JP2006228139A - Security management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent leakage of information by blocking access to a file at a site different from a site at which the file is originally stored even in the case where the file is unintentionally moved or copied. <P>SOLUTION: This security management system comprises: an environmental condition information adding means 12 for adding environmental condition information 22 to a file 21 targeted for security management, the information 22 indicating the environmental conditions usable by the file 21; a storing means 14 for storing a file 20 in a data area targeted for management in storage 15, the file 20 being obtained by encrypting the file 21 by a first encrypting means 13; an access detecting means 16 for detecting operations for opening the file 20; a decoding means 17 for decoding the file 20; a comparison means 28 for comparing decoded environmental condition information 22 with the current environmental conditions of the file 20; and an access permission means 19 for permitting access to the file 21 to open the same only when the environmental condition information 22 coincides with the current environmental conditions as a result of the comparison. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a security management system, and more particularly to a security management system that assumes a case where a file is copied to a portable storage medium or a portable terminal device and taken out.

  In the conventional method for preventing unauthorized use, a password for enabling the user to access data written on the hard disk of the system is stored in the storage means of the system and stored in the storage means and the password entered by the user. The access to the data on the hard disk is permitted only when the current password matches (see, for example, Patent Document 1).

  By adopting such a method, the data cannot be read even if the hard disk is incorporated into another system due to theft or the like.

JP 2000-172567 A

  In the conventional method of preventing unauthorized use, if the password is known, it is possible to access the data if the password is stored in the storage means of another system. There was a problem that leakage occurred.

  In addition, when a user who knows the password accesses the hard disk and copies the file to a portable storage medium such as a flexible disk (hereinafter referred to as FD), the user can access it at another location. As a result, there is a problem that information leakage occurs.

  The present invention is a security management capable of preventing information leakage by preventing access at a location different from the originally stored location even when an unintended file is moved or copied. The goal is to obtain a system.

  According to the present invention, environmental condition information adding means for adding environmental condition information indicating an environmental condition in which the file can be used to a security management target file, and the file is encrypted together with the added environmental condition information. 1 encryption means, storage means for saving the file encrypted by the first encryption means in a predetermined management target data area, and input of a command for opening the file Access detecting means for detecting the file, decoding means for decoding the file together with the environmental condition information added thereto, comparing means for comparing the decoded environmental condition information and the current environmental condition of the file As a result of comparison by the comparison means, access to the file is performed only when the environmental condition information matches the current environmental condition. A security management system which is characterized in that a permission means for opening the file variable.

    According to the present invention, environmental condition information adding means for adding environmental condition information indicating an environmental condition in which the file can be used to a security management target file, and the file is encrypted together with the added environmental condition information. 1 encryption means, storage means for saving the file encrypted by the first encryption means in a predetermined management target data area, and input of a command for opening the file Access detecting means for detecting the file, decoding means for decoding the file together with the environmental condition information added thereto, comparing means for comparing the decoded environmental condition information and the current environmental condition of the file As a result of comparison by the comparison means, access to the file is performed only when the environmental condition information matches the current environmental condition. Since the security management system is characterized by comprising an access permission means for opening the file, when the environmental condition of the current file does not completely match the environmental condition information registered in advance Since the file is not opened, even if an unintended file is moved or copied, information leakage can be prevented by preventing access to a location different from the location where it was originally saved. it can.

Embodiment 1 FIG.
The security management system according to the present invention assigns information about the stored location and the surrounding environment to the information leakage prevention target object itself (such as a file). As a result, when an object is moved or copied unintentionally, the object itself is locked and cannot be opened in an environment different from the place where it was originally stored, and the object itself is taken out. However, the contents cannot be browsed.

FIG. 1 is a configuration diagram showing a configuration of a security management system according to Embodiment 1 of the present invention. As shown in FIG. 1, a management target server 1 storing a security management target file is connected to a plurality of terminals 3 and 4 via a network 2. In addition, another computer 5 such as a portable terminal may be connected to the network 2. The management target server 1 is provided with file creation means 10. The file creation means 10 creates a file 21 based on commands and data input via the network 2 from the terminal 3 used by the file creator. A second encryption unit 11 is provided to encrypt the file 21 created by the file creation unit 10. Further, environmental condition information adding means 12 is provided, and environmental condition information 22 indicating the environmental conditions in which the file 21 can be used is added to the security management target file 21 encrypted by the second encryption means 11. . The first encryption unit 13 is provided, and the encrypted file 20 is created by encrypting the file 21 to which the environmental condition information 22 is added together with the added environmental condition information 22. The storage unit 14 is provided, and the encrypted file 20 encrypted by the first encryption unit 13 is stored in the storage device 15 provided in the management target server 1 with a predetermined predetermined value. Save to the managed data area.
The environmental condition information 22 is configured by information described later, but is configured based on information input from the terminal 3 or an input device (not shown) connected to the management target server 1. The information regarding the terminal that is instructed to create the file 21 may be configured to transmit specific information at the same time when the creation is instructed.

  Furthermore, access detection means 16 is provided in the management target server 1. The access detection means 16 detects that a command for opening the security management target file 21 stored in the management target data area is input from the terminal 2 or 4 or another computer 5 via the network 2. To do. Decryption means 17 is provided to decrypt the file 21 encrypted by the first encryption means 13 together with the environmental condition information 22 of the additional information. A comparison unit 18 is provided to compare the decrypted environmental condition information 22 with the current environmental condition of the file 21. In addition, an access permission unit 19 is provided, and as a result of comparison by the comparison unit 18, access to the file 21 is permitted only when the environmental condition information 22 matches the current environmental condition, and the second encryption is performed. The file 21 encrypted by the converting means is decrypted and opened.

  In FIG. 1, the terminal 4 is a terminal used by a user (third party) who does not have the authority to access the file 21. The other computer 5 stores a file 20 in which the file 20 stored in the management target data area is copied or moved by a third party via the network 2. Similarly, a portable storage medium 30 such as a flexible disk stores a file 20 in which the file 20 stored in the management target data area is copied or moved by a third party.

  Next, the operation will be described. First, an operation for constructing the security management system according to the present invention in the management target server 1 will be described. In order to construct a security management system, software (hereinafter referred to as a security management program) for executing the operations of the means 10 to 19 shown in FIG. Next, a predetermined area in the storage device 15 provided in the management target server 1 is set as a management target data area. Thereby, the security management system of the present invention is constructed in the management target server 1.

  Next, a file creation operation in the security management system of the present invention will be described with reference to FIG. First, in step S1, the file creator performs user authentication and logs in to the terminal 3. User authentication at the time of login may be performed by inputting a user name and a password, but may be performed using biometric authentication information such as a fingerprint in order to improve security. Next, the file creator activates file creation software such as word processing software or table creation software for creating the file, and inputs to the terminal 3 whether or not the file to be created is a security management target file. . As an input method, for example, as shown in FIG. 3, a window automatically opens and a message such as “Is the file to be created a security management target” is displayed, and the file creator is prompted by the message. Click the “Yes” or “No” button. When the “Yes” button is clicked, the security management program is started, while when the “No” button is clicked, a normal file creation operation is performed. Hereinafter, a case where the security management program is started will be described. Next, in step S2, the file creator operates the terminal 3 to input necessary data and instructions, so that the file creation means 10 creates the file 21 to be security managed. Next, in step S3, when the file creator inputs an operation of “save file” (selects and clicks the “save as” menu item), the created file 21 is second encrypted. Means 11 encrypts. The encryption may be performed when the file creator inputs a user ID and an encryption password. Alternatively, the file creator may have an IC card in which the encryption key is stored, and the IC card information may be read only when the file creator is read by the reader of the terminal 3. Good. Next, in step S4, environmental condition information 22 is added to the outside of the file 21, and the file 20 is generated in a file format dedicated to the security management program.

The environmental condition information 22 includes the following.
(1) Original location information of file 21 on network 2 (1a) IP address of managed server 1 (1b) Computer name of managed server 1 (1c) Volume and directory name where file 21 is stored (1d) Information on terminals that are allowed to be used as necessary (2) Original affiliation and access authority of file 21 (2a) ID number of department name to which file 21 belongs (2b) Access authority to file 21 (use Authorized user ID)
A plurality of access authorities can be added. That is, when there are a plurality of users who are permitted to use, the user IDs of all these users can be added. In addition, when there is an environment other than the above in which the use of the file 21 is permitted, the information can also be added. For example, when the file 20 is permitted to be copied or moved to another computer 5 as well as on the management target server 1, information that can identify the computer 5 is also added.
In addition, as the information of the terminal permitted to use described in (1d), the IP address, protocol number, PORI number, etc. of the terminal can be considered, and it is configured by any one or a combination of these information. be able to. The above (1a) to (1c) are information stored in advance in the managed server 1, but (1d) and (2a) to (2b) are simultaneously with the file creation instruction (step S2) from the terminal 3. Information to be transmitted. Further, all the information may be transmitted from the terminal 3, or when the environmental condition information is determined by specifying the terminal 3, the management target server 1 stores the information in advance. May be.

  Next, in step S5, the entire file 20 including the environmental condition information 22 is encrypted by the first encryption unit 13. Next, in step S6, the encrypted file 20 is stored in a management target data area set in advance in the storage device 15. At this time, a unique extension (for example, “XX.x”) is added after the file name. Hereinafter, since it is determined whether or not the file 20 is a file to be managed based on this extension, this extension is referred to as an identifier of the file 20. As a result, the file 20 becomes a security management target file and can be used only under the environmental condition that matches the environmental condition information 22. As described above, if the file creator specifies that the file is to be managed in the window shown in FIG. 3 before creating the file, the file creator simply performs the “save file” operation as usual, after creating the file. As a result, the created file 21 is automatically encrypted, the environmental condition information 22 is added, and after being encrypted again, it is stored in the management target data area in the storage device 15. Therefore, it is not necessary to specify the management target data area as the “save destination” when saving the file, and the data area is automatically saved there, so that an inadvertent mistake can be prevented and it is safe.

  Next, an operation for accessing the file 20 will be described with reference to FIG. When an operation for opening the file 20 is performed in the terminal 4 used by a third party, the access detection means 16 has performed the operation according to the identifier (file extension) of the file 20 in step S10. Is detected and the security management program is started. Next, in step S11, it is determined whether or not the file 20 encrypted by the first encryption means can be decrypted. If the decryption cannot be performed, the process proceeds to step S17, a message indicating that access to the file cannot be permitted ("this file cannot be accessed") is displayed on the screen of the terminal 4, and the process is terminated. On the other hand, if it is determined that decryption is possible, the file 20 is decrypted in step S12. Next, in step S13, location information of the file 21 among the environmental condition information 22 of the decrypted file 20 (IP address and computer name of the management target server 1, volume name and directory name of the management target data area, etc.) And the current location of the file 20 are compared. In this case, since the file 20 is in its original location, the comparison result is OK. Next, in step S14, access authority information (affiliation and access authority of the file 21, etc.) of the decrypted environmental condition information of the file 20 and current access authority (affiliation of the user of the terminal 4 and the file 21). And whether or not there is access authority. In this case, since the access is from a third party to which access is not permitted, the affiliation or / and the access authority do not match, so the comparison result is NG. Therefore, it progresses to step S17, said message is displayed, and a process is complete | finished.

  In FIG. 4, a case where a user having access authority accesses from the terminal 3 will be described. The processing from step S10 to step S13 is the same as that described above. In step S14, access authority information (the affiliation and access authority of the file 20, etc.) of the decrypted environmental condition information of the file 20 and the current access authority (the affiliation of the user of the terminal 3 and the access authority to the file 20) (With or without). In this case, since the access is from a user who is permitted to access, the affiliation and access authority match, so the comparison result is OK. Therefore, the process proceeds to step S15, the file 21 encrypted by the second encryption unit 11 is decrypted, and the file 21 is opened in step S16.

  Next, the case of access by another computer 5 will be described with reference to FIG. Here, the file 20 is copied or moved and stored in the other computer 5. First, the case of access by a third party will be described. In this case, if the file 20 cannot be decrypted in step S11, the process proceeds to step S17 and the process ends. Even when decryption is possible, since the location of the current file 20 is not the management target data area of the storage device 15 of the management target server 1 in step S13, it does not match the location information of the location condition information 22. Is not recognized by the comparison means 18 of the security management program from the network information, the comparison result is NG, the process proceeds to step S17, and the process ends.

  On the other hand, when access in the other computer 5 is permitted in advance and the environmental condition information 22 includes information for specifying the other computer 5, as a result of the comparison in steps S13 and S14, the location and access authority Is identical to the environmental condition information 22, the file 21 is decrypted in step S15, and the file 21 is opened in step S16. The location condition in this case may be only when another computer 5 is connected to a predetermined network in a pre-registered location, and in that case, an unexpected use by the same user (for example, Access at home) can be prohibited.

  Next, a case where the file 20 is moved or copied to the portable storage medium 30 in FIG. 4 will be described. In this case, if the file 20 cannot be decrypted in step S11, the process proceeds to step S17 and the process ends. Even when decryption is possible, since the location of the current file 20 is not the management target data area of the storage device 15 of the management target server 1 in step S13, it does not match the location information of the location condition information 22. Is not recognized by the comparison means 18 of the security management program from the network information, the comparison result is NG, the process proceeds to step S17, and the process ends.

As described above, in the present embodiment, when the file 21 is created, the environmental condition information 22 (location information and access authority) permitting access is added to the file 21 to form the file 20, which is encrypted. And stored in the management target data area of the storage device 15 of the predetermined management target server 1. When the user wants to access the file 21, it can be accessed only when both the location information of the current file and the access authority of the user match the environmental condition information 22. Even if the user tries to access the file 20 by copying or moving the file 20 to another computer 5 or the portable storage medium 30, at least one of the current location information of the file and the access right of the user Since one does not match the environmental condition information 22, the file 21 cannot be opened. Therefore, even when the file is unintentionally moved or copied, it is possible to prevent access at a location different from the location where the file was originally stored, thereby preventing information leakage. In addition, even if the file 20 is taken out, the file 20 cannot be opened except in the registered environment. Therefore, the user should be thoroughly informed that the taking out of the file 20 is meaningless so as to eliminate the willingness to take out the file 20. Can be promoted. Furthermore, since the file 21 and the file 20 are encrypted so that only a user having access authority can decrypt them, the security is further improved.
Moreover, although the item contained in the environmental condition information 22 was mentioned above, you may comprise those items in any combination.

Embodiment 2. FIG.
In the first embodiment, the example in which the IP address of the management target server 1 is used as the original file location information of the environmental condition information 22 has been described. In the present embodiment, in order to further improve security, an IP address of a router that transmits a packet to a terminal permitted to access is specified as location information. FIG. 5 is a configuration diagram in the present embodiment. In FIG. 5, it is assumed that the terminal 31 permitted to access is close to the router 32. At that time, the IP address of the router 32 is registered in the environmental condition information 22 relating to the file instructed to be created from the terminal 31. Since the IP address of the router 32 is registered as the “default gateway” of the terminal 31, the IP address of the “default gateway” is acquired and transmitted together with the file creation instruction from the terminal 31. Can be configured.
When permitting an accelerator from the mobile terminal 33 in proximity to the router 34, the IP address information of the “default gateway” is acquired from the mobile terminal 33 and transmitted together with the file creation instruction from the terminal 33. .
The IP address of the neighboring router for the above-described permitted terminal may be stored in advance in the managed server 1 as information on the permitted terminal.
Further, the IP address of the router adjacent to the managed server 1 can be included in the environmental condition information 22, so that even if there are a plurality of managed servers 1 on the system, the corresponding managed server 1 is information to specify.

Embodiment 3 FIG.
In the present embodiment, an example will be described in which the transmission time (average value) of data between the managed server 1 and the terminal is the location information of the environmental condition information 22. In the present embodiment, the transmission time of data between the managed server 1 and the terminal is measured in advance, and a predetermined threshold value is provided from the measurement result of the transmission time. If the transmission time is longer than that, it is determined that the access is from an unexpected terminal, and access is not permitted.

    As described above, in the present embodiment, the data transmission time is registered, and when the transmission time is longer than a predetermined threshold, the file 20 cannot be accessed. Impersonation from the terminal can be prevented.

Embodiment 4 FIG.
In the present embodiment, an accessible period or time zone is registered in advance as the environmental condition information 22. As a result, access to the file is not permitted outside the accessible period. For example, if the accessible period is a weekday, access to the file 20 on a holiday may be fraudulent, so if it is not permitted, security is improved. Further, for access outside the accessible time zone, for example, access outside business hours may be fraudulent, so if it is not permitted, security is improved.
When the usage time characteristics of the terminal 3 (for example, a legitimate user uses only from 8:00 to 17:00 on weekdays) are known, the environmental condition information 22 of the file commanded to be created from the terminal 3 is displayed. May be configured to register a certain use-permitted time zone.

  Also, the threshold value of the number of logged-in users is registered as environmental condition information 22, and access is performed only when a user who belongs to the same department logs in to his / her terminal more than a predetermined number. It may be possible.

  In Embodiments 1 to 4 described above, encryption is merely described. However, any of the common key method, public key method, and other methods can be used for the encryption. However, it may be set as appropriate in accordance with the use state or use environment.

It is the block diagram which showed the structure of the security management system which concerns on Embodiment 1 of this invention. It is the flowchart which showed operation | movement of the security management system which concerns on Embodiment 1 of this invention. It is explanatory drawing which showed an example of the display screen of the security management system which concerns on Embodiment 1 of this invention. It is the flowchart which showed operation | movement of the security management system which concerns on Embodiment 1 of this invention. It is the block diagram which showed the whole structure of the security management system which concerns on Embodiment 2 of this invention.

Explanation of symbols

  1 server to be managed, 2 network, 3 terminal (file creator), 4 terminal 4 (third party), 5 other computer, 10 file creating means, 11 second encryption means, 12 environmental condition information adding means, 13 First encryption means, 14 storage means, 15 storage means, 16 access detection means, 17 decryption means, 18 comparison means, 19 access permission means, 20, 21 file, 22 environmental condition information, 30 portable storage medium.

Claims (3)

Environmental condition information adding means for adding environmental condition information indicating an environmental condition that the file can be used to a security management target file;
First encryption means for encrypting the file together with the added environmental condition information;
Storage means for storing the file encrypted by the first encryption means in a predetermined management target data area;
Access detecting means for detecting an input of a command for opening the file;
Decryption means for decrypting the file together with the attached environmental condition information;
A comparing means for comparing the decrypted environmental condition information with the current environmental condition of the file;
Access permitting means for permitting access to the file and opening the file only when the environmental condition information matches the current environmental condition as a result of the comparison by the comparing means. Security management system.   2. The security management system according to claim 1, wherein the environmental condition information includes original location information of the file and access authority information indicating user information permitted to use the file. . Further comprising second encryption means for encrypting the file created by the file creation means;
The environmental condition information adding means adds the environmental condition information to the file encrypted by the second encryption means,
3. The security management system according to claim 1, wherein, when access is permitted, the access permission unit decrypts the cipher by the second encryption unit and opens the file. 4.

Images