Integrated security information management system and method

Disclosed is an integrated security information management system and method. The system includes: an XML key managing unit for performing an interface based on an XML, authenticating a user, analyzing a request, and requesting an access control unit, an authenticating unit or an external public key infrastructure certification server; the access control unit for providing a user authenticating function, an access authority policy generating function, an access authority confirming function, a shared security information providing function, a security information position information providing function, a shared security information registering/deleting/updating function, a shared security information share setting/releasing function, and an XML digital signature/verification/encryption/decryption/communication security function; the authenticating unit for providing the user authenticating function, a person-in-question authenticating function, a non-shared security information providing function, a security information position providing function, a non-shared security information registering/modifying/deleting function, and the XML digital signature/verification/encryption/decryption/communication security function; the limited shared data storing unit for storing and managing security information; and a non-shared data storing unit for storing and managing security information.