JP4899196B2 - Data management system, terminal computer, management computer, data management method and program thereof - Google Patents

Description

  The present invention relates to a data management system, a terminal computer, a management computer, a data management method, and a program therefor, and more particularly to a technique for collecting data that can be accessed with a predetermined authority from a terminal computer to a management computer.

As countermeasures against information leakage, an increasing number of companies and organizations collect or audit logs indicating the usage status of computer terminals.
On the other hand, data with a high security risk such as an audit log stored in a computer terminal usually has no administrator authority by an access control list (ACL) of a file system that is a function of the operating system. And is protected from access.
Therefore, for example, as shown in FIG. 9, when data that is permitted to be accessed only with administrator authority is extracted by a program for extracting data, it is started by an administrator who has administrator authority, and with administrator authority. Data cannot be acquired unless it is a program that operates.

Therefore, it is necessary to collect such data by an administrator having administrator authority, but there are actually many computer terminals that are operated offline. If it is a computer terminal connected to the network, the administrator can collect data via the network, but in order to collect data from a computer terminal that is operated offline, it is necessary to collect data periodically. In addition, it is necessary for the administrator to visit the place where the computer terminal is installed, or for the general user of the computer terminal to periodically bring the computer terminal to the supervising department, which entails enormous operational costs.
On the other hand, by giving administrator authority to a general user of a computer terminal, a method for allowing the general user to collect an audit log can be considered, but the security level is significantly lowered.

  In Patent Document 1, an access-restricted electronic file is generated so that only a user who is authorized to access with the access-restriction information can decrypt it, and the access-restricted electronic file and the original electronic file are generated as described above. A technique for managing based on access restriction information is disclosed. As a result, users who are not authorized to access with the access restriction information can be prevented from accessing even if the access restricted electronic file is obtained, and the administrator can manage the access authority. It can be done automatically just by creating authority information.

  Patent Document 2 discloses management of arbitrary information by extracting information on a management target file corresponding to a request from a file information management database, and executing processing on the management target file based on the extracted information. A technique capable of efficiently realizing the above is disclosed. Further, in Patent Document 2, when executing a business application that uses a management target file, it is determined whether or not there are any deletion authority, backup authority, and usage authority of the management target file, and a determination is made that the user has the usage authority In this case, the management target file to be processed by the business application is extracted from the hard disk.

  Further, in Patent Document 3, when information recorded on a recording medium is copied to another computer, the information can be encrypted and copied, and the recording medium is connected to the computer and successfully authenticated. There is disclosed a technique capable of decrypting the copied information only when it is present. As a result, even when information of a certain computer is recorded on a recording medium and taken out and copied to another computer, only the information that has the information leakage suppression recording medium can be used. This makes it possible to appropriately prevent information leakage.

  Furthermore, in Patent Document 4, based on the first falsification determination information generated by the file export management server based on the package data and the second falsification determination information generated from the package data by the terminal device. The terminal device determines the validity of the package data stored in the terminal device, and if it is determined that the package data is valid, the decryption key for decrypting the encrypted usage target information included in the package data is transmitted to the terminal device. Techniques to do this are disclosed. As a result, when the package data has been tampered with, the decryption key can be prevented from being transmitted to the terminal device, and when the package data has been tampered with, it is possible to prevent unauthorized use of the target information. .

  Further, in Patent Document 5, if it is determined that a document exported from a terminal of the document management system includes confidential information, the document is permitted or blocked, or the document is exported before being exported from the terminal. A technique for protecting a confidential document by deciding whether to encrypt the document is disclosed.

JP 2004-164604 A JP 2005-148920 A JP 2008-108232 A JP 2008-269544 A JP 2008-541273 A

  As described in the background art, the contents of data with high security risk, that is, data that can be accessed only with a predetermined authority from a computer terminal operated offline, by a user who does not have the predetermined authority. There is a problem that there is no effective method that allows the collected data to be collected safely without exposing the data, and further, the collected data to be updated.

  In addition, none of Patent Documents 1 to 5 discloses a specific mechanism for solving the above-described problem. That is, each of Patent Documents 1 to 5 is specific for enabling data that can be accessed only with a predetermined authority to be collected safely by a user who does not have the predetermined authority without exposing its contents. It does not disclose a general mechanism.

  In order to solve the above-described problem, the object of the present invention is to collect data that can be accessed only with a predetermined authority, by a user who does not have the predetermined authority, safely without exposing the contents thereof. An object of the present invention is to provide a data management system, a terminal computer, a management computer, a data management method, and a program thereof capable of updating data.

  A data management system according to a first aspect of the present invention includes a terminal computer that stores access restriction data, and a management computer that stores the access restriction data collected from the terminal computer. The terminal computer operates with a predetermined authority capable of accessing the access restriction data, obtains access restriction data stored in the terminal computer, and obtains encrypted information obtained by encrypting the obtained access restriction data. And generating the access restriction data generated when the management computer stores the access restriction data, and deleting the access restriction data stored in the terminal computer based on data specifying information for specifying the access restriction data. A data access program for operating a terminal computer; and a data access program that is activated by a user who does not have the predetermined authority, operates with the authority of the user, and in response to a request from the user, Data acquisition from the user Depending on the input of information comprises a user interface program for operating the terminal computer so as to execute the deletion of the access restriction data based on the data identification information to the data access program. The management computer operates with the predetermined authority, and stores the access restriction data generated by decrypting the encryption information in the management computer in response to the input of the encryption information, and the access restriction data is stored in the management computer. A data recovery program for operating the management computer to generate data specifying information to be specified;

  The terminal computer according to the second aspect of the present invention stores access restriction data collected by the management computer. Operates with a predetermined authority capable of accessing the access restriction data, obtains access restriction data stored in the terminal computer, generates encrypted information obtained by encrypting the obtained access restriction data, and The access restriction data generated when the management computer stores the access restriction data decrypted from the encrypted information and stored in the terminal computer is deleted based on the data specifying information for specifying the access restriction data. A data access program for operating the terminal computer, and activated by a user who does not have the predetermined authority, operates with the authority of the user, and from the data access program according to a request from the user Acquire encryption information and specify data from the user In response to the input of the broadcast, with the user interface program for operating the terminal computer so as to execute the deletion of the access restriction data based on the data identification information to the data access program.

  A management computer according to a third aspect of the present invention stores the access restriction data collected from a terminal computer that stores access restriction data. The encrypted information is decrypted in response to the input of encrypted information generated by encrypting the access restricted data stored in the terminal computer, operating with a predetermined authority capable of accessing the access restricted data. The access restriction data generated in this way is stored in the management computer, the access restriction data is specified, and the management computer is operated to generate data specifying information used to delete the access restriction data from the terminal computer. Have a data collection program.

  A data management method according to a fourth aspect of the present invention is a data management method for collecting the access restriction data from a terminal computer storing access restriction data to a management computer. A data access program operating with a predetermined authority capable of accessing the access restriction data acquires the access restriction data stored in the terminal computer and generates encrypted information obtained by encrypting the acquired access restriction data A step of causing the terminal computer to operate, and a user interface program started by a user who does not have the predetermined authority and operates with the authority of the user, in response to a request from the user, the data A step of operating the terminal computer to obtain the encrypted information from an access program; and a data collection program operating with the predetermined authority decrypts the encrypted information in response to the input of the encrypted information. When the generated access restriction data is stored in the management computer And operating the terminal computer to generate data specifying information for specifying the access restriction data, and the user interface program in response to an input of the data specifying information from the user. And a step of operating the terminal computer to delete the access restriction data stored in the terminal computer based on the data specifying information.

  A data access program according to a fifth aspect of the present invention is a data access program for controlling a terminal computer that stores access restriction data collected by a management computer. In response to a request from a user interface program that is activated by a user who does not have a predetermined authority capable of accessing the access restriction data and operates with the user's authority, the user operates with the predetermined authority, When obtaining access restriction data stored in the terminal computer, encrypting the obtained access restriction data to generate encrypted information, and storing the access restriction data decrypted from the encrypted information by the management computer Generated in response to an input from the user interface program of data specifying information for specifying the access restriction data, and stored in the terminal computer based on the data specifying information. The terminal computer is executed with a step of executing restriction data deletion. Make.

  A data collection program according to a sixth aspect of the present invention is a data collection program for controlling a management computer that stores the access restriction data collected from a terminal computer that stores access restriction data. The encrypted information is decrypted in response to the input of encrypted information generated by encrypting the access restricted data stored in the terminal computer, operating with a predetermined authority capable of accessing the access restricted data. Storing the access restriction data generated in the management computer, specifying the access restriction data, and generating data specifying information used for deleting the access restriction data from the terminal computer. Let it run.

  According to each aspect of the present invention described above, data that can be accessed only with a predetermined authority can be collected safely by a general user who does not have the predetermined authority without exposing the contents, and the collected data is updated. Data management system, terminal computer, management computer, data management method, and program thereof can be provided.

It is a block diagram which shows the outline | summary of the data management system concerning embodiment of this invention. It is a block diagram of the data management system concerning embodiment of this invention. It is a figure which shows the structural example of the user terminal and administrator terminal concerning embodiment of this invention. It is a figure which shows the audit log concerning embodiment of this invention. It is a figure which shows the offset data concerning embodiment of this invention. It is a sequence diagram which shows the extraction process of the audit data of the data management system concerning embodiment of this invention. It is a sequence diagram which shows the storage process of the audit data of the data management system concerning embodiment of this invention. It is a sequence diagram which shows the deletion process of the audit data of the data management system concerning embodiment of this invention. It is a figure for demonstrating the user terminal concerning background art.

Embodiments of the present invention will be described below with reference to the drawings.
First, an outline of a data management system according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a configuration diagram showing an outline of a data management system according to an embodiment of the present invention.

The data management system includes a terminal computer 5 and a management computer 6.
The terminal computer 5 includes a user interface program 51, a data access program 52, and access restriction data 53.
The management computer 6 has a data collection program 61 and access restriction data 62.

The user interface program 51 is activated by a user who does not have a predetermined authority and operates with the authority of the user. The user interface program 51 provides the user with a user interface for acquiring access restriction data 53 that is stored in the terminal computer 5 and can be accessed with a predetermined authority.
The data access program 52 operates with a predetermined authority and provides a function of accessing the access restriction data 53.
The data collection program 61 operates with a predetermined authority, and stores the access restriction data 53 included in the encryption information 7 in the management computer 6.
The access restriction data 53 and 62 is data stored in an area that can be accessed with a predetermined authority.

  Next, an outline of processing of the data management system according to the embodiment of the present invention will be described.

First, the user interface program 51 outputs an access restriction data 53 extraction request to the data access program 52 in response to an input of an access restriction data 531 extraction request from a user.
When the data access program 12 receives the output of the audit data extraction request from the user interface program 11, the data access program 12 acquires the access restriction data 53 stored in the terminal computer 5, and encrypts the acquired access restriction data 53. Information 7 is generated. Further, the data access program 12 outputs the generated encryption information 7 to the user interface program 51.
Then, the user acquires the encrypted information 7 generated from the user interface program 51, and delivers the acquired encrypted information 7 to the administrator.

The data collection program 61 stores the access restriction data 53 generated by decrypting the encrypted information 7 in the management computer 6 in response to the input of the encryption information 7 from the administrator, and specifies the access restriction data 53. The data specifying information 8 to be generated is generated.
Then, the administrator acquires the data specifying information 8 generated from the data collection program 61, and delivers the acquired data specifying information 8 to the administrator.

The user interface program 51 outputs the input data specifying information 8 to the data access program 52 in response to the input of the data specifying information 8 from the user.
When receiving the data specifying information 8 from the data access program 52, the data access program 52 deletes the access restriction data 53 stored in the terminal computer 5 based on the data specifying information 8 that specifies the access restriction data 53. .

  Next, the data management system according to the embodiment of the present invention will be described in detail with reference to FIG. FIG. 2 is a configuration diagram of the data management system according to the embodiment of the present invention.

  The data management system includes a user terminal 1 and an administrator terminal 2. In the present embodiment, a case where the audit log 131 of the user terminal 1 operated offline is collected in the administrator terminal operated by the administrator is illustrated.

The user terminal 1 includes a user interface program 11, a data access program 12, and a storage device 13. The user terminal 1 is operated offline by a general user. The user terminal 1 is an information processing apparatus such as a PC (Personal Computer) or a server. The user terminal 1 functions as a terminal computer.
The administrator terminal 2 includes a data collection program 21 and a storage device 22. The administrator terminal 2 is used by an administrator who has administrator authority. The administrator terminal 2 is an information processing apparatus such as a PC or a server. The administrator terminal 2 functions as a management computer.
As illustrated in FIG. 3, the user terminal 1 and the administrator terminal 2 are information processing apparatuses including a processor 91, a memory 92, and an HDD (Hard Disk Drive) 93, and the processor 91 moves from the HDD 93 to the memory 92. Each program 11, 12, 21 is loaded and executed.

The user interface program 11 is an application program that is started by a general user and operates with the authority of the general user, and uses a user interface for extracting any range of data included in the audit log 131 as audit data. To provide In addition, the user interface program 11 generates an extraction file 3 that includes the extracted audit data.
The data access program 12 is a resident program that operates with administrator authority and provides a function of accessing the audit log 131.

  The storage device 13 stores the audit log 131, the encryption key 132, and the offset data 133 in an area that can be accessed only with administrator authority. That is, the audit log 131, the encryption key 132, and the offset data 133 are information that cannot be accessed with the authority of a general user. The storage device 13 is, for example, a memory or an HDD. Here, the area that can be accessed only with the administrator authority is, for example, a directory that can be accessed only with the administrator authority. However, the access authority is not limited to this, and an access authority that can be accessed only by an administrator authority may be set directly for each piece of information. The audit log 131, the encryption key 132, and the offset data 133 are composed of, for example, one or a plurality of files that can be accessed only with administrator authority.

  The audit log 131 is a log with a high security risk indicating operations performed on the user terminal 1 and the like, for example, a security log of Windows (registered trademark). As illustrated in FIG. 4, the audit log 131 is information including the time when the event occurred and the event. FIG. 4 illustrates a case where a plurality of pieces of data at the same time are not stored in the audit log 131 in order to simplify the description.

  The encryption key 132 is key data used to encrypt the acquired audit data when the data access program 12 acquires the audit data included in the audit log 131 from the storage device 13.

  The offset data 133 is generated when the data access program 12 acquires audit data from the audit log 131 and is stored in the storage device 13. As illustrated in FIG. 5, the offset data 133 is information including an ID value that uniquely identifies an operation in which the data access program 12 has extracted data included in the audit log 131 and a range of the extracted data. In the present embodiment, the offset data 133 indicates the range of data extracted from the audit log 131 by the start time and end time of the range, but any information can be used as long as the extracted data can be specified. There may be. Therefore, the offset data 133 is also information that can identify the extracted data by the ID value.

The data collection program 21 is an application program that is activated by an administrator and operates with administrator authority, and stores the audit data included in the extraction file 3 in the audit log storage device 22. In addition, the data collection program 21 generates the collection completion certification file 4 when the audit data is stored in the storage device 22.
The audit log 221 and the decryption key 222 collected from the user terminal 1 are stored in an area that can be accessed only by the administrator authority of the storage device 22. The storage device 22 is, for example, a memory or an HDD. The audit log 221 and the decryption key 222 are composed of, for example, one or a plurality of files that can be accessed only with administrator authority.
The audit log 221 includes audit data collected from the user terminal 1.
The decryption key 222 is key data that is paired with the encryption key 132, and is key data for decrypting the data encrypted by the encryption key 132 in the user terminal 1.

Subsequently, processing of the data management system according to the exemplary embodiment of the present invention will be described with reference to FIGS. 2 and 6 to 8.
First, with reference to FIG. 2 and FIG. 6, the audit data extraction processing of the data management system according to the embodiment of the present invention will be described.

When extracting the audit data of the user terminal 1, the general user activates the user interface program 11 on the user terminal 1 and executes an audit data extraction process (step S300).
The user interface program 11 outputs an audit data extraction request to the data access program 12 in response to an input of an audit data extraction request from a general user (step S301).

  When receiving the output of the audit data extraction request from the user interface program 11, the data access program 12 acquires the audit data from the audit log 131 (step S302). Then, the data access program 12 encrypts the acquired audit data using the encryption key 132 (step S303), and outputs the encrypted audit data to the user interface program 11. At this time, the data access program 12 generates a unique ID value (step S 304), and stores information associating the generated ID value with the range of data extracted from the audit log 131 as offset data 133. The data is stored in the device 13 (step S305). Further, the data access program 12 outputs the generated ID value to the user interface program 11.

The user interface program 11 generates the extraction file 3 including the ID value output from the data access program 12 and the encrypted audit data (step S306).
The general user acquires the extracted file 3 generated from the user interface program 11, and stores the acquired extracted file 3 in an external storage such as a USB (Universal Serial Bus) memory or a portable HDD (Hard Disk Drive). The data is stored in a medium, and this external storage medium is delivered to the administrator.

  Next, the audit data storage process of the data management system according to the embodiment of the present invention will be described with reference to FIGS.

When the audit data collected from the user terminal 1 is stored in the administrator terminal 2, the administrator activates the data collection program 21 in the administrator terminal 2 and executes audit data storage processing (step S400).
The data data collection program 21 acquires the extracted file 3 input by the administrator (step S401), and decrypts the audit data included in the acquired extracted file 3 using the decryption key 22 (step S402). Then, the decrypted audit data is stored in the storage device 22 (step S403). When the storage of the audit data is completed, the data data collection program 21 obtains the collection completion certification file 4 including the ID value included in the extraction file 3 and the electronic signature data generated from the ID value using the decryption key 22. Generate (step S404).

Then, the administrator acquires the collection completion proof file 4 generated from the data data collection program 21, stores the acquired collection completion proof file 4 in an external storage medium, and receives this external storage medium by a general user. hand over.
Note that the delivery of the extraction file 3 or the collection completion certification file 4 between the general user and the administrator includes delivery via a network such as an electronic mail in addition to those performed by an external storage medium.

  Next, the audit data deletion process of the data management system according to the embodiment of the present invention will be described with reference to FIGS.

When deleting the audit data collected in the administrator terminal 2 from the user terminal 1, the general user activates the user interface program 11 in the user terminal 1 and executes a process for deleting the audit data (step S500).
The user interface program 11 acquires the collection completion proof file 4 input from the general user (step S501), and outputs a request for deleting audit data to the data access program 12 together with the acquired collection completion proof file 4 (step S501). S502).

  When receiving the output of the audit data deletion request from the user interface program 11, the data access program 12 performs verification based on the ID value included in the output collection completion certification file 4 and the electronic signature data. If there is no problem in the verification result, the data access program 12 compares this ID value with the ID value included in the offset data 133, and determines the range of data associated with the matching ID value as the offset data 133. (Step S503). Then, the data access program 12 deletes the detected range of data from the audit log 131 (step S504). If there is a problem with the verification result, or if there is no matching ID value, the data is not deleted from the audit log 131.

As described above, in the embodiment of the present invention, a program for accessing high security risk data stored in a user terminal, that is, data accessible only with a predetermined authority, and a user interface are provided. Since it is separated from the program, it is possible to allow a general user who does not have a predetermined authority to collect data.
Further, in the embodiment of the present invention, data that can be accessed only from a user terminal with a predetermined authority is encrypted and extracted, and the general user cannot refer to, tamper with, or extract the contents. Even if the data is stolen or lost, it is impossible for a third party to refer to the contents, so that data can be safely collected without falsification or leakage of the data.

Further, in the embodiment of the present invention, since the deletion of data that can be accessed only with a predetermined authority stored in the user terminal requires the collection completion proof file generated by the administrator terminal, The data cannot be deleted intentionally by the person, and the collected data can be updated safely.
In the embodiment of the present invention, since the encryption key is stored in an area accessible only with a predetermined authority, a general user cannot refer to the key data and misuse it.

  Furthermore, in the embodiment of the present invention, it is possible to perform extraction of data that can be accessed only with a predetermined authority without giving a predetermined authority to a general user who does not have the predetermined authority. It is possible to collect data with a low operating cost and maintaining a security level, in which a user only performs a data collection operation without visiting a user terminal installation site.

Note that the present invention is not limited to the above-described embodiment, and can be modified as appropriate without departing from the spirit of the present invention. For example, regarding the encryption process, any encryption method or algorithm may be used.
As for the encryption method, it is ideal to use the public key encryption method from the viewpoint of security strength, but if the administrator can safely distribute the encryption key to the user terminal in advance, A common key cryptosystem may be used.

Further, the data collection program of the administrator terminal is used as a client server type client application, and the collected data is transmitted to a server application that operates in a remote information processing apparatus, and is included in an arbitrary storage device provided in the information processing apparatus. You may make it store in a database.
Similarly to the user terminal form, the data collection program is separated from the program that accesses data and the program that provides the user interface, so that the administrator authority is not required in the data collection process. May be.

In this embodiment, the case of collecting data that can be accessed only with the authority of an administrator has been illustrated. However, the case where a user who does not belong to the group collects data that can be accessed only with the authority of an arbitrary group. The present invention can be applied to data that can be accessed only with a predetermined authority without being limited to the administrator authority.
Further, data that can be accessed only with a predetermined authority is not limited to the audit log exemplified in the present embodiment, and may be any data.

  Note that the user interface program, the data access program, and the data collection program can be stored in various types of storage media, and can be transmitted via a communication medium. Here, examples of the storage medium include a flexible disk, a hard disk, a magnetic disk, a magneto-optical disk, a CD-ROM (Compact Disc Read Only Memory), a DVD (Digital Versatile Disc), a BD (Blu-ray Disc), and a ROM ( A read only memory (RAM) cartridge, a battery-backed RAM (Random Access Memory), a memory cartridge, a flash memory cartridge, and a nonvolatile RAM cartridge are included. The communication medium includes a telephone line wired communication medium and a microwave line wireless communication medium, and includes the Internet.

Further, when the computer executes each program, not only the functions of the above-described embodiments are realized, but also an OS (Operating System) or application software running on the computer based on an instruction of each program. A case where the functions of the above-described embodiment are realized jointly is also included in the embodiment of the invention.
Further, the present invention can be implemented even when all or part of the processing of each program is performed by a function expansion board inserted into the computer or a function expansion unit connected to the computer to realize the functions of the above-described embodiments. It is included in the form.

DESCRIPTION OF SYMBOLS 1 User terminal 2 Administrator terminal 3 Extraction file 4 Collection completion certification file 5 Terminal computer 6 Management computer 7 Encryption information 8 Data specific information 11, 51 User interface program 12, 52 Data access program 13, 22 Storage devices 21, 61 Data collection program 53, 62 Access restriction data 91 Processor 92 Memory 93 HDD
131, 221 Audit log 132 Encryption key 133 Offset data 222 Decryption key

Claims (13)

A data management system comprising a terminal computer for storing access restriction data, and a management computer for storing the access restriction data collected from the terminal computer,
The terminal computer operates with a predetermined authority capable of accessing the access restriction data, obtains access restriction data stored in the terminal computer, and obtains encrypted information obtained by encrypting the obtained access restriction data. And generating the access restriction data generated when the management computer stores the access restriction data, and deleting the access restriction data stored in the terminal computer based on data specifying information for specifying the access restriction data. A data access program for operating a terminal computer;
The user is activated by a user who does not have the predetermined authority, operates with the authority of the user, acquires the encryption information from the data access program in response to a request from the user, and the user A user interface program that operates the terminal computer to cause the data access program to delete the access restriction data based on the data specifying information in response to the input of the data specifying information from
The management computer operates with the predetermined authority, and stores the access restriction data generated by decrypting the encryption information in the management computer in response to the input of the encryption information, and the access restriction data is stored in the management computer. A data management system comprising a data collection program for operating the management computer so as to generate data identification information to be identified. The data collection program further operates the terminal computer to generate electronic signature data based on the data specifying information,
The user interface program further operates the terminal computer to receive input of the electronic signature data in addition to the data specifying information,
The data access program performs verification based on data specifying information and electronic signature data received by the user interface program, thereby determining whether or not to delete the access restriction data. The data management system according to claim 1 which operates. The terminal computer further stores first key information that can be accessed with the predetermined authority,
The data access program operates the terminal computer to perform the encryption or the verification using the first key information,
The management computer further stores second key information that can be accessed with the predetermined authority,
The data management system according to claim 2, wherein the data collection program causes the management computer to operate so as to perform the decryption or the generation of the electronic signature data using the second key information. In addition to the encryption information, the data collection program further receives an ID value that is generated by the data access program and specifies the access restriction data encrypted in the encryption information, and includes the ID value. And operating the management computer to generate the data specifying information,
The data access program can be accessed with the predetermined authority, stores extracted data information in which the encrypted access restriction data and the ID value are associated with each other in the terminal computer, and is included in the data specifying information 4. The data management system according to claim 1, wherein the terminal computer is operated so as to determine the access restriction data to be deleted by comparing the ID value to be obtained and the ID value of the extracted data information. 5. The data access program is a resident program,
The data management system according to any one of claims 1 to 4, wherein the data collection program is a program started by an administrator having the predetermined authority.   6. The data management system according to claim 1, wherein the access restriction data is data included in one or more files that can be accessed only with the predetermined authority.   The data management system according to claim 1, wherein the terminal computer is a computer operated offline. The data management system further comprises a database computer,
8. The data management system according to claim 1, wherein the data collection program causes the management computer to operate so as to transmit and store the access restriction data to the database computer. A terminal computer for storing access restriction data collected in a management computer,
Operates with a predetermined authority capable of accessing the access restriction data, obtains access restriction data stored in the terminal computer, generates encrypted information obtained by encrypting the obtained access restriction data, and The access restriction data generated when the management computer stores the access restriction data decrypted from the encrypted information and stored in the terminal computer is deleted based on the data specifying information for specifying the access restriction data. A data access program for operating the terminal computer;
The user is activated by a user who does not have the predetermined authority, operates with the authority of the user, acquires the encryption information from the data access program in response to a request from the user, and the user A terminal computer having a user interface program for operating the terminal computer to cause the data access program to delete the access restriction data based on the data specifying information from the data specifying information. A management computer for storing the access restriction data collected from a terminal computer for storing access restriction data,
The encrypted information is decrypted in response to the input of encrypted information generated by encrypting the access restricted data stored in the terminal computer, operating with a predetermined authority capable of accessing the access restricted data. The access restriction data generated in this way is stored in the management computer, the access restriction data is specified, and the management computer is operated to generate data specifying information used to delete the access restriction data from the terminal computer. A management computer having a data collection program to be executed. A data management method for collecting the access restriction data from a terminal computer storing access restriction data to a management computer,
A data access program operating with a predetermined authority capable of accessing the access restriction data acquires the access restriction data stored in the terminal computer and generates encrypted information obtained by encrypting the acquired access restriction data Operating the terminal computer to:
A user interface program that is activated by a user who does not have the predetermined authority and operates with the authority of the user acquires the encrypted information from the data access program in response to a request from the user. Operating the terminal computer;
The data collection program operating with the predetermined authority stores the access restriction data generated by decrypting the encryption information in the management computer in response to the input of the encryption information, and specifies the access restriction data Operating the terminal computer to generate data specifying information to be performed;
The user interface program causes the data access program to delete the access restriction data stored in the terminal computer based on the data specifying information in response to input of the data specifying information from the user. A data management method comprising the step of operating the terminal computer. A data access program for controlling a terminal computer for storing access restriction data collected in a management computer,
In response to a request from a user interface program that is activated by a user who does not have a predetermined authority capable of accessing the access restriction data and operates with the user's authority, the user operates with the predetermined authority, Obtaining access restriction data stored in the terminal computer, encrypting the obtained access restriction data and generating encrypted information;
Generated when the management computer stores access restriction data decrypted from the encrypted information, and operates with the predetermined authority in response to input from the user interface program of data specifying information for specifying the access restriction data A data access program for causing the terminal computer to execute a step of deleting access restriction data stored in the terminal computer based on the data specifying information. A data collection program for controlling a management computer for storing the access restriction data collected from a terminal computer for storing access restriction data,
The encrypted information is decrypted in response to the input of encrypted information generated by encrypting the access restricted data stored in the terminal computer, operating with a predetermined authority capable of accessing the access restricted data. Storing the access restriction data generated in the management computer, specifying the access restriction data, and generating data specifying information used for deleting the access restriction data from the terminal computer. Data collection program to be executed.

Images