Data management method, computer readable recording medium thereof, user client for executing data management method, and security policy server

1. A data management method executed by a user client which is network-linked to a DB server and a security policy server, wherein a security program is installed in the user client, the security program having a user right policy management function and a function for detecting whether a DB control application is executed, wherein the user right policy is related to setting a user right for at least one of reading, editing, printing, capturing of a screen, decryption, and printing of a watermark for the data that is encrypted and managed by the user client and wherein the security policy server stores and manages at least one of first security information for the DB control application that is allowed to be used for each user ID, and second security information for the DB server that is allowed to be accessed by each user ID, the method comprising:

1) by the user client, recognizing a user ID through a user authentication, wherein the first security information and the second security information are transmitted from the security policy server to the user client when the user authentication is performed;

2) by the user client, detecting whether a DB control application is executed;

3) by the user client, determining whether the DB control application, of which the execution is detected, is allowed to be used for the user ID;

4) by the user client, determining whether the DB server, to which an access attempted, is allowed to be accessed by the user ID when determining that the DB control application is allowed to be used;

5) by the user client, allowing access to the DB server when determining that the DB server is allowed to be accessed; and

6) by the user client, when data is transmitted from the DB server as a result of the access, encrypting and managing of the transmitted data according to a preset user right policy.

2. The data management method of claim 1 , wherein the second security information includes at least one of information of an IP address, a port address, and a used protocol of the DB server that is allowed to be accessed by each user ID.

3. The data management method of claim 2 , wherein the user authentication of step 1) is performed in response to a request of the user client for the user authentication from the security policy server.

4. The data management method of claim 1 , wherein after the user authentication of step 1), a session connection between the user client and the DB server that is allowed to be accessed by the user ID is performed based on the second security information.

5. The data management method of claim 4 , further comprising: after the session connection is performed,

101 ) periodically transmitting session maintenance confirmation data by the user client to the DB server; and

102 ) maintaining the session connection when the DB server normally receives the session maintenance confirmation data.

6. The data management method of claim 1 , wherein the user right policy is transmitted from the security policy server to the user client when the user authentication of step 1) is performed, or is transmitted from the security policy server when the user client requests the user right policy to set a user right for encrypting and managing the data of step 6).

7. A non-transitory computer readable recording medium storing a computer program for executing a data management method at a computer, the data management method being executed by a user client which is network-linked to a DB server and a security policy server, wherein the computer program is a security program installed in the user client, the security program having a user right policy management function and a function for detecting whether a DB control application is executed, wherein the user right policy is related to setting a user right for at least one of reading, editing, printing, capturing of a screen, decryption, and printing of a watermark for the data that is encrypted and managed by the user client and wherein the security policy server stores and manages at least one of first security information for the DB control application that is allowed to be used for each user ID, and second security information for the DB server that is allowed to be accessed by each user ID, the method comprising:

1) recognizing a user ID through a user authentication;

2) detecting whether a DB control application is executed;

3) determining whether the DB control application, of which the execution is detected, is allowed to be used for the user ID;

4) determining whether the DB server, to which an access attempted, is allowed to be accessed by the user ID when determining that the DB control application is allowed to be used;

5) allowing access to the DB server when determining that the DB server is allowed to be accessed; and

6) when data is transmitted from the DB server as a result of the access, encrypting and managing of the transmitted data according to a preset user right policy.