专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11423166B2 Method and apparatus for inspecting sensitive information stored in file system 有权
公开(公告)号：US11423166B2
公开(公告)日：2022-08-23
申请号：US16421706
申请日：2019-05-24
申请人： SOMANSA CO., LTD.
发明人： Tae Wan Kim , Il Hoon Choi
IPC分类号： G06F21/62 , G06F16/16 , G06F16/17
摘要： Disclosed is a method of inspecting sensitive information stored in a file system. The method includes storing file inspection result information including a file path field, a field of whether file writing is changed, a file size field, a final file modification date field, and a field of a number of detection per pattern, with respect to files in the file system, monitoring a file change event generated in the file system, detecting a type of the file change event sensed according to the monitoring the file change event, modifying the file inspection result information with respect to the file system according to the type of the file change event, detecting whether sensitive information is included, with respect to modified files in the file inspection result information, and modifying the file inspection result information by reflecting sensitive detection information according to the detection of the sensitive information.

2. 发明申请

US20190156054A1 DATA LOSS PREVENTION SYSTEM AND METHOD IMPLEMENTED ON CLOUD 审中-公开
公开(公告)号：US20190156054A1
公开(公告)日：2019-05-23
申请号：US15824229
申请日：2017-11-28
申请人： SOMANSA CO., LTD.
发明人： Hwan Cheol LIM , Il Hoon CHOI
IPC分类号： G06F21/62 , H04L29/06 , H04L29/12 , H04L12/46
摘要： Provided is a data loss prevention system implemented on cloud. The system includes: an address converter for receiving traffic from a private network using tunneling and converting a private IP address of the received traffic to a IPv6 address, which is unique in the data loss prevention system; and a data loss prevention unit for analyzing the traffic, in which the private IP address is converted to the IPv6 address, according to a predetermined policy and examining whether personal information or confidential information is included.

3. 发明申请

US20190156024A1 METHOD AND APPARATUS FOR AUTOMATICALLY CLASSIFYING MALIGNANT CODE ON BASIS OF MALIGNANT BEHAVIOR INFORMATION 审中-公开
公开(公告)号：US20190156024A1
公开(公告)日：2019-05-23
申请号：US15823929
申请日：2017-11-28
申请人： SOMANSA CO., LTD.
发明人： Sang Wook KIM , Tae Wan KIM , Il Hoon CHOI
IPC分类号： G06F21/54
摘要： Disclosed is a method of automatically classifying a malignant code on the basis of malignant behavior information. The method includes configuring a process table comprising an application programming interface (API) mapping table and a behavior mapping table corresponding to each of processes according to a start of execution of the processes, detecting malignant behavior of an executed process which is currently being executed, by using a malignant behavior metatable which stores malignant behavior information related to each of the processes, and classifying a malignant code related to the detected malignant behavior by using a malignant code classification metatable which stores pieces of information on representative malignant behaviors which configure malignant codes.

4. 发明申请

US20140108755A1 MOBILE DATA LOSS PREVENTION SYSTEM AND METHOD USING FILE SYSTEM VIRTUALIZATION 审中-公开
标题翻译：移动数据丢失预防系统和使用文件系统虚拟化的方法
公开(公告)号：US20140108755A1
公开(公告)日：2014-04-17
申请号：US14051000
申请日：2013-10-10
申请人： Somansa Co., Ltd.
发明人： Seung Tae LUE , Seung Tae PAEK , Il Hoon CHOI
IPC分类号： G06F3/06 , G06F12/14
CPC分类号： G06F3/0619 , G06F3/065 , G06F3/067 , G06F12/1408 , G06F21/6245 , G06F21/6281 , G06F21/74
摘要： Disclosed are a mobile DLP system and method. The mobile DLP system includes a general storage that allows an access in a normal mode and a security mode, an encrypted virtual storage that disallows an access in the normal mode and allows an access in the security mode, a management program that designates the general storage as a write/read area in the normal mode and designates the general storage and the virtual storage as the write/read area in the security mode, a fuse that intercepts a file input/output of an application program including the management program to again set a file input/output path as the virtual storage according to a command of the management program in the security mode, and a VFS engine that performs a bridge function between the application program of an application layer and the fuse of a kernel layer.
摘要翻译：公开了一种移动DLP系统和方法。移动DLP系统包括允许以正常模式和安全模式访问的通用存储器，不允许以正常模式访问并允许以安全模式访问的加密虚拟存储器，指定一般存储器的管理程序作为正常模式下的写入/读取区域，并将通用存储器和虚拟存储器指定为安全模式中的写入/读取区域，该保险丝截取包含管理程序的应用程序的文件输入/输出以再次设置作为虚拟存储器的文件输入/输出路径，根据安全模式中的管理程序的命令，以及VFS引擎，其在应用层的应用程序和内核层的熔丝之间执行桥接功能。

5. 发明授权

US08903998B2 Apparatus and method for monitoring web application telecommunication data by user 有权
标题翻译：用户监控Web应用电信数据的装置和方法
公开(公告)号：US08903998B2
公开(公告)日：2014-12-02
申请号：US13752509
申请日：2013-01-29
申请人： SOMANSA Co., Ltd.
发明人： Tae Wan Kim , Seung Tae Paek , Il Hoon Choi
IPC分类号： G06F15/173 , H04L12/26 , H04L29/12 , H04L29/06 , H04L29/08
CPC分类号： H04L43/04 , H04L29/06884 , H04L29/06897 , H04L29/08675 , H04L43/00 , H04L43/02 , H04L43/022 , H04L61/00 , H04L63/1408 , H04L63/1425 , H04L67/02 , H04L67/146 , H04L67/28 , H04L67/2809
摘要： Provided are an apparatus and method for monitoring web application telecommunication data by user. An information identification apparatus includes a collector collecting web application telecommunication data transmitted and received between a web server and a web client; a storage storing an identification information profile about a method of extracting user identification information by web server; and an extractor selecting user login-related web application telecommunication data among the web application telecommunication data with reference to the identification information profile, extracting a [web server address, login session identification information, and user identification information] list from the selected web application telecommunication data, extracting at least one piece of information of the web server address and the login session identification information from the web application telecommunication data after the user login, and determining whether the extracted information is matched with at least one piece of information in the list.
摘要翻译：提供了一种用于由用户监视web应用电信数据的装置和方法。信息识别装置包括在web服务器和web客户端之间发送和接收的收集器收集web应用电信数据; 存储有关通过Web服务器提取用户识别信息的方法的识别信息简档的存储器; 以及提取器，参考所述识别信息简档来选择所述web应用电信数据中的用户登录相关web应用电信数据，从所选web应用电信提取[web服务器地址，登录会话识别信息和用户识别信息]列表数据，在用户登录之后从网络应用电信数据中提取网络服务器地址和登录会话识别信息的至少一条信息，以及确定所提取的信息是否与列表中的至少一条信息匹配。

6. 发明授权

US08819807B2 Apparatus and method for analyzing and monitoring sap application traffic, and information protection system using the same 有权
标题翻译：用于分析和监控sap应用流量的设备和方法，以及使用该流量的信息保护系统
公开(公告)号：US08819807B2
公开(公告)日：2014-08-26
申请号：US13734337
申请日：2013-01-04
申请人： Somansa Co., Ltd
发明人： Seung Tae Paek , Yong Pil Hur , Tae Wan Kim , Sang Man Lee
IPC分类号： H04W76/02 , H04L29/06 , H04W40/24
CPC分类号： H04L63/20 , H04L63/0245 , H04L63/0254 , H04L63/1408
摘要： Provided are a traffic analysis apparatus and method. The traffic analysis apparatus includes an analysis unit and a policy application unit. The analysis unit determines whether a network packet between at least one client and a server is a packet of a pre-registered SAP session, and, when the network packet is not the packet of the pre-registered SAP session, the analysis unit determines whether the network packet is a packet of a new SAP session. The policy application unit determines whether the network packet includes predetermined monitoring information when the network packet is the packet of the pre-registered SAP session or new SAP session and, when the network packet includes the monitoring information, the policy application unit performs a response action conforming to a predetermined security policy.
摘要翻译：提供了一种交通分析装置和方法。交通分析装置包括分析单元和策略应用单元。分析单元确定至少一个客户端和服务器之间的网络分组是否是预先注册的SAP会话的分组，并且当网络分组不是预注册的SAP会话的分组时，分析单元确定是否网络分组是新的SAP会话的分组。当网络分组是预先登记的SAP会话或新的SAP会话的分组时，策略应用单元确定网络分组是否包括预定的监视信息，并且当网络分组包括监视信息时，策略应用单元执行响应动作符合预定的安全策略。

7. 发明申请

US20130166981A1 APPARATUS AND SECURITY SYSTEM FOR DATA LOSS PREVENTION, AND OPERATING METHOD OF DATA LOSS PREVENTION APPARATUS 有权
标题翻译：数据丢失防范装置和安全系统及数据丢失防范手段的操作方法
公开(公告)号：US20130166981A1
公开(公告)日：2013-06-27
申请号：US13362838
申请日：2012-01-31
申请人： Sang Seok LEE , Tae Wan KIM , Il Hoon CHOI
发明人： Sang Seok LEE , Tae Wan KIM , Il Hoon CHOI
IPC分类号： H04L1/08 , G06F11/14
CPC分类号： G06F11/14 , G06F21/552 , H04L1/08 , H04L41/0668 , H04L43/028
摘要： Disclosed are a DLP security system and an operating method thereof. An operating method of a data loss prevention (DLP) apparatus, comprising: converting, into packets, Ethernet signals received from a fail over device that are transmitted and received between an external network and internal network; analyzing the packets to classify the packets into first packets required to be precisely judged and second packets not required to be precisely judged; distributing and allocating a judgment job about the first packet to at least one in-line instance according to a predetermined reference; and allocating the judgment job distributed to the in-line instance in which a fail occurs to the in-line instance which is normally operated when it is verified whether there is an in-line instance which is normally operated in the case where the fail occurs in the at least one in-line instance.
摘要翻译：公开了DLP安全系统及其操作方法。一种数据丢失预防（DLP）装置的操作方法，包括：将从在外部网络和内部网络之间发送和接收的故障切换装置接收的以太网信号转换成分组; 分析分组以将分组分类为需要精确判断的第一分组和不需要精确判断的第二分组; 根据预定参考将关于第一分组的判断作业分发和分配到至少一个在线实例; 并且分配给发生故障发生的在线实例的判断作业在通过验证是否存在在发生故障的情况下正常操作的在线实例的情况下正常操作的在线实例在至少一个在线实例中。

8. 发明申请

US20130163030A1 METHOD, SYSTEM, AND TERMINAL FOR PRINTED MATTER SECURITY 有权
标题翻译：用于印刷安全的方法，系统和终端
公开(公告)号：US20130163030A1
公开(公告)日：2013-06-27
申请号：US13362812
申请日：2012-01-31
申请人： Sang Jin LEE , Seung Tae PAEK , Il Hoon CHOI
发明人： Sang Jin LEE , Seung Tae PAEK , Il Hoon CHOI
IPC分类号： G06K15/02
CPC分类号： G06K15/02 , G06F3/1222 , G06F3/1238 , G06F3/1244 , G06F3/1285 , G06F21/608 , G06F2221/2125
摘要： Disclosed are a system and a method for printed matter security. A method for printed matter security according to an exemplary embodiment of the present invention includes: receiving policy information, information of a monitoring application program, and pattern information of personal information from a security server; inserting a printing interruption module in the monitoring application program when the monitoring application program corresponding to the information of the application program is executed; storing a content of a printing request by interrupting the printing request of the monitoring application program by the printing interruption module; verifying whether the personal information is included in the content of the printing request, using the pattern information; and performing an information protection function corresponding to the policy information when the personal information is included in the content of the printing request.
摘要翻译：公开了印刷品安全性的系统和方法。根据本发明的示例性实施例的打印物安全的方法包括：从安全服务器接收策略信息，监视应用程序的信息和个人信息的模式信息; 当执行与应用程序的信息相对应的监视应用程序时，在监视应用程序中插入打印中断模块; 通过中断打印中断模块对监视应用程序的打印请求来存储打印请求的内容; 使用图案信息来验证个人信息是否包括在打印请求的内容中; 并且当个人信息被包括在打印请求的内容中时，执行与策略信息相对应的信息保护功能。

9. 发明申请

US20080235370A1 Method and System for Controlling Network Traffic of P2P and Instant Messenger Softwares 审中-公开
标题翻译： P2P和即时通讯软件网络流量控制方法与系统
公开(公告)号：US20080235370A1
公开(公告)日：2008-09-25
申请号：US11944750
申请日：2007-11-26
申请人： Ilhoon Choi , Tae Wan Kim , Dae Hwan Kim
发明人： Ilhoon Choi , Tae Wan Kim , Dae Hwan Kim
IPC分类号： G06F15/173
CPC分类号： H04L63/0227 , H04L43/026 , H04L51/04 , H04L51/34 , H04L67/104
摘要： A method and a system for controlling a network traffic of P2P and instant messenger softwares are disclosed. In accordance with the method and the system, both a header and a payload of a packet generated by an instant messenger software or a P2P software are monitored to terminate a session by transmitting a termination signal to a receiver and a transmitter when required, thereby blocking the exchange of the attached file and storing the content of the conversation.
摘要翻译：公开了一种用于控制P2P和即时通讯软件的网络流量的方法和系统。根据该方法和系统，通过即时消息软件或P2P软件生成的分组的报头和有效载荷被监视以终止会话，通过在需要时向接收机和发射机发送终止信号，从而阻塞交换附件文件并存储会话内容。

10. 发明授权

US08966606B2 Apparatus and security system for data loss prevention, and operating method of data loss prevention apparatus 有权
标题翻译：用于数据丢失防护的装置和安全系统，以及数据丢失防护装置的操作方法
公开(公告)号：US08966606B2
公开(公告)日：2015-02-24
申请号：US13362838
申请日：2012-01-31
申请人： Sang Seok Lee , Tae Wan Kim , Il Hoon Choi
发明人： Sang Seok Lee , Tae Wan Kim , Il Hoon Choi
IPC分类号： H04L1/00 , G06F11/00
CPC分类号： G06F11/14 , G06F21/552 , H04L1/08 , H04L41/0668 , H04L43/028
摘要： Disclosed are a DLP security system and an operating method thereof. An operating method of a data loss prevention (DLP) apparatus, comprising: converting, into packets, Ethernet signals received from a fail over device that are transmitted and received between an external network and internal network; analyzing the packets to classify the packets into first packets required to be precisely judged and second packets not required to be precisely judged; distributing and allocating a judgment job about the first packet to at least one in-line instance according to a predetermined reference; and allocating the judgment job distributed to the in-line instance in which a fail occurs to the in-line instance which is normally operated when it is verified whether there is an in-line instance which is normally operated in the case where the fail occurs in the at least one in-line instance.
摘要翻译：公开了DLP安全系统及其操作方法。一种数据丢失预防（DLP）装置的操作方法，包括：将从在外部网络和内部网络之间发送和接收的故障切换装置接收的以太网信号转换成分组; 分析分组以将分组分类为需要精确判断的第一分组和不需要精确判断的第二分组; 根据预定参考将关于第一分组的判断作业分发和分配到至少一个在线实例; 并且分配给发生故障发生的在线实例的判断作业在通过验证是否存在在发生故障的情况下正常操作的在线实例的情况下正常操作的在线实例在至少一个在线实例中。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式