JP2005309494A - Data use system and method, storage device, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a storage device automatically processed by a use method set in each user terminal. <P>SOLUTION: This data use system comprises a user terminal 110 and the storage device 120. The user terminal has a registration data storage means 160 for storing registration data 154 comprising a terminal authentication ID 150 and use information 152. The storage device has: a data storage means 170 for storing data; a terminal authentication means 182 for authenticating the terminal authentication ID in time of connection with the user terminal; and a data processing means 184 for automatically processing the data of the data storage means according to the use information when the terminal authentication ID is authenticated. Thereby, the storage device is automatically processed by the use method set in each the user terminal without previously providing an application in the user terminal. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a data use system, a storage device, a data use method, and a computer program that use a portable storage device.

  Image data from a digital camera or the like requires a large storage area, and is usually stored using a storage device such as an external memory card. The storage device storing the image data is removed from the digital camera and connected to a personal computer or the like using the image data to process the image data.

  Such processing of the storage device, for example, downloading of image data in the storage device is performed using an application preinstalled in the personal computer. Depending on the setting of the application, image data can be automatically copied to a hard disk drive or the like by connecting the storage device to a personal computer.

  However, in such a case, an application is required on the personal computer side separately from the storage device. Further, since the storage device does not identify a device such as a personal computer, an unintended process may be performed on the storage device side. For example, in order to confirm the contents of the storage device, when connected to another personal computer, the image data is arbitrarily copied to the hard disk drive according to the application in the personal computer.

  In order to restrict the use of the storage device as described above, an ID (identifier) is provided on the storage device side, and this ID is authenticated by the management server via a terminal to which the storage device is connected. A technique that can use data in the apparatus is known (for example, Patent Document 1). Also disclosed is a technique in which user authentication information is provided in a storage device, a user is authenticated by a terminal connected to the storage device, and the terminal can be used when the authentication is performed (for example, Patent Document 2).

  However, in such a case, only authentication specifying only the storage device is performed, and authentication of the terminal to be connected is not performed.

  The combination of the storage device and the terminal stores the storage device ID on the terminal side, and the terminal authenticates the storage device by comparing the ID stored in the terminal with the ID in the storage device. A technique for preventing unauthorized reading of data in a storage device by a terminal is also known (for example, Patent Document 3).

  However, in such a case, by simply copying the ID stored on the terminal side to the other terminal, the storage device can be used also in the other terminal, and illegal reading cannot be completely prevented.

JP 2003-67480 A JP 2003-298999 A JP 2002-354318 A

  The present invention has been made in view of the above-described problems of conventional data utilization systems, and the object of the present invention is not to prepare an application on the user terminal side in advance in order to use a storage device. Furthermore, the present invention provides a new and improved data utilization system, storage device, data utilization method, and computer program in which the utilization method of the storage device set by the user for each one or a plurality of user terminals is automatically performed. That is.

  In order to solve the above problems, according to an aspect of the present invention, a user terminal used by a user and a storage device detachably attached to the user terminal, the data stored in the storage device is stored in the user terminal. The user terminal comprises registration data storage means for storing registration data comprising a terminal authentication ID (IDentification) and usage information related to the use of the storage device, the storage device comprising: Data storage means for storing data; terminal authentication means for authenticating the terminal authentication ID when connected to the user terminal; and when the terminal authentication ID is authenticated by the terminal authentication means, data in the data storage means Data processing means for automatically processing the data in accordance with the usage information. Temu is provided.

  The user terminal includes a personal computer, a PDA (Personal Digital Assistant), a mobile phone, a digital camera, and a video conference system. The storage device is detachable from the user terminal, and is a portable storage medium such as a memory stick. (Registered trademark) and other memory cards, USB storage, removable media, and the like.

  The present invention is characterized in that, first, an application to be provided on the side that originally processes the storage device, here the user terminal side, is provided on the storage device side. The data processing means operating as the application can process the data in the storage device based on the usage method of the storage device set in advance by the user.

  With this configuration, even when the storage device is used for the first time, it is not necessary to provide an application with a separate means in advance in the user terminal, and processing of the storage device is started with a simple act of simply connecting the storage device to the user terminal. be able to. Accordingly, only the storage device can be carried without having separate application software, and the stored data can be processed as it is connected to another user terminal.

  Second, the present invention is characterized in that registration data relating to authentication between the storage device and the user terminal is stored on the user terminal side.

  With this configuration, a different usage method can be set for each user terminal that uses the storage device. When the storage device is connected to a user terminal having registered data that has already been set, Is automatically processed. For example, depending on the user terminal, data stored in the storage device may be simply referred to by a browser, automatically copied to a hard disk drive, automatically output to a printer connected to the user terminal, You can send photos to websites on a defined network.

  In addition, since the usage method can be set for each user terminal in this way, the user terminal at home performs automatic backup to the hard disk drive, but other users' terminals can also refer to the contents of the storage device. As a result, it is possible to prevent data from being illegally downloaded by another person's user terminal.

  Furthermore, by storing registration data related to authentication between the storage device and the user terminal on the user terminal side, the storage device does not need a separate storage area for storing data related to authentication, and the registration device ( The number of user terminals is not limited.

  In addition, since an application is provided on the storage device side as described above, if the storage device is lost, data stored in the storage device may be used. However, since the registration data for effectively using the lost storage device is on the user terminal side and not on the storage device side, the storage device cannot be used, and information leakage can be prevented. .

  In addition, the storage device authenticates from an ID storage unit that stores a storage device ID that is an ID of the storage device; and a user terminal ID that is an ID related to the user terminal and the storage device ID when connected to the user terminal. The terminal authentication unit may further authenticate the user terminal by comparing the terminal authentication ID with the authentication comparison ID.

  The registration data of the user terminal includes a terminal authentication ID and usage information. The terminal authentication ID is generated from an ID related to the user terminal, for example, a MAC address of a network card provided in the user terminal and a storage device ID that is an ID unique to the storage device. Using this terminal authentication ID, authentication between the storage device and the user terminal is performed.

  Here, an ID registered in advance in the user terminal is set as a terminal authentication ID, and an ID generated at each connection and compared with the terminal authentication ID is set as an authentication comparison ID. When both are generated from a pair of the same user terminal ID and storage device ID, they show the same value. At this time, if the terminal authentication ID and the authentication comparison ID are not authenticated even though the registration data exists in the user terminal, it is determined that there is no history of connection between the user terminal and the storage device in the past. , The process is interrupted or an initial operation described later is performed.

  Further, in order to uniquely generate such terminal authentication ID and authentication comparison ID, calculation of a hash value or the like may be performed. In the calculation of the hash value, the value that is the basis of the calculation cannot be restored from the derived value, and the connected storage device is not specified even if the terminal authentication ID of the user terminal is decoded.

  Further, since the terminal authentication ID includes the user terminal ID, even if the terminal authentication ID is simply copied to another user terminal, inconsistency with the user terminal ID of the copy destination user terminal occurs. , The storage device is never authenticated. That is, although there is no change in the terminal authentication ID, an authentication comparison ID that is different from the terminal authentication ID is generated from the storage device ID of the storage device and the user terminal ID of another user terminal, and is authenticated by the terminal authentication means. Is not done. In this way, unauthorized data reference by other user terminals can be prevented.

  The storage device includes: a usage information generation unit that generates a usage information by allowing a user to select a usage method of the storage device; and the ID generation unit generates the usage information when the user terminal does not have the registration data. The authentication comparison ID thus obtained may be used as a terminal authentication ID, and data registration means for registering registration data composed of the terminal authentication ID and the usage information in the registration data storage means of the user terminal may be further provided.

  With this configuration, if the user terminal does not have registration data, or if there is registration data but not registration data in the storage device, registration data can be automatically generated. At this time, user authentication for generating registration data may be performed.

  In such data registration means, the authentication comparison ID generated by the ID generation means is replaced with a terminal authentication ID, and this terminal authentication ID and usage information are combined and registered in the user terminal. The user terminal repeats the same processing, for example, download to the hard disk drive, according to the usage information regarding the usage method of the storage device connected to the user terminal at the time of registration.

  As described above, this registration data may not exist on the storage device side. With this configuration, it is possible to register usage relationships with a large number of user terminals without increasing data on the storage device side. Further, when the registered usage information is changed, that is, when the usage method of the storage device is changed, it is possible to delete the registered data or perform another reset command.

  The storage device further includes password input means for allowing a user to input a password via the user terminal, or unique ID input means for inputting a unique ID from a separate storage device via the user terminal. The usage information generation means may limit the usage methods that can be selected in accordance with the input of the password or unique ID.

  With such a configuration, use of the storage device can be limited. For example, you can set the settings that can be automatically downloaded to the hard disk drive only to your user terminal, limit the reference to data in the storage device to prevent unauthorized data leakage, and connect to the company user terminal. It is possible to have the server automatically generate backup data.

  The storage device may comprise only a read-only storage medium. Since the registration data relating to the authentication between the storage device and the user terminal is stored on the user terminal side, the storage device does not require a writing area. Accordingly, the storage device can be formed only from the storage medium, and data can be written and provided in advance in the storage device.

  In order to solve the above problems, according to another aspect of the present invention, in a user terminal used by a user, there is provided a data utilization method for utilizing data stored in a storage device detachable from the user terminal: An ID generation step in which the storage device generates an authentication comparison ID from the user terminal ID, which is an ID related to the user terminal, and the storage device ID when connected to the user terminal; A terminal authentication step of authenticating the user terminal by comparing the terminal authentication ID of the registration data registered in the user terminal and the authentication comparison ID; and when authenticated in the terminal authentication step, the data in the storage device A data processing step for automatically processing according to the usage information of the registered data; and if the user is not authenticated in the terminal authentication step, the user uses the storage device. A usage information generation step of selecting a method and generating the usage information; an authentication comparison ID generated by the ID generation step as a terminal authentication ID, and registration data comprising the terminal authentication ID and the usage information as the user terminal And a data registration method for registering the data. A data utilization method is provided.

  With the configuration in which data processing is performed on the storage device side, processing of the storage device can be started with a simple action such as simply connecting the storage device to the user terminal without preparing an application in advance on the user terminal.

  In addition, the configuration for registering the registration data in the user terminal allows a different usage method to be set for each user terminal that uses the storage device, and is set when the storage device is connected to the user terminal having the registration data. Data is automatically processed according to usage. For example, depending on the user terminal, data stored in the storage device may be simply referred to by a browser, automatically copied to a hard disk drive, automatically output to a printer connected to the user terminal, You can send photos to websites on a defined network.

  In addition, since the usage method can be set for each user terminal in this way, the user terminal at home performs automatic backup to the hard disk drive, but other users' terminals can also refer to the contents of the storage device. As a result, it is possible to prevent data from being illegally downloaded by another user's terminal.

  Further, by storing registration data related to authentication between the storage device and the user terminal on the user terminal side, the storage device does not need to provide a separate storage area related to authentication, and the capacity of the registration device (user terminal) depends on the capacity of the storage area. The number is no longer limited. Even if the storage device is lost for some reason, it is possible to prevent leakage of information because registration data for effectively using the storage device is on the user terminal side.

  A registration determination step in which the storage device determines whether or not the registration data exists in the user terminal; and when the registration determination step determines that the registration data has, the ID generation step, the terminal authentication step, and the data processing If it is determined that there is no registration data in the registration determination step, the ID generation step, the usage information generation step, and the data registration step may be performed.

  With this configuration, even when the user terminal does not have registration data, or when registration data exists but is not registration data in the storage device, automatic operation is not required without requiring a special application on the user terminal side. Registration data can be generated automatically. Once the user terminal registers the registration data, the user terminal can automatically process the storage terminal in the usage method set from the next time.

  The computer also provides a computer program that functions as the user terminal or the storage device.

  Although the user terminal and the storage device have been described as separate units, the present invention can also be applied to a case where a storage device that is integrated in the user terminal from the beginning is attached and removed.

  As described above, according to the present invention, data in the storage device is processed by a simple operation of connecting the storage device without preparing an application on the user terminal side in advance to use the storage device. be able to. Further, the data in the storage device can be automatically processed by the usage method set for each user terminal.

  In addition, with the configuration in which the usage method can be set for each user terminal in this way, the use of the storage device can be restricted for each user terminal, and illegal data leakage can be prevented. Furthermore, with the configuration in which the registration data for each user terminal is registered on the user terminal side, the storage device does not need a separate storage area for authentication, and the number of registered devices (user terminals) is limited by the storage area. Disappears.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

(First embodiment: data utilization system)
FIG. 1 is an external view showing an example of a data utilization system in the present embodiment. The data utilization system includes a user terminal 110 and a storage device 120.

  Examples of the user terminal 110 include a personal computer, a PDA (Personal Digital Assistant), a mobile phone, a video conference system, and other computer devices. The storage device 120 is detachable from the user terminal and is portable. Examples of the storage medium include a memory card such as a Memory Stick (registered trademark), a USB storage, and a removable medium.

  In this embodiment, a notebook personal computer is selected as the user terminal 110 and a USB storage is selected as the storage device 120. In such a data use system, the user terminal 110 and the storage device 120 are connected via a USB (Universal Serial Bus) port 122, and the display device 124 and the input device 126 provided in the user terminal 110 are used to store the data in the storage device 120. Refer to the image data and the like.

  In addition, when the user has set in advance so that data processing in the storage device 120 is automatically performed on the user terminal 110, an application in the storage device 120 is simply connected to the user terminal 110. The startup method is automatically set and the set usage method, for example, automatic backup to a hard disk drive is forcibly performed.

  Differences between the data utilization system in the present embodiment and the conventional data processing system include the following. First, an application normally provided in the user terminal 110 is provided on the storage device 120 side. Second, usage information such as automatically backing up data to the hard disk drive is stored on the user terminal side instead of the storage device together with the terminal authentication ID related to authentication. Another feature is that the terminal authentication ID is generated from the IDs of both the user terminal and the storage device.

  Accordingly, it is not necessary to have an application for processing of the storage device 120 separately from the storage device 120 (for example, in a user terminal), and information about the storage device 120 is held on the storage device 120 side. There is no need. As described above, the history that the storage device 120 has been used in a specific user terminal 110 is left on the user terminal 110 side, and the footprint that the storage device 120 is used is left for each user terminal 110. It becomes an image.

  The user can set the usage method of the storage device 120 as if leaving a footprint for the plurality of user terminals 110 in this way, and define the plurality of user terminals 110 as terminals for performing dedicated processing. it can. Therefore, a user terminal 110 can be used for backup purposes, and a user terminal 110 can be used for image processing.

(User terminal 110)
FIG. 2 is a block diagram showing an outline of the user terminal 110. The user terminal 110 includes registration data storage means 160 that stores registration data 154 including a terminal authentication ID 150 and usage information 152 relating to the use of the storage device.

  As the registered data storage means 160, a storage such as a hard disk drive provided in advance in the user terminal 110 can be used. Here, it is not necessary to install the registration data 154 beforehand by a separate application. This is because when the storage device 120 is connected to the user terminal 110 and the user terminal 110 does not have the registration data 154, the registration data 154 is generated by the application provided in the storage device 120.

(Storage device 120)
FIG. 3 is a block diagram showing an outline of the storage device 120. The storage device 120 includes data storage means 170, ID storage means 172, ID generation means 174, usage information generation means 176, data registration means 178, password input means 180, terminal authentication means 182 and data. And processing means 184.

  The data storage unit 170 stores data 190 which is the main use of the storage device 120. As this data 190, various data formats such as music data, image data, moving image data, and text data can be stored. As a storage medium of the data storage means 170, an EEPROM, a flash ROM, a nonvolatile RAM, a hard disk drive, or the like can be used.

  The ID storage unit 172 stores a storage device ID 192 that is an ID as an identification number of the storage device 120. The storage device ID 192 is provided separately from or together with the data storage unit 170 so that the user cannot refer to it from the outside. The storage device ID 192 is registered in the ID storage unit 172 when the storage device 120 is purchased, and is used for registration of registration data and authentication of the user terminal 110 described later. Further, the storage device ID 192 may be key information, and is preferably protected by using a copyright protection technique or the like.

  The ID generation unit 174 uniquely generates an authentication comparison ID from the storage device ID 192 provided in the ID storage unit 172 and the user terminal ID referenced from the user terminal 110 when connected to the user terminal 110. This authentication comparison ID may be calculated using a hash value or the like. The authentication comparison ID becomes a terminal authentication ID of new registration data when there is no registration data related to the storage device 120 in the user terminal 110.

  The usage information generation unit 176 causes the user to select a usage method of the storage device 120 via the user terminal 110, and generates usage information 152 including the usage method. This can be done by simply referencing the data stored in the storage device to a browser or the like, automatically copying it to the hard disk drive, or automatically outputting it to a printer connected to the user terminal. Send photos to other websites. Not only the utilization methods listed here, but any utilization method performed in an existing storage device can be assumed. For example, an application such as a computer game may be included. The usage method registered here is actually implemented by the data processing means 184 described later.

  When the registered usage information 152 is changed, that is, when the usage method of the storage device 120 is changed, the registration data 154 can be deleted or another reset command can be used.

  The data registration unit 178 registers the registration data 154 in the user terminal 110 when the user terminal 110 does not have the registration data 154 related to the storage device 120. Specifically, the authentication comparison ID generated by the ID generation unit 174 is used as the terminal authentication ID 150, and the registration data 154 including the terminal authentication ID 150 and the usage information 152 generated by the usage information generation unit 176 is stored in the user terminal. The registration data is stored in the registered data storage unit 160. An application that operates as the data registration unit 178 may be prepared separately, and this separate application may be used only for registration processing of the registration data 154. Also, the usage information 152 can be digitized and used as a reference ID for the authentication comparison ID together with the user terminal ID and the storage device ID. The registration destination of the registration data 154 may be a hard disk drive of the user terminal 110 or a permanent storage area (for example, a flash ROM) other than that.

  Since the terminal authentication ID 150 included in the registration data 154 also refers to the user terminal ID, even if the registration data 154 or the terminal authentication ID 150 registered in the user terminal 110 is simply copied to the predetermined user terminal 110 Inconsistency between the terminal authentication ID 150 and the authentication comparison ID occurs in the copy destination user terminal 110, and the storage device 120 cannot be used. In this way, the storage device 120 recognizes the user terminal 110 in this embodiment instead of the conventional sense that the user terminal 110 recognizes the storage device 120.

  By providing the registration data 154 as described above, different usage methods can be set for each user terminal 110 that uses the storage device 120. When the storage device 120 is connected to the user terminal 110 having the registration data 154, The data 190 in the data storage unit 170 is automatically processed with reference to the set usage method. In addition, since the usage method can be set for each user terminal 110 in this way, the user terminal 110 at home performs automatic backup to the hard disk drive, but the user terminal 110 of another person only refers to the contents of the storage device. You can also.

  Furthermore, the configuration in which the registration data 154 is stored on the user terminal 110 side eliminates the need for the storage device 120 to have a separate storage area for authentication, and limits the number of registered devices (user terminals) due to the storage area limitation. Absent. That is, since the registration data 154 does not need to be stored on the storage device 120 side, a large number of user terminals 110 can be registered without increasing the data on the storage device 120 side. Further, even if the storage device 120 is lost for some reason, the registration data 154 for effectively using the storage device 120 is on the user terminal 110 side, so that information leakage can be prevented.

  Further, since the terminal authentication ID 150 is generated from a hash value or the like, the storage device ID referenced from the derived value (terminal authentication ID) cannot be restored, and the terminal authentication ID 150 is connected even if the terminal authentication ID 150 of the user terminal 110 is decrypted. The storage device 120 cannot be specified.

  When the registration data 154 is registered by the data registration unit 178, the password input unit 180 allows the user to input a password for releasing the restriction on the usage method via the user terminal 110. Here, a stage can be provided in the user's usage method, and a password can be set for each usage method.

  For example, if the password is not input when registering the registration data 154, the user can only refer to the data stored in the storage device 120. If a predetermined password is used, the user connects the storage device 120. You can register settings to automatically copy to the hard disk drive from time to time, and register settings to send image data such as photos to websites etc. on a predetermined network using a password with higher authority Can do. Here, it is possible that the storage device 120 cannot be used at all when no password is input. As a result, other users cannot use the storage device 120 illegally.

  Although the password request as described above can be explicitly displayed as “password input” on the user terminal 110, the password may be requested for the first time when “registration” is selected in the menu format. In addition, the password may be previously stored in the storage device 120 as a key and referenced from there.

  Further, instead of the password input means 180, a unique ID input means for inputting a unique ID from a separate storage device via the user terminal 110 may be provided. This is to use a separate storage means such as a hard key instead of a password that can be referred to without limitation. For example, when registering the registration data 154 only for the user terminal 110 in the company, etc. Can be used.

  In addition to the password input unit 180 and the unique ID input unit, the user terminal 110 can be registered using another application.

  The terminal authentication unit 182 is generated by the terminal authentication ID 150 in the registration data 154 and the ID generation unit 174 when the user terminal 110 has the registration data 154 related to the storage device 120 when connected to the user terminal 110. The user terminal 110 is authenticated by comparison with the authentication comparison ID. Here, if the user terminal 110 is not authenticated, it is determined that the storage device 120 is connected to the user terminal 110 for the first time, and the data registration unit 178 may be performed, or the use of the storage device 120 is not permitted. Processing may be interrupted.

  When the terminal authentication ID 150 is authenticated by the terminal authentication unit 182, the data processing unit 184 automatically processes the data 190 of the data storage unit 170 according to the usage information 152 of the registration data 154. In the processing by the data processing means 184, if the usage information 152 of the registration data 154 is not changed, the usage method registered at the first connection is repeated each time.

  The data processing unit 184 eliminates the need for providing a separate application in advance on the user terminal 110 side, and can start processing of the storage device 120 with a simple act of simply connecting the storage device 120 to the user terminal 110. .

  For example, a computer game is given as the application. When the storage device 120 is connected to the user terminal 110, an application, which is a game installed from the storage device 120 in advance in the initial setting, starts up, and a specific character in the storage device 120 appears. At this time, the specific character in the storage device 120 is processed as a main character in the user terminal 110 of the user and as a customer in the other user terminal 110.

  Conventionally, the application installed in advance on the user terminal 110 is included in the storage device 120 in this embodiment. This application includes the data processing means 184 and the data registration means 178.

  Such an application is provided in the storage device 120, but the processing device that actually processes the application may be a CPU provided in the user terminal 110 or embedded in the storage device 120. It is also good.

  In addition, since a plurality of storage devices 120 can be registered in one user terminal 110, it is possible to define different usage methods for each storage device 120 and use the storage devices 120 depending on the usage status.

  The storage device 120 configured in this way may be composed of only a read-only storage medium. Since the registration data 154 related to authentication between the storage device 120 and the user terminal 110 is stored on the user terminal 110 side, the storage device 120 does not require a writing area, and for example, data such as New Year's card material is read-only. The information can be stored in a ROM or the like as a storage medium and only referenced.

(ID generation means 174)
Next, a detailed embodiment of the ID generation unit 174 will be described.

  FIG. 4 is an explanatory diagram specifically showing the processing in the ID generation means 174. The IDs referred to by the ID generation unit 174 are the user terminal ID 196 of the user terminal 110 and the storage device ID 192 of the storage device 120. Here, the user terminal ID 196 can be, for example, the MAC address of a network card provided in the user terminal 110, or an identification number that does not change depending on the time that can be referred to in the user terminal 110 is used. can do. The storage device ID 192 is provided so that it cannot be confirmed by the user. The authentication comparison ID 150 may be generated by referring to three or more IDs without being limited to the two IDs.

  First, the ID generation means 174 refers to the user terminal ID 196 “01234456789ab” and the storage device ID 192 “xyz”, concatenates this ID with a character string in ASCII (ASCII), and further uniquely identifies the ID. The hash value of MD5 (Message Digest 5) to be determined is calculated. Therefore, the authentication comparison ID 198 becomes “41e21ed2a7c06c7eb245c2db24d3667d” by MD5 (“01234456789abxyz”). The terminal authentication means 182 compares the authentication comparison ID 198 with the terminal authentication ID 150 registered in the user terminal 110, and authenticates the user terminal 110.

  The terminal authentication ID 150 and the authentication comparison ID 198 refer to IDs that characterize the user terminal 110 and the storage device 120, respectively. With such a configuration, it is possible to prevent the storage device 120 from being illegally used in user terminals other than the user terminal 110 that the user normally uses.

  FIG. 5 is an explanatory diagram for explaining processing when the terminal authentication ID 150 is illegally copied. First, the terminal authentication ID 150 registered in the user terminal 110 is copied to another user terminal 210. In this case, at first glance, it seems that the storage device 120 can be used also in other user terminals 210. However, when the storage device 120 is actually connected to another user terminal 210, the ID generation unit 174 refers to the user terminal ID 212 “98765443210 cd” different from the user terminal ID 196 of the user terminal 110, and the user terminal ID 212 The authentication comparison ID 214MD5 (“98765443210cdxyz”) = “f33a0e98d85099985ad8d013599866582” is generated from the storage device ID 192 “xyz”. Then, the terminal authentication unit 182 compares the authentication comparison ID 214 with the terminal authentication ID 150 “41e21ed2a7c06c7eb245c2db24d3667d” copied to the other user terminal 210.

  Of course, depending on the terminal authentication means 182, since the authentication comparison ID 214 and the terminal authentication ID 150 are different, the user terminal 210 is not authenticated, and the storage device 120 cannot be used in the user terminal 210.

  Further, the authentication comparison ID 192 generated by the ID generation means 174 is stored not on the storage device 120 side but on the user terminal 110 side as the terminal authentication ID 150 of the registration data 154. The effect obtained by registering the registration data 154 related to the use of the storage device 120 in the plurality of user terminals 110 will be described below.

  FIG. 6 is an explanatory diagram for explaining processing when one storage device 120 is registered in a plurality of user terminals. In this case, for example, the terminal authentication ID 150 “AZ” related to the user terminal 250 is generated from the user terminal ID 196 “A” of the user terminal 250 and the storage device ID 192 “Z” of the storage device 120. Here, in order to facilitate understanding of the embodiment, “AZ” is roughly generated from “A” and “Z”. Here, “A” and “Z” are simply added, but a value that cannot be calculated in reverse is actually generated by a complicated calculation using a hash value or the like.

  Similarly to the user terminal 250, a terminal authentication ID 150 “BZ” for the user terminal 252 is generated from the user terminal ID 196 “B” of the user terminal 252 and the storage device ID 192 “Z” of the storage device 120, and the user terminal of the user terminal 254 A terminal authentication ID 150 “CZ” for the user terminal 254 is generated from the ID 196 “C” and the storage device ID 192 “Z” of the storage device 120.

  Thus, even if the terminal authentication ID 150 is generated by the same storage device 120, a different terminal authentication ID 150 is generated at each user terminal, and processing is performed according to the usage method set for each user terminal when connected to each user terminal. .

  Further, by storing the registration data 154 including such a terminal authentication ID 150 on the user terminals 250, 252 and 254 side, the storage device 120 does not need to store the registration data 260 in a separate storage area. The number of registered devices (user terminals) is not limited by the capacity. Further, even if the storage device 120 is lost for some reason, it is possible to prevent information leakage because the registration data 154 for effectively using the storage device 120 exists on the user terminal 110 side.

(Second Embodiment: Data Usage Method)
FIG. 7 is a flowchart showing the flow of the data utilization method according to the present embodiment. Here, the flow of using the storage device 120 connected to the user terminal 110 in the user terminal 110 used by the user will be described based on the flowchart of FIG.

  When the user connects the storage device 120 to the connection terminal of the user terminal 110, first, the storage device 120 checks whether or not the registration data 154 exists in the user terminal 110 (S300).

  Here, the user terminal 110 uses a plurality of storage devices 120 and may have a plurality of registration data 154 for each storage device 120. When the registration data 154 is expressed in a file format, the management is performed by assigning a sequence number to the file name or by adding a part of the storage device ID 192 to identify a plurality of connected storage devices 120. Further, it is assumed that there is one file, and a plurality of registered data 154 may be managed in the file.

  FIG. 8 is an explanatory diagram illustrating processing when a plurality of storage devices 120 are registered in the user terminal 110. Here, a plurality of registration data 154 is stored in one registration data file 410, and the registration data 154 for each storage device 120 is managed using the serial number of the storage device 120.

  For example, when the storage device 120 is registered, the one registration data file 410 registers the storage device 120 having the serial number “00012” in association with “00012” and its registration data 154. The storage device 120 with the serial number “00012” refers to the registration data associated with “00012” in the registration data file 410, and the storage device 120 with the serial number “00234” is associated with “00234” in the registration data file 410. Refer to the registration data. In addition, the storage device 120 having the serial number “00311” does not have registration data corresponding to the registration data file 410, and therefore performs a data registration process described later or stops the processing.

  If it is determined in the registration determination step (S300) of the flowchart of FIG. 7 that there is registration data 154, an authentication comparison ID is generated from the user terminal ID 196 and the storage device ID 192 using a hash value or the like (S302). This authentication comparison ID is compared with the terminal authentication ID 150 in the registration data 154 of the user terminal 110 (S304), and when this ID is the same, that is, when the user terminal 110 is authenticated by the storage device 120, it is stored in the storage device 120. Are automatically processed according to the usage information 152 of the registration data 154. The usage information 152 is a usage method of the storage device 120 desired by the user. The storage device 120 is connected to a user terminal that simply refers data stored in the storage device 120 to a browser or the like and automatically copies it to a hard disk drive. This includes automatic output to a printer, transmission of image data such as a photograph to a website on a predetermined network, and the like.

  Further, if the user terminal 110 is not authenticated as a result of the terminal authentication step (S304), the storage device 120 performs an initial operation assuming that it is used for the first time by the user terminal 110. First, the user selects the usage method of the storage device 120 as described above, and generates usage information 152 (S308). Thereafter, the authentication comparison ID generated in the ID generation step (S302) is set as the terminal authentication ID 150, and registration data 154 including the terminal authentication ID 150 and the usage information 152 is registered in the user terminal 110 (S310).

  When it is determined in the registration determination step (S300) that there is no registration data 154, as in the case where the user terminal 110 is not authenticated as a result of the terminal authentication step (S304), the ID generation step (S320), A usage information generation step (S322) and a data registration step (S324) are performed. Since this step has the same function as the ID generation step (S302), the usage information generation step (S308), and the data registration step (S310), a duplicate description is omitted.

  At this time, after it is determined that there is no registration data 154, before the ID generation step (S320) is performed, a step of limiting selectable usage methods in the usage information 152 generated in the usage information generation step (S322) May be included. Specifically, a password input process for allowing the user to input a password or a unique ID input process for inputting a unique ID from a separate storage device is performed via the user terminal 110, and selection is made according to such a password or unique ID. Limit the possible uses.

  Therefore, when no password is input at the above timing, for example, the storage device 120 cannot be used at all. When a predetermined password is input, the hard disk drive is automatically connected when the user connects the storage device 120. The setting for performing copying can be registered, and the setting for transmitting image data such as a photograph to a website on a predetermined network can be registered when a password with higher authority is entered. Thus, other users cannot use the storage device 120 illegally.

  As described above, in this embodiment, even if an application is not prepared in advance on the user terminal 110 side in order to use the storage device 120, the data of the storage device is processed by a simple operation of connecting the storage device. can do. In addition, the data in the storage device 120 can be automatically processed by the usage method set for each user terminal 110.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  For example, in the above-described embodiment, the USB storage electrically connected to the user terminal is cited as the storage device. However, the present invention is not limited to this, and a non-contact storage medium that transmits and receives stored data wirelessly is used. You can also

  The present invention is applicable to a data use system, a storage device, a data use method, and a computer program that use a portable storage device.

It is the external view which showed an example of the data utilization system in this embodiment. It is the block diagram which showed the outline of the user terminal. It is the block diagram which showed the outline of the memory | storage device. It is explanatory drawing which showed the process in ID production | generation means concretely. It is explanatory drawing for demonstrating the process at the time of copying a terminal authentication ID illegally. It is explanatory drawing for demonstrating the process at the time of registering one memory | storage device to a some user terminal. It is the flowchart which showed the flow of the data utilization method by this embodiment. It is explanatory drawing explaining a process when the several memory | storage device is registered into the user terminal.

Explanation of symbols

110 User terminal 120 Storage device 150 Terminal authentication ID
152 Usage information 154 Registration data 160 Registration data storage means 170 Data storage means 172 ID storage means 174 ID generation means 176 Usage information generation means 178 Data registration means 180 Password input means 182 Terminal authentication means 184 Data processing means

Claims (16)

A data utilization system comprising a user terminal used by a user and a storage device detachably attached to the user terminal, wherein data stored in the storage device is used in the user terminal:
The user terminal is
A registration data storage means for storing registration data comprising a terminal authentication ID and usage information relating to the use of the storage device;
The storage device
Data storage means for storing data;
Terminal authentication means for authenticating the terminal authentication ID when connected to the user terminal;
Data processing means for automatically processing the data in the data storage means according to the usage information when the terminal authentication ID is authenticated by the terminal authentication means;
A data utilization system characterized by comprising: The storage device
ID storage means for storing a storage device ID which is an ID of the storage device;
ID generation means for generating an authentication comparison ID from a user terminal ID, which is an ID related to the user terminal, and the storage device ID when connected to the user terminal;
Further comprising
The data use system according to claim 1, wherein the terminal authentication means authenticates the user terminal by comparing the terminal authentication ID and the authentication comparison ID. The storage device
Usage information generating means for causing the user to select a usage method of the storage device and generating the usage information;
When the user terminal does not have the registration data, the authentication comparison ID generated by the ID generation unit is used as a terminal authentication ID, and registration data including the terminal authentication ID and the usage information is registered in the user terminal. Data registration means for registering in the data storage means;
The data utilization system according to claim 2, further comprising: Data storage means for storing data;
Terminal authentication means for authenticating a terminal authentication ID of registration data registered in the user terminal at the time of connection with the user terminal used by the user;
Data processing means for automatically processing data stored in the data storage means in accordance with usage information of the registered data when the terminal authentication ID is authenticated by the terminal authentication means;
A storage device comprising: ID storage means for storing a storage device ID which is an ID of the storage device;
ID generation means for generating an authentication comparison ID from a user terminal ID, which is an ID related to the user terminal, and the storage device ID when connected to the user terminal;
Further comprising
The storage device according to claim 4, wherein the terminal authentication unit authenticates the user terminal by comparing the terminal authentication ID with the authentication comparison ID. Usage information generating means for causing the user to select a usage method of the storage device and generating the usage information;
When the user terminal does not have the registration data, the authentication comparison ID generated by the ID generation unit is used as a terminal authentication ID, and registration data including the terminal authentication ID and the usage information is registered in the user terminal. Data registration means for registering in the data storage means;
The storage device according to claim 5, further comprising: Further comprising password input means for allowing the user to input a password via the user terminal;
The storage device according to claim 6, wherein the usage information generation unit limits selectable usage methods according to the input of the password. A unique ID input means for inputting a unique ID from a separate storage device via the user terminal;
The storage device according to claim 6, wherein the usage information generating unit limits a usage method that can be selected in accordance with the input of the unique ID.   The storage device according to claim 4, comprising only a read-only storage medium. Computer
Data storage means for storing data;
Terminal authentication means for authenticating a terminal authentication ID of registration data registered in the user terminal at the time of connection with the user terminal used by the user;
Data processing means for automatically processing data stored in the data storage means in accordance with usage information of the registered data when the terminal authentication ID is authenticated by the terminal authentication means;
A computer program characterized by functioning as a computer program. An ID storage means for storing a storage device ID which is an ID of the storage device;
ID generation means for generating an authentication comparison ID from a user terminal ID, which is an ID related to the user terminal, and the storage device ID when connected to the user terminal;
The computer program according to claim 10, wherein the computer program is made to function. A usage information generating means for causing the user to select a usage method of the storage device and generating the usage information;
When the user terminal does not have the registration data, the authentication comparison ID generated by the ID generation unit is used as a terminal authentication ID, and registration data including the terminal authentication ID and the usage information is registered in the user terminal. Data registration means for registering in the data storage means;
The computer program according to claim 11, wherein the computer program is made to function. A data utilization method for utilizing data stored in a storage device detachable from the user terminal at a user terminal used by the user:
The storage device is
An ID generation step of generating an authentication comparison ID from a user terminal ID that is an ID related to the user terminal and a storage device ID that is an ID of the storage device when connected to the user terminal;
A terminal authentication step of authenticating the user terminal by comparing the terminal authentication ID of registration data registered in the user terminal and the authentication comparison ID when connected to the user terminal;
A data processing step of automatically processing data in a storage device according to usage information of the registered data when authenticated in the terminal authentication step;
If not authenticated in the terminal authentication process,
A usage information generating step of causing the user to select a usage method of the storage device and generating the usage information;
A data registration step of registering registration data consisting of the terminal authentication ID and the usage information in the user terminal, wherein the authentication comparison ID generated by the ID generation step is a terminal authentication ID;
A data utilization method characterized by including: The storage device is
A registration determination step of determining presence or absence of the registration data in the user terminal;
If it is determined in the registration determination step that registration data has, the ID generation step, the terminal authentication step, and the data processing step;
When it is determined that there is no registration data in the registration determination step,
The ID generation step, the usage information generation step, and the data registration step;
The data utilization method according to claim 13, wherein the data utilization method is performed. A password input step for allowing the user to input a password via the user terminal;
14. The data usage method according to claim 13, wherein, in the usage information generation step, selectable usage methods are limited in accordance with the input of the password. A unique ID input step of inputting a unique ID from a separate storage device via the user terminal;
14. The data utilization method according to claim 13, wherein, in the utilization information generation step, a utilization method that can be selected according to the input of the unique ID is limited.

Images