JP5146880B2 - Information management apparatus, information management system, information management program, and information management method - Google Patents

Description

  The present invention relates to an information management apparatus, an information management system, an information management program, and an information management method.

In recent years, with the downsizing of information processing terminals (computers) and the enhancement of network infrastructure, information processing terminals can be carried and information processing work can be performed regardless of location.
However, along with this, there have been many accidents in which the information processing terminal is lost and the confidential information stored therein is leaked to a third party. In addition, when an information processing terminal is lost, it is required to identify what the confidential information is stored in the information processing terminal and to present the leaked confidential information to those who share the confidential information became.

  In such a situation, for example, Patent Document 1 manages an access history for a removable storage medium connected to a computer by the removable storage medium and the server, and is stored in the removable storage medium. Techniques that enable information tracking are disclosed.

Further, in Patent Document 2, a portable medium that is write-protected is connected to a computer, and a usage log of a specific resource in the computer that is permitted to be used by the authentication information of the portable medium is written to the portable medium. Is disclosed.
JP 2008-108231 A JP 2005-284679 A

  The present invention has been made from the above-described background, and an object thereof is to provide an information management system for managing information stored in an information processing terminal.

  In order to achieve the above object, an information management apparatus according to the present invention is an information management apparatus in which a portable recording medium is detachable, and a recording apparatus provided in a housing and a portable storage medium having authentication information. Is connected to the information management device, authentication means for determining whether to make the information management device usable based on the authentication information, and when the use of the information management device is stopped, File information writing means for writing the file information of the file stored in the recording device at this time into the portable storage medium connected to the information management device.

  Preferably, when the use of the information management device is stopped, log information writing means for writing the file information of the file stored in the information management device at this time on the recording device by accumulating the past file information. And file information transmitting means for transmitting the file information cumulatively written by the log information writing means to an external server in a state in which the file information is associated with information for identifying the information management device storing the file information. Also have.

  Preferably, when the file information is written by the file information writing means, it further includes file information deleting means for deleting file information written in the past from the portable storage medium.

  The information management system according to the present invention is an information management system including a computer, a portable storage medium, and a file information management server, and the computer is connected to the portable storage medium having authentication information. Authentication means for determining whether or not to make the computer usable based on the authentication information, and when the computer is stopped, the portable storage medium connected to the computer has File information writing means for writing file information of a file stored in the computer at the time and when the use of the information management device is stopped, the file information of the file stored in the computer is identified by the computer File information sent to the file information management server in association with identification information The portable storage medium stores the authentication information and the file information written by the file information writing means, and the file information management server sends the file information sent by the file information sending means. And file information storage means for storing the identification information in association with each other.

  Preferably, the file information management server is stored in a predetermined computer based on the file information and identification information stored by the file information storage means and the file information stored in the portable storage medium. File information extracting means for extracting file information of the file.

  The information management program according to the present invention can use a computer on the basis of the authentication information when the portable storage medium having authentication information is connected to the computer in a computer to which the portable storage medium is removable. An authentication function for determining whether or not to enter a state, and a file information writing function for writing file information of a file stored in the computer at this time to the portable storage medium when the use of the computer is stopped And make it happen.

  The information management method according to the present invention is an information management method for managing information stored in a computer, and is based on the authentication information when a portable storage medium having authentication information is connected to the computer. An authentication step for determining whether or not to make the computer usable, and when the use of the computer is stopped, the computer stores the portable storage medium connected to the computer at this time. A file information writing step for writing file information of the file being stored.

  ADVANTAGE OF THE INVENTION According to this invention, the information management system which manages the information stored in an information processing terminal can be provided.

Hereinafter, preferred embodiments of an information management apparatus, an information management system, an information management program, a file information management server program, and an information management method according to the present invention will be described with reference to the accompanying drawings.
FIG. 1 is a diagram showing an outline of an information management apparatus and a method for using a portable storage medium. In addition, the arrow attached | subjected F1, F2, F3, or F4 represents the transition of each structure shown by this figure.
As illustrated in FIG. 1, there are a place A and a place B having different places, and the notebook PC 10 and the USB memory 20 are initially located at the place A.
The notebook PC 10 is an example of an information management apparatus according to the present invention, and is, for example, a computer provided with a USB memory 20 connection port. A recording device such as a hard disk is provided in the casing of the notebook PC 10.
The USB memory 20 is an example of a portable storage medium, and is a portable storage medium.

  First, in F1, the user connects the USB memory 20 to the notebook PC 10 at a location A. When the USB memory 20 is connected to the notebook PC 10, it becomes possible to log in to the notebook PC 10 based on authentication information (details will be described later) in the USB memory, and the notebook PC 10 becomes usable.

Next, in F2, when the user stops using the notebook PC 10 at the location A, the notebook PC 10 displays file information (for details, details) of the file stored in the notebook PC 10 (that is, the recording device in the housing) at this time. Is written in the USB memory 20. Further, the notebook PC 10 similarly writes the file information of the file stored in the notebook PC 10 at this time to the recording device in the housing.
Then, the user removes the USB memory 20 from the notebook PC 10 and carries the notebook PC 10 and the USB memory 20 separately to the place B while holding them separately.
The storage device included in the notebook PC 10 is, for example, a hard disk, a flash memory, or the like. However, in the following description, the storage device included in the notebook PC 10 is described as being a hard disk.

  Next, in F3, the user connects the USB memory 20 to the notebook PC 10 at the B place. When the USB memory 20 is connected to the notebook PC 10, it becomes possible to log in to the notebook PC 10 based on the authentication information in the USB memory, and the notebook PC 10 becomes usable.

  Next, in F4, when the user stops using the notebook PC 10 at the B place, the notebook PC 10 writes the file information of the file stored in the notebook PC 10 at this time into the USB memory 20. Further, the notebook PC 10 similarly writes the file information of the file stored in the notebook PC 10 at this time to the hard disk included in the notebook PC 10. Then, the user removes the USB memory 20 from the notebook PC 10 and carries the notebook PC 10 and the USB memory 20 separately to the place A while holding them separately. However, here, it is assumed that the notebook PC 10 is lost while the notebook PC 10 and the USB memory 20 are being carried to the A place, and only the USB memory 20 can be carried to the A place.

  At this time, based on the file information (file name, file creator, file editing date and time, file data size, etc.) written at location B stored in the USB memory 20, the user enters the notebook PC 10. It is possible to identify what the stored file is. If there is confidential information such as customer information or confidential information in these files, it will be leaked to the parties who share the confidential information. It can be presented as fearful information.

FIG. 2 is a diagram showing a functional configuration of the information management program 1 installed in the notebook PC 10 (information management apparatus).
As illustrated in FIG. 2, the information management program 1 includes an external interface unit 100, an authentication unit 102, a file information reading unit 104, a file information writing unit 106, and a log information writing unit 108. The storage medium 110 is a storage medium (in this example, a hard disk) provided in the notebook PC 10 in which the program is installed.
The information management program 1 is stored in a storage medium such as a CD-ROM, for example, and is installed in the notebook PC 10 via this storage medium. Further, the information management program 1 may be installed in the notebook PC 10 via a network.
Further, all or part of the functions of the information management program 1 may be realized by hardware such as an ASIC provided in the notebook PC 10.

In the information management program 1, the external interface unit 100 detects that the USB memory 20 is connected to the notebook PC 10 and reads the authentication information 2 stored in the USB memory 20.
Note that the authentication information 2 stored in the USB memory 20 is information for determining whether a user who has connected the USB memory 20 to the notebook PC 10 can use the notebook PC 10, and is exemplified in FIG. In addition, the information (the authentication information 2 stored in the portable storage medium) is associated with the device ID, the user ID, and the password. As the authentication information 2 stored in the portable storage medium, for example, biometric information such as a user's fingerprint may be included.

The authentication unit 102 collates the authentication information 2 read by the external interface 100 with the authentication information 3 stored in the storage medium 110. When it is determined that the user can permit the use of the notebook PC 10 based on the collation result, the authentication unit 102 allows the user to log in to the notebook PC 10, for example. Make it available.
Note that the authentication information 3 stored in the storage medium 110 is information on a user who is permitted to use the notebook PC 10. For example, as illustrated in FIG. 4, a device ID, a user ID, and a password are included. This is associated information (authentication information 3 stored in the information management apparatus). As the authentication information 3 stored in the information management device, for example, it may include biometric information such as a user's fingerprint.

The file information reading unit 104 reads the file information 4 of all the files currently stored in the notebook PC 10 from the storage medium 110 when the user stops using the notebook PC 10 by logout or shutdown after using the notebook PC 10.
The file information 4 includes information indicating the existence of a file stored in the storage medium 110 included in the notebook PC 10. For example, as illustrated in FIG. 5, a path (file storage location), a file name, This is information in which the size, creation date / time, update date / time, and access date / time are associated with each other.

  The file information writing unit 106 writes the file information 4 read by the file information reading unit 104 to the USB memory 20. Here, the written file information 4 is used to present what was the most recent file stored in the notebook PC 10.

The log information writing unit 108 writes the file information 4 read by the file information reading unit 104 to the storage medium 110 provided in the notebook PC 10.
The file information 4 written to the storage medium 110 by the log information writing unit 108 includes, for example, a path (file storage location), a file name, a size, a creation date and time, as illustrated in FIG. This is information that associates the update date and time with the access date and time, and is information that is accumulated and held in the file information 4 written in the past (log information 5).

In addition, the file information reading unit 104 and the log information writing unit 108 operate the file (create, update, reference, delete, etc.) in the notebook PC 10 when the user is permitted to use the notebook PC 10 by the authentication unit 102. ), The file information 4 for the file may be written to the storage medium 110 as the log information 5.
In that case, the file information reading unit 104 reads the file information 4 of the file that has been operated by the user from the storage medium 110. Then, the log information writing unit 108 writes the file information 4 to the storage medium 110.
As a result, the file information 4 of the file is cumulatively stored as the log information 5 in the storage medium 110 every time the file is operated by the user, so that the file history in the notebook PC 10 is traced more strictly. Will be able to.

FIG. 7 is a flowchart for explaining the operation (S10) of the notebook PC 10 (information management apparatus) to which the USB memory 20 (portable storage medium) is connected.
As illustrated in FIG. 7, in step 100 (S <b> 100), the external interface unit 100 of the information management program 1 detects that the USB memory 20 is connected to the notebook PC 10.

  In step 110 (S110), the external interface unit 100 of the information management program 1 reads the authentication information 2 stored in the connected USB memory 20.

  In step 120 (S120), the authentication unit 102 of the information management program 1 collates the authentication information 2 with the authentication information 3 stored in the storage medium 110 provided in the notebook PC 10, and stores the USB memory 20 in the notebook PC 10. It is determined whether or not the connected user can use the notebook PC 10. If the notebook PC 10 determines that the user can use the notebook PC 10, the process proceeds to S130. If the notebook PC 10 determines that the notebook PC 10 cannot be used, the operation is terminated.

  In step 130 (S130), the authentication unit 102 of the information management program 1 makes the notebook PC 10 usable.

  In this way, the USB memory 20 is connected to the notebook PC 10, and the notebook PC 10 can be used only when permitted by the authentication information 2 stored in the USB memory 20, so that the USB is used every time the notebook PC 10 is used. The user can be obliged to connect the memory 20 to the notebook PC 10, and the unauthorized use of the notebook PC 10 by a user who is not permitted to use the notebook PC 10 by the authentication information 2 stored in the USB memory 20 can be prevented. Can do.

FIG. 8 is a flowchart for explaining the operation (S20) of the notebook PC 10 when the user stops using the notebook PC 10.
As illustrated in FIG. 8, in step 200 (S200), the file information reading unit 104 of the information management program 1 stores the file information 4 of all the files currently stored in the notebook PC 10 from the storage medium 110 provided in the notebook PC 10. Read.

  In step 210 (S210), the file information writing unit 106 of the information management program 1 writes the file information 4 read in S200 to the USB memory 20 connected to the notebook PC 10.

In step 220 (S220), the log information writing unit 108 of the information management program 1 accumulates the file information 4 read in S200 on the storage medium 110 provided in the notebook PC 10 as the past file information 4 and writes it as the log information 5. .
The information management program 1 permits logoff or shutdown on condition that this writing is completed.

  As described above, the file information 4 written in the USB memory 20 can identify the file stored in the latest notebook PC 10 even if the notebook PC 10 is lost. Further, the log information 5 written in the notebook PC 10 can trace the history of the file stored in the notebook PC 10, which is a clue to check whether the notebook PC 10 has been used illegally.

[Modification 1]
Next, the modification 1 of the said embodiment is demonstrated.
FIG. 9 is a diagram illustrating a functional configuration of the information management program 6 installed in the notebook PC 10 according to the first modification. It should be noted that among the components shown in this figure, the same reference numerals are given to the components substantially the same as those shown in FIG.
As illustrated in FIG. 9, the information management program 6 of the present modification has a configuration in which a file deletion unit 112 is added to the information management program 1 of FIG. 2.

In the information management program 6, the file deletion unit 112 is executed after the processing by the file information reading unit 104 and deletes the previous file information 4 from the USB memory 20.
Then, the process proceeds to the process of the file information writing unit 106, and the current file information 4 read by the file information reading unit 104 is written to the USB memory 20.

  As described above, since the file deletion unit 112 is added to the information management program 6, only the latest file information 4 stored in the notebook PC 10 is stored in the USB memory 20. The memory usage of the USB memory 20 can be suppressed.

[Modification 2]
Next, a second modification of the above embodiment will be described.
FIG. 10 is a diagram showing an information management system 7 including an information management device, a portable storage medium, and a file information management server in Modification 2. It should be noted that among the components shown in the figure, the same reference numerals are given to the components that are substantially the same as those shown in FIG.
As illustrated in FIG. 10, the information management system 7 of the present modification has a configuration in which a file information management server 30 is added to the outline of the method of using the information management apparatus and the portable storage medium in FIG. 1.

  In the information management system 7, the notebook PC 10 at location A is connected to the file management server 30 via the connection cable 40. The connection cable 40 is a cable serving as a wired communication transmission path such as a LAN cable, for example, but the notebook PC 10 and the file management server 30 may be connected by wireless communication.

  First, in F1, when the user connects the USB memory 20 to the notebook PC 10 as described with reference to FIG. 1 and the notebook PC 10 becomes usable, the notebook PC 10 still transmits to the file information management server 30. The log information 5 that is not present is transmitted to the file information management server 30 in association with a device ID that is information for identifying the notebook PC 10.

Next, in F2, after the user stops using the notebook PC 10 as described in FIG. 1, the notebook PC 10 writes the file information 4 and the log information 5 to the storage medium 110 included in the USB memory 20 and the notebook PC 10, respectively. The log information 5 that has not been transmitted to the file information management server 30 is transmitted to the file information management server 30 in association with the device ID that is information for identifying the notebook PC 10.
The device ID is information that can uniquely identify the device. For example, the device ID may be a device name, a MAC address, or an IP address. In the following description, the device ID is assumed to be a device name. To do.

In the file information management server 30, the log information 5 transmitted from the notebook PC 10 and the device ID of the notebook PC 10 are received, and the log information 5 associated with the device ID of the notebook PC 10 is stored in the file information management server 30 as management information 8. Write to media.
The management information 8 is information in which the log information 5 is associated with the device ID, and as illustrated in FIG. 11, the device ID, path (file storage location), file name, size, creation date and time. And the update date and time and the access date and time.

  In this way, by managing the management information 8 by the file information management server 30, the file information 4 stored in the plurality of notebook PCs 10 connected to the file information management server 30 can be centrally managed at location A. it can. Further, even if the notebook PC 10 is lost, the management information 8 can trace the history of the file stored in the lost notebook PC 10, and a clue to check whether the lost notebook PC 10 has been used illegally. Become.

FIG. 12 is a diagram illustrating a functional configuration of the information management program 9 installed in the notebook PC 10 according to the second modification. It should be noted that among the components shown in this figure, the same reference numerals are given to the components substantially the same as those shown in FIG.
As illustrated in FIG. 12, the information management program 9 of this modification has a configuration in which a log information reading unit 114 and a log information transmission unit 116 are added to the information management program 1 of FIG. 2.

  In the information management program 9, the log information reading unit 114 is configured so that the notebook PC 10 can be used by the authentication unit 102 or the log information writing unit 108 writes the log information 5 to the storage medium 110. Or after each, the log information 5 which has not been transmitted to the file information management server 30 from the storage medium 110 is read.

  The log information transmission unit 116 transmits the log information 5 read by the log information reading unit 114 to the file information management server 30.

[Modification 3]
Next, Modification 3 of the above embodiment will be described.
FIG. 13 is a diagram showing a file information management server program 500 installed in the file information management server 30 in the third modification.
As illustrated in FIG. 13, the file information management server program 500 includes a log information receiving unit 200, a log information writing unit 202, an external interface unit 206, a management information reading unit 208, a file information reading unit 210, a collation unit 212, and A result display unit 214 is provided. The storage medium 204 (file information storage means) is a storage medium provided in the file information management server 30. Note that the storage medium provided in the file information management server 30 is, for example, a hard disk or a flash memory. However, in the following description, the storage medium 204 provided in the file information management server 30 is described as a hard disk. .
The file information management server program 500 is stored in a storage medium such as a CD-ROM, for example, and is installed in the file information management server 30 via this storage medium. Further, the file information management server program 500 may be installed in the file information management server 30 via a network.
All or part of the functions of the file information management server program 500 may be realized by hardware such as an ASIC provided in the file information management server.

  In the file information management server program 500, the log information receiving unit 200 receives the log information 5 transmitted from the notebook PC 10 and the device ID of the notebook PC 10.

  The log information writing unit 202 writes the information received by the log information receiving unit 200 in the storage medium 204 as management information 8 in which the log information 5 is associated with the device ID of the notebook PC 10.

Here, the log information receiving unit 200, the log information writing unit 202, and the storage medium 204 are substantially the same as the functional configuration in the file information management server 30 described in the second modification.
In this modification, an external interface unit 206, a management information reading unit 208, a file information reading unit 210, a collation unit 212, and a result display unit 214 are further added.

  The external interface unit 206 detects that the USB memory 20 is connected to the file information management server 30.

  The management information reading unit 208 reads the management information 8 stored in the storage medium 202 by the file information management server 30.

The file information reading unit 210 reads the file information 4 from the USB memory 20 connected to the file information management server 30. Further, the device ID is read from the authentication information 2 stored in the USB memory 20.
Although the device ID is read from the authentication information 2 stored in the USB memory 20 here, the method of holding the device ID in the USB memory 20 is not particularly limited. It may be held in the memory 20.

The collation unit 212 (file information extraction means) collates the management information 8 read by the management information reading unit 208 with the file information 4 and the device ID read by the file information reading unit 210, and the file information 4 in the notebook PC 10 Are extracted from the management information 8.
The history of the file information 4 is information that is extracted from the management information 8 and indicates which of the log information 5 in the notebook PC 10 in which the file information 4 is stored.

  The result display unit 214 displays the history of the file information 4 extracted from the management information 8 by the collation unit 212.

  Thus, the user can investigate the history of the file information 4 stored in the USB memory 20 by connecting the USB memory 20 to the file information management server 30.

  In the above embodiment, the configuration in which the information management program 1 is preinstalled in the notebook PC 10 has been described as a specific example. However, the present invention is not limited to this. For example, the information management program 1 (or the information management program) 6 or 9) is partially or entirely stored in the USB memory 20, and when the notebook PC 10 is connected to the USB memory 20, a part or all of the information management program 1 stored in the USB memory 20 is stored. May be configured to be read and executed.

It is a figure which shows the outline of the utilization method of an information management apparatus and a portable storage medium. It is a figure which shows the function structure of the information management program 1 installed in notebook PC10 (information management apparatus). It is a figure which shows the authentication information stored in the portable storage medium. It is a figure which shows the authentication information stored in the information management apparatus. It is a figure which shows file information. It is a figure which shows log information. It is a flowchart explaining operation | movement (S10) of notebook PC10 (information management apparatus) to which USB memory 20 (portable storage medium) was connected. It is a flowchart explaining operation (S20) of notebook PC10 when a user stops use of notebook PC10. It is a figure which shows the function structure of the information management program 6 installed in the notebook PC 10 (information management apparatus) in the modification 1. FIG. It is a figure which shows the information management system 7 containing the information management apparatus in a modification 2, a portable storage medium, and a file information management server. It is a figure which shows management information. It is a figure which shows the function structure of the information management program 9 installed in the notebook PC 10 (information management apparatus) in the modification 2. It is a figure which shows the file information management server program 500 installed in the file information management server 30 in the modification 3. FIG.

Explanation of symbols

1, 6, 9 ... Information management program 2 ... Authentication information stored in portable storage medium 3 ... Authentication information stored in information management device 4 ... File information 5 ... Log information 7 ... Information management system 8 ... Management information 10 ... Notebook PC
20 ... USB memory 30 ... File information management server 40 ... Connection cable 100 ... External interface section (in information management program)
102: Authentication unit
104 ... File information reading part (in the information management program)
106: File information writing unit 108: Log information writing unit (in the information management program)
110 ... Storage medium (in information management program)
DESCRIPTION OF SYMBOLS 112 ... File information deletion part 114 ... Log information reading part 116 ... Log information transmission part 200 ... Log information receiving part 202 ... Log information writing part (in a file information management server program)
204... Storage medium (in the file information management server program)
206 ... External interface (in the file information management server program)
208: Management information reading unit 210: File information reading unit (in the file information management server program)
212: Verification unit 214: Result display unit 500: File information management server program

Claims (7)

An information management device in which a portable recording medium is detachable,
A recording device provided in the housing;
Authentication means for determining whether or not to make the information management device usable based on the authentication information when a portable storage medium having authentication information is connected to the information management device;
File information writing means for writing file information of all files stored in the recording device at this time to the portable storage medium connected to the information management device when the use of the information management device is stopped And an information management device. Log information writing means for writing the file information of the file stored in the information management apparatus at this time to the past file information when the use of the information management apparatus is stopped;
File information transmission means for transmitting the file information cumulatively written by the log information writing means to an external server in a state in which the file information is associated with information for identifying the information management device storing the file information. The information management apparatus according to claim 1. The information management apparatus according to claim 1, further comprising: a file information deleting unit that deletes previously written file information from the portable storage medium when the file information is written by the file information writing unit. An information management system including a computer, a portable storage medium, and a file information management server,
The computer
Authentication means for determining whether to make the computer usable based on the authentication information when the portable storage medium having authentication information is connected;
File information writing means for writing file information of all files stored in the computer at this time to the portable storage medium connected to the computer when the use of the computer is stopped;
File information transmitting means for transmitting file information of all files stored in the computer to the file information management server in association with identification information for identifying the computer when the use of the computer is stopped; Have
The portable storage medium is
Storing the authentication information and the file information written by the file information writing means;
The file information management server
An information management system comprising file information storage means for storing the file information and identification information transmitted by the file information transmission means in association with each other. The file information management server
File information extraction for extracting file information of a file stored in a predetermined computer based on file information and identification information stored by the file information storage means and file information stored in the portable storage medium The information management system according to claim 4, further comprising: means. In a computer to which a portable storage medium is detachable,
An authentication function for determining whether to make the computer usable based on the authentication information when a portable storage medium having authentication information is connected to the computer;
An information management program for realizing a file information writing function for writing file information of all files stored in the computer at this time to the portable storage medium when the use of the computer is stopped. An information management method for managing information stored in a computer,
An authentication step of determining whether to make the computer usable based on the authentication information when a portable storage medium having authentication information is connected to the computer;
A file information writing step of writing file information of all files stored in the computer at this time to the portable storage medium connected to the computer when the use of the computer is stopped Method.

Images