JP2006058990A - Information processing method and portable memory medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable the use of information processing apparatus continuously in the same use environment even when the information processing apparatus is changed, and to easily configure the same use environment without special operations and the like. <P>SOLUTION: Information used by an individual operator of information processing apparatus 1 and 2 is stored in a portable memory medium 10. The portable memory medium 10 is connected to a connection means of the information processing apparatus 2 to be operated, and an information processing function of the portable memory medium 10 is driven by drive software. When the information processing function is driven, a use environment for the operation of the information processing apparatus 2 is configured according to setting information in an information storage function of the portable memory medium 10, and the information processing apparatus 2 is operated in the use environment to allow information processing. If the execution of information processing generates new history information, the history information updates history information stored in the information storage function. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing method for performing information processing by operating an information processing apparatus, and a portable memory medium used when performing the information processing.

  2. Description of the Related Art In recent years, with the advancement of computer technology, various information processing such as document creation and image processing is performed by operating an information processing apparatus represented by a personal computer (PC). Under such circumstances, it is common for an operator of an information processing apparatus to construct a use environment of the information processing apparatus so that the individual operator likes it. For example, the settings of the so-called desktop state, bookmark of a Web browser, conversion form when creating a document, dictionary, and the like are often different depending on the operator.

  However, information related to the usage environment of the information processing apparatus is normally stored in the information processing apparatus as information used by an individual operator of the information processing apparatus. Therefore, when a PC is replaced or when a shared PC is used as a destination, it is necessary to use the information processing apparatus in a different usage environment or to operate the information processing apparatus and reset the usage environment. Yes, the operator may feel annoyed.

  For this reason, information (such as various data and setting information) that is conventionally used by an individual is stored in a server device that is online-connected to the information processing device, and can be downloaded to the information processing device and used at any time. (For example, refer to Patent Document 1) or storing a personalized man-machine interface in a removable medium and deploying the component in the man-machine interface based on the component definition read from the removable medium (for example, Patent Document 1) 2) has been proposed.

JP-A-11-122262 JP 2003-58265 A

However, as disclosed in Patent Document 1, for example, when information used by an individual is stored in a server device, the information can be used if the information processing device is not in an environment where the server device can be accessed. Can not. In other words, the same usage environment cannot always be constructed.
For example, as disclosed in Patent Document 2, when a personalized man-machine interface is stored in a removable medium, a superficial interface viewed from the user can be reconstructed, but a file being edited is a component. Since it is not deployed, the same usage environment cannot always be constructed.

  Therefore, the present invention can always use the information processing apparatus in the same usage environment even when the information processing apparatus is changed, and can easily construct the same usage environment without requiring any special operation or the like. An object of the present invention is to provide an information processing method and a portable memory medium.

  The present invention is an information processing method devised to achieve the above object. That is, an information processing method for operating an information processing apparatus to perform information processing, wherein setting information and history information used by an individual operator of the information processing apparatus for operating the information processing apparatus Information stored in a portable memory medium having a storage function and an information processing function, and connected to the connecting means of the information processing apparatus to be operated, and the information processing function in the portable memory medium When the information processing function is driven by the driving software, a usage environment for operating the information processing apparatus is constructed based on the setting information stored in the information storage function, and the use When information processing is performed by operating an information processing device according to the environment and new history information is generated by execution of the information processing, the information storage function is already stored by the history information. Characterized in that it updates the history information you are.

  Further, the present invention is a portable memory medium devised to achieve the above object. That is, a portable memory medium that is used by being connected to connection means included in the information processing apparatus, can be detached from the connection means and can be transported after leaving, and has an information storage function and an information processing function, The information storage function stores setting information and history information used by an individual operator of the information processing apparatus to operate the information processing apparatus, and the information processing function is connected to the connection means. When driven by driving software, a usage environment for operating the information processing device is constructed based on setting information stored in the information storage function, and the information processing device is operated in the usage environment. Information processing, and when new history information is generated by execution of information processing in the information processing apparatus, the information storage function is already stored by the history information. Characterized in that it is configured to update the history information are.

  According to the information processing method of the above procedure and the portable memory medium having the above configuration, the portable memory medium is connected to the connection means of the information processing apparatus to be operated, and the information processing function in the portable memory medium is driven by the drive software. Driven by wear. The drive software may be previously stored in the information processing apparatus, or may be stored in the portable memory medium by an information storage function in the portable memory medium. By this driving, the portable memory medium connected to the connection means functions as a part of the information processing function in the information processing apparatus. Therefore, it is not necessary to transfer the storage information in the portable memory medium into the information processing apparatus, and the storage information is used, that is, the use environment in the information processing apparatus is constructed based on the storage information (setting information). It becomes possible. In other words, by simply connecting the portable memory medium to the connection means, it does not depend on the connection environment of the information processing device, and no special operation is required, and the environment for using the information processing device desired by the individual operator is established. You can get it. In addition, even if new history information is generated by the execution of information processing, the history information in the portable memory medium is updated with the history information, so that the history information can be reflected in the construction of the subsequent use environment. In addition, it is possible to avoid the history information remaining in the information processing apparatus.

  As described above, according to the information processing method and the portable memory medium of the present invention, it is possible to construct the use environment of the information processing apparatus desired by the individual operator only by connecting the portable memory medium to the connection means. become. Therefore, even when the information processing device to be operated is changed, such as when a PC is replaced or when a destination shared PC is used, the information processing device can always be used in the same usage environment. For this reason, the same usage environment can be easily constructed without requiring any special operation and the like, which is very convenient for the operator (user).

  Hereinafter, an information processing method and a portable memory medium according to the present invention will be described with reference to the drawings.

  FIG. 1 is an explanatory diagram showing a specific example of a system to which the present invention is applied. The example shows a PC 1 in a user (operator) office and a PC 2 in the user's business trip destination. Each of these PCs 1 and 2 functions as an information processing apparatus that performs information processing by executing predetermined software. However, the software executed by each of the PCs 1 and 2 may not necessarily match completely. For example, PC1 corresponds to the OS and office software A, but PC2 corresponds to office software B in addition to these.

  Each of the PCs 1 and 2 has a card slot, and a card-like portable memory medium 10 is inserted into the card slot. Examples of the portable memory medium 10 include an SD (Secure Digital) card having an information storage function as a memory card and an information processing function as an IC card. However, if it is equivalent to this, that is, inserted into the card slot of each PC 1 and 2 and used to be able to be detached from the card slot and to be carried after removal, other portable It may be a memory medium. The card slot into which such a card-like portable memory medium (hereinafter simply referred to as “card”) 10 is inserted functions as a connection means for connecting to the card 10.

Here, the card 10 functioning as a portable memory medium will be described in more detail. FIG. 2 is an explanatory diagram showing an outline of the portable memory medium according to the present invention.
As illustrated, the card 10 described here has an information storage function 11 as a memory card and an information processing function 12 as an IC card. In addition, since these functions 11 and 12 themselves are well-known, the description is abbreviate | omitted here.

  In the card 10, the information storage function 11 among them stores information used by individual users of the PCs 1 and 2 when operating the PCs 1 and 2. “Information used by an individual” includes setting information and history information used by the individual user. For example, document information being created, creation tool setting information, usage history information, personal authentication information, address book information, mail folder contents, browser bookmarks, web access history, cookie information, cache memory Contents, desktop information, personal folder contents, software license information, software usage history, Kana-Kanji conversion dictionary, personal ID, personal certificate, root certificate, application software, resource link information, payment information, etc. It corresponds to this.

  These setting information and history information are generated through the use of the PCs 1 and 2 by the operator. That is, for example, if the OS (operating system) in the PCs 1 and 2 is Windows (registered trademark), the information is stored in a folder in “C: ¥ Documents and Settings” through the use of the PCs 1 and 2. Such information is stored in the information storage function 11 in the card 10 so that the information storage function 11 is stored in “C: ¥ Documents and Settings” in a state where the card 10 is inserted into the card slots of the PCs 1 and 2. It functions as a user folder (so-called desktop).

  In the card 10, the information processing function 12 realizes various functions such as card holder authentication, device authentication function, personal authentication, encryption / decryption function, PKI (Public Key Infrastructure) function, license function, and billing / settlement function. To get. These functions are realized by the information processing function 12 being driven by drive software. In addition, since it is well-known about each realization function and the drive by drive software, the description is abbreviate | omitted here.

  Next, a procedure for performing information processing by operating the PCs 1 and 2 in the system as described above, that is, an information processing method according to the present invention will be described. Here, a procedure when the user uses the PC 2 on a business trip will be described as an example. FIG. 3 is a flowchart showing an example of the procedure of the information processing method according to the present invention.

  Before using the PC 2, information used by the individual user is set in the PC 1 in the user's office with the card 10 inserted into the card slot of the PC 1. It is assumed that it is stored in Then, after the user moves the card 10 removed from the card slot of the PC 1 to the business trip destination PC 2, the card 10 is inserted into the card slot of the PC 2 (step 101, step is hereinafter abbreviated as “S”). .

  When the card 10 is inserted, the PC 2 recognizes the card 10 by the plug and play function. Then, the driving software of the card 10 drives the information processing function 12 of the card 10 to make the card 10 usable. The drive software for the card 10 may be stored in the PC 10 in advance by the information processing function 12 in the card 10, even if the PC 2 has it in advance. By this driving, the card 10 inserted in the card slot functions as a part of the information processing function in the PC 2.

  When the card 10 becomes available, device authentication processing by the information processing function 12 is performed between the card 10 and the PC 2. As a result, if the device authentication is not successful, it is not possible to proceed to the subsequent steps. That is, access to the information storage function 11 in the portable memory medium is enabled only when the device authentication is successful. Specifically, the information storage function 11 is recognized from the PC 2 as a storage device or a folder in the storage device.

  In the device authentication process, for example, a machine ID (device information) registered in advance in the PC 2 is compared with an available machine ID (device authentication information) registered in the card 10 in advance, and the PC 2 is determined from the comparison result. Alternatively, it may be performed by determining the use authority of the card 10.

  In addition, the following device authentication processing is also conceivable. FIG. 4 is an explanatory diagram showing a specific example of the device authentication process. For example, if the card 10 authenticates the PC 2, as shown in FIG. 4A, the random number a generated on the card 10 side is sent to the PC 2, and the random number a is encrypted with the secret key on the PC 2 side. To do. Then, the ciphertext c obtained by the encryption is sent to the card 10, and the card 10 side decrypts the ciphertext c with the verification key to determine whether or not it matches the generated random number a. As a result, if they match, it is determined that the authentication is successful. By such a device authentication process, the use of the card 10 can be permitted only by a specific PC, not by any PC. On the other hand, if the PC 2 authenticates the card 10, on the other hand, the random number a generated on the PC 2 side is sent to the card 10 as shown in FIG. Is encrypted with a private key. Then, the ciphertext c obtained by the encryption is sent to the PC 2, and the ciphertext c is decrypted with the verification key on the PC 2 side to determine whether or not it matches the generated random number a. As a result, if they match, it is determined that the authentication is successful. By such a device authentication process, any card can be used, but only a specific card can be permitted to be used on the PC.

  If the device authentication is successful, the user is allowed to select the card 10 and input the password on the login screen displayed on the display of the PC 2 as shown in S102 of FIG. That is, personal authentication processing is performed by the information processing function 12 of the card 10 after the login screen display, card selection, and password input guidance.

  In the personal authentication process, for example, a user ID (user information) input on the login screen of the PC 2 is compared with an available user ID (user authentication information) registered in advance in the card 10, and the comparison result From this, it can be considered that the user's authority to use the PC 2 or the card 10 is determined. That is, if the user information matches the user authentication information, use by the user is permitted.

  However, since the information processing function 12 in the card 10 can also realize a PKI function or the like, personal authentication processing with a higher degree of security may be performed. Specifically, when performing personal authentication by PKI by network login or the like, it is possible to further use a personal certificate and a personal key stored in the card 10.

  FIG. 5 is an explanatory diagram showing a specific example of personal authentication processing when a personal certificate and a personal key are used. In the personal authentication process shown in the figure, first, a random number is generated on the authentication device (server) side, and the generated random number a is sent to the card 10. On the other hand, since the card 10 side can use a personal key and take out a personal certificate by password authentication, it sends a ciphertext c obtained by encrypting the random number a with the personal key to the server side, The personal certificate is taken out from the information storage function 11 of the card 10 and sent to the server side together with the ciphertext c. On the server side, the validity of the personal certificate is confirmed. That is, it is checked whether or not the ciphertext c matches the random number a generated by decrypting the ciphertext c with the public key (verification key) of the personal certificate. As a result, if they match, it is assumed that the authentication is successful, and network connection or the like from the PC 2 into which the card 10 is inserted is permitted.

  By such personal authentication processing, not all users who have inserted the card 10 into the PC 2 may use it, but only specific users are permitted to use the PC 2 (including information stored in the information storage function 11). You can get it. In particular, according to the PKI function and the encryption / decryption function, access safety can be ensured even for resources in a private network such as a company.

  If the personal authentication is successful, the user can use the PC 2 (S103). That is, it is possible to perform information processing by operating the PC 2, and specifically, it is possible to execute various application software (for example, document creation software and image processing software) on the PC 2.

  At this time, in the PC 2, the card 10 is inserted into the card slot, and the information processing function 12 of the card 10 is driven by driving software, and the card 10 functions as a part of the information processing function in the PC 2 by the driving. It is supposed to be. Therefore, the PC 2 can use the stored information without having to transfer the stored information in the card 10 to the PC 2 side, that is, can construct a use environment in the PC 2 based on the stored information (setting information). It becomes possible. In other words, just inserting the card 10 into the card slot does not depend on the connection environment of the PC 2 and does not require any special operation, and the PC 2 usage environment desired by the user, specifically, the PC 1 is set. It becomes possible to construct a use environment that is exactly the same. Therefore, even if the PC to be operated is changed from the PC 1 in the office to the PC 2 in the business trip destination, the PC 2 can always be used in the same usage environment as the PC 1, and a special operation or the like is required for that purpose. Since the same use environment can be easily constructed without any problem, it is very convenient for the user. This is exactly the same not only when the destination shared PC is used as described above, but also when the PC is replaced.

  In addition, the information storage function 11 of the card 10 stores history information in addition to setting information for constructing the same use environment. That is, when information processing is performed by operating the PC 2, even if new history information is generated by execution of the information processing, the history information in the information storage function 11 of the card 10 is updated by the history information. The history information can be reflected in the construction of the subsequent use environment, and the history information can be avoided from remaining in the PC 2. The history information may always remain in the information storage function 11 of the card 10, but may be temporarily stored in the PC 2 and transferred to the card 10 side as needed.

  Furthermore, if device authentication or personal authentication as described above is performed, high security can be maintained while always enabling construction of the same use environment.

  By the way, in the stage where the PC 2 is operated and information processing is performed after the use environment is constructed, it is considered that the information storage function 11 and the information processing function 12 in the card 10 are used to realize the processing described below. It is done.

  For example, the types of software that can be executed on the PC 2 are limited based on information on software licenses stored in the information storage function 11 in the card 10 (hereinafter simply referred to as “license information”). Can be considered. Specifically, when there is an instruction to start certain application software by the user's operation, the information processing function 12 of the card 10 notified from the PC 2 side, the password input by the user and the information storage function 11 The license information is compared to determine whether or not the user is authorized to use the application software. Only when the user is authorized, the application software is activated. Make it possible. On the other hand, if the person is not authorized, the information processing function 12 activates the alternative software (if a free reader or the like) is installed in the PC 2, and if there is no alternative software. A message indicating that it cannot be used is displayed on the PC 2.

  If the restriction based on such license information is performed, the types of software executable on the PCs 1 and 2 can be restricted even when the same use environment is constructed between the different PCs 1 and 2. Therefore, for example, even when different software is installed in each of the PCs 1 and 2, appropriate and flexible use restrictions can be realized.

  Further, for example, when the user does not have the right to use the application software instructed to start, the application software is recognized and the user is allowed to rent or purchase the application software, and the price is paid by the information processing function 12 of the card 10. It may be possible to charge using the charging / settlement function. That is, billing for information processing performed by operating the PC 2 is performed using the settlement function of the card 10. Specifically, since personal authentication processing has been performed, from the result of the processing, by recognizing a payment means registered in advance for the user, for example, a credit card number, and withdrawing the price from the account specified from the number Just make a payment. In addition, it is conceivable to use a known billing / settlement process such as prepaid payment using a prepaid card.

  Such billing / settlement processing can be applied to the entire billing for information processing performed by operating the PC 2. For example, in addition to the above-described charging (price payment) related to the license, when the user uses a print service by a printer device connected to the PC 2, the print service is charged by the information processing function 12 of the card 10. / Consider using the payment function.

  The series of processing as described above is realized by the information processing function 12 of the card 10 executing its driving software (that is, a predetermined operation program).

  In addition, although this embodiment demonstrated the suitable Example of this invention, this invention is not limited to the content. In particular, the information stored by the information storage function 11 of the card 10 is not limited to the information described in the present embodiment as long as the information is used by an individual for constructing the same use environment in each of the PCs 1 and 2. . Further, the authentication function and the payment function realized by the information processing function 12 of the card 10 are not limited to the examples described in the present embodiment, and are realized by using other known techniques. Also good.

It is explanatory drawing which shows one specific example of the system to which this invention is applied. It is explanatory drawing which shows the outline | summary of the portable memory medium based on this invention. It is a flowchart which shows an example of the procedure of the information processing method which concerns on this invention. It is explanatory drawing which shows a specific example of an apparatus authentication process. It is explanatory drawing which shows a specific example of the personal authentication process at the time of using a personal certificate and a personal key.

Explanation of symbols

  1, 2 ... PC (information processing apparatus), 10 ... card (portable memory medium), 11 ... information storage function, 12 ... information processing function

Claims (10)

An information processing method for operating an information processing apparatus to perform information processing,
Setting information and history information used by an individual operator of the information processing apparatus to operate the information processing apparatus are stored in a portable memory medium having an information storage function and an information processing function,
Connecting the portable memory medium to connection means of an information processing apparatus to be operated and driving an information processing function in the portable memory medium by driving software;
When the information processing function is driven, a usage environment for operating the information processing device is constructed based on the setting information stored in the information storage function, and the information processing device is operated in the usage environment. Information processing,
When new history information is generated by execution of information processing, the history information already stored in the information storage function is updated by the history information. When the portable memory medium is connected to the connection means, device authentication is performed between the information processing apparatus having the connection means and the portable memory medium, and the portable memory medium is only used when the device authentication is successful. The information processing method according to claim 1, wherein the stored information can be used. When the portable memory medium is connected to the connection means, user authentication is performed based on user information input by an information processing apparatus having the connection means and user authentication information stored in the portable memory medium. The information processing method according to claim 1, wherein the information stored in the portable memory medium can be used only when the user authentication is successful. In performing information processing by operating the information processing apparatus, the types of software that can be executed by the information processing apparatus are limited based on license information stored in the portable memory medium. The information processing method according to claim 1, 2 or 3. 5. The information processing method according to claim 1, wherein billing for information processing performed by operating the information processing apparatus is performed using a settlement function of the portable memory medium. A portable memory medium that is used by being connected to connection means included in the information processing apparatus, can be detached from the connection means and can be transported after leaving, and has an information storage function and an information processing function,
The information storage function stores setting information and history information used by an individual operator of the information processing apparatus in operating the information processing apparatus,
When the information processing function is driven by driving software while connected to the connection means, a use environment for operating the information processing apparatus based on the setting information stored in the information storage function is constructed. Then, the information processing apparatus is operated by the usage environment to perform information processing,
The portable information processing apparatus is configured such that when new history information is generated by execution of information processing in the information processing apparatus, the history information already stored in the information storage function is updated by the history information. Memory medium. It has a function of performing device authentication with an information processing apparatus having the connection means, and is configured to be able to use stored information by the information storage function only when device authentication by the function is successful The portable memory medium according to claim 6. The function of performing user authentication based on user information input by an information processing apparatus having the connection means and user authentication information stored in advance, and the information storage function only when user authentication by the function is successful 8. The portable memory medium according to claim 6, wherein the storage information can be used. When the information processing apparatus is operated to perform information processing, it is configured to limit the types of software that can be executed by the information processing apparatus based on license information stored in advance. 9. A portable memory medium according to claim 6, 7 or 8. The portable memory medium according to claim 6, 7, 8, or 9, further comprising a settlement function for charging for information processing performed by operating the information processing apparatus.

Images