Ship cybersecurity design method and cybersecurity guide service provision system and method using the same

Abstract

The present invention proposes a ship cybersecurity design method and a cybersecurity guide service provision system and method using the same, comprising: a storage stage for storing a cybersecurity design database that reflects the cybersecurity requirements of shipowners and classification societies, ship cybersecurity regulations and standards; a generation stage for generating a new ship design cybersecurity process based on the cybersecurity design database stored through the storage stage; a feedback stage for feeding back changes in the external cybersecurity environment that occur during the ship construction period to be applied to the new ship when building a ship through the new ship design cybersecurity process generated through the generation stage; and a display stage for visualizing and displaying the cybersecurity matters provided in the feedback stage and activities during the ship construction period on a dashboard.

Description

Technical Field

[0001] The present invention relates to a ship cyber security design method, which includes cyber security technology and policies that reflect the requirements of shipowners and classification societies necessary for new shipbuilding and security issues, cyber security design in the shipbuilding stage required for the application of such technology and policies, and learning various cyber security information-related materials of different national classification societies based on artificial intelligence, and providing appropriate cyber security-related information to users based on real-time threat information of ships.

Background Art

[0002] Traditionally, ships have been built with a focus on safe navigation. However, as ICS technology is integrated into the shipbuilding and marine industries, the cyber risks to ships have increased. The International Association of Classification Societies (IACS) and the International Maritime Organization (IMO) have also started to consider ship cyber security design.

[0003] Security design for software is used when designing and manufacturing software with Secure Software Development Life Cycle (SDLC). However, this is only applicable to software and there is no specific methodology that reflects the particularities of moving objects such as ships, shipbuilding as a facility, and the marine industry.

[0004] In addition, although IACS and IMO require ship designs that take cyber security into consideration, they have not presented a specific methodology. Also, in new shipbuilding designs, customers (shipowners) hope that cyber security requirements and various cyber security regulations will be appropriately applied. However, since there are no established standards and processes, there is no means to provide information on the impact of cyber security requirements on costs and processes. <00​Furthermore, while the design and construction phases of new ships require considerable time, the external environment, including ICT technology and cybersecurity, is rapidly evolving with the development of software. Consequently, changes in the external environment may necessitate security improvements throughout the entire design cycle for the initially designed systems and configuration requirements. In reality, there is a lack of explicit cybersecurity standards in ship cybersecurity design, which can affect ship costs and construction timelines.

[0006] Furthermore, in the past, ship cybersecurity officers would analyze printed or file-based documents to verify that appropriate guidelines were in place, categorized by ship classification, ship profile, and ship condition, before taking appropriate action.

[0007] However, it was difficult to keep track of the latest cybersecurity guidelines for each country's class of ships, and there was a problem in that immediate verification was difficult when passing through a third country while a ship was in transit.

[0008] Furthermore, because it is difficult to grasp specific cybersecurity guidelines based on diverse ship classifications, vessel profiles, and conditions, there is a need to confirm response procedures in the event of a cybersecurity incident, which can lead to a lack of cybersecurity experts.

[0009] Related prior art includes Korean Patent No. 10-2187710 (December 8, 2020), Korean Patent No. 10-1137452 (April 20, 2012), and Korean Patent No. 10-2295948 (August 30, 2021). [Overview of the Initiative] [Problems that the invention aims to solve]

[0010] The objective of this invention is to provide a cybersecurity design method for the shipbuilding stage that involves creating databases (DBs) of shipowner cybersecurity requirements, classification society cybersecurity requirements, cybersecurity regulations such as international standards, best practices, and security threat information that must be considered during the new shipbuilding design stage, implementing a new shipbuilding cybersecurity process based on these databases (DBs), applying this to the shipbuilding process, and appropriately adapting and feeding back changes in the external cybersecurity environment to the new ship during the construction period.

[0011] Another objective of the present invention is to provide an artificial intelligence-based interactive cybersecurity guidance service and device that enables the understanding and implementation of specific and accurate cybersecurity guidance through an AI service based on diverse ship classifications / ship profiles / conditions in real time.

[0012] Another objective of the present invention is to provide an artificial intelligence-based interactive cybersecurity guide service and device that allows users to check response plans in the event of a cybersecurity incident online in real time and to receive specialized cybersecurity services. [Means for solving the problem]

[0013] A cybersecurity design method for the shipbuilding stage according to one aspect of the present invention for achieving the aforementioned technical challenges includes: a storage stage for storing a cybersecurity design database that reflects the cybersecurity requirements of shipowners and classification societies, as well as ship cybersecurity regulations and standards; a generation stage for generating a new shipbuilding cybersecurity process based on the cybersecurity design database stored through the storage stage; a feedback stage for feeding back changes in the external cybersecurity environment that occur during the shipbuilding period to be applied to the new ship when building a ship through the new shipbuilding cybersecurity process generated in the generation stage; and a display stage for visualizing and displaying the cybersecurity matters provided in the feedback stage and the activities during the shipbuilding period on a dashboard.

[0014] Furthermore, in the cybersecurity design method during the shipbuilding stage according to one aspect of the present invention, the step of storing the design database further includes a database of cybersecurity model cases and threats, and the cybersecurity design database can be stored and reflected in the progress of the new shipbuilding cybersecurity process.

[0015] Furthermore, the cybersecurity design method for the shipbuilding stage according to one aspect of the present invention allows for the storage and updating of a series of activities related to cybersecurity matters confirmed in the feedback stage in a ship cybersecurity design database.

[0016] Furthermore, in the cybersecurity design method during the shipbuilding stage according to one aspect of the present invention, the display stage can be supported so that the cybersecurity changes of the shipowner, yard, and each equipment and materials company are displayed together in order to recognize and manage them.

[0017] Furthermore, according to one aspect of the present invention, the cybersecurity design method during the shipbuilding stage allows, upon completion of the construction of a new ship, to store the items discovered during the series of cybersecurity design activities in a model case and threat database, which can then be utilized in the construction of the next ship.

[0018] Furthermore, an artificial intelligence-based interactive cybersecurity guide service provision method relating to another aspect of the present invention for achieving the aforementioned technical challenges may include: a step of extracting intelligent maritime information, location information (GPS), and past cybersecurity-related record information to generate a database; a learning step of learning the data generated in the database generation step and cybersecurity regulations and policy-related data for each organization / class of ship; and a guidance step of providing guidance on regulations and policies that suit the user's situation based on real-time threat information of the vessel through the model learned in the learning step.

[0019] Furthermore, in an artificial intelligence-based interactive cybersecurity guide service provision method relating to another aspect of the present invention, the learning stage may include a text analysis and vector generation stage of cybersecurity regulations and policy-related data for each organization / classification society; a data mapping stage through word embedding; and a learning model and database generation stage.

[0020] Furthermore, in the artificial intelligence-based interactive cybersecurity guide service provision method relating to another aspect of the present invention, the guidance stage may include a stage of analyzing ship classifications / ship profiles / conditions in various countries; a stage of confirming real-time location information; and a stage of providing guidance through matching data.

[0021] Furthermore, an artificial intelligence-based interactive cybersecurity guide service provision system relating to yet another aspect of the present invention may include: a database unit that extracts and generates intelligent maritime information, location information (GPS), and past cybersecurity-related record information; a learning unit that learns the data from the database unit and cybersecurity regulations and policy-related data for each organization / class of ship; and a guidance unit that provides guidance on regulations and policies that suit the user's situation based on real-time threat information of the vessel through a model learned by the learning unit.

[0022] Furthermore, in an artificial intelligence-based interactive cybersecurity guide service provision system relating to yet another aspect of the present invention, the learning unit can perform text analysis and generate vectors of cybersecurity regulations and policy-related data for each organization / classification society, map the data through word embedding, and generate a learning model and a database.

[0023] Furthermore, in an artificial intelligence-based interactive cybersecurity guide service provision system relating to yet another aspect of the present invention, the guidance unit can analyze ship classifications / ship profiles / conditions of each country, confirm real-time location information, and provide guidance through matching data. [Effects of the Invention]

[0024] According to the present invention, by visualizing the state in which a newly built ship can recognize and manage cyber security risks through a ship cyber security design methodology, it is possible to provide trust to the shipowner.

[0025] Also, according to the present invention, by strengthening the ship cyber security design database (DB), it is possible to contribute to cost reduction of the ship price and shortening of the ship construction process.

[0026] Also, according to the present invention, by accumulating various ship cyber security design databases (DBs) based on ship cyber security requirements such as shipowner, ship class, and ship type, and the environment of ship ICT equipment and materials, the ship cyber security competitiveness is enhanced.

[0027] Also, according to the present invention, it is possible to grasp and take specific and accurate cyber security guides through AI services based on real-time various ship classes / ship profiles / conditions.

[0028] Also, according to the present invention, it is possible to confirm in real time the response plan in case of a cyber security accident via the online, and receive a cyber security specialized service.

Brief Description of Drawings

[0029] [Figure 1] It is a diagram showing the configuration of a cyber security design system in the ship construction stage according to the present invention. [Figure 2] It is a flowchart showing a cyber security design method in the ship construction stage according to the present invention. [Figure 3] It is a schematic diagram showing the concept of an AI-based interactive cyber security guide service according to the present invention. [Figure 4] It is a flowchart showing a method of providing an AI-based interactive cyber security guide service according to the present invention.

Mode for Carrying Out the Invention

[0030] The objectives, technical configuration, and detailed aspects of the present invention, as well as its operation and effects, will be better understood through a detailed description based on the drawings attached to the specification of the present invention.

[0031] The terms used herein are for the purpose of describing specific embodiments and are not intended to limit the invention. For example, terms such as “composed of” or “including” as used herein should not be interpreted as necessarily including all of the many components or steps described in the invention, but rather as not including some of the components or steps, or may further include additional components or steps. Also, singular expressions used herein include plural expressions unless the context clearly indicates otherwise.

[0032] The present invention will be described in detail below by referring to the attached drawings to describe preferred embodiments of the present invention. Each embodiment described below is provided so that the technical concept of the present invention can be easily understood by those skilled in the art, and should not be construed as limiting the present invention, and it is natural that each embodiment of the present invention can be applied in various ways by those ordinary in the art.

[0033] The cybersecurity design method for the shipbuilding phase according to the present invention, as shown in Figures 1 and 2, may include: a storage stage (S11) in which a cybersecurity design database reflecting the cybersecurity requirements of the shipowner and classification society, as well as ship cybersecurity regulations and standards, is stored in a cybersecurity design database unit 50; a generation stage (S12) in which a new shipbuilding design cybersecurity process unit 100 is generated based on the cybersecurity design database stored through the storage stage (S11); a feedback stage (S13) in which, when a ship is built through the new shipbuilding design cybersecurity process unit 100 generated through the generation stage (S12), changes in the external cybersecurity environment that occur during the shipbuilding period are fed back to the cybersecurity design database unit 50 via a feedback unit 110 to be applied to the new ship; and a display stage (S14) in which the cybersecurity matters provided in the feedback stage (S13) and activities during the shipbuilding period are visualized and displayed on a ship cybersecurity design dashboard 120.

[0034] Furthermore, the storage stage (S11) for storing the design database also includes a database 40 of cybersecurity best practices and threats, which is stored in the cybersecurity design database unit 50 and can be reflected during the progress of the new shipbuilding design cybersecurity process.

[0035] In other words, the cybersecurity design database unit 50 may be configured to include at least one of the following: the shipowner cybersecurity requirements database 10, the classification society cybersecurity requirements database 20, the ship cybersecurity regulations and standards database 30, and the best practices and threat database 40.

[0036] Furthermore, the series of activities related to cybersecurity matters confirmed during the feedback phase (S13) can be stored and updated in the ship cybersecurity design database unit 50.

[0037] According to the present invention, this has the effect of strengthening the competitiveness of ship cybersecurity by accumulating a diverse ship cybersecurity design database (DB) based on ship cybersecurity requirements such as shipowner, classification society, and ship type, as well as the environment of ship ICT equipment and materials.

[0038] Furthermore, in the display stage (S14), data can be transmitted so that when cybersecurity changes from the shipowner, yard, and equipment supplier are displayed on the ship's dashboard 120, data for the ship's cybersecurity design is also displayed, in order to recognize and manage these changes.

[0039] This means that, according to the present invention, it is possible to provide confidence to shipowners by visualizing the state in which newly built ships can recognize and manage cybersecurity risks through a ship cybersecurity design methodology.

[0040] Furthermore, once the construction of a new ship is completed through the shipbuilding process, the items discovered during the series of cybersecurity design activities can be stored in the best practices and threat database 40, which can then be utilized in the construction of the next ship.

[0041] According to the present invention, this has the effect of contributing to cost savings and shortening of shipbuilding processes by strengthening the ship cybersecurity design database (DB).

[0042] Figure 3 is a schematic diagram illustrating the concept of the artificial intelligence-based interactive cybersecurity guide service according to the present invention, and Figure 4 is a flowchart showing a method for providing the artificial intelligence-based interactive cybersecurity guide service according to the present invention.

[0043] Referring to Figures 3 and 4, an artificial intelligence-based interactive cybersecurity guide service provision system according to one aspect of the present invention enables the understanding and implementation of specific cybersecurity guide-related content based on diverse ship classifications / ship profiles / conditions, as well as specific and accurate cybersecurity guides through artificial intelligence (AI) services.

[0044] Figure 3(a) illustrates the discovery and database creation of appropriate policies based on diverse ship classifications / ship profiles / conditions.

[0045] The database (DB) also extracts and stores intelligent maritime information, location information (GPS), and past cybersecurity-related records.

[0046] Figure 3(b) shows an interactive artificial intelligence model that learns from database data through Figure 3(a) and, through the learned model, can guide users to appropriate rules and policies based on real-time threat information of ships.

[0047] At this time, through an interactive artificial intelligence model, information will be provided to enable users to grasp and implement specific and accurate cybersecurity guidelines based on real-time intelligent maritime information, location information, and past cybersecurity-related records, using diverse ship classifications / ship profiles / conditions.

[0048] Figure 3(c) shows a state in which information is provided through an interactive artificial intelligence model, and the information may be displayed on the user's terminal screen, transmitted as a notification message via the web / mobile / smartwatch / HID, or output as audio through a speaker.

[0049] Thus, the form in which the service is provided may differ depending on the settings configured by the user, and the form of service provision may include part or all of it.

[0050] This enables the confirmation of response plans in the event of a cybersecurity incident, allows for the provision of specialized cybersecurity services online, and allows for real-time verification through interactive artificial intelligence.

[0051] The artificial intelligence-based interactive cybersecurity guide service provision system according to the present invention may include a database unit 200 that extracts and generates intelligent maritime information, location information (GPS), and past cybersecurity-related record information; a learning unit 300 that learns the data in the database unit 200 and cybersecurity regulations and policy-related data for each organization / classification; and a guidance unit 400 that provides guidance on regulations and policies that suit the user's situation based on real-time threat information of the vessel through a model learned by the learning unit 300.

[0052] In other words, when an inquiry is made regarding cybersecurity threats related to real-time intelligent maritime information, location information (GPS), and past cybersecurity record information related to ship cybersecurity, the guidance unit 400 can provide guidance on regulations and policies that are appropriate to the user's situation, based on real-time threat information through the learning model in the learning unit 300.

[0053] In this case, the guidance unit 400 provides information through an interactive artificial intelligence model, and the information may be displayed on the user terminal's screen, transmitted to the user terminal as a text message, or output as audio through a speaker.

[0054] Thus, the form in which the service is provided may differ depending on the settings configured by the user, and the form of service provision may include part or all of it.

[0055] Furthermore, the learning unit 300 can perform text analysis and generate vectors of cybersecurity regulations and policy-related data for each agency / classification society, map the data through word embedding, and generate learning models and databases.

[0056] Furthermore, the guidance unit 400 can analyze ship classifications / ship profiles / conditions in various countries, confirm real-time location information, and provide guidance through matching data.

[0057] As shown in Figure 4, the artificial intelligence-based interactive cybersecurity guide service provision method according to the present invention may include: a step (S100) of extracting intelligent maritime information, location information (GPS), and past cybersecurity-related record information to generate a database; a learning step (S200) of learning the data generated in the database generation step and cybersecurity regulations and policy-related data for each organization / classification society; and a guidance step (S300) of providing guidance on regulations and policies that suit the user's situation based on real-time threat information of the vessel through the model learned in the learning step (S200).

[0058] Furthermore, the learning phase (S200) may include a text analysis and vector generation phase (S210) of cybersecurity regulations and policy-related data for each agency / classification society, a data mapping phase (S220) through word embedding, and a learning model and database generation phase (S230).

[0059] In other words, the process involves generating a database by analyzing text in the database generated in the database generation stage (S100), generating vectors, mapping data through word embedding, and generating and storing a learning model.

[0060] Furthermore, the guidance stage (S300) may include the stage of analyzing ship classifications / ship profiles / conditions in each country (S310), the stage of confirming real-time location information (S320), and the stage of providing guidance through matching data (S330).

[0061] In other words, the guidance stage (S300) analyzes ship classifications / ship profiles / conditions in each country based on real-time threat information of ships, confirms real-time location information, and provides users with appropriate real-time cybersecurity-related information through matching data, enabling them to understand and take measures in accordance with cybersecurity guidelines.

[0062] In this case, the learning model may be an interactive artificial intelligence model, and it will provide information that enables the understanding and implementation of specific and accurate cybersecurity guidelines based on real-time intelligent maritime information, location information, and past cybersecurity-related records, depending on the ship classification / ship profile / condition.

[0063] Furthermore, when information is provided through an interactive artificial intelligence model, the information may be displayed on the user's device screen, transmitted as a notification message via the web / mobile / smartwatch / HID, or output as audio through a speaker.

[0064] Thus, the form in which the service is provided may differ depending on the settings configured by the user, and the form of service provision may include part or all of it.

[0065] Therefore, according to the present invention, it has the effect of enabling the acquisition and implementation of specific and accurate cybersecurity guidelines via AI services based on diverse ship classifications / ship profiles / conditions in real time.

[0066] Furthermore, according to the present invention, it is possible to check response plans in the event of a cybersecurity incident in real time, and to receive specialized cybersecurity services online.

[0067] The embodiments of the present invention described above may be embodied in the form of program instructions that can be executed through a variety of computer components and may be recorded on a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc., individually or in combination. The program instructions recorded on the computer-readable recording medium may be specially designed and configured for the present invention, or may be available that are known to those skilled in the field of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical recording media such as CD-ROMs and DVDs, magneto-optical mediums such as floptical disks, and hardware devices specially configured to store and execute program instructions, such as ROMs, RAMs, and flash memories. Examples of program instructions include not only machine code produced by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. Hardware devices may be modified into one or more software modules to perform the processing according to the present invention, and vice versa.

[0068] The embodiments described above are provided so that those skilled in the art can easily understand the technical concept of the present invention, and should not be construed as limiting the present invention. It is obvious to those ordinary skill in the art that each embodiment of the present invention can be modified and transformed in various ways without departing from the spirit and scope of the present invention. Therefore, such modifications or variations can be said to fall within the scope of the claims of the present invention. [Explanation of Symbols]

[0069] 10 Shipowner Cybersecurity Requirements Database 20 Database of Classification Society Cybersecurity Requirements 30. Ship Cybersecurity Regulations and Standards Database 40. Exemplary Case Knowledge Database 50 Cyber ​​Security Design Database Department 100 Shipbuilding Process Department 110 Feedback Section 200 Database Department 300 Learning Department 400 Information Department 120 Ship Cybersecurity Design Dashboard 150 Applies when building a new ship.

Claims

1. Storage stage: The cybersecurity design database, which reflects the cybersecurity requirements of shipowners and classification societies, as well as ship cybersecurity regulations and standards, is received and stored in the cybersecurity design database department. A generation stage in which the shipbuilding process department generates a new shipbuilding design cybersecurity process based on the cybersecurity design database stored through the aforementioned storage stage; A feedback stage is provided through a feedback unit to apply changes in the external cybersecurity environment that occur during the shipbuilding period to the new ship when constructing a ship through the new shipbuilding design cybersecurity process generated through the generation stage; and A ship cybersecurity design method comprising: a display stage in which cybersecurity matters provided in the feedback stage and activities during the shipbuilding period are visualized and displayed on a ship cybersecurity design dashboard;

2. The storage step of storing the cybersecurity design database is The ship cybersecurity design method according to claim 1, further comprising a database of cybersecurity model cases and threats, which is stored in a cybersecurity design database unit and reflected in the new ship design cybersecurity process.

3. The ship cybersecurity design method according to claim 1, wherein a series of activities related to cybersecurity matters confirmed in the feedback stage are updated and stored in the cybersecurity design database unit via the feedback unit.

4. The ship cybersecurity design method according to claim 1, wherein the display stage supports the display of cybersecurity changes by the shipowner, yard, and each equipment and materials company in order to recognize and manage them together.

5. The ship cybersecurity design method according to claim 2, wherein, upon completion of the construction of a new ship, each item discovered during the series of cybersecurity design activities is stored in the model case and threat database section and utilized when constructing the next ship.

6. The database section extracts intelligent maritime information, location information (GPS), and historical cybersecurity-related records to generate a database; The learning stage involves learning the data generated in the stage of generating the aforementioned database, along with the cybersecurity regulations and policy-related data for each organization / classification society, in the learning unit based on artificial intelligence; and A method for providing an artificial intelligence-based interactive cybersecurity guide service, comprising: a guidance stage in which a guidance unit provides guidance on rules and policies that suit the user's situation based on real-time threat information of ships through a model learned in the aforementioned learning stage; and a guidance stage in which a guidance unit provides guidance on rules and policies that suit the user's situation.

7. The aforementioned learning stage is, A method for providing an artificial intelligence-based interactive cybersecurity guide service according to claim 6, comprising: a text analysis and vector generation stage in the learning section that generates text analysis and vectors of cybersecurity regulations and policy-related data for each organization / classification of ships; a data mapping stage that performs data mapping through word embedding; and a learning model and database generation stage that generates a learning model and a database.

8. The method for providing an artificial intelligence-based interactive cybersecurity guide service according to claim 6, wherein the guidance stage involves the guidance unit analyzing ship classifications, ship profiles, and conditions of various countries through an interactive artificial intelligence model, confirming real-time location information, and providing guidance for cybersecurity through matching data.

9. A database unit generated by extracting intelligent maritime information, location information (GPS), and past cybersecurity-related record information; A learning unit that learns from the data in the aforementioned database unit and cybersecurity regulations and policy-related data for each organization / classification society based on artificial intelligence; and An artificial intelligence-based interactive cybersecurity guide service provider system, including a guidance unit that provides guidance on rules and policies tailored to the user's situation based on real-time threat information of ships through a model learned in the aforementioned learning unit;

10. The artificial intelligence-based interactive cybersecurity guide service provision system according to claim 9, wherein the learning unit performs text analysis and generates vectors of cybersecurity regulations and policy-related data for each organization / classification society, maps the data through word embedding, and generates a learning model and a database.

11. The AI-based interactive cybersecurity guide service provision system according to claim 9, wherein the guidance unit analyzes ship classifications, ship profiles and conditions of each country through an interactive artificial intelligence model, confirms real-time location information, and provides guidance for cybersecurity through matching data.

Images