JP2009163439A - Recording medium management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a recording medium management system, capable of effectively managing a recording medium shared by a plurality of users without manual operation. <P>SOLUTION: The recording medium management system 1 holds a plurality of recording media 5 detachably held in a holding device 3 so as to lend out the media to users and receive them, and performs management thereof by a management device 2. In the management of the storage media by the management device 2, a lending mode allowing normal take-out of a storage medium of a lending object from the holding device on the condition that authentication of a user through an authentication device 4 is established. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to storage medium management, and more specifically, to a technique for managing a storage medium so as to enhance security related to outflow of data from a data processing apparatus via the storage medium.

  In recent years, memory-type storage media represented by a memory card, a USB memory, and the like have remarkably increased in storage capacity. Such a storage medium provides great convenience for data exchange between data processing devices, and contributes to efficient activities in various fields using the data processing device.

  However, on the other hand, the convenience of the storage medium causes a problem that data is likely to flow out through the storage medium. For this reason, it is required for the storage medium to be able to ensure security regarding data leakage.

  In order to increase security related to data leakage of a storage medium, it is one of the effective techniques to limit the use of the storage medium for a data processing device. For example, while registering a certain range of data processing devices as a usage restriction target for a storage medium and registering it as a registration device, registering a desired number of storage media as usable for that registration device and registering it as a registered storage medium In addition, the registration device is restricted so that a storage medium other than the registration storage medium cannot be used, and the registration storage medium is restricted so that it cannot be used for a data processing device other than the registration device.

  However, such a usage restriction method requires management of the registered storage medium, and such management has been conventionally performed. Specifically, this is management in which an administrator who stores the registered storage medium is determined, and under the administrator, a registration storage medium lending procedure, a return procedure after lending, and the like are performed.

  Such conventional storage medium management is management based on manpower, and therefore, sufficient convenience and security cannot always be obtained. For example, it may happen that the manager is absent, but in such a case, the storage medium cannot be used and the convenience is impaired. In addition, since it is based on manpower, it is difficult to avoid human error, which may impair security. Furthermore, since it is based on human resources, it is difficult to ensure that the management of storage media rental history and the usage history of storage media that have been rented is adequate, and data leaks through the storage media to be managed. In this respect, it is not always possible to obtain sufficient security, such as being unable to take effective action when it occurs.

  An example disclosed in Japanese Patent Application Laid-Open No. 2004-151867 is known for ensuring security related to data leakage from a storage medium. In the “storage device management device” disclosed in Patent Document 1, access to a storage device is managed by the management device for managing storage devices connected to a computer, and each read / write is prohibited / permitted or permitted. By arbitrarily setting whether or not encryption is performed, it is possible to prevent data from being taken out to the outside, thereby ensuring security regarding data outflow.

JP 2007-172366 A

  As mentioned above, although the use restriction method is effective for ensuring security related to data leaks associated with the use of storage media, it requires management of storage media that have been registered for use, and in the past, the management was fundamental. As a result, there was no choice but to leave a problem.

  The present invention has been made in the background of the above-described conventional circumstances, and it is an object of the present invention to provide a storage medium management system that enables effective management without relying on human resources.

  A storage medium management system according to the present invention that solves the above-described problem holds a plurality of storage media that are shared by a plurality of users, rents the storage medium to the user, and receives the returned storage medium. The storage device is configured to manage the plurality of storage media, and further includes a holding device, an authentication device, and a management device, and the holding device is configured to detachably hold the plurality of storage media, The authentication device is configured to be able to acquire information for authenticating the user performed when the storage medium is lent, the management device is configured to perform management related to renting or returning the storage medium, and the storage medium As for the lending, the user authentication is established in a lending mode that enables normal removal of the storage medium to be lent from the holding device. It is characterized by being adapted to manage to set.

  According to such a storage medium management system of the present invention, the management of the storage medium can be performed by cooperating the management device, the authentication device, and the holding device, which are all electronic devices. It is possible to effectively manage the storage medium without relying on humans, and it is possible to improve convenience while sufficiently securing security regarding data leakage associated with the use of the storage medium.

  In the storage medium management system as described above, it is preferable to issue an alarm when the storage medium is removed from the holding device in a state other than the lending mode.

  By doing so, it is possible to increase security against unauthorized use of the storage medium to be managed.

  In the storage medium management system as described above, it is preferable to provide the management apparatus with a function of creating history data relating to the use of the storage medium.

  By doing so, it becomes possible to track the details of the use process of the storage medium to be managed by the use history data, and when trouble such as data leakage through the storage medium to be managed occurs, It is possible to take a more effective response, and this can improve security.

  In addition, for the storage medium management system as described above, it is preferable to provide a function for registering a usable device so that a data processing device that can use the storage medium can be registered by itself on a storage medium to be managed. Specifically, the storage device to be managed is provided with an available device registration function for registering a data processing device that intends to use the storage medium as an available device, and in the available device registration function, In this mode, the data processing apparatus can be registered as an available apparatus on condition that n (n ≧ 2) or more storage media are connected to the data processing apparatus to be registered.

  By doing so, it is possible to further enhance convenience while ensuring high security. It is necessary to limit the data processing apparatus that can use the storage medium to be managed by the storage medium management system. As the use restriction, the use restriction as described above, that is, the use restriction that can be used only for a predetermined range of data processing apparatuses is usually used. Although such use restriction provides high security, it is an obstacle to convenience. On the other hand, in the present embodiment, it is possible to expand the usable data processing device by the useable device registration function of the storage medium, so that convenience can be improved.

  However, the expansion of the usable data processing apparatus may lower the security, but the multiple connection condition in the present embodiment prevents this. That is, in this embodiment, registration of usable devices is permitted on the condition that n or more storage media, that is, two or more storage media, are connected to the data processing device to be registered. In this case, if there is a limit on the number of lending, for example, only one storage medium lent out from the storage medium management system per user, only one of the n or more storage media can use usable data. The devices to be registered and the remaining storage media will require the cooperation of other users who are renting them, and in this respect, function as “witnesses” or “witnesses”. become. In other words, registration for expansion of usable data processing devices cannot be performed by only one user, but cooperation of other users is required, which increases security in expansion of usable data processing devices. Can be secured.

  Regarding the self-registration of the usable device by the storage medium as described above, it is preferable that the conditions can be relaxed as long as the security is sufficiently ensured. Specifically, for a data processing device that has been registered as a usable device a certain number of times or more, the usable device can be registered even when the storage medium is connected in a number smaller than the number n. It is a form.

  In this embodiment, the reliability of the data processing apparatus can be obtained on the condition that the registration is performed a certain number of times or more, so that the conditions for registering the usable apparatus can be relaxed, thereby improving the convenience.

  According to the present invention as described above, it is possible to effectively manage storage media without relying on human resources as a basic rule, and to improve convenience while ensuring sufficient security regarding data leakage associated with the use of storage media. Can do.

  Hereinafter, modes for carrying out the present invention will be described. FIG. 1 schematically shows a configuration of a storage medium management system 1 according to an embodiment. The storage medium management system 1 according to the present embodiment includes a management device 2, a holding device 3, and an authentication device 4. The holding device 3 uses a plurality of storage media 5 shared by a plurality of users registered in advance. The storage medium 5 is rented out to the user, and the storage medium 5 is managed so as to receive the returned storage medium 5.

  The management device 2 is composed of a data processing device such as a server device, and manages the lending and returning of the storage medium 5. For this purpose, the management device 2 includes a device main body 6, an input unit 7, and a display unit 8, and a management program is incorporated in the device main body 6.

  The management program is configured as a management unit 9 as shown in FIG. 2, and includes a user registration unit 11, an available device registration unit 12, an authentication unit 13, a lending / return management unit 14, an alarm generation unit 15, and a usage history management unit. 16 and an abnormality history management unit 17.

  The user registration unit 11 functions to register users who can use the storage medium 5 to be managed. The usable device registration unit 12 functions to register usable devices.

  Here, the usable device is a data processing device that can use the storage medium 5 to be managed. There are two methods for making a data processing device usable. One is a method in which a data processing device designated by a system installer (installer of the storage medium management system 1) is made a usable device. The other is a method in which a data processing apparatus registered by the usable apparatus registration function of the storage medium 5 described later is used. These methods can also be used in combination. In other words, the range of usable devices can be expanded by adding usable devices by registering the storage medium 5 to usable devices designated by the system installer. In addition, it is normal to add a restriction on the use of a storage medium that makes it impossible to use a storage medium other than the storage medium 5 to be managed.

  The authentication unit 13 performs necessary authentication. As the authentication, there is user authentication at the time of renting or returning the storage medium 5, and management of the storage medium management system 1 performed as necessary (registration and deletion of users and usable devices, browsing of history data) Etc.). Such authentication is performed by collating the authentication information acquired by the authentication device 4 with the authentication information held by the authentication unit 13 or the like.

  The lending / return management unit 14 manages the lending and returning of the storage medium 5. Details of the management will be described later. The alarm generation unit 15 issues an alarm when an abnormality (such as an abnormality in rental or return) occurs in the storage medium 5 held in the holding device 3. In the example of FIG. 1, an alarm by the alarm generation unit 15 can be emitted as a sound by an alarm sound device 18 connected to the apparatus body 6.

  The usage history management unit 16 has a history data creation function, and creates and manages history data related to the use of the storage medium 5. The usage history data is composed of data relating to lending and returning and data relating to use for the data processing device. Examples of data relating to lending and returning include identification data of a lending destination user, lending date / time, return date / time, and the number of connections n described later. These data can be obtained from the lending / return management unit 14. On the other hand, as data relating to use, for example, identification data of used data processing device, use date and time, use form (use for data exchange, use for registration of usable device by usable device registration function described later, etc.) And the identification data of the usable device registered by the usable device registration function. These data are acquired when the storage medium 5 is used, and passed to the use history management unit 16 when the storage medium 5 is returned. The abnormality history management unit 17 creates and manages history data related to the occurrence of an abnormality that causes an alarm to be issued by the alarm generation unit 15, that is, an abnormality in a procedure for lending or returning the storage medium 5. The history data managed by the use history management unit 16 and the abnormality history management unit 17 can be used when dealing with troubles such as data leakage through the storage medium 5 to be managed.

  The holding device 3 is a device that holds the storage medium 5 so that the storage medium 5 is detachable and can be accessed by the management device 2. In this embodiment, a USB memory is used as the storage medium 5. Therefore, the holding device 3 is configured as a USB hub having USB ports 19 corresponding to the number of storage media 5 to be managed.

  The authentication device 4 is used to acquire information for authentication as described above. In the present embodiment, the user and the administrator have an authentication card, and an identification number or the like recorded on the authentication card is used as authentication information. Therefore, the authentication device 4 is configured as a card reader.

  The storage medium 5 is a USB memory as described above, and has a recording area of a certain capacity. In the recording area, as shown in FIG. 3, a control unit 21, a management unit 22, and a data recording unit 23 are provided.

  The control unit 21 functions to control the use of the storage medium 5. There are two types of control. One is control related to access to the data recording unit 23, and is control for permitting access to the data recording unit 23 on condition that the data processing apparatus connected to the storage medium 5 is a registration-usable apparatus. The other is the control relating to the registration of the data processing apparatus to which the storage medium 5 is connected as the usable apparatus or the registered peripheral of the registration apparatus.

  The management unit 22 has a function of recording various data relating to the use of the storage medium 5, a usable device registration function for registering a data processing device as a usable device, and a function for acquiring data necessary for creating the above-described usage history data. have. The various data related to the use of the storage medium 5 includes the rent destination user identification data, the rent date and time, the usable device identification data, the used date and time, the usage form, and the newly registered usable device identification data.

  Here, the usable device registration function in the management unit 22 is a function for registering the data processing device as a usable device as a usable device by using the storage medium 5 for the data processing device. When such a usable device registration function is given to the storage medium 5, registration of the usable device in the usable device registration unit 12 may be basically performed through registration of the usable device in the storage medium 5. This is the case in the embodiment. That is, the operation of the storage medium management system 1 is started in the state where there is no registration of usable devices, and the usable devices are registered through the use of the storage medium 5 by the user.

  The data recording unit 23 is a part used for recording data for data exchange with the storage medium 5, and can write and read data on condition that access is permitted by the control unit 21 as described above. It becomes.

  Hereinafter, processing performed in the storage medium management system 1 as described above will be described. The processing performed by the storage medium management system 1 mainly includes processing performed by the management device 2 and processing performed by the control unit 21 and the management unit 22 of the storage medium 5. First, processing performed by the management apparatus 2 will be described. The management device 2 proceeds with processing while taking each mode of standby, procedure, management, lending / returning, and lending / return confirmation according to the state of processing.

  FIG. 4 shows the flow of processing in the standby mode. In the standby mode, first, in step S11, it is determined whether or not there is an abnormality in the devices (management device 2, holding device 3, authentication device 4, etc.). If it is determined in step S11 that there is no abnormality, the process proceeds to step S12, and it is determined whether or not the card has been read, that is, whether or not the authentication card has been read by the authentication device 4. If the determination result in step S12 is that the card is not read, the process returns to step S11. If the card is read, the process proceeds to the procedure mode in step S13, and the standby mode ends.

  On the other hand, if it is determined in step S11 that there is an abnormality in the device, the process proceeds to step S14 to issue an alarm. This alarm is continued until confirmation by the administrator of the storage medium management system 1 is made. That is, it is determined whether or not there is confirmation in step S15. If there is no confirmation, the alarm is continued, and if confirmation is confirmed, the process returns to step S11. Note that the confirmation process in step S15 is performed, for example, by operating the input unit 7 of the management apparatus 2.

  FIG. 5 shows the flow of processing in the procedure mode in step S13 of FIG. In the procedure mode, first, as step S21, success or failure of authentication by the authentication unit 13 is determined. If the determination result in step S21 is that authentication has not been established, an error is displayed in step S22, and the procedure mode is terminated. On the other hand, if the determination result in step S21 is authentication, the process proceeds to step S23, and the type of procedure is determined. That is, the types of procedures include a procedure for lending and returning the storage medium 5 and a procedure for managing the storage medium management system 1, and it is determined which of these is the procedure. This determination is made based on the type of authentication card (for the user and for the administrator) read by the authentication device 4. That is, it is determined whether the authentication card is for a user or an administrator.

  If it is determined in step S23 that the card is for an administrator, the process proceeds to the management mode in step S24, and the procedure mode ends. If it is determined that the card is for user authentication, the loan in step S25 is performed. / Proceed to return mode and end procedure mode.

  In the management mode, user registration and deletion, registration and deletion of usable devices, browsing of usage history data, and the like are performed.

  FIG. 6 shows the flow of processing in the lending / returning mode in step S25 of FIG. In the lending / returning mode, first, in step S31, it is determined whether or not lending is in progress. This determination can be made by referring to the usage history data in determining whether the user who is renting out has lent the storage medium 5 at the present time. Such a determination is made by renting out the storage medium 5 for each user (m ≧ m ≧) in order to ensure the security of the usable apparatus registration of the data processing apparatus by the usable apparatus registration function of the storage medium 5. 1) This is to provide a limit on the number of loans that can be limited to one or less. That is, the determination in step S31 is made so as not to lend a new storage medium to a user who is renting up to m storage media 5, and in this example, m = 1. Because there is, it is judged simply as “Is it rented?”.

  If the determination result in step S31 is renting, the process proceeds to step S32 to provide return guidance. In the return guidance, the USB port 19 of the holding device 3 to which the storage medium 5 being lent is to be returned is designated. The USB port 19 is specified by, for example, turning on an LED provided for each USB port 19, displaying on the display unit 8, and voice guidance. In response to this return guidance, the user inserts the storage medium 5 to be returned into the USB port 19 of the holding device 3 and connects to it, so that the connection is confirmed as step S33. Specifically, it is determined whether the return storage medium is connected to any of the USB ports 19 in the holding device 3. However, at this point, it does not matter whether the return storage medium is connected to the correct USB port.

  If the determination result of step S33 is negative, an error display of step S34 is performed, while a standby time excess determination of step S35 is performed. The standby time excess determination is performed by determining whether or not the continuation time of the state in which the storage medium is not connected exceeds a preset standby time. If it is determined in step S35 that the standby time has been exceeded, the lending / return mode ends. On the other hand, when the determination result of step S33 is affirmative, the process proceeds to the lending / return confirmation mode of step S36, and the lending / returning mode ends.

  On the other hand, if the determination result in step S31 is not lent, the process proceeds to step S37 to prepare for lending. In the lending preparation, a storage medium 5 that can be lent to a user who is currently making a lending request is selected, and necessary data is written in the management unit 22 of the selected storage medium 5. In the data writing, the number n of connections (n ≧ 2) is also set under a plurality of connection conditions.

  Here, the multiple connection condition means that n or more storage media 5 are connected to the data processing device to be registered for registering the data processing device in the usable device by the usable device registration function of the storage medium 5. If the storage medium 5 is used for data exchange with an unregistered data processing apparatus as a usable apparatus, n or more storage media 5 are connected to the data processing apparatus to be used. This is a condition for enabling the use of data exchange on the condition that The number n of connections is set according to the security level required by the user or the data processing apparatus with which the storage medium 5 is used. In this case, the security level of the data processing apparatus of the other party changes as the usable apparatus is registered. That is, the reliability of the data processing apparatus of the other party is improved due to the registration record. Therefore, for a data processing device that has been registered as a usable device more than a certain number of times, the security is not lowered even if the number of connections of the storage medium 5 under the multiple connection conditions is relaxed. For this reason, for data processing devices that have been registered more than a certain number of times, it is possible to improve the convenience by reflecting the fact and setting the number n of connections, and in this embodiment as well. ing.

  When the lending preparation process is completed, lending guidance is performed as step S38. In the rental guidance, the storage medium 5 that can be rented is designated. The storage medium 5 is designated in the same manner as the return guidance described above. As a result of the lending guidance, the corresponding storage medium 5 can be normally removed from the USB port 19, and in response to this, the user removes the designated storage medium 5 from the holding device 3. Therefore, the sampling is confirmed as step S39. Specifically, it is determined whether the storage medium has been removed from the holding device 3. However, at this point, it does not matter whether the storage medium is removed from the correct USB port.

  If the determination result of step S39 is negative, the error display of step S34 is performed, while the standby time excess determination of step S40 is performed. The standby time excess determination is performed by determining whether or not the continuation time in a state where the storage medium is not removed exceeds a preset standby time. If it is determined in step S40 that the standby time has been exceeded, the process proceeds to step S41 to cancel the lending and the lending / returning mode ends. In lending cancellation, the processing performed in lending preparation is canceled. On the other hand, when the determination result of step S39 is affirmative, the process proceeds to the lending / return confirmation mode of step S36, and the lending / returning mode ends.

  FIG. 7 shows the flow of processing in the lending / return confirmation mode in step S36 of FIG. In the lending / return confirmation mode, it is first determined in step S51 whether the procedure is lending. If the determination result in step S51 is lending, the process proceeds to step S52 to determine the normality of lending. Specifically, it is determined whether the storage medium designated in step S38 has been removed. If the determination result in step S52 is affirmative, the usage history data is updated in step 53, and the lending / return confirmation mode ends. On the other hand, if the determination result of step S52 is negative, an error display of step S54 is performed. Although omitted in FIG. 7, when an error is displayed, for example, the procedure is guided to start over from the beginning. If the error display continues for a certain period of time with such guidance, it is determined as abnormal, an abnormality alarm is issued at that time, and after updating the abnormality history data, the lending / return confirmation mode is set. Will be terminated.

  If the determination result in step S51 is not lending, the procedure is returned, so the process proceeds to step S55, and the normality of the return is determined. Specifically, it is determined whether a storage medium is connected to the USB port designated in step S32. If the determination result of step S55 is affirmative, use history data is updated in step S56. Subsequently, a final return process in step S57 is performed. In the final return process, necessary data is fetched from the data recorded in the management unit 22 of the returned storage medium 5, and then the data in the management unit 22 is deleted.

  When the final return process is completed, it is determined in step S58 whether an available device is registered. This determination is a determination as to whether an available device is registered in the returned storage medium 5. If the determination result in step S58 is that no usable device is registered, the lending / return confirmation mode is terminated. On the other hand, if the determination result in step S58 is that the usable device is registered, the process proceeds to step S59 to update the registration in the usable device registration unit 12, and the lending / return confirmation mode ends.

  Next, processing performed by the control unit 21 and the management unit 22 of the storage medium 5 when the storage medium 5 is used for the data processing apparatus will be described. FIG. 8 shows a flow of processing performed in the storage medium 5. When the storage medium 5 is connected to the USB port of the data processing apparatus at the use destination, the control unit 21 is activated, and it is first determined whether or not the data processing apparatus is registered as an available apparatus (step S61). This determination is made by collating the identification information of the data processing device acquired from the data processing device with the identification information of the registration-usable device held in the storage medium 5.

  If the determination result in step S61 is negative, the above-described multiple connection condition is imposed to use the storage medium 5 for the data processing apparatus. Therefore, multiple connection determination is performed as step S62. Specifically, it is determined whether the number of connections n set in the management unit 22 of the storage medium 5 is satisfied for a plurality of connection conditions. Here, in order for n storage media 5 to be connected to the data processing apparatus, since the lending number in the lending limit is 1, as described above, only one user who uses the storage medium 5 However, in addition to the user, (n−1) users are required. In this case, the other user becomes a “witness” or “witness” for the use of the storage medium 5 to be performed (use for registration of usable devices or use for data exchange). As a result, it is possible to ensure security for the use of the storage medium 5 for unregistered data processing devices.

  If the determination result in step S62 is negative, an inaccessible display is displayed in step S63. This display is normally performed by displaying on the display unit of the data processing apparatus of the connection partner that access to the data recording unit 23 of the storage medium 5 is not permitted. After this processing, the processing in the storage medium 5 is finished.

  On the other hand, if the determination result of step S62 is affirmative, the process proceeds to step S64. In step S64, the usage form of the storage medium 5 is designated. Specifically, a usage type designation screen is displayed on the display unit of the data processing device of the connection partner, and either use for data exchange or usage for registration of usable devices is displayed to the user on the usage type designation screen. Is specified. As a result of step S64, there can be three ways of registration of usable device, use of data exchange, and no designation. If it becomes possible device registration, the usable device registration is performed in step S65, and the processing in the storage medium 5 ends. If it is used for data exchange, the data recording unit 23 is instructed in step S66. When the access permission is given and the processing in the storage medium 5 ends, and when there is no designation, the processing in the storage medium 5 ends.

  If the determination result of step S61 is affirmative, the process proceeds to step S67, and access to the data recording unit 23 is permitted. In response to this, data is written to the data recording unit 23 or data is read from the data recording unit 23. When this is completed, the user can use the data processing apparatus of the current user as necessary. Allows registration as an available device to be deleted. Therefore, a multiple connection determination is performed as step S68. This determination is the same as the determination in step S62. It should be noted that since the registration deletion does not require much security, this multiple connection determination may be omitted.

  If the determination result in step S68 is negative, a display indicating that registration cannot be deleted is displayed in step S69, and the processing in the storage medium 5 ends. On the other hand, if the determination result in step S68 is affirmative, the necessity of deregistration is confirmed in step S70. If necessary, deregistration is performed in step S71, and the processing in the storage medium 5 is completed.

  As mentioned above, although the form for implementing this invention was demonstrated, this is only a typical example, This invention can be implemented with a various form in the range which does not deviate from the meaning. For example, in the above embodiment, the USB memory is used as the storage medium. However, the present invention is not limited to this, and the present invention can be applied to various storage media. In the above embodiment, the authentication device is configured with a card reader. However, the present invention is not limited to this, and the authentication device may be configured with a biometric authentication method.

It is a figure which shows the structure of the storage medium management system by one Embodiment. It is a figure which shows the functional structure of the management means in a management apparatus. It is a figure which shows the functional structure of a storage medium. It is a figure which shows the flow of the process in standby mode. It is a figure which shows the flow of the process in procedure mode. It is a figure which shows the flow of the process in rental / return mode. It is a figure which shows the flow of a process in rental / return confirmation mode. It is a figure which shows the flow of the process performed with a storage medium.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Storage medium management system 2 Management apparatus 3 Holding apparatus 4 Authentication apparatus 5 Storage medium 15 Alarm generation part 16 Usage history management part

Claims (5)

A plurality of storage media shared by a plurality of users are held, the storage media are lent to the user, and the storage media rented are returned to be managed. A storage medium management system comprising:
A holding device, an authentication device, and a management device, wherein the holding device is configured to detachably hold the plurality of storage media, and the authentication device is configured to authenticate the user when the storage medium is lent out. Information can be acquired, and the management device manages the lending and returning of the storage medium, and the lending of the storage medium is normal from the holding device of the storage medium to be lent. A storage medium management system characterized in that management is performed so as to set a lending mode that enables removal, on condition that the user authentication is established.   The storage medium management system according to claim 1, wherein an alarm is issued when the storage medium is removed from the holding device in a state that is not in the lending mode.   The storage medium management system according to claim 1, wherein the management apparatus is configured to be able to create history data relating to use of the storage medium.   The storage medium has a usable device registration function for registering a data processing device that intends to use the storage medium as a usable device, and in the usable device registration function, data to be registered 2. The data processing apparatus can be registered as an available apparatus on condition that n (n ≧ 2) or more storage media are connected to the processing apparatus. The storage medium management system according to any one of claims 3 to 4.   For a data processing device that has been registered as a usable device a certain number of times or more, the usable device can be registered even when the storage medium is connected in a number smaller than the number n. The storage medium management system according to claim 4.

Images