JP2003208355A - Data storage device, data backup method, and data restoration method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance secrecy an safety of backup data. <P>SOLUTION: In a data center 100, when backup of user data A102 is performed from a magnetic disk device 101 to a tape library device 130, a backup ID is generated, an encryption key is requested to a user via a network 140. The user A150 generates, stores a pair of encryption key/decryption key corresponding to the back up ID, transmits the encryption key corresponding to the backup ID to the data center 100, and encrypts the user data A102 with an encryption/decryption device 120. When the user data is restored, the backup ID is transmitted from the data center 100 to the user A150, the user transmits the decryption key corresponding to the backup ID to the data center 100, decrypts the user data A102 read from the tape library device 130 with the encryption/decryption device 120, and restores it in the magnetic disk device 101. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data storage technique and a data backup and restore technique,
In particular, the present invention relates to a technique effectively applied to a process of backing up / restoring data in a storage medium such as a portable medium.

[0002]

2. Description of the Related Art The role of data backup in a computer system is assuming that data in a storage device such as a magnetic disk normally used by a host system is lost or cannot be used due to a failure or the like. This is an operation of saving (backing up) the data of the magnetic disk to a portable medium such as a magnetic tape in advance, and restoring (restoring) the data from the portable medium such as the magnetic tape to a disk device as needed.

However, as a technical problem of this backup / restore work, in order to store data in a portable medium, anyone can access the stored data by taking out the portable medium, which is illegal. The data can be accessed by various users.

Therefore, there is a method in which a user inputs an encryption key for encrypting data at the time of backup, encrypts the data using the encryption key, and then backs up the data to a portable medium. According to this method, the encrypted data stored in the portable medium cannot be decrypted without using the decryption key corresponding to the encryption key. Therefore, the confidentiality of the data stored in the portable medium or the The safety can be improved.

There are a common key system that uses the same decryption key as the encryption key and a public encryption key system that uses another key paired with the encryption key. Generally, in the common key method, the user who encrypts and the user who decrypts must keep the common key in secret, but in the public encryption key method, the encryption key does not need to be kept secret, so register with a certificate authority. Then, the user needs to keep only the decryption key secret.

Further, when there are a plurality of users who perform encryption and decryption in a large system or the like, it is necessary to exchange the encryption key / decryption key between a plurality of persons, so that for example decryption is attempted. It is necessary to pass the decryption key after confirming that the user is a legitimate user.

As a document of a known technique for encrypting data to be backed up in this way, for example, Japanese Patent Laid-Open No. 9-
"Data backup / restoration method and system" disclosed in Japanese Patent No. 160832 can be mentioned. That is,
The data to be backed up is encrypted with the encryption key specified by the worker and stored in the portable medium, and the ID of the restorer recognized by the worker, the portable medium ID, and the encryption key are registered in the restorer DB. The security of backup data is managed by allowing only the restorer registered in this DB to perform the restore operation.

In recent years, with the development of computer technology, the amount of data handled by computer users has increased dramatically. Therefore, a form in which individual users store data in a distributed manner and a form in which data is centrally stored in a center including a large-scale information processing system called a data center has come to be used.

For example, when such a data center is constructed in a certain company, it is called an in-company data center, and the data of computer users of the company are centrally managed in a storage such as a magnetic disk, and backup work is performed. Is generally performed on a magnetic tape or the like in the data center. The user accesses the data in the corporate data center via the network.

On the other hand, recently, an Internet data center (hereinafter, abbreviated as IDC) that specializes in integrating data center functions and a storage service provider (hereinafter, S that specializes in integrating storage functions) are specialized.
A corporate form called "SP" is emerging.
In these IDC and SSP, data of a plurality of user companies and user groups are integrated and managed in a storage such as a magnetic disk, and data is exchanged with a user via a network. Also in these IDCs and SSPs, it is common to back up data to a portable medium such as a magnetic tape in preparation for a failure of the magnetic disk device.

[0011]

By the way, in both the above-mentioned in-company data center form and IDC / SSP form, when the data is backed up to a portable medium, the confidentiality and security of the data are enhanced. Therefore, it is desirable to perform encryption. However, as long as the portable data medium storing the encrypted data and the encryption key and the decryption key are stored in the data center even in the in-house data center or in the form of IDC / SSP, However, if the decryption key is stolen, there is a problem that the confidentiality and security of the backed up data is significantly reduced. That is, it is possible to decrypt the encrypted data by stealing the portable medium backed up with the data and the decryption key at the same time.

An object of the present invention is to enhance the confidentiality and security of data encrypted and stored in a portable medium in the environment of a data center such as an in-house data center or IDC / SSP.

Another object of the present invention is to prevent decryption of encrypted data stored in a portable medium by an unauthorized user.

Another object of the present invention is to provide an encryption key / decryption key for enhancing the confidentiality and security of data when encrypting the data in a portable medium and backing it up in the environment of the above data center. It is to provide a method for storing data and a method for backing up / restoring data.

[0015]

According to the present invention, there is provided a first storage device for storing user data, a second storage device for using a portable medium, and a second storage device for storing user data stored in the first storage device. A data storage device including a backup control device performing a backup operation to the device and a restore operation to restore the user data from the second storage device to the first storage device, and an information network from a user who is the owner of the user data. Data encryption means for encrypting user data backed up from the first storage device to the second storage device by using the encryption key received via the information network from the user who is the owner of the user data. At least a data decryption unit that decrypts the user data restored from the second storage device to the first storage device using the received decryption key. It is obtained by a structure having one.

More specifically, as an example, the present invention is
The following method or device is used.

That is, according to the present invention, in an environment in which a single user or a plurality of users store each data in a storage such as a magnetic disk in a common data center connected to a network, the data on the magnetic disk is recorded on the magnetic tape. When backing up to a portable medium such as, etc., the data center acquires the encryption key for encryption from each user via the network for each backup and uses the encryption key acquired from each user for the data on the magnetic disk. It was encrypted and stored on a magnetic tape.

When decrypting encrypted data stored in a portable medium such as a magnetic tape and restoring it to a disk, a decryption key is issued from each user every time the data center performs a restore operation. Acquired over the network,
The obtained decryption key is used to decrypt the data encrypted and stored in a portable medium such as a magnetic tape, and the decrypted data is restored to a magnetic disk device or the like in the data center.

Further, each user generates an encryption key / decryption key for data encryption / decryption, stores the generated encryption key / decryption key, and encrypts the data in response to a request from the data center. The key / decryption key is sent via the network each time backup / restore is performed.

Further, a single or a plurality of users store data on a magnetic disk or the like in a common data center connected by a network, and backup and backup the data to a portable medium such as a magnetic tape installed in the data center. In an environment where restoration is performed, a device for controlling backup and restoration and a device for encrypting / decrypting data are provided in the data center, and a device for generating an encryption key and a decryption key for each user. , A device for managing the encryption key and the decryption key is provided, and when performing the backup work, the device for controlling the backup and the restore sends a request for sending the encryption key to each user, and each user A device that generates an encryption key and a decryption key in response to a request to send the decryption key generates an encryption key and a decryption key pair, No. registered encryption key and decryption key pair generated in the apparatus for managing a key, in which so as to send only the device for controlling the data center backup and restore the encryption key.

The device for controlling backup and restore sends the encryption key sent from the user to the device for encryption / decryption, encrypts the data of the magnetic disk device and stores it in a portable medium such as a magnetic tape. It is intended to be backed up.

Similarly, when performing a restore operation, a device for controlling backup and restore sends a request to send a decryption key to each user, and each user registers in the device for managing the encryption key and decryption key. Only the decryption key from the pair of the encryption key and the decryption key that has been stored is sent to the device that controls backup and restore in the data center.

Further, according to the present invention, a backup ID information generator and a backup management table are provided in the device for controlling backup and restore provided in the data center, and the backup ID is provided for each backup operation.
The information generating unit generates a backup ID corresponding to each backup operation, and manages information about each backup operation using the backup ID generated in the backup management table. Further, when the device that controls backup and restore requests the user to send the encryption key or the decryption key, the backup ID is sent via the network.

Further, in the present invention, a key management table is provided in the device for managing the encryption key and the decryption key of each user,
The pair of the encryption key and the decryption key generated by each user is registered in the key management table using the backup ID sent from the device that controls the backup and restore.

Further, according to the present invention, the sending of the encryption key and the decryption key between the data center and each user is encrypted.

Further, in the present invention, a certificate authority connected to the network is provided, and each user receives a public key from the certificate authority via the network, encrypts the encryption key or the decryption key with the public key, and The encrypted encryption key or the decryption key is sent to the device that controls backup and restore of the data center. Further, the device for controlling the backup and restore of the data center is configured to decrypt the encrypted encryption key or decryption key sent from each user via the network by using the private key.

[0027]

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a conceptual diagram showing an example of the configuration of a storage service system including a data storage device according to the first embodiment of the present invention. In the present embodiment, a data center that provides a storage service to a plurality of users will be described as an example of a data storage device.

In FIG. 1, a user A 150 and a user B 160 are connected to the data center 100 via a network 140, and user data A owned by each of them is stored in a magnetic disk device 101 in the data center 100.
102 and user data B103 are stored.

The user A150 comprises an encryption key / decryption key generation device A151 and an encryption key / decryption key management device A152. Further, the encryption key / decryption key management device A152 has a key management table A153, a key transmission unit A154 and a communication function A.
It consists of 155. The configuration of the key management table A153 will be described later with reference to FIG.

The user B160 has the same configuration as the user A, and the encryption key / decryption key generating device B161 and the encryption key / decryption key
The decryption key management device B162 includes a decryption key management device B162, and the encryption key / decryption key management device B162 includes a key management table B163, a key transmission unit B164, and a communication function B165. The configuration of the key management table B163 is the same as that of the key management table A153 shown in FIG. 2, and therefore its explanation is omitted here.

Next, the data center 100 has a magnetic disk device 101 for storing user data A 102 and user data B, a backup controller 110 for controlling backup and restore of data from the magnetic disk device 101 to a portable medium, A tape library device 130 that stores a magnetic tape A 132 and a magnetic tape B 131 that are portable media, and an encryption / decryption process that encrypts and decrypts data to be backed up and restored between the magnetic disk device 101 and the tape library device 130. It comprises a decryption device 120, the magnetic disk device 101, the backup control device 110, the encryption / decryption device 120, and an internal network 170 that interconnects the tape library device 130.

The encryption / decryption device 120 is not limited to hardware and may be realized by software or firmware.

Further, the backup control device 110 includes a backup control unit 115 for managing a backup schedule and a user A 150 via a network.
And a communication function 116 for communicating with the user B 160,
Magnetic disk device 101 and tape library device 130
A data control unit 113 for backing up and restoring data to and from user A 150 and user B 16
From an encryption key / decryption key reception unit 114 that receives an encryption key / decryption key from 0, a backup ID information generation unit 111 that generates a backup ID according to each backup operation, and a backup management table 112 that manages information related to backup. Composed. A configuration example of the backup management table 112 will be described later using FIG.

Next, a configuration example of the key management table A153 shown in FIG. 1 will be described. In the configuration example shown in FIG. 2, the key management table A153 is composed of a backup ID sequence, an encryption key sequence, and a decryption key sequence, and the encryption key / decryption key management device A152 corresponds to an arbitrary backup ID n201 and the encryption key n202. And the decryption key n203 is registered and managed. The key management table B163 has the same structure.

Next, a configuration example of the backup management table 112 shown in FIG. 1 will be described with reference to FIG. Figure 3
In the configuration example shown in FIG.
Is composed of a backup ID sequence, a user information sequence, a user data information sequence, and a magnetic tape information sequence. Corresponding to any backup ID, the user information,
User data information and magnetic tape information are registered and managed. In this embodiment, the backup ID n30
1 corresponds to user A302 and user data A30
3, magnetic tape A304.

Next, an example of the operation of the embodiment shown in FIG. 1 will be described with reference to the flowchart shown in FIG.
First, the user data A102 stored in the magnetic disk device 101 is encrypted and the tape library device 13
The operation of backing up to the zero magnetic tape A132 will be described.

The backup control unit 115 activates the backup operation according to a predetermined schedule or manually (step 400). Subsequently, the backup control unit 115 determines the data to be backed up (step 401), and the backup ID information generation unit 11
1 is used to generate a backup ID n201 corresponding to the current backup operation (step 402). Next, the backup control unit 115 relates to the backup IDn 201 that has been generated, the user data A102 that is the target of this backup operation, the user A150 who owns the user data A102, and the magnetic tape A132 that stores the data. The information is registered in the backup management table 112 (step 403).

Then, the user is judged (step 40
4) In this example, user A is the backup ID.
The communication function 116 sends n201 to the user A 150 via the network 140 to request the encryption key (step 4).
05). Encryption key / decryption key management device A1 of user A150
52 is a backup IDn2 by the communication function 155.
When 01 and the transmission request of the encryption key are received, the encryption key / decryption key generation device A 151 generates a pair of the encryption key n202 and the decryption key n203 corresponding to the backup ID n201, and the generated key pair is generated together with the backup ID n201. Register in A153 (Step 4)
06). At the same time, the key transmission unit A154 uses the communication function A155 to send the backup ID n201 and the encryption key n202 to the backup control device 110 via the network 140 (step 407). Backup control device 1
In 10, the encryption key / decryption key receiving unit 114 uses the communication function 11
6 receives the backup ID n201 and the encryption key n202, the encryption key n202 is transmitted to the encryption / decryption device 120.
(Step 411).

Subsequently, the data control unit 113 transfers the user data A 102 corresponding to the backup IDn 201 from the magnetic disk device 101 to the encryption / decryption device 120. The encryption / decryption device 120 uses the received encryption key n202 to execute the user data A according to a predetermined algorithm.
102 is encrypted (step 412), and the encrypted user data A102 is transferred to the tape library device 130 and stored in the magnetic tape A132 (step 41).
3). This completes the encrypted backup operation of user data A (step 414).

In the above operation, if the data to be backed up is not the user data A102 but the user data B103, step 4 of the above operation
Steps 408 to 410 may be executed instead of 05 to step 407.

Next, with reference to the flowchart shown in FIG. 5, an example of the operation of decrypting the encrypted user data A102 stored on the magnetic tape A132 and restoring it to the magnetic disk device 101 in the embodiment shown in FIG. Explain. The restore operation is an operation for recovering the user data by using the data backed up on the magnetic tape or the like when the user data stored in the magnetic disk device 101 becomes unusable for some reason. Therefore, unlike the backup, the restore operation is artificially started when necessary, not according to a predetermined schedule (step 500).
Note that the backup is started by, for example, the backup controller 11
0 may be connected to the console device by manual input or user A150 or user B160.
May be performed via the network 140.

When the restore is started, the backup control unit 115 determines the user data to be restored (step 501) and the backup management table 112.
The information such as the magnetic tape number, the user number, and the backup ID in which the encrypted user data A to be restored is stored is obtained by referring to (step 502).
Next, the backup control unit 115 determines the user from the acquired user number (step 503), and since it is the user A in this example, the acquired backup I
Dn301 network 1 using communication function 116
It is sent to the user A 150 via 40 to request the decryption key (step 504).

When the communication function A155 receives the backup IDn301 and the request to send the decryption key, the user A150 obtains the decryption key n203 corresponding to the backup IDn301 by referring to the key management table A153 by the encryption key / decryption key management apparatus A152. Then, the key transmission unit A154 uses the communication function A155 to perform backup control device 110.
To the backup ID n301 and the decryption key n203
Is returned (step 505).

In the above operation, if the data to be restored is not the user data A102 but the user data B103, step 504 of the above operation.
To step 505 may be replaced with steps 506 to 507.

The backup control device 110 receives the backup ID n301 and the decryption key n2 from the communication function 116.
When 03 is received, the decryption key n203 is sent to the encryption / decryption device 120 (step 508). At the same time, the data control unit 113 sends the backup IDn2 to the tape library device 130 through the internal network 170.
The encrypted data is read from the magnetic tape A 132 corresponding to 01 and a request to transfer to the encryption / decryption device 120 is transmitted (step 509).

The tape library device 130 reads the encrypted user data A from the magnetic tape A 132,
Send to the encryption / decryption device 120 (step 51)
0). The encryption / decryption device 120 uses the decryption key n203.
The encrypted user data A read by using
(Step 511) and the data control unit 113 decodes the decrypted user data A into the magnetic disk device 10.
1 to user data A102 (step 51
2) Then, the restoration work of the encrypted data is completed (step 513).

In the first embodiment shown in FIG. 1, all components of the backup control device 110 may be configured by hardware, or only the backup control device 110 may be configured by hardware such as a personal computer or a workstation. Alternatively, each component such as the data control unit may be configured by software. Similarly, user A1
As for 50 and the user B160, the entire apparatus may be configured by hardware, or the functions of the respective units may be realized by a combination of hardware and software such as a personal computer or a workstation. Similarly, the user A 150 and the user B 160 may be configured only by hardware or may be realized by a combination of hardware and software such as a personal computer.

Further, the magnetic tape A132 and the magnetic tape B131 in the first embodiment may be other kinds of portable media, for example, DVD-RA as the portable media.
If M is used, the tape library device 130 is DV
It may be a D-RAM library device.

In the first embodiment, the user A15
Although the backup and restore operations have been described only for the user data A102 of 0, the operation is the same when performing the backup and restore of the user data B103 of the user B160, and therefore detailed description thereof is omitted here.

Next, FIG. 6 shows a second embodiment of the present invention. In the second embodiment shown in FIG. 6, the data center 100, the user A 150, and the user B 160 are each provided with a network firewall function.

That is, the data center 100 is the firewall 117, the user A 150 is the firewall A 156, and the user B 160 is the firewall B.
It is connected to the network 140 via 166. In the second embodiment, the backup ID, the encryption key, and the decryption key are transmitted and received between the user A 150 and the user B 160 and the backup control device 110 via a firewall. The operation of other parts in the second embodiment shown in FIG. 6 will be described with reference to FIG.
The detailed description is omitted here because it is the same as the first embodiment shown in FIG.

Next, a third embodiment of the present invention will be described with reference to FIG. In the third embodiment, user A
150 and user B160 and backup control device 1
When the encryption key and the decryption key are transferred to and from 10, the encryption is performed by the public key of the backup control device based on the public key cryptosystem. In FIG. 7, a certificate authority 180 is a certificate authority that issues the public key of the backup control device 110 together with a certificate.

The user A 150 and the user B 160 each obtain the public key 181 of the backup control device 110 from the certificate authority 180 via the network 140. The encryption unit A157 of the user A150 uses the public key 181 to encrypt the encryption key and the decryption key. User B16
The same applies to the encryption unit B167 of 0. Further, the backup control device 110 stores the private key 182 corresponding to the public key 181. The decryption unit 118 uses the private key 1 as the encryption key or the decryption key encrypted by the public key.
82 is used for decoding. Generally, in such a public key cryptosystem, data encrypted with a public key can be decrypted only with a secret key corresponding to the public key,
Conversely, data encrypted with a private key can only be encrypted with a public key.

Next, an example of the operation peculiar to the third embodiment of the present invention shown in FIG. 7 will be described with reference to the flowchart shown in FIG. Note that detailed description of operations common to the first embodiment will be omitted. In FIG. 7, user A
The operation of encrypting and sending the encryption key from 150 to the backup control device 110 is performed in the following procedure. The backup control device 110 of the data center 100 starts the backup operation involving the encryption of the user data A102 (step 800), and backs up the backup data to the user A150.
A request for sending D and the encryption key is sent via the network 140 (step 801).

When the user A 150 receives the request for sending the backup ID and the encryption key, the user A 150 uses the communication function A 155 to request and obtain the public key 181 of the data center 100 from the certificate authority 180 (step 802). The user A150 uses the encryption key / decryption key generation device A151 to generate an encryption key / decryption key pair (step 803), and registers the generated encryption key / decryption key pair in the key management table A153 (step 804).

Subsequently, the encryption key A157 is used to encrypt the generated encryption key by a predetermined algorithm using the acquired public key 181 (step 805). The key transmission unit A154 uses the communication function A155 to encrypt the encryption key via the network 140 to the data center 1.
00 to the backup control device 110 (step 806). The backup control device 110 has a communication function 1
When the encrypted encryption key is received from 16 (step 807), the private key 182 is used to decrypt the encrypted encryption key by the decryption unit 118 (step 808).
The sending of the encryption key is completed (step 809). The other operations relating to the backup work are the same as those of the first embodiment of the present invention shown in FIG. 1, and therefore detailed description thereof will be omitted here.

Regarding the operation at the time of restoration work,
In the flowchart shown in FIG. 8, steps 803 and 804 are omitted, and the key management table A1 has already been entered.
The decryption key registered in 53 may be encrypted. Further, in the flowchart shown in FIG. 8, the operation of encrypting and transmitting the encryption key from the user A 150 has been described, but the same operation is also performed when transmitting from the user B 160, and therefore detailed description will be omitted here.

In the third embodiment of the present invention shown in FIG. 8, the encryption unit A157 of the user A150 and the decryption unit 118 of the backup control device 110 may be configured by hardware or software. You may comprise by a function.

As described above, according to the embodiment of the present invention, the magnetic disk device 1 in the data center 100 is used.
When user data stored in 01 or the like is encrypted and backed up to a portable medium such as a magnetic tape, a backup ID corresponding to the backup work is generated and sent to the user, and the user encrypts the backup ID corresponding to the backup ID. The encryption key necessary for encryption and the decryption key necessary for decrypting the encrypted user data are created and stored, and only the encryption key corresponding to the backup ID is sent to the backup control device 110 of the data center 100 via the network 140. . Since the encryption key and the decryption key are stored by the user in this way, there is an advantage that the confidentiality and security of the encryption key and the decryption key can be enhanced.

After the backup work is completed,
Since the decryption key is managed by the user and is not sent to the data center 100 until the restoration work is actually performed, there is an advantage that the confidentiality and security of the decryption key can be enhanced.

The encrypted and backed up user data is stored in a portable medium in the data center 100, and the user stores the decryption key required to decrypt the user data. Therefore, both are stored in different places. Therefore, even if the portable medium is stolen, there is no possibility that the decryption key will be stolen at the same time, and there is an advantage that the confidentiality and security of the encrypted user data can be improved.

Further, when decrypting and restoring the encrypted data stored in the portable medium, the backup ID is sent from the data center 100 to the user, and the user decrypts the decryption key corresponding to the backup ID. Is sent to the data center 100 via the network,
The data is sent to the encryption / decryption device in the data center 100. Therefore, the decryption key is the data center 100
Since the decryption and restoration work can be performed without the intervention of workers and the like, there is an advantage that the decryption key does not leak in the data center 100.

In addition, even in an environment where a plurality of users share the same data center 100, different users generate and manage different encryption / decryption keys and use them for encryption / decryption. Therefore, there is an advantage that the user data encrypted and stored in the portable medium cannot be decrypted by other users, and the confidentiality and security of the data stored in the portable medium can be improved.

In the data center 100, the tape library device 1 of a portable medium is used for restoration or the like.
Even if there is a mistake in putting 30, the encryption key and the decryption key at the time of backup do not match and cannot be decrypted, so it is possible to reliably prevent a restore mistake due to a mistake in putting a portable medium.

The invention described in the claims of the present application can be expressed in a different way as follows.

(1) A primary storage device for storing user data, a secondary storage device using a portable medium, a work of backing up the user data stored in the primary storage device to the secondary storage device, and A data center including a backup control device that restores user data from a secondary storage device to the primary storage device, an encryption / decryption device that encrypts and decrypts the user data, and the data center Encryption key / decryption key generation means for generating an encryption key and a decryption key used by the encryption / decryption means, and an encryption key for storing and managing the encryption key / decryption key generated by the encryption key / decryption key generation means / A network for mutually connecting at least one user having a decryption key management means, the data center and at least one user A data backup / restoration method comprising the following: the backup control device of the data center encrypts user data stored in the primary storage device by using the encryption / decryption means to perform the secondary storage. When the backup control device backs up to the device, the backup control device generates ID information corresponding to the backup operation, and the backup control device uses the generated ID information to send an encryption key to the user via the network. And the steps required by
A step in which the user generates an encryption key and a decryption key corresponding to the ID information and registers them in the encryption key / decryption key management means; and the encryption key generated by the user in the backup control device in the data center. Sending via the network, the encryption / decryption means encrypts the user data using the sent encryption key, the backup control device of the data center stores the secondary storage An ID generated when the backup control device backs up the user data to be restored to the secondary storage device when the user data encrypted and stored in the device is decrypted and restored to the primary storage device Requesting the user to send a decryption key via the network using information; The step of the user obtaining the decryption key corresponding to the ID information by referring to the encryption key / decryption key management means, and the decryption key obtained by the user to the backup control device of the data center via the network. And a step of causing the encryption / decryption means to decrypt the encrypted user data using the transmitted decryption key. Method.

(2) The data backup / restore method according to item (1), wherein the primary storage device according to item (1) is a magnetic disk device.

(3) The data backup / restore method according to item (1), wherein the secondary storage device according to item (1) is a tape library device that uses a magnetic tape as a portable medium.

(4) The data backup / restore method according to item (1), wherein the secondary storage device according to item (1) is a disk library device that uses a magneto-optical disk as a portable medium.

(5) The data backup / restoration method according to item (1), wherein the magneto-optical disk according to item (4) is a DVD-RAM.

(6) The encryption key / decryption key management means described in item (1) includes means for storing the ID information corresponding to the backup and the encryption key and the decryption key generated corresponding to the ID information in association with each other. The data backup / restoration method according to item (1).

(7) The backup control device according to item (1) stores the ID information corresponding to the backup, the user information to be backed up, the user data information, and the portable medium information in association with each other. The data backup / restoration method according to item (1), characterized in that

(8) The data backup / restoration method according to item (1), wherein the backup control device according to item (1) sends the ID information corresponding to the backup to the user via a firewall. .

(9) User's encryption key described in item (1) /
The data backup / restoration method according to item (1), wherein the decryption key management means sends the encryption key or the decryption key corresponding to the ID information to the backup control device of the data center via a firewall.

(10) A primary storage device for storing user data, a secondary storage device using a portable medium, a work for backing up the user data stored in the primary storage device to the secondary storage device, and the above A backup control device that restores user data from a secondary storage device to the primary storage device, and decrypts an encryption key or a decryption key encrypted with a public key using a secret key based on a public key encryption method. Means and an encryption / decryption means for encrypting and decrypting the user data, and an encryption key used in the encryption / decryption means of the data center and an encryption key for generating a decryption key / Decryption key generation means, encryption key / decryption key management means for storing and managing the encryption key and the decryption key generated by the encryption key / decryption key generation means, and public key encryption At least one user having means for encrypting an encryption key or a decryption key using a public key based on a formula, a certificate authority that stores the public key based on a public key cryptosystem, and the data center and at least one A data backup / restoration method comprising a network interconnecting the user and the certificate authority, wherein the backup control device of the data center encrypts the user data stored in the primary storage device. / A step of generating ID information corresponding to a backup operation by the backup control device when encrypted by using the decryption means and backed up in the secondary storage device; and the ID generated by the backup control device.
A step of requesting the user to send an encryption key via the network using information, and the user generates an encryption key and a decryption key corresponding to the ID information and registers them in the encryption key / decryption key management means. And a step in which the user obtains the public key of the data center from the certificate authority, and a step in which the user encrypts the encryption key generated by the encryption means using the obtained public key. A step in which the user sends the encrypted encryption key to the backup control device in the data center via the network; and a secret key held by the encryption / decryption means in the data center. The step of decrypting the encrypted encryption key sent from the user by the decryption unit using the decryption unit, and the encryption / decryption means. Encrypting the user data using the decrypted encryption key, and the backup control device of the data center decrypts the user data encrypted and stored in the secondary storage device to When restoring to the primary storage device, the backup control device sends the decryption key to the user using the ID information generated when backing up the user data to be restored to the secondary storage device via the network. In the above step, the user refers to the encryption key / decryption key management means to obtain the decryption key corresponding to the ID information, and the user obtains the public key of the data center from the certificate authority. Steps to
A step of encrypting the decryption key acquired by the encryption means by the user using the acquired public key; and a network in which the decryption key encrypted by the user is stored in the backup control device of the data center. And a step of sending the encrypted decryption key sent from the user by the decryption unit using the private key held by the encryption / decryption means of the data center. And a step of decrypting the encrypted user data by the encryption / decryption means using the decrypted decryption key.

Although the invention made by the present inventor has been specifically described based on the embodiments, the present invention is not limited to the above-mentioned embodiments, and various modifications can be made without departing from the scope of the invention. Needless to say.

[0078]

[Effect of the Invention] In-house data center and IDC / SSP
In such a data center environment, the effect that the confidentiality and security of the data encrypted and stored in the portable medium can be enhanced can be obtained.

It is possible to prevent the encrypted data stored in the portable medium from being decrypted by an unauthorized user.

In the environment of a data center, when encrypting and backing up data on a portable medium, the encryption key / decryption key storage method and the data backup / restore for enhancing the confidentiality and security of the data. The effect is that a method can be provided.

[Brief description of drawings]

FIG. 1 is a conceptual diagram showing an example of an overall configuration of a storage service system including a data storage device according to a first embodiment of the present invention.

FIG. 2 is a conceptual diagram showing a configuration example of a key management table in a storage service system including a data storage device according to the first embodiment of the present invention.

FIG. 3 is a conceptual diagram showing a configuration example of a backup management table in the storage service system including the data storage device according to the first embodiment of this invention.

FIG. 4 is a flowchart showing a backup operation in the data storage device according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing a restore operation in the data storage device according to the first embodiment of the present invention.

FIG. 6 is a conceptual diagram showing an overall configuration of a storage service system including a data storage device according to a second embodiment of the present invention.

FIG. 7 is a conceptual diagram showing an overall configuration of a storage service system including a data storage device according to a third embodiment of the present invention.

FIG. 8 is a flowchart showing an encryption key sending operation of a storage service system including a data storage device according to a third embodiment of the present invention.

[Explanation of symbols]

100 ... Data center, 101 ... Magnetic disk device (first storage device), 102 ... User data A, 103 ...
User data B, 110 ... Backup control device, 11
1 ... Backup ID generation unit, 112 ... Backup management table, 113 ... Data control unit, 114 ... Encryption key /
Decryption key receiving unit, 115 ... Backup control unit, 116 ...
Communication function, 120 ... Encryption / decryption device, 130 ... Tape library device (second storage device), 131 ... Magnetic tape B, 132 ... Magnetic tape A, 140 ... Network,
150 ... User A, 151 ... Encryption key / decryption key generation device A, 152 ... Encryption key / decryption key management device A, 153 ... Key management table A, 154 ... Key transmission part A, 155 ... Communication function A, 156 ... Fire Wall A, 157 ... Encryption unit A, 161 ... Encryption key / decryption key generation device B, 162 ... Encryption key / decryption key management device B, 163 ... Key management table B, 1
64 ... Key transmission unit B, 165 ... Communication function B, 166 ... Firewall B, 167 ... Encryption unit B, 170 ... Internal network, 180 ... Certificate authority, 181, ... Public key, 18
2 ... Private key, 201 ... Backup ID n, 202 ... Encryption key n, 203 ... Decryption key n, 301 ... Backup ID
Information (backup IDn), 302 ... User information (user A), 303 ... User data information (user data A), 304 ... Magnetic tape information (magnetic tape A).

Claims (5)

[Claims] 1. A first storage device for storing user data, a second storage device using a portable medium, and a work for backing up user data stored in the first storage device to the second storage device. A data storage device including a backup control device that restores user data from the second storage device to the first storage device, the data storage device comprising a user who owns the user data via an information network. Data encryption means for encrypting the user data backed up from the first storage device to the second storage device using the received encryption key, via the information network from the user who is the owner of the user data The decryption key received from the second storage device is used to decrypt the user data restored to the first storage device. Data storage device, characterized in that it comprises at least one of the decoding means. 2. The data storage device according to claim 1, wherein the backup control device includes a backup identification information generation unit that generates backup identification information for each backup operation of the user data, and the backup control device includes: Sending backup identification information to the user via the information network, receiving the encryption key or the decryption key corresponding to the backup identification information, and encrypting the user data by the data encryption means at the time of backup. Or a data storage device for performing decryption at the time of restoring the user data by the data decrypting means. 3. A first storage device for storing user data, a second storage device using a portable medium, and a work for backing up user data stored in the first storage device to the second storage device. A data backup method in a data storage device, comprising: a backup control device that restores user data from the second storage device to the first storage device, wherein the owner of the user data is via an information network. A step of obtaining an encryption key from a user, and a step of encrypting the user data using the encryption key and backing it up from the first storage device to the second storage device. Data backup method. 4. A first storage device for storing user data, a second storage device using a portable medium, and a work for backing up user data stored in the first storage device to the second storage device. A data restoration method in a data storage device, comprising: a backup control device that restores user data from the second storage device to the first storage device, wherein the owner of the user data is via an information network. A step of obtaining a decryption key from a user, and a step of decrypting the encrypted user data stored in the second storage device by using the decryption key and restoring the user data in the first storage device, A method for restoring data, comprising: 5. The data restoration method according to claim 4, wherein the decryption key generated in pair with the encryption key used at the time of backing up the user data by the data backup method according to claim 3 is the information network. A method for restoring data, characterized in that the data is acquired via a restore and executed.