JPH10207778A - Method for protecting data security and device therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve the security of data in an information processor. SOLUTION: A password generating means 1-40 generates a password (a) by using one part of information in a file header in an original data file 1-1, and sets it as a key for a data destruction program 1-2. Then, the data destruction program 1-2 and the data are stored in a data file 1-3 in this order. Next, at the time of reading data in the file from a data file 2-1, a password generating means 2-31 generates a password (b) by using one part of information in a file header, and sets the password (b) on a shared memory. At the time of reading data, the data destruction program is automatically activated, and the password (a) set in it is compared with the password (b), and when they are not coincident, the data in the file on a storage medium are destroyed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a data security method and a data security device.

[0002]

2. Description of the Related Art Conventionally, data security in data processing by an information processing apparatus is generally set by setting a password and restricting access to the data, or by encrypting and storing the data. It is done by.

For example, Japanese Patent Application Laid-Open No. Hei 6-314135 provides a means for automatically updating a password for restricting the execution of a specific task in accordance with a date update.
There has been proposed a data processing apparatus in which the security of security is enhanced by notifying the password creation method so that even if the password is leaked, the password cannot be used the next day.

In JP-A-4-160461, the same password table is prepared for the inside of the processing apparatus and for the operator, and the password is dynamically changed according to the date and the internal memory value in the processing apparatus. At the end of the process, a process number is printed and the operator is notified of the password set by the system with an indirect symbol, so that the correct password can be referred from the password table and the password is dynamically changed to perform security protection. The device is proposed.

Further, Japanese Patent Application Laid-Open No. 4-260989 discloses that
A data storage program that protects data on an information recording medium by scrambling, encryption, etc., records the data, and reads a protected data on the device (a program placed on the device to protect the data. If there is an unauthorized access to the program for analyzing and restoring the data, the load program itself is destroyed by the data destruction means, and a processing device for preventing the analysis of the protection analysis method of the data recorded on the information recording medium is required. Proposed.

[0006]

However, among the above-mentioned conventional data confidential methods, the first method and the second method are confidential only with a password. Even if it is changed
If the method of determining the password is leaked to a third party, there is a problem that the data can be freely accessed and the data can be leaked / falsified.

In the third method, the security of the data itself is not protected, and a program for restoring the scramble is used in order to make it more difficult to analyze the scramble and encryption methods performed on the data. In the case of unauthorized access, the program is destroyed and cannot be analyzed, so the data itself remains, so if it can be analyzed by other means, the data scrambling method can be solved. There is a point.

[0008] An object of the present invention is to improve the security by adopting a configuration for destroying the data itself when there is unauthorized access to the data.

According to the data security method of the present invention, a password is generated using a part of information in a file header, set as a key in a data destruction program, and stored in an external storage together with the actual data. When the data in the file is read from the external storage medium, a password is generated using a part of the information in the file header, and the password is generated by the difference from the key-set password. It is characterized by determining whether or not to destroy data.

The data security apparatus of the present invention comprises a password generation means for generating a password by using a part of information in a file header, a data destruction program for destroying actual data stored in a file, Key setting means for setting a password in the data destruction program as a key; data storage means for storing actual data together with the data destruction program in an external storage medium when storing data relating to the file header in a file; When reading the data of, the password destruction means for generating a password using a part of the information in the file header, and a password setting means for setting the password on the shared memory, the data destruction program, When loaded into the memory, it is automatically started and the set The difference of the generated password to the word, characterized in that determining whether to break the actual data.

More specifically, in the present invention, a password is generated by a password generation unit based on a part of information in a file header, and a data destruction program stored in an external storage device is stored by a key setting unit. At the same time, the key is set in the data destruction program using the password as an operation release key of the data destruction program. When storing the data in the file, the data storage unit sets a flag indicating that the file is a security file in the file header, and stores the data in the external storage medium together with the data destruction program set with the operation release key.

Next, when reading the data in the file from the external storage medium, the file reading means first reads the file header, and if the flag indicating that the file is a security file is set in the file header, the file reading means reads the file header. A password is generated by a password generation unit based on a part of the information in the header, and the password is set in a named shared memory that can be referred to by a specific name on the memory by the password setting unit. Then, the data portion in the file is read by the file reading means.

At this time, when the data destruction program incorporated at the head of the data portion is read by the file reading means, the operation starts automatically because the data destruction program is programmed to be automatically started. The data storage program first checks whether there is a shared memory that can be referred to by a specific name, and if there is no shared memory, operates to destroy the data on the file on the external storage medium. Even if there is a shared memory, if the value set in the shared memory is not the same as the operation release key value set in the data destruction program itself, the operation is similarly performed to destroy the data. On the other hand, if the values are the same, the process ends without doing anything.

As described above, when an attempt is made to access a file by an unauthorized system or an unauthorized tool, the data itself stored on the external storage medium is destroyed.
Even if a file is illegally copied and taken out, the confidentiality of data can be maintained. In addition, since data security can be secured without the operator setting a password or the like, there is no need to worry about leakage of the password.

[0014]

Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram of a data security device according to an embodiment of the present invention, showing a part until data subjected to security measures is stored in an external storage medium.

The data security apparatus shown in FIG. 1 includes an original data file 1-1 containing data to be security-protected and a data destruction for destroying data in the data file 1-3 in case of unauthorized access. It comprises a program 1-2, a data file 1-3 for storing data with data security protected according to the present invention, and a first control unit 1-4. These original data file 1-1, data destruction program 1-2, data file 1-3, and first control unit 1-4 are stored in an external storage medium.

The first control unit 1-4 stores the original data file 1
-1 for generating a password using a part of the information in the file header of -1 and a key for the data destruction program 1-2 using the password generated by the password generating means 1-40 as an operation release key. Data storage means 1-42 for storing the key setting means 1-41 to be set, the data destruction program 1-2 set with the key, and the complete data portion of the original data file 1-1 in an external storage medium.
And loaded into the CPU at the time of execution.

FIG. 2 is a continuation of the part shown in FIG. 1 and shows a data file 2-1 (FIG.
FIG. 3 is a block diagram showing a part for accessing an external storage medium in which 1-3) is stored, wherein a data file 2-1;
A memory 2-2 in which a named shared memory is set;
And a control unit 2-3. The control unit 2-3 reads the data file from the external storage medium 2-1 with a file reading unit 2-30 and a part of the information in the file header of the data file read by the file reading unit 2-30. A password generating means 2-31 for generating a password using the password setting means 2-3; and a password setting means 2-3 for setting a named shared memory in the memory 2-2 and setting the password generated by the password generating means 2-31 as a key.
And loaded into the CPU from an external storage medium at the time of execution.

FIG. 4 is a flowchart showing the processing performed by the part shown in the block diagram of FIG.

In FIG. 4, in the first step (a),
The reading routine of the control unit 1-4 executes the processing of the original data file 1- 1 in which the data to be protected is stored.
1 is read together with the file header, and the file header is passed to the password generating means 1-40.

In the second step (b), the password generating means 1-40 generates a password a using the file registration date or the update date in the file header read in the first step (a). The information to be referred to when the password is generated may be information other than the registration date or the update date, such as a file name, and the information to be referred may be dynamically changed, such as being different between the first time and the second time. Furthermore, the password to be generated may use the referenced value itself, or may convert it according to a specific rule such as dropping the latter 4 bits out of the 8 bits of the character, or aligning the number of bits to an even number.

The key setting means 1-41 reads the data destruction program 1-2 stored in the external storage device in the third step (c), and in the fourth step (d)
The password a generated in the second step (b) is set as an operation release key in the data exceptional program 1-2 read in the third step (c).

The data storage means 1-42 sets a flag indicating that the file is a security file and a flag indicating a password generation method in the file header read in the first step (a) (fifth step (e)). )), The data destruction program 1-key set in the fourth step (d)
The file header created in the second and fifth steps (e) is written in the data file 1-3 (sixth step (f)), and the setting process of the file converted into the security format is completed.

The specific structure of the file format in the sixth step (f) will be described with reference to FIG. 3. First, the file header created in the fifth step (e) is used as the file header section 3-1 as the data file 1-.
3 is written at the top. Next, the data destruction program keyed in the fourth step (d) is stored in the data section 3-2.
Is written to the leading data exception program section 3-20, and finally the actual data is written to the actual data section 3-21.

Next, the operation when the data file 2-1 is accessed will be described with reference to FIG. 5, which is a flowchart of the processing performed by the part shown in FIG.

In FIG. 5, in the first step (g),
When the file reading means 2-30 is the data file 2-1
File header part 3 of the file written above
In the second step (h), it is checked whether or not a flag indicating that the file is a security file is set. If not, the process proceeds to the fifth step (k) and the flag is set. If yes, go to the third step (i).

In the third step (i), the password generation means 2-31 generates the corresponding password b by referring to the password generation method flag in the file header section 3-1 read in the first step (g). I do.

In the fourth step (j), the password setting means 2-32 sets a shared memory with a name that can be referred to by a specific name in the memory 2-2, and sets the password generated in the third step (i). Set b to the named shared memory. In the fifth step (k), the file reading means 2-30 reads the data part 3-2 of the file written on the data file 2-1.

FIG. 6 shows a flowchart of the data destruction program 1-2.

When the data section 3-2 is read by the file reading means 2-30 (k), the data destruction program section 3-20 is written at the head of the data section 3-2. -2 is read first. The data destruction program 1-2 is created so that the processing is automatically started when it is read into the memory, and the processing as shown in FIG. 6 is started.

In the first step (i), the memory 2-2
Then, it is checked whether or not a named shared memory that can be referred to by a specific name is set. If there is a shared memory, the process proceeds to the second step (m). If there is no shared memory, the process proceeds to the fourth step (o), assuming that the file has been referred to on an unauthorized system or by an unauthorized tool. This is because even if only the external storage medium in which the data file 2-1 is stored is taken out, an unauthorized system such as a system that is not generated so that the security of the present invention can be performed, or a second control unit 2-3 is used. Referencing a file with an unauthorized tool without any means would destroy the data.

In the second step (m), the password b set in the shared memory checked in the first step (l) is read, and in the third step (n), the password b is read in the second step (m). Password b and FIG. 4 (d)
Is compared with the operation release key (password a) set in the data destruction program 1-2. If the values do not match, it is assumed that the file has been referred to by an unauthorized system or tool, and the process proceeds to the fourth step (o). finish. In the fourth step (o), the actual data part 3-21 written on the data file 2-1
Is rewritten to meaningless data, and the process ends.

[0032]

According to the present invention, the data destruction program is stored together with the data on the file of the external storage medium, and the data is destroyed when an unauthorized access is made. Even if the file is brought in, if the file is illegally accessed, the first effect that the data in the file on the external storage medium is destroyed to meaningless data can be obtained. This allows
You can keep files confidential.

Since the system automatically generates and checks the password, there is no need for the operator to input the password. Therefore, there is no fear that the password is leaked to a third party. The second effect that it is possible to eliminate the adverse effect that the file cannot be accessed because the file cannot be accessed.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a portion of a data security device according to an embodiment of the present invention until data subjected to security measures is stored in an external storage medium.

FIG. 2 is a block diagram showing a portion of the data security device according to one embodiment of the present invention, which accesses data subjected to security measures.

FIG. 3 is a structural diagram of a data file according to the present invention.

FIG. 4 is a flowchart of a process of a part shown in FIG. 1;

FIG. 5 is a flowchart of processing of a part shown in FIG. 2;

FIG. 6 is a flowchart of processing of a data destruction program according to the present invention.

[Description of Signs] 1-1 Original data file 1-2 Data destruction program 1-3 Data file 1-4 First control unit 1-40 Password generation unit 1-41 Key setting unit 1-42 Data storage unit 2-1 Data file 2-2 Memory 2-3 Second control unit 2-30 File reading unit 2-31 Password generation unit 2-32 Password setting unit 3-1 File header unit 3-2 Data unit 3-20 Data destruction program unit 3 -21 Actual data section

Claims (4)

[Claims] 1. A password is generated using a part of information in a file header, set as a key in a data destruction program, stored in an external storage medium together with the actual data, and stored in a file from the external storage medium. When reading data in a file, data security is used to generate a password using a part of the information in the file header and determine whether or not the actual data is destroyed due to a difference from the key-set password. Method. 2. A password generating means for generating a password by using a part of information in a file header, a data destruction program for destroying actual data stored in a file, and the data destruction using the password as a key. Key setting means for setting in a program, data storage means for storing actual data together with the data destruction program in an external storage medium when storing data relating to the file header in a file, and reading out data in the file. A password generation unit configured to generate a password by using a part of the information in the file header; and a password setting unit configured to set the password on a shared memory. Activated password and the generated password A data security apparatus characterized in that it is determined whether or not the actual data is destroyed due to a difference in the mode. 3. The data security method according to claim 1, wherein a part of the information in the file header is a creation date or an update date of the file. 4. The data security apparatus according to claim 2, wherein a part of the information in the file header is a creation date or an update date of the file.