JP2000020402A - Information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system composed of a recording medium equipped with a mechanism for preventing embezzlement of stored data and an information processor capable of unnecessitating the input of a password or the like for a user when the user is going to perform access to this recording medium. SOLUTION: This information processing system is provided with an information processor 1 having an identification information storage part 12 registering a first ID and a storage device 2 having a reloadable and non-volatile identification information storage part 22 connected to the information processor 1 while registering second identification information, data storage part 23 storing data and control part 21. When the first identification information registered in the identification information storage part 12 is coincident with the second identification information registered in the identification information storage part 22, the control part 21 enables access from the information processor 1 to the data storage part 23.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a storage device provided with a mechanism for preventing stored data from being stolen, and to eliminate the need for input of a user password or the like when the user accesses the storage device. The present invention relates to an information processing system including an information processing apparatus capable of performing the operation.

[0002]

2. Description of the Related Art A portable recording medium such as a portable hard disk device or a PC card can read data stored in the portable recording medium by connecting to a data processing terminal device. Therefore, if the portable recording medium is stolen, the stored data is stolen by connecting the information processing device owned by the third party to the portable recording medium. Therefore, in the case where data recorded on a portable recording medium is data that requires confidentiality, for example, the following technology has been proposed to prevent unauthorized access by identifying a user who accesses the portable recording medium. Such a technique is disclosed.

[0003] Japanese Patent Application Laid-Open No. 7-44464 discloses management information for setting an access right to a recording medium such as a user ID and a password in the portable recording medium in a system including a portable recording medium and an information processing apparatus. Is encrypted and registered in advance, and the user inputs a user ID and a password from an input device to access the portable recording medium, and the information processing device that receives the input encrypts the encrypted data on the portable recording medium. The user ID and password registered and read are decrypted, and the decrypted user ID and password are compared with the user ID and password input by the user. A technique for permitting access to a portable recording medium is described.

Further, in a system including a plurality of information processing terminals and a storage device connected via a network, a technique for preventing unauthorized access to the storage device is disclosed in Japanese Patent Application Laid-Open No. H2-242435. Have been.
That is, in a system including a computer device, a storage device, and a plurality of terminal devices connected thereto via a network, the storage device holds a table for storing a user ID and a password in association with each other, Inputs a user ID and a password from a terminal device when using this system. In response, the system refers to the table, compares the user name and password registered in the table with each of the entered ones, and only when they match, the system from the user's terminal device. A technique for preventing unauthorized access by permitting use is described.

[0005]

However, in the above-mentioned conventional technology, it is necessary to input a password every time the user accesses the portable recording medium or the storage device. Is big.

That is, portable recording media are often carried around, and it is necessary to provide a data theft prevention mechanism in the portable recording medium itself. However, usually, a user accesses this portable recording medium using his / her own information processing device, and inputs a password every time the user accesses this portable recording medium from his / her own information processing device. Canceling the anti-theft mechanism is complicated for the user. For example, when a plurality of portable recording media provided with a data theft prevention mechanism are exchanged and used, this complexity becomes more remarkable.

On the other hand, when accessing a storage device connected to a network from a terminal device, the user cannot access the storage device unless the user inputs a user ID and password each time.

Accordingly, it is an object of the present invention to provide a recording medium having a mechanism for preventing stored data from being stolen, and to eliminate the need to input a user's password or the like when the user accesses the recording medium. An object of the present invention is to provide an information processing system including an information processing apparatus capable of performing the above-described processing.

[0009]

A first information processing system according to the present invention includes an information processing apparatus having first identification information storage means in which first identification information is registered, and an information processing apparatus connected to the information processing apparatus. A storage device having at least one rewritable and non-volatile second identification information storage unit in which the second identification information is registered, a data storage unit in which data is stored, and a control unit; The information processing device, when the first identification information registered in the first identification information storage means matches the second identification information registered in the second identification information storage means, From the storage device to the data storage means.

A second information processing system according to the present invention comprises a first information processing system.
An information processing apparatus having a first identification information storage unit in which the second identification information is registered; and an at least once rewritable and nonvolatile second information connected to the information processing apparatus and having the second identification information registered therein. Identification information storage means, data storage means for storing data, and the first identification information stored in the first identification information storage means and the second identification information stored in the second identification information storage means And a control unit that enables the information processing device to access the data storage unit of the storage device when the identification information matches the identification information. When the identification information given from the device and the second identification information match, the third identification information stored in the second identification information storage means is newly given from the information processing device. Identification information With rewriting, the information processing apparatus is characterized in that rewriting the first identification information to the third identification information.

[0011] A third information processing system according to the present invention includes a plurality of information processing apparatuses each having first identification information storage means for registering first identification information, and a plurality of data storage means for storing data. And a storage device having at least one rewritable and non-volatile second identification information storage unit and a control unit in which a plurality of second identification information items respectively corresponding to the plurality of data storage units are registered. And each of the plurality of information processing apparatuses has the first identification information registered in the first identification information storage unit of the information processing apparatus and one of the plurality of second identification information matches. In this case, access to the data storage means corresponding to the matched second identification information is permitted.

In a fourth information processing system according to the present invention, in the third information processing system according to the present invention, the control means may include identification information provided from each of the plurality of information processing apparatuses and the second information processing apparatus. When any one of the plurality of second identification information registered in the identification information storage means matches, the matched second identification information is added to the third identification information newly given from the information processing apparatus. In addition to the rewriting, the information processing apparatus rewrites the first identification information registered in the first identification information storage unit of the information processing apparatus to the third identification information.

[0013]

Next, a first embodiment of the information processing system of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing the configuration of the present embodiment.
Referring to FIG. 1, the present embodiment includes an information processing device 1,
It comprises a portable hard disk device, a portable recording medium 2 such as a PC card, a display device 3 and an input device 4.

The information processing apparatus 1 includes an identification information storage section 12 capable of registering identification information (hereinafter, referred to as ID data) of the information processing apparatus 1 and a control section 11 for controlling the operation of the information processing apparatus 1. Is provided.

The portable recording medium 2 has an ID of the portable recording medium 2.
Information storage unit 22 capable of registering information, a main storage unit 23 for storing data, and a control unit 2 connected to these for controlling an access request from the information processing apparatus 1 and the like.
1 is provided.

The control unit 21 of the portable recording medium 2 is connected to the control unit 11 of the information processing device 1. The identification information storage unit 22 is a non-volatile memory, and can be rewritten by a predetermined operation described later. Preferably, the identification information storage unit 12 is rewritable and nonvolatile.

The display device 3 displays a read result of the portable recording medium 2, a message from the information processing system, and the like. The input device 4 is an input device represented by a keyboard.

Hereinafter, the procedure for the user to set his / her own ID and when the information processing system is started up, connected, or when an access request is made from the information processing apparatus 1 (hereinafter, referred to as access permission / denial determination). The operation will be described in detail.

First, a procedure in which a user sets his / her own ID in the information processing apparatus 1 and the portable recording medium 2 will be described in detail. FIG. 2 is a flowchart illustrating a procedure for setting an ID.

To set an ID, the user inputs an instruction to the control unit 11 of the information processing apparatus 1 from the input device 4 to set a setting mode for setting an ID. Upon receiving this instruction, the control unit 11 requests the control unit 21 to enter the setting mode (step S1).

Before the user registers his or her own ID, a specific initial value is registered in advance in the identification information storage unit 22 as the ID of the portable recording medium 2.

The control unit 21 receives a request for setting an ID.
Reads the ID data registered in the identification information storage unit 22 and determines whether or not the ID data is a specific initial value (step S2).

If the result of this determination is that the ID data registered in the identification information storage unit 22 has a specific initial value, the control unit 22 controls a signal indicating that the signal has a specific initial value. The control unit 11, which has transmitted this signal to the unit 11 and received this signal, causes the display device 3 to display a message prompting the user to input newly registered ID data from the input device 4 (step S3).

The user inputs ID data to be newly registered from the input device 4 in accordance with the displayed instruction.
1 and the control unit 11 registers the input ID data in the identification information storage unit 12. Further, the control unit 11 transfers the input ID data to the control unit 22,
Registers the transferred ID data in the identification information storage unit 22 (step S4). After the new ID data is input, the control unit 11 displays an instruction to input the ID data again on the display device 3, and displays the first input I data.
D may be compared with the re-input ID data, and only when the ID data matches, the ID data may be registered in the identification information storage unit 12 and the identification information storage unit 22.

On the other hand, as a result of the determination in step S2,
If the ID data registered in the identification information storage unit 22 is not a specific initial value, the control unit 21 inputs the ID data already registered in the identification information storage unit 22 to the information processing device 1. Display device 3 prompting the user to
(Step S5). Then, the user inputs the ID requested from the input device 4 according to the instruction.
Data is input (step S6). And the control unit 2
1 collates the input ID data with the ID data already registered in the identification information storage unit 22 (step S1).
7).

As a result of this collation, if the input ID data matches the ID data already registered in the identification information storage section 22, the above-described processing in step S3 is performed.

In this case, in step S4, the ID
It is also possible to change the data to a certain initial value. If no match is found as a result of this comparison,
The process of step S5 is performed again. In addition, when the matching in step S7 is not performed even if it is performed continuously for a preset number of times, the ID setting process may be stopped.

Also, as a result of the determination in step S2,
When the ID data registered in the identification information storage unit 22 is not a specific initial value, the control unit 22 requests the control unit 11 to transfer the ID data registered in the identification information storage unit 12, The ID data registered in the identification information storage unit 22 and the transferred ID data registered in the identification information storage unit 12 are collated, and if they match, the process of step S3 may be performed. Good.

Next, the operation at the time of judging access permission / denial will be described in detail. FIG. 3 is a flowchart for explaining the operation at the time of access permission / denial determination of the present embodiment.

When judging whether access is permitted or not, first, the control unit 21 of the portable recording medium 2 reads out the ID data registered in the identification information storage unit 22 of the portable recording medium 2, and reads the ID data.
It is determined whether or not the data has a specific initial value (step T1). If the result of this determination is that the ID data is a specific initial value, the control unit 21 permits the information processing device 1 to access the main storage unit 23 (step T2). On the other hand, if the result of this determination is that the ID data is not a specific initial value, the control unit 21 requests the control unit 11 to transfer the ID data registered in the identification information storage unit 12 (step T3). .

Next, the control unit 21 includes an identification information storage unit 22
Is compared with the ID data registered in the identification information storage unit 12 (step T4).

If the two ID data match as a result of the comparison, the process of step T2 is performed. That is,
The access to the main storage unit 23 of the information processing device 1 is permitted. On the other hand, when the two ID data do not match as a result of the collation, the control unit 21 instructs the information processing apparatus 1 to display a display indicating an error on the display device 3, and the The access to the storage unit 23 is prohibited (step T5).

Next, a second embodiment of the information processing system of the present invention will be described with reference to the drawings. FIG. 4 is a block diagram showing the configuration of the second embodiment of the information processing system of the present invention.

Referring to FIG. 4, a second embodiment of the information processing system according to the present invention comprises terminal devices 51 to 54 connected to a network 5 and a storage device 6.

Each terminal device is connected to a display device (not shown) and an input device, and has the same functions as the information processing device 1 of the first embodiment. Further, now, the ID of the terminal device 51 is “A”, the ID of the terminal device 52 is “B”, the ID of the terminal device 53 is “C”, and the ID of the terminal device 54 is “D”. These IDs are registered in advance by the user.

The storage device 6 is, for example, a hard disk device, and includes a control unit 61 for controlling access requests and the like from the terminal devices 51 to 54, a non-volatile and rewritable identification information storage unit 7, and a main storage unit 8. It is composed of The main storage unit 8 is divided into storage areas 81 to 85.

The identification information storage unit 7 stores a storage area and ID data necessary for accessing each storage area in association with each other. This ID data is registered by the user. Before the ID data is registered by the user, a specific initial value is registered as the ID as in the first embodiment.

Now, it is assumed that the ID shown in FIG. 5 is registered by the user as the ID data corresponding to each storage area. In other words, the ID data required to access the storage area 81 is “A”, the ID data required to access the storage area 82 is “B”, and the storage area 83
The ID data required to access is "C",
This indicates that the ID data required to access the storage area 84 is “D”. That is, the terminal device 5
1 can access the storage area 81, and the same applies to other terminal devices. Since the ID data required to access the storage area 85 is a specific initial value, all terminal devices connected to the storage device 6 can access the storage area 85.

In such an information processing system, the setting processing of the ID from each terminal device and the access to each storage area are controlled by the control unit 61 in the same manner as in the first embodiment.

When setting the IDs, the control unit 61 makes all the IDs registered in each identification information storage unit different except for a case where the IDs have a specific initial value. That is, when an attempt is made to register ID data that has already been registered in another identification information storage unit, a message is displayed on the display device, and an instruction to register the other ID data is issued. Prevent duplicate registration.

As described above, in the information processing system including the plurality of terminal devices and the storage device connected via the network, as in the first embodiment, unauthorized access by a third party is prevented. can do. Also,
It is possible to eliminate complicated processing associated with inputting a password or the like. Also, since ID data can be set for each storage area, if an ID required to access a certain storage area is set to a specific initial value, all terminal devices connected to the storage apparatus can store the ID of the storage area. Data can be made public.

Further, in the present embodiment, the storage device is a portable recording medium, and need not be particularly connected to a network. In addition, the storage capacity of each storage area can be changed,
When there is a terminal device newly connected to the network, a storage area corresponding to the terminal device may be provided.

[0043]

As described above, in the information processing system of the present invention, IDs are registered in advance in the information processing device and the portable recording medium or the storage device, respectively.
Is a match, or the ID is a certain initial value,
The information processing device has an effect of preventing unauthorized access by a third party by enabling access to the portable storage medium or the main storage unit of the storage device, and prohibiting access when the information does not match. .

Further, there is an effect that it is not necessary to input a password or the like every time the portable recording medium or the recording device is accessed unlike the related art.

Further, the portable recording medium or storage device I
By setting D to a specific initial value, there is an effect that data stored in the main storage unit can be disclosed or shared.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a first exemplary embodiment of the present invention.

FIG. 2 is a flowchart showing a procedure for setting an ID according to the embodiment of the present invention.

FIG. 3 is a flowchart showing an operation of the embodiment of the present invention at the time of judging rejection.

FIG. 4 is a block diagram showing a configuration of a second exemplary embodiment of the present invention.

FIG. 5 is a diagram showing a memory structure of an identification information storage unit 7;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Information processing device 2 Portable recording medium 3 Display device 4 Input device 6 Storage device 51,52,53,54 Terminal device

Claims (4)

[Claims] An information processing apparatus having first identification information storage means in which first identification information is registered, and at least one rewritable connected to the information processing apparatus and in which second identification information is registered. And a storage device having a non-volatile second identification information storage means, a data storage means in which data is stored, and a control means, wherein the control means is registered in the first identification information storage means. When the first identification information matches the second identification information registered in the second identification information storage means,
An information processing system, wherein access to the data storage unit of the storage device from the information processing device is enabled. 2. An information processing apparatus having first identification information storage means in which first identification information is registered; and rewritable at least once which is connected to the information processing apparatus and in which second identification information is registered. Non-volatile second identification information storage means;
A data storage unit for storing data, wherein the first identification information stored in the first identification information storage unit matches the second identification information stored in the second identification information storage unit And a control means for enabling the information processing apparatus to access the data storage means of the storage device, the control means comprising:
When the identification information given from the information processing device matches the second identification information, the second identification information stored in the second identification information storage means is newly given from the information processing device. An information processing system, wherein the information processing apparatus rewrites the first identification information to the third identification information, and rewrites the first identification information to the third identification information. 3. A plurality of information processing devices each having first identification information storage means for registering first identification information, a plurality of data storage means for storing data, and a plurality of data storage means, respectively. A storage device having at least one rewritable and nonvolatile second identification information storage unit and a control unit, in which a plurality of second identification information items corresponding to the plurality of pieces of second identification information are registered. Each of the first information registered in the first identification information storage means of the information processing apparatus is
When the identification information of any one of the plurality of pieces of second identification information matches, the access to the data storage means corresponding to the matched second identification information is permitted. system. 4. The control unit determines that the identification information given from each of the plurality of information processing apparatuses matches one of the plurality of second identification information registered in the second identification information storage unit. In this case, the matched second identification information is rewritten into third identification information newly given from the information processing device, and the information processing device is configured to store the first identification information storage means of the information processing device. 4. The information processing system according to claim 3, wherein the first identification information registered in the first information is rewritten to the third identification information.