SHIELD Drive Function Specification Document
This document describes the features that are actually implemented and provided in SHIELD Drive.User PageWowAdmin PageThis is a functional specification organized by separating with __PH_0__.
Reference date: 2026.10.06
RFP Notation Standards
| Notation | Definition |
|---|---|
| Essential | As a core feature of SHIELD Drive, it is a basic item that must be provided when building a cloud storage and document management system. |
| specialization | Differentiated features based on the unique security and integration strengths of SHIELD Drive (ZTCAP conditional policies, network separation linkage, Teams integration, multi-storage support, etc.) |
| Selection | Additional features that can be optionally activated based on customer operating environment and requirements |
User Page Features
This is a feature that users can directly use through the SHIELD Drive web client.
| Major Category | Mid-category | Subcategory (Function Name) | Detailed description | RFP notation |
|---|---|---|---|---|
| Access and Account | Login | Integrated Login | Access via Security365 Single Sign-On (SSO). - Recent access information (date and time · IP) notification - Notification of reasons for access failure such as unassigned license and lack of permissions | Essential |
| Session Management | Automatic Logout | Manages sessions according to the Security365 management center policy. - Automatic logout if there is no usage history for a certain period - Logout of the existing session when logging in from another device | Essential | |
| Account Management | Profile and Account Linking | Check the user's account information. - View profile information such as name and position - Link Microsoft 365 and Google Workspace accounts (required when using OneDrive, SharePoint, or Google Drive files) | Selection | |
| multilingual | Automatic Language Application | Supports Korean, English, and Japanese. - Automatically applied based on browser language (in Teams, based on Teams language) | Selection | |
| File and Folder Management | File Management | File Upload | Upload files and folders to SHIELD Drive from your local PC. - File upload / Folder upload, drag and drop support - Overwrite if the same filename exists / Keep both / Keep all options - Guidance on blocked upload extensions, excluding empty files and folders - Upload blocked when storage capacity is insufficient - Upload progress list and cancel upload - Secure storage stores data encrypted | Essential |
| File Download | Download files stored in SHIELD Drive to your local PC. - Single and multiple file downloads - Folder-based compressed downloads (asynchronous processing, security storage only) - Version-based downloads - Download progress display, notification for over 1GB - Check download failure list and retry - Apply download allow/block policies (mobile Teams are always blocked) | Essential | ||
| generation | File Creation | Create new Word, Excel, and PowerPoint documents within SHIELD Drive. - In graded storage, grade assignment is processed in the background and completion/failure is notified. - Not provided in approval applied storage. | Essential | |
| Folder Creation | Create a new folder within SHIELD Drive. - Supports folder creation within integrated storage - The common storage can only create one level 1 folder | Essential | ||
| Name Change | Rename File/Folder | Rename a file or folder. - Supports renaming resource names within integrated storage - The document being edited cannot be renamed | Essential | |
| Move and Copy | File/Folder Move | Moves files or folders to a different path. - Provides a screen to select the destination folder, items can be dragged and dropped into the folder for movement - Overwrite / rename options if the same file name exists - Supports movement between integrated storages (check target storage capacity) - Movement is not possible between storages with different saving methods, from general saving storage to other storages, or between approved and unapproved storages - Applies document grade control rules | Essential | |
| File/Folder Copy | Copies files or folders to a different path. - Provides a screen to select the destination folder - Overwrite / rename options if the same file name exists - Supports copying between integrated storages - Applies the same storage restrictions as moving | Essential | ||
| Multiple Selection | Batch Processing | You can select multiple items to perform actions at once. - Multi-select by specifying checkboxes and drag areas - Execute batch actions such as move, copy, delete, download, etc. from the top action bar when selected | Essential | |
| Delete and Restore | File/Folder Deletion | Deletes files or folders. - Secure storage: Move to trash - Regular storage: Permanently delete immediately - Documents being edited cannot be deleted | Essential | |
| Trash bin | Manage deleted items. - View and search trash list - Restore to original location (restoration not possible if storage capacity is insufficient) - Permanently delete and empty trash - Trash items are automatically permanently deleted after 30 days | Essential | ||
| viewing | File Viewing | Viewing file contents. - Open with viewer: View secure documents through SHIELD Viewer (supported extensions are automatically reflected based on Viewer) - Open in web: View and edit in web office by storage type (refer to collaborative editing items) - Open in app: View and edit in local Office app - Distinguish between unsupported preview extensions and insufficient permissions for guidance - Documents being edited by other users are available for read-only viewing or viewer access guidance - Files being synchronized will be available for viewing after synchronization is complete - Allow/block viewing applied according to policy | Essential | |
| Folder Exploration | Exploring folder structure. - Exploring subdirectories of the folder - Displaying the top path and copying the path - Querying integrated storage resource pagination | Essential | ||
| Querying and Sorting | Sorting | Sort by name, modified date, modifier, and size. - Switch between ascending / descending - Display security level and label columns when using document grade | Essential | |
| Check Detailed Information | You can check detailed information about files or folders in the right detail area. - Type, Purpose, Storage Method, Security Level, Creation/Modification Information, Tags, Description, Number of Sub-items and Size - Activity History, Comments, File Version tabs provided (Secure Storage) - View file lock status and folder usage | Essential | ||
| Capacity and Storage Instructions | Displays storage capacity and retention information. - Shows used capacity / allocated capacity, personal NAS shows uploadable capacity - Storage with automatic deletion applied shows deletion schedule notice | Selection | ||
| Synchronization | File Handling for Synchronization Failure | Handling files that failed to synchronize with the original repository. - Resynchronize - Restore last version (restore to the most recently saved version) - Delete | Essential | |
| File Locking | File Lock/Unlock | Prevents simultaneous editing by locking the file being edited. - Create and release locks - Check lock status - Automatic locking during app editing | specialization | |
| Automatic deletion | Automatic Deletion Exception Folder | Specify exception folders in the personal folder where the administrator has applied automatic deletion. - Step 1: Turn automatic deletion exception On/Off for each folder - Display the same status for subfolders - Notification of scheduled automatic deletion days | Selection | |
| Convenience Features | Copy link | Copies the link of a file or folder to the clipboard. - Secure storage, provided for a single item. | Selection | |
| Fixed to the top | Fix frequently used items at the top of the list. - Up to 5 items, provided by secure storage. | Selection | ||
| Favorites | Add frequently used folders to favorites. - Add and remove favorites - Display favorites list in the left menu - Quick access to favorites from home | Selection | ||
| Recent Documents | Check the documents you have recently viewed or worked on. - Provides a dedicated page for recent documents - Collects by type: Word, Excel, PowerPoint, PDF, image, text - Displays recent documents on the home page | Selection | ||
| tag | Assign tags to files and folders. - Check tags in details - Support for tag-based search | Selection | ||
| Search | File/Folder Search | Integrated Search | Search for files and folders in SHIELD Drive. - Separate results for files / folders / comments - Multiple search term combinations (OR/AND), excluded search terms - User filters, specify folders to search, reset filters - Tag search - Keep recent search terms - Search for items in the recycle bin - General storage is excluded from search results | Essential |
| Sharing and Collaboration | File Sharing | Shared Folder Management | Create a shared folder in the shared box to share with other users. - Create shared folder (specify storage, name, description) - Access permissions: read, edit, upload, download, move/copy within the task folder, move/copy to another task folder, delete - Set usage duration by permission - Target: individual users / all users - Cannot grant permissions exceeding folder owner permissions - Synchronization of policy based on shared folder owner | Essential |
| File Cabinet Invitation | Inviting members to the shared folder. - Invite and cancel invitations - Send email notifications upon invitation (not provided if the management center mail server is not used) | Essential | ||
| Inviting External Users | Invite external users via email for collaboration. - Provided if external invitations are enabled in admin settings - Not provided if the management center mail server is not used | Selection | ||
| Personal File Sharing | Share the personal file with other users. - File sharing On/Off in details - Provided to users with sharing permissions | Selection | ||
| Collaborative Editing | Web Collaborative Editing | Multiple users edit documents simultaneously on the web. - Microsoft Web Co-Authoring: SharePoint·OneDrive - Google Web Co-Authoring: Google Drive - Office Online Server (OOS) Web Co-Authoring: NAS·S3 - Hancom Web Office Co-Authoring: NAS·S3 - Secure storage, provided in supported extensions - Automatic file locking during editing | specialization | |
| App Editing | Edit documents with local Office apps. - SharePoint·OneDrive: App co-editing - NAS·S3: Lock-based app editing - Distinguish and apply web editing / app editing permissions in policies | specialization | ||
| Editing General Storage Documents | Edit documents from general storage in the local app. - Provided in personal and shared folders of NAS storage (web editing not available) - Edit permissions can only be set on NAS that supports lock (ReadOnly lock) - During editing, overwriting via SHIELD Drive is blocked, and upload, move, copy, rename, and delete are restricted - When connecting via SFTP, direct access overwriting on NAS is also blocked (scope varies by NAS model) | specialization | ||
| comment | Write a comment | Share your opinions by commenting on the file. - Write, edit, and delete comments (your own comments) - Pagination view of comments by file - Check in the comments tab in the right detail area | Selection | |
| Version Control | File Version Control | Check the previous version of the file. - File version history inquiry - Download by version - Provided in secure storage | Essential | |
| Notification | User Notification | Notification Confirmation | You will receive notifications about changes to files and folders. - Check notification list, mark as read / mark all as read - Display the number of unread notifications - Subscription folder changes, sharing/invitation, version, cross-network transmission, automatic deletion exceptions, approval results, document creation results, etc. | Selection |
| subscription | Subscribe to changes in a specific folder. - Set up and unsubscribe from subscriptions in details - Receive notifications when subscription items change | Selection | ||
| Disaster Recovery | Manganese File Transfer | Inter-network transmission | Perform file transfer of registered manganese. - After selecting the file, choose the receiving network and recipient (displaying name and email together) - Notification if the number of files or capacity exceeds the limit - Notification of transfer error reasons and detailed log check - View linked shared folders - Provided from files of users with file transfer permissions in secure storage | specialization |
| Document Grade (N2SF) | Rating Display | Check Document Grade | Check the security levels (C/S/O) assigned to documents and storage. - Display grades in the file list column, details, and folder titles - Provide storage grade badges and tooltip guidance - Provided when the security grade feature is activated in the Security365 management center | specialization |
| Grade Control | Grade-based Import and Export Control | Controls operations by comparing document grades and storage grades. - If the file grade is higher than the storage grade, upload, move, and copy are blocked. - Moving and copying between graded storage and ungraded storage are blocked. - Uploading and downloading of ungraded files are subject to administrator settings (storage grade assigned upon upload). - Display a notification message explaining the reason when blocked. | specialization | |
| Upload/Download Approval | Approval Request | Upload Approval Request | When uploading a file to storage with approval applied, the approval process will be followed. - Automatic creation of approval request upon upload - Automatic display of upload request tab in the approval request box - Automatically saved upon approval completion, discarded upon rejection or request cancellation | specialization |
| Download Approval Request | When downloading files from approved storage, the approval process is followed. - An approval request is created and a copy is kept upon download request - After approval is completed, files are received from the approval request box - Repeated receipt is possible within the download period - Folders are requested in units of compressed files | specialization | ||
| Approval Request Box | Approval Request Inquiry | Verifying the approval request you submitted. - Provide entry point in the top bar (exposed to users with approval storage) - Separate tabs for upload request / download request - Status display (Pending Approval·Approved·Rejected·Request Canceled·Expired·Upload Failed) - Retry failed uploads, move to upload location - Expand row details to check path·reason - Receive notification of approval results and view the request upon clicking the notification | specialization | |
| Bypass Block | Move·Copy Control | Blocks the export of approved target storage. - Prevents moving/copying from approved storage to non-approved locations - Blocks importing from non-approved storage to approved locations - Disables reason guidance and execution button on the location selection screen - Displays approved storage ("Approval Required") | specialization | |
| External Integration (User) | Teams Integration | Using the Teams Tab | Use SHIELD Drive within Microsoft Teams. - Select storage when adding a tab (Teams default SharePoint / Teams dedicated NAS / Teams dedicated secure NAS) - Synchronize channel file list and channel information - Attach SHIELD Drive files to Teams messages - Integrate Teams SSO authentication - Add, configure, and remove tabs - Mobile Teams block downloads | specialization |
| SHIELD Gate Integration | File Selection | Attach the SHIELD Drive file by selecting it from the SHIELD Gate. - Select files based on recent documents and folders - Limit on the number of selections - Display storage with applied approval | specialization | |
| SHIELD Works | Agent and Folder Download | Use the SHIELD Drive Works agent. - Download the agent from the left menu - Download the folder for Works (secure storage) | Selection |
Admin Page Features
This is the feature that allows the administrator to configure and manage the system through the SHIELD Drive management console.
| Major Category | Mid-category | Subcategory (Function Name) | Detailed description | RFP notation |
|---|---|---|---|---|
| Access and Permissions | Administrator privileges | Permissions by Menu | Applies access permissions by admin menu. - Hide / Read / Write permissions by menu - Based on admin roles in Security365 Management Center | Essential |
| Page Management | Separation of User and Admin Pages | The user page and the admin page are operated separately on different ports. - When accessing the existing admin address, it automatically redirects to the admin port - When operating in a unified manner, a button is provided to switch between the user page / admin page | Selection | |
| Management Center Integration | Common Settings Integration | Applies common settings for the Security365 Management Center. - Logo · Title · Favicon - Automatic logout interval - Block features that require email sending (invitations, etc.) when the mail server is not in use | Essential | |
| Dashboard | Status Monitoring | Admin Dashboard | You can grasp the overall status of the system at a glance. - Status Card: Active Users (Increase/Decrease compared to the previous day), Number of Shared, Common, and Teams Folders - Detailed information displayed when clicking the card - Storage Usage Status (by Type and Purpose) - Activity Status by Storage Type (Upload, Download, View, Edit, Delete, Share) - User Activity Status - Conditional Policy Application Status (Top 5) - Period Selection (1 week, 1 month, 6 months) - Dashboard Help | Essential |
| User Management | Account Management | User Account Management | Manage user accounts within the organization. - View and search user list (Name·Position·Account·Status·Type) - Delete linked external accounts per user (Microsoft·Google) - Azure AD user/group synchronization integration - Not exposed in the admin menu and accessed via a separate address, used after password authentication | Essential |
| Storage Management | Storage Registration | NAS Registration | Registering NAS storage. - Select connection protocol (WebDAV / SFTP) - Enter path, port, account information, and test connection - Select purpose: personal folder / common folder / shared folder / Teams folder - Set personal folder capacity (total size, default allocation per user) | Essential |
| Security NAS Registration | Register the NAS in a network separation environment through the Edge server. - Enter NAS connection information and select Edge server - Registration guide if Edge server is not registered - Select purpose: Personal folder / Common folder / Shared folder / Teams folder | specialization | ||
| SharePoint Registration | Register SharePoint Online storage. - Configure integration based on Web URL - Select purpose: Common box / Shared box - Provided when using Microsoft integration | specialization | ||
| OneDrive Integration | Provides OneDrive for Microsoft linked accounts as personal storage. - Automatically assigned without separate registration. | specialization | ||
| Google Drive Registration | Registering Google Drive storage. - Google account authentication integration and connection test - Provided when using Google integration | specialization | ||
| S3 Registration | Registering Amazon S3 Storage. - Enter bucket, region, access key information and test connection - Choose purpose: Common box / Shared box | specialization | ||
| Specify Storage Method | Specifies the storage method of the storage. - Secure storage (encryption·obfuscation storage) / Regular storage (original preservation) - Regular storage selectable range: NAS·personal folder of secure NAS·common folder, common folder of SharePoint - Can only be set at the time of registration and cannot be changed afterwards - Regular storage does not support search·version control·link sharing·pinning·favorites·folder download·recycle bin·network linkage·activity history·comments - Regular storage common folder allows only one level 1 folder | specialization | ||
| Registration Common Options | Set up together when registering storage. - Specify security level and label (refer to document grade setting items) - Whether to use approval (refer to approval setting items) - Continue to add registration after registration | Selection | ||
| Storage Configuration | Edit/Delete | Change or delete the registered storage settings. - Storage list type filter·search, capacity warning display - Modify storage information (re-enter authentication information when changing access information) - Storage usage On/Off - Confirm storage name input when deleting - View storage activity history | Essential | |
| Additional Settings | Configure additional settings by storage. - Set Teams tab name - Configure file transfer to other systems (transfer address·parameters) | Selection | ||
| Check NAS Lock Support | Diagnosing the support for ReadOnly lock of general storage NAS. - The range of lock availability varies depending on the connection type (WebDAV / SFTP) - Edit permission settings are allowed only for storage that supports locking. | specialization | ||
| Storage Monitoring | Capacity Management | Manage storage capacity and usage status. - Visualize capacity bar by storage - Personal NAS: total size, allocation by default user, individual allocation by user (individual allocation takes priority) - Warning for usage rate of 90% and capacity overflow | Essential | |
| Storage Policy | Policy Application | Apply permissions at the storage unit level. - Permission items: Read, Edit (Web/App, select editor by storage), Upload, Download, Move/Copy within storage, Move/Copy to other storage, Delete, Share, Send file - Specify member and location conditions - Folder-level policies and activity history view - Shared folder policy synchronization - General storage grants edit permissions only on locked support NAS, web editing not provided | Essential | |
| Document Grade Setting | Storage Class Designation | Assign security grade (C/S/O) and label to the storage. - Can only be assigned during secure storage registration and cannot be changed after registration - Grade and label are based on Security365 Management Center - Exposed when the security grade feature is activated in the Security365 Management Center - Unspecified storage is excluded from grade control | specialization | |
| Approval Settings | Upload/Download Approval Use | Set whether to use the approval process by storage unit. - Select Use / Do Not Use - Actual approval applies only when the approval action of the conditional policy is also set - Security NAS (edge environment) and general storage storage are not supported | specialization | |
| Conditional Policy (ZTCAP) | Policy Creation | Policy Creation | Create a conditional access policy. - Enter policy basic information, check for duplicate policy names - Create policy based on condition values / based on condition references | specialization |
| Policy Conditions | Principal | Specify the target to which the policy will be applied. - Members: User / Group / Policy Group, all or selected, specify exclusions - Storage: Select by purpose | specialization | |
| Usage Control | Set permissions for uploading, downloading, viewing, editing, deleting, sharing, moving/copying, etc. | specialization | ||
| Condition | Specifies the conditions under which the policy will apply. - Location (IP), Time (Day of the week·Time zone), Device (PC/Mobile/Teams), Document properties (File type·Document grade) conditions provided - Condition items are managed in the Security365 management center - Conditions are combined with AND - If there is overlap between target assignments and exclusions, exclusions take precedence | specialization | ||
| Execution Action (Action) | Specifies the actions to be performed when conditions are met. - Allow / Block / CDR / Convert / Approve - Connect EDO execution workflow for each event (upload, download, etc.), allowing or blocking events based on the results - If the target includes secure NAS and general storage, notification of unsupported approval linkage | specialization | ||
| Operating Configuration | Set the policy operation method. - Policy activation / deactivation - Policy validity period | specialization | ||
| Policy Management | Edit/Delete | Modify or delete the generated policy. | specialization | |
| copy | Copying policy. - The copy is created at the bottom in an inactive state - Bulk processing for multiple selections | specialization | ||
| Change Priority | Change the priority of policy application. - Change with buttons and drag - Batch processing for multiple selections | specialization | ||
| Policy List Inquiry | Retrieve the list of policies and their applicable targets. - Search for policies, check detailed information - Display expiration / upcoming expiration - Retrieve the list of users to whom the policy is applied | specialization | ||
| Management Activity Log | Records policy registration, modification, deletion, priority change, copying, and activation/deactivation in the administrator log. | specialization | ||
| Edge Server Management | Server Management | Edge Server Registration/Management | Manage Edge servers for external-internal network integration. - Add/modify/delete Edge servers, designate primary server - Configure addresses by service (storage integration, WebDAV, event collection, SHIELD Viewer, Hancom Office, etc.) - Check WebDAV connection | specialization |
| Cluster Service Management | Register and manage external cluster services. - Register/modify/delete cluster services - Activate/deactivate | specialization | ||
| log | Activity Log | User Log | View user activity logs. - InfoLineage integration screen provided (default last 7 days) - Period and condition search, detailed view, log download | Essential |
| Admin Log | View the administrator's activity log. - Provides InfoLineage integration screen - Records history of administrator menu views | Essential | ||
| SHIELD Drive Works Log | Viewing SHIELD Drive Works usage logs. - Provided when using SHIELD Drive Works | Selection | ||
| Trash (Admin) | Admin Trash Bin | Deleted Item Management | Manage deleted items for all users. - View and search deleted item list (showing deleter and original location) - Restore items - Permanently delete items | Essential |
| Settings | Basic Settings | Usage Policy by Connection Environment | Set the permissions for file viewing, editing, uploading, and downloading based on the access environment. - SHIELD Drive: Direct access from PC / Direct access from Mobile - Teams: Teams Web / Teams Desktop App / Mobile Teams (Mobile Teams download is always blocked) | Essential |
| Settings | General Usage Settings | Set company-wide usage policies. - Individual settings for shared mailbox owner policies - Invite external users to shared mailboxes (disabled if mail server in admin center is not used) - Enable / disable SHIELD Viewer - Microsoft Teams integration: Specify Teams app bar name, Teams file storage (default NAS) | Essential | |
| Control of Unclassified Files | Set the handling method for files without a designated grade. - Allow / Block upload of files without a grade - Allow / Block download of files without a grade - Automatic assignment of storage grade when upload is allowed - Cannot be set if both upload and download are completely disabled - Provided when the security grade function is activated | specialization | ||
| File Settings | File Management Settings | Configure settings related to file management. - Personal folder file deletion cycle: Number of days based on creation date or modification date, deletion method (move to recycle bin / permanent deletion) - Select personal folders to apply the deletion cycle (excluding general storage personal folders), user exception folders can be specified in the applied personal folders - Register blocked upload extensions | Essential | |
| Works Settings | SHIELD Works Settings | Manages SHIELD Drive Works agents. - Upload and manage agent installation files - Upload and manage patch files - Provided when using SHIELD Drive Works | specialization | |
| Managing Teams | Teams ACL | Permission Check | Manage team and channel permissions when integrating with Microsoft Teams. - Team/Channel member synchronization - Not exposed in the admin menu and accessed via a separate address, used after password authentication | specialization |