JP2012203808A - Medium management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To determine whether or not the use of a storage medium is authorized to restrict the use of an unauthorized storage medium, and to determine whether or not electronic equipment such as a PC in which a storage medium is handled is equipment whose use is authorized to restrict the use of the storage medium about unauthorized electronic equipment.SOLUTION: A management server includes: a user management DB for storing electronic equipment management information unique to electronic equipment which a user is authorized to use in association with user ID unique to the user; and an equipment management DB for storing the unique identification information of an available storage medium in association with the electronic equipment management information unique to each of a plurality of electronic equipment. The medium management system includes: processing means for, when the user uses certain electronic equipment, determining whether or not the user is authorized to use the electronic equipment by referring to the user management DB about the user ID read by a user ID reader; and processing means for determining whether to authorize the user to use the storage medium in the electronic equipment by referring to the equipment management DB about IC tag information read by the IC tag reader of the electronic equipment which the user is trying to use.

Description

  The present invention relates to a medium management system, and in particular, an IC tag (RFID) is fixed to a storage medium, and information on the IC tag is detected and managed by a terminal or the like, so that storage of the storage medium is permitted and restricted. The present invention relates to a medium management system for managing take-out and the like.

  Data is routinely stored and moved to a storage medium such as a flexible disk or USB memory. Users may accidentally take storage media into their clothes pockets or bags and forget to return them. In addition, when a storage medium is used, data is encrypted so that the data cannot be read, or even if the storage medium is taken out, the stored data cannot be used. .

  However, it is not possible to limit the unauthorized detection and take-out of storage media itself, the automatic recording of take-out, and the use of storage media itself. The rules and standards, and the morals of each worker / user The current situation depends on it.

  Regarding a technology for managing security using an RFID tag, for example, Patent Document 1 discloses a user who is input by reading an RFID tag owner's personal ID or fingerprint characteristic information from data received from the RFID tag. A technique for determining whether the owner of the RFID tag is permitted to operate the device based on the personal ID and making the electronic device inoperable if the operation of the device is not permitted is disclosed.

Japanese Patent Laid-Open No. 2007-4698

  The technology described in the above-mentioned patent document restricts the operation of the electronic device to be used, and does not have functions such as checking the storage medium to be used and specifying the storage location. From the viewpoint of enhancing the security of the storage medium, it is hard to say. Therefore, it is considered that it is most effective to improve the security to strictly manage the relationship between the electric equipment, the storage medium used, and the user.

An object of the present invention is to determine whether or not use of a storage medium is permitted, restrict use of the unauthorized storage medium, and further permit use of an electronic device such as a PC that handles the storage medium. It is determined whether or not the use of the storage medium is restricted for the non-permitted electronic device.
The present invention also confirms the person entering and leaving the area such as the room to be monitored and the storage medium possessed by the person entering and leaving the room, and permits or disallows the owner to bring in or take out the storage medium. It is to monitor.
The present invention also determines whether a worker enters a specific area such as a room to be monitored, a worker who uses an electronic device, a use permission of an electronic device and a storage medium to be used, and confirmation of the location. In other words, the management of the location of the storage medium, illegal take-in and take-out, and prevention of illegal use are performed.

In the present invention, preferably, when a user uses a plurality of storage media that store data and an electronic device that can handle the storage medium, the user can execute the program on the management server to the user. A medium management system for permitting or restricting use of the storage medium and the electronic device,
Each storage medium includes an IC tag having unique medium management information and unique identification information for managing the storage medium, and the electronic device has an IC tag reader for reading the tag information of the IC tag, and a user-specific A user ID reader for reading the user ID of the user card holding the user ID,
The management server includes an IC tag management DB that stores the IC tag information and the management number of the storage medium in association with each other, and permits the user to use the user ID corresponding to the user ID unique to the user. A user management DB that stores electronic device management information unique to the electronic device, and a device that stores unique identification information of a storage medium that can be used corresponding to the electronic device management information unique to each of the plurality of electronic devices Has a management DB,
By executing a program on the management server;
When a user uses an electronic device, whether the user is permitted to use the electronic device with reference to the user management DB for the user ID read by the user ID reader Authority / restriction setting section to determine
The IC tag information read by the IC tag reader of the electronic device that the user intends to use is referred to the device management DB, and the user is permitted to use the storage medium in the electronic device. And a device management unit for determining whether or not the medium management system is configured.

  In a preferred example, if the result of determination by the device management unit is that the use of the storage medium by the electronic device is not permitted, an alarm is sounded and a management terminal for an administrator connected to the management server is sent to Configured as a media management system for notification.

In the present invention, preferably, when a user who has a user card storing a user ID unique to the user enters and exits a specific place and uses an electronic device installed in the specific place , Medium management for permitting or restricting use of a storage medium for entering and exiting the place and data held by the user and an electronic device capable of handling the storage medium by executing a program on the management server A system,
A user ID reader for reading the user ID of the user card is installed at the entrance / exit of the specific location, and the tag information of the IC tag of the storage medium and the user card are stored in the specific location. An IC tag wireless reader antenna that reads the user ID is installed, and the read information of the user ID reader and the IC tag wireless reader antenna is sent to the management server,
Each of the storage media includes an IC tag having unique medium management information and unique identification information for managing the storage medium, and the electronic device has an IC tag reader for reading the tag information of the IC tag,
The management server stores an IC tag management DB that stores the IC tag information and the medium management information of the storage medium in association with each other, and a history regarding the usage status of the storage medium corresponding to the medium management information of the storage medium. Medium management DB for storing, device management DB for storing unique identification information of a storage medium that can be used in correspondence with electronic device management information unique to each of a plurality of electronic devices, and the user entering and exiting the specific location Corresponding to the user ID, a medium bring-in / take-out management DB that stores unique identification information of the storage medium possessed by the user, and a user ID of the user who goes in and out of the specific place And an entrance / exit management DB for storing the entrance / exit state and the time of the user,
By executing a program on the management server;
When the tag information of the storage medium possessed by the user who has entered the specific location is read by the IC tag wireless reader antenna or the IC tag reader, the tag information of the read storage medium is stored in the medium management DB. A medium management unit for confirming whether the storage medium is registered, and
When the user who possesses the storage medium enters and exits the specific place, the user ID reader reads the user ID of the user card, and the IC tag wireless reader antenna or IC tag reader tags the storage medium A bring-in / take-out management unit that reads information and refers to the medium bring-in / take-out management DB to confirm whether the storage medium is permitted to be taken out or brought into the user;
The IC tag information read by the IC tag reader of the electronic device that the user intends to use is referred to the device management DB, and the user is permitted to use the storage medium in the electronic device. And a device management unit for determining whether or not the medium management system is configured.

In a preferred example, it has a management terminal for an administrator connected to the management server,
The IC tag wireless reader antenna reads the IC tag information of the storage medium in the specific location or reads the user ID of the user card of the user in the specific location at a certain timing, and the storage medium Or a confirmation status related to the presence of the user is configured as a medium management system for notifying the management terminal.

  Preferably, the medium further includes a medium management information corresponding to the unique identification information of the storage medium brought in or taken out by the user to or from the specific location, and a state management DB for storing a state of bringing or taking out the storage medium Configured as a management system.

  According to the present invention, it is possible to easily detect whether the storage medium has been illegally brought in or taken out, and to confirm permission / non-permission of use of the storage medium based on the detection. As a result, it is possible to limit the use of the storage medium that is illegally brought in, and to prevent leakage of data stored in the storage medium.

The figure which shows the structure of the medium management system in one Example. 1 is a diagram illustrating an overall outline of a medium management system according to an embodiment. The conceptual diagram which shows the example which utilizes an electronic device using the storage medium with an IC tag in one Example. The storage medium confirmation operation | movement flowchart figure in the room entrance management system of one Example. The operation | movement flowchart figure of the IC tag monitoring process in one Example. The operation | movement flowchart figure of the IC tag monitoring process in one Example. The operation | movement flowchart figure of the confirmation of the electronic device which can be used in one Example, and use restrictions. The figure which shows the memory structure of the IC tag in one Example. The figure which shows the structure of IC tag management DB in one Example. The figure which shows the structure of medium management DB in one Example. The figure which shows the structure of user management DB in one Example. The figure which shows the structure of apparatus management DB in one Example. The figure which shows the structure of state management DB in one Example. The figure which shows the structure of carrying-in / taking-out management DB in one Example. The figure which shows the structure of failure recording DB in one Example. The figure which shows the structure of entrance / exit management DB in one Example.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 shows a configuration of a medium management system according to an embodiment. The medium management system according to the present invention includes a storage medium management system 11 and an entrance management system 13 which are constructed in the management server 1. The various functions of the storage medium management system 11 and the room entry management system 13 are realized by a system construction program and an application program being executed by the CPU of the server 1.

  The management server 1 is provided with a biometric reader 21 for performing biometric authentication such as veins of users (entrances, storage media holders, etc.) via a wireless or wired network 3 and an IC tag of an admission card with an IC tag. An IC tag reader 22 for reading, an IC tag wireless reader antenna 23 for reading an IC tag of a medium with an IC tag, a PC (personal computer) 24 with an IC tag reader, and a remote work management terminal 25 are connected. A management terminal 14 used by the administrator is also connected to the management server 1.

Here, the biometric reader 21 and the IC tag reader 22 are provided in the entrance / exit door of the server room, and the IC tag wireless reader antenna 23 is installed on a desk or a wall in the server room. Also, a plurality of usable electronic devices such as PCs are arranged in the server room, and each has an IC tag reader that detects an IC tag of a storage medium.
Further, the admission card with an IC tag is a user card permitted to be used by the user, and a user number (user card number) unique to the user is stored in the IC tag. The IC tag-attached medium is a storage medium such as a flexible disk or a USB memory, and information shown in FIG. 7 is stored in the IC tag fixed thereto (this will be described later).

  The storage medium management system 10 has an IC tag information management DB 121, a medium management DB 122, an authority / restriction setting DB 123, a device management DB 124, a state management DB 125, a carry-in / take-out management DB 126, and a failure record DB 127 as DBs (databases). Corresponding to these DBs, the IC tag information management unit 111, the medium management unit 112, the authority / restriction setting unit 113, the device management unit 114, the status management unit 115, the carry-in / take-out management unit 116, the failure record A portion 117 is included. Each management unit 111 to 117 performs a search of each corresponding DB and updates information in the DB. The configuration of each DB will be described later with reference to FIGS.

  The entrance management system 13 includes an entrance management system processing unit 131, a reader / floor management DB 132, an entrance / exit management DB 133, a card number management DB 134, and a biological information management DB 135. The entrance management system processing unit 131 includes each DB. The person who enters and leaves the room and the storage medium possessed by the person are monitored and managed. Here, the configurations of the reader / floor management DB 132, the entrance / exit management DB 133, the card number management DB 134, and the biometric information management DB 135 will be described later.

  The storage medium management system 11 and the room entry management system 13 share and cooperate with unique information stored in each management DB, and a storage medium that can be used based on IC tag information in which various information related to the storage medium is recorded, and Management of usage restrictions or permission of electronic devices such as PCs to be used. In addition, by referring to the related management DB, the tag information of the IC tag fixed to the user (storage medium bringer) and the storage medium is read from a wireless reader or the like, and the use restriction or permission of the storage medium is confirmed. I do.

FIG. 2 shows an overall overview of the media management system.
In this medium management system, when a user enters or leaves a server room, which is a monitoring area, and a storage medium owned by the user or an electronic device such as a PC is used, the presence or absence of the possessed storage medium and its use And whether to allow or disallow use of electronic devices.

At the entrance / exit of the server room, a wireless reader for detecting an IC tag of an admission card or an IC tag of a storage medium is provided. When entering the server room, when an operator (user) holds the admission card over the reader, the reader reads the user number from the IC tag of the admission card, and the read tag information and the entry management system 13 The contents of the card number management DB are collated to determine whether the worker is permitted to enter the room. Further, the read user number and the entry time of the worker are stored in the entry / exit management DB 133.
The IC tag of the storage medium possessed by the user is read by the IC tag wireless antenna 23 installed in the server room. Based on the tag information read from the IC tag (FIG. 7), the management DB related to the storage medium management system 11 is referred to, whether or not the storage medium is brought in, whether or not use of the storage medium is permitted, and can be used. Determine the presence or absence of electronic equipment.

  After entering the room, during the work of the worker, the IC tag of the entrance certificate possessed by the worker is detected by a wireless antenna for IC tag at regular time intervals (for example, every 5 seconds) and the occupant's occupancy state is confirmed. In parallel with the detection of the IC tag of the worker's admission card, the IC tag wireless antenna detects the IC tag of the storage medium and the IC tag fixed to the electronic device, and the management DB related to the detected tag information By checking this information, the presence / absence of a storage medium or an electronic device is also confirmed. If the tag information and the management DB information do not match as a result of the collation, the management terminal 14 and the remote work management terminal 25 are notified of an abnormal state. In addition to the confirmation of the IC tag information on the admission card or when the admission person does not have an admission card, the biometric reader 21 reads the biometric information of the admission person at the time of admission, Only when the biometric information of the user registered in the biometric information management DB 135 is collated and the two match, the user is allowed to enter the building.

  When the operator brings the storage medium into the server room, the IC tag information of the admission card read by the IC tag reader 22 installed in the door is linked with the IC tag information of the storage medium read by the reader antenna 23. Thus, the worker and the storage medium brought in are related and stored in the medium carry-in / take-out management DB 126. At this time, the information regarding the brought-in storage medium is collated with the information about the storage medium scheduled to be brought-in registered in the medium management DB 122 in advance to confirm whether the brought-in storage medium is permitted. As a result of the collation, if the information on the storage medium registered in advance and the storage medium actually brought in do not match, it is determined that an entry error has occurred, and an alarm is notified to the administrator terminals 14 and 25.

When the worker leaves the server room, the admission card is held over the reader installed on the door in the same manner. At this time, the IC tag information of the admission card read by the IC tag reader 22 is stored in the entrance / exit management DB.
Reflected in 133, the worker and the time when the worker leaves the room are recorded as a log. When the IC tag wireless tag antenna 23 installed near the door detects the IC tag information of the storage medium possessed by the worker, the IC tag information is registered in the medium management DB 122 in advance. The information of the storage medium scheduled to be brought in is checked to confirm whether the storage medium to be taken out is permitted. As a result of the collation, if the information of the storage medium registered in advance and the storage medium actually brought in do not match, it is determined that the takeout has been violated, the door is not opened, and an alarm is given to the administrator terminals 14 and 25 Be notified. On the other hand, the properly taken-out medium is newly stored in the medium carry-in / take-out management DB 126.

FIG. 3 is a conceptual diagram illustrating an example of using an electronic device using a storage medium with an IC tag.
When the user plans to use a certain electronic device, the administrator registers information related to the electronic device to be used in advance in the device management DB 123 from the management terminal 14 or 25. In this case, the electronic device information 1101 specific to the electronic device to be used and the information of the IC tag added to the storage medium to be used are registered (as medium information 1103).
When the user uses the electronic device, the device management unit 113 causes the IC tag reader connected to the electronic device 24 to successively read the IC tag of his / her admission card and the IC tag of the storage medium. By comparing the contents of the IC tag information read from the IC tag reader connected to the electronic device with the contents of the device management DB 123, the consistency between the two is confirmed. If the two match as a result of the verification, the user is permitted to use an electronic device registered in advance. On the other hand, if the two do not match, the use of the electronic device is not permitted and the usage restriction is not released.

Next, the data configuration of each management DB will be described with reference to FIGS.
FIG. 7 shows a storage configuration of the IC tag added to the storage medium. The storage information of the IC tag indicates the unique information 701 of the IC tag, the type 702 indicating the type of the storage medium, the registration date 703 indicating the registration date of allocation of the unique information of the IC tag to the storage medium, and the use start date of the storage medium. The information includes a use start date 704, a unique management number 705 assigned to each storage medium for managing the storage medium, and other information indicating the use of the storage medium as other 706.

  FIG. 8 shows the configuration of the IC tag management DB. The IC tag management DB 121 is a DB for managing the storage information of the IC tag. The IC tag unique information 801, the type 802 indicating the type of the storage medium, the registration date 803, the use start date 804, and the management number 805 unique to the storage medium. , Registration deletion date 806, disposal date 807 indicating the disposal date of the recording medium, and other information 808.

FIG. 9 shows the configuration of the medium management DB. The medium management DB 112 is a DB that manages storage media.
Medium management number 901, type 902, registration date 903, use start date 904, IC tag usage 905 indicating whether or not the IC tag is attached to the storage medium, registration deletion date 906, medium discard date 907, The other pieces of information 908 are stored.

  FIG. 10 shows the configuration of the user management DB. The user management DB 123 is a DB that registers and manages a user and an electronic device such as a PC used by the user. The user management DB 123 has a user number 1001 unique to the user and unique information of the electronic device permitted to be used. And electronic device information 1002 indicating the date and time when the user used the electronic device, and information of a usage date 1003, a usage start time 1004, and a usage end time 1005 are stored. Here, the user number 1101 is the same as the user card number 1303 unique to the user.

  FIG. 11 shows the configuration of the device management DB. The device management DB 124 is a DB that manages an electronic device used by a user. The device management DB 124 is used for electronic device information 1101 indicating information unique to the electronic device, a use authority 1102 indicating whether or not the device can be used, and the electronic device. A plurality of pieces of storage medium information 1103 indicating the storage medium and other information 1104 are stored. The storage medium information 1103 is unique information read from an IC tag added to the storage medium.

  FIG. 12 shows the configuration of the state management DB. The state management DB 125 is a DB for managing the state of the storage medium. Each information of the unique information 1201 of the IC tag, the state 1202 indicating the state of the storage medium, the state details 1203 indicating the details of the state 1202, and the medium management number 1204 Remember. The status 1202 includes information indicating whether the storage medium is in the room, waiting to be brought in, exited, or an error.

  FIG. 13 shows the configuration of the medium bring-in / take-out management DB. The medium bring-in / take-out management DB 126 is a DB that manages taking out or bringing in a storage medium from or to a predetermined place such as a room. The IC tag specific information 1301 indicates whether the take-out or carry-out is performed. , Information of a user card number 1303 indicating a number unique to the user, a user name 1304, and a medium management number 1305 indicating a management number of a storage medium permitted to the user is stored.

  FIG. 14 shows the configuration of the failure record DB. The failure record DB 127 is a DB for storing failure information related to bringing in, taking out, and using a storage medium with an IC tag. IC tag specific information 1401, status 1402, failure occurrence date 1403, failure recovery date 1404, failure recovery date 1404 Detailed information 1405 is stored.

  FIG. 15 shows the configuration of the entrance / exit management DB. The entry / exit management DB 133 manages users entering and leaving the server room, and stores a user number, a state indicating entry or exit, entry time, and exit time. The user number is IC tag information of an admission card that is detected by the IC tag reader 22 every time the user passes the door of the server room. The time when the IC tag is detected by the IC tag reader is used as the entry / exit time. When a person who is not permitted to enter the room (illegal person) attempts to enter the room, the person is rejected. In this case, “error” is recorded in the state of the management DB 133.

  The card number management DB 134 manages all users who have issued admission cards, and corresponds to the user number (user card number) unique to the user, the user's name, home address, home Memorize contact information, assigned workplace, work address, contact information (telephone, email), etc. This card number management DB 134 is used for collation with the IC tag information of the admission card detected when entering the server room.

  The biometric information management DB 135 registers the biometric information of the user, for example, finger vein information, corresponding to the user number. This biometric information management DB 135 is used for collation with the biometric information of the user detected by the biometric reader 21 when entering the server room.

  The reader / floor management DB 132 manages a place (floor) where a plurality of IC tag readers 23 are arranged. IC tag information unique to each IC tag and information on a room where the IC tag is arranged (for example, 3F West room No. 1, 3F West room No. 2, etc.) are registered in association with each other.

Next, the storage medium confirmation processing operation when entering the server room will be described with reference to the flowchart of FIG. 4 and FIGS. 1 and 2.
In the medium management system, when a user (worker) enters a server room, which is a monitoring area, and a storage medium owned by the user or an electronic device such as a PC is used, the presence / absence of the possessed storage medium and It manages whether or not it can be used, and permission and disapproval of available electronic devices.

  An IC tag reader 22 and a biometric reader 21 for detecting an IC tag of an admission card are provided at the entrance / exit of the server room (near the door). When the user enters the server room, the IC tag information of the admission card is read by the reader when the card is placed over the IC tag reader. The biometric reader 21 reads the user's biometric information.

The room entry management system processing unit 131 refers to the card number management DB 134 or the biometric information management DB 135 for the IC tag information (including the user number) read by the IC tag reader 22 or the biometric information acquired by the biometric reader 21. Then, it is determined whether the information is registered (S401). If the result of the determination is that the user has not been registered, an alarm installed near the door is sounded to reject the user's entry (S412), and error information regarding the user is recorded in the entry / exit management DB 133 ( S413). After all persons leave the server room, the room entry information in the room management database is initialized (S414).
As a result of the determination (S401), if the IC tag information or the biological information is registered in the management DB 134 or 135, the acquired user number and information such as the room entry time are newly registered in the entrance / exit management DB 402, The management DB 133 is updated (S402).

  When the user brings a storage medium, the IC tag information of the storage medium is read by the IC tag wireless reader antenna 23 installed near the door. Then, the medium management unit 112 refers to the medium management DB 122 and determines whether or not the storage medium brought by the user is permitted (S403). If it is not registered as a result of the determination, the door is unlocked (since the user is allowed to enter the room) (S404).

  If the IC tag information of the storage medium is registered in the medium management DB 122 as a result of the determination, it is determined whether the IC tag information of the brought-in storage medium has been read within the time (S405). If not, an alarm is sounded in the same manner as above (S412).

Next, it is determined whether or not the storage medium brought in matches the user (S406). If the result of determination is no, an alarm is sounded in the same manner as described above (S412).
If the result of this determination is correct, it is next determined whether the medium bring-in registration information is the last (S407). If the result of the determination is the last, the entrance / exit management DB is updated (S408), the door is unrotated (S409), and entry is permitted.

Next, with reference to FIG. 5A, FIG. 5B and FIG. 1, FIG. 2, the monitoring operation of the storage medium handled in the server room after entering the room will be described.
The purpose of this processing is to monitor the occupant's occupancy state and confirm the presence of a carry-in storage medium after the user (worker) enters the server room.
First, the room entry management system processing unit 131 refers to the room entry / exit management DB 133 and determines whether the room entry information has been updated (S502). As a result, if it is updated (that is, when a new user enters or leaves the room), it is judged whether the room is entered or left by looking at the “state” of the entry / exit management DB 133 (S503). As a result, if the user exits, the medium management unit 112 refers to the medium management DB 122 to determine whether the storage medium to be taken out by the user is registered (S511). If the storage medium is not registered, the process proceeds to process (3). On the other hand, if the storage medium is registered, the IC tag information of the storage medium is read by the IC tag reader (S512), and it is determined whether the IC tag information is registered to be taken out (S513). If it is not registered as a result of the determination, the process proceeds to process (1). On the other hand, if registered, the state management unit 115 updates the state management DB 125 (S514).

  In the server room, the IC tag wireless reader antenna 23 installed detects the IC tag of the entrance certificate possessed by the worker at regular intervals (for example, every 5 seconds), and the presence status of the person is confirmed. Is notified to the management terminals 14 and 25. The IC tag wireless reader antenna 23 can also detect the IC tag of the storage medium in parallel with the detection of the IC tag of the worker's admission card. The IC tag of the storage medium can also be detected by an IC tag reader connected to the PC 24.

  As a result of the entry / exit determination (S503), in the case of entry, the medium management unit 112 determines whether the storage medium scheduled to be taken out is registered in the medium management DB 122 (S504). As a result of this determination, if not registered, the process returns to step S502, and if registered, it is determined whether the IC tag information has been acquired by the IC tag wireless reader antenna 23 (S505). If the IC tag information has been acquired as a result of this determination, then the carry-in / take-out management DB 116 refers to the medium carry-in / take-out management DB 126 and acquires the IC tag information obtained from the storage medium. It is determined whether it is scheduled to be brought in (S506). As a result of this determination, if it is determined that it is scheduled to be brought in, the state management unit 115 registers the IC tag information of the storage medium in the state management DB 125 and updates its contents (S507). Thereafter, if the storage medium scheduled to be brought in is not the last (S508), the process returns to step S505.

If the determination in steps S505 and S506 is negative, the process proceeds to step S521 and subsequent steps (see FIG. 5B). That is, for a storage medium for which IC tag information has not been acquired or a storage medium that is not scheduled to be brought in, this is notified to the management terminal 14 or 25 (S521), and the operator uses (or uses) The alarm is sounded to the PC 24 (scheduled). In addition, the failure recording unit 117 records the error state and the date and time of occurrence thereof in the failure recording DB 127 corresponding to the acquired IC tag information (S522). Thereafter, it is determined whether or not to cancel the alarm that is ringing (S523), and when the administrator determines that the problem with the storage medium has been resolved (for example, when the administrator permits the storage medium to be brought in) The administrator issues an alarm release instruction from the management terminal (S524). If there is no instruction to release the alarm, the alarm waiting state continues (S527).
Thereafter, the carry-in / take-out management unit 116 determines whether or not to modify the medium carry-out / take-out management DB 126 (S525). S526). That is, “classification” is corrected to “carry-in” corresponding to the IC tag information of the storage medium. In addition, the failure recording unit 117 records the recovery date and time corresponding to the IC tag information in the failure recording DB 127.

  Although the flowchart regarding the operation when the worker leaves the server room is not shown, it can be understood from the above description. That is, when leaving the room, when the operator holds the admission card over the IC tag reader 22, the IC tag information of the admission card is read by the IC tag reader 22 and reflected in the room management database 133 by the room management system processing unit 131. The person leaving the room and the time when the person left the room is recorded as a log. When the IC tag wireless tag antenna 23 installed near the door detects the IC tag information of the storage medium possessed by the worker, the IC tag information is registered in the medium management DB 122 in advance. The information of the storage medium scheduled to be brought in is checked to confirm whether the storage medium to be taken out is permitted. As a result of the collation, if the information of the storage medium registered in advance and the storage medium actually brought in do not match, it is determined that the takeout has been violated, the door is not opened, an alarm sounds, and the management terminal 14 And 25. On the other hand, the media that has been properly taken out is stored in the media carry-in / take-out management DB 126 by the carry-in / take-out management unit 116.

Next, with reference to FIG. 6, FIG. 1, and FIG. 3, the processing operation for checking available electronic devices and restricting their use will be described.
As a premise, the management DBs 121 to 126 are already prepared. For example, with regard to the user management DB 123, the administrator inputs a user number and electronic device information permitted to be used from the management terminal 14 or 25 in advance in order to permit each user to use the electronic device. Under the control of the authority / restriction setting unit 113, electronic device information permitted to be used is registered in the user management DB 123 in association with the input user number. In addition, under the control of the device management unit 114, a device management DB 124 in which storage media permitted to be used for available electronic devices is registered.

  Now, the user who is permitted to enter the server room sets it in an electronic device such as the PC 24 that uses the storage medium he / she has brought or stored in his / her desk (S601). Then, the IC tag reader reads the IC tag information of the storage medium (S602). Then, the medium management unit 112 refers to the storage medium DB 122 and determines whether the IC tag information of the storage medium is registered (S603). If the information of the storage medium is not registered as a result of the determination, an alarm is sounded and a warning screen is displayed on the screen of the PC 24 to be used (S606). Further, the PC 24 is forcibly locked so that it cannot be used (S607). In addition, an alarm is transmitted to the management terminal 14 or 25. Thereafter, the PC enters a lock release waiting state, and cannot be used unless the lock is released from the management terminal (S608).

On the other hand, if the information of the storage medium is registered in the storage medium DB 122 as a result of the determination, the device management unit 114 refers to the device management DB 124 for using the IC tag information of the storage medium. It is determined whether the storage medium set in the PC is a storage medium permitted to be used (S604). If the result of this determination is that the storage medium is set to an unauthorized PC, an alarm is sounded and the use of the PC is forcibly locked (S606-608), as described above. On the other hand, if it is set in the permitted PC, use of the PC is started (S605).
According to this embodiment, it is possible to determine whether the storage medium is permitted to be used and to warn the use of the unauthorized storage medium by restricting the use of the storage medium. In addition, it is possible to determine whether or not an electronic device such as a PC that handles the storage medium is permitted to use the storage medium, and to notify a non-permitted electronic device by restricting the use of the storage medium.

As described above, according to the present embodiment, it is possible to restrict the use of a non-permitted storage medium by determining whether or not the use of the storage medium is permitted. In addition, by determining whether or not an electronic device such as a PC that handles the storage medium is a device that is permitted to be used, it is possible to restrict the use of the storage medium for an unauthorized electronic device. In addition, the presence of a storage medium existing in an area such as a room to be monitored can be confirmed at a certain timing.
In addition, by confirming the person entering or leaving the area to be monitored and the storage medium possessed by the person entering or leaving the room, the permission or non-permission of bringing or taking out the storage medium to the owner is monitored. Is possible. In addition, the worker enters a specific area such as a room to be monitored, the worker who uses the electronic device, the electronic device to be used, the use permission of the storage medium to be used, and the location confirmation are performed, It is possible to manage the location of a storage medium, to carry out unauthorized use and take out, and to prevent unauthorized use.

In addition, this invention is not limited to the said Example, It can implement with various deformation | transformation and application.
For example, the names of the processing units and DBs in the medium management system shown in FIG. 1 are examples, and may be called by other names. Even in such a case, the same functions and operations as those described in the above embodiments are included in the scope of the present invention.

  The present invention can be applied to management of entering and leaving a place where management of information security is required. At the same time, it is possible to limit the use and management of the storage medium for storing electronic data by monitoring the carry-in and take-out of the storage medium.

1: Management server 11: Storage medium management system 13: Entrance management system 3: Network 21: Biometric reader 22: IC tag reader 23: IC tag wireless reader antenna 24: PC (personal computer) 25: Remote operation management terminal 121: IC tag information management DB 122: Medium management DB 123: Authority / restriction setting DB 124: Device management DB
125: State management DB 126: Medium bring-in / take-out management DB 127: Failure record DB
111: IC tag information management unit 112: Medium management unit 113: Authority / restriction setting unit 114: Device management unit 115: Status management unit 116: Bring-in / out management unit 117: Failure recording unit 131: Entrance management system processing unit 132: Reader / floor management DB
133: Entrance / exit management DB 134: Card number management DB 135: Biometric information management DB

Claims (5)

When a user uses a plurality of storage media for storing data and an electronic device capable of handling the storage medium, the storage server and the electronic device are executed for the user by executing a program on a management server. A media management system that permits or restricts the use of
Each storage medium includes an IC tag having unique medium management information and unique identification information for managing the storage medium, and the electronic device has an IC tag reader for reading the tag information of the IC tag, and a user-specific A user ID reader for reading the user ID of the user card holding the user ID,
The management server includes an IC tag management DB that stores the IC tag information and the management number of the storage medium in association with each other, and permits the user to use the user ID corresponding to the user ID unique to the user. A user management DB that stores electronic device management information unique to the electronic device, and a device that stores unique identification information of a storage medium that can be used corresponding to the electronic device management information unique to each of the plurality of electronic devices Has a management DB,
By executing a program on the management server;
When a user uses an electronic device, whether the user is permitted to use the electronic device with reference to the user management DB for the user ID read by the user ID reader Authority / restriction setting section to determine
The IC tag information read by the IC tag reader of the electronic device that the user intends to use is referred to the device management DB, and the user is permitted to use the storage medium in the electronic device. A device management unit that determines whether or not
A medium management system comprising: As a result of the determination by the device management unit, if it is not permitted to use the storage medium in the electronic device, an alarm is sounded and a notification is sent to the management terminal for the administrator connected to the management server. 2. The medium management system according to claim 1, wherein When a user who has a user card storing a user ID unique to the user enters and exits a specific place and uses an electronic device installed in the specific place, the program is executed on the management server A medium management system for permitting or restricting use of a storage medium that stores data that the user enters and exits and data held by the user, and an electronic device that can handle the storage medium,
A user ID reader for reading the user ID of the user card is installed at the entrance / exit of the specific location, and the tag information of the IC tag of the storage medium and the user card are stored in the specific location. An IC tag wireless reader antenna that reads the user ID is installed, and the read information of the user ID reader and the IC tag wireless reader antenna is sent to the management server,
Each of the storage media includes an IC tag having unique medium management information and unique identification information for managing the storage medium, and the electronic device has an IC tag reader for reading the tag information of the IC tag,
The management server stores an IC tag management DB that stores the IC tag information and the medium management information of the storage medium in association with each other, and a history regarding the usage status of the storage medium corresponding to the medium management information of the storage medium. Medium management DB for storing, device management DB for storing unique identification information of a storage medium that can be used in correspondence with electronic device management information unique to each of a plurality of electronic devices, and the user entering and exiting the specific location Corresponding to the user ID, a medium bring-in / take-out management DB that stores unique identification information of the storage medium possessed by the user, and a user ID of the user who goes in and out of the specific place And an entrance / exit management DB for storing the entrance / exit state and the time of the user,
By executing a program on the management server;
When the tag information of the storage medium possessed by the user who has entered the specific location is read by the IC tag wireless reader antenna or the IC tag reader, the tag information of the read storage medium is stored in the medium management DB. A medium management unit for confirming whether the storage medium is registered, and
When the user who possesses the storage medium enters and exits the specific place, the user ID reader reads the user ID of the user card, and the IC tag wireless reader antenna or IC tag reader tags the storage medium A bring-in / take-out management unit that reads information and refers to the medium bring-in / take-out management DB to confirm whether the storage medium is permitted to be taken out or brought into the user;
The IC tag information read by the IC tag reader of the electronic device that the user intends to use is referred to the device management DB, and the user is permitted to use the storage medium in the electronic device. A medium management system comprising: a device management unit for determining whether or not. Having a management terminal for an administrator connected to the management server;
The IC tag wireless reader antenna reads the IC tag information of the storage medium in the specific location or reads the user ID of the user card of the user in the specific location at a certain timing, and the storage medium The medium management system according to claim 3, wherein the management terminal is notified of the confirmation status regarding the presence of the user or the presence of the user. The information processing apparatus further comprises a state management DB for storing medium management information and a state of bringing in or taking out the storage medium corresponding to the unique identification information of the storage medium brought in or taken out by the user to the specific place. Item 3. The medium management system according to item 3.

Images