WO2006129699A1

WO2006129699A1 - Electronic information encryption system, electronic information encryption, storage medium, and program thereof

Info

Publication number: WO2006129699A1
Application number: PCT/JP2006/310864
Authority: WO
Inventors: Takeshi Endo; Ryuji Arai
Original assignee: Icon Corp.
Priority date: 2005-05-31
Filing date: 2006-05-31
Publication date: 2006-12-07
Also published as: JP2006339732A

Abstract

Intended is to prevent the leakage and robbery of secret electronic information effectively. In an encryption definition area (13), there are registered a plurality of pieces of encryption definition information with identification codes. To a plurality of encryption information areas (36a, 36b) to be recorded with encryption information files, respectively, there are assigned pieces of encryption definition to be used. When the electronic information is to be encrypted, the assigned encryption definition information is used, and the identification code of the encryption definition information, as used in the encryption information files obtained by the encryptions, is recorded in the encryption information files. At the decryption time, on the basis of the identification code recorded in the encryption information files, there is defined the encryption definition information, on which the decryption operation is performed.

Description

Specification

Electronic information encryption system, electronic information encryption method, storage medium and program thereof

Technical field

The present invention relates to an electronic information encryption system that encrypts electronic information to be encrypted such as personal information, an electronic information encryption method thereof, a storage medium thereof, and a program thereof. Background art

[0002] Confidential information such as personal information and technical information is often digitized and managed! This electronic information is required to be strictly managed because it can be easily duplicated and taken out.

However, it is difficult to completely prevent unauthorized access to confidential information and information leakage due to unauthorized removal.

For this reason, various technologies for encrypting electronic information to protect electronic information have been proposed. In the Japanese Patent Application No. 2005-0111285, an electronic information encryption system capable of effectively protecting electronic information Proposed.

In this electronic information encryption system, when electronic information to be encrypted is recorded, the encryption definition is downloaded toward a terminal device from a server that manages the encryption definition. This downloaded encryption definition is used to encrypt the electronic information to be encrypted. This encrypted electronic information is recorded in the storage medium of the terminal device, and the used encryption definition is deleted from the terminal device after the operation is completed. For this reason, only the encrypted electronic information is always stored in the terminal device, and the encryption definition necessary for decrypting the electronic information is not left in the terminal device. ,.

Therefore, even if the terminal device of this electronic information encryption system is illegally accessed by a person without access right and the encrypted electronic information can be copied and taken out, Even if the terminal device itself is illegally taken out by someone, the electronic information obtained illegally cannot be decrypted and used.

[0004] In the invention of the prior application, a plurality of encryption definitions are used separately for each file, thereby The unity lenoire is further increased.

In such a case, in general, the type of encryption definition to be used is assigned to each encrypted user, that is, the user of the encryption information file, and the assigned encryption definition, Used for encryption or decryption.

However, if different encryption definitions are assigned to each user or department, encryption definition management becomes complicated, and system users must be aware of the types of encryption definitions to be used when using the system. In other words, there was a problem of being troublesome.

[0005] In addition, when the user or department of the created encryption information file is changed, it is necessary to change the encryption definition to be used, which further complicates the management of the encryption definition. There was a problem when the smooth use of the file was hindered.

In particular, when multiple users share and use an encryption information file, it is necessary to use multiple types of encryption definitions according to the encryption information file used by one user. There was a problem.

Patent Document 1: Japanese Patent Application 2005 -011285

Disclosure of the invention

Problems to be solved by the invention

[0006] The present invention effectively prevents leakage or theft of confidential electronic information, and can easily manage a plurality of types of encryption definitions, its electronic information encryption method, its storage medium, and its The purpose is to provide a program.

Means for solving the problem

[0007] The above purpose is

An electronic information encryption system used for encrypting and managing electronic information to be recorded according to a program,

This electronic information encryption system has an encryption definition area and an encryption information area. In the encryption definition area, a plurality of encryption definition information is assigned an identification code and encrypted. Registered,

This encrypted encryption definition information is decrypted by a predetermined decryption method. In the encryption information area, the electronic information to be recorded is recorded as an encryption information file encrypted by the encryption definition information recorded in the memory.

When the electronic information to be recorded is encrypted by this electronic information encryption system, the electronic information is encrypted based on the encryption definition information selected from a plurality, and obtained by the encryption. The identification code of the encryption definition information used for encryption is recorded in the encryption information file.

When using the encryption information file with this electronic information encryption system, the encryption definition information is specified based on the identification code of the encryption definition information recorded in the encryption information, and the required encryption definition information is encrypted. By using an electronic information encryption system that is called from a definition area, decrypts encryption definition information, and decrypts an encryption information file based on the decrypted encryption definition information. Achieved.

[0008] In this case, the encryption definition management server and at least one terminal device connected to the encryption definition management server are provided, and the encryption definition area and the encryption information area are provided in the encryption definition management server. To.

Also, a cryptographic definition management server, at least one information server connected to the cryptographic definition management server, and at least one terminal device connected to the information server are provided, and the cryptographic definition area is provided to the cryptographic definition management server. The encryption key information area may be provided in each information server.

[0009] In addition, it is recommended that an identification code of encryption definition information to be used when electronic information is encrypted be assigned to the encryption key information area.

Further, the encryption definition information used when encrypting the electronic information can be configured to be randomly assigned when the electronic information is encrypted and stored.

[0010] Also, when searching for the required information from the electronic information in the encryption information file recorded in the encryption information area, the search information input for the search is the encryption information file to be searched. It is recommended that encryption processing is performed based on the same encryption definition information as the identification code of the encryption definition information recorded in, and used for search processing.

[0011] Further, in the above-described electronic information encryption system,

A step of registering a plurality of encryption definition information encrypted in the encryption definition area When,

An application using the above-mentioned electronic encryption system is started and electronic information is input,

A step in which the input electronic information is instructed to be stored in a required encryption information area; a step in which encryption definition information with a predetermined identification code is requested in the encryption definition area and called; and

The called encryption definition information is decrypted by a predetermined decryption method; and

The electronic information to be stored is encrypted based on the decrypted encryption definition information, and the identification information of the encryption definition information used for encryption is recorded in the encryption information file created by encryption. And steps

A step of recording the obtained encryption information file in the encryption key area;

A step of erasing the used cryptographic definition information;

Electronic information is encrypted in a powerful step.

[0012] Further, in this electronic information encryption system, when an encryption information file recorded in the encryption information area is used,

A step for instructing activation of a required encryption information file; and

A step of reading the identification code of the encryption definition information recorded in the encryption information file to be activated; and

The encryption definition information identical to the read identification code is called from the encryption definition area; and

The step of decrypting the called encryption definition information by the decryption method, the step of decrypting the encryption information file based on the decrypted encryption definition information, and the decrypted electronic information are read and processed. And steps

A step of erasing the used cryptographic definition information;

The encryption information file is used in a powerful step.

[0013] Also, the electronic information in the encrypted information file recorded in the encrypted information area is searched. o,

The encryption information file to be searched is specified and started in a searchable state.

A step of reading the identification code of the encryption definition information recorded in the specified encryption information file;

The encryption definition information that is read and identical to the identification code is called the encryption definition domain power,

A step of decrypting the called encryption definition information by a decryption method, a step of inputting search information, and instructing execution of a search process;

The step of encrypting the search information based on the decrypted encryption definition information, the step of performing the search process based on the encryption search information obtained by the encryption key, and the encryption information obtained by the search process A step of decrypting based on the decrypted encryption definition information; and

A step in which the decrypted electronic information is read and processed;

A step of erasing used cryptographic definition information;

The electronic information in the cipher information file is searched by the step which becomes powerful.

[0014] Further, the above-mentioned problems are solved by providing a computer-readable storage medium storing a program for causing a computer to execute the functions of the above-described means and the encryption method. .

Furthermore, the above-described problems are solved by providing a program for causing a computer to execute the functions of the above-described means and the encryption method.

The invention's effect

[0015] When the electronic information encryption system, the electronic information encryption method, the storage medium, and the program according to the present invention are used, the electronic information is always based on the encryption definition selected from a plurality of encryption definitions. The encryption definition recorded as an encrypted encryption information file and used to decrypt the encryption information file is centrally managed in the encryption definition area in an encrypted state, so the encryption definition is safe and secure. Even if an encrypted information file is leaked, the person who has illegally obtained only the encrypted information file In addition, the encryption definition necessary for the decryption key cannot be calculated even if the encryption definition file in the encryption definition area leaks together with the encryption information file. This makes it possible for users to encrypt, decrypt, and search electronic information that is completely unaware of the type of encryption definition being used, which is extremely effective without sacrificing user convenience. Electronic information can be protected.

Brief Description of Drawings

FIG. 1 is a block diagram showing a configuration of an electronic information encryption system according to the present invention.

Explanation of symbols

1 Encryption definition management server

10 CPU

11 Interface

12 Program area

13 Cryptographic definition area

14 Input device

15 display

2 Communication network

3 Information server

30 CPU

31 interface

32 Program area

36a Encrypted information area

36b Encryption information area

34 Input devices

35 display

4 Terminal equipment

40 CPU

41 Interface

42 Program area 44 Input device

45 display

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, the present invention will be described in detail with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of an electronic information encryption system according to the present invention. In the figure, 1 is the encryption definition management server, 10 is the CPU, 11 is the interface, 12 is the program area, 13 is the encryption definition area, 14 is the input device, 15 is the display, 2 is the communication network, 3 is the information server, 30 is CPU, 31 is interface, 32 is program area, 34 is input device, 35 is display, 36a is encryption information area, 36b is encryption information area, 4 is terminal device, 40 is CPU, 41 is interface , 42 is a program area, 44 is an input device, and 45 is a display.

The encryption definition management server 1 is a computer, and the encryption definition management server 1 is provided with a CPU 10, an interface 11, a program area 12, an encryption definition area 13, an input device 14, and a display 15.

In the program area 12, programs necessary for operating this system are recorded.

The CPU 10 controls the operation of the cryptographic definition management server 1 according to the program recorded in the program area 12.

[0020] In the encryption definition area 13, a plurality of pieces of encryption definition information, each with an identification code, are registered in an encrypted state.

This encryption definition information is information related to the encryption definition used when encrypting and decrypting electronic information in the terminal device 3 to be described later. This encryption definition information is downloaded to the terminal device 3 in response to a request from the terminal device 3 described later.

[0021] The input device 14 is used for inputting encryption definition information and system management. Specific examples include a keyboard and a touch panel screen.

The display 15 displays images necessary for the management work and operation work of the system. The encryption definition management server 1 is connected to the communication network 2 via the interface 11.

In the explanation of the encryption definition management server 1 described above, other components not directly related to the encryption of electronic information, such as management of the system usage state, charging system associated with use, speakers, output devices, etc. The explanation is omitted.

[0022] The communication line network 2 includes, for example, a public communication line network, a dedicated communication line network, a private communication network, and the like, but is not limited thereto as long as electronic information can be transmitted and received. The information server 3 is a computer. The information server 3 includes a CPU 30, an interface 31, a program area 32, an input device 34, a display 35, an encrypted information area 36a, and an encrypted information area 36b.

In the program area 32, programs necessary for operating this system are recorded.

The CPU 30 controls the operation of the information server 3 according to the program recorded in the program area 32.

In the encrypted information areas 36a and 36b, electronic information encrypted by a method described later is recorded as an encrypted electronic file. The encryption electronic file is assigned an identification code for encryption definition information to be used for encryption and decryption.

These encryption key information areas 36a and 36b are, for example, folders and directories. In FIG. 1, only two encrypted information areas 36a and 36b are shown. However, in this information server 3, in addition to the illustrated 36a and 36b, similar encryption keys are used. An information area is provided, and the number of locations can be freely increased or decreased as required by the user.

[0024] The input device 34 is used for inputting necessary for system management in the information server 3. Specifically, the input device 34 is, for example, a keyboard touch panel screen.

The display 35 displays images necessary for the management work and operation work of the system.

The information server 3 is connected to the communication network 2 via the interface 31. In the description of Information Sano 3, other structures not directly related to encryption of electronic information are used. The description of the components is omitted as in the case of the encryption definition management server 1.

The terminal device 4 is a computer, and this terminal device is provided with a CPU 40, an interface 41, a program area 42, an input device 44, and a display 45.

In the program area 42, programs necessary for operating this system are recorded.

The CPU 40 controls the operation of the terminal device 4 according to the program recorded in the program area 42.

The input device 44 is used for launching an application in the terminal device 4, inputting electronic information, inputting search information, and the like. Specifically, the input device 44 is a touch panel screen of a keyboard.

[0026] Display 45 displays screens necessary for operation of terminal device 4 and operation of this system, such as input information, search information, and search results.

The terminal device 4 is connected to the communication network 2 via the interface 41.

In the description of the terminal device 4, description of other components that are not directly related to the encryption of electronic information is omitted as in the case of the encryption definition management server 1.

In FIG. 1, only one terminal device 4 is connected to the communication line network 2, but the communication line network 2 is connected to a plurality of terminal devices having the same configuration.

Next, an encryption method in the electronic information encryption system will be described.

When using the above electronic information encryption system, first, the server administrator inputs the encryption definition information from the input device 14 of the encryption definition management server 1. The input encryption definition information is encrypted by the encryption method of the program recorded in the program area 12. The encrypted encryption definition information is registered in the encryption definition area 13 with an identification code attached.

A plurality of encrypted encryption definition information with an identification code is registered in the encryption definition area 13.

Next, the user of the terminal device 4 activates an application using the electronic information encryption system in the information server 3 from the terminal device 4 via the communication network 2. The user of terminal device 4 creates a new file using the launched application To do. When the creation work is completed, the user selects one of the encryption key information areas 36a and 36b of the information server 3 connected via the communication network 2 as a storage destination, and instructs the storage.

[0029] Since these encryption information areas 36a and 36b are assigned encryption definition information to be used, for example, the encryption information area 36a is designated as the storage location, and the electronic information is specified. Is stored, the identification code of the encryption definition information allocated to the encryption information area 36a is transmitted as call information from the information server 3 to the encryption definition management server 1 via the communication network 2. .

When the encryption definition management server 1 receives the call information of the encryption definition information, the corresponding encryption definition information is selected from a plurality of encryption definition information registered in the encryption definition area 13 based on the identification code in the call information. The retrieved cipher definition information is transmitted to the information server 3 that transmitted the call information.

The information server 3 that has received the encryption definition information via the communication network 2 decrypts the received encryption definition information using the program decryption method recorded in the program area 32.

The electronic file created by the application is encrypted based on the decrypted encryption definition information. This electronic file is recorded in the encryption key information area 36a as an encryption information file.

At this time, the identification information of the used encryption definition information is also recorded in this encryption information file.

When the use of the application ends, the decrypted encryption definition information is deleted from the information server 3.

[0031] Next, the operation status when opening the created encryption information file will be described.

When opening the created encryption information file, the required encryption information is transmitted from the terminal device 4 via the communication network 2 from the encryption information files stored in the encryption information areas 36a and 36b of the information server 3. A file is selected and activated.

When the required encryption information file starts to be activated, the identification code recorded in the file is read and the identification code is encrypted from the information server 3 via the communication network 2. It is sent to the definition management server 1 as a call report.

When the encryption definition management server 1 receives the call information for the encryption definition information, the required encryption definition information is transmitted via the communication network 2 to the information server 3 as in the case of the new storage of the electronic information. And decrypted by the decryption method.

The encryption information file for which activation has been instructed is decrypted based on the decrypted encryption definition information, and the decrypted information is transmitted from the terminal device 4 via the communication network 2 and displayed. Processed and displayed on display 45 in an available state.

[0033] When the use of the encryption information file is finished and the use of the encryption information file is finished without being updated, the encryption information file is not rewritten.

In addition, when the information content of the encryption information file is updated and saved, the encryption is performed according to the identification code of the encryption definition information allocated to the encryption information area of the save location, as in the case of the new save described above. And recorded.

Therefore, for example, when an encryption information file recorded in the encryption information area 36a is stored in another encryption information area 36b, the electronic information is defined in the encryption definition assigned to the encryption information area 36b. It is encrypted and recorded with information.

[0034] When the encrypted information file is opened after being recorded in the encrypted information area 36a and moved to the other encrypted information area 36b, the encrypted information file is stored in the encrypted information file. Based on the encryption definition information of the recorded identification code, that is, based on the encryption definition information allocated to the encryption information area 36a, it is decrypted and displayed on the display 45 of the terminal device 4, etc. Electronic information is provided to the user of the terminal device 4 in a possible state.

The moved encryption information file is encrypted and recorded by the encryption definition information allocated to the encryption information area 36b when it is updated and stored.

[0035] Next, the operation status when searching for the required electronic information from the created encryption information file will be described.

Created encryption information file power When required electronic information is retrieved, the encryption information stored in the encryption information areas 36a and 36b of the information server 3 via the communication network 2 From the file, the required file is specified from the terminal device 4 via the communication network 2.

. The specified file is activated in a searchable state.

[0036] When the required encryption information file is started in a searchable state, the identification code recorded in the file is called from the information server 3 to the encryption definition management server 1 via the communication network. Sent as information.

When the encryption definition management server 1 receives the encryption definition information call information, the required encryption definition information is transmitted to the information server 3 via the communication network 2 as in the case of the new storage of electronic information. Decrypted by the decryption method.

When the encryption information file is activated to be searchable, the information on the search condition input screen is displayed.

Is transmitted to the terminal device 4 via the communication network 2, and a search condition input screen is displayed on the display 45.

[0037] When the user inputs the required search information on the search condition input screen using the input device 44 and the search is executed, the input search information is transmitted via the communication network 2. F Sent to blueprint server 3.

The search information received by the information server 3 is encrypted based on the decrypted cipher definition information, and based on the cipher search information obtained by the cipher key, the search information is obtained from the cipher information file to be searched. Search processing of electronic information.

[0038] Since the search result information obtained by the search process is in an encrypted state, the search result information is decrypted based on the already-decrypted encryption definition information, and is transmitted to the terminal device 4 via the communication network 2. It is transmitted, displayed on the display 45 of the terminal device 4 so as to be usable, and provided to the user of the terminal device 3.

When all searches are finished and the use of the encrypted electronic file is finished, the decrypted encrypted definition information is deleted from the information server 3.

[0039] When the electronic information encryption system according to the present invention is used, the electronic information to be kept secret is encrypted with the encryption definition information selected from the plurality of encryption definition information, Since it is recorded in the information server 3, even if a third party can illegally access the encrypted information file recorded in the information server 3, the encrypted information file cannot be decrypted, and the electronic information Leakage is prevented. Even if the terminal device 4 itself is illegally taken away, the electronic information itself is not recorded in the terminal device 4 at all. Therefore, no matter how much the information in the terminal device 4 is analyzed, the electronic information is not stored. If the access right to the information server 3 of the terminal device 4 is revoked when it is detected that the user is taken away, the unauthorized user can Electronic information cannot be viewed or used from the information server 3.

[0040] For this reason, for example, in the case of a portable mopile terminal in which the terminal device 4 can be connected to the communication network 2 by wireless communication, it is easy to leave the terminal device misplaced or robbed while moving Can be assumed. Even in such a case, as long as the access right to the information server 3 is revoked, information leakage can be prevented immediately.

In the above embodiment, the encryption definition information used for encryption is recorded in an encrypted state on the encryption definition management server, and is also encrypted when transmitted to the communication network 2. Even if a third party intrudes into the encryption definition management server 1 and obtains the encryption definition information or illegally obtains the encryption definition information being transmitted, it is decrypted. Cannot be used to decrypt encrypted information files.

In the above embodiment, since a plurality of encryption definitions are registered in the encryption definition area 13 of the encryption definition management server 1, the encryption definition file to be used for decryption is specified. You can protect the encrypted information file.

Further, in the above embodiment, the encryption definition information necessary for decrypting the encryption information is only temporarily stored in the information server 3 only while the application is being used. For this reason, even if a third party illegally enters the information server 3, the decrypted encryption definition information cannot be obtained.

In the above embodiment, since a plurality of cipher definitions are centrally managed in the cipher definition area 13, the number of people who can directly access the cipher definition information is greatly limited. For this reason, the security level for managing the cryptographic definition information can be greatly improved.

In the above embodiment, the encryption definition information used for encryption and decryption is the Since it is allocated for each encryption information area such as the directory of the orderer, the access authority to the encryption information area is set by the user or terminal device. Access rights to files can be managed and restricted very easily.

[0043] In addition, since the encryption definition information is not properly used depending on the user or the department to which the user belongs, the system administrator, etc., can change the encryption definition information even if the user of the encryption key information file is changed. Management becomes easier without having to change information.

Also, since the identification code of the encryption definition information used for encryption of the encryption information file is recorded in the encryption key information file itself, the encryption key information area in which the encryption key information file is recorded However, even if it is changed, for example, moved or copied to another encryption information area, the user will be able to work without any awareness of the encryption definition information to be used.

[0044] In addition, even when an external developer uses this encryption system, such as when various applications are developed using managed electronic information, the recorded electronic information is used. Is already encrypted, and the developer in charge will use the decrypted electronic information according to the program in the above manner. Therefore, even if the person in charge of development illegally takes out the encryption key information file recorded in the encryption key information area, it cannot be used and information leakage can be prevented.

Note that the present invention is not limited to the above-described embodiments.

In the above embodiment, one encryption definition management server, one information management server, and a plurality of terminal devices are connected via a communication network, but it is assumed that a plurality of information management servers are connected. In some cases, a plurality of encryption definition management servers may be connected in some cases.

For example, one set of information servers connected to a plurality of terminal devices may be set as one set, and a plurality of sets of information servers and terminal devices may be connected to one encryption definition management server 1.

In the above embodiment, the encryption definition management server, the information management server, and the terminal device have different communication circuits depending on the installation status of the three parties connected to the same communication network. For example, a local communication network may be used for connection between the encryption definition management server and the information server, and a public communication network may be used for connection between the information server and the terminal device. The communication line network may be a dedicated communication line that directly connects servers or one-to-one with a terminal device.

In addition, it is recommended to use a general-purpose cryptographic communication technique for these communications. In the above embodiment, the encryption definition management server and the information server are provided independently, but the information server function is provided in the encryption definition management server, and at the time of encryption and decryption, Encryption and decryption are performed in the encryption definition management server so that the decrypted electronic information is transmitted to the terminal device via the communication network and displayed on the display of the terminal device so as to be usable. Well, ...

[0047] Further, if necessary, the function of the information server is provided in the terminal device, or the functions of the encryption definition management server, the information server, and the terminal device are provided in one computer. You can make the cryptographic process complete.

Further, in the above embodiment, the encrypted electronic information and the retrieved and extracted encrypted electronic information can be decrypted and then output from the printer as necessary. Or you can write to it.

In addition, the input of electronic information to the terminal device may be made possible by the input device power connected to the terminal device via a communication network.

[0048] Further, the time of erasure of the encryption definition information is not limited to the end of the use of the encryption information file. For example, when a predetermined time elapses after the encryption definition information is decrypted, It can be set freely, such as when there is no input operation for a certain period of time, and the request time for encryption definition information can be requested when a predetermined operation is performed or manually. It can be set freely when an operation is performed.

In the above embodiment, a plurality of encryption key information areas are provided, and the encryption definition information to be used is allocated to each encryption information area. Good.

In addition, the encryption definition information to be used for encryption may be selected at random during encryption, or one type of encryption definition information may be used continuously. It may be changed periodically or irregularly.

[0049] In this case, on the system, the electronic information itself is recorded in an encrypted state, and the encryption definition information used for the encryption is also encrypted. It is still difficult to decrypt, and the encryption definition to be used can be easily changed as necessary, so that leakage of electronic information can be prevented.

In the above embodiment, when a new encryption information file is created, the information server is called from the terminal device via the communication network, and the file is created, encrypted, and recorded on the information server. However, the electronic file created on the terminal device may be encrypted and recorded on the information server.

Further, the electronic information encryption system according to the present invention may be provided to the user via a recording medium storing the program itself for executing the system, or the program itself may be provided. The providing method, which may be provided directly or as an application using this electronic encryption system, is not limited to the above embodiment.

Industrial applicability

[0050] Since the electronic information encryption system, the electronic information encryption method, the storage medium, and the program thereof according to the present invention can use a plurality of encryption definitions without being aware of the user, leakage of electronic information And theft can be easily and reliably prevented, and personal information and confidential information can be managed safely.

Claims

The scope of the claims

[1] An electronic information encryption system used for encrypting and managing electronic information to be recorded according to a program,

The encrypted encryption definition information is decrypted by a predetermined decryption method.

In the encryption information area, the electronic information to be recorded is recorded as an encryption information file encrypted by the encryption definition information recorded in the memory.

When using the encryption information file with this electronic information encryption system, the encryption definition information is specified based on the identification code of the encryption definition information recorded in the encryption information, and the required encryption definition information is encrypted. An electronic information encryption system, which is called from a definition area, decrypts encryption definition information, and decrypts an encryption information file based on the decrypted encryption definition information.

[2] The encryption definition management server and at least one terminal device connected to the encryption definition management server are provided, and the encryption definition area and the encryption information area are provided in the encryption definition management server. Electronic information encryption system.

[3] A cryptographic definition management server, at least one information server connected to the cryptographic definition management server, and at least one terminal device connected to the information server are provided.

2. The electronic information encryption system according to claim 1, wherein the encryption definition area is provided in the encryption definition management server and the encryption information area is provided in the information server.

[4] The electronic information encryption system according to [3], wherein an identification code of encryption definition information to be used when the electronic information is encrypted is assigned to the encryption information area.

5. The electronic information encryption system according to claim 3, wherein the encryption definition information used when encrypting the electronic information is randomly assigned when the electronic information is encrypted and stored.

[6] When searching for the required information from the electronic information in the encryption information file recorded in the encryption information area, the search information entered for the search is recorded in the encryption information file to be searched. 5. The electronic information encryption system according to claim 4, wherein encryption processing is performed based on the same encryption definition information as the identification code of the encryption definition information and used for search processing.

[7] In the encryption method of the electronic information encryption system according to claim 6,

A step of registering a plurality of encryption definition information encrypted in the encryption definition area; and

A step of erasing the used cryptographic definition information;

An encryption method for the electronic information encryption system as described above.

[8] When the encryption information file recorded in the encryption key information area is used,

The encryption definition information identical to the read identification code is called from the encryption definition area; and The step of decrypting the called encryption definition information by the decryption method, the step of decrypting the encryption information file based on the decrypted encryption definition information, and the decrypted electronic information are read and processed. And steps

A step of erasing the used cryptographic definition information;

The encryption method of the electronic information encryption system according to claim 7, comprising:

[9] When the electronic information in the encryption information file recorded in the encryption key information area is searched, the encryption information file to be searched is specified and started in a searchable state.

A step in which the decrypted electronic information is read and processed;

A step of erasing used cryptographic definition information;

The encryption method of the electronic encryption system according to claim 8, comprising:

[10] The function of each means in the electronic information encryption system according to claim 6, and the claim

A computer-readable storage medium storing a program for causing a computer to execute each step of the encryption method of the electronic information encryption system according to 9.

[11] Function of each means in the electronic information encryption system according to claim 6, and claim

A program for causing a computer to execute each step of the encryption method of the electronic information encryption system described in 9.