KR101083425B1 - Database detection system and detection method using the same - Google Patents

Abstract

The present invention relates to a database detection system and a detection method. More particularly, the present invention relates to a detection system and a detection method for reliably retrieving stored data of a specific format regardless of the data management status of the database. A detection system for detecting stored data, comprising: a pattern generation module for receiving a data attribute including a search expression of the stored data and generating a data pattern for the search expression; A data matching module for retrieving the stored data from the database, comparing the data pattern with the stored data to determine whether the format is the same, and confirming location information of the stored data; And a result management module for storing location information transmitted from the data matching module.

Description

Database detection system and detection method using the same {DATABASE DETECTING SYSTEM AND DETECTING METHOD USING THE SAME}

The present invention relates to a database detection system and a detection method. More particularly, the present invention relates to a detection system and a detection method for reliably retrieving a particular type of stored data regardless of a data management status of a database.

A database is a collection of data that is organized and managed for the purpose of being shared and used by many people. The database is a system in which data stored and processed by various files or applications are integrated and managed centrally in one place, and the data managed in this way is increased in value through collective management.

The database should have the following characteristics and circumstances:

First, it stores and manages data that needs to be shared as a base for supplying data for a plurality of application tasks or application systems, rather than any specific application task or application system.

Second, it is a set of data organized according to the conceptual structure describing the characteristics of the data, the semantic and formal relations between entities.

Third, the same data should not be duplicated, various approaches should be in place, and search or update should be efficient.

Fourth, an auxiliary storage device that can be used in a computer such as a magnetic disk or a magnetic tape can be implemented as a database.

Fifth, data integrity must be guaranteed, and simultaneous access to the same data or failure recovery must be provided.

The database stores all data in a table in the form of a table. Here, a table is a basic structure for storing data in a database. A table is composed of one or more records. Subsequently, a record means a row of a table, and in another term, a tuple.

On the other hand, each record is composed of one or more columns, where a column refers to a domain representing a table item in the real world constituting a table, and in another term, an attribute or a field. Also called.

An administrator uses a database by selecting, inserting, updating, and deleting data in the database.

1 illustrates an example of a method of extracting a table or column including specific data from a database used in the related art. A method of extracting a column which is a table including specific data from a database used in the related art will be described with reference to FIG. 1.

The administrator connects to the database server through the DBMS (Data Base Management System). When the DBMS is used to query the data of a table, a query is transmitted through the DBMS. Here, the query refers to the administrator querying various requests such as newly defining or changing a database of the database server, retrieving or updating data, and the like. When a query is sent to the database server, the database server sends the results of the requested query. When the result value is output to the terminal, the administrator checks whether the result value includes specific data desired to be searched, and if it is included, the manager determines that it is the final detection object and records and stores the corresponding table and column.

The extraction process of tables and columns containing social security numbers will be described as an example.

Any database configured in the database server classifies and stores the stored data into various tables. The social security number is stored and managed as a column in the USER table, and the phone number is stored and managed as a column in the member table. However, in the present embodiment, since the administrator wants to extract a table and a column including the stored data about the social security number from the database, the query for selecting the USER table for the table lookup, which is a higher concept of the column, is "select * from User". In the terminal. The entered query is transmitted to the database server, and the database server searches the database for the USER table corresponding to the query and transmits the result to the terminal. Then, when the contents of the USER table is output to the terminal, the administrator determines that the resident registration number is included as a detection target and records and stores the table USER and the column name Jumin_num.

However, this extraction method is inconvenient and cumbersome to have to proceed separately for each database when there are a large number of databases provided in the database server. Since the data could not be retrieved easily, there was a problem that the reliability of the results provided by the database server was deteriorated in response to a query input by the administrator.

The present invention has been proposed to solve the above problems, and provides a database detection system and a detection method using the same that can easily retrieve and extract a specific type of stored data among the stored data stored in a plurality of databases. It is a task.

According to an aspect of the present invention,

A detection system for detecting stored data of a database,

A pattern generation module which receives a data property including a search expression of the stored data and generates a data pattern for the search expression;

A data matching module for retrieving the stored data from the database, comparing the data pattern with the stored data to determine whether the format is the same, and confirming location information of the stored data; And

A result management module for storing location information transmitted from the data matching module;

Detection system comprising a.

According to an aspect of the present invention,

A data property input step of inputting a data property including a search expression of stored data to be detected in a database into a data detection module;

A data pattern generation step of the data detection module confirming the search expression and generating a data pattern;

A data matching step of the data detection module accessing the database to retrieve the stored data, and matching the retrieved stored data with the data pattern to identify the location information of the stored data if they are identical; And

A detection step of the data detection module storing the position information;

Data detection method comprising a.

According to the present invention as described above, when detecting specific stored data present in a plurality of databases, by analyzing and patterning the attributes of the stored data to be detected, it is possible to search and extract the stored data efficiently and accurately.

In addition, it is possible to automatically extract stored data to which strong security policy is applied, so it is possible to collect the periodic data as well as establish the security policy by linking the target table and column information with the security server. There is a significant savings effect.

1 illustrates an example of a method of extracting a table or column including specific data from a database used in the related art.
2 is a block diagram showing a detection system according to an embodiment of the present invention;
3 is a block diagram illustrating the data detection module of FIG. 2 in more detail.
4 is a flowchart sequentially illustrating a data detection method according to an embodiment of the present invention.

The above-described features and effects of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, and thus, those skilled in the art to which the present invention pertains may easily implement the technical idea of the present invention. Could be. As the inventive concept allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the text. However, this is not intended to limit the present invention to the specific disclosure, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention.

Hereinafter, the most preferred embodiments of the present invention will be described with reference to the accompanying drawings so that those skilled in the art can easily implement the technical idea of the present invention. .

2 is a block diagram illustrating a detection system according to an exemplary embodiment.

The detection system according to the present invention includes a data detection module 100 for retrieving and extracting stored data of a database configured in the database server 200 by analyzing and patterning the data attribute DATA_F input to the terminal 300. do.

The data detection module 100 configured in the DBMS compares and matches the data attribute DATA_F inputted by the administrator to the terminal 300 and the stored data of the database server 200 to match the location information (LOC_T /) of the stored stored data. C) is stored as a detection result.

The data attribute DATA-F according to the present invention may be represented by a search expression by an administrator for the standardization of stored data to be searched and extracted.

Here, when the administrator wants to extract specific data, the search expression is an expression that corresponds to the format of the data to be extracted. The search expression is related to the attribute of the data to be extracted, and there are various expression methods.

As an example of a search expression, a type of specific data to be searched may be expressed as a regular expression. Regular expression is a language format used when expressing a specific set of character strings. The data detection module 100 is a search expression of a data attribute (DATA-F) input by an administrator and a format of stored data stored in a database. Is compared to determine the identity.

For example, the regular expression corresponding to the social security number can be expressed as "[0-9] {6}-(1 | 2 | 3 | 4) [0-9] {6}", which is from zero. There are six of the numbers 9, the first digit after it means any one of 1, 2, 3, or 4, followed by six of the numbers 0 through 9. Therefore, the first digit of the stored data consisting of the first six digits, "-" and the last seven digits means stored data followed by any one of 1, 2, 3 and 4. The first digit after the social security number represents the gender of the person with the social security number, and any number of 1, 2, 3, or 4 is selected according to the gender and the range of the year of birth. For males it will be either 1 or 3, and for females it will be 2 or 4.

[0-9] [0-9] [0-9] [0-9] [0-9] [0-9]-[0-9] [0-9] [ 0-9] [0-9] [0-9] [0-9] [0-9].

Another search for a social security number can be expressed as [0-9] {6}-(M | F)) [0-9] {6}, [0-9] [0-9] [0 -9] [0-9] [0-9] [0-9]-(M | F) [0-9] [0-9] [0-9] [0-9] [0-9] [ 0-9]. Where M and F represent Male and Female, meaning male and female. In this case, M and F correspond to specific numbers.

As another example of a search expression, a case where a data related to a date is extracted from a database is described as an example. Dates stored in the database are commonly stored in the form of years (numbers)-months (numbers)-days (numbers), and in the case of a year, they are represented by two or four digits. For months and days, two or one digits are represented. If you want to express a search expression to extract data related to date, express it as [0-9] [0-9]-[0-9] [0-9]-[0-9] [0-9] Depending on the expression format, it can be expressed as [0-9] [0-9] [0-9] [0-9]-[0-9] [0-9]-[0-9] [0-9]. . Or [0-9] {2}-[0-9] {2}-[0-9] {2} or [0-9] {4}-[0-9] {2}-[0 -9] can also be expressed in the form {2}. Alternatively, a non-numeric character such as the above expression may be used to express yy-mm-dd or YY-MM-DD. In this case, the letters correspond to natural numbers between 0 and 9, respectively.

If you want to extract only data related to a specific year, month or day of the data related to the date as described above, it is necessary to specify the year, month or day to be extracted. For example, if data related to December is needed, the search expression can be expressed as yy- [1] [2] -dd.

As described above, the search expression may be variously expressed even when searching for the same object, and may be represented by a regular expression or may be expressed in various forms such as a combination of letters or a combination of numbers and letters. In the case of the search expression, the administrator can change the expression appropriately according to the data to be extracted and input it in various ways so that more efficient search is possible.

For reference, the stored data of the database server 200 may be mainly a personal information or security data (resident registration number, phone number, etc.) that may cause a problem when the external leakage, such stored data is most of the search formula as described above It can be expressed as

3 is a block diagram illustrating in more detail the data detection module of FIG. 2.

The data detection module 100 according to the present invention includes a pattern generation module 110, a table lookup module 120, a data matching module 130, and a result management module 140.

The pattern generation module 110 reads and analyzes the data attribute DATA_F inputted by the administrator to the terminal 300 to determine whether the search expression included in the data attribute DATA_F is valid, and the data pattern (Pattern) corresponding to the pattern. DATA_P).

The administrator may attempt to search the stored data for various contents, and input various search expressions for this purpose. Accordingly, the pattern generation module 110 may generate a pattern list corresponding to the various search expressions.

The database inquiry module 120 provides the configuration data DATA_A so that the data matching module 130 can access a specific database of the database server 200, and accesses the corresponding database to query the contents of the system table. Retrieve and create a list of tables (LIST_T).

Here, the environment setting data DATA_A is data including connection information necessary for accessing a specific database, and the system table is data for storing and managing a list of tables stored in the database. In general, in order to access a database, a connection program corresponding to an operation environment of the database must be provided. Therefore, the database connection dedicated configuration data DATA_A is necessarily provided in a system having a database. Therefore, when a plurality of databases in the database server 200 all run in different operating environments, it will be obvious that the environment setting data DATA_A corresponding to the database should be provided.

The data matching module 130 receives the table list LIST_T and the configuration data DATA_A from the database inquiry module 120, and then accesses the database and inquires the tables and stored data in the database. Since the table list LIST_T includes all table information existing in the corresponding database, the data matching module 130 creates a data query query for each table and searches the stored data for the corresponding table.

The data matching module 130 compares the inquired stored data with the data pattern DATA_P transmitted from the pattern generation module 110 and determines whether the matched data is matched, thereby determining whether the stored data is a detection target. When the random stored data matches the data pattern DATA_P during the comparison process, the data matching module 130 transmits the location information (table name and column name) of the random stored data to the result management module 140 and inquires. The matching operation of comparing the stored data with the data pattern DATA_P is continuously performed.

The result management module 140 checks whether the location information transmitted from the data matching module 130 is redundant and determines and stores the location information LOC_T / C as a detection result when the location information is not duplicated.

4 is a flowchart sequentially illustrating a data detection method according to an embodiment of the present invention.

S10; Data Attribute Entry Step

In order to retrieve and extract stored data from the database 200, the administrator inputs a data attribute DATA_F related to the stored data to the terminal, and transmits the data attribute DATA_F to the data detection module 100 of the DBMS.

As mentioned above, the data property DATA_F includes a search expression of stored data that the administrator wants to search.

S20; Data pattern generation step

The pattern generation module 110 of the data detection module 100 determines the validity by checking the search expression, and generates a data pattern DATA_P.

S30; Table list generation step

The database inquiry module 120 transmits the environment setting data DATA_A to the data matching module 130 so that the data matching module 130 can access the corresponding database of the database server 200, and creates a corresponding connection environment. After accessing to check the table list (LIST_T) and delivers it to the data matching module 130.

As mentioned above, the table list LIST_T stores all table information existing in the database, and the data matching module 130 searches for the stored data corresponding to the search expression and the corresponding tables and columns with reference thereto. can do.

The detection system according to the present invention may be applied to one database or may be applied to a plurality of databases separated from each other. In the latter case, the operating environment of each database may be the same or different.

Therefore, even if there is only one or a plurality of databases in the database server 200 to which the detection system according to the present invention is applied, if driven based on one operating environment, the database inquiry module 120 matches the configuration data DATA_A with data matching. It will not be delivered to module 130 one by one. However, if a plurality of databases are driven based on different operating environments, the database query module 120 will provide the configuration data DATA_A so that the data matching module 130 can seamlessly access all the databases.

S40; Data matching step

The data matching module 130 normally connects to the relevant database through the configuration data DATA_A, searches for stored data, and performs a matching process between the stored stored data and the data pattern DATA_P.

S50; Detection step

When it is confirmed that the stored data and the data pattern DATA_P match in the matching process by the data matching module 130, the result management module 140 checks and stores the location information LOC_T / C of the stored data. Then, it is confirmed whether or not the duplicated position information is recorded and confirmed as the final detection result.

The present invention can automatically extract the location information (table name / column name) holding the specific data by data patterning the specific data through the data attribute defined by the search expression, thereby improving the efficiency and accuracy of the extraction operation. There is.

The stored data of the database may be added, deleted, or modified according to the use thereof. The detection system and the detection method according to the present invention, even with such a change of the stored data, may automate the periodic information regardless of the change of the stored data. Since it can be collected, it is possible to use more efficient data.

In addition, automatic extraction of security data is possible, so that the security policy can be established by linking the extracted target table and column information with the security server, thereby enhancing the security of the data and saving the cost and time required for the security policy. It is effective.

The present invention described above is not limited to the above-described embodiments and the accompanying drawings, and it is common in the art that various substitutions, modifications, and changes can be made without departing from the technical spirit of the present invention. It will be evident to those who have knowledge of.

Claims (7)

A detection system for detecting stored data of a database,
A pattern generation module which receives a data property including a search expression of the stored data and generates a data pattern for the search expression;
A data matching module for retrieving the stored data from the database, comparing the data pattern with the stored data to determine whether the format is the same, and confirming location information of the stored data; And
A result management module for storing location information transmitted from the data matching module;
Detection system comprising a. The method of claim 1,
And a database query module for accessing the database, querying a system table storing a table list of the database, and generating a table list, wherein the data matching module retrieves the stored data from the database according to the table list. Characterized in that the detection system. The method of claim 1,
The configuration data is transmitted to the data matching module so that the data matching module can access a database, and the system is connected to the database to query the system table in which the table list of the database is stored and generate a table list therefor. Further comprising a database inquiry module;
And the data matching module accesses the database through the configuration data and retrieves the stored data from the database according to the table list. The method according to any one of claims 1 to 3,
And the position information is a table name or a column name of a database in which the stored data exists. The method of claim 1,
The search system is characterized in that the regular expression. A data property input step of inputting a data property including a search expression of stored data to be detected in a database into a data detection module;
A data pattern generation step of the data detection module confirming the search expression and generating a data pattern;
A data matching step of the data detection module accessing the database to retrieve the stored data, and matching the retrieved stored data with the data pattern to identify the location information of the stored data if they are identical; And
A detection step of the data detection module storing the position information;
Data detection method comprising a. The method according to claim 6,
In the data matching step, the data detection module accesses the database, inquires a system table in which a table list of the database is stored, generates a table list therefor, and retrieves the stored data from the database according to the table list. A data detection method, characterized in that.

Images