JP2000105728A - Information storage system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain an information storage system which can prevent a password stored in the internal memory from being tapped by cutting off the power supply to the wire extended between the memory and memory power source over an internal surface, thereby erasing the password stored in the memory. SOLUTION: A system control board 30 is provided with a logic circuit 32 which operates according to the opening/closing state of the door of a data storage system and the use state of the key of the door. The logic circuit 32 once detecting an abnormal state, wherein the door of the system is open while being locked, sends a power-OFF command to the power source part 50 to cut off the power supply to a storage device 10. Consequently, it is impossible to access the storage device 10. A security board 30 is put in a security case where a wiring film is spread over, so even if an action of tapping the password is tried, the password is erased to prevent the password from being tapped.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information storage system, and more particularly, to a program or data stored in a storage device having a function of permitting access when a predetermined password is written in advance and an input password matches the predetermined password. The present invention relates to security protection of an information storage system that stores information such as information.

[0002]

2. Description of the Related Art Generally, in a personal computer or a server, a program executed by a CPU is often stored in a storage device such as a magnetic disk built in the computer. As one form of this storage device, a storage device with a password function is known. In the storage device with a password function, a predetermined password is written in a predetermined area in advance, and when the input password matches the predetermined password, access to the stored program data is permitted.
Then, as the input password, a password stored in advance in a memory built in the computer is usually input. Thus, even if the storage device is stolen by itself, the program data in the storage device cannot be accessed, and the security of the program data is ensured. As described above, the storage device with the password function is suitable for storing programs and data for which security is important such as an encrypted program and customer data.

[0003]

However, if the storage device is stolen and the password stored in the internal memory is eavesdropped by some kind of eavesdropping, access to the storage device becomes possible and analysis of programs and data is performed. There is a problem that there is a risk that the operation is easily performed.

Accordingly, an object of the present invention is to provide an information storage system capable of preventing eavesdropping of a password stored in a built-in memory in view of the above problems.

[0005]

In order to achieve the above object, the information storage system of the present invention has a configuration in which a predetermined password is written in advance, and access is permitted when the input password matches the predetermined password. In an information storage system that stores information in a storage device having a function, a memory that stores a password that is the same as a predetermined password and that is input to the storage device, and that power is stored in the memory in order to hold the memory. Containing the power supply for the memory to be supplied, the memory and the power supply for the memory,
In addition, a housing for extending a wiring between the memory and the memory power supply on the inner surface and erasing a password stored in the memory when the wiring is broken is provided.

As a result, even if an attempt is made to eavesdrop on the password, the wire stored in the memory is erased due to the disconnection of the wiring due to the wiretapping operation to the memory and the stop of the power supply to the memory. Password eavesdropping is prevented.

[0007] The information storage system of the present invention is characterized by comprising an access control unit for prohibiting access to the storage device when a predetermined password and the input password do not match under predetermined conditions. I do. For example,
The access control unit prohibits access to the storage device by blocking an access path to the storage device.

Accordingly, it is possible to prevent the password from being eavesdropped by inputting the password into the storage device by trial and error.

The above-mentioned predetermined condition is, specifically, a predetermined time since power-on or a predetermined number of times (for example, once) of a password to be input.

Further, the information storage system according to the present invention includes:
It is characterized by comprising a door, a door key, and a power supply control unit that controls power supply to the storage device or the entire information storage system after the power is turned on, according to the open / closed state of the door and the use state of the key. For example, when the door is opened while the key is locked, the power supply control unit cuts off the power supply to the storage device or the information storage system.

Thus, during operation of the information storage system, it is possible to detect an abnormal state due to eavesdropping work and prevent eavesdropping on the password.

[0012]

Embodiments of the present invention will be described below. However, the technical scope of the present invention is not limited to this embodiment.

FIG. 1 is a block diagram of an information storage system according to an embodiment of the present invention. In FIG.
The information storage system includes a storage device 10 with a password function for storing programs and data, a CPU 21, a RAM,
22, a motherboard 20 including a BOOT-ROM 23, a system control mode 30 for controlling security of the entire system, a security board 40 for managing passwords of storage devices, and a power supply control unit for controlling power supply to these. 50 is provided. The power control unit 50 and each board are connected by a power line (not shown).

On the security board 40, a CMOS memory 41 for storing the same password as the password written in the storage device, a power supply 42 for storing the same, and a program for controlling reading of the password are provided. ROM 43, MPU 44 for executing the program, and security switch 45 described later
Is provided.

First, when the power of the system is turned on, the CPU 21 on the motherboard 20 first sets the BOOT-R
The OM 23 program is executed. When the program arrives at a specific location, execution of the program in the system ROM 31 on the system control board 30 via the BUS-I / F is started.

In the system ROM 31, a program for reading a password on the security board 40 and inputting the password to the storage device 10 is described.

The storage device 10 authenticates the password previously written therein and the entered password, and if the passwords match, returns a normal response to the CPU.
Notify 21.

Upon receiving the normal response, the CPU 21 returns to the execution of the program in the BOOT-ROM 23 again,
Subsequently, the OS (for example, Microsoft Windows)
sNT) starts.

In such a system, the door of the locked system is opened by some means,
Consider a case where the storage device 10 is stolen. In such a case, if the password is stolen on the security board and the password is stolen, the program or data in the stolen storage device 10 can be accessed.

Therefore, in order to prevent eavesdropping of the password, in the embodiment of the present invention, as described in detail below, the security board 40 is provided in a security case having a printed wiring film adhered to the inner surface. Will be accommodated.

FIG. 2 is an assembly view of the security case. This security case has a split structure made of sheet metal and includes a front case 101 and a rear case 102. A mounting bracket 103 for mounting the security board 40 is welded to the rear case 102. Also, at the four corners of the security board,
A security switch 45 is attached. As the security switch 45, a micro switch is used.

To assemble the security case, first, a printed pattern wiring film 104 is attached to the inner surfaces of the front case 101 and the rear case 102. Subsequently, necessary wiring is performed, and the security board 40 is attached. After that, the front case 101 and the rear case 102 are fixed with screws 106 through the screw holes 105.

The attachment of the printed pattern wiring film (hereinafter referred to as a wiring film) 104 will be described. FIG. 3 is a development view of the wiring film 104a attached to the inner surface of the front case 101. FIG. 4 is an enlarged view of a portion A in FIG. FIG. 5 is a diagram showing a state in which a wiring film 104a is attached to the inner surface of the front case 101. One long wiring is formed in a fine pattern on the wiring film 104a (wiring pattern P). First, such a wiring film 104a is
The front case 101 is formed in a developed shape. The shape of the wiring film 104a can be easily raised from the sheet metal drawing of the front case 101. Next, the wiring film 104a is bent according to the shape of the front case 101. An adhesive is used for attaching the wiring film 104a. Both ends of the wiring pattern P are lead lines Pa connected to the wiring pattern of another part.

FIG. 6 is a developed view of the wiring film 104b attached to the bottom surface of the rear case 102. FIG. 7 is a diagram illustrating a state in which the wiring film 104b is attached to the bottom surface of the rear case 102. The structure of the wiring film 104b is the same as described above, and the wiring pattern P is a single long wiring, although it differs depending on the shape of the wiring film 104. The shape of the wiring film 104b is substantially the same as the bottom surface of the rear case 102. First,
After forming the wiring film 104b having such a shape,
Fold it according to the shape of the rear case 102. The wiring film 104b is attached with an adhesive. Further, both ends of the wiring pattern P are lead lines Pb connected to the wiring pattern of another part.

FIG. 8 is a diagram showing a connection state of the wiring pattern P. As shown in the figure, the wiring from the memory power supply 42 is connected to the terminal CMOS memory 41 by connecting the lead lines Pa and Pb of the wiring films 104a and 104b to each other through the security switch 45. . Therefore, even if any part of the wiring pattern P is disconnected, the power supply to the CMOS memory 41 is cut off.

Next, the security switch 45 will be described. FIG. 9 is a diagram showing a positional relationship between the security switch 45 and the screw 106 when assembling the security case. The front case 101 and the rear case 102 are fixed with four screws 106. Screw 106 into screw hole 1
In a state where the screw 106 is screwed, the tip of the screw 106 contacts the security switch 45 provided on the security board 40. In this state, power can be supplied from the memory power supply 42 to the CMOS memory 41. When the screw 106 is removed, the security switch 45 is turned off.
Power supply to the memory 41 is cut off. The security switches 45 are connected in series (not shown). Therefore, even if one of the security switches 45 is turned off, the power supply to the CMOS memory 41 is cut off.

The security operation in such a security case will be described. For example, consider a case where a security case is drilled and a password stored in the CMOS memory 41 is eavesdropped. If a hole is drilled in the security case, somewhere in the wiring film 104 stretched inside the security case will be broken. As a result, the power supply from the memory power supply 42 to the CMOS memory 41 is cut off, and the password stored in the CMOS memory 41 is erased.

Next, consider the case where the security case is opened and the password is eavesdropped. To open the security case, it is necessary to remove the fixing screw 106.
However, since the tip of the screw is in contact with the security switch, if the screw 106 is removed, the security switch 45 will be cut off. As a result, the power supply from the memory power supply 42 to the CMOS memory 41 is cut off, and the CMOS
The password stored in the memory 41 is deleted. 4
Removing one of the screws will erase the password.

As described above, the CMO storing the password
When the S memory 41 is housed in the above-described security case and the password is intercepted, the CMO
Since the password on the S memory 41 is deleted, eavesdropping of the password can be prevented.

Instead of the wiring film 104, a normal nichrome wire may be fixed inside the security case, and the password may be erased based on the breaking of the nichrome wire. Also, print a wiring film on a metal substrate with almost the same shape as the security case,
You may make it fix inside a security case.

In the embodiment of the present invention, as described above, the CMOS memory 41 for storing the password of the storage device is disposed on the security board 40 independent of the motherboard 20. Conventionally, the password is often stored in the ROM 23 on the motherboard 20. However, a general-purpose product is often used for the motherboard 20, and storing a new individual password in the ROM 23 on the motherboard 20 is different from that of the motherboard 2.
It is very difficult to manage 0. Furthermore, if the CPU 21 on the motherboard 20 is a standard one, the machine code is well-known, and the password may be easily known by stealing the ROM 23 and disassembling it. there were. Therefore, as in the embodiment of the present invention, a unique password (for example, 32 bytes long) unrelated to the specifications of the motherboard 20 is stored in the CMOS memory on the security board 40 separate from the motherboard 20, and furthermore, By storing the security board 40 in the above-described security case, theft of the password is prevented, and the security level is greatly improved.

In the embodiment of the present invention, in order to further increase the security level, the access control circuit 60 for controlling the input of the password to the storage device 10 includes:
It is provided on an access path 70 to the storage device 10.

The access control circuit 60 receives a response of the result of the password authentication performed in the storage device 10, and the response is a failure notification which is not a response (normal notification) when the passwords match under a predetermined condition. If there is, storage device 1
Control is performed to cut off the access path 70 to 0.

FIG. 10 is a block diagram of the access control circuit 60. In FIG. 10, a detection unit 61 for detecting a response from the storage device 10, a timer 62 for measuring a predetermined time, a logical OR circuit 63 to which an output from the detection unit is input, and an output from the logical circuit Electronic switch 64. The electronic switch 64 is turned on by turning on the power of the system.

Now, consider a case where a password is externally input to the storage device 10 by eavesdropping in order to search for the password by trial and error.

If the password input from the outside does not match the password previously written in the storage device 10, the storage device 10 responds with an abnormality notification. Upon receiving this abnormality notification, the detection unit 61 of the access control circuit 60 sets one level of the logical OR circuit 63 to the H level. Thereby, the logical OR circuit 63 makes the electronic switch 64 non-conductive. Further, the detection unit 61 may include a counter (not shown), and may set one of the levels of the logical OR circuit 63 to the H level when the abnormality notification is counted a predetermined number of times.

Further, the timer 62 monitors the time from when the power is turned on. If a success notification is not received from the detection unit 61 until a predetermined time (for example, one second) elapses, the logical OR is determined when the predetermined time elapses. The circuit 63 is set to the H level. Thereby, the logical OR circuit 63 makes the electronic switch 64 non-conductive. If the success notification is received before the elapse of the predetermined time, the time measurement is stopped.

That is, when the passwords do not match (when an abnormality notification is received) or when a success notification is not received within a predetermined time, the electronic switch 64 is turned off so that the access path to the storage device 10 is changed. 70 is blocked, and the input of the password is prohibited. Therefore, it becomes impossible to enter the password many times by trial and error,
It becomes difficult to search for a password.

As described above, in the embodiment of the present invention, first, the security board 40 is housed in the security case, thereby preventing the password from being stolen by the direct eavesdropping on the CMOS memory 41. further,
By providing the access control circuit 60, password theft due to trial and error password search can also be prevented.

Therefore, even if the storage device 10 is stolen, the password cannot be stolen, so that the programs and data in the storage device 10 cannot be accessed, and their security is ensured.

By the way, when the data storage system is in the normal operation state, the storage device 10 can be accessed. Therefore, there is a possibility that access to stored programs and data may become possible by eavesdropping on the storage device 10.

Therefore, in the embodiment of the present invention, as shown in FIG. 1, in the embodiment of the present invention, the open / close state of the door of the data storage system and the lock of the key of the door are provided on the system control board 30. A logic circuit 32 that operates based on the use state is provided. When the logic circuit 32 detects an abnormal state in which the door of the system is opened while the key is locked, the logic circuit 32 transmits a power OFF command to the power supply unit 50,
The power supply to the storage device 10 is cut off. As a result, access to the storage device 10 becomes impossible.

Further, in the normal operation state, programs and data in the storage device 10 are read out to the RAM 22 on the motherboard 20 and expanded. Therefore,
By eavesdropping on this RAM 22, there is a possibility that programs and data can be obtained.

Therefore, when the logic circuit 32 detects an abnormal state in which the door of the system is opened while the key is locked, the logic circuit 32 transmits a power OFF command to the power supply unit 50 to cut off the power supply to the entire system. You may. This gives R
The data on the AM 22 is erased. Therefore, even if the door is forcibly opened for eavesdropping, the data on the RAM 22 is erased, so that it is impossible to obtain programs and data.

The open / close state of the door and the use state of the key can be detected by various detecting means using light such as infrared rays, electricity, magnetism, and the like.

[0046]

As described above, according to the present invention,
The memory for storing the password is stored in the RO on the motherboard.
By arranging them on an independent security board instead of M, there is no need to change the ROM on the motherboard for each password. Further, since the security board is housed in a security case in which a wiring film is stretched, even if a password is eavesdropped, the password is erased, so that eavesdropping of the password can be prevented.

Further, by providing an access control circuit in the access path to the storage device and limiting the input time or the number of times of inputting the password to the storage device, it becomes difficult to search for the password by trial and error. In addition, eavesdropping of the password can be prevented.

Further, the opening / closing state of the door of the system and the use state of the door key are detected, and if an abnormality is detected, the power supply to the entire system is cut off. As a result, during operation of the system, programs and data that have been read from the storage device to the RAM can be erased, and eavesdropping of programs and data by eavesdropping on the RAM can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram of an information storage system according to an embodiment of the present invention.

FIG. 2 is an assembly view of a security case.

FIG. 3 is a development view of a wiring film 104a attached to the inner surface of the front case 101.

FIG. 4 is an enlarged view of a portion A in FIG. 3;

FIG. 5 shows a wiring film 10 on the inner surface of the front case 101.
It is a figure showing the state where 4a was stuck.

FIG. 6 is a development view of a wiring film 104b attached to the inner surface of the rear case 102.

FIG. 7 shows a wiring film 104b on the inner surface of the rear case 102.
It is a figure showing the state where it was stuck.

FIG. 8 is a diagram showing a connection state of a wiring pattern P;

FIG. 9 is a diagram showing a positional relationship between the security switch 45 and the screw 106 when assembling the security case.

FIG. 10 is a block diagram of an access control circuit 60;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Storage device 20 Motherboard 30 System control board 32 Logic circuit 40 Security board 41 CMOS memory 42 Memory power supply 50 Power supply control part 60 Access control circuit 70 Access path 100 Security case 104 Print pattern wiring film

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Shigeru Hashimoto 4-1-1, Kamidadanaka, Nakahara-ku, Kawasaki City, Kanagawa Prefecture Inside Fujitsu Limited (72) Inventor Hironori Yamamoto 4-1-1 Kamiodanaka, Nakahara-ku, Kawasaki City, Kanagawa Prefecture No. 1 Fujitsu Limited F-term (reference) 5B017 AA01 BA05 BA08 BB03 BB09 CA11 CA15

Claims (10)

[Claims] 1. A predetermined password is written in advance,
In an information storage system for storing information in a storage device having a function of permitting access when an input password matches the predetermined password, the same password as the predetermined password is input to the storage device. A memory for storing a password, a power supply for a memory for supplying power to the memory for storing and storing the memory, a wiring for accommodating the memory and the power supply for the memory, and wiring between the memory and the power supply for the memory And a storage unit for erasing the password stored in the memory when the wiring is broken. 2. The method according to claim 1, wherein the predetermined password and the input password are:
An information storage system, comprising: an access control unit that prohibits access to the storage device when the conditions do not match under a predetermined condition. 3. The information storage system according to claim 2, wherein the access control unit prohibits access to the storage device by blocking an access path to the storage device. 4. The information storage system according to claim 2, wherein the predetermined condition is a predetermined time from power-on. 5. The information storage system according to claim 2, wherein the predetermined condition is a predetermined number of times of the input password. 6. The information storage system according to claim 5, wherein the predetermined number is one. 7. The power supply according to claim 1, further comprising: a door and a key of the door; and a power supply for controlling power supply to the storage device after the power is turned on according to an open / closed state of the door and a use state of the key. An information storage system, comprising: a control unit. 8. The power supply control unit according to claim 7, wherein the power supply control unit cuts off power supply to the storage device when the door is opened while the key is locked. Characteristic information storage system. 9. The power supply to the entire information storage system after power-on according to claim 1, further comprising a door, a key of the door, an open / closed state of the door, and a use state of the key. An information storage system, comprising: a power control unit. 10. The power supply control unit according to claim 9, wherein when the door is opened while the key is locked, power supply to the entire information storage system is cut off. Information storage system.