JP2009054014A - Management system and management method of portable recording medium, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To make it possible to quickly and accurately grasp the contents of a portable recording medium which is lost or stolen, and so on. <P>SOLUTION: When the portable recording medium 20 is connected to a user apparatus 10, apparatus management information to be the identification information of the portable recording medium 20, which is stored in the portable recording medium 20 and all-file information to be information for specifying all files stored in the portable recording medium 20 are acquired and managed in a database correspondingly to the apparatus management information. In the case of using the portable recording medium 20, the apparatus management information acquired from the portable recording medium 20 is collated with the apparatus management information stored in the database, and a utilization environment of the portable recording medium 20 is provided in a write permission state when the collation succeeds or in a write rejection state when the collation fails. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a portable recording medium management system, a portable recording medium management method, and a program, and more particularly to a technique for accurately grasping the contents of a lost or stolen portable recording medium.

In recent years, the use of portable recording media such as USB memories is progressing in organizations such as companies.
However, while the portable recording medium has the convenience of being able to carry data easily, the safety of data in the event of loss or theft is a problem. For this reason, measures are taken such as providing an access restriction function such as an encryption function.
JP 2006-195629 A

  By the way, when a portable recording medium is lost or stolen, it is necessary to quickly and accurately grasp the recorded contents. In particular, when customer information, personal information, and the like are stored, it is necessary to quickly and accurately grasp the recorded information, and in some cases, it is necessary to report or publicize the facts and circumstances to the parties and a predetermined organization.

  However, the amount of data stored in portable recording contents is increasing due to an increase in storage capacity, and the number and contents of stored files for portable recording media that are frequently used in business and the like. Since it changes fluidly, it has not always been easy to grasp the contents quickly and accurately when a portable recording medium is lost or stolen.

  The present invention has been made in view of such circumstances, and a portable recording medium management system, a portable recording medium management method, and the like, which can grasp the contents of a lost or stolen portable recording medium, and The purpose is to provide a program.

  The invention described in claim 1 for achieving the above object is a portable recording medium management system used by being connected to a user device, comprising an information processing device, wherein the information processing device comprises: When the portable recording medium is connected to the user device, the identification information of the portable recording medium stored in the portable recording medium and all the files stored in the portable recording medium are stored. Suppose that it has a means to acquire all file information which is information to specify, and all file information storage means to store the acquired all file information in association with the identification information.

  The invention according to claim 2 of the present invention is the portable recording medium management system according to claim 1, wherein the identification information storage means stores one or more of the identification information, and the portable recording medium. The identification information acquired from the verification information and the verification information that matches the identification information stored in the identification information storage means, and all the file information storage means, only when the verification is successful, The acquired all file information is stored in association with the identification information.

  The invention according to claim 3 of the present invention is the portable recording medium management system according to claim 1, wherein the identification information storage means stores one or more of the identification information, and the portable recording medium. Collation means for collating the identification information acquired from the identification information stored in the identification information storage means, and the portable recording is performed only when the collation by the collation means is successful. It is assumed that there is a use environment providing means for providing a use environment of the portable recording medium in a state where writing to the medium is permitted.

  The invention according to claim 4 of the present invention is the portable recording medium management system according to claim 3, wherein the use environment providing unit is configured to perform the verification when the verification by the verification unit fails. An environment for using the portable recording medium is provided in a state in which writing to the portable recording medium is not permitted.

  A fifth aspect of the present invention is the portable recording medium management system according to the first aspect, wherein the portable recording medium is connected to the user apparatus when the portable recording medium is connected. And history information storage means for acquiring history information, which is a history of reading or writing, and history information storage means for storing the acquired history information in association with the identification information.

  The invention according to claim 6 of the present invention is a method for managing a portable recording medium used by being connected to a user device, wherein the information processing device is connected to the user device and the portable recording medium is connected. Obtaining identification information of the portable recording medium stored in the portable recording medium, and all file information that is information for identifying all files stored in the portable recording medium; And storing the acquired information in association with the identification information.

  The invention according to claim 7 of the present invention is a program that identifies a portable recording medium stored in the portable recording medium when the portable recording medium is connected to the user device. Information and a function of acquiring all file information, which is information for specifying all files stored in the portable recording medium, and a function of storing the acquired all file information in association with the identification information. This is realized by the information processing apparatus.

  According to the present invention, it is possible to accurately grasp the contents of a portable recording medium that has been lost or stolen.

  Hereinafter, embodiments of the present invention will be described in detail. FIG. 1 is a schematic system configuration diagram of a portable recording medium management system (hereinafter abbreviated as management system 1), which will be described as an embodiment of the present invention. As shown in the figure, the management system 1 is operated by a user, via a plurality of user devices 10 to which a USB memory 20 is connected, and a communication network 5 including a LAN (Local Area Network) or the like. And a management device 30 that is communicably connected to each user device 10.

  The management system 1 is operated in an organization such as a company, and manages portable recording media (removable media) used by users belonging to the organization. As a portable recording medium to be managed by the management system 1, a non-volatile recording medium using a semiconductor storage element such as a USB memory (USB: Universal Serial Bus), a hard disk connectable to a computer by a communication means such as USB, There is a CD (Compact Disk) capable of rewriting data, a DVD (Digital Versatile Disk) capable of rewriting data, and other magnetic / optical recording media capable of rewriting data. In the following description, it is assumed that the portable recording medium is the USB memory 20.

  FIG. 2 shows a hardware configuration of the USB memory 20. As shown in the figure, the USB memory 20 includes a control device 21, a communication device 22, and a nonvolatile memory 23. The control device 21 is configured using a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or the like.

  The control device 21 writes data to the nonvolatile memory 23 and reads data from the nonvolatile memory 23. The control device 21 encrypts data when writing to the non-volatile memory 23 and decrypts data when reading. The communication device 22 performs data communication with the information processing device to which the USB memory 20 is connected. The nonvolatile memory 23 is configured using a flash memory or the like.

  The user device 10 and the management device 30 are computers (information processing devices) such as personal computers and office computers. FIG. 3A shows an example of the hardware configuration of the user device 10 and the management device 30. An information processing apparatus 100 shown in FIG. 1 includes a CPU 101, a memory 102 such as a RAM / ROM, a large-capacity storage device 103 such as a hard disk, an input device 104 such as a keyboard and a mouse, a display device 105 such as a liquid crystal display and a cathode ray tube display, A first communication device 106 configured with a USB communication interface or the like for communicating with the USB memory 20 and a second communication device 107 such as a NIC (Network Interface Card) for connecting to the communication network 5 are provided.

  Under the above hardware configuration, the information processing apparatus 100 operates various software such as an operating system, a device driver, and application software. In the information processing apparatus 100, a monitoring function for determining whether the USB memory 20 is connected is operated by software such as a device driver that operates in the information processing apparatus 100.

  FIG. 3B shows main programs installed in the user apparatus 10. As shown in the figure, the user device 10 includes a registration program 11 that is a program that performs processing related to the registration of the USB memory 20, a usage program 12 that is a program that performs processing related to the use of the USB memory 20, and the USB memory 20. A history acquisition program 13 or the like, which is a program for performing processing related to acquisition of usage history, is installed.

  FIG. 3C shows main data managed by the management apparatus 30. As shown in the figure, the management apparatus 30 manages device management information 31 to be described later, all file information 32 and file usage history 33 to be described later. The all file information 32 and the file usage history 33 are registered and managed in a database in association with the device management information 31.

  When the management system 1 configured as described above is used, the USB memory 20 is registered in advance in the management system 1 in order to make the USB memory 20 a management target of the management system 1. Registration can be performed not only for the unused USB memory 20 newly introduced by new purchases, but also for those already in use.

  Hereinafter, the process performed at the time of the registration will be described with reference to the flowchart shown in FIG. The USB memory 20 to be registered is connected to the user device 10 (S411). Next, the registration program 11 is activated in the user device 10 (S412). The registration program 11 may be started manually or automatically when an unregistered USB memory 20 is connected.

  Next, based on the information stored in the USB memory 20 and the information held in the user device 10, the registration program 11 is unique information for each USB memory 20 to be managed (hereinafter referred to as device management information). Is generated (S413). The device management information is given to products of the USB memory 20 such as a device management number and a manufacturing number of the USB memory 20 that are identification information given to each USB memory 20 in an organization in which the USB memory 20 is used. Hardware identification information, information specifying the administrator or user of the USB memory 20, information specifying the user device 10 that uses the USB memory 20 (host name, network address, etc.), registration date and time, etc. Based on.

  Next, the registration program 11 stores the generated device management information in the USB memory 20 (S414) and transmits it to the management device 30. When the management apparatus 30 receives the device management information, it stores it (S416, S417).

  The registration process of the USB memory 20 is performed as described above. Next, processing performed when the USB memory 20 is connected to the user device 10 and used will be described with reference to the flowchart shown in FIG. This process may be automatically executed following the registration process.

  When the USB memory 20 is connected to the user device 10 (S511), the use program 12 is activated on the user device 10 (S512). Note that the use program 12 may be manually activated, or may be automatically activated in response to the USB memory 20 being connected.

  The activated usage program 12 first checks whether device management information is stored in the USB memory 20 (S513). If it is stored (S513: Yes), the process proceeds to S514. If it is not stored (S513: No), the process proceeds to S522.

  Next, the use program 12 reads the device management information stored in the USB memory 20 (S514), and transmits the read device management information to the management device 30 (S515).

  When receiving the device management information transmitted from the user device 10 (S516), the management device 30 collates the received device management information with all the device management information 31 stored by the registration process described above (S517), The collation result is transmitted to the user device 10 (S518). The usage program 12 receives the collation result transmitted (S519). A series of processing from the transmission of the device management information described above (S515) to the reception of the collation result (S519) is performed in real time via the communication network 5.

  Next, the utilization program 12 determines whether or not the device management information is registered in the management device 30 based on the received collation result. If the device management information is registered (S520: present), the process proceeds to S521, and if not registered (S520: absent), the process proceeds to S522.

  In S <b> 521, the usage program 12 reads data from the USB memory 20 using a GUI (Graphical User Interface) or the like while “permitting” data writing (including updating) from the user device 10 to the USB memory 20. And provision of an environment for using the USB memory 20 for writing (including updating) to the USB memory 20 is started. On the other hand, in S522, the use program 12 reads data from the USB memory 20 using the GUI in a state where writing (including updating) of data from the user device 10 to the USB memory 20 is “not permitted”. Provision of an environment for using the USB memory 20 is started.

  When the USB memory 20 is connected to the user device 10 and used, the above processing is performed. As described above, when the device management information is registered in the management system 1 (S520: present), the user can use the USB memory 20 in a state where writing is permitted. If the device management information does not exist in the USB memory 20 in the first place (S513: none), or if the device management information exists but is not registered in the management system 1 (S520: none), the user cannot write. The USB memory 20 can be used in a permitted state, that is, in a state where only reading is possible. For this reason, when a USB memory 20 that is not registered in the management system 1 is connected to the user device 10, for example, data stored in the USB memory 20 can be referred to by the user device 10. It is not possible to write to the USB memory 20, and therefore it is possible to prevent information in the organization from being taken out of the organization without leaving any trace.

  Next, processing for collecting the usage history of the USB memory 20 by the management system 1 performed when the USB memory 20 described in FIG. 5 is used will be described with reference to the flowchart shown in FIG.

  When the USB memory 20 is connected to the user device 10 (S611), the history acquisition program 13 is activated in the user device 10 (S612). The activated history acquisition program 13 checks whether the device management information exists in the USB memory 20 and is registered based on the processing result of FIG. 5 (S613). If the device management information is registered (S613: Yes), the process proceeds to S614. If the device management information is not registered (including the case where the device management information is not stored in the USB memory 20) (S613). : None) Proceed to S616.

  Next, the history acquisition program 13 reads the device management information stored in the USB memory 20, and stores the read device management information in the user device 10 (S614). The history acquisition program 13 acquires all file information stored in the USB memory 20 and stores it in the user device 10 (S615).

  Here, the all file information is information regarding files stored in the USB memory 20 and is information regarding all files that can be referred to by the user device 10. All file information includes, for example, the contents of file management information managed in the USB memory 20 (file name, directory name (folder name), file attributes (access rights (read permission, write permission, execution permission, etc.)), file At least one of size, physical or logical storage location information, update date and time). Note that all file information changes dynamically while the USB memory 20 is used by the user device 10 in a state where writing is permitted. That is, when writing to the USB memory 20 and all file information are updated, the contents of all file information stored in the user apparatus 10 are updated to the latest contents in real time. The history acquisition program 13 executes such acquisition and update processing of all file information in the background.

  In step S616, the history acquisition program 13 starts file usage history acquisition processing. Here, the file usage history is a history of access from the user device 10 to the USB memory 20 (access contents, access date, etc.). For example, reading of data stored in the USB memory 20 to the user device 10 is performed. And a history of data writing (including updating) from the user device 10 to the USB memory 20. The history acquisition program 13 executes the file usage history acquisition and update processing in the foreground.

  The history acquisition program 13 monitors whether or not the USB memory 20 is connected to the user device 10 (whether or not the USB memory 20 is removed) (S617). The USB memory 20 is disconnected from the user device 10 when, for example, the user gives a removal instruction to the operating system or is physically removed. If the USB memory 20 is removed (S617: no connection), the process proceeds to S618. When the USB memory 20 is being connected (S617: being connected), the history acquisition program 13 continues the monitoring process of S617.

  Next, the history acquisition program 13 transmits the device management information, all file information, and file usage history stored in the user device 10 to the management device 30 via the communication network 5 (S618). However, all file information is transmitted to the management apparatus 30 only when “Yes” in S613, that is, when the device management information has already been registered.

  The management device 30 receives the transmitted device management information, all file information, and file usage history. Then, the management device 30 stores the device management information and the like in the database as a search key in a state where the received device management information, all file information, and file usage history can be appropriately searched, referenced, or acquired from the user device 10 ( S620).

  As described above, according to the management system 1 of the present embodiment, while the USB memory 20 is connected to the user device, all of the USB memory 20 is stored together with the device management information stored in the USB memory 20. File information and file usage history are automatically collected by the management system 1 and managed in a database. For this reason, for example, when the USB memory 20 is lost or stolen, the latest state (all file information) and usage status stored in the USB memory 20 can be obtained by referring to the contents of the database using the device management information as a search key. (File usage history) can be grasped quickly and accurately.

  The above description of the embodiment is for facilitating the understanding of the present invention, and does not limit the present invention. It goes without saying that the present invention can be changed and improved without departing from the gist thereof, and that the present invention includes equivalents thereof.

1 is a schematic system configuration diagram of a portable recording medium management system 1 described as an embodiment of the present invention. It is the hardware constitutions of the USB memory 20 demonstrated as one Embodiment of this invention. It is the hardware constitutions of the user apparatus 10 and the management apparatus 30 demonstrated as one Embodiment of this invention. It is a figure which shows the main programs installed in the user apparatus 10 demonstrated as one Embodiment of this invention. It is a figure which shows the main data managed by the management apparatus 30 demonstrated as one Embodiment of this invention. It is a flowchart explaining the process performed when registering the USB memory 2 with the management system 1 demonstrated as one Embodiment of this invention. It is a flowchart explaining the process performed when connecting the USB memory 20 to the user apparatus 10, and starting utilization, demonstrated as one Embodiment of this invention. 6 is a flowchart illustrating processing for collecting a usage history of the USB memory 20 by the management system 1, which is described as an embodiment of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 User apparatus 11 Registration program 12 Usage program 13 History acquisition program 20 USB memory 21 Control apparatus 22 Communication apparatus 23 Non-volatile memory 30 Management apparatus 31 Device management information 32 All file information 33 File usage history 100 Information processing apparatus 101 CPU
102 Memory 103 Storage Device 104 Input Device 105 Display Device 106 First Communication Device 107 Second Communication Device

Claims (7)

A portable recording medium management system used by connecting to a user device,
Comprising an information processing device,
The information processing apparatus includes:
When a portable recording medium is connected to the user device, the identification information of the portable recording medium stored in the portable recording medium and all files stored in the portable recording medium are specified. Means for acquiring all file information that is information to be
A portable recording medium management system comprising: all file information storage means for storing the acquired all file information in association with the identification information. The portable recording medium management system according to claim 1,
Identification information storage means for storing one or more pieces of the identification information; collation means for collating the identification information acquired from the portable recording medium with the identification information stored in the identification information storage means; In addition,
The all file information storage means stores the acquired all file information in association with the identification information only when the collation is successful. The portable recording medium management system according to claim 1,
Identification information storage means for storing one or more of the identification information, verification means for verifying the identification information acquired from the portable recording medium, and the identification information stored in the identification information storage means, In addition,
Only when the collation by the collation means is successful, it has a use environment providing means for providing a use environment of the portable recording medium in a state in which writing to the portable recording medium is permitted. Recording media management system. A management system for a portable recording medium according to claim 3,
The usage environment providing unit provides the usage environment of the portable recording medium in a state where writing to the portable recording medium is not permitted when the verification by the verification unit fails. Portable recording medium management system. The portable recording medium management system according to claim 1,
When a portable recording medium is connected to the user device, history acquisition means for acquiring history information that is a history of reading or writing with respect to the portable recording medium, and associating the acquired history information with the identification information And a history information storage means for storing the information, and a portable recording medium management system. A method of managing a portable recording medium used by connecting to a user device,
Information processing device
When a portable recording medium is connected to the user device, identification information of the portable recording medium stored in the portable recording medium and all files stored in the portable recording medium are specified. Obtaining all file information which is information;
And storing the acquired information in association with the identification information. A method for managing a portable recording medium, comprising: When a portable recording medium is connected to the user device, the identification information of the portable recording medium stored in the portable recording medium and all files stored in the portable recording medium are specified. A function to acquire all file information, which is information to be
A program for causing an information processing device to realize a function of storing the acquired all file information in association with the identification information.

Images