JP2006139489A - Method for restoring environment of common use personal computer system and common use personal computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve short-time log-on even if the band of a network with a server for authenticating a user is narrow in a common use personal computer. <P>SOLUTION: An USB memory 2 has a protect region 22 that is used for backing up user data at a user terminal 1 and can be read and written by PIN authentication. The user terminal 1 reads encrypted user data 22B from the protect region 22 of the USB memory 2, decodes the user data 22B by a secret key 32A acquired from the server 3 for writing onto a hard disk, and restores the PC environment used last time. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a shared computer system that can use a shared computer used in a rental office, a remote office, or the like in an environment realized by its own computer and under high security.

Here, the computer environment refers to various programs installed in the computer, a part of hardware configuration such as network connection, setting of parameters necessary for the operation of the computer, and the like. Operating System), communication program, mail software, Internet browser, dictionary, various application software, and the like.
JP 2001-34580 A

  However, in such a conventional method for restoring the environment of a shared-use personal computer, user data for restoring the personal environment is downloaded from the server that manages the environment, so that the bandwidth of the network with the server is narrow There was a problem that it took a long time to log in to the computer.

  An object of the present invention is to provide a shared use personal computer system environment restoration method and a shared use personal computer that can log in in a short time even when the bandwidth of a network with a server for authenticating a user is narrow.

The environment restoration method of the shared use personal computer system of the present invention is as follows.
In a shared use personal computer system having a shared user terminal, a secret key for encrypting / decrypting user data, and a server for backing up the user data, by PIN authentication for backing up the user data in the user terminal A USB memory capable of reading and writing to a specific memory area is prepared, and the user terminal reads the encrypted user data from the memory area of the USB memory, decrypts the user data with the private key acquired from the server, and writes it to the hard disk Thus, the previously used PC environment is restored.

  The present invention stores differential user data in a USB memory connected to a user terminal, and writes the differential user data on the hard disk of the user terminal by high-speed data transfer from the USB memory when logging into the personal computer. Restore the environment.

  In the present invention, the user data is backed up on the server side as a recovery application when the data stored in the USB memory is damaged or the USB memory is lost, and the differential data backup process periodically performed while using the user terminal is performed. , It takes less time because it is done by the background processing of the PC in use. However, since the user terminal cannot be used for downloading at the time of login until the download of all the difference data is completed, the time for logging in to the user terminal is greatly shortened by reducing this processing time. By storing a secret key with a relatively small data capacity for decrypting user data in the server and backing up only the encrypted data to the USB memory, the communication time with the server at the time of login is shortened, and the USB memory Even if the data inside is analyzed by a third party, the contents of the data cannot be seen and security is increased.

  According to the present invention, since user data is read from the protected area of the USB memory, the login time can be shortened even in an environment where the network bandwidth with the server is narrow, and a secret key for decrypting the data is stored in the server. Therefore, even if the USB memory is stolen and analyzed, no information is leaked, and even if the data in the USB memory is damaged or the USB memory is lost, it is possible to realize a highly secure shared use personal computer system. .

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of a shared use personal computer system according to an embodiment of the present invention.

  As shown in FIG. 1, a shared use personal computer system of this embodiment includes a shared user terminal (shared use personal computer) 1, a USB memory 2 for backing up user data, and a secret for encrypting / decrypting user data. And a server 3 that backs up user data. The user terminal 1 and the server 3 are connected by an IP network 4 such as the Internet. The user terminal 1 communicates with the USB memory 2 by a USB driver 14 installed therein. To exchange user data.

  The user terminal 1 periodically checks the user authentication of the USB memory 2 and the differential file being used by the terminal, and encrypts the user data with the client module 12 that performs a process of backing up data to the USB memory 2 and the server 3. Communication between the USB memory 2 and the encryption / decryption processing unit 11 for use, the initial environment restoration software 13 for restoring data on the hard disk of the terminal to a preset initial environment when the OS of the user terminal 1 is restarted after use And a USB memory PIN authentication module 15 that performs PIN authentication that enables data writing to the protected area 22 of the USB memory 2.

  The USB memory 2 has a non-protected area 21 that can be arbitrarily read / written from the user terminal 1 and a protected area 22 that can be read / written by PIN authentication from the user terminal 1, and the non-protected area 21 is for PIN authentication. USB memory protection management means for registering the ID and password and controlling the protection release / non-release of the protection area 22 (function to perform PIN authentication inside the USB memory when the PIN authentication ID and password are input from the outside) And the protected area 22 can be read and written only when authentication is successful, in which case the PIN authentication ID and password have attributes that are externally write-only and unreadable) 21A and the USB memory 2 jointly Shared-use PC system for authenticating whether it can be used in the PC system ID information 21B is stored, and the protect area 22 stores shared PC user authentication information 22A for user authentication of the shared PC system, and is backed up when the user terminal 1 is used. The encrypted user data 22B is written as needed.

  The server 3 includes a server module 31 for exchanging data with the user terminal 1 and recognizing a user, and a user data storage area 32 for storing user data. The user data storage area 32 encrypts user data. / A secret key 32A encrypted with a password for decryption and an encrypted user data archive 32B are stored.

  A specific method for registering user registration and necessary information in the USB memory 2 before using the shared personal computer system will be described with reference to FIG.

  After the USB memory 2 is inserted into the user terminal 1, the PIN authentication ID and password are stored in the USB memory protection management means 21A from the user terminal 1 to the USB memory 2 (step 101). User registration of the shared use personal computer system is performed from the user terminal 1 to the server 3 (steps 102 to 103). The USB memory registration interface module is acquired from the user terminal 1 by the CGI (Common Gateway Interface) program of the server 3 (steps 104 to 105). The acquired USB memory registration interface module is executed, the shared use PC system identification information 21B of the USB memory 2 is assigned, and the ID and password registered in step 102 are written in the protect area 22 (steps 106 to 108). The user terminal 1 generates a secret key 32B for encrypting / decrypting user data (step 110). The private key 32B is encrypted with the password registered in step 102 (step 111). The secret key 32A encrypted with the password is transmitted to the server 3 and stored (steps 112 to 113).

  A specific method of logging in to the user terminal 1 when using the shared personal computer system will be described with reference to FIG.

  When the user terminal 1 detects the insertion of an arbitrary USB memory 2, the USB memory 2 is properly registered by the shared use PC system and can be used in the shared use PC system to check whether the USB terminal 2 can be used. The presence / absence of the used PC system identification information 21B is confirmed and identified (step 201). PIN authentication is performed to obtain permission to access the protected area 22 of the USB memory 2 (step 202). The user ID and password registered in step 108 are read from the protected area 22 and transmitted to the server 3 for authentication (steps 203 to 204). The private key 32A encrypted with the password stored in the user data storage area 32 of the server 3 is acquired (step 205). The private key 32A encrypted with the password at the user terminal 1 is decrypted with the password (step 206). The encrypted user data 22B is read from the protected area 22 of the USB memory 2 (step 207). The user terminal 1 decrypts the encrypted user data 22B with the secret key 32A (step 208). A file list in the drive including the initial environment of the user terminal 1 and user data is created (step 209). After this, use of the shared use personal computer is started.

  A specific method for backing up user data during use of the user terminal 1 and ending the use will be described with reference to FIG.

  As a method for backing up user data, the client module 12 checks the differential file created / updated / deleted in the activated drive while using the user terminal 1 (step 301). The checked created / updated file is encrypted with the private key 32A (step 302). The encrypted file is transmitted to the USB memory 2 and the server 3, and the deleted file is deleted (steps 303 to 304). When the user terminal 1 is terminated, the user terminal 1 sends final backup data and a file list together with a logout command to the server 3 and the USB memory 2 (steps 305 to 308). When the drive is restarted (step 309), user data stored in the drive is erased or dummy data is overwritten, and the drive is initialized to an initial environment state (step 310). The drive in the initial environment is activated (step 311). The file group of user data stored in the server 3 is collected into an archive 32B (step 312).

  A specific method for registering a new USB memory and restoring user data stored in the server 3 when the data in the USB memory 2 is damaged or the USB memory 2 is lost will be described with reference to FIG.

  A new USB memory 2 is inserted into the user terminal 1, and the PIN authentication ID and password are stored again in the USB memory protection management means 21A (step 401). A USB memory re-registration request is made from the user terminal 1 to the server 3 (step 402), a USB memory issuing interface module by CGI is acquired from the server 3 (step 403), and the acquired USB memory registration interface module is executed. The shared PC system identification information is written in the unprotected area 21 of the new USB memory, and the shared PC user ID / password 221 is written in the protected area 22 (steps 404 to 405). A data recovery request is made from the user terminal 1 (step 406), the user data archived on the server 3 is decompressed (step 407), and the user data is stored in the protected area 22 of the USB memory via the user terminal 1. Write (steps 408-409).

It is a block diagram of the shared use personal computer system of one Embodiment of this invention. It is a figure which shows a user registration / USB memory registration sequence. It is a figure which shows a login sequence. It is a figure which shows the sequence of a user terminal (data backup). It is a figure which shows the sequence of USB memory re-registration / data restoration.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User terminal 2 USB memory 3 Server 11 Encryption / decryption processing part 12 Client module 13 Initial environment restoration software 14 USB driver 15 USB memory PIN authentication module 21 Unprotected area 21A USB memory protection management means 21B Shared use PC system identification information 22 Protection Area 22A Shared use PC user ID / password 22B Encrypted user data 101-113, 201-209, 301-312, 401-409 Steps

Claims (4)

  PIN authentication for backing up user data in the user terminal in a shared use personal computer system having a user terminal to be shared, a secret key for encrypting / decrypting user data, and a server for backing up the user data A USB memory capable of reading and writing to a specific memory area is prepared, and the user terminal reads the encrypted user data from the memory area of the USB memory and decrypts the user data with the secret key acquired from the server The method of restoring the environment of a shared use personal computer system that restores the previously used PC environment by writing to the hard disk.   The user terminal has a preset OS (Operating System) on the hard disk and application data as an initial environment, and has a program that is restored to the initial state every time it is restarted. 2. The shared use according to claim 1, wherein the difference data is periodically checked, and if the difference data is generated, the difference data is encrypted with the secret key acquired from the server and backed up to the USB memory. How to restore the environment of a PC system.   The same user data that is periodically backed up to the USB memory is backed up on the server at the same time via the network, and the backed up user data file group is stored as archive data on the server, and then transferred to the USB memory. The method for restoring the environment of a shared personal computer system according to claim 1 or 2, wherein the archive data is decompressed when the data restoration request is made, and the user data is downloaded and restored to the USB memory via the user terminal. A shared computer,
User authentication of a USB memory capable of reading and writing a specific memory area by PIN authentication for backing up user data in the shared use personal computer, and periodically checking a differential file while using the shared use personal computer, A client module that backs up data to the server,
An encryption / decryption processing unit that encrypts the user data, reads the encrypted user data from a specific memory area of the USB, and decrypts the user data with a secret key acquired from the server;
Initial environment restoration software for restoring data on the hard disk of the shared use personal computer to a preset initial environment when the OS of the shared use personal computer is restarted after use;
A USB driver for communicating with the USB memory;
A shared-use personal computer having a USB memory PIN authentication module that performs PIN authentication that enables data writing to a specific memory area of the USB memory.

Images