JP2011150629A - Recorded information management system, recorded information management method, recording device, and program thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a recorded information management system for setting the security of information recorded in a recording device after the occurrence of a failure even if the failure occurs in the recording device. <P>SOLUTION: A locking terminal 20 records locking information indicating inaccessibility to the recording device 10 to a locking information storage part 14. An access propriety determining part 121 rejects access to a recording element 11 via a recording element access interface 13 when the locking information is recorded in the locking information storage part 14. The locking terminal 20 directly connects to a storage information control part 16 which controls the reading/writing of the information with respect to the locking information storage part 14 via an access interface 15 provided for locking to be used only to register the locking information in the locking information storage part 14, and then, controls the writing of the locking information into the locking information storage part 14. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a recording information management system, a recording information management method, a recording apparatus, and a program thereof for managing information recorded on a recording element.

Recording apparatuses such as HDDs (Hard Disk Drives) and SSDs (Solid State Drives) used in information processing apparatuses such as PCs, servers, and workstations are indispensable devices for storing data. Here, there are cases where the recording device or the information processing device is transported when repairing or investigating the failure of the recording device or the information processing device equipped with the recording device, but important data such as personal information is stored in the recording device. Is recorded, it is necessary to take thorough security measures.
As a technique related to the security of information recorded in the recording apparatus, a technique for preventing unauthorized access in a device including a storage apparatus is disclosed in Patent Document 1.

Registered Utility Model No. 3071327

  Here, as a security measure for important data in the recording device, information stored in the recording device in advance is encrypted, and data cannot be read even if the recording device is connected to another information processing device. There is a technology to do so. However, even if the recording apparatus or the information processing apparatus equipped with the recording apparatus fails, even if the information in the recording apparatus is encrypted and security is considered, the recording apparatus cannot be accessed. There is a problem that security cannot be applied due to a failure of the information processing apparatus.

  Therefore, the present invention provides a recording information management system and a recording information management method capable of setting the security of information recorded in the recording apparatus even after the recording apparatus has failed, An object of the present invention is to provide a recording apparatus and its program.

  In order to achieve the above object, the present invention provides a recording information management system for a recording apparatus provided with a recording element, wherein the recording apparatus stores locking information indicating that access to the recording element is not possible. Based on the storage unit, a recording element access interface that mediates a read request signal for information from the recording element or a write request signal for information to the recording element, and acquisition of the read request signal or the write request signal, An access permission determination unit that determines whether the locking information is recorded in a locking information storage unit, and determines that access to the recording element is inaccessible when the locking information storage unit stores the locking information And a locking-dedicated access interface that is directly connected to the locking information storage unit and mediates the writing of the locking information to the recording element. And reading information from the locking information storage unit based on a request for reading information from the locking information storage unit or a request for writing information to the locking information storage unit via the locking dedicated access interface, or the locking information A storage information control unit that writes information to the storage unit, and a locking terminal supplies power to the storage information control unit via the locking dedicated access interface, and the locking based on an input of a locking instruction A recording information management system comprising: a locking processing unit that writes information to the recording element via the locking-dedicated access interface.

  In the recording information management system, the lock terminal includes a password input unit for inputting a password, and the lock processing unit transmits the input password together with the lock information via the lock dedicated access interface. Writing to the recording element.

  In the recording information management system according to the present invention, the locking terminal includes a locking button and an unlocking button, and the locking processing unit detects pressing of the unlocking button, and further receives an input of the password. Thus, when it is determined that the password matches the password recorded on the recording element of the recording apparatus, the locking information recorded on the recording element of the recording apparatus is deleted.

  According to the present invention, in the above-described recording information management system, the locking processing unit of the locking terminal detects pressing of the unlocking button, receives an input of the password, and the password is recorded in the recording device. When it is determined that it matches the password recorded in the element, the locking information recorded in the recording element of the recording apparatus is deleted, and the unlocking information is written in the recording element of the recording apparatus, and the recording apparatus The access permission determination unit determines whether the locking information or the unlocking information is recorded in the locking information storage unit based on the acquisition of the read request signal or the write request signal, and the locking information When the storage unit stores the unlocking information, it is determined that access to the recording element is accessible.

  The present invention is also a recording information management method for a recording information management system of a recording apparatus provided with a recording element, wherein the locking information storage unit of the recording apparatus stores locking information indicating that the recording element cannot be accessed. The recording element access interface of the recording apparatus mediates the information read request signal from the recording element or the information write request signal to the recording element, and the access permission determination unit of the recording apparatus includes the read request Based on the acquisition of the signal or the write request signal, it is determined whether or not the locking information is recorded in the locking information storage unit, and when the locking information storage unit stores the locking information, the recording element Access to the recording device is determined to be inaccessible, and the lock dedicated access interface of the recording device is directly connected to the lock information storage unit, Mediating the writing of the locking information to the element, the storage information control unit of the recording device reads information from the locking information storage unit via the locking dedicated access interface or information to the locking information storage unit The information is read from the lock information storage unit based on the write request or the information is written to the lock information storage unit, and the power supply unit of the lock terminal supplies power to the storage information control unit via the lock dedicated access interface. The recording information management method is characterized in that the locking processing unit of the locking terminal writes the locking information to the recording element via the locking dedicated access interface based on an input of a locking instruction.

  The present invention also provides a lock information storage unit that stores lock information indicating that access to the recording element is not possible, and a recording that mediates an information read request signal from the recording element or an information write request signal to the recording element. Based on the element access interface and the acquisition of the read request signal or the write request signal, it is determined whether the locking information is recorded in the locking information storage unit, and the locking information storage unit stores the locking information. An access permission determination unit that determines that access to the recording element is inaccessible, and a lock dedicated access interface that is directly connected to the locking information storage unit and mediates the writing of the locking information to the recording element. And a request to read information from the locking information storage unit via the locking-dedicated access interface or before Based on a request to write information to the lock information storage unit, information is read from the lock information storage unit or written to the lock information storage unit by power supply from the lock terminal via the lock dedicated access interface. And a storage information control unit.

  The present invention also provides a lock information storage unit that stores lock information indicating that access to the recording element is not possible, and a recording that mediates an information read request signal from the recording element or an information write request signal to the recording element. A computer of a recording apparatus comprising: an element access interface; and a lock dedicated access interface that is directly connected to the locking information storage unit and mediates writing of the locking information to the recording element. Based on the acquisition of the request signal, it is determined whether the locking information is recorded in the locking information storage unit. When the locking information storage unit stores the locking information, access to the recording element is performed. Access permission determination means for determining that access is impossible, the locking information storage via the locking dedicated access interface Based on a request to read information from or a request to write information to the lock information storage unit, the information is read from the lock information storage unit by power supply from the lock terminal via the lock dedicated access interface, or It is a program characterized by functioning as storage information control means for writing information to the lock information storage unit.

  According to the present invention, in the recording device, if the lock information storage unit, the lock dedicated access interface, and the storage information control unit are normal, the power is supplied to the storage information control unit by the lock terminal, and the lock terminal directly Locking information can be registered in the storage unit. As a result, even if a failure occurs in the printing apparatus that makes it impossible to access the printing element from the printing element access interface, the security of the information recorded on the printing element can be set.

It is a functional block diagram of a recording information management system. It is a figure which shows the system overview of a recording information management system. It is a 1st figure which shows the processing flow of a recording information management system. It is a 2nd figure which shows the processing flow of a recording information management system. It is a 3rd figure which shows the processing flow of a recording information management system.

A recording information management system according to an embodiment of the present invention will be described below with reference to the drawings.
FIG. 1 is a functional block diagram of a recording information management system according to the embodiment.
In this figure, reference numeral 1 denotes a recording information management system. The recording information management system 1 includes a recording device 10 and a lock terminal 20. Here, the recording device 10 includes a recording element 11 for recording information, a device controller 12 for writing information to the recording element 11 or reading information from the recording element 11, a read request signal for information from the recording element 11, or A recording element access interface 13 that mediates an information write request signal to the recording element 11, a locking information storage unit 14 that stores locking information that stores information indicating that access to the recording element 11 is impossible, and a locking information storage unit 14 Locking access interface 15 that mediates the writing of the locking information to the locking terminal 20, a request for reading information from the locking information storage unit 14, or a request for writing information to the locking information storage unit 14 through the locking dedicated access interface 15. And accept information from the locking information storage unit 14 or lock information Storing information control unit 16 that performs processing for writing information to the storage unit 14, and a. In addition, the device controller 12 includes an access permission determination unit 121 that determines whether information recorded in the recording element 11 is accessible based on acquisition of a read request signal or a write request signal via the recording element access interface 13. .

  The locking terminal 20 includes a locking processing unit 21 for registering locking information in the locking information storage unit 14 of the recording device 10 via the locking dedicated access interface 15 and a storage information control unit 16 via the locking dedicated access interface 15. And a power supply unit 22 for supplying power. Further, the locking terminal 20 includes a locking button 23 for inputting an instruction to disable external access to the recording apparatus 10 via the recording element access interface 13, and a recording element access interface 13 for the recording apparatus 10. There are provided an unlock button 24 for inputting an instruction that allows access from the outside via a password, a password input unit 25 for inputting a password, and a display unit 26 for displaying the entered password.

FIG. 2 is a diagram showing a system overview of the recording information management system.
In FIG. 2, reference numeral 30 denotes an information processing apparatus such as a mobile PC. The recording apparatus 10 shown in FIG. 1 is built in the information processing apparatus 30. Alternatively, the recording apparatus 10 may be inserted and connected to the information processing apparatus 30. The locking terminal 20 can be connected to the locking dedicated access interface 15 of the recording apparatus 10 provided in the information processing apparatus 30 with a dedicated cable or the like. Access to information recorded in the recording element 11 of the recording apparatus 10 is performed via a recording element access interface 13 from a control unit such as a CPU of the information processing apparatus 30.

  In the recorded information management system according to the present embodiment, the locking terminal 20 enters the locking information storage unit 14 via the locking dedicated access interface 15 that is used only for registering the locking information in the locking information storage unit 14. In addition to supplying power to the lock information storage unit 14, it directly connects to the storage information control unit 16 that controls reading and writing of information with respect to the lock information storage unit 14, and controls the writing of the lock information to the lock information storage unit 14. Thereby, if the locking information storage unit 14, the locking dedicated access interface 15, and the storage information control unit 16 are normal in the recording device 10, the locking terminal 20 supplies power to the storage information control unit 16 and directly locks it. Locking information can be registered in the information storage unit 14. Thereby, even if a failure occurs in which the recording apparatus 10 cannot access the recording element 11 from the recording element access interface 13, the access to the recording element 11 can be restricted.

FIG. 3 is a first diagram showing a processing flow of the recording information management system.
First, an access process to the recording element 11 of the recording apparatus 10 will be described with reference to FIG.
Normal access (reading of information, writing of information) to the recording element 11 is performed via the recording element access interface 13. When the device controller 12 inputs a request for access to the recording element 11 via the recording element access interface 13 (step S101), the access permission determination unit 121 reads information recorded in the lock information storage unit 14 (step S101). S102). Here, only one of the locking information indicating that the recording element 11 is not accessible and the unlocking information indicating that the recording element 11 is accessible is recorded in the locking information storage unit 14. This locking information or unlocking information is recorded in the locking information storage unit 14 by the processing of the locking terminal 20. The accessibility determination unit 121 determines whether the information read from the locking information storage unit 14 is locking information (step S103). If the information is locking information, it determines that access to the recording element 11 is not possible. (Step S104) If it is unlocking information, it is determined that access is possible (Step S105). When the access controller 13 determines that access is possible, the device controller 12 stores information recorded in the recording element 11 based on the access request input via the recording element access interface 13. The data is output to the outside via the recording element access interface 13 (step S106).

FIG. 4 is a second diagram showing a processing flow of the recording information management system.
Next, the processing flow at the time of locking of the locking terminal 20 is demonstrated using FIG.
At the time of locking, the user connects the locking terminal 20 to the locking dedicated access interface 15 using a dedicated cable. When the locking terminal 20 and the recording device 10 are connected by a dedicated cable and the power of the locking terminal 20 is turned on, the power supply unit 22 supplies power to the storage information control unit 16 via the locking dedicated access interface 15. And a user inputs a password into the password input part 25 (step S201). The password input at this time is displayed on the display unit 26. When the user presses the lock button 23 (step S202), the lock processing unit 21 detects that the lock button is pressed, and the lock information and password information are sent to the storage information control unit 16 via the lock dedicated access interface 15. Output (step S203). Then, the storage information control unit 16 operates based on the power supply by the power supply unit 22, and deletes the unlocking information when the unlocking information is stored in the locking information storage unit 14 (step S204). Then, the locking information and password information input from the locking processing unit 21 are written into the locking information storage unit 14 (step S205). As a result, access to the recording element 11 via the recording element access interface 13 becomes impossible.

FIG. 5 is a third diagram showing a processing flow of the recording information management system.
Next, a processing flow when unlocking the locking terminal 20 will be described with reference to FIG.
At the time of unlocking, similarly to the locking, the user connects the locking terminal 20 to the locking dedicated access interface 15 using a dedicated cable. When the locking terminal 20 and the recording device 10 are connected by a dedicated cable and the power of the locking terminal 20 is turned on, the power supply unit 22 supplies power to the storage information control unit 16 via the locking dedicated access interface 15. And a user inputs a password into the password input part 25 (step S301). The password input at this time is displayed on the display unit 26. When the user presses the unlock button 24 (step S302), the lock processing unit 21 detects the press of the lock button, and transmits a password information read request to the storage information control unit 16 of the recording device 10 (step S302). S303). Then, the storage information control unit 16 reads the password information from the lock information storage unit 14 and outputs the password information to the lock terminal 20 (step S304). Next, in the lock terminal 20, the lock processing unit 21 receives the password information and compares it with the password input from the password input unit 25 (step S305). If the passwords match, the locking processing unit 21 transmits the unlocking information to the storage information control unit 16 via the locking dedicated access interface 15 (step S306). Then, if the locking information is stored in the locking information storage unit 14, the storage information control unit 16 deletes the locking information (step S307), and stores the unlocking information input from the locking processing unit 21 as the locking information storage. Write to the unit 14 (step S308). As a result, the recording element 11 can be accessed via the recording element access interface 13.

  According to the above processing, if the locking information storage unit 14, the locking dedicated access interface 15, and the storage information control unit 16 are normal in the recording device 10, the power is supplied to the storage information control unit 16 by the locking terminal 20, The locking terminal 20 can directly register the locking information in the locking information storage unit 14. And while this locking information is recorded in the locking information storage part 14, access to the recording element 11 becomes impossible. As a result, even if a failure that prevents the recording device 10 from accessing the recording element 11 from the recording element access interface 13 occurs in the recording device 10 or the information processing apparatus 30 provided with the recording device 10, The security of the information recorded in the recording element 11 can be set.

  The recording device, the locking terminal, and the information processing device described above have a computer system inside. Each process described above is stored in a computer-readable recording medium in the form of a program, and the above process is performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... Recording information management system 10 ... Recording apparatus 11 ... Recording element 12 ... Device controller 13 ... Recording element access interface 14 ... Locking information storage part 15 ... Locking exclusive access interface 16 ... Storage information control unit 20 ... Locking terminal 21 ... Locking processing unit 22 ... Power supply unit

Claims (7)

A recording information management system for a recording apparatus provided with a recording element,
The recording device is
A locking information storage unit for storing locking information indicating that access to the recording element is impossible;
A recording element access interface that mediates a read request signal of information from the recording element or a write request signal of information to the recording element;
Based on the acquisition of the read request signal or the write request signal, it is determined whether the locking information is recorded in the locking information storage unit, and when the locking information storage unit stores the locking information An accessibility determination unit that determines that access to the recording element is inaccessible;
A lock-only access interface that mediates the writing of the lock information to the recording element;
Information is read from the locking information storage unit based on a request for reading information from the locking information storage unit via the locking-dedicated access interface or a request for writing information to the locking information storage unit, or the locking information storage unit A storage information control unit for writing information to
Locked terminal
A power supply unit that supplies power to the storage information control unit via the locking-dedicated access interface;
A locking processing unit that writes the locking information to the recording element via the locking-dedicated access interface based on an input of a locking instruction;
A recording information management system comprising: The locked terminal is
It has a password input part to input a password,
The recording information management system according to claim 1, wherein the locking processing unit writes the input password together with the locking information to the recording element via the locking dedicated access interface. The locking terminal includes a locking button and an unlocking button,
The lock processing unit detects pressing of the unlock button, further accepts the input of the password, and determines that the password matches the password recorded in the recording element of the recording device, the recording The recording information management system according to claim 2, wherein locking information recorded in a recording element of the apparatus is deleted. When the locking processing unit of the locking terminal detects pressing of the unlock button, further receives the input of the password, and determines that the password matches the password recorded in the recording element of the recording device And deleting the locking information recorded in the recording element of the recording device, and writing the unlocking information to the recording element of the recording device,
The access permission determination unit of the recording device determines whether the locking information or the unlocking information is recorded in the locking information storage unit based on the acquisition of the read request signal or the write request signal, The recording information management system according to claim 3, wherein when the locking information storage unit stores the unlocking information, it is determined that access to the recording element is accessible. A recording information management method for a recording information management system of a recording apparatus provided with a recording element,
The locking information storage unit of the recording device stores locking information indicating that access to the recording element is not possible,
The recording element access interface of the recording apparatus mediates a read request signal for information from the recording element or a write request signal for information to the recording element,
The access permission determination unit of the recording device determines whether the locking information is recorded in the locking information storage unit based on the acquisition of the read request signal or the write request signal, and the locking information storage unit If locking information is stored, it is determined that access to the recording element is inaccessible,
The locking-dedicated access interface of the recording device mediates the writing of the locking information to the recording element,
The storage information control unit of the recording device receives the information read request from the lock information storage unit via the lock dedicated access interface or the information write request to the lock information storage unit from the lock information storage unit. Read information, or write information to the lock information storage unit,
The power supply unit of the locking terminal supplies power to the storage information control unit via the locking dedicated access interface,
A recording information management method, wherein the locking processing unit of the locking terminal writes the locking information to the recording element via the locking dedicated access interface based on an input of a locking instruction. A locking information storage unit for storing locking information indicating that access to the recording element is not possible;
A recording element access interface that mediates a read request signal of information from the recording element or a write request signal of information to the recording element;
Based on the acquisition of the read request signal or the write request signal, it is determined whether the locking information is recorded in the locking information storage unit, and when the locking information storage unit stores the locking information An accessibility determination unit that determines that access to the recording element is inaccessible;
A lock-only access interface that mediates the writing of the lock information to the recording element;
Based on a read request for information from the lock information storage unit via the lock dedicated access interface or a request for writing information to the lock information storage unit, power supply from the lock terminal via the lock dedicated access interface A storage information control unit that reads information from the locking information storage unit or writes information to the locking information storage unit;
A recording apparatus comprising: A locking information storage unit for storing locking information indicating that access to the recording element is not possible;
A recording element access interface that mediates a read request signal of information from the recording element or a write request signal of information to the recording element;
A computer of a recording apparatus, which is directly connected to the locking information storage unit and includes a locking-dedicated access interface that mediates writing of the locking information to the recording element;
Based on the acquisition of the read request signal or the write request signal, it is determined whether the locking information is recorded in the locking information storage unit, and when the locking information storage unit stores the locking information Access permission determination means for determining that access to the recording element is not accessible;
Based on a read request for information from the lock information storage unit via the lock dedicated access interface or a request for writing information to the lock information storage unit, power supply from the lock terminal via the lock dedicated access interface Storage information control means for reading information from the locking information storage unit or writing information to the locking information storage unit;
A program characterized by functioning as

Images