SECURITY METHOD AND SECURITY SYSTEM AT ENDPOINT STAGE ACCORDING TO USER POLICY SETTING

摘要

The present invention relates to a device for automatically encoding and decoding a file and a method for preventing a file from being transferred and copied into a USB at an endpoint stage based on Windows operating system (OS), in order to prevent internal information from being leaked. According to the present invention, a data security method at an endpoint stage based on Windows OS comprises the steps of: encoding a file on a kernel mode operated in a file drive of the Windows OS; and decoding the encoded file on a user mode realized by the registry of the Windows OS. In addition, the steps of encoding and decoding are selectively executed for a data file set according to user policy established in the user mode in the Windows OS. According to the present invention as described above, files are not operated during file I/O processing by applying a post-processing method when encoding files; and when decoding files, index information on encoded files are registered in the registry and related decoding modules are automatically called to decode the files, thus damage or errors in files during encoding or decoding processes can be specifically reduced.;COPYRIGHT KIPO 2015