JPH1165934A - Information processor and program storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve operability while holding secrecy by receiving and storing a cryptographic key in a memory, confirming the lapse of a normalized time from the input point of time of the cryptographic key, and decoding the secret information by the cryptographic key held in the memory. SOLUTION: An inputting means 14 receives a cryptographic key inputted from an inputting and outputting device 10, and stores it in a memory 12. A judging means 15 judges whether or not a normalized time passes since the input point of time of the cryptographic key of the inputting means 14, and judges whether or not the normalized time passes since the inputting operation of the inputting and outputting device 10 stops. A converting means 17 decodes secret information stored in a storage device 11 into a sentence by using the cryptographic key held in the memory 12, and enciphers the secret information of the sentence edited by the inputting and outputting device 10. The normalized time to be used for the processing of a judging means 15 is set by a setting means 18. Thus, the decoding and encipherment of the secret information can be attained without inputting any cryptographic key while the cryptographic key is held in the memory 12, and operability can be improved while secrecy is maintained.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing apparatus for storing encrypted confidential information, and a program storage medium for storing a program used to realize the information processing apparatus. While maintaining confidentiality,
The present invention relates to an information processing apparatus for improving operability and a program storage medium for storing a program used for realizing the information processing apparatus.

[0002] In the case of handling confidential information, the information processing apparatus employs a configuration in which the confidential information is encrypted to prevent leakage. Even small portable terminals that have recently become widespread have a high risk of leakage of confidential information due to loss or theft of the terminal, and therefore employ a configuration for encrypting confidential information.

On the other hand, if a configuration is adopted in which confidential information is encrypted, the user is forced to input an encryption key required for decryption. The input of the encryption key deteriorates the operability. From now on, while maintaining the confidentiality of confidential information,
It is necessary to build a new information processing device that realizes improved operability.

[0004]

2. Description of the Related Art When handling a file of confidential information, an information processing apparatus encrypts the confidential information in order to realize confidentiality and registers an encryption key used for the encryption in a file. Has been adopted.

[0005] Then, by adopting a configuration in which the user who requests the reference of the encrypted confidential information is requested to input the encryption key, when the user designates the encryption key and the reference of the confidential information is issued. It checks whether the encryption key entered by the user matches the encryption key registered in the file, and when it is determined that the encryption key matches, the encryption key registered in the file is used. It is designed to decrypt confidential information.

When the user edits the decrypted confidential information and then requests that the encrypted confidential information be encrypted again and stored in a file, the user is required to input an encryption key. Then, when the user specifies the encryption key and issues a request for encrypting confidential information, it checks whether the encryption key input by the user matches the encryption key registered in the file. , When determining a match, use the encryption key registered in the file,
The configuration is such that confidential information is encrypted and stored in a file.

Conventionally, when adopting this configuration, in order to maintain the confidentiality of confidential information, a user is required to input an encryption key every time a request for referring to confidential information is made. In this configuration, an encryption key is input each time information encryption is requested.

[0008]

However, according to such a conventional technique, a user must input an encryption key every time the user operates a file storing encrypted confidential information. However, there is a problem that the operation becomes complicated.

If this operation is disliked and encryption of the confidential information is neglected, there is a problem that the risk of leakage of the confidential information increases. In particular, small mobile terminals, which have recently become popular,
While there is an advantage that the work place is not limited, unauthorized operation by a third party occurs, and this risk is extremely high.

The present invention has been made in view of the above circumstances, and has been made in the case of employing a configuration in which encrypted confidential information is stored, and improves operability while maintaining confidentiality of confidential information. It is an object of the present invention to provide a new information processing device to be realized and to provide a new program storage medium in which a program used for realizing the information processing device is stored.

[0011]

FIG. 1 shows the principle configuration of the present invention. In the figure, reference numeral 1 denotes an information processing apparatus equipped with the present invention, which handles encrypted confidential information.

An information processing apparatus 1 according to the present invention comprises an input / output device 1
0, a storage device 11, a memory 12, a clock 13, an input unit 14, a determination unit 15, a deletion unit 16, a conversion unit 17, and a setting unit 18.

The input / output device 10 serves as means for interacting with the user. The storage device 11 stores the encrypted confidential information. The memory 12 temporarily stores the encryption key. The clock 13 engraves time information.

The input means 14 receives the encryption key input from the input / output device 10 and stores it in the memory 12. At this time, the input unit 14 checks the validity of the input encryption key, and may store it in the memory 12 on condition that the input encryption key is a valid encryption key. The judging means 15 judges whether or not a specified time has elapsed since the input of the encryption key by the input means 14, and whether or not the specified time has elapsed since the input operation performed by the input / output device 10 was interrupted. Judge.

The erasing means 16 erases the encryption key stored in the memory 12. The conversion unit 17 uses the encryption key held in the memory 12 to decrypt the confidential information stored in the storage device 11 into plaintext, and encrypts the confidential information in plaintext edited by the input / output device 10. The setting means 18 sets a specified time used in the processing of the determining means 15 according to the interactive processing.

Here, the functions of the information processing apparatus 1 of the present invention are specifically realized by a program, which is stored on a floppy disk or the like, or stored on a disk such as a server. The present invention is realized by installing them in the information processing apparatus 1 and operating them on a memory.

In the information processing apparatus 1 of the present invention configured as described above, when the input means 14 receives the encryption key input from the input / output device 10 and stores it in the memory 12, the determination means 15 By referring to the information, it is determined whether or not the specified time set by the setting unit 18 has elapsed since the input of the encryption key. Upon receiving the determination result, the erasing unit 16 determines whether the determining unit 15 When determining the elapse of time, the encryption key stored in the memory 12 is deleted.

In the information processing apparatus 1 of the present invention configured as described above, when the input means 14 receives the encryption key input from the input / output device 10 and stores it in the memory 12,
The determining unit 15 refers to the time information of the clock 13 to determine whether or not the specified time set by the setting unit 18 has elapsed since the input operation performed on the input / output device 10 was interrupted. In response to this determination result, the erasing means 1
6 deletes the encryption key stored in the memory 12 when the determination means 15 determines the passage of time.

As described above, in the information processing apparatus 1 of the present invention, the encryption key input by the user is stored in the memory 12 for a certain period of time.
In this configuration, while the encryption key is held in the memory 12, the user can encrypt the confidential information without inputting the encryption key. Since the confidential information can be encrypted and the confidential information can be encrypted, the operability can be improved while maintaining the confidentiality of the confidential information.

[0020]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail according to embodiments. FIG. 2 shows an embodiment of the information processing apparatus of the present invention.

Information processing apparatus 1 of the present invention according to this embodiment
Comprises an input / output device 10, a storage device 11, an erasing time setting program 20, a setting time storage area 21, an encryption key input erasing program 22, an encryption key storage area 23, and an encryption / decryption program 24. .

The input / output device 10 has a keyboard and a display screen, and serves as a means for interacting with the user. The storage device 11 includes a ciphertext file 30 for managing the encrypted confidential information, and an encryption key provided in association with the ciphertext file 30 and used for encrypting the confidential information stored in the ciphertext file 30. Key management file 31 that manages
And Here, the encryption key stored in the encryption key management file 31 may be further encrypted by itself, but here, for convenience of explanation, it is assumed that the encryption key is not encrypted.

The erasure time setting program 20 is installed via a floppy disk, a line, or the like, and sets the erasure time of the encryption key. The set time storage area 21 stores a set value of the erase time set by the erase time setting program 20.

The encryption key input erasure program 22 is installed via a floppy disk, a line, or the like.
Executes input and deletion of the encryption key. Encryption key storage area 23
Stores the encryption key input by the encryption key input deletion program 22.

The encryption / decryption program 24 is installed via a floppy disk, a line, or the like, encrypts plaintext confidential information and stores it in the ciphertext file 30, or encrypts confidential information encrypted from the ciphertext file 30. Is read and decrypted.

FIG. 3 shows an embodiment of a processing flow executed by the erasing time setting program 20, and FIG. 4 shows an embodiment of a processing flow executed by the encryption key input erasing program 22, FIG.
6 shows an embodiment of a processing flow executed by the encryption / decryption program 24. Next, the present invention will be described in detail according to these processing flows.

When the erase time setting program 20 is started, first, as shown in the processing flow of FIG. 3, a default value of the erase time is stored in the set time storage area 21 in step 1 first.

Subsequently, in step 2, after waiting for the user to input the set value of the erasing time, if it is detected that the set value of the erasing time is input, the process proceeds to step 3 and proceeds to step 3. The default value of the erasing time stored in the storage area 21 is rewritten to the set value of the erasing time input by the user.

Subsequently, in step 4, it is determined whether or not a termination request has been issued by the user. When it is determined that the termination request has been issued, the process is terminated, and it is determined that the termination request has not been issued. When it is determined, by returning to step 2, the set value of the erasing time stored in the set time storage area 21 is rewritten to the one designated by the user.

As described above, the erase time setting program 20 performs processing so that the set value of the erase time set by the user is stored in the set time storage area 21. On the other hand, when the encryption key input deletion program 22 is started,
As shown in the processing flow of FIG. 4, first, in step 1, waiting for the input of the encryption key from the user,
When it is detected that an encryption key is input, step 2
To check whether the input encryption key is valid by comparing the input encryption key with the encryption key managed in the encryption key management file 31. .

When it is determined that the encryption key input by the user is not valid according to the determination processing in step 2, the encryption key is not accepted, and
The process ends as it is. On the other hand, when it is determined that the encryption key input by the user is valid, the process proceeds to step 3, where the input encryption key is stored in the encryption key storage area 23, and in step 4, The set value of the erase time stored in the set time storage area 21 is read.

Subsequently, at step 5, "0" is set to the value of a variable t indicating the elapsed time, and at step 6, the time counting process is started, and the value of the variable t is sequentially incremented as time elapses. . Subsequently, in step 7, it is determined whether or not the value of the variable t has reached the set value of the erasing time read in step 4, and if it is determined that the variable t has not been reached, the process returns to step 6, and the variable When the process of incrementing the value of t is continued and it is determined that the value is reached, the process proceeds to step 8 where the encryption key stored in the encryption key storage area 23 is deleted (discarded), and the process is terminated.

As described above, when a valid encryption key is input from the user, the encryption key input and erasure program 22 stores it in the encryption key storage area 23 and, from the storage, the erasing time set by the user. When the set value elapses, processing is performed to delete the stored encryption key.

According to the processing of the encryption key input erasure program 22, the encryption key storage area 23 is stored for a specified time only.
The encryption key input by the user is held. In response to the processing of the encryption key input deletion program 22, when the encryption / decryption program 24 enters the encryption processing, first, as shown in the processing flow of FIG.
Then, when it waits for the user to input an encryption instruction command and detects that the encryption instruction command is input, the process proceeds to step 2 where the encryption key is stored in the encryption key storage area 23. To determine if they are

When it is determined that an encryption key is stored in the encryption key storage area 23 by this determination processing, the process proceeds to step 3, and the stored encryption key is used to
Encrypt plaintext confidential information edited by the user,
It is stored in the ciphertext file 30. On the other hand, the encryption key storage area 2
When it is determined that the encryption key is not held in No. 3, the process proceeds to step 4, and a message indicating that encryption is impossible is output to the input / output device 10.

When the decoding process is started, first, as shown in the process flow of FIG.
Waiting for the input of a file display command from the user and detecting the input of the file display command, the process proceeds to step 2 to determine whether the encryption key is stored in the encryption key storage area 23 or not. Judge.

When it is determined that the encryption key is stored in the encryption key storage area 23 by this determination processing, the process proceeds to step 3 where the confidential information stored in the ciphertext file 30 is read out and stored. Using the encryption key
The read confidential information of the cipher text is decrypted, and in the following step 4, the decrypted confidential information of the plain text is displayed on the display screen. On the other hand, when it is determined that the encryption key is not stored in the encryption key storage area 23, step 5
To output a message to the input / output device 10 indicating that decoding is impossible.

Thus, the information processing apparatus 1 of the present invention
In this configuration, the encryption key input by the user is held in the encryption key storage area 23 for a certain period of time and then automatically deleted, so that the encryption key is held in the encryption key storage area 23. In the meantime, the user can decrypt the encrypted confidential information without inputting the encryption key, and can encrypt the decrypted confidential information.

In the processing flow of FIG. 4, after the encryption key input and deletion program 22 stores the encryption key in the encryption key storage area 23, when the set value of the deletion time set by the user elapses, the stored encryption key is deleted. The key is deleted, but as shown in the processing flow of FIG. 7 (the difference from the processing flow of FIG. 4 is that step 7a is provided), the input / output device 10 By resetting the value of the variable t each time an operation occurs, the stored value is stored when the set value of the erasing time set by the user elapses after the input operation on the input / output device 10 is interrupted. A configuration in which the encryption key is deleted may be adopted.

In the processing flow of FIG. 4, the encryption key input erasure program 22 determines that the encryption key is stored in the encryption key management file 31 because the encryption text is already stored in the encryption text file 30. Assuming that the encryption key input by the user is valid, the configuration for checking whether or not the encryption key input by the user is valid is adopted. Is stored in the encryption key storage area 23 as it is. According to this processing, the ciphertext file 30 can be created by the encryption / decryption program 24.

Next, the present invention will be described in more detail with reference to FIG. Here, in the figure, 40 is a file operation command, 41 is an encryption key setting unit, 42 is a command control unit,
43 is a file operation control unit, 44 is an encryption processing unit, 45
Is an encryption key holding unit, and 46 is a time setting unit.

The file operation command 40 represents an encryption instruction command or a decryption instruction command (the above-described file display command) input via the input / output device 10. Here, the encryption instruction command is “encrypt” and the decryption instruction command is “decrypt”. “Encrypt file
An input string of "-name" means "encrypt the file named file-name". The same applies to decoding. The command name and file name input in this format are passed to the command control unit 42.

The encryption key setting section 41 is a command for prompting the user to input an encryption key. In this example, the command name is "seckey". When only this command name is entered,
By displaying a prompt for inputting the encryption key, the user is caused to input the encryption key. The input encryption key and this command name are passed to the command control unit 42, and the time at which the encryption key was input is passed to the time setting unit 46. . Also, when a number is input with a number such as “seckey 3600”, the number is passed to the time setting unit 46.

The command control unit 42 receives the file operation command 40, the encryption key setting unit 41, and other commands, analyzes the command name, and executes “encrypt” / “decr
If the command is “ypt”, “encrypt” / “de
"crypt" and "file-name" are passed to the file operation control unit 43. If the command is an encryption key setting command, the encryption key is passed to the encryption key holding unit 45.

The file operation control unit 43 controls the encryption processing unit 44 based on the command name received from the command control unit 42 and “file-name” to encrypt or decrypt “file-name”.

The encryption processing unit 44 encrypts or decrypts “file-name” using the encryption key stored in the encryption key storage unit 45. The encryption key holding unit 45 includes the command control unit 4
2 and holds the encryption key, and receives an encryption key discard instruction from the time setting unit 46 to discard the held encryption key.

The time setting section 46 receives the time from the encryption key setting section 41, counts the time from the point of receiving the time, monitors the input / output device 10, and stops the input operation of the input / output device 10. Then, the time is counted, and when the count value reaches a preset time, the encryption key holding unit 45 is instructed to discard the encryption key. In this process, when a number is received from the encryption key setting unit 41, the number is used as the number of seconds, and the time indicated by the number of seconds is used as the time until an instruction to destroy the encryption is issued.

In such a configuration, the user inputs a command “seckey” to be the encryption key setting unit 41.
When activated in this way, the encryption key setting unit 41
Displays the “Enter-Key:” prompt and prompts for an encryption key. In response, the user, for example, reads “MAD01772”
Is entered.

In response to the input of the encryption key, the encryption key setting unit 41 passes "seckey MAD01772" to the command control unit 42, and also inputs the time "97: 07: 31: 12: 30 (1997)
12:30 on July 31).

In response to this, the command control unit 42
From the character string of “seckey”, it is determined that the command is a command for holding the encryption key, and “MAD01772” is passed to the encryption key holding unit 45. In response, the encryption key holding unit 45 holds “MAD01772”.

Next, the operation of decrypting a ciphertext and converting it into plaintext will be described. When decrypting, the user
Enter “decrypt file-name”. In response to this, the command control unit 42 determines that the instruction is a decryption instruction, and passes “decrypt file-name” to the file operation control unit 43. In response to this, the encryption processing unit 44 checks whether or not the encryption key is held in the encryption key holding unit 45. If the encryption key is held, the encryption processing unit 44 performs a decryption process using it.
If it is not stored, the decoding process is not performed.

Next, the encryption key discarding process will be described. The time setting unit 46 sends the message “97:07:
31:12:30 ”, the time set by default (for example, 1200 seconds) is counted from the time of reception, and when the time elapses, the encryption key is stored in the encryption key holding unit 45. At this time, when the time is received from the encryption key setting unit 41 at a point in time that has not passed 1200 seconds, the counting of 1200 seconds is started again from that point in time. Numbers (for example,
When "3600") is received, the counting of 3600 seconds is started from that point.

As another function, the time setting section 46
Receives “97: 07: 31: 12: 30” from the encryption key setting unit 41, starts monitoring the input operation of the input / output device 10, and is set as a default from the time when the input operation is interrupted. The time (for example, 1200 seconds) is counted, and when the time has elapsed, the encryption key holding unit 45 is instructed to discard the encryption key. At this time, if the input operation of the input / output device 10 starts again or the time is received from the encryption key setting unit 41 before 1200 seconds, the count of 1200 seconds starts again from that point. Further, when a number not separated by “:” (for example, “3600”) is received, if the received time is during an input operation, a count of 3600 seconds is started from the next time (input operation is interrupted), If the input operation has stopped counting, the counter starts counting at 3600 seconds from that point.

In this manner, the encryption key input by the user is held in the encryption key holding unit 45 for a certain period of time.
The user can encrypt the encrypted confidential information without inputting the encryption key, and can encrypt the encrypted confidential information.

The present invention has been described with reference to the illustrated embodiments.
The present invention is not limited to this. For example, FIG.
In the processing flow of (1), when the encryption key input from the user is valid, the encryption key is stored in the encryption key storage area 23. However, even if the encryption key is not valid, the key is stored as it is. A configuration may be adopted. Even if this configuration is adopted, no serious inconvenience occurs because the decoding cannot be performed properly.

[0056]

As described above, the information processing apparatus of the present invention employs a configuration in which the encryption key input by the user is retained in the memory for a certain period of time and then automatically deleted. As long as the encryption key is kept in memory, the user can encrypt the confidential information without entering the encryption key and encrypt the confidential information. , While improving operability.

[Brief description of the drawings]

FIG. 1 is a principle configuration diagram of the present invention.

FIG. 2 is an embodiment of the present invention.

FIG. 3 is a processing flow executed by an erase time setting program.

FIG. 4 is a processing flow executed by an encryption key input deletion program.

FIG. 5 is a processing flow executed by an encryption / decryption program.

FIG. 6 is a processing flow executed by an encryption / decryption program.

FIG. 7 is a processing flow executed by an encryption key input deletion program.

FIG. 8 is an embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information processing apparatus 10 I / O device 11 Storage device 12 Memory 13 Clock 14 Input means 15 Judgment means 16 Erasing means 17 Conversion means 18 Setting means

Claims (7)

[Claims] An information processing apparatus comprising: an input device; and a storage device for storing encrypted confidential information, wherein the input device receives an encryption key input from the input device and stores the key in a memory. Determining means for determining whether or not a specified time has elapsed from the time of input of the encryption key, and erasing means for deleting the encryption key held in the memory when the determination means determines the elapse of time. An information processing apparatus, comprising: conversion means for decrypting confidential information stored in a storage device into plain text using an encryption key held in a memory. 2. An information processing apparatus comprising: an input device; and a storage device for storing encrypted confidential information. An input means for receiving an encryption key input from the input device and storing it in a memory; Determining means for determining whether or not a specified time has elapsed since the operation was interrupted; erasing means for erasing an encryption key stored in the memory when the determining means determines the lapse of time; and A conversion unit for decrypting the confidential information stored in the storage device into plain text using the encryption key stored in the storage device. 3. The information processing apparatus according to claim 1, wherein the conversion unit encrypts the confidential information in plain text edited by the input device using an encryption key stored in a memory. Information processing device. 4. The information processing apparatus according to claim 1, further comprising a setting unit configured to set a specified time used in the processing of the determining unit in accordance with the interactive processing. 5. The information processing apparatus according to claim 1, wherein the input unit checks the validity of the input encryption key, and stores the input encryption key in a memory on condition that the input encryption key is valid. An information processing apparatus characterized by the following. 6. A program storage medium for storing a program used for realizing an information processing apparatus having an input device and a storage device for storing encrypted confidential information, wherein a program input from the input device is stored. An input process of receiving a key and storing it in a memory; a determination process of determining whether a specified time has elapsed from the time of input of the encryption key by the input process; A program for causing a computer to execute an erasing process for erasing an encryption key held in a memory and a conversion process for decrypting confidential information stored in a storage device into plain text using the encryption key held in the memory is stored. A program storage medium characterized by being performed. 7. A program storage medium for storing a program used for realizing an information processing apparatus having an input device and a storage device for storing encrypted confidential information, wherein a program input from the input device is stored. An input process of receiving a key and storing it in a memory; a determining process of determining whether a specified time has elapsed since the operation of the input device was interrupted; A program for causing a computer to execute an erasing process of erasing an encryption key stored in the storage device and a conversion process of decrypting confidential information stored in the storage device into plain text using the encryption key held in the memory. A program storage medium characterized in that: