Security management system and method for location-based mobile device

A location information-based security management system, the system comprising:

• a Radio Frequency (RF) communication unit for performing RF communication with a server managing a restricted area;
• a storage unit for storing a security policy set for the restricted area transmitted from the server and a file created according to the execution of an application program;
• and
• a controller,
• wherein the controller:
• receives a request for the execution of the application program in a restricted area from the server, and determines whether the application program is set to be executable in the restricted area according to the security policy;
• executes the application program when the application program is set to be executable according to the security policy;
• encrypts the file, created according to the execution of the application program, based on location information regarding a mobile device, the encrypted file including a flag indicating whether the encrypted file is created while the mobile device is in the restricted area;
• stores the encrypted file;
• receives, when the mobile device is located in the restricted area, a request for the execution of the encrypted file;
• requests, when the encrypted file requested for execution is created while the mobile device is in the restricted area, a decryption key for executing the encrypted file from the server;
• and
• receives the decryption key from the server, decrypts the encrypted file via the received decryption key, and executes the decrypted file,
• wherein the encrypted file comprises:
• a header;
• and
• encrypted data following the header,
• wherein the header comprises:
• the flag;
• and
• the location information for identifying at least one of an encryption key and the decryption key, and
• wherein the flag indicates whether the location information includes information regarding a location where the encrypted file is created.