Method and system for preventing leakage of image file of mobile communication terminal based on authentication

Abstract

A method and system for preventing the leakage of image files from a mobile communication terminal are disclosed. An authentication-based method for preventing leakage of a mobile communication terminal image file according to an embodiment of the present invention comprises: (a) a step in which a slave terminal creates a first converted image file by inserting watermark information including a first user key identifying a master terminal user and a second user key identifying a slave terminal user into an image file captured through the camera of the slave terminal; (b) a step in which the slave terminal transmits image file information including the watermark information of the first converted image file to a master terminal to perform an authentication procedure for the access rights of the slave terminal user to the first converted image file, and receives grade information indicating the access rights grade of the slave terminal user from the master terminal; and (c) a step in which, if the access rights grade indicated in the received grade information is a first grade, the slave terminal encrypts the first converted image file, and if the access rights grade indicated in the received grade information is a second grade, the slave terminal inserts an image security program into the first converted image file to create a second converted image file.

Description

Technology Field

[0001] The present invention relates to an authentication-based method and system for preventing the leakage of image files of a mobile communication terminal, and more specifically, to a method and system for preventing the leakage of image files of a mobile communication terminal image file that is captured through a camera of a slave terminal among mobile communication terminals comprising a master terminal and at least one slave terminal. Background Technology

[0002] Recently, as the use of mobile communication devices equipped with camera functions, such as mobile phones and smartphones, has become commonplace, interest in and demand for technologies to prevent illegal filming, such as so-called voyeurism, as well as the leakage or unauthorized distribution of captured image files, are surging.

[0003] However, as disclosed in Korean Registered Patent Publication No. 10-0653303, existing technology that restricts camera shooting of mobile communication terminals has the problem that it cannot prevent the leakage or unauthorized distribution of already captured image files.

[0004] Furthermore, as disclosed in Korean Published Patent Application No. 10-2005-0026653, existing technology that simply inserts a watermark into an image captured by a mobile phone camera has the problem that it can only detect information about the illegal photographer who took the image, but cannot provide information about illegal users who are using image files that have already been leaked or distributed without authorization, nor can it technically restrict the use of said image files. The problem to be solved

[0005] The technical problem that the present invention aims to solve is to provide a method and system for preventing the leakage of image files from a mobile communication terminal, which not only prevents the leakage or unauthorized distribution of image files captured through a camera of a mobile communication terminal, but also provides information on illegal users who are using image files that have been leaked or distributed without authorization from the mobile communication terminal, and technically restricts the use of said image files. means of solving the problem

[0006] An authentication-based method for preventing leakage of an image file of a mobile communication terminal according to an embodiment of the present invention is a method for preventing leakage of an image file captured through a camera of a slave terminal among mobile communication terminals comprising a master terminal and at least one slave terminal, comprising: (a) a step in which the slave terminal creates a first converted image file by inserting watermark information including a first user key identifying a master terminal user and a second user key identifying a slave terminal user into an image file captured through the camera of the slave terminal; and (b) a step in which the slave terminal transmits image file information including the watermark information of the first converted image file to the master terminal to perform an authentication procedure for the access rights of the slave terminal user to the first converted image file, and receives grade information indicating the access rights grade of the slave terminal user from the master terminal. and if the access authority level indicated in the received level information is level 1, the slave terminal encrypts the first converted image file, and if the access authority level indicated in the received level information is level 2, the slave terminal inserts an image security program into the first converted image file to generate a second converted image file, the method includes step (c).

[0007] In one embodiment, the method may further include, prior to step (a), the step of the slave terminal receiving the first user key from the master terminal and receiving the second user key from the management server.

[0008] In one embodiment, the image file information transmitted by the slave terminal to the master terminal in step (b) further includes location information indicating the shooting location of the image file, and step (b) may include the step of, if the distance between the shooting location according to the location information and the master terminal is greater than or equal to a reference value, the master terminal authenticates the access rights of the slave terminal user to the first converted image file, and if the distance between the shooting location according to the location information and the master terminal is less than the reference value, the master terminal authenticates the access rights of the slave terminal user to the second converted image file.

[0009] In one embodiment, the image security program inserted in step (c) may be configured to obtain the URL (Uniform Resource Locator) of the web page and transmit it to a management server when the image file in which the image security program is inserted is loaded on a web page.

[0010] In one embodiment, the image security program may be configured to mask the image of an image file loaded on the web page when a masking execution command is received from the management server.

[0011] Embodiments according to the present invention may be implemented using a computer program recorded on a recording medium as a computer program that executes the above-described operation or method through a computer system. Effects of the invention

[0012] According to the present invention, a management server issues a user key based on the result of identity authentication for a mobile communication terminal user, thereby causing the mobile communication terminal to insert watermark information containing the user key into an image file captured through a camera, thereby improving the reliability and accuracy of the watermark information that serves as source information for the image file.

[0013] In particular, when an image file converted from a mobile communication terminal is leaked or distributed and loaded onto a web page, the URL information of the web page is obtained through an image security program embedded in the converted image file, and by masking the image of the image file loaded onto the web page at the request of the rights holder, information on illegal users using the image file leaked or unauthorizedly distributed from the mobile communication terminal can be provided, and the use of the image file can be technically restricted.

[0014] In addition, by setting an access permission level for a first-transformed image file with a watermark inserted, and encrypting the first-transformed image file according to the set level or inserting an image security program into the first-transformed image file to create a second-transformed image file, the status of the image file can be adaptively changed according to the degree of need for confidentiality or the degree of need for distribution restriction determined by the rights holder.

[0015] Furthermore, a person skilled in the art to which the present invention pertains will readily understand from the following description that various embodiments according to the present invention can solve various technical problems not mentioned above. Brief explanation of the drawing

[0016] FIG. 1 is a diagram showing a mobile communication terminal image file leakage prevention system according to one embodiment of the present invention. FIG. 2 is a block diagram showing a mobile communication terminal of a mobile communication terminal image file leakage prevention system according to one embodiment of the present invention. FIG. 3 is a flowchart illustrating the user authentication and user key issuance process of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention. FIG. 4 is a flowchart illustrating an image file conversion process of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention. Figure 5 is a diagram showing an example of an image security program inserted into an image file. FIG. 6 is a flowchart illustrating the control process between a master terminal and a slave terminal of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention. Specific details for implementing the invention

[0017] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings to clarify solutions to the technical problems of the present invention. However, in describing the present invention, if a description of related prior art would obscure the essence of the present invention, such description will be omitted. Furthermore, terms used in this specification are defined considering their functions in the present invention, and these may vary depending on the intentions or conventions of designers, manufacturers, etc. Therefore, the definitions of terms described below should be based on the content throughout this specification.

[0018] FIG. 1 illustrates a mobile communication terminal image file leakage prevention system according to one embodiment of the present invention.

[0019] As illustrated in FIG. 1, a mobile communication terminal image file leakage prevention system according to one embodiment of the present invention includes a mobile communication terminal (10) having a camera function and an image file management server (20), and may further include an authentication server (30), a web server (40), etc., depending on the embodiment.

[0020] A mobile communication terminal (10) is a terminal having a camera function and can be configured as a communication device of various forms, such as a mobile phone, smartphone, tablet PC, laptop, or PDA (Personal Digital Assistant). The mobile communication terminal (10) takes photos or videos through the camera and stores the captured image files.

[0021] The image file management server (20) is a server that performs data communication with a mobile communication terminal (10) and provides image file management services to a service subscriber user.

[0022] The authentication server (30) is a server that performs user authentication, receives user information directly from a mobile communication terminal (10) or through an image file management server (20), and verifies the received user information to perform authentication for the corresponding user. According to an embodiment, the authentication server (30) may be integrated with the image file management server (20).

[0023] The web server (40) is a server that provides various web pages to internet users and loads and publishes image files through web pages.

[0024] FIG. 2 shows a block diagram of a mobile communication terminal (10) of a mobile communication terminal image file leakage prevention system according to one embodiment of the present invention.

[0025] As illustrated in FIG. 2, the mobile communication terminal (10) may include an image file conversion device (100) together with an input unit (11), an output unit (12), a communication unit (13), a camera unit (14), a position measurement unit (15), a storage unit (16) and a control unit (17).

[0026] The input unit (11) is configured to receive commands or data from a user using a mobile communication terminal (10). To this end, the input unit (11) may include an input device such as a keypad, a touch panel, or an operation button.

[0027] The output unit (12) is configured to output data or information visually or audiovisually. To this end, the output unit (12) may include a visual output device such as a display panel or touch screen, and a sound generating device such as a speaker.

[0028] The communication unit (13) is configured to receive data transmitted from a management server (20), an authentication server (30), a web server (40), or other mobile communication terminals via a wired or wireless communication network and transmit it to a control unit (17) or an image file conversion device (100), and to transmit control signals or data processed by the control unit (17) or the image file conversion device (100) to the management server (20), an authentication server (30), a web server (40), or other mobile communication terminals. To this end, the communication unit (110) may include an LTE module (13a) for long-distance communication and a Bluetooth module (13b) and an NFC module (13c) for short-distance communication, and may further include a WiFi module that performs wireless communication with a nearby AP (Access Point).

[0029] The camera unit (14) is configured to take a photo or video and generate an image file. To this end, the camera unit (14) may include an optical lens or a CCD (Charge Coupled Diode) element.

[0030] The location measuring unit (15) is configured to measure the current location of the mobile communication terminal (10). To this end, the location measuring unit (15) may include a Global Positioning System (GPS), a direction sensor, etc. According to an embodiment, the location measuring unit (15) may be configured to measure the location of the mobile communication terminal (10) based on a mobile communication base station signal or a WiFi signal.

[0031] The storage unit (16) is configured to store and manage data necessary for the operation of the mobile communication terminal (10) and the image file conversion device (100). To this end, the storage unit (16) may optionally include various storage media such as ROM, RAM, EEPROM, registers, and flash memory.

[0032] The control unit (17) is configured to control the overall operation of the mobile communication terminal (10). To this end, the control unit (17) may optionally include hardware such as a general-purpose processor or an ASIC (application-specific integrated circuit) for executing control logic, other chipsets, logic circuits, registers, and memory. Meanwhile, the control unit (17) may be configured as a combination of hardware and software. That is, the control logic of the control unit (17) may be configured as a computer program and stored in the control unit (17)'s own memory or storage unit (16), and the stored computer program may be configured to be executed through the hardware of the control unit (17).

[0033] An image file conversion device (100) installed in a mobile communication terminal (10) converts image files of photos or videos captured through the camera of the mobile communication terminal (10) to prevent leakage or unauthorized distribution, and also obtains information on illegal users who are using image files that have been leaked or distributed without authorization from the mobile communication terminal (10) and technically restricts the use of said image files. To this end, the image file conversion device (100) may include a user key acquisition unit (110), a shooting detection unit (120), a first conversion unit (130), an authority level setting unit (140), and a second conversion unit (150).

[0034] First, the user key acquisition unit (110) receives and acquires a unique user key issued to the user from the management server (20) upon successful authentication of the user of the mobile communication terminal (10). In this case, the user key acquisition unit (110) can perform the user authentication procedure by transmitting user information, such as the user's name, resident registration number, contact information, etc., to the authentication server (30) either directly or through the management server (20).

[0035] The shooting detection unit (120) monitors the camera shooting operation of the mobile communication terminal (10) and detects a camera shooting event.

[0036] The first conversion unit (130) generates a first converted image file by inserting a watermark containing the acquired user key into an image file generated by a detected camera shooting event. In this way, the management server (20) issues a user key based on the identity authentication result for a mobile communication terminal user, and by inserting watermark information containing the user key into an image file captured by the mobile communication terminal (10), the reliability and accuracy of the watermark information that serves as source information for the image file can be improved.

[0037] Meanwhile, if there is a separate rights holder for an image file generated by a camera shooting event of a mobile communication terminal (10), the first conversion unit (130) can generate a first converted image file by inserting a watermark containing a rights holder key that identifies the rights holder into the captured image file. In this case, the mobile communication terminal (10) can receive the rights holder key from another mobile communication terminal used by the rights holder.

[0038] The permission level setting unit (140) sets an access permission level for the first converted image file. In this case, the permission level setting unit (140) receives authentication information from a user who wants to set the permission level, and compares the entered authentication information with pre-stored authentication information; if they match, it can set the access permission level of the first converted image file or change the set access permission level according to the user's input.

[0039] The second conversion unit (150) encrypts the first converted image file if the set access permission level is the first level, and creates a second converted image file by inserting an image security program into the first converted image file if the set access permission level is the second level.

[0040] In this case, the image security program inserted into the image file by the second conversion unit (150) is configured to obtain the URL (Uniform Resource Locator) of the web page along with watermark information of the loaded image file and transmit it to the management server (20) when the image file in which the program is inserted is loaded on a web page. Additionally, the image security program is configured to mask the image of the image file loaded on the web page when a masking execution command is received from the management server (20). Such an image security program can be written in JavaScript, which is a language responsible for the operation of the web page, or Microsoft’s ‘Virtual Basic Scripting Edition’.

[0041] Such an image file conversion device (100) may be implemented by combining the hardware of a mobile communication terminal (10) and a software program executed through said hardware. According to an embodiment, the image file conversion device (100) may be implemented as a separate microchip embedded in the mobile communication terminal (10) or as a dongle-shaped device connected to an earphone jack or a charging jack of the mobile communication terminal (10). The above-described image file conversion device (100) may also be integrated with the control unit (17) of the mobile communication terminal (10).

[0042] FIG. 3 illustrates a flowchart of the user authentication and user key issuance process of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention. With reference to FIG. 3, the detailed operations of the image file leakage prevention system will be described chronologically.

[0043] As illustrated in FIG. 3, a mobile communication terminal (10) can perform a user authentication procedure in conjunction with an image file management server (20), an authentication server (30), etc. First, the mobile communication terminal (10) can transmit user information to the management server (20) (S300). That is, the user key acquisition unit (110) of the image file conversion device (100) installed in the mobile communication terminal (10) can request user authentication by transmitting user information received from the user or pre-stored to the management server (20). According to an embodiment, the mobile communication terminal (10) may also request user authentication by directly transmitting user information to the authentication server (30).

[0044] The management server (20) that receives user information can store the user information and, at the same time, transmit it to the authentication server (30) to request identity verification for the user (S310). The authentication server (30) that receives the authentication request can verify the received user information to authenticate the user (S320) and transmit the authentication result to the management server (20) (S330).

[0045] When the user of the mobile communication terminal (10) is successfully authenticated, the management server (20) issues a unique user key to the user and stores it together with user information (S340), and transmits the issued user key to the mobile communication terminal (10) (S350).

[0046] The user key acquisition unit (110) of the image file conversion device (100) installed in the mobile communication terminal (10) receives and stores a user key transmitted from the management server (20).

[0047] The image file conversion device (100) of the mobile communication terminal (10) that has obtained a user key from the management server (20) converts an image file of a photo or video taken through the camera of the mobile communication terminal (10).

[0048] FIG. 4 illustrates an image file conversion process of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention as a flowchart. With reference to FIG. 4, the detailed operations of the image file leakage prevention system will be described chronologically.

[0049] As illustrated in FIG. 4, the shooting detection unit (120) of the mobile communication terminal (10) monitors the camera shooting operation of the mobile communication terminal (10) and detects the occurrence of a shooting event (S400).

[0050] When a shooting event is detected (S410), the first conversion unit (130) of the mobile communication terminal (10) creates a first converted image file by inserting a watermark containing a user key obtained by the user key acquisition unit (110) and a file key identifying the image file into the image file generated by the detected camera shooting event (S420).

[0051] If there is a separate rights holder for an image file generated by a camera shooting event of a mobile communication terminal (10), the first conversion unit (130) of the mobile communication terminal (10) can generate a first converted image file by inserting a watermark containing a rights holder key that identifies the rights holder into the captured image file. In this case, the mobile communication terminal (10) can receive the rights holder key from another mobile communication terminal used by the rights holder.

[0052] Meanwhile, when watermark information including a user key, file key, and rights holder key is inserted into an image file in a mobile communication terminal (10) and a first-stage converted image file is created, the management server (20) receives the watermark information from the mobile communication terminal (10) and stores it together with the user information of the corresponding user.

[0053] Next, the authority level setting unit (140) of the mobile communication terminal (10) sets an access authority level for the first converted image file (S430). In this case, the authority level setting unit (140) receives authentication information from a user who wants to set an authority level, and compares the entered authentication information with the previously stored authentication information; if they match, it can set the access authority level of the first converted image file or change the set access authority level according to the user's input.

[0054] If the access permission level set for the first converted image file is the first level (S432), the second conversion unit (150) of the mobile communication terminal (10) encrypts the first converted image file to create a second converted image file (S440). In this case, only a user or rights holder who can set or change the access permission level of the image file can decrypt the second converted image file and use the image.

[0055] On the other hand, if the access permission level set for the first converted image file is the second level (S434), the second conversion unit (150) of the mobile communication terminal (10) creates a second converted image file by inserting an image security program into the first converted image file (S450). In this case, the image security program inserted into the image file by the second conversion unit (150) is configured to obtain the URL (Uniform Resource Locator) of the web page along with watermark information of the loaded image file and transmit it to the management server (20) when the image file with the inserted program is loaded on a web page.

[0056] In addition, the image security program is configured to mask the image of an image file loaded on a web page when a masking execution command is received from the management server (20).

[0057] Figure 5 illustrates an example of an image security program (P) inserted into an image file.

[0058] As illustrated in FIG. 5, an image security program (P) inserted into an image file is composed of program modules that are executed when the image file is loaded on a web page, and may include a URL information acquisition module (P1), a URL information transmission module (P2), a masking request reception module (P3), and a masking module (P4). The URL information acquisition module (P1) is configured to acquire the URL of the web page along with watermark information of the loaded image file when the image file is loaded on the web page. The URL information transmission module (P2) is configured to transmit the acquired watermark information and URL information to a management server (20). The masking request reception module (P3) is configured to receive a masking execution command from the management server (20). The masking module (P4) is configured to mask the image of the image file loaded on the web page when a masking execution command is received from the management server (20). In this case, the masking module (P4) may be configured to change the pixel arrangement, color, resolution, etc. of the image file. Such image security programs can be written in languages ​​such as JavaScript or Virtual Basic Scripting Edition, which are responsible for the operation of web pages.

[0059] Referring again to FIG. 4, if the access permission level set for the first converted image file is the first level or the second level, the image file conversion device (100) of the mobile communication terminal (10) converts the image file a second time and stores it as described above (460), and if the access permission level set for the image file is the third level or any other level, the image file is stored in the first converted state (S436). The first converted image file or the second converted image file can be stored in the storage unit (16) of the mobile communication terminal (10).

[0060] The image file conversion device (100) of the mobile communication terminal (10) can continuously monitor the camera shooting operation of the mobile communication terminal (10) except when the power of the mobile communication terminal (10) is turned off, and repeat the process described above (S470).

[0061] FIG. 6 illustrates a flowchart of a control process between a master terminal and a slave terminal of a method for preventing image file leakage of a mobile communication terminal according to an embodiment of the present invention.

[0062] As illustrated in FIG. 6, among the mobile communication terminals, a master terminal (10a) requests a communication connection to a slave terminal (10b) (S600), and when the slave terminal (10b) accepts the communication connection, a communication connection is formed between the two terminals (S602). Additionally, a master-slave relationship can be established between the two terminals by the master terminal (10a) requesting the slave terminal (10b) to establish a master-slave relationship and the slave terminal (10b) accepting the request. In this case, the master terminal (10a) can send a relationship establishment request message to the slave terminal (10b). In this case, the relationship establishment request message may be a short message transmitted and received via SMS (Short Message Service), MMS (Multimedia Message Service), LMS (Long Message Service), or UMS (Unified Message Service). According to an embodiment, the relationship establishment request message may be composed of a Callback-URL SMS message containing the URL (Uniform Resource Locator) of the website where the image file leakage prevention application is downloaded.

[0063] When a communication connection is formed between the master terminal (10a) and the slave terminal (10b) and a master-slave relationship is established, the master terminal (10a) can request to activate the image file conversion device (100) of the slave terminal (10b) and monitor the camera shooting of the slave terminal (10b) (S610).

[0064] The shooting detection unit (120) of the slave terminal (10b) monitors the camera shooting operation of the slave terminal (10b) and detects the occurrence of a shooting event (S620).

[0065] When a shooting event is detected, the first conversion unit (130) of the slave terminal (10b) can generate a first converted image file by inserting watermark information including a first user key identifying a master terminal user and a second user key identifying a slave terminal user into an image file captured through the camera of the slave terminal (10b) (S630). To do this, the slave terminal (10b) can receive the first user key from the master terminal (10a) in advance and receive the second user key from the management server (20) through the user authentication procedure described above.

[0066] Next, the slave terminal (10b) transmits image file information including watermark information of the first converted image file to the master terminal (10a) to perform an authentication procedure for the slave terminal user's access rights to the first converted image file (S640, S650, S660), and can receive level information indicating the slave terminal user's access rights level from the master terminal (10a) (S670).

[0067] For authentication of access rights of a slave terminal user, the image file information transmitted from the slave terminal (10b) to the master terminal (10a) may further include location information indicating the shooting location of the image file.

[0068] That is, if the distance between the shooting location according to the above location information and the master terminal (10a) is greater than or equal to a reference value (S650), the master terminal (10a) authenticates the access rights of the slave terminal user to the first converted image file, and as a result, the first converted image file is stored as is in the slave terminal (10b) (S690).

[0069] On the other hand, if the distance between the shooting location according to the above location information and the master terminal (10a) is less than a reference value, the master terminal (10a) authenticates the access rights of the slave terminal user only for the secondary converted image file. Then, the authority level setting unit (140) of the master terminal (10a) sets the access rights level of the slave terminal user (S660) and transmits the access rights level information to the slave terminal (10b) (S680).

[0070] If the access authority level indicated in the level information received by the slave terminal (10b) is the first level, the second conversion unit (150) of the slave terminal (10b) encrypts the first converted image file to create a second converted image file. If the access authority level indicated in the level information is the second level, the second conversion unit (150) of the slave terminal (10b) inserts the image security program described above into the first converted image file to create a second converted image file (S680). As a result, the second converted image file is stored in the slave terminal (10b) (S690).

[0071] Meanwhile, embodiments according to the present invention may be implemented as a computer system and a computer program that drives the computer system. When embodiments of the present invention are implemented as a computer program, the components of the present invention are program segments that execute the corresponding operation or task through the computer system. Such computer programs or program segments may be stored on various computer-readable recording media. Computer-readable recording media include all types of media that record data that can be read by a computer system. For example, computer-readable recording media may include ROM, RAM, EEPROM, registers, flash memory, CD-ROM, magnetic tape, hard disk, floppy disk, or optical data recording devices. Furthermore, such recording media may be distributed across computer systems connected by various networks to store or execute program codes in a distributed manner.

[0072] As described above, according to the present invention, a management server issues a user key based on the result of identity authentication for a mobile communication terminal user, thereby causing the mobile communication terminal to insert watermark information containing the user key into an image file captured through a camera, thereby improving the reliability and accuracy of the watermark information that serves as source information for the image file.

[0073] In particular, when an image file converted from a mobile communication terminal is leaked or distributed and loaded onto a web page, the URL information of the web page is obtained through an image security program embedded in the converted image file, and by masking the image of the image file loaded onto the web page at the request of the rights holder, information on illegal users using the image file leaked or unauthorizedly distributed from the mobile communication terminal can be provided, and the use of the image file can be technically restricted.

[0074] In addition, by setting an access permission level for a primary converted image file with a watermark inserted, and generating a secondary converted image file by encrypting the primary converted image file or inserting an image security program into the primary converted image file according to the set level, the status of the image file can be adaptively changed according to the degree of need for confidentiality or distribution restriction determined by the rights holder.

[0075] Furthermore, it is obvious that the embodiments according to the present invention can solve various other technical problems in the relevant technical field as well as in related technical fields other than those mentioned in this specification.

[0076] The present invention has been described above with reference to specific embodiments. However, those skilled in the art will clearly understand that various modified embodiments may be implemented within the technical scope of the present invention. Therefore, the embodiments disclosed above should be considered in an illustrative rather than a restrictive sense. That is, the true technical scope of the present invention is set forth in the claims, and all variations within the scope of equivalents should be interpreted as being included in the present invention. Explanation of the symbols

[0077] 10 : Mobile communication terminal 20 : Image file management server 30: Authentication Server 40: Web Server

Claims

Claim 1 An authentication-based method for preventing leakage of an image file of a mobile communication terminal, wherein the image file captured through the camera of a slave terminal among mobile communication terminals comprising a master terminal and at least one slave terminal, comprises: (a) a step of creating a first converted image file by inserting watermark information including a first user key identifying a master terminal user and a second user key identifying a slave terminal user into an image file captured through the camera of the slave terminal, wherein the slave terminal, which is a mobile communication terminal, has a master-slave relationship established between the master terminal and the slave terminal; and (b) a step in which the slave terminal transmits image file information including the watermark information of the first converted image file to the master terminal, which is a mobile communication terminal, to perform an authentication procedure for the access rights of the slave terminal user to the first converted image file, and if the distance between the shooting location of the image file and the master terminal is less than a reference value, receives grade information indicating the access rights grade of the slave terminal user from the master terminal. An authentication-based method for preventing leakage of mobile communication terminal image files, comprising the step (c) in which if the access authority level indicated in the received level information is level 1, the slave terminal encrypts the first converted image file, and if the access authority level indicated in the received level information is level 2, the slave terminal inserts an image security program into the first converted image file to generate a second converted image file. Claim 2 An authentication-based mobile communication terminal image file leakage prevention method according to claim 1, wherein, prior to step (a), the method further comprises the step of the slave terminal receiving the first user key from the master terminal and receiving the second user key from the management server. Claim 3 An authentication-based method for preventing image file leakage in a mobile communication terminal, characterized in that, in step (b), the image file information transmitted by the slave terminal to the master terminal further includes location information indicating the shooting location of the image file, and in step (b), if the distance between the shooting location according to the location information and the master terminal is greater than or equal to a reference value, the slave terminal stores the first converted image file as is in the slave terminal, and if the distance between the shooting location according to the location information and the master terminal is less than the reference value, the slave terminal receives the grade information from the master terminal to generate the second converted image file. Claim 4 An authentication-based method for preventing image file leakage in a mobile communication terminal, wherein, in claim 1, the image security program inserted in step (c) is configured to obtain the URL (Uniform Resource Locator) of the web page and transmit it to a management server when the image file with the inserted image security program is loaded on a web page. Claim 5 In claim 4, the authentication-based mobile communication terminal image file leakage prevention method is characterized in that the image security program is configured to mask the image of an image file loaded on the web page when a masking execution command is received from the management server. Claim 6 A computer program recorded on a recording medium as a computer program that executes a method according to any one of paragraphs 1 through 5 through a computer system.

Images