JP2021093217A - Acquisition control program, acquisition control method, and acquisition control device - Google Patents

Abstract

To enable a write destination to be easily controlled.SOLUTION: A storage control program causes a portable computer to execute storage control. More specifically, the storage control program causes the computer to execute processing of accepting a request for writing data and identification information of a data write source. The storage control program causes the computer to execute processing of referring to a storage unit that stores an execution authority at the data write source in association with the identification information of the write source and specifying an execution authority associated to the accepted identification information of the write source. When the specified execution authority corresponds to a specific execution authority, the storage control program causes the computer to execute processing of storing data in a first storage unit. When the specific execution authority does not correspond to the specified execution authority, the storage control program causes the computer to execute processing of storing data in a second storage unit provided outside the computer.SELECTED DRAWING: Figure 1

Description

The present invention relates to a memory control program, an acquisition control program, a memory control method, an acquisition control method, a storage control device, and an acquisition control device.

In recent years, due to changes in work styles, PCs (Personal Computers) are often taken out of the office for work. However, since various business data are stored in the PC, there are cases where information is leaked due to the loss of the PC. Therefore, for example, the storage device in the PC is encrypted, the business data is handled by the server of the data center, and the user remotely accesses the server.

Japanese Unexamined Patent Publication No. 2017-068384

However, in the encryption of the storage device and the remote access, the operability may be impaired due to the large processing overhead and the like. On the other hand, for example, it is conceivable to reduce the overhead by encrypting only the business data or storing it in the server. However, if the operation of encryption or remote access is complicated, the user may store business data in the PC without storing it in the server by encryption or remote access. Therefore, it is difficult for the PC or the administrator of the PC to control the writing destination of the user's business data.

One aspect is to provide a memory control program, an acquisition control program, a storage control method, an acquisition control method, a storage control device, and an acquisition control device that can easily control the writing destination.

In one embodiment, the acquisition control program causes the computer to perform a process of receiving specific instruction data and identification information of the device from the device. The acquisition control program refers to a storage unit that stores the location of the data in association with the identification information of the device, and causes the computer to execute a process of identifying the location of the data associated with the received identification information. The acquisition control program causes the computer to execute a process of outputting an acquisition request for the data stored in the specified location.

The writing destination can be easily controlled.

FIG. 1 is a block diagram showing an example of the configuration of the storage control system of the embodiment. FIG. 2 is a diagram showing an example of an in-house operation image. FIG. 3 is a diagram showing an example of an external work image. FIG. 4 is a diagram showing an example of the execution authority storage unit. FIG. 5 is a diagram showing an example of the distributed destination storage unit. FIG. 6 is a diagram showing an example of a filter driver. FIG. 7 is a diagram showing an example of memory control. FIG. 8 is a flowchart showing an example of the memory control process of the embodiment. FIG. 9 is a flowchart showing an example of the acquisition control process of the embodiment. FIG. 10 is a diagram showing an example of a computer that executes a memory control program and an acquisition control program.

Hereinafter, examples of the memory control program, the acquisition control program, the storage control method, the acquisition control method, the storage control device, and the acquisition control device disclosed in the present application will be described in detail based on the drawings. The disclosed technology is not limited by the present embodiment. In addition, the following examples may be appropriately combined as long as they do not contradict each other.

FIG. 1 is a block diagram showing an example of the configuration of the storage control system of the embodiment. The memory control system 1 shown in FIG. 1 includes a mobile terminal 10, a wearable terminal 20, an information processing device 100, and a cloud 200. The number of the mobile terminal 10, the wearable terminal 20, and the information processing device 100 is not limited, and an arbitrary number of mobile terminals 10, the wearable terminal 20, and the information processing device 100 may be provided. The mobile terminal 10 and the information processing device 100 and the wearable terminal 20 and the information processing device 100 communicate with each other by, for example, wireless communication such as Bluetooth (registered trademark) (hereinafter referred to as BT). Connected to communicable. Further, the information processing device 100 and the cloud 200 are connected to each other so as to be able to communicate with each other via the network N. As the network N, any kind of communication network such as LAN (Local Area Network) and VPN (Virtual Private Network) can be adopted as well as the Internet regardless of whether it is wired or wireless.

The storage control system 1 is an example of a system that suppresses information leakage from the information processing device 100 by controlling a storage area of business data processed by the information processing device 100. It is assumed that the user of the information processing device 100 possesses, for example, one mobile terminal 10 and one wearable terminal 20. The mobile terminal 10 is, for example, a mobile communication terminal such as a smartphone, and is a terminal used for user authentication and absentee detection. The mobile terminal 10 is paired with the information processing device 100 using, for example, a BT, and the mobile terminal ID (Identifier) of the mobile terminal 10 is registered in the information processing device 100. The mobile terminal 10 uses, for example, a fingerprint sensor or a camera (not shown) to perform user authentication by fingerprint authentication, iris authentication, face authentication, or the like. When the user authentication is completed and the data binding instruction is input in the unlocking application, the mobile terminal 10 sends the unlocking data instructing the data binding to the information processing device 100 together with the mobile terminal ID which is its own identification information. Send.

The wearable terminal 20 is, for example, a wearable device such as a smart watch worn on the user's wrist. The wearable terminal 20 receives and stores the first data, which is a part of the divided data, in which the business data processed by the information processing device 100 is divided. Further, when the wearable terminal 20 receives the first data acquisition request from the information processing device 100, the wearable terminal 20 transmits the first data corresponding to the acquisition request to the information processing device 100. Like the mobile terminal 10, the wearable terminal 20 is paired with the information processing device 100 using, for example, a BT, and the wearable terminal ID of the wearable terminal 20 is registered in the information processing device 100. And.

The information processing device 100 is, for example, an information processing device in which a user works in-house or outside the company, and a portable personal computer, a tablet terminal, or the like can be used. The information processing device 100 is a portable computer that executes memory control. That is, the information processing device 100 receives a request for writing data and identification information of a data writing source. The information processing device 100 identifies the execution authority associated with the received identification information of the writing source by referring to the storage unit that stores the execution authority of the data writing source in association with the identification information of the writing source. To do. When the specified execution authority corresponds to the specific execution authority, the information processing apparatus 100 stores the data in the first storage unit. When the specified execution authority does not correspond to the specific execution authority, the information processing device 100 stores the data in a second storage unit (cloud 200) provided outside the computer (information processing device 100). As a result, the information processing apparatus 100 can easily control the writing destination.

Further, the information processing device 100 receives specific instruction data and identification information of the device from the device (mobile terminal 10). The information processing device 100 identifies the location of the data (wearable terminal 20) associated with the received identification information by referring to the storage unit that stores the location of the data in association with the identification information of the device. The information processing device 100 outputs a request for acquiring data stored in the specified location. As a result, the information processing device 100 can reduce the risk of information leakage.

Here, an image of use in internal operation and external work will be described with reference to FIGS. 2 and 3. FIG. 2 is a diagram showing an example of an in-house operation image. In the example of FIG. 2, the user is performing various operations in the company using the information processing device 100. The storage unit of the information processing device 100 has a general area 122a and a secret sharing area 122b. The information processing device 100 monitors the opening and writing operations of the file in the general area 122a at the driver level and performs the operation as it is for the general area 122a, or for an external storage unit, for example, the storage unit 210 of the cloud 200. Distribute whether to do it. At this time, the information processing device 100 allocates storage destinations based on the execution authority of the application (hereinafter, also referred to as an application).

For example, it is assumed that the OS (Operating System) operating on the information processing device 100 considers the application whose execution authority is the administrator authority and does not leave business data including personal information on the information processing device 100. Therefore, the file opening (reading) and writing operations in the general area 122a of the application with administrator authority are performed as they are in the general area 122a. On the other hand, the file open / write operation to the general area 122a of the application having the general user authority is performed on the storage unit 210 of the cloud 200 by hooking the processing of the operation. In the example of FIG. 2, the write operation for the data 30 is hooked, redirected to the cloud 200, and stored as the data 30a in the storage unit 210 of the cloud 200.

On the other hand, the secret sharing area 122b is, for example, a folder for taking out data, and the data written in the secret sharing area 122b is secretly distributed and stored. For example, when the operation of writing the data 31 to the secret sharing area 122b is performed, the information processing device 100 encrypts the data 31 and divides the encrypted data 31 into two data, data 31a and 31b. The information processing device 100 transmits the data 31a to the wearable terminal 20 and stores it, and stores the data 31b in the secret sharing area 122b.

FIG. 3 is a diagram showing an example of an external work image. FIG. 3 is an example of a case where a user performs various operations using the information processing device 100 outside the company. The user unlocks the information processing device 100 by using, for example, a user ID and a password. Next, the user unlocks the mobile terminal 10 by using biometric authentication such as fingerprint, iris, and face. The user instructs the combination of secretly shared data by using the unlocking application of the mobile terminal 10. When the information processing device 100 is instructed to combine the data, the information processing apparatus 100 transmits a data 31a acquisition request to the wearable terminal 20 and acquires the data 31a from the wearable terminal 20. Further, the information processing apparatus 100 acquires the data 31b stored in the secret sharing area 122b and combines the data 31b in the RAM area 124 to restore the data 31. When the restored data 31 is changed and stored again, the information processing apparatus 100 encrypts and divides the data 31 again in the same manner as writing to the secret sharing area 122b shown in FIG. Further, when the information processing device 100 writes to the system file by the OS during external work, the data operation is performed with the administrator authority, so that the information processing device 100 writes to the general area 122a.

Next, the configuration of the information processing device 100 will be described. As shown in FIG. 1, the information processing device 100 includes a first communication unit 110, a second communication unit 111, a display unit 112, an operation unit 113, a storage unit 120, and a control unit 130. In addition to the functional units shown in FIG. 1, the information processing device 100 may have various functional units of a known computer, for example, various functional units such as various input devices and audio output devices.

The first communication unit 110 is realized by, for example, a communication module such as BT. The first communication unit 110 is, for example, a communication interface that is wirelessly connected to the mobile terminal 10 and the wearable terminal 20 by BT and controls information communication between the mobile terminal 10 and the wearable terminal 20. When the first data acquisition request is input from the control unit 130, the first communication unit 110 transmits the first data acquisition request to the wearable terminal 20. Further, the first communication unit 110 receives the unlocking data from the mobile terminal 10 and receives the first data from the wearable terminal 20. The first communication unit 110 outputs the received unlocking data and the first data to the control unit 130.

The second communication unit 111 is realized by, for example, a communication module such as a wireless LAN, a NIC (Network Interface Card), or the like. The second communication unit 111 is a communication interface that is connected to the cloud 200 by wire or wirelessly via the network N and controls information communication with the cloud 200. The second communication unit 111 transmits the data input from the control unit 130 to the cloud 200. Further, the second communication unit 111 outputs the data received from the cloud 200 to the control unit 130.

The display unit 112 is a display device for displaying various types of information. The display unit 112 is realized by, for example, a liquid crystal display or the like as a display device. The display unit 112 displays various screens such as a display screen input from the control unit 130.

The operation unit 113 is an input device that receives various operations from the user of the information processing device 100. The operation unit 113 is realized by, for example, a keyboard, a mouse, or the like as an input device. The operation unit 113 outputs the operation input by the user to the control unit 130 as operation information. The operation unit 113 may be realized by a touch panel or the like as an input device, or the display device of the display unit 112 and the input device of the operation unit 113 may be integrated.

The storage unit 120 is realized by, for example, a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory (Flash Memory), or a storage device such as a hard disk or an optical disk. The storage unit 120 includes an execution authority storage unit 121, a data storage unit 122, a distribution destination storage unit 123, and a RAM area 124. Further, the data storage unit 122 has a general area 122a and a secret sharing area 122b. Further, the storage unit 120 stores information used for processing in the control unit 130.

The execution authority storage unit 121 stores the execution authority of the data read / write source in association with the identification information of the read / write source. FIG. 4 is a diagram showing an example of the execution authority storage unit. As shown in FIG. 4, the execution authority storage unit 121 has items such as “process name” and “execution authority”. The execution authority storage unit 121 stores, for example, one record for each process name.

The "process name" is identification information that identifies the process from which data is read or written. "Execution authority" is information indicating the execution authority of the corresponding process. "Execution authority" includes, for example, administrator authority that can execute a privileged function called a super user, and general user authority that a general user performs normal work. Administrator privileges include, for example, if the OS is Windows (registered trademark), adminstrator and system for executing various service programs and the like. As the general user authority, for example, if the OS is Windows, user can be mentioned.

Returning to the description of FIG. 1, the data storage unit 122 stores the OS and user data. The data storage unit 122 has a general area 122a and a secret sharing area 122b. The general area 122a is an example of the first area. For example, in Windows, it corresponds to the C drive and stores the OS and various programs, and also stores the data created by the user using various programs. The secret sharing area 122b is an example of the second area, and is, for example, a folder for performing secret sharing. That is, the data stored in the secret sharing area 122b is subject to secret sharing. The secret sharing area 122b may be, for example, a specific folder in the C drive of Windows, or may be a partition different from the C drive. Further, in the secret sharing area 122b, for example, a partition different from that of the C drive may be mounted on a folder in the C drive by using a symbolic link or the like.

The distribution destination storage unit 123 stores the distribution destination (location) of the first data, which is a fragment of the data stored in the secret distribution area 122b, in association with the mobile terminal ID of the mobile terminal 10 possessed by the user. .. FIG. 5 is a diagram showing an example of the distributed destination storage unit. As shown in FIG. 5, the distributed destination storage unit 123 has items such as “portable terminal ID” and “wearable terminal ID”. The distribution destination storage unit 123 stores, for example, one record for each mobile terminal ID.

The "mobile terminal ID" is identification information that identifies the mobile terminal 10 possessed by the user. The "wearable terminal ID" is identification information that identifies the wearable terminal 20 worn by the user. In the distribution destination storage unit 123, for example, the user possesses the wearable terminal ID of the wearable terminal 20 that stores the first data among the data divided into the first data and the second data by secret sharing. It is stored in association with the mobile terminal ID of the mobile terminal 10 to be used.

The RAM area 124 is a storage area for storing the combined data when the secretly distributed data is combined. Further, the RAM area 124 temporarily stores the target data of the secret sharing when the data is secretly shared. The RAM area 124 is reserved in the main memory, for example, and when the power of the information processing device 100 is turned off, the stored contents are erased.

Returning to the description of FIG. 1, in the control unit 130, for example, a program stored in an internal storage device is executed by a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or the like using the RAM as a work area. It is realized by. Further, the control unit 130 may be realized by, for example, an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The control unit 130 includes a reception unit 131, a first specific unit 132, a memory control unit 133, a second specific unit 134, and an acquisition unit 135, and realizes the functions and operations of information processing described below. Or execute. The internal configuration of the control unit 130 is not limited to the configuration shown in FIG. 1, and may be another configuration as long as it is a configuration for performing information processing described later. In the following description, the OS operates in the control unit 130, and the reception unit 131, the first specific unit 132, the memory control unit 133, the second specific unit 134, and the acquisition unit 135 are used as filter drivers in the OS. It will be described as being incorporated.

Here, the filter driver will be described with reference to FIG. FIG. 6 is a diagram showing an example of a filter driver. As shown in FIG. 6, the block diagram 40 represents each function of Windows. Windows has a kernel mode 41 in which an OS kernel, a kernel mode driver, and the like are operated, and a user mode 42 in which an application and a user mode driver are operated. The kernel mode 41 includes a driver routine and a hardware abstraction layer (HAL), through which the kernel and the driver can access the hardware. The application operating in the user mode 42 uses the Windows API 43 to access each driver and the like in the kernel mode 41. In file access, instructions, data, and the like are exchanged between the Windows API 43 and the file system driver 44. In this embodiment, the filter driver 45 is provided between the Windows API 43 and the file system driver 44. The filter driver 45 controls the file system driver 44 by hooking an I / O (Input / Output) request (I / O Request Packet, IRP) from the application. That is, the filter driver 45 is loaded above the file system driver 44 and hooks instructions, data, and the like to the file system driver 44.

Returning to the description of FIG. 1, the reception unit 131 hooks the access request to the file system driver 44. The reception unit 131 determines whether or not the hooked access request is a data write request. When the reception unit 131 determines that the hooked access is not a data write request, the reception unit 131 accepts the data read request and the process name which is the identification information of the data read source. When the reception unit 131 determines that the hooked access is a data write request, the reception unit 131 accepts the data write request and the process name which is the identification information of the data write source. The reception unit 131 outputs the read request and process name of the received data, or the write request and process name to the first specific unit 132.

Further, when the reception unit 131 acquires the first data stored in the wearable terminal 20, the reception unit 131 first receives the unlocking of the information processing device 100 from the OS. When the information processing device 100 is unlocked, the reception unit 131 starts monitoring the unlocking data transmitted from the mobile terminal 10. The reception unit 131 determines whether or not the unlocking data has been received. When the reception unit 131 determines that the unlock data has not been received, the reception unit 131 continues to monitor the unlock data. When the reception unit 131 determines that the unlock data has been received, the reception unit 131 accepts the unlock data and the mobile terminal ID of the mobile terminal 10. That is, the reception unit 131 receives specific instruction data and identification information of the device from the device (mobile terminal 10). The reception unit 131 outputs the received unlocking data and the mobile terminal ID to the second specific unit 134.

The reception unit 131 polls the presence of the mobile terminal 10 using the first communication unit 110, for example, at 1-second intervals, and determines whether or not the mobile terminal 10 is in the vicinity of the information processing device 100. It also detects. When the mobile terminal 10 stops responding to polling, the reception unit 131 detects that the user has left the vicinity of the information processing device 100, that is, has left the seat, and instructs the OS to lock the information processing device 100. Instead of the mobile terminal 10, an ID card compatible with the wearable terminal 20 or NFC (Near Field Communication) may be used for the absence detection.

When the data read request and process name or the write request and process name are input from the reception unit 131, the first specific unit 132 refers to the execution authority storage unit 121 and refers to the data read source or write source process. Identify the execute permission of. That is, the first specific unit 132 refers to the storage unit that stores the execution authority of the data writing source in association with the identification information of the writing source, and executes the execution in association with the received identification information of the writing source. Identify permissions. The first specific unit 132 outputs a data read / write request, a process name, and the execution authority of the specified process to the storage control unit 133.

A data read / write request, a process name, and an execution authority of the process are input to the storage control unit 133 from the first specific unit 132. The storage control unit 133 determines whether or not the target of the read request or the write request is the general area 122a. When the storage control unit 133 determines that the target of the read request or the write request is the general area 122a, the storage control unit 133 determines whether or not the process execution authority is the administrator authority. When the storage control unit 133 determines that the process execution authority is the administrator authority, the storage control unit 133 outputs the data read request or write request as it is to the file system driver 44, causes the data to be read from the general area 122a, or , Remember.

When the storage control unit 133 determines that the process execution authority is not the administrator authority, the storage control unit 133 modifies the data read request or write request so as to redirect the data read request or write request to an external storage unit, for example, the storage unit 210 of the cloud 200. .. The storage control unit 133 outputs a read request or a write request of the corrected data to the file system driver 44. That is, the storage control unit 133 reads or stores data from an external storage unit, for example, the storage unit 210 of the cloud 200, via the second communication unit 111 and the network N. The storage control unit 133 redirects the data read request or write request to the RAM area 124 when the storage unit 210 of the cloud 200 cannot be accessed, such as when the information processing device 100 is not connected to the network N. May be modified to. Further, the access of the system file to the general area 122a will be described with reference to FIG. 7, which will be described later.

On the other hand, when the storage control unit 133 determines that the target of the read request or the write request is not the general area 122a, the storage control unit 133 modifies the data read request or the write request so as to redirect the data read request or the write request to, for example, the RAM area 124. In the case of a write request, the storage control unit 133 outputs a write request for the corrected data to the file system driver 44, and temporarily stores the data in the RAM area 124. In the case of a write request, the storage control unit 133 encrypts the data stored in the RAM area 124 and divides the data into the first data and the second data to perform secret sharing. For encryption, for example, AES (Advanced Encryption Standard) or 3DES (Triple Data Encryption Standard) can be used. Further, the data division in the secret sharing can be divided so as to reduce the size of the first data stored in the wearable terminal 20, for example. For example, the ratio of division between the first data and the second data can be about 1: 1000.

The storage control unit 133 transmits the divided first data to the wearable terminal 20 and stores it via the first communication unit 110. Further, the storage control unit 133 stores the divided second data in the secret sharing area 122b. Further, the storage control unit 133 stores the wearable terminal ID of the wearable terminal 20 that transmitted the first data and the mobile terminal ID of the mobile terminal 10 in association with each other in the distributed destination storage unit 123.

In the case of a read request for the secret sharing area 122b, the storage control unit 133 outputs the corrected data read request to the file system driver 44, and outputs the first data to the wearable terminal 20 via the first communication unit 110. Send an acquisition request. Here, it is assumed that the wearable terminal 20 and the information processing device 100 are already associated with each other. The storage control unit 133 acquires the first data in response to the acquisition request from the wearable terminal 20 via the first communication unit 110. When the storage control unit 133 acquires the first data, the storage control unit 133 acquires the second data corresponding to the acquired first data from the secret sharing area 122b. The storage control unit 133 combines and decodes the first data and the second data, and restores the data before division to the RAM area 124. The storage control unit 133 causes the process of the reading source to read the restored data.

In other words, the storage control unit 133 stores the data in the first storage unit when the specified execution authority corresponds to the specific execution authority. Further, when the specified execution authority does not correspond to the specific execution authority, the storage control unit 133 stores the data in the second storage unit (storage unit 210) provided outside the computer (information processing device 100). .. Further, the first storage unit has a first region and a second region. When the request for writing data is a request for the first area and the specified execution authority corresponds to the specific execution authority, the storage control unit 133 stores the data in the first area and has the specified execution authority. Does not correspond to a specific execution authority, the data is stored in the second storage unit. Further, when the request for writing data is a request for the second area, the storage control unit 133 divides the data, stores one of the divided data in the second area, and the other of the divided data is a computer. It is stored in a device (wearable terminal 20) provided outside the device.

Here, read / write access control for the general area 122a, that is, memory control will be described with reference to FIG. 7. FIG. 7 is a diagram showing an example of memory control. In the example of FIG. 7, when the application accesses the data of the general area 122a, for example, the C drive, the access request via the Windows API 43 is hooked by the filter driver 45. The filter driver 45 outputs the access request to the file system driver 44 as it is when the process that issues the hooked access request has administrator privileges. In this case, the application reads and writes data to the general area 122a.

On the other hand, the filter driver 45 refers to the owner of the data at the access destination when the process that issued the hooked access request does not have administrator privileges. When the owner of the data is the data for which the owner has the administrator authority, for example, the system file 32, the filter driver 45 outputs the access request to the file system driver 44 as it is, and reads / writes the data to / from the general area 122a. Let me. This is because when an application with general user authority wants to access the system file 32, even if the process that issued the hooked access request does not have administrator authority, all redirects to the storage unit 210 of the cloud 200 are performed normally. This is because it does not work. Since the system file 32 and the like are not business data including personal information, no information leakage occurs even if they are written in the general area 122a.

On the other hand, the filter driver 45 is modified to redirect the access request to the storage unit 210 of the cloud 200 when the data owner is the data for which the general user authority is, for example, the data 30 such as spreadsheet software. To do. The filter driver 45 outputs the modified access request to the file system driver 44, and causes the storage unit 210 of the cloud 200 to read / write the data 30a. At this time, the data 30 appears to be in the C drive from the application, but is actually stored as the data 30a in the storage unit 210 of the cloud 200.

Returning to the description of FIG. 1, when the unlocking data and the mobile terminal ID are input from the reception unit 131, the second specific unit 134 refers to the distributed destination storage unit 123 and is a wearable type corresponding to the mobile terminal ID. Identify the terminal ID. That is, the second specifying unit 134 identifies the wearable terminal 20 in which the first data is stored. In other words, the second specific unit 134 identifies the location of the data associated with the received identification information by referring to the storage unit that stores the location of the data in association with the identification information of the device. The second specific unit 134 outputs the specified wearable terminal ID together with the unlocking data to the acquisition unit 135.

When the wearable terminal ID specified from the second specific unit 134 and the unlocking data are input, the acquisition unit 135 receives the wearable terminal 20 corresponding to the specified wearable terminal ID via the first communication unit 110. The first data acquisition request is transmitted to. That is, the acquisition unit 135 outputs an acquisition request for the data stored in the specified location. The acquisition unit 135 acquires the first data in response to the acquisition request from the specified wearable terminal 20 via the first communication unit 110.

When the acquisition unit 135 acquires the first data, the acquisition unit 135 acquires the second data corresponding to the acquired first data from the secret sharing area 122b. Based on the unlocking data, the acquisition unit 135 combines and decodes the first data and the second data, and restores the data before division to the RAM area 124.

In other words, the data stored in the location (wearable terminal 20) is the first data which is one of the divided data, and the second data which is the other of the divided data is the storage unit of the computer. It is the data stored in (secret sharing area 122b). The acquisition unit 135 acquires the first data corresponding to the acquisition request from the specified location, and restores the data before division by combining the acquired first data and the second data. The location (wearable terminal 20) is a device different from the device (mobile terminal 10), and is a wearable device worn by the user of the computer (information processing device 100).

Next, the operation of the information processing apparatus 100 of the embodiment will be described. First, the memory control process related to the data write request will be described. FIG. 8 is a flowchart showing an example of the memory control process of the embodiment.

The reception unit 131 of the information processing device 100 hooks access to the file system driver 44. When the reception unit 131 determines that the hooked access is a data write request, the reception unit 131 accepts the data write request and the process name which is the identification information of the data write source (step S1). The reception unit 131 outputs the reception request for writing the received data and the process name to the first specific unit 132.

When the data write request and the process name (identification information) are input from the reception unit 131, the first specific unit 132 refers to the execution authority storage unit 121 and writes data based on the received identification information. The execution authority of the original process is specified (step S2). The first specific unit 132 outputs a data write request, a process name, and an execution authority of the specified process to the storage control unit 133.

When the data write request, the process name, and the process execution authority are input from the first specific unit 132, the storage control unit 133 determines whether or not the target of the write request is the general area 122a ( Step S3). When the storage control unit 133 determines that the target of the write request is the general area 122a (step S3: affirmative), the storage control unit 133 determines whether or not the process execution authority is the administrator authority (step S4). When the storage control unit 133 determines that the process execution authority is the administrator authority (step S4: affirmative), the storage control unit 133 outputs the data write request as it is to the file system driver 44 and stores the data in the general area 122a. (Step S5).

When the storage control unit 133 determines that the process execution authority is not the administrator authority (step S4: negation), the storage control unit 133 modifies the data write request so as to redirect it to the external storage unit. The storage control unit 133 outputs a write request for the corrected data to the file system driver 44, and stores the data in an external storage unit (step S6).

On the other hand, when the storage control unit 133 determines that the target of the write request is not the general area 122a (step S3: negation), the storage control unit 133 modifies the data write request so as to redirect to, for example, the RAM area 124. The storage control unit 133 outputs a write request for the corrected data to the file system driver 44, and temporarily stores the data in the RAM area 124. The storage control unit 133 encrypts the data stored in the RAM area 124 and divides the data into the first data and the second data (step S7).

The storage control unit 133 transmits the divided first data to the wearable terminal 20 and stores it (step S8). Further, the storage control unit 133 stores the divided second data in the secret sharing area 122b (step S9). Further, the storage control unit 133 associates the wearable terminal ID with the mobile terminal ID and stores them in the distribution destination storage unit 123 (step S10). As a result, the information processing apparatus 100 can easily control the writing destination.

In the case of a data read request when the wearable terminal 20 and the information processing device 100 are already associated with each other, the processing in steps S1 to S6 is the same as in the case of the write request. Further, in the case of the read request, instead of the processes of steps S7 to S10, the first data is acquired from the wearable terminal 20 and combined with the second data stored in the secret sharing area 122b to be combined with the RAM. Restore data to area 124. After that, the storage control unit 133 causes the process of the reading source to read the restored data. As a result, the information processing apparatus 100 can easily control the reading destination.

Next, the acquisition control process of performing user authentication and combining the divided data will be described. FIG. 9 is a flowchart showing an example of the acquisition control process of the embodiment.

The reception unit 131 of the information processing device 100 receives the unlocking of the information processing device 100 (step S21). When the lock of the information processing device 100 is released, the reception unit 131 starts monitoring the unlocking data transmitted from the mobile terminal 10 (step S22). The reception unit 131 determines whether or not the unlocking data has been received (step S23). When the reception unit 131 determines that the unlocking data has not been received (step S23: negative), the reception unit 131 returns to the determination in step S23. When it is determined that the unlocking data has been received (step S23: affirmative), the reception unit 131 accepts the unlocking data and the mobile terminal ID of the mobile terminal 10 (step S24). The reception unit 131 outputs the received unlocking data and the mobile terminal ID to the second specific unit 134.

When the unlocking data and the mobile terminal ID are input from the reception unit 131, the second specific unit 134 refers to the distribution destination storage unit 123 and identifies the wearable terminal ID corresponding to the mobile terminal ID (step S25). ). The second specific unit 134 outputs the specified wearable terminal ID together with the unlocking data to the acquisition unit 135.

When the wearable terminal ID specified from the second specific unit 134 and the unlocking data are input, the acquisition unit 135 requests the wearable terminal 20 corresponding to the specified wearable terminal ID to acquire the first data. Transmit (step S26). The acquisition unit 135 acquires the first data in response to the acquisition request from the specified wearable terminal 20 (step S27).

When the acquisition unit 135 acquires the first data, the acquisition unit 135 acquires the second data corresponding to the acquired first data from the secret sharing area 122b (step S28). Based on the unlocking data, the acquisition unit 135 combines and decodes the first data and the second data, and restores the data before division to the RAM area 124 (step S29). As a result, the information processing device 100 can reduce the risk of information leakage. That is, the storage control system 1 can access the data stored in the secret sharing area 122b only when the user who brought out the information processing device 100, the mobile terminal 10, and the wearable terminal 20 are aligned. Further, since the user wears the wearable terminal 20 in the memory control system 1, the risk of losing the wearable terminal 20 and the information processing device 100 at the same time can be reduced. Further, the storage control system 1 can suppress information leakage even if the information processing device 100 is lost. In addition, the memory control system 1 can realize strong security by biometric authentication in the mobile terminal 10 and convenience using short-range wireless communication.

In the above embodiment, the BT is used for communication between the mobile terminal 10 and the wearable terminal 20 and the information processing device 100, but the present invention is not limited to this. For example, a wireless LAN such as Wi-Fi Direct (registered trademark) or another short-range wireless communication standard may be used.

Further, in the above embodiment, the data stored in the secret sharing area 122b is secretly shared without the user performing an operation, but the present invention is not limited to this. For example, a button for taking out may be provided on the file operation screen, and when the button is pressed by the user, secret sharing may be performed on the data stored in the secret sharing area 122b.

In this way, the information processing device 100 is a portable computer and executes memory control. That is, the information processing device 100 receives a request for writing data and identification information of a data writing source. Further, the information processing apparatus 100 is associated with the received identification information of the writing source by referring to the execution authority storage unit 121 that stores the execution authority of the data writing source in association with the identification information of the writing source. Specify the execution authority. Further, when the specified execution authority corresponds to the specific execution authority, the information processing apparatus 100 stores the data in the data storage unit 122 which is the first storage unit. Further, when the specified execution authority does not correspond to the specific execution authority, the information processing apparatus 100 stores the data in the storage unit 210 which is a second storage unit provided outside the computer. As a result, the information processing apparatus 100 can easily control the writing destination.

Further, the data storage unit 122, which is the first storage unit of the information processing apparatus 100, has a general area 122a, which is a first area, and a secret sharing area 122b, which is a second area. Further, when the request for writing data is a request for the general area 122a which is the first area and the specified execution authority corresponds to the specific execution authority, the information processing apparatus 100 transfers the data in the first area. It is stored in a certain general area 122a. Further, when the specified execution authority does not correspond to the specific execution authority, the information processing apparatus 100 stores the data in the storage unit 210 which is the second storage unit. Further, the information processing apparatus 100 divides the data when the request for writing the data is the request for the secret sharing area 122b which is the second area. Further, the information processing device 100 stores one of the divided data in the secret sharing area 122b, which is a second area, and stores the other of the divided data in a device (mounted) provided outside the computer (information processing device 100). Store in the type terminal 20). As a result, the information processing apparatus 100 can easily control the writing destination of the data to be taken out.

The device (wearable terminal 20) is a wearable device worn by a user of a computer (information processing device 100). As a result, the risk of losing the wearable terminal 20 and the information processing device 100 at the same time can be reduced.

Further, the information processing device 100 receives specific instruction data and identification information of the device from the device (mobile terminal 10). Further, the information processing device 100 refers to the distributed destination storage unit 123 that stores the location of the data (wearable terminal 20) in association with the identification information of the device (mobile terminal 10), and associates the data with the received identification information. Identify the location of the obtained data. Further, the information processing apparatus 100 outputs a request for acquiring data stored in the specified location. As a result, the user can access the data stored in the secret sharing area 122b only when the mobile terminal 10, the wearable terminal 20, and the information processing device 100 are available.

Further, the data stored in the location (wearable terminal 20) is the first data which is one of the divided data, and the second data which is the other of the divided data is the storage unit of the computer (the storage unit of the computer (the wearable terminal 20). This is the data stored in the secret sharing area 122b). Further, the information processing apparatus 100 acquires the first data corresponding to the acquisition request from the specified location, and restores the data before division by combining the acquired first data and the second data. As a result, even if the user loses the information processing device 100, information leakage can be suppressed.

Further, the location (wearable terminal 20) is a device different from the device (mobile terminal 10), and is a wearable device worn by the user of the computer (information processing device 100). As a result, the risk of losing the wearable terminal 20 and the information processing device 100 at the same time can be reduced.

Further, each component of each of the illustrated parts does not necessarily have to be physically configured as shown in the figure. That is, the specific form of distribution / integration of each part is not limited to the one shown in the figure, and all or part of them are functionally or physically distributed / integrated in arbitrary units according to various loads and usage conditions. Can be configured. For example, the second specific unit 134 and the acquisition unit 135 may be integrated. Further, the illustrated processes are not limited to the above order, and may be performed simultaneously or in a different order as long as the processing contents do not contradict each other.

Further, the various processing functions performed by each device may be executed in whole or in any part on the CPU (or a microcomputer such as an MPU or a MCU (Micro Controller Unit)). In addition, various processing functions may be executed in whole or in any part on a program analyzed and executed by a CPU (or a microcomputer such as an MPU or MCU) or on hardware by wired logic. Needless to say, it's good.

By the way, various processes described in the above-described embodiment can be realized by executing a program prepared in advance on a computer. Therefore, in the following, an example of a computer that executes a program having the same function as that of the above embodiment will be described. FIG. 10 is a diagram showing an example of a computer that executes a memory control program and an acquisition control program.

As shown in FIG. 10, the computer 300 includes a CPU 301 that executes various arithmetic processes, an input device 302 that accepts data input, and a monitor 303. Further, the computer 300 includes a medium reading device 304 that reads a program or the like from a storage medium, an interface device 305 for connecting to various devices, and a communication device 306 for connecting to another information processing device or the like by wire or wirelessly. Has. Further, the computer 300 has a RAM 307 that temporarily stores various information and a hard disk device 308. Further, each of the devices 301 to 308 is connected to the bus 309.

The hard disk device 308 has a storage control program and acquisition having the same functions as the processing units of the reception unit 131, the first specific unit 132, the storage control unit 133, the second specific unit 134, and the acquisition unit 135 shown in FIG. The control program is stored. Further, the hard disk device 308 stores the execution authority storage unit 121, the data storage unit 122, the distribution destination storage unit 123, the RAM area 124, and various data for realizing the storage control program and the acquisition control program. The input device 302 receives, for example, input of various information such as operation information from the user of the computer 300. The monitor 303 displays various screens such as an output screen for the user of the computer 300, for example. The medium reader 304 reads the user's authentication information from, for example, an NFC-compatible ID card. For example, a printing device or the like is connected to the interface device 305. The communication device 306 is connected to, for example, the mobile terminal 10 and the wearable terminal 20, and exchanges various information with the mobile terminal 10 and the wearable terminal 20. Further, the communication device 306 is connected to, for example, the network N, and exchanges various information with the cloud 200 and other information processing devices.

The CPU 301 reads each program stored in the hard disk device 308, expands the program in the RAM 307, and executes the program to perform various processes. Further, these programs can make the computer 300 function as the reception unit 131, the first specific unit 132, the memory control unit 133, the second specific unit 134, and the acquisition unit 135 shown in FIG.

The above-mentioned storage control program and acquisition control program do not necessarily have to be stored in the hard disk device 308. For example, the computer 300 may read and execute a program stored in a storage medium that can be read by the computer 300. The storage medium that can be read by the computer 300 corresponds to, for example, a portable recording medium such as a CD-ROM, a DVD disk, or a USB memory, a semiconductor memory such as a flash memory, a hard disk drive, or the like. Further, even if the storage control program and the acquisition control program are stored in a device connected to a public line, the Internet, a LAN, or the like, and the computer 300 reads the storage control program and the acquisition control program from them and executes them. Good.

1 Storage control system 10 Mobile terminal 20 Wearable terminal 100 Information processing device 110 1st communication unit 111 2nd communication unit 112 Display unit 113 Operation unit 120 Storage unit 121 Execution authority storage unit 122 Data storage unit 122a General area 122b Secret distribution area 123 Distributed destination storage unit 124 RAM area 130 Control unit 131 Reception unit 132 1st specific unit 133 Storage control unit 134 2nd specific unit 135 Acquisition unit 200 Cloud 210 Storage unit N network

Claims (5)

Receives specific instruction data and identification information of the device from the device,
By referring to the storage unit that stores the location of the data in association with the identification information of the device, the location of the data associated with the received identification information is specified.
Output the acquisition request of the data stored in the specified location.
An acquisition control program characterized by having a computer execute processing. The data stored in the location is the first data which is one of the divided data, and the second data which is the other of the divided data is the data stored in the storage unit of the computer. ,
The data before division is restored by acquiring the first data corresponding to the acquisition request from the specified location and combining the acquired first data with the second data.
The acquisition control program according to claim 1. The location is a device different from the device and is a wearable device worn by the user of the computer.
The acquisition control program according to claim 1 or 2. Receives specific instruction data and identification information of the device from the device,
By referring to the storage unit that stores the location of the data in association with the identification information of the device, the location of the data associated with the received identification information is specified.
Output the acquisition request of the data stored in the specified location.
An acquisition control method characterized in that a computer executes processing. A reception unit that receives specific instruction data and identification information of the device from the device,
With reference to the storage unit that stores the location of the data in association with the identification information of the device, the identification unit that identifies the location of the data associated with the received identification information, and the identification unit.
An acquisition unit that outputs an acquisition request for data stored in the specified location, and an acquisition unit.
An acquisition control device characterized by having.

Images