KR101272136B1 - Method on Postion Based Security of Mobile Device - Google Patents

Abstract

The present invention relates to a method and system for implementing location-based security in a mobile terminal in which a differential security policy is applied according to a location of a mobile terminal with high mobility.
A method for implementing location-based security in a mobile terminal, the method comprising: receiving a location-based security policy from a location-based security policy server managing a location-based security policy by the mobile terminal; Storing the location based security policy; Determining a current location of the mobile terminal; Querying the location-based security policy to determine whether the current location is subject to a security policy; And enforcing the security policy.
By implementing the present invention, it is possible to effectively respond to security threats by setting a physical location to be protected and limiting the use of functions and applications that would be a threat when the terminal approaches the corresponding location, and is a mobile terminal (smartphone, tablet computer, etc.). ) Can effectively prevent the leakage of information to the outside through acquiring internal information by malicious use and user's carelessness, and automatically enforces the security policy of the terminal which is discriminated in the area where security is important. The leakage of assets and information can be prevented.

Description

Location based security on mobile devices with high mobility {Method on Postion Based Security of Mobile Device}

The present invention relates to a method for implementing location-based security in a mobile terminal, and more particularly, to a method for implementing location-based security in a mobile terminal to which a differential security policy is applied according to the location of the mobile terminal.

Personal network access terminals are being converted into multimedia terminals such as tablet PCs and smartphones via desktop PCs and laptop PCs. The change of the personal work terminal is increasing the threat of security incidents using the terminal in the enterprise due to the mobility of the terminal and the openness of the OS environment. In other words, if you possess a mobile device with a strong mobility as an asset inside the company to be protected, it is possible to easily collect confidential information.

Accordingly, there has been a great demand for the development of a technology capable of enforcing a security policy so that a terminal moving to a location requiring security automatically disables a function that threatens security.

The first technical problem to be solved by the present invention is to propose a method for implementing location-based security in a mobile terminal.

The second technical problem to be solved by the present invention is to propose a recording medium in which a location-based security implementation method is implemented.

The third technical problem to be solved by the present invention is to propose a mobile terminal in which a location-based security implementation method is implemented.

The fourth technical problem to be solved by the present invention is to propose a method for implementing location-based security in a location-based security policy server.

The fifth technical problem to be solved by the present invention is to propose a location-based security support system for implementing a location-based security implementation method.

According to an aspect of the present invention, there is provided a method for implementing location-based security in a mobile terminal, the method comprising: receiving, by the mobile terminal, a location-based security policy from a location-based security policy server managing a location-based security policy; Storing the location based security policy; Determining a current location of the mobile terminal; Querying the location-based security policy to determine whether the current location is subject to a security policy; And enforcing the security policy.

Preferably, the location-based security policy includes location information and security processing contents corresponding to the location information.

The security processing content may include at least one of whether a preset program is operated, whether a preset device is controlled for operation, whether a preset function module is operated, and authority management in the preset program.

The program may be any one or more of a mail program, a network connection program, a preset communication module operation program, a preset device operation program, a preset function module operation program, a third terminal connection program, and a third system connection program. .

The location information includes a coordinate value including latitude and longitude information, a coordinate value range including latitude and longitude information, a cell value of a mobile communication network, a cell value range of a mobile communication network, a location address value of a wireless AP, and a location address of a wireless AP. It is preferable that it is at least one of a value range.

Determining current location information of the mobile terminal; Transmitting current location information of the mobile terminal through a wireless network to a location based security policy server that manages location based security policies; And receiving an updated location-based security policy corresponding to the current location information of the mobile terminal from the location-based security policy server. Storing the updated location based security policy; Determining whether to execute the updated security policy; And enforcing the updated security policy based on the current location information.

Preferably, the current location is determined by GPS information included in the mobile terminal and location information of a connection to a wireless network.

Determining whether the current location is subject to a security policy by querying the location-based security policy includes querying whether the current location is location information present in the location-based security policy; and In the case of the existing location information, querying whether the security processing contents registered in the location-based security policy exists in the mobile terminal.

Preferably, the executing of the security policy is to execute a predetermined security policy with respect to the inquired security processing contents.

Determining current location information of the mobile terminal; Querying the stored location-based security policy for current location information of the mobile terminal; And releasing the location-based security policy only for the security processing content without the corresponding content when there is no corresponding content on the basis of the current location information of the mobile terminal.

And transmitting the enforced security policy information to the location based security policy server.

And displaying the enforced security policy information on the screen display device of the mobile terminal.

In order to achieve the technical object of the present invention, a computer-readable recording medium characterized by implementing the method of any one of the above.

In order to achieve the technical object of the present invention, a mobile terminal comprising a computer-readable recording medium, characterized in that the method of any one of the above.

In order to achieve the technical problem of the present invention, in a mobile terminal implemented location-based security, security policy reception for receiving and storing the location-based security policy via a wireless network from a location-based security policy server that manages a location-based security policy module; A current location determining module for identifying a current location of the mobile terminal; A security policy enforcement determination module for querying the location-based security policy to determine whether the current location is subject to a security policy; And a security policy enforcement module for enforcing the security policy.

In order to achieve the technical object of the present invention, a mobile terminal including the recording medium is provided.

In order to achieve the technical problem of the present invention, in a location-based security support system including a location-based security policy server that supports the implementation of location-based security through a mobile terminal, allowing the access of the mobile terminal, connected mobile Querying a terminal to determine a security policy applied to the mobile terminal; Transmitting a security policy applied by the mobile terminal to the mobile terminal; Receiving the current location information of the mobile terminal from the mobile terminal; and determining a security policy corresponding to the current location information of the mobile terminal, and transmitting the determined security policy. It presents a method of implementing the base security.

The transmission of the security policy corresponding to the current location information includes a first security policy transmission method for transmitting all security policies corresponding to the current location information, and a change in a security policy previously transmitted in response to the current location information. It is preferable to implement any one of the second security policy transmission method of transmitting only the security policy.

Receiving the security policy information being executed on the basis of the current location information in the mobile terminal; and storing the obtained security policy information; preferably.

In order to achieve the technical problem of the present invention, there is provided a location-based security support system comprising a location-based security policy server for implementing the method of any one of the above.

By implementing the present invention, it is possible to effectively respond to security threats by setting a physical location to be protected and limiting the use of functions and applications that would be a threat when the terminal approaches the corresponding location, and is a mobile terminal (smartphone, tablet computer, etc.). ) Can effectively prevent the leakage of information to the outside through acquiring internal information by malicious use and user's carelessness, and automatically enforces the security policy of the terminal which is discriminated in the area where security is important. There is an effect that can prevent the leakage of assets, information, and the like.

1 is a diagram illustrating a configuration of a location-based security support system including a location-based security policy server in which location-based security is implemented and a mobile terminal in which location-based security is implemented.
2 is an exemplary flow diagram of a method for performing location based security support in a mobile terminal.
3 is an exemplary flow diagram of a method for performing location based security support in a mobile terminal including processing of an updated security policy corresponding to current location information of the mobile terminal.
4 is an exemplary flow diagram of how location-based security support is implemented in a location-based security policy server.
FIG. 5 is an exemplary flowchart illustrating a method of performing location based security support in a location based security policy server for processing an updated security policy corresponding to current location information of a mobile terminal.
6 is an exemplary flow diagram of a method for location based security support in a location based security policy server that performs information processing related to updating of a security policy.
7 is an exemplary flow diagram of a process in which location based security support is implemented between a location based security policy server and a mobile terminal.

Hereinafter, the present invention will be described in more detail with reference to the drawings.

1 is a diagram illustrating a configuration of a location-based security support system 1000 including a location-based security policy server 1100 in which location-based security is implemented, and a mobile terminal 2000 in which location-based security is implemented. Drawing. The location-based security support system 1000 is connected to the mobile terminal 2000 and the wireless network 3000 (which means that there is a wireless part of the entire connection section).

The location-based security support system 1000 includes a location-based security policy server 1100, and the location-based security policy server 1100 is managed by an administrator through an administrator computer 1300. The manager computer 1300 is connected to the location-based security policy server 1100 through a wired / wireless network 1200. The location-based security policy server 1100 is a security policy registration module 1110 for registering a location-based security policy used to be enforced in a mobile terminal 2000, and a security for transmitting a location-based security policy to the mobile terminal 2000. A policy transmission module 1120, a terminal for receiving local location information of the mobile terminal 2000, using the current location information receiving module 2200 (1130) and the current location information of the mobile terminal 2000, the mobile terminal Security applied to the security location determination module 1140, the mobile terminal 2000 managing the mobile terminal 2000, the mobile module 2000 managing the mobile terminal 2000, and the mobile terminal 2000. A security policy central DB 1160 storing policy data and a mobile terminal 2000 managing DB 1170 storing management information about the mobile terminal 2000 are included.

The mobile terminal 2000 includes a location-based security module 2100 that enforces a location-based security policy and a current location module 2120 that detects location information of the mobile terminal 2000 and performs wireless communication. The wireless communication module 2300 includes various mounting programs 2400 for performing various functions and services of the mobile terminal 2000 and various mounting devices 2500 mounted on the mobile terminal 2000. The location-based security module 2100 includes a security policy reception module 2110 for receiving and storing a location-based security policy from the location-based security policy server 1100 managing a location-based security policy through the wireless network 3000. A current location determining module 2120 for identifying a current location of the mobile terminal 2000, a security policy enforcement determining module 2130 for determining whether the current location is subject to a security policy by querying the location-based security policy, And a security policy received from the security policy enforcement module 2140 for executing a security policy, a current location transmission module 2150 for transmitting the current location of the mobile terminal 2000, and the location-based security support system 1000. It includes a security policy DB (2160).

2 shows an exemplary flow diagram of how location based security support is implemented in a mobile terminal 2000.

The security policy reception module 2110 of the mobile terminal 2000 receives a location-based security policy transmitted by the security policy transmission module 1120 of the location-based security policy server 1100 managing a location-based security policy (S11). do. The security policy reception module 2110 preferably receives the security policy at predetermined intervals. The mobile terminal checks its location value at predetermined intervals to determine whether the location value requires a security policy enforcement and maintains the security policy enforced once until the next confirmation.

An example of a security policy (limiting rule) item that is a target of a location-based security policy is shown in Table 1 below.

Security policy entries Security Policy Item Description Item-specific security policy to be enforced WiFi Access to unverified internal networks and obtain information connected within those networks Enforce restricted / authorized access only (enforce access to authorized AP, SSID only) Bluetooth Send and receive information by connecting to other terminals that support Bluetooth communication Limited use of Bluetooth (keep Bluetooth disabled in unlicensed areas) Camera Shooting and image leaks for internal assets Restrict usage of Camera (keep Camera disabled in unlicensed areas) E-mail Sending and receiving programs or information that may be threats Restriction on E-mail Application Use WEB Attacks internal security vulnerabilities by using security bypass method that operates on WEB Web browser usage restrictions ActiveSync Connect mobile terminal to fixed PC to transmit necessary information or spread harmful programs inside Restrict ActiveSync Usage

The security policy may further include a location information value or a range value of the location information for the security area.

For example, an example of a security policy item to be applied at this time by range value and security level of location information about a specific region may be as shown in Table 2 below.

User ID rank security
Rating Location content security
space
Rating Geolocation range value Restricted Security Policy Entries 111 CEO A Company-wide <+37.184, +126.193> to <+37.985, +126.903> none 222 Security officer S Company-wide <+37.184, +126.193> to <+37.985, +126.903> none 333 Marketing Manager B product
Development room A <+37.484, +126.893> to <+37.485, +126.903> Camera stop 333 Marketing Manager B Executive Office A <+37.584, +126.993> to <+37.585, +126.999> ActiveSync hangs 333 Marketing Manager B Marketing Head Office B <+37.494, +126.893> to <+37.496, +126.993> Allow ActiveSync ... ... ... ... ... ... 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> Camera stop 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> ActiveSync hangs 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> WiFi interruption 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> Bluetooth interruption 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> E-mail Abort 444 Material Representative C Product Development Office A <+37.484, +126.893> to <+37.485, +126.903> Web outage 444 Material Representative C man
Playground C <+37.284, +126.293> to <+37.885, +126.803> Allow Camera

As shown in Table 2 below, the security level may be different for each position, and any one or more of security policy items and location information range values restricted for each ID may vary. For example, in the case of ID 444, a variety of security items are restricted in the product development room, but a camera is allowed in the location of the company playground.

The security policy receiving module 2110 of the mobile terminal 2000 of the person having the ID 444 stores the received location-based security policy in the security policy DB 2160 (S12).

An example of the security policy DB 2160 may be as shown in Table 3 below.

user
ID Terminal information security
Rating location
Contents Location information
Range Position value
Confirmation cycle Restricted Security Policy Entries 444 11.22.33.44.55.67 C Product Development Office <+37.484, +126.893> to <+37.485, +126.903> 60 seconds Camera stop 444 11.22.33.44.55.67 C Product Development Office +37.484, +126.893> to <+37.485, +126.903> 60 seconds ActiveSync hangs 444 11.22.33.44.55.67 C Product Development Office +37.484, +126.893> to <+37.485, +126.903> 60 seconds WiFi interruption 444 11.22.33.44.55.67 C Product Development Office +37.484, +126.893> to <+37.485, +126.903> 60 seconds Bluetooth interruption 444 11.22.33.44.55.67 C Product Development Office +37.484, +126.893> to <+37.485, +126.903> 10 seconds E-mail Abort 444 11.22.33.44.55.67 C Product Development Office +37.484, +126.893> to <+37.485, +126.903> 10 seconds Web outage 444 11.22.33.44.55.67 C man
Playground +37.284, +126.293> to <+37.885, +126.803> 10 seconds Allow Camera

The mobile terminal 2000 detects the current location of the mobile terminal 2000 through the current location determining module 2120 (S13). Typically, a tablet PC or a smart phone, which is an access terminal, may check its location coordinate value by using a wireless signal such as a GPS receiving module 2210, WiFi, or 3G. The location information of the mobile terminal 2000 may be determined through GPS information or information related to the wireless network 3000 to which the mobile terminal 2000 is connected. In order to obtain the location coordinate value or the location information value, the mobile terminal generally uses the location value of GPS, and the location value using A-GPS when the mobile communication company is subscribed. In addition, in WiFi, the AP (coordinate value of the AP can be registered and maintained using GPS) by using a nearby AP (fixed position). The relative distance can be determined using the RSSI (signal strength value) of the known value, and the relative distance value is obtained from three or more APs to obtain its own position value by triangulation method.

The location information is a location information value at which the terminal is located, and becomes a longitude value and a latitude value indicating a specific location in the GPS receiving module 2210 or a wireless network access location determining module 2220 using a wireless signal such as WiFi or 3G. It becomes location information to grasp.

Subsequently, the security policy enforcement determination module 2130 of the mobile terminal 2000 inquires the location-based security policy and determines whether the current location is subject to the security policy (S14). For example, in the example of Table 3, the current location module 2120 included in the mobile terminal 2000 of the user ID 444 has a current location having a location information range of <+37.484, +126.893> to <+37.485. If it is determined that the product development room is +126.903>, the security policy enforcement determination module 2130 searches the security policy DB 2160 for the current location information value for the ID 444 to identify a security policy item that is restricted. do. The security policy enforcement determination module 2130 determines that security policies such as camera interruption, ActiveSync interruption, WiFi interruption, Bluetooth interruption, E-mail interruption, and Web interruption are applied to the ID 44.

On the other hand, the security policy may be managed for each application by introducing anyone as shown in Table 4.

Applicable object Secure location Security policy Position value checking interval (seconds) anyone <+37.184, +126.193> to <+37.985, +126.903> Camera off 60 marketing <+37.484, +126.893> to <+37.486, +126.903> Wifi off 10

When the security policy as shown in Table 4 is determined, the entire camera is restricted from using the camera function. In other words, everyone is anyone, and the security location is <+37.484, +126.893> to <+37.485, +126.903>, which corresponds to the entire company area. The security policy is camera off. Is performed. On the other hand, if there is a security policy as shown in Table 4, the marketing department will not be able to use Wifi in a specific location.

In the present invention, the representation of the security location is represented by a rectangle display method in a manner such as <+37.184, +126.193> to <+37.985, +126.903>. It may be determined by a combination of one or more squares. It is natural that the entire company or a certain area cannot be square, so it would be appropriate to manage the whole company or a specific area by combining n (n is a natural number) rectangular areas. It will be apparent to those skilled in the art that the various types of zones are divided into n rectangular zones having the same size or shape, or different, and the method for displaying the security position for each rectangular zone is described above. It is obvious to those skilled in the art as described herein to manage a secured location by creating a range set of coordinate values (one rectangle becomes one coordinate value range, and if there are n such coordinate value ranges). something to do.

Table 5 is another example of the application of the security policy.

Company employee information (personnel DB) can be maintained as follows. ID Terminal Affiliation 444 11.22.33.44.55.67 marketing, anyone 888 11.ab.cd.ef.22.55 technical-supporting, anyone

For example, if the current location of ID 444 exists at <+37.384, +126.793> as above, then according to the security policy in Table 4, the anyone security policy exists in the enforced security location, but the marketing security policy is Since it is out of the applied position, only the camera is turned off. The mandatory policy is applied after checking the location value every 60 seconds, so if the terminal leaves the security position after 60 seconds, the camera function can be used. On the other hand, in the case of inside the company / inside the building, the terminal is connected to the AP installed inside, and according to the security policy it may be possible to control the security policy more finely according to the location, such as the distinction between the floor using the AP and the coordinate value.

Subsequently, the security policy enforcement module 2140 implements location-based security, including step S15 of enforcing the security policy. In the above example, the security policy enforcement module 2140 allows the mobile terminal 2000 with the ID 444 to execute Camera stop, ActiveSync stop, WiFi stop, Bluetooth stop, E-mail stop, and Web stop. How security policy is enforced will depend on the security policy item. For example, in the case of a camera interruption, the operation of a program exposed to the user related to the camera operation is stopped or disabled, or any one or more of various embedded programs related to the operation of the camera are stopped, or the operation is stopped. By blocking, the camera can be disabled.

3 is an exemplary flow diagram of a method for performing location based security support in a mobile terminal 2000 that includes processing of an updated security policy corresponding to current location information of the mobile terminal 2000.

The current location determining module 2120 of the mobile terminal 2000 determines the current location of the mobile terminal 2000 by using location information obtained through the location information receiving module 2200 of the mobile terminal 2000 (S21). do. Subsequently, the wireless communication module 2300 is used to transmit the current location of the mobile terminal 2000 to the location-based security support system 1000 (S22). The location-based security policy server 1100 determines whether the security policy is updated by referring to the security level of the user of the mobile terminal 2000 based on the current location of the mobile terminal 2000. When the security policy is updated, the location-based security support system 1000 transmits the updated security policy to the mobile terminal 2000 through the security policy transmission module 1120. The security policy receiving module 2110 of the mobile terminal 2000 receives an updated security policy transmitted by the location-based security support system 1000 (S23), and stores the updated security policy (S24). . Through this process, the security policy at the present time of the mobile terminal 2000 may be synchronized. Subsequently, the security policy enforcement determination module 2130 determines whether to execute the updated security policy to the mobile terminal 2000 based on the current location of the mobile terminal 2000 (S25), and If enforcement is required, the security policy enforcement module 2140 enforces the updated security policy (S26).

4 is an exemplary flow diagram of how location-based security support is performed at the location-based security policy server 1100.

The location-based security policy server 1100 of the location-based security support system 1000 permits access of the mobile terminal 2000 (S31) and manages the mobile terminal 2000 managing the mobile terminal 2000. After inquiring (S32), a security policy to be transmitted to the mobile terminal 2000 is determined (S33), and the determined security policy is transmitted to the mobile terminal 2000 (S34).

FIG. 5 is an exemplary flowchart illustrating a method of performing location based security support in a location based security policy server 1100 for processing an updated security policy corresponding to current location information of a mobile terminal 2000.

The location-based security policy server 1100 of the location-based security support system 1000 allows the mobile terminal 2000 to access (S41) and receives the current location of the mobile terminal 2000 (S42). The location-based security policy server 1100 selectively grasps a security location according to the current location of the mobile terminal 2000 (S43), and if it is not a security location, a security policy to be transmitted is unnecessary, and thus a security location is determined. You can figure it out first. Meanwhile, the location-based security policy server 1100 may not perform a step of determining a security location according to the current location of the mobile terminal 2000. That is, the location-based security policy server 1100 only needs to transmit a security policy to the mobile terminal 2000 (for one reason, the physical size of the security policy file may be quite small). Since there is a security policy according to the current location, it may be unnecessary to determine whether the current location of the mobile terminal 2000 is subject to the security policy. This is because the location-based security module 2100 of the mobile terminal 2000 executes the security policy according to the current location of the mobile terminal 2000 when there is a transmitted security policy. Subsequently, the location-based security policy server 1100 inquires (S44) a management DB of the mobile terminal 2000, determines a security policy to be transmitted (S45), and then transmits the security policy (S46).

FIG. 6 is an exemplary flow diagram of a method for location based security support in a location based security policy server 1100 that performs information processing related to updating of a security policy.

The location-based security policy server 1100 of the location-based security support system 1000 obtains an updated security policy from an administrator of the location-based security policy server 1100 (S51). The updated security policy may be a security policy item restricted by location information, or may be a security policy item restricted by location information by rank of a user ID. The security policy registration module 1110 of the location-based security policy server 1100 registers the updated security policy (S52). The location-based security policy server 1100 allows access of the mobile terminal 2000 (S53), inquires a management DB of the mobile terminal 2000 (S54), and then determines a security policy to be transmitted (S55). It may be. In this case, a different security policy may be transmitted for each mobile terminal 2000. For example, marketing managers and material managers may have different security policies for different location information. Meanwhile, the same security policy is transmitted for each mobile terminal 2000, and the ID of the user (information for identifying the mobile terminal 2000 is sufficient for the ID) in the transmitted security policy information. ) Includes a security policy for each phone number, SN, USIM or SIM chip number, and Mac Address, and a security policy corresponding to information for identifying the mobile terminal 2000 in the mobile terminal 2000. The method of application may also be applied. However, this method may have a problem in that forgery or manipulation by the mobile terminal 2000 holder is enabled. Then, the location-based security policy server 1100 transmits the updated security policy (S56).

7 is an exemplary flow diagram of a process in which location based security support is performed between a location based security policy server 1100 and a mobile terminal 2000.

The mobile terminal 2000 is provided with a location-based security module 2100, which is a location-based security application, and the location-based security module 2100 processes information for executing the security policy with the location-based security policy server 1100. Perform The mobile terminal 2000 may display information on the screen display device of the mobile terminal 2000 or provide a voice for confirming information on the use of the restricted function according to the security policy enforcement. The security policy enforcement module 2140 of the mobile terminal 2000 transmits information about the enforced security policy to the location based security policy server 1100. The administrator may register location information through the location-based security policy server 1100 and check the terminal status and user information of the mobile terminal 2000.

INDUSTRIAL APPLICABILITY The present invention can be comprehensively applied to a security industry, a mobile industry, a mobile communication related information business, and a mobile communication related service industry.

1000: location-based security support system
1100: Location-based Security Policy Server
1110: security policy registration module
1120: security policy transmission module
1130: terminal current location information receiving module
1140: secure location determination module
1150: security policy acquisition module
1160: mobile terminal management module
1170: security policy central DB
1180: mobile terminal management DB
1200: wired and wireless networks
1300: administrator computer
2000: mobile terminal
2100: location-based security module
2110: security policy receiving module
2120: current location module
2130: security policy enforcement judgment module
2140: security policy enforcement module
2150: current position transmission module
2160: security policy DB
2200: location information module
2210: GPS Receiving Module
2220: wireless network access location module
2300: Wireless Communication Module
2400: Mounted Program
2500: Mounting Device
3000: Wireless Network

Claims (21)

In the method for implementing location-based security in a mobile terminal, the mobile terminal
(A) accessing a location-based security policy server that manages a location-based security policy, and receiving a location-based security policy from the location-based security policy server to be transmitted to the mobile terminal;
(B) storing the location based security policy;
(C) determining the current location of the mobile terminal;
(D) querying the transmitted location-based security policy to determine whether at least one function provided by the mobile terminal is subject to a security policy in relation to the current location;
(E) enforces a security policy for each function provided by the mobile terminal, and if it corresponds to a preset security processing content based on the location information of the terminal for each function of the mobile terminal, the function for each function provided by the mobile terminal; Controlling the operation and non-operation of the function;
(F) when at least one non-operating function among functions provided by the mobile terminal is present, displaying the enforced security policy information related to the fact that the function is disabled on the screen display device of the mobile terminal; And
(G) transmitting the enforced security policy information to the location based security policy server;
The function provided by the mobile terminal is one of a function of a preset program driven in the mobile terminal and an operation control function of a preset device included in the mobile terminal.
The location-based security policy is to include the location information and the security processing corresponding to the location information,
The security processing may include at least one of whether a preset program is operated, whether a preset device is controlled, whether a preset function module is operated, and authority management in a preset program. How to implement security. delete delete The method of claim 1,
The program may be any one or more of a mail program, a network connection program, a preset communication module operation program, a preset device operation program, a preset function module operation program, a third terminal connection program, and a third system connection program. How to implement location-based security. The method of claim 1,
The location information includes a coordinate value including latitude and longitude information, a coordinate value range including latitude and longitude information, a cell value of a mobile communication network, a cell value range of a mobile communication network, a location address value of a wireless AP, and a location address of a wireless AP. Location-based security implementation method, characterized in that any one or more of the value range. The method of claim 1,
Determining current location information of the mobile terminal;
Transmitting current location information of the mobile terminal through a wireless network to a location based security policy server that manages location based security policies; And
Receiving an updated location based security policy corresponding to the current location information of the mobile terminal from the location based security policy server;
Storing the updated location based security policy;
Determining whether to execute the updated security policy; And
And executing the updated security policy based on the current location information. The method of claim 1,
The identification of the current location is a location-based security implementation method characterized in that it is determined by the GPS information included in the mobile terminal and the access location information to the wireless network. The method of claim 1,
Determining whether the current location is subject to security policy by querying the location-based security policy
Querying whether the current location is location information present in the location based security policy; and
If the location information exists in the location-based security policy, querying whether the security processing contents registered in the location-based security policy exist in the mobile terminal. The method of claim 8,
And executing the security policy is to execute a preset security policy with respect to the inquired security processing contents. The method of claim 1,
Determining current location information of the mobile terminal;
Querying the stored location-based security policy for current location information of the mobile terminal; And
Releasing the location-based security policy only for the security processing content without the corresponding content when there is no corresponding content on the basis of the current location information of the mobile terminal. Based security implementation. delete delete A computer readable recording medium carrying out the method of claim 1. A mobile terminal comprising the recording medium of claim 13. delete delete delete delete delete delete delete

Images