JP2010191798A - Security enhancing system, method, program and usb memory - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that content of data is sometimes read when the data output from a USB memory to a computer leaks out to the outside. <P>SOLUTION: The security enhancing system includes: an encrypting means for encrypting data and storing the data in the USB memory in writing the data from an information processor to the USB memory; a security determining means for determining whether an information processor having made a data read request is an information processor that has written the data into the USB memory or not when reading the data from the USB memory; and a data output means for storing the data stored in the USB memory with encrypted data as it is in the information processor when the security determining means determines that it is not the information processor which has written the data into the USB memory. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a security enhancement system, a security enhancement method, and a security enhancement program for enhancing a security function. The present invention also relates to a USB memory using a security enhancement method.

  As a security function included in a USB memory, a password function using biometric authentication to cope with theft and loss, a function of storing data by encryption, and the like are already widely used.

  For example, in the system described in Patent Document 1, the USB memory encrypts and stores data. When the USB memory is connected to the computer, the computer is connected to the management server by a program stored in the USB memory. Then, when the information indicating whether access is permitted or not stored in the management server indicates permission of access, the management server executes authentication and transmits the encryption key to the computer. Then, the computer transfers the transmitted encryption key to the USB memory, and the USB memory decrypts the encryption using the encryption key. With these processes, the decrypted data can be read from the computer.

JP 2008-197902 A

  If the system described in Patent Document 1 is used, even if the USB memory is taken out to the outside due to theft or the like, the possibility that the content of the data leaks to the outside can be reduced. However, once the password is broken, the decrypted data can be output from the USB memory to another computer. Then, if another computer is equipped with file exchange software or the like, the data exchanged by the file exchange software or the like may leak onto the network.

  Therefore, the present invention provides a security enhancement system, a security enhancement method, a security enhancement program, which can prevent the contents of data from being read even when data output from a USB memory to a computer leaks to the outside. And it aims at providing a USB memory.

  The security enhancement system according to the present invention requires an encryption unit that encrypts data to be stored in the USB memory when data is written from the information processing apparatus to the USB memory, and a request to read data when the data is read from the USB memory. If the information processing apparatus is determined to be an information processing apparatus that has written data to a USB memory, and the security determination means determines that the information processing apparatus is not an information processing apparatus that has written data to the USB memory, Data output means for storing data stored in the USB memory in the information processing apparatus in an encrypted state.

  The USB memory according to the present invention encrypts data in the information processing device when the data is written from the information processing device to the USB memory, and stores the data in the USB memory, and when reading the data from the USB memory. The information processing device that requests the information processing device to read the data is a security determination unit that determines whether the information processing device has written the data to the USB memory, and the security determination unit writes the data to the USB memory. If it is determined that the information processing apparatus is not an information processing apparatus, the apparatus includes a data output means for storing the data stored in the USB memory in the information processing apparatus in an encrypted state.

  According to the security enhancement method of the present invention, when data is written from an information processing apparatus to a USB memory, an encryption step for encrypting the data and storing the data in the USB memory, and reading of the data when reading the data from the USB memory are requested. If the determined information processing apparatus is not an information processing apparatus that writes data to the USB memory, and determines that the information processing apparatus is not the information processing apparatus that writes data to the USB memory, the USB memory stores And a data output step of storing the data to be processed in the information processing apparatus in an encrypted state.

  The security enhancement program according to the present invention includes an encryption process in which data is encrypted and stored in the USB memory when data is written to the USB memory from the information processing apparatus, and data is read when the data is read from the USB memory. When it is determined that the information processing apparatus that has requested reading is an information processing apparatus that has written data to a USB memory, and is not an information processing apparatus that has written data to a USB memory, This is to execute data output processing in which the data stored in the memory is stored in the information processing apparatus in an encrypted state.

  According to the present invention, even when data output from a USB memory to a computer leaks to the outside, it is possible to prevent the contents of the data from being read.

It is a block diagram which shows the structural example of the security enhancement system by this invention. It is a flowchart which shows the process example which a security strengthening system performs. It is a block diagram which shows the minimum structural example of a security enhancement system.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a configuration example of a security enhancement system according to the present invention. FIG. 1 shows a state in which the data 11 of the computer 1 is output to the USB memory 2 as encrypted data 25 by the security management function 21 of the USB memory 2. FIG. 1 shows a state when the encrypted data 25 of the USB memory 2 is output as the encrypted output data 32 to the other computer 3.

  As shown in FIG. 1, the security enhancement system includes a computer 1, a USB memory 2, and another computer 3. Specifically, the computer 1 and the other computer 3 are realized by an information processing apparatus such as a personal computer. In the present embodiment, a case where a UBS memory is used will be described. However, the present invention is not limited to a UBS memory, and an external storage device such as an external hard disk device may be used.

  As shown in FIG. 1, the computer 1 includes a data storage unit 110 and a management key storage unit 120.

  Specifically, the data storage unit 110 is realized by a storage device such as an optical disk or a magnetic disk. As shown in FIG. 1, the data storage unit 110 stores data 11.

  Data 11 is an object that the computer 1 outputs to the USB memory 2. The management key 12 is information generated by the output management function unit 22.

  Specifically, the management key storage unit 120 is realized by a storage device such as an optical disk or a magnetic disk. As shown in FIG. 1, the management key storage unit 120 stores the management key 12.

  The management key 12 includes a computer identifier capable of identifying a computer and a data identifier capable of identifying data.

  As shown in FIG. 1, the USB memory 2 includes a security management function unit 21, an output management function unit 22, an encryption function unit 23, a management key storage unit 240, and an encrypted data storage unit 250. The security management function unit 21, the output management function unit 22, and the encryption function unit 23 included in the USB memory 2 are specifically realized by programs installed in the USB memory 2. In addition, expressions such as those executed by the security management function unit 21, the output management function unit 22, and the encryption function unit 23 are used. In practice, however, the CPU of the computer 1 or the other computer 3 is installed in the program installed in the USB memory 2. The process is executed according to the following.

  The security management function unit 21 has a function for managing the security of data input to and output from the USB memory 2.

  The output management function unit 22 has a function of generating a management key. The output management function unit 22 has a function of determining whether or not a computer storing data matches a computer that reads data.

  The encryption function unit 23 has a function of encrypting data. The encryption function unit 23 has a function of decrypting encrypted data.

  Specifically, the management key storage unit 240 is realized by a storage device such as a memory. As shown in FIG. 1, the management key storage unit 240 stores a management key 24 and a management key 24a.

  The management key 24 is information generated by the output management function unit 22 when the computer 1 outputs the data 11 to the USB memory 2. The management key 24 includes a computer identifier that can identify the computer that has output the data, and a data identifier that can identify the output data.

  The management key 24a is information generated by the output management function unit 22 when the other computer 3 updates and re-registers (stores) the encrypted output data 32. The management key 24a includes a computer identifier that can identify the computer that has updated the data, and a data identifier that can identify the updated data.

  Specifically, the encrypted data storage unit 250 is realized by a storage device such as a memory. As shown in FIG. 1, the encrypted data storage unit 250 stores encrypted data 25 and encrypted data 25a.

  The encrypted data 25 is generated by the encryption function unit 23 encrypting the data 11 when the computer 1 outputs the data 11 to the USB memory 2.

  The encrypted data 25a is generated by the encryption function unit 23 encrypting the update data when the other computer 3 updates and re-registers (stores) the encrypted output data 32.

  As shown in FIG. 1, the other computer 3 includes a management key storage unit 310 and an encrypted output data storage unit 320.

  Specifically, the management key storage unit 310 is realized by a storage device such as an optical disk or a magnetic disk. As shown in FIG. 1, the management key storage unit 310 stores a management key 31 and a management key 31a.

  The management key 31 is information generated by the output management function unit 22 when the other computer 3 reads data from the USB memory 2. The management key 31 includes a computer identifier that can identify the computer that has read the data, and a data identifier that can identify the read data.

  The management key 31 a is generated by the output management function unit 22 when the other computer 3 updates and re-registers (stores) the encrypted output data 32, and is output from the USB memory 2 to the other computer 3. The management key 31a includes a computer identifier that can identify the computer that has updated the data, and a data identifier that can identify the updated data.

  Specifically, the encrypted output data storage unit 320 is realized by a storage device such as an optical disk or a magnetic disk. As shown in FIG. 1, the encrypted output data storage unit 320 stores encrypted data 32 and encrypted data 32a.

  The encrypted output data 32 is data that is output as encrypted from the USB memory 2 to the other computer 3, and includes the same content as the encrypted data 25.

  The encrypted output data 32 a is generated by the encryption function unit 23 encrypting the update data when the other computer 3 updates the encrypted output data 32 and re-registers (stores) it. It is output to the other computer 3. The encrypted output data 32a includes the same content as the encrypted data 25a.

  In the present embodiment, the computer 1, the USB memory 2, and the other computer 3 store the management key and data in association with each other.

  Next, an operation executed by the enhanced security system will be described. FIG. 2 is a flowchart showing an example of processing executed by the enhanced security system.

  A USB output 411 shown in FIG. 2 is an example of a process for outputting data stored in the computer 1 to the USB memory 2 as data output (step S41 shown in FIG. 2) controlled by the security management function unit 21 of the USB memory 2. FIG.

  First, an operation for first storing data in a USB memory when the user creates or edits the data will be described. In order for the computer 1 to output the data stored in the data storage unit 110 to the USB memory 2, the user operates the computer 1 to perform a process of outputting the data. The security management function unit 21 then includes a management key including a computer identifier that can identify the computer 1 that outputs data to the output management function unit 22 and a data identifier that can identify data to be output in accordance with a user operation. Execute the process to generate. Then, the security management function unit 21 registers the management key generated by the output management function unit 22 in the computer 1 and the USB memory 2 (step S41a). In the present embodiment, the management keys 12 and 24 include a computer identifier that can identify the computer 1 and a data identifier that can identify the data 11. The security management function unit 21 stores the management key 12 in the management key storage unit 120 of the computer 1 and the management key 24 in the management key storage unit 240 of the USB memory 2.

  Next, the security management function unit 21 causes the encryption function unit 23 to execute processing for encrypting data to be output (step S41b). In the present embodiment, the encryption function unit 23 encrypts the data 11.

  Next, the security management function unit 21 outputs the encrypted data encrypted by the encryption function unit 23 to the USB memory 2 (step S41c). Specifically, the computer 1 outputs the encrypted data to the USB memory 2 in accordance with a program installed in the USB memory 2. Then, the USB memory 2 stores the encrypted data output from the computer 1 in the encrypted data storage unit 250. In the present embodiment, the USB memory 2 stores the data 11 encrypted by the encryption function unit 23 in the encrypted data storage unit 250 as the encrypted data 25. The USB memory 2 stores the management key 24 and the encrypted data 25 in association with each other.

  The USB data computer output 412 shown in FIG. 2 is an example of a process of outputting data from the USB memory 2 to the computer 1 or another computer 3 as data output (step S41) controlled by the security management function unit 21 of the USB memory 2. FIG. Hereinafter, an operation when outputting data stored in the USB memory 2 to a computer will be described.

  In order to output data from the USB memory 2, the user operates the computer 1 or another computer 3 to perform data output processing. Then, the security management function unit 21 determines, based on the management key, whether or not the output destination computer and the computer that has output the data to be output to the USB memory 2 are the same. The process to perform is performed (step S41d). In this embodiment, the output management function unit 22 outputs (saves) the output destination computer and the encrypted data 25 (that is, the data 11 before being encrypted) to the USB memory 2 based on the management key 24. It is determined whether or not the computer 1 is the same. Specifically, the output management function unit 22 determines whether or not the output destination computer matches the computer indicated by the computer identifier included in the management key 24 stored in association with the encrypted data 25. In this case, the same computer 1 is determined.

  If it is determined in step S41d that they are the same (that is, the computer 1), the security management function unit 21 causes the encryption function unit 23 to execute a process of decrypting the encrypted data to be output. Then, the security management function unit 21 outputs the data decrypted by the encryption function unit 23 from the USB memory 2 to the computer 1 (step S41e). In the present embodiment, the encryption function unit 23 decrypts the encrypted data 25 to be output. Then, the security management function unit 21 outputs the data decrypted by the encryption function unit 23 (that is, the data 11) from the USB memory 2 to the computer 1.

  On the other hand, if it is determined in step S41d that they are not the same (that is, they are other computers 3), the security management function unit 21 gives the output management function unit 22 the computer identifier that can identify the output destination computer and the data to be output. A management key including an identifiable data identifier is generated. Then, the security management function unit 21 outputs the management key generated by the output management function unit 22 and the encrypted data as encrypted to the other computer 3 from the USB memory 2 (step S41f).

  In the present embodiment, the output management function unit 22 generates a management key including a computer identifier that can identify the other computer 3 and a data identifier that can identify the encrypted data 25. The other computer 3 stores the management key generated by the output management function unit 22 and output from the USB memory 2 by the security management function unit 21 as the management key 31 in the management key storage unit 310. The other computer 3 stores the encrypted data 25 output from the USB memory 2 by the security management function unit 21 in the encrypted output data storage unit 320 as the encrypted output data 32.

  As described above, according to the USB data computer output 412, when the data stored in the USB memory 2 is output to the other computer 3, the security management function unit 21 causes the output management function unit 22 to generate a management key. The management key and the encrypted data are output to the other computer 3.

  The USB data read 421 shown in FIG. 2 is a flowchart showing an example of processing in which the computer 1 or another computer 3 reads (displays) or updates data output from the USB memory 2. Hereinafter, an operation when reading (displaying) data output from the USB memory 2 to the computer will be described.

  In order to read (display) data output from the USB memory 2, the user operates the computer 1 or another computer 3 to perform processing for reading (displaying) data. Then, the security management function unit 21 outputs (saves) the data to be read (displayed) to the output management function unit 22 and the data to be read (displayed) to the USB memory 2 based on the management key. A process of determining whether or not the computer is the same is executed (step S421a). In the present embodiment, when the other computer 3 reads (displays) the encrypted output data 32, the output management function unit 22 determines that the other computer 3 and the encrypted output data are based on the management key 31 and the management key 24. It is determined that the computer 1 that outputs (saves) 32 (ie, data 11) to the USB memory 2 is not the same.

  If it is determined in step S421a that they are the same (that is, the computer 1), the computer 1 reads (displays) the data output from the USB memory 2 (step S421b).

  On the other hand, if it is determined in step S421a that they are not the same (that is, other computers 3), the security management function unit 21 causes the encryption function unit 23 to decrypt the encrypted output data to be read (displayed). Is executed. The other computer 3 reads (displays) the data decrypted by the encryption function unit 23 (step S421d). In the present embodiment, the encryption function unit 23 executes a process for decrypting the encrypted output data 32. However, in this case, control is performed so that the combined data is only displayed and not stored in the storage unit of the other computer 3.

  When the other computer 3 updates and re-registers (stores) the data read (displayed) in step S421d, the security management function unit 21 proceeds to step S421f. On the other hand, when the other computer 3 does not update the data read (displayed) in step S421d, the security management function unit 21 proceeds to step S421h (step S421e).

  If the data is not updated in step S421e, the security management function unit 21 ends the process (step S421h).

  When the data is updated and re-registered (stored) in step S421e, the user operates the other computer 3 to update the data and re-register (store) the data. Then, the security management function unit 21 causes the encryption function unit 23 to execute processing for encrypting the updated data. Further, the security management function unit 21 causes the output management function unit 22 to generate a management key including a computer identifier that can identify the computer whose data has been updated and a data identifier that can identify the updated data (step S421f). .

  In this embodiment, the encryption function part 23 encrypts the data updated by the other computer 3, and produces | generates the encryption data 25a. The output management function unit 22 generates a management key 24a including a computer identifier that can identify the other computer 3 and a data identifier that can identify the encrypted data 25a.

  Next, the security management function unit 21 outputs the data encrypted by the encryption function unit 23 and the management key generated by the output management function unit 22 from the USB memory 2 to the other computer 3. The other computer 3 stores the encrypted data output from the USB memory 2 in the encrypted output data storage unit 320 and the management key in the management key storage unit 310 (step S421g).

  In this embodiment, the security management function unit 21 outputs the encrypted data 25a as the encrypted output data 32a and the management key 24a as the management key 31a from the USB memory 2 to the other computer 3. The other computer 3 stores the encrypted output data 32 a output from the USB memory 2 in the encrypted output data storage unit 320 and the management key 31 a in the management key storage unit 310. As a result, the data output from the USB memory 2 and registered (stored) in the other computer 3 is always encrypted.

  As described above, according to the USB data reading 421, when the other computer 3 reads (displays) the data output from the USB memory 2, it is connected to the USB memory 2 and the output management function unit 22 provided in the USB memory 2. The data cannot be used unless the management key collation process by, and the decryption process of the encrypted data by the encryption function unit 23 are performed.

  In addition, when the decrypted and read data is updated / output to another computer again, the output management function unit and the encryption function unit included in the USB memory 2 encrypt the updated data again. And a process for generating a management key. Thereafter, the encrypted data and the management key are output to another computer.

  As described above, in the present embodiment, when data is output from the USB memory 2 to the other computer 3, the security management function unit 21 outputs the encrypted data 25 as it is encrypted. When executing the process of reading (displaying) or updating the encrypted output data 32 output from the USB memory 2, the other computer 3 includes the output management function unit 22 and the encryption function unit 23 included in the USB memory 2. Need. The data updated by the other computer 3 is encrypted by the encryption function unit 23 when it is re-output from the USB memory 2 to the other computer 3.

  Therefore, even if the data output from the USB memory to the computer leaks to the outside, the leaked data remains encrypted. Even if the password is broken and the data is updated, the data stored in the other computer is always only the encrypted data, and the combined data can be prevented from being stored. Further, in order to decrypt the encrypted data, it is necessary to connect to a USB memory. Therefore, even if the data is leaked to the outside using file exchange software or the like, only the encrypted data can be leaked and the contents of the data can be prevented from being read.

  Next, the minimum configuration of the security enhancement system according to the present invention will be described. FIG. 3 is a block diagram illustrating a minimum configuration example of the security enhancement system. As shown in FIG. 3, the enhanced security system includes a USB memory 200 as a minimum component. Further, the USB memory includes an encryption unit 201 that encrypts data and a decryption unit 202 that decrypts the encrypted data.

  According to the minimum security enhancement system shown in FIG. 3, the encryption unit 201 encrypts data when the first information processing apparatus connected to the USB memory 200 inputs data to the USB memory 200. To do. Then, the decryption unit 202 decrypts the encrypted data when the second information processing apparatus connected to the USB memory 200 reads the data encrypted by the encryption unit 201. Therefore, the information processing apparatus must be connected to the USB memory 200 when reading data stored in the USB memory 200. Therefore, even if the data output from the USB memory 200 is leaked to the outside, the contents of the leaked data can be prevented from being read.

  In addition, in this embodiment, the characteristic structure of the security strengthening system as shown to the following (1)-(5) is shown.

  (1) When the data (eg, data 11) is written from the information processing device (eg, computer 1) to the USB memory (eg, USB memory 2), the security enhancement system encrypts the data and stores it in the USB memory When an encryption unit (for example, realized by the encryption function unit 23) and data (for example, encrypted data 25) are read from the USB memory, the information processing apparatus that has requested the data read includes the USB memory. A security determination unit (for example, realized by the output management function unit 22) that determines whether or not the information processing device has been written in, and a security determination unit that determines that the data processing device is not an information processing device that has written data to the USB memory. As a result, the data stored in the USB memory remains encrypted (for example, The information processing apparatus (for example, of the output data 32), characterized in that it comprises a data output means for storing the other computers 3) (for example, implemented by the security management function unit 21).

  (2) In the enhanced security system, the security judging means updates the data stored in the USB memory, and the information processing device (for example, another computer 3) that updates the data writes the data in the USB memory. It is determined whether or not the device is an apparatus (for example, the computer 1), and the encryption unit encrypts the update data obtained by updating the data when the security determination unit determines that the information processing device does not write the data to the USB memory. The data output means may be configured to store the update data (for example, encrypted output data 32a) encrypted by the encryption means in the information processing apparatus.

  (3) In the enhanced security system, when data is read from the USB memory, when it is determined by the security determination means that the information processing apparatus has written the data to the USB memory, decryption is performed to decrypt the encrypted data. Means (for example, realized by the encryption function unit 23), and the data output means causes the information processing apparatus (for example, the computer 1) to store the data (for example, the data 11) decrypted by the decryption means. It may be configured as follows.

  (4) In the enhanced security system, the USB memory includes an encryption unit, a security determination unit, and a data output unit, and the information processing device includes an encryption unit included in a USB memory connected to the information processing device, The security judgment unit and the data output unit may be used to input / output data to / from the USB memory.

  (5) In the enhanced security system, when data is written from the information processing apparatus to the USB memory, an identification information generating unit that generates identification information (for example, a management key) that can identify the information processing apparatus corresponding to the data is provided. The security determination means determines whether or not the identification information stored in the information processing apparatus that has requested the data read matches the identification information stored in association with the data in the USB memory, whereby the data is stored in the USB memory. It may be configured to determine whether or not the information processing device has been written.

  The present invention can be applied to uses for enhancing security when a USB memory is used.

1 Computer 2,200 USB Memory 3 Other Computer 11 Data 12, 24, 24a, 31, 31a Management Key 21 Security Management Function Unit 22 Output Management Function Unit 23 Encryption Function Unit 25, 25a Encrypted Data 32, 32a Encrypted Output Data 110 Data storage unit 120, 240, 310 Management key storage unit 201 Encryption unit 202 Security determination unit 203 Data output unit 250 Encrypted data storage unit 320 Encrypted output data storage unit

Claims (11)

An encryption unit that encrypts the data and stores the data in the USB memory when writing the data from the information processing apparatus to the USB memory;
Security determination means for determining whether or not the information processing apparatus that has requested reading of the data is the information processing apparatus that has written the data to the USB memory when reading data from the USB memory;
Data output means for causing the information processing apparatus to store the data stored in the USB memory in an encrypted state when the security determination means determines that the information processing apparatus does not write the data to the USB memory A security enhancement system characterized by comprising The security determination means determines whether or not the information processing device that updates the data is the information processing device that has written the data to the USB memory when updating the data stored in the USB memory.
When it is determined by the security determination means that the data is not an information processing apparatus that has written the data to the USB memory, the encryption means encrypts update data that updates the data,
The security enhancement system according to claim 1, wherein the data output means stores the update data encrypted by the encryption means in an information processing apparatus. When the data is read from the USB memory, if it is determined by the security determination means that the information processing apparatus has written the data to the USB memory, the encryption determination unit includes a decryption unit that decrypts the encrypted data.
The security enhancement system according to claim 1 or 2, wherein the data output means stores the data decrypted by the decryption means in an information processing apparatus. USB memory is
Encryption means;
Security judgment means;
Data output means,
Information processing device
The data input / output to / from the USB memory is performed using an encryption unit, a security determination unit, and a data output unit included in the USB memory connected to the information processing apparatus. The security enhancement system according to any one of the above. When writing data from the information processing device to the USB memory, the device includes identification information generating means for generating identification information that can identify the information processing device corresponding to the data,
The security determination means determines whether or not the identification information stored in the information processing apparatus that has requested reading of the data matches the identification information stored in association with the data in the USB memory. The security enhancement system according to any one of claims 1 to 4, wherein the information processing apparatus determines whether or not the information processing apparatus has been written to the USB memory. An encryption unit that encrypts the data and stores the data in the USB memory when the data is written from the information processing apparatus to the USB memory;
A security determination unit that, when reading data from the USB memory, causes the information processing apparatus to determine whether the information processing apparatus that has requested the data read is the information processing apparatus that has written the data to the USB memory. When,
Data output means for causing the information processing apparatus to store the data stored in the USB memory in an encrypted state when the security determination means determines that the information processing apparatus does not write the data to the USB memory A USB memory characterized by comprising: The security judging means, when updating the data stored in the USB memory, informs the information processing apparatus whether or not the information processing apparatus that updates the data is the information processing apparatus that has written the data into the USB memory. Let me judge
When it is determined by the security management means that the data is not the information processing device that has written the data to the USB memory, the encryption unit causes the information processing device to encrypt the update data that updates the data,
The USB memory according to claim 6, wherein the data output means causes the information processing apparatus to store the update data encrypted by the encryption means. An encryption step of encrypting the data and storing it in the USB memory when writing data from the information processing device to the USB memory;
A security determination step of determining whether or not the information processing apparatus that has requested reading of the data is an information processing apparatus that has written the data to the USB memory when reading data from the USB memory;
A data output step of storing the data stored in the USB memory in the information processing apparatus in an encrypted state when it is determined that the data processing apparatus is not the information processing apparatus that has written the data in the USB memory. A feature of security enhancement. In the security determination step, when updating the data stored in the USB memory, it is determined whether the information processing apparatus that updates the data is an information processing apparatus that has written the data to the USB memory;
If it is determined in the encryption step that the data processing device is not the information processing device that has written the data to the USB memory, the update data that updates the data is encrypted,
The security enhancement method according to claim 8, wherein the encrypted update data is stored in the information processing apparatus in the data output step. On the computer,
An encryption process for encrypting the data and storing it in the USB memory when writing data from the information processing device to the USB memory;
A security determination process for determining whether or not the information processing apparatus that has requested reading of the data is an information processing apparatus that has written the data to the USB memory when reading data from the USB memory;
When it is determined that the data processing device is not the information processing device that has written the data to the USB memory, the data output processing for storing the data stored in the USB memory in the information processing device in an encrypted state is executed. Security enhancement program. On the computer,
In the security determination process, when updating the data stored in the USB memory, it is determined whether the information processing apparatus that updates the data is an information processing apparatus that has written the data to the USB memory;
If it is determined in the encryption process that the data processing device is not the information processing device that has written the data to the USB memory, the update data obtained by updating the data is encrypted,
The security enhancement program according to claim 10, for executing a process of storing encrypted update data in an information processing apparatus in a data output process.

Images