Abstract: Disclosed are a method and a device for compressing and decompressing unit files when encrypting an electronic publication (EPUB) file. The method for compressing unit files for EPUB file encryption comprises: a step of determining an encryption target unit file from among a plurality of unit files forming an EPUB file; a step of performing encryption of the compressed encryption target unit file; and a step of performing compression of general unit files among the plurality of unit files in addition to the encryption target unit file. As such, by performing compression of the encryption target unit file before the general unit files, it is possible to effectively reduce the size of a single packaged EPUB file.

Abstract: Disclosed are a method and an apparatus for de-identification of personal information. The method for de-identification of personal information comprises the steps of: obtaining, from a database, a raw table including records in which raw data indicating the personal information is recorded; generating generalized data by generalizing the raw data recorded in each of the records included in the raw table; setting a generalized hierarchical model consisting of the raw data and the generalized data; generating a raw lattice including a plurality of candidate nodes on the basis of the generalized hierarchical model; and setting, from among the plurality of candidate nodes included in the raw lattice, a final lattice including at least one candidate node satisfying a predetermined criterion. Thus, it is possible for the personal information to be efficiently de-identified.

Abstract: A technology related to a method and apparatus for providing a relation note using correlation is disclosed. The method for providing the relation note, which is performed by a relation note providing server interworking with a user terminal, comprises the steps of: receiving one or more generated notes from the user terminal; updating, according to a configurable reference, correlation between notes indicating a relation between the one or more notes; and providing the one or more notes to the user terminal on the basis of the correlation between the notes. Therefore, the method may provide a user interface which is intelligent and smart to enable a plurality of notes to be more effectively identified and managed on the basis of the correlation.

Abstract: A technology related to a method and apparatus for providing a relation note using correlation is disclosed. The method for providing the relation note, which is performed by a relation note providing server interworking with a user terminal, comprises the steps of: receiving one or more generated notes from the user terminal; updating, according to a configurable reference, correlation between notes indicating a relation between the one or more notes; and providing the one or more notes to the user terminal on the basis of the correlation between the notes. Therefore, the method may provide a user interface which is intelligent and smart to enable a plurality of notes to be more effectively identified and managed on the basis of the correlation.

Abstract: Disclosed are a method and device for calculating a correlation between notes using a database constructed on a basis of artificial intelligence, and supporting a service for the notes on a basis of the calculated correlation. A method by which a note providing device that interworks with a user terminal provides notes, includes: constructing a keyword DB by extracting a keyword from a note generated through the user terminal and reflecting a weight calculated through machine learning using the extracted keyword; and calculating a correlation score for each of a plurality of target notes correlated with a reference note using the keyword DB. Therefore, the method and device for providing the notes using the artificial intelligence-based correlation calculation can more accurately recommend the correlated notes by reflecting the interaction of the user.

Abstract: The present invention relates to a method and an apparatus for generating an index for an encrypted field in order to protect private information in database. The method for generating the index for the encrypted field according to an embodiment of the present invention constructs an index as encrypted data itself without decrypting and storing contents of the encrypted field, constructs an index using distance information between encrypted data and a pre-configured reference value when the index is constructed, calculates a distance value from the reference value even when a search is performed, and performs a search by comparing the distance value with constructed index information table. In particular, when duplicated data exists, the present invention configures the duplicated data as a set of lower leaf nodes for a leaf node, thereby minimizing a search time.

Abstract: The present invention provides a data management method, a computer program for the same, a recording medium thereof, a user client for executing the method, and a security policy server. The method is executed by a user client that is network-linked to a DB server and a security policy server, the method including: 1) recognizing a user ID through a user authentication; 2) detecting whether a DB control application is executed; 3) determining whether the application is allowed to be used for the user ID; 4) determining whether the DB server is allowed to be accessed by the user ID when determining that the application is allowed to be used; 5) allowing access to the DB server when determining that the DB server is allowed to be accessed; and 6) when data is transmitted from the DB server, encrypting and managing the data according to a preset user right policy.

Abstract: Disclosed are a method and an apparatus for de-identification of personal information. The method for de-identification of personal information comprises the steps of: obtaining, from a database, a raw table including records in which raw data indicating the personal information is recorded; generating generalized data by generalizing the raw data recorded in each of the records included in the raw table; setting a generalized hierarchical model consisting of the raw data and the generalized data; generating a raw lattice including a plurality of candidate nodes on the basis of the generalized hierarchical model; and setting, from among the plurality of candidate nodes included in the raw lattice, a final lattice including at least one candidate node satisfying a predetermined criterion. Thus, it is possible for the personal information to be efficiently de-identified.

Abstract: Disclosed is an apparatus for controlling access to a security content using near field network communication of mobile devices. A policy issuance provider registration unit requests a content security policy for a first content, a security content, to a service server, receives the content security policy for the first content, requests to the service server for a first mobile device to be registered as a content security policy issuance provider, and receives a result of registration and a provider policy from the service server. A policy issuance provider converting unit converts the first mobile device to the content security policy issuance provider when receiving a request for access for browsing the first content through near-field network communication from another mobile device in which a DRM client application is being executed.

Abstract: A device and a method for encoding a data column are disclosed. A schema inquiry unit inquires into a schema of an original table which is a data table for performing encoding in a database in which a plurality of data tables are stored. A backup performing unit generates schema information of a backup table on the basis of the schema of the original table, generates a backup table by using the schema information of the backup table so as to copy data of the original table into the backup table, changes the original table by adding a backup column to the original table, and inactivates constraint conditions included in the changed original table so as to copy original columns included in the changed original table into the backup column. An encoding unit encodes data of an encoding target column, a column in which encoding is to be performed in the changed original table, and enters the data in each field of the original columns of the changed original table.

Abstract: Disclosed are a file-processing device for executing a pre-processed file, and a recording medium for executing a related file-processing method in a computer. Once a request for registry information corresponding to the extension of a file is inputted according to a request for the execution of the file selected by the user, a registry-converting unit outputs a preset substitute value instead of the registry default value for executing a connection program corresponding to the extension of the file as the result value for the registry information request. A control unit pre-processes the file through a control program set in correspondence to the substitute value. A file-executing unit executes the file by executing the connection program of the file corresponding to the registry default value after pre-processing.

Abstract: Provided are an apparatus and method for managing security contents using a virtual folder.

Abstract: Disclosed are an apparatus and method for managing a digital copyright on electronic publication (EPUB)-based content and an apparatus and method for providing EPUB-based content according to a user's right. An encryption unit of the apparatus for managing digital copyright generates encrypted unit files by encrypting a plurality of unit files included in content in the form of a compressed archive including the plurality of unit files with different encryption keys, stores the encrypted unit files in a content database, generates mapping data by mapping the encryption keys to pieces of identification information of the encrypted unit files, and stores the mapping data in an encryption key database.

Abstract: There is provided a method and apparatus for displaying a watermark on a screen. According to the present invention, when an application is executed or a document is opened by a user's manipulation, it is determined whether a watermark is displayed based on a message generated from an operating system and screen watermark display policies, and when it is determined that the watermark is displayed, the watermark is displayed on a screen. According to the present invention, when the watermark is displayed on a screen, it is possible to provide a user with notification that corresponding content is important content or confidential content. Even when the screen is captured or is imaged using a camera, the watermark is displayed in the captured image or the imaged video. Therefore, it is possible to identify that the corresponding content is important content or confidential content. As a result, it is possible to increase user awareness of security.

Abstract: Disclosed is an apparatus for controlling access to a security content using near field network communication of mobile devices. A policy issuance provider registration unit requests a content security policy for a first content, a security content, to a service server, receives the content security policy for the first content, requests to the service server for a first mobile device to be registered as a content security policy issuance provider, and receives a result of registration and a provider policy from the service server. A policy issuance provider converting unit converts the first mobile device to the content security policy issuance provider when receiving a request for access for browsing the first content through near-field network communication from another mobile device in which a DRM client application is being executed.

Abstract: Provided are an apparatus and method for managing security contents using a virtual folder.

Abstract: Provided is a clipboard security system and method for improving security of data transmission made through a clipboard which is frequently used in utilization of a computer. An example of the clipboard security system includes a clipboard managing unit for storing data in a clipboard or extracting data from the clipboard in response to a request from one or more objects, in which the clipboard managing unit includes a data encrypting unit for encrypting the data for which storage is requested according to a trust relationship of an object which desires to store the data in the clipboard and a data decrypting unit for decrypting the encrypted data according to a trust relationship of an object which desires to extract the encrypted data stored in the clipboard.

Abstract: Disclosed are a hook re-entry prevention device and a recording medium, in which a program for executing the method thereof in a computer is recorded thereon. A state information management module sets or releases a state information flag which indicates whether a hook function is called. If the state information flag is set when the hook function is called, a re-entry prevention module determines that the calling of the hook function has been conducted from the inside of a hook layer and returns a value to a system layer. According to the present invention, an entry/breakaway layer which is independent from the hook layer functions in such a manner that the hook layer is safely isolated from the hook, thereby preventing hook re-entry caused by the callback of an original function of a lower function while a hook routine within the hook layer is performed during a dynamic API hooking.

Abstract: Provided are an application module injection device, a computing device including an application module injection function, and a recording medium that records a program for executing an application module injection method.

Abstract: Disclosed are a clipboard protection system in a DRM environment and a recording medium in which a program for executing the method in a computer is recorded. An identification information management unit changes first identification information of data, which is to be stored in a clipboard, into second identification information when data stored in the clipboard is requested by a reliable object, and outputs the second identification information corresponding to identification information of the reading target data if the reliable object requests extraction of the data stored in the clipboard. A data protection unit encodes the data, which is to be stored in the clipboard, and decodes the encoded data which is read from the clipboard.