JP2008009556A - Information leakage prevention program, information leakage prevention method and information leakage prevention apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent the leakage of data stored in a storage device based on the attributes of a place including a current position. <P>SOLUTION: The position category of a place where the use of data stored in a management folder is inhibited and the use range of a computer 10 are respectively stored as inhibited position category information and area information, and the position category of the place including the current position is acquired, and whether or not the acquired position category is included in the inhibited position category information is determined, and when it is determined that the acquired position category is included, the data in the management folder are erased. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  An information leakage prevention program, an information leakage prevention method, and information for detecting position information of a current position of a storage device and preventing leakage of data stored in the storage device based on the detected position information More particularly, the present invention relates to an information leakage prevention program, an information leakage prevention method, and an information leakage prevention device capable of preventing data leakage based on an attribute of a location including a current position.

  In recent years, along with the widespread use of small personal computers and portable hard disk devices, information is carried using these devices to carry out business. As a result, business operations are efficiently performed, but information leakage due to loss or theft of personal computers and hard disks is increasing.

  In order to prevent such information leakage, conventionally, there has been known a technique for monitoring the usage status of a personal computer or a hard disk and deleting or encrypting information stored in the hard disk when an unauthorized use is detected. ing.

  For example, in Patent Document 1, the position information of its own device is detected using position detection means such as GPS (Global Positioning System), and stored in the device when a predetermined usage range in which the device can be used is exceeded. An information processing apparatus that deletes information is disclosed.

JP 2003-18652 A

  However, in the above prior art, information is deleted when a predetermined usage range is exceeded, so it is convenient when the information processing apparatus is used within a limited range such as in an office or a building. However, for example, when used in a relatively wide range, such as when going out or on a business trip, if the range of use is set according to the range of action, places that are not actually used will be included in the range of use. There is a problem that the safety of information leakage is reduced.

  Specifically, for example, if you specify a single town as the range of use when you go out, the range of use also includes places that are prone to loss or theft, such as restaurants and playgrounds This increases the risk of information leakage.

  Therefore, it is strongly desired that measures can be taken to prevent information leakage according to location attributes, such as deleting important information in locations where information leakage is likely to occur, even within the range of use. .

  The present invention has been made to solve the above-described problems caused by the prior art, and an information leakage prevention program and information leakage prevention capable of preventing data leakage based on an attribute of a place including the current position. It is an object to provide a method and an information leakage prevention apparatus.

  In order to solve the above-described problems and achieve the object, an information leakage prevention program according to the present invention detects position information of a current position of a storage device and stores the position information in the storage device based on the detected position information. An information leakage prevention program for preventing leakage of existing data, a prohibited position attribute storage procedure for storing attribute information of a place where use of the data is prohibited in an attribute information storage device as prohibited position attribute information, and the current position The position attribute acquisition procedure for acquiring the attribute information of the place including the current position as the current position attribute information based on the position information, and the prohibited position attribute information stored in the attribute information storage device, the position information A position attribute determination procedure for determining whether or not the current position attribute information acquired by the attribute acquisition procedure is included in the prohibited position attribute information; and the position attribute determination procedure If the more the current position attribute information is determined to be included in the forbidden location attribute information, wherein the executing a data deletion To delete the data, to the computer.

  The information leakage prevention program according to the present invention, in the above invention, includes a use range storage procedure for storing a use range of the storage device in a use range storage device, and a use range stored in the use range storage device. And a usage range determination procedure for determining whether or not the current location is within the range of the usage range, and further causing the computer to execute the data deletion procedure, wherein the current location is determined by the usage range determination procedure. The data stored in the storage device is deleted when it is determined that it is not within the range of use.

  In the information leakage prevention program according to the present invention, the data attribute storage procedure for storing the data attribute defining the method for restricting the use of the data in the data attribute storage device for each data in the above invention, and the use When it is determined by the range determination procedure that the current position is within the range of the use range, the data attribute stored in the data attribute storage device is read based on the data when the data is used The computer is further caused to execute a data use restriction procedure for restricting the use of the data based on the read data attribute.

  Further, the information leakage prevention method according to the present invention is the above invention, wherein the position information of the current position of the storage device is detected, and leakage of data stored in the storage device is detected based on the detected position information. An information leakage prevention method for preventing, based on a prohibited position attribute storage step of storing attribute information of a place where use of the data is prohibited in an attribute information storage device as prohibited position attribute information, and position information of the current position A location attribute acquisition step of acquiring attribute information of a place including the current location as current location attribute information, and searching for prohibited location attribute information stored in the attribute information storage device, and acquiring it by the location attribute acquisition step. Position attribute determination step for determining whether or not the current position attribute information is stored, and the current position attribute information is determined to be the prohibited position attribute by the position attribute determination step. If it is determined to be included in the broadcast, characterized in that it contains a data deletion step of deleting the data.

  The information leakage prevention apparatus according to the present invention is connected to the storage device in the above invention, detects position information of the current position, and is stored in the storage apparatus based on the detected position information. An information leakage prevention apparatus for preventing leakage of data, for example, based on the prohibited position attribute storage means for storing the attribute information of the place where the use of the data is prohibited as prohibited position attribute information, and the position information of the current position Position attribute acquisition means for acquiring attribute information of a place including the current position as current position attribute information, and prohibition in which the current position attribute information acquired by the position attribute acquisition means is stored by the prohibited position attribute storage means Position attribute determining means for determining whether or not it is included in the position attribute information, and the current position attribute information is converted into the prohibited position attribute information by the position attribute determining means. If it is determined that the rare, characterized in that it contains a data deleting means for deleting the data.

  According to the present invention, the attribute information of the place where the use of data is prohibited is stored as the prohibited position attribute information, and the attribute information of the place including the current position based on the position information of the current position is stored as the current position attribute information. It is determined whether or not the acquired current position attribute information is included in the prohibited position attribute information, and when it is determined that the acquired current position attribute information is included, the data stored in the storage device is deleted. Therefore, for example, important data can be deleted in places where loss or theft is likely to occur, such as restaurants and game halls. That is, there is an effect that data leakage can be prevented based on the attribute (type) of the place where the current position is included.

  Further, according to the present invention, the use range of the storage device is stored, it is determined whether or not the current position is within the use range, and it is determined that the current position is not within the use range In addition, since it is configured to delete the data stored in the storage device, for example, even in the range of use, important data in places where loss or theft is likely to occur, such as restaurants and playgrounds It is possible to delete.

  Further, according to the present invention, data attributes defining a method for restricting the use of data are stored for each data, and the data is used when it is determined that the current position is within the range of use. In this case, since the use of data is limited based on the data attribute, it becomes possible to limit the use of data depending on the importance of the data and the location where the storage device is used. The restriction method can also be changed.

  Exemplary embodiments of an information leakage prevention program, an information leakage prevention method, and an information leakage prevention apparatus according to the present invention will be described below in detail with reference to the accompanying drawings. In the present embodiment, a case where the information leakage prevention apparatus according to the present invention is mounted on a computer such as a portable notebook personal computer will be described.

  First, the concept of the information leakage prevention apparatus according to the present embodiment will be described. FIG. 1 is an explanatory diagram for explaining the concept of the information leakage prevention apparatus according to the present embodiment. In the example shown in the figure, the information leakage prevention device is mounted on the computer 10 and prevents leakage of data such as confidential data stored in a hard disk device included in the computer 10.

  This information leakage prevention device is connected to the hard disk device inside the computer 10 and is also connected to a GPS receiving device that receives radio waves from GPS satellites. The information leakage prevention apparatus periodically detects position information indicating the current position of the computer 10 via the GPS receiver.

  Here, in the information leakage prevention apparatus, “map information” in which position information (latitude and longitude) is associated with a position type is stored. The location type here is, for example, type information indicating the type of place or building such as a restaurant or company.

  In addition, the information leakage prevention apparatus includes “management folder information” for defining a management folder for storing important data such as confidential data in the hard disk device as information as initial conditions, and a use range (region) in which the computer 10 is used. And “prohibited position type information” indicating a position type of a place where use of data in the management folder is prohibited is stored.

  Here, multiple managed folders are registered in the managed folder information, and each folder is classified as either “special managed folder” or “stored folder” according to the importance of the data stored in each folder. Has been. Specifically, the special management folder is a folder that stores highly important data such as confidential data or personal information data, and the storage folder stores relatively less important data such as a document being created. It is a folder.

  In the prohibited position type information, for example, a position type of a place where the computer 10 is likely to be lost or stolen such as a restaurant or a game hall is registered.

  Then, the information leakage prevention device determines whether or not the current position of the computer 10 is within the range of use included in the area information, based on the position information detected via the GPS receiver, The position type corresponding to the position information is acquired from the map information, and it is determined whether the acquired position type is included in the prohibited position type information.

  If the current position is outside the range of use included in the area information and the position type of the current position is not included in the prohibited position type information, the position where the computer 10 is to be used If the computer 10 is turned on, the data in the special management folder is deleted, and control is performed so that printing and copying of the data in the storage folder is disabled.

  In addition, if the current position is outside the range of use included in the area information and the position type of the current position is included in the prohibited position type information, use of data in the management folder is prohibited. When the computer 10 is turned on, the special management folder and the data stored in the storage folder are deleted.

  On the other hand, if the current position is within the range of use included in the area information and the position type of the current position is included in the prohibited position type information, it is immediately stored in the special management folder and the storage folder. Delete the data stored in.

  For example, as shown in FIG. 1, it is assumed that the user of the computer 10 carries the computer 10 and moves from the office 21 in the work area 20 to the business trip destination office in the business trip area 30. In this case, the information leakage prevention device stores the work area 20 and the business trip destination area 30 as area information, and the location of a game arcade (pachinko store, game center, etc.) 40 as prohibited position type information. Assume that the type is stored (see (1) in FIG. 1).

  Based on such initial settings, the information leakage prevention apparatus is special when the computer 10 is turned on when the user leaves the office 21 and the computer 10 goes out of the work area 20. The data in the management folder is deleted, and the data in the storage folder cannot be printed or copied (see (2) in FIG. 1).

  The information leakage prevention apparatus similarly deletes the data stored in the special management folder and the storage folder when the computer 10 is turned on when the user stops at the game hall 40 while moving. (See (3) in the figure).

  Then, when the computer 10 enters the business trip destination area 30, the information leakage prevention apparatus permits the use of data in the special management folder and the storage folder in the business trip destination office 31 (FIG. 1). (Refer to (4)), when entering the game hall 32, it is determined that the reference of the data in the management folder is prohibited, and the data stored in the special management folder and the storage folder are Delete immediately (see (5) in FIG. 1).

  As described above, the information leakage prevention apparatus according to the present embodiment uses the location type of the place where use of the data stored in the management folder is prohibited and the use range of the computer 10 as prohibited location type information and area information, respectively. Store the location type of the location that includes the current location, determine whether the acquired location type is included in the prohibited location type information, and if it is determined that it is included, Delete the data in the folder. Even if it is determined that the position type of the current position is not included in the prohibited position type information, it is further determined whether or not the current position is within the range of the usage range stored as area information. If it is determined that it is not, the data stored in the special management folder is deleted. For example, even if the computer 10 is within the range of use, It is possible to delete important data in a place where theft is likely to occur. That is, it is possible to prevent data leakage based on the attribute (type) of the place where the current position is included.

  Next, the configuration of the information leakage prevention apparatus according to the present embodiment will be described. FIG. 2 is a functional block diagram illustrating the configuration of the information leakage prevention apparatus according to the present embodiment. 1 shows the inside of the computer 10 shown in FIG. 1. As shown in FIG. 1, the information leakage prevention apparatus 100 is connected to the computer 10, the GPS receiving apparatus 200, and the hard disk apparatus 300. ing.

  Here, the GPS receiving device 200 is a device that receives radio waves from GPS satellites and detects position information, and the hard disk device 300 stores various data using a storage medium such as a magnetic disk device or an optical disk device. Storage device.

  In addition, the information leakage prevention apparatus 100 includes a storage unit 101, a host interface control unit 102, a disk interface control unit 103, a position information acquisition unit 104, a position type acquisition unit 105, an initial condition registration unit 106, data A deletion determination unit 107, a data display control unit 108, a data deletion processing unit 109, and a control unit 110 are included.

  The storage unit 101 is a storage device such as a flash memory, and stores a map information table 101a, a management folder table 101b, an area information table 101c, and a prohibited position type table 101d.

  The map information table 101a is a table that stores map information in which position information and position types are associated with each other. Specifically, the map information table 101a stores the latitude and longitude and the position type in association with each other. The position type here is a type representing the type of place or building such as a restaurant or a company.

  As described above, the map information table 101a stores the map information in which the position information and the position type are associated with each other, so that the position type can be easily acquired based on the position information, and the data is deleted. The process for determining whether or not to perform can be performed at high speed.

  The management folder table 101b is a table that stores management folder information that defines folders (hereinafter referred to as “management folders”) that store important data such as confidential data. Here, the management folder is classified into either “special management folder” or “storage folder” according to the importance of the data stored in each. Specifically, the special management folder is a folder that stores highly important data such as confidential data or personal information data, and the storage folder stores relatively less important data such as a document being created. It is a folder.

  As described above, the management folder table 101b classifies and stores the folders defined as the management folders for storing important data according to the importance of the data. For example, the computer 10 is lost or stolen. It is possible to change processing for preventing information leakage according to the importance of data, such as deleting only data with high importance in places where the possibility is relatively low.

  FIG. 3 is a diagram illustrating an example of the management folder table 101b. For example, as shown in the figure, the management folder table 101b shows "classification code" indicating the type of management folder, "folder classification" indicating the name of the management folder type, and path information indicating the location of the management folder. A “folder definition” and a “folder attribute” that defines a pattern for restricting display of data in the management folder are stored.

  In the example shown in the figure, a special management folder is defined if the classification code is “1”, and a storage folder is defined if it is “2”. In addition, when the folder attribute is “cannot be displayed”, a pattern is defined in which the data in the folder is not displayed. When the folder attribute is “displayable & not printable & not copyable”, the data in the folder is defined. Defines a pattern that allows the display of files and disables printing and copying. For "Display enabled & cannot print", define a pattern that allows the display of data in the folder and disables printing. The "Displayable & not copyable" defines the pattern that allows the display of the data in the folder and prohibits the copy, and the "Not set" indicates the display of the data in the folder Defines a pattern with no restrictions on

  As described above, the management folder table 101b stores, as folder attributes, a restriction method when the use restriction (display restriction) is performed for each management folder, so that the importance of data stored in each management folder, the computer, Depending on where the 10 is used, it is possible to limit the use of data and also change the method of limiting.

  Here, the case where five patterns for restricting the display of data are defined has been described. However, in addition to printing and copying, for example, a pattern for restricting movement or deletion is added to perform more detailed restriction. You may be able to do that.

  The area information table 101c is a table that stores area information that defines a range (hereinafter referred to as “use area”) in which use of data stored in the management folder is permitted. Here, the use area is a range defined by a square with the side length as a predetermined distance.

  FIG. 4 is a diagram illustrating an example of the area information table 101c. For example, as shown in the figure, the area information table 101c includes a “classification code” that identifies a use area, an “area name” that indicates the name of the use area, and a “center” that indicates the latitude and longitude of the center of the use area. “X1” indicating the latitude and longitude of the northwest vertex of the use area, “X2” indicating the latitude and longitude of the northeast vertex, “X3” indicating the latitude and longitude of the southwest vertex, and the southeast vertex “X4” indicating the latitude and longitude of each is stored for each classification code.

  In the example shown in the figure, a section code beginning with “A-” defines a range indicating a work location, and a section code beginning with “B-” defines a range indicating a branch office location. Those beginning with “C-” define a range indicating the location of the business trip destination.

  The prohibited position type table 101d is a table that stores prohibited position type information indicating a position type for which reference to data stored in the management folder is prohibited (hereinafter referred to as “prohibited position type”). In this prohibited position type information, for example, a position type of a place where the computer 10 is likely to be lost or stolen such as a restaurant or a game hall is registered.

  FIG. 5 is a diagram illustrating an example of the prohibited position type table 101d. For example, as shown in the figure, the prohibited position type table 101d stores a “classification code” that identifies the prohibited position type and a “classification information” that indicates the name of the prohibited position type for each classification code. In the example shown in the figure, location types such as “Izakaya”, “Pachinko parlor”, and “Restaurant” are registered.

  The host interface control unit 102 is a processing unit that controls communication of various types of information when exchanged with the computer 10. For example, a data read command and a write command to the hard disk device 300, a management folder table 101 b, an area Information registered in the information table 101c and the prohibited position type table 101d is received, and data read from the hard disk device 300 is transmitted.

  The disk interface control unit 103 is a processing unit that performs communication control when exchanging various types of information with the hard disk device 300. For example, the disk interface control unit 103 transmits a data read command, a write command, and the like from the computer 10. Receive data read from.

  The location information acquisition unit 104 is a processing unit that periodically acquires location information of the current location by controlling the GPS receiver, and the location type acquisition unit 105 is based on the location information acquired by the location information acquisition unit 104. The processing unit acquires the position type of the current position from the map information registered in the map information table 101a.

  Here, the position type acquisition unit 105 acquires the position type of the current position from the map information registered in the map information table 101a. However, for example, via the communication means of the computer 10 (not shown). The location type may be acquired by connecting to the Internet and using a map information service provided via the Internet. Thereby, it is possible to prevent the storage area from being compressed by storing the position type, and to acquire the latest position type corresponding to the position information.

  The initial condition registration unit 106 is a processing unit that registers management folder information in the management folder table 101b, area information in the area information table 101c, and prohibited position type information in the prohibited position type table 101d. Specifically, the initial condition registration unit 106 receives management folder information, area information, and prohibited position type information input from the user via input means (such as a keyboard) of the computer 10 (not shown). The information is registered in the management folder table 101b, the area information table 101c, and the prohibited position type table 101d.

  Here, when registering the area information in the area information table 101c, the initial condition registration unit 106 receives from the user “area registration of current position”, “area registration by inputting latitude and longitude” or “city and village "Register area by input" is instructed. For example, “Registration of the current position area” is instructed when registering a work location, and “Registration of area by inputting latitude and longitude” is instructed when registering a branch office location where the latitude and longitude are confirmed. Then, “Register Area by Input of Municipality” is instructed when registering a business trip destination.

  First, when “Register current area” is instructed, the initial condition registration unit 106 controls the position information acquisition unit 104 to acquire position information (latitude and longitude) of the current position in response to the instruction. . Then, the initial condition registration unit 106 sets the latitude and longitude of four vertices (northwest, northeast, southwest, and southeast vertices) of the square with the length of the side as a predetermined distance centered on the acquired position information. The calculated center and the calculated northwest apex, northeast apex, southwest apex and southeast apex are registered in the area information table 101c.

  In addition, when “Register area by inputting latitude and longitude” is instructed, the initial condition registration unit 106 inputs the length of the side with a predetermined distance centered on the latitude and longitude inputted by the user. Calculate the latitude and longitude of the four vertices of the square (northwest, northeast, southwest, and southeast vertices). Register in the table 101c.

  In addition, when “Registration by municipality input” is instructed, the initial condition registration unit 106 is connected to the Internet via a communication means of the computer 10 (not shown), and is provided via the Internet. The latitude and longitude are acquired based on the zip code or address input by the user using a map information service or the like. Then, the initial condition registration unit 106 sets the latitude and longitude of four vertices (northwest, northeast, southwest, and southeast vertices) of the square with the length of the side as a predetermined distance centered on the acquired position information. The calculated center and the calculated northwest apex, northeast apex, southwest apex and southeast apex are registered in the area information table 101c.

  The data deletion determination unit 107 is a processing unit that determines whether to delete and limit display of data in the management folder based on the position information and the position type. Specifically, the data deletion determination unit 107 determines whether the position information of the current position acquired by the position information acquisition unit 104 is within the use area defined by the area information of the area information table 101c. Determine. Further, the data deletion determination unit 107 determines whether or not the position type of the current position acquired by the position type acquisition unit 105 is included in the prohibited position type defined in the prohibited position type information of the prohibited position type table 101d. judge.

  Then, if the position information of the current position is within the range of the use area and the position type of the current position is the prohibited position type, the data deletion determination unit 107 immediately manages the management folder (special management folder and The data deletion processing unit 109 is instructed to delete data in the storage folder.

  Further, when the position information of the current position is within the range of the use area and the position type of the current position is not the prohibited position type, the data deletion determination unit 107 further turns on the main power supply of the computer 10. The data display control unit 108 is instructed to perform display restriction on the data in the management folder (special management folder and storage folder) based on the folder attribute defined in the management folder information of the management folder table 101b. To do.

  Further, the data deletion determination unit 107 further turns on the main power of the computer 10 when the position information of the current position is out of the range of the use area and the position type of the current position is a prohibited position type. If it is, the data deletion processing unit 109 is instructed to delete the data in the management folder (special management folder and storage folder).

  As described above, when the position information of the current position is outside the range of the use area, the data deletion determination unit 107 further deletes the data in the management folder when the main power of the computer 10 is on. By deleting, for example, when the computer 10 is carried outside the use area without starting up, such as when moving between the use area, the data is retained without being deleted. When the computer 10 is activated outside the area, it is determined that the computer 10 may be lost or stolen, and important data can be deleted.

  The data deletion determination unit 107 further turns on the main power of the computer 10 when the position information of the current position is outside the range of the use area and the position type of the current position is not the prohibited position type. In this case, the data deletion processing unit 109 is instructed to delete the data in the special management folder, and the data display control unit 108 is instructed to disable printing and copying of the data in the storage folder.

  In this way, the data deletion determination unit 107 can change the process for data in accordance with the importance of the data by changing the process for the data in the special management folder and the process for the data in the storage folder. Become.

  The data display control unit 108 is a processing unit that controls the display of data based on an instruction from the data deletion determination unit 107. Specifically, when the data display control unit 108 receives a read command for data stored in the management folder (special management folder and storage folder) via the host interface control unit 102, the data display determination unit 108 determines whether to delete the data. Data display is restricted based on an instruction from the unit 107.

  For example, when the data display control unit 108 is instructed to perform display restriction based on the folder attribute, when the data display command is received, the data specified by the read command is stored in the management folder table 101b. It is determined whether the data is stored in the management folder defined by the folder information.

  If the data is stored in the management folder, the data display control unit 108 limits the display of the data based on the pattern defined by the folder attribute of the management folder. For example, if the folder attribute is “displayable & not printable & not copyable”, the data display control unit 108 permits reading of data in response to a read command for displaying, but printing or printing is not possible. In response to a read command for copying, a response for refusing to read data is made.

  As described above, the data display control unit 108 restricts the reading of data based on the folder attribute, so that the data stored in the management folder depends on the importance of the data and the location where the computer 10 is used. The method of restricting reading can be changed.

  The data deletion processing unit 109 is a processing unit that transmits an instruction to delete data in the management folder to the hard disk device 300 based on an instruction from the data deletion determination unit 107. Specifically, when the data deletion processing unit 109 is instructed by the data deletion determination unit 107 to delete data in the special management folder, the data deletion processing unit 109 refers to the management folder information in the management folder table 101b and sets the classification code. The folder definition (path information) of the management folder (folder defined as a special management folder) with "1" is acquired, and all the data stored in the location indicated by the acquired folder definition is deleted. In addition, when instructed to delete the data in the storage folder, the data deletion processing unit 109 refers to the management folder information in the management folder table 101b, and the management folder (storage folder) whose classification code is “2”. Folder definition (path information) is acquired, and all data stored in the location indicated by the acquired folder definition is deleted.

  The control unit 110 is a processing unit that controls the information leakage prevention apparatus 100 as a whole. Specifically, the control unit 110 moves control between functional units, transfers data between the functional unit and the storage unit, and the like. The information leakage prevention apparatus 100 is caused to function as one apparatus.

  Next, a processing procedure of initial condition registration processing by the initial condition registration unit 106 will be described. FIG. 6 is a flowchart showing a processing procedure of initial condition registration processing by the initial condition registration unit 106. As shown in the figure, this initial condition registration unit 106 is instructed by the user to perform “area registration of current position” or “area registration by inputting latitude and longitude”, and when work location information is input, Then, area information is generated based on the acquired latitude and longitude, and is registered in the area information table 101c (step S101).

  Further, the initial condition registration unit 106 acquires latitude and longitude by using a map information service or the like when the user is instructed to “Register Area by Input of Municipality” and the business trip destination information is input. Area information is generated based on the latitude and longitude and is registered in the area information table 101c (step S102).

  The initial condition registration unit 106 generates management folder information based on the input information when the user inputs the folder classification, folder definition, folder attribute, and the like of the special management folder and the storage folder. Register in the table 101b (step S103).

  Further, when the type information indicating the prohibited position type is input by the user, the initial condition registration unit 106 generates the prohibited position type information based on the input information and registers it in the prohibited position type table 101d (step S1). S104).

  As described above, the initial condition registration unit 106 registers the management folder information, the area information, and the prohibited position type information on the basis of the input from the user, so that the attribute of the place where the current position of the computer 10 is included, Based on the range of use of the computer 10, it becomes possible to prevent data leakage.

  Next, a processing procedure of data deletion determination processing by the information leakage prevention apparatus 100 according to the present embodiment will be described. FIG. 7 is a flowchart illustrating the processing procedure of the data deletion determination process performed by the information leakage prevention apparatus 100 according to the present embodiment. As shown in the figure, when the position information acquisition unit 104 acquires the position information of the current position (step S201), the position type acquisition unit 105 acquires the position type of the current position based on the position information ( Step S202).

  Subsequently, the data deletion determination unit 107 determines whether or not the position information of the current position acquired by the position information acquisition unit 104 is within the use area defined by the area information in the area information table 101c. If it is within the range (step S203, Yes), the position type of the current position acquired by the position type acquisition unit 105 is included in the prohibited position type defined in the prohibited position type information of the prohibited position type table 101d. It is determined whether or not.

  If the position type of the current position is included in the prohibited position type (step S204, Yes), the data deletion determination unit 107 instructs the data deletion processing unit 109 to store the special management folder and the storage folder. Data is deleted (step S205).

  On the other hand, when the position type of the current position is not included in the prohibited position type (No in step S204), the data deletion determination unit 107 checks whether the main power supply of the computer 10 is on, If it is on (step S206, Yes), the data display control unit 108 is instructed to perform display restriction based on the folder attribute (step S207), and if it is off (step S206, No). The process is terminated.

  Further, if the position type of the current position is outside the range of the use area (No in step S203), the data deletion determination unit 107 determines that the position type of the current position acquired by the position type acquisition unit 105 is a prohibited position. It is determined whether or not it is included in the prohibited position type defined by the prohibited position type information in the type table 101d.

  If the position type of the current position is included in the prohibited position type (Yes in step S208), the data deletion determination unit 107 determines whether or not the main power supply of the computer 10 is turned on. If it is (Step S209, Yes), the data deletion processing unit 109 is instructed to delete the data in the special management folder and the storage folder (Step S205). If it is off (Step S209, No), the process ends.

  On the other hand, if the position type of the current position is not included in the prohibited position type (No in step S208), the data deletion determination unit 107 checks whether the main power supply of the computer 10 is on, If ON (step S210, Yes), the data deletion processing unit 109 is instructed to delete data in the special management folder (step S211), and the data display control unit 108 is instructed to store in the storage folder. The data cannot be printed or copied (step S212). If the data is off (step S210, No), the process ends.

  As described above, the position information acquisition unit 104 acquires the position information of the current position, and based on the position information, the position type acquisition unit 105 acquires the position type of the current position, and based on the position information and the position type. Since the data deletion determination unit 107 controls the deletion and use restriction (display restriction) of data stored in the management folder, data leakage can be prevented based on the type of place including the current position. .

  As described above, in this embodiment, the location type (prohibited location type information) and the use range (area information) of the computer 10 that prohibits the use of data stored in the management folder are set as the prohibited location type. Stored in the table 101d and the area information table 101c, the position type acquisition unit 105 acquires the type of the place including the current position as the type information of the current position, and the data deletion determination unit 107 acquires the current position Is determined to be included in the prohibited position type information stored in the prohibited position type table 101d. If it is determined that it is included, the data in the management folder is deleted. Even if the data deletion determination unit 107 determines that the current position type information is not included in the prohibited position type information, the range of the area information range in which the current position is stored in the area information table 101c If the data stored in the special management folder is deleted when it is determined that it is not within the range, for example, even if it is within the range of use of the computer 10, It is possible to delete important data in places where the computer 10 is likely to be lost or stolen, such as restaurants and game halls. That is, it is possible to prevent data leakage based on the attribute (type) of the place where the current position is included.

  Note that the information leakage prevention apparatus 100 described in this embodiment may be configured to be connected to the information leakage prevention apparatus 100, the GPS reception apparatus 200, and the hard disk apparatus 300 in an inseparable manner. Thereby, for example, even when the hard disk device 300 is removed from the computer 10 and taken out, it is possible to detect the position information of the current position of the hard disk device 300 and prevent data leakage based on the detected position information. It becomes.

  Although the information leakage prevention apparatus 100 has been described in the present embodiment, an information leakage prevention program having the same function can be obtained by realizing the configuration of the information leakage prevention apparatus 100 with software. A computer that executes this information leakage prevention program will be described.

  FIG. 8 is a functional block diagram illustrating a configuration of a computer that executes the information leakage prevention program according to the present embodiment. As shown in the figure, the computer 400 includes a ROM 410, a CPU 420, a RAM 430, a GPS interface 440, a host interface 450, and a disk interface 460.

  The ROM 410 is a memory that stores programs and data, and the CPU 420 is a central processing unit that reads and executes programs from the RAM 410.

  The RAM 430 is a memory for storing a program and a program execution result, and the GPS interface 440 is an interface for connecting the computer 400 to the GPS receiver 200.

  The host interface 450 is an interface for connecting the computer 400 to the computer 10 as a host, and the disk interface 460 is an interface for connecting the computer 400 to the hard disk device 300.

  The information leakage prevention program 411 executed in the computer 400 is stored in the ROM 410 in advance, and is executed by the CPU 420 as the information leakage prevention process 421.

  The information leakage prevention program 411 may be executed by, for example, a CPU included in the computer 10 or may be executed by a CPU of a microcomputer included in the hard disk device 300.

(Supplementary note 1) An information leakage prevention program for detecting position information of a current position of a storage device and preventing leakage of data stored in the storage device based on the detected position information,
A prohibited position attribute storage procedure for storing the attribute information of the place where the use of the data is prohibited in the attribute information storage device as the prohibited position attribute information;
Based on the position information of the current position, a position attribute acquisition procedure for acquiring attribute information of a place including the current position as current position attribute information;
A position attribute that searches the prohibited position attribute information stored in the attribute information storage device and determines whether or not the current position attribute information acquired by the position attribute acquisition procedure is included in the prohibited position attribute information Judgment procedure;
A data deletion procedure for deleting the data when it is determined by the location attribute determination procedure that the current location attribute information is included in the prohibited location attribute information;
Information leakage prevention program characterized by causing a computer to execute

(Supplementary Note 2) Use range storage procedure for storing the use range of the storage device in the use range storage device;
A use range determination procedure for searching for a use range stored in the use range storage device and determining whether or not the current position is within the range of the use range;
Is further executed on the computer,
The data deletion procedure is to delete data stored in the storage device when it is determined by the use range determination procedure that the current position is not within the range of the use range. Information leakage prevention program described in 1.

(Additional remark 3) The data attribute storage procedure which memorize | stores the data attribute which defined the method to restrict | limit the utilization of the said data for every said data in a data attribute storage device,
The data attribute stored in the data attribute storage device based on the data when the data is used when the current position is determined to be within the range of the usage range by the usage range determination procedure A data use restriction procedure for restricting the use of the data based on the read data attribute;
The information leakage prevention program according to appendix 2, wherein the computer is further executed.

(Supplementary Note 4) The data stored in the storage device is classified into data having high importance and data having low importance,
Additional data 2 or 3 wherein the data deletion procedure deletes only the data having a high degree of importance when it is determined by the use range determination procedure that the current position is not within the range of the use range. Information leakage prevention program described in 1.

(Supplementary Note 5) The storage device is connected to a host device that uses data stored in the storage device,
The data deletion procedure is to delete the data when the current position is determined not to be within the range of the use range by the use range determination procedure and when the host device is operating. The information leakage prevention program according to any one of appendices 2 to 4, characterized by:

(Supplementary Note 6) The computer further executes a position attribute storage procedure for storing the position information and the attribute information of the place including the position indicated by the position information in association with each other,
The position attribute acquisition procedure acquires, as the current position attribute information, attribute information of a place including the current position from the attribute information stored by the position attribute storage procedure based on the position information of the current position. The information leakage prevention program according to any one of appendices 1 to 5, which is characterized by the following.

(Additional remark 7) The said location attribute acquisition procedure uses the map information service provided via the internet, based on the location information of the said present location, the attribute information of the place where a previous present location is included in the said present attribute information The information leakage prevention program according to any one of supplementary notes 1 to 6, wherein the information leakage prevention program is acquired as:

(Supplementary note 8) An information leakage prevention method for detecting position information of a current position of a storage device and preventing leakage of data stored in the storage device based on the detected position information,
A prohibited position attribute storage step of storing the attribute information of the place where the use of the data is prohibited as the prohibited position attribute information in the attribute information storage device;
Based on the position information of the current position, a position attribute acquisition step of acquiring attribute information of a place including the current position as current position attribute information;
A position attribute determination step of searching for prohibited position attribute information stored in the attribute information storage device and determining whether or not the current position attribute information acquired by the position attribute acquisition step is stored;
A data deletion step of deleting the data when the location attribute determination step determines that the current location attribute information is included in the prohibited location attribute information;
The information leakage prevention method characterized by including.

(Supplementary Note 9) An information leakage prevention apparatus that is connected to a storage device, detects position information of a current position, and prevents leakage of data stored in the storage device based on the detected position information. And
Prohibited position attribute storage means for storing the attribute information of the place where the use of the data is prohibited as prohibited position attribute information;
Based on the position information of the current position, position attribute acquisition means for acquiring attribute information of a place including the current position as current position attribute information;
Position attribute determination means for determining whether or not the current position attribute information acquired by the position attribute acquisition means is included in the prohibited position attribute information stored by the prohibited position attribute storage means;
Data deletion means for deleting the data when the position attribute determination means determines that the current position attribute information is included in the prohibited position attribute information;
An information leakage prevention device comprising:

(Supplementary note 10) The information leakage prevention device according to supplementary note 9, wherein the storage device and a GPS receiver that detects a current position are connected inseparably.

  As described above, the information leakage prevention program, the information leakage prevention method, and the information leakage prevention device according to the present invention detect the position information of the current position of the storage device, and store the information on the storage device based on the detected position information. This is useful for preventing the leakage of stored data, and is particularly suitable when it is necessary to prevent the leakage of data based on the attribute of the place where the current position is included.

It is explanatory drawing for demonstrating the concept of the information leakage prevention apparatus which concerns on a present Example. It is a functional block diagram which shows the structure of the information leakage prevention apparatus which concerns on a present Example. It is a figure which shows an example of a management folder table. It is a figure which shows an example of an area information table. It is a figure which shows an example of a prohibition position classification table. It is a flowchart which shows the process sequence of the initial condition registration process by an initial condition registration part. It is a flowchart which shows the process sequence of the data deletion determination process by the information leakage prevention apparatus which concerns on a present Example. It is a functional block diagram which shows the structure of the computer which performs the information leakage prevention program which concerns on a present Example.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Computer 20 Work area 21 Office 30 Business trip destination area 31 Office 32, 40 Game hall 100 Information leakage prevention apparatus 101 Storage part 101a Map information table 101b Management folder table 101c Area information table 101d Prohibition position type table 102 Host interface control part 103 Disk interface control unit 104 Location information acquisition unit 105 Location type acquisition unit 106 Initial condition registration unit 107 Data deletion determination unit 108 Data display control unit 109 Data deletion processing unit 110 Control unit 200 GPS receiver 300 Hard disk device 400 Computer 410 ROM
411 Information leakage prevention program 420 CPU
421 Information leakage prevention process 430 RAM
440 GPS interface 450 Host interface 460 Disk interface

Claims (5)

An information leakage prevention program for detecting position information of a current position of a storage device and preventing leakage of data stored in the storage device based on the detected position information,
A prohibited position attribute storage procedure for storing the attribute information of the place where the use of the data is prohibited in the attribute information storage device as the prohibited position attribute information;
Based on the position information of the current position, a position attribute acquisition procedure for acquiring attribute information of a place including the current position as current position attribute information;
A position attribute that searches the prohibited position attribute information stored in the attribute information storage device and determines whether or not the current position attribute information acquired by the position attribute acquisition procedure is included in the prohibited position attribute information Judgment procedure;
A data deletion procedure for deleting the data when it is determined by the location attribute determination procedure that the current location attribute information is included in the prohibited location attribute information;
Information leakage prevention program characterized by causing a computer to execute A use range storage procedure for storing a use range of the storage device in a use range storage device;
A use range determination procedure for searching for a use range stored in the use range storage device and determining whether or not the current position is within the range of the use range;
Is further executed on the computer,
The data deletion procedure is to delete data stored in the storage device when it is determined by the use range determination procedure that the current position is not within the range of the use range. 1. The information leakage prevention program according to 1. A data attribute storage procedure for storing, in the data attribute storage device, a data attribute defining a method for restricting the use of the data;
The data attribute stored in the data attribute storage device based on the data when the data is used when the current position is determined to be within the range of the usage range by the usage range determination procedure A data use restriction procedure for restricting the use of the data based on the read data attribute;
The information leakage prevention program according to claim 2, further causing the computer to execute. An information leakage prevention method for detecting position information of a current position of a storage device and preventing leakage of data stored in the storage device based on the detected position information,
A prohibited position attribute storage step of storing the attribute information of the place where the use of the data is prohibited as the prohibited position attribute information in the attribute information storage device;
Based on the position information of the current position, a position attribute acquisition step of acquiring attribute information of a place including the current position as current position attribute information;
A position attribute determination step of searching for prohibited position attribute information stored in the attribute information storage device and determining whether or not the current position attribute information acquired by the position attribute acquisition step is stored;
A data deletion step of deleting the data when the location attribute determination step determines that the current location attribute information is included in the prohibited location attribute information;
The information leakage prevention method characterized by including. An information leakage prevention apparatus that is connected to a storage device, detects position information of a current position, and prevents leakage of data stored in the storage device based on the detected position information,
Prohibited position attribute storage means for storing the attribute information of the place where the use of the data is prohibited as prohibited position attribute information;
Based on the position information of the current position, position attribute acquisition means for acquiring attribute information of a place including the current position as current position attribute information;
Position attribute determination means for determining whether or not the current position attribute information acquired by the position attribute acquisition means is included in the prohibited position attribute information stored by the prohibited position attribute storage means;
Data deletion means for deleting the data when the position attribute determination means determines that the current position attribute information is included in the prohibited position attribute information;
An information leakage prevention device comprising:

Images