# US 10,771,462 B2 · User terminal using cloud service, integrated security management server for user terminal, and integrated security management method for user terminal > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,462 B2 - Document ID: US10771462B2 - Status: Granted - Kind: B2 - Application number: 15/980,945 - Filed: 2018-05-16 - Published: 2019-05-30 - Granted: 2020-09-08 - Earliest claimed: 2017-11-29 - Assignees: Electronics and Telecommunications Research Institute - Applicants: Electronics and Telecommunications Research Institute - Inventors: Seunghun Han; Hyun Ku Kim; Wook Shin; Byung-Joon Kim; Hyoung-Chun Kim - Web page: https://patentgrep.com/patent/US10771462B2 ## CPC - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/102: {Entity profiles} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A user terminal using cloud service, an integrated security management server for the user terminal, and an integrated security management method for the user terminal. The integrated security management method includes receiving, by an integrated security management server, authentication information from at least one user terminal that use a cloud service, authenticating, by the integrated security management server, the user terminal using the authentication information, transmitting, by the integrated security management server, task information to the user terminal so as to control the user terminal, receiving, by the integrated security management server, at least one of a result of processing the task information and state information from the user terminal that verifies the task information, and managing, by the integrated security management server, a state of the user terminal based on at least one of the result of processing and the state information. ## Claims ### Claim 1 An integrated security management method for a user terminal, comprising: receiving, by an integrated security management server, authentication information from at least one user terminal that use a cloud service; authenticating, by the integrated security management server, the user terminal using the received authentication information; transmitting, by the integrated security management server, task information to the user terminal so as to control the user terminal; receiving, by the integrated security management server, at least one of a result of processing the task information and state information from the user terminal that verifies the task information; and managing, by the integrated security management server, a state of the user terminal based on at least one of the result of processing and the state information. ### Claim 2 (depends on 1) The integrated security management method of claim 1, wherein transmitting the task information to the user terminal comprises transmitting the task information and verification information related to the task information to the user terminal, and allowing the user terminal to verify the task information using the verification information. ### Claim 3 (depends on 2) The integrated security management method of claim 2, wherein: the task information comprises at least one of resource control setting information, security setting information, configuration information, software configuration change information, software function control information, and resource control information, and the verification information comprises at least one of a hash value and signature information for the task information. ### Claim 4 (depends on 3) The integrated security management method of claim 3, wherein the security setting information comprises at least one of a user password change period, a screensaver running period, information on authority to permit addition and installation of software for respective users, and information on authority to permit deletion of software for respective users, and the configuration information comprises at least one of software storage address information, address information of respective domains, and information on time synchronization with the integrated security management server. ### Claim 5 (depends on 3) The integrated security management method of claim 3, wherein the resource control setting information controls the user terminal such that the user terminal performs at least one of control of access to operating system resources and control of access to browser resources. ### Claim 6 (depends on 5) The integrated security management method of claim 5, wherein the resource control setting information comprises at least one of resource access control information that allows the user terminal to control access to the operating system resources for respective users and browser control information that allows the user terminal to control access to the browser resources for respective cloud services. ### Claim 7 (depends on 6) The integrated security management method of claim 6, wherein the resource access control information controls access to the operating system resources comprising at least one of a network, a storage medium, a clipboard, a camera and an input/output device that correspond to the user terminal. ### Claim 8 (depends on 6) The integrated security management method of claim 6, wherein the browser control information controls access to the browser resources comprising at least one of a storage medium, a Global Positioning System (GPS) device, a clipboard, a camera, a plug-in, and an application that correspond to the user terminal. ### Claim 9 (depends on 1) The integrated security management method of claim 1, wherein receiving the authentication information comprises receiving the authentication information comprising at least one of terminal authentication information and user authentication information for the user of the user terminal. ### Claim 10 An integrated security management server for a user terminal, comprising: a communication unit for receiving authentication information from at least one user terminal that use a cloud service; a terminal and user authentication unit for authenticating the user terminal using the authentication information; a task information management unit for managing task information to be transmitted to the user terminal so as to control the user terminal; and a terminal state management unit for managing at least one of a result of processing the task information and state information received from the user terminal that processes the task information. ### Claim 11 (depends on 10) The integrated security management server of claim 10, wherein the communication unit transmits the task information and verification information comprising at least one of a hash value and signature information for the task information to the user terminal, and receives at least one of the result of processing the task information and the state information from the user terminal that verifies the task information. ### Claim 12 (depends on 11) The integrated security management server of claim 11, wherein the task information management unit manages the task information comprising at least one of resource control setting information, security setting information, configuration information, software configuration change information, software function control information, and resource control information. ### Claim 13 (depends on 12) The integrated security management server of claim 12, wherein the resource control setting information comprises at least one of resource access control information that allows the user terminal to control access to operating system resources for respective users and browser control information that allows the user terminal to control access to browser resources for respective cloud services. ### Claim 14 (depends on 10) The integrated security management server of claim 10, wherein the terminal and user authentication unit is configured to, before transmitting the task information to the user terminal, authenticate the user terminal based on terminal authentication information received from the user terminal, and authenticate a user of the cloud service based on user authentication information. ### Claim 15 A user terminal for providing a cloud service to a user, comprising: a terminal communication unit for transmitting authentication information to an integrated security management server, and receiving task information from the integrated security management server that performs authentication based on the authentication information; a task information verification unit for verifying the task information based on verification information received from the integrated security management server; a state management unit for managing at least one of a security state and an operating state of a user terminal; an integrity verification unit for verifying integrity of at least one of software, a file, and a kernel area in accordance with the task information that has been verified; a resource access control unit for controlling authority to access resources in accordance with the task information that has been verified; and an update control unit for changing configuration of previously installed software in accordance with the task information that has been verified. ### Claim 16 (depends on 15) The user terminal of claim 15, wherein the terminal communication unit receives the task information that comprises at least one of resource control setting information, security setting information, configuration information, software configuration change information, software function control information, and resource control information, and the verification information that comprises at least one of a hash value and signature information for the task information. ### Claim 17 (depends on 16) The user terminal of claim 16, wherein the security setting information comprises at least one of a user password change period, a screensaver running period, information on authority to permit addition and installation of software for respective users, and information on authority to permit deletion of software for respective users. ### Claim 18 (depends on 15) The user terminal of claim 15, wherein the resource access control unit comprises: a resource access control module for controlling access to operating system resources for respective users based on the task information; and a browser control module for controlling access to browser resources for respective cloud services based on the task information. ### Claim 19 (depends on 15) The user terminal of claim 15, wherein the state management unit periodically checks a security state of the user terminal and checks the security state when a security threat is determined to occur. ### Claim 20 (depends on 16) The user terminal of claim 16, wherein the configuration information comprises at least one of software storage address information, address information of respective domains, and information on time synchronization with the integrated security management server.