Personal information protection system for providing specialized function for host terminal based on Unix and Linux

An information protection apparatus based on Windows, Unix, or Linux, comprising:

• a processor;
• a first cheek unit executed by the processor, checking whether there is a first file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy;
• a second check unit executed by the processor, checking whether there is a second file comprising the monitoring information among the check target files in a sharing storage area of a file system that is shared in a network drive type in a Network File System (NFS) scheme;
• and
• a security measure unit executed by the processor, performing a security measure conforming to a predetermined security policy for each of the first file comprising the monitoring information and the second file comprising the monitoring information,
• wherein the first check unit performs an effectiveness check that checks whether an extension type of the first file is matched with extension information based on signature information extracted from a header of the first file, and checks whether the monitoring information is comprised in the first file which of the effectiveness has been verified as the effectiveness check result, and
• wherein the second check unit performs an effectiveness check that checks whether an extension type of the second file is matched with extension information based on signature information extracted from a header of the second file, and checks whether the monitoring information is comprised in the second file which of the effectiveness has been verified as the effectiveness check result.

An information protection apparatus based on Unix or Linux, comprising:

• a processor;
• a check unit executed by the processor, checking whether there is a file comprising monitoring information among a plurality of check target files in a local storage area, according to a predetermined check policy;
• and
• a security measure unit executed by the processor, performing a security measure conforming to a predetermined security policy for the file comprising the monitoring information,
• wherein in a first check, the check unit generates index data comprising the security measure and file attribute information on the check target files, encrypts the index data, and stores the encrypted index data in the local storage area, and
• wherein in subsequent checks, the check unit checks whether there is a file comprising the monitoring information among files having different file attribute information in the check target files using the index data that is decrypted.

An information protection system, comprising:

• an agent comprising a processor for checking whether there is a file comprising monitoring information among a plurality of monitoring target files in at least one of a local disk and a network storage, and performing a protection measure conforming to a predetermined security policy for the file comprising the monitoring information, the agent being comprised in a terminal based on Linux, Unix, or Windows;
• and
• a management server comprising a processor for checking whether a table comprising monitoring information is stored in a commercial database, and providing the security policy to the agent,
• wherein the agent performs the protection measure, and transmits a check result comprising at least one of a name of the file comprising the monitoring information, a file size, a file format, and a check time, to a management server, and
• wherein the management server calculates a check time for each file size based on an operating system using the check result.

An information protection system, comprising:

• an agent comprising a processor for checking whether there is a file comprising monitoring information among a plurality of monitoring target files in at least one of a local disk and a network storage, and performing a protection measure conforming to a predetermined security policy for the file comprising the monitoring information, the agent being comprised in a terminal based on Linux, Unix, or Windows;
• and
• a management server comprising a processor for checking whether a table comprising monitoring information is stored in a commercial database, and providing the security policy to the agent,
• wherein when it is requested to check an estimated use time for all checks, the management server requests information to the agent to receive the information on the file, checks the number of monitoring target files by file size, and calculates the estimated use time by multiplying a check time by file size, corresponding to an operating system of a terminal with the agent installed therein, to the number of monitoring target files by file size.