes the received automatic execution software at Step S 603  and authenticates a user based on fingerprint information input from the user at Step S 604 . 
         [0087]    After completion of the authentication, the user executes an application program in the local computer  230  to perform a work at Step S 605 . Then, a work screen on which the user works is captured at Step S 606 , and the captured work screen is compressed and stored at Step S 607 . 
         [0088]    After completion of the work at Step S 608 , work-related files are coded and stored by the automatically-installed software at Step S 609 . The coded and stored files can be decoded to be readable through justified authentication or by an operator of the management server  220 . 
         [0089]    Then, the captured and stored work screen is transmitted to the USB device  250  or the management server  220  via the network  210  at Step S 610 . In addition, a work management history is stored and transmitted to the management server  220  via the network  210  at Step S 611 . 
         [0090]      FIG. 7  is a view illustrating a data authentication service according to an embodiment of the present invention. Referring to  FIG. 7 , when an employee of a company uploads files into a management server of the company (({circle around (1)})), a manager codes (({circle around (2)})) and stores the uploaded files collectively to maintain security. 
         [0091]    In addition, in order that the employee works in the company or outside the company, he/she has to be authenticated (({circle around (3)})) through an authentication server by inserting the USB device of the present invention in his/her local computer. 
         [0092]    In addition, the files coded and stored in the management server can be decoded and used (({circle around (4)})) only after being authenticated by inserting the USB device in the local computer. If the USB device inserted in the local computer is removed or justified authentication is not performed, the files are not readable and stored and a picture to be output to the monitor is restricted, thereby providing thorough security for work files or confidential documents of the company. 
         [0093]    In addition, by transmitting the log (i.e., work history) or the captured screen of the work done at the local computer to the management server, security accidents, if any, can be tracked. 
         [0094]    As apparent from the above description, according to the present invention, by allowing a user to work in a local computer only when he/she connects a USB device, which contains a program to be automatically installed in the local computer, to the local computer and is justly authenticated, security for documents of a company can be maintained. 
         [0095]    In addition, by capturing a work situation in the local computer, storing the captured work situation as an image, and automatically informing a management server of a work history, a cause of a security accident, if it takes place, can be tracked. 
         [0096]    Furthermore, if a user is not justly authenticated through the USB device, he/she can not access coded documents stored in a company and output of the documents to a monitor is restricted, thereby maintaining security for the documents effectively. 
         [0097]    Although a few embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that changes may be made in these embodiments without departing from the principles and spirit of the invention, the scope of which is defined in the appended claims and their equivalents.