# US 2014/0157426 A1 · Personal information protection system for providing specialized function for host terminal based on unix and linux > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157426 A1 - Document ID: US20140157426A1 - Status: Published application - Kind: A1 - Application number: 13/734,283 - Filed: 2013-01-04 - Published: 2014-06-05 - Earliest claimed: 2012-11-30 - Assignees: Somansa Co., Ltd. - Applicants: Somansa Co., Ltd. - Inventors: Seung Tae PAEK; Tae Wan KIM; Il Hoon CHOI - Web page: https://patentgrep.com/patent/US20140157426A1 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 21/6236: {between heterogeneous systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Provided are an information protection apparatus and system. The information protection apparatus based on Windows, Unix, or Linux includes a first check unit, a second check unit, and a security measure unit. The first check unit checks whether there is a file including monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy. The second check unit checks whether there is a file including the monitoring information among the check target files in a sharing storage area of a file system that is shared in a network drive type in an NFS scheme. The security measure unit performs a security measure conforming to a predetermined security policy for the file including the monitoring information. ## Claims ### Claim 1 An information protection apparatus based on Windows, Unix, or Linux, comprising: a first check unit checking whether there is a file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy; a second check unit checking whether there is a file comprising the monitoring information among the check target files in a sharing storage area of a file system that is shared in a network drive type in a Network File System (NFS) scheme; and a security measure unit performing a security measure conforming to a predetermined security policy for the file comprising the monitoring information. ### Claim 2 (depends on 1) The information protection apparatus of claim 1, wherein, in a first check, the first and second check units generate index data comprising the security measure and file attribute information on the check target files, encrypt the index data, and store the encrypted index data in the local storage area, and in subsequent checks, the first and second check units check whether there is a file comprising the monitoring information among files having different file attribute information in the check target files using the index data that is decrypted. ### Claim 3 (depends on 1) The information protection apparatus of claim 1, wherein the first and second check units transmit a check result, comprising at least one of a name of a file comprising the monitoring information, a file size, a file format, a check time, detected contents of the monitoring information, and the number of detections of each monitoring information, to a management server. ### Claim 4 (depends on 1) The information protection apparatus of claim 1, wherein the check target files comprise at least one of a file, generated in a Windows-based office application program which of the file extension is at least one of *.hwp, *.doc, *.docx, *.ppt, *.pptx, *.xls, *.xlsx, *.pdf, and *.gul, and a file from which a text stream is extractable. ### Claim 5 (depends on 1) The information protection apparatus of claim 1, wherein the first and second check units division-check the check target files with respect to the number of files conforming to the check policy. ### Claim 6 (depends on 1) The information protection apparatus of claim 1, wherein the first and second check units perform an effectiveness check that checks whether an extension type of the check target file is matched with extension information based on signature information extracted from a header of the check target file, and check whether the monitoring information is comprised in the check target file which of the effectiveness has been verified as the effectiveness check result. ### Claim 7 (depends on 1) The information protection apparatus of claim 1, wherein when the check target file is compressed in a Windows-based compression format or a Unix or Linux-based compression format, the first and second check units check whether the monitoring information is comprised in a decompressed original file. ### Claim 8 An information protection apparatus based on Unix or Linux, comprising: a check unit checking whether there is a file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy; and a security measure unit performing a security measure conforming to a predetermined security policy for the file comprising the monitoring information. ### Claim 9 (depends on 8) The information protection apparatus of claim 8, wherein, in a first check, the check unit generates index data comprising the security measure and file attribute information on the check target files, encrypts the index data, and stores the encrypted index data in the local storage area, and in subsequent checks, the check units check whether there is a file comprising the monitoring information among files having different file attribute information in the check target files using the index data that is decrypted. ### Claim 10 (depends on 8) The information protection apparatus of claim 8, wherein the check target files comprise at least one of a file, generated in a Windows-based office application program which of the file extension is at least one of *.hwp, *.doc, *.docx, *.ppt, *.pptx, *.xls, *.xlsx, *.pdf, and *.gul, and a file from which a text stream is extractable. ### Claim 11 An information protection system, comprising: an agent checking whether there is a file comprising monitoring information among a plurality of monitoring target files in at least one of a local disk and a network storage, and performing a protection measure conforming to a predetermined security policy for the file comprising the monitoring information, the agent being comprised in a terminal based on Linux, Unix, or Windows; and a management server checking whether a table comprising monitoring information is stored in a commercial database, and providing the security policy to the agent. ### Claim 12 (depends on 11) The information protection system of claim 11, wherein, the agent is connected to the network storage in a network drive type by a Network File System (NFS), and checks whether a file comprising the monitoring information is stored in the network storage, and when a file generated in a Windows-based application program is stored in the network storage, the agent checks whether the file comprising the monitoring information is stored in the network storage using a Windows-based resource. ### Claim 13 (depends on 11) The information protection system of claim 11, wherein, the agent performs the protection measure, and transmits a check result, comprising at least one of a name of a file comprising the monitoring information, a file size, a file format, and a check time, to a management server, and the management server calculates a check time for each file size based on an operating system using the check result. ### Claim 14 (depends on 11) The information protection system of claim 11, wherein when it is requested to check an estimated use time for all checks, the management server requests information to the agent to receive the information on the monitoring target file, checks the number of monitoring target files by file size, and calculates the estimated use time by multiplying a check time by file size, corresponding to an operating system of a terminal with the agent installed therein, to the number of monitoring target files by file size. ### Claim 15 (depends on 14) The information protection system of claim 14, wherein, the management server displays a table comprising a file name and a file size, which are comprised in the information of the monitoring target file, and the estimated use time, and the table provides an interface for determining a file to be excluded from a check by the agent among the monitoring target files and designating a check order.