JP2004110408A - Electronic safe-deposit box system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic safe-deposit box system capable of protecting electronic data from reading or alteration by a disguised outsider for safe use by a subscriber. <P>SOLUTION: A storage device 1 constituting this electronic safe-deposit box system having an electronic safe-deposit box 6 is provided with a control part 11, a subscriber encoding part 12, a work memory 13, an administrator encoding part 14, an electronic safe-deposit box access part 15, an administrator decoding part 16, and a subscriber decoding part 17. In storage of the electronic data in the electronic safe-deposit box 6, the electronic data are encrypted in the subscriber encoding part 12 by using a subscriber encoding key and in the administrator encoding part by using a system administrator encoding key to be stored in a doubly encoded condition. The electronic data is read by decoding them by means of the system administrator decoding key in the administrator decoding part 16 and decoded by means of a subscriber decoding key in the subscriber decoding part 17. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a method for storing electronic data owned by a company or an individual. A storage device for electronic data and a subscriber terminal device are provided on a wide-area communication network such as the Internet, and a storage area in the storage device is subscribed. An electronic lending safe system that can be provided to a subscriber and can write or read electronic data to or from the storage area via a communication network from a subscriber terminal device, wherein an electronic data storage device is provided at a location remote from an office or home. The present invention relates to an electronic lending safe system in which a storage area assigned to a device can be freely accessed via a communication network such as the Internet.
[0002]
[Prior art]
As a method for storing electronic data created by a PC or the like, it is general that the electronic data is stored in a storage medium such as a hard disk, a floppy (registered trademark) disk, or a CD-ROM, and a company or individual manages the storage medium. The electronic data is read out from a storage medium storing the electronic data desired to be used when necessary. In addition, important electronic data is stored in multiple storage media, and the storage locations are dispersed, so that even if the storage media itself is lost due to mismanagement or the storage media itself breaks down due to an accident or disaster, the electronic data can be stored. Can be prevented from disappearing.
[0003]
Recently, there is a method of providing a storage device on a communication system such as the Internet. That is, a storage device is provided in a place remote from a company office or an individual's home that handles electronic data, and the storage device is accessed from the office or home via the Internet. According to this method, loss of important electronic data can be prevented even at the time of a natural disaster such as an earthquake or a fire by setting a storage location of backup data at a remote location from an office or home. Further, by providing a plurality of storage devices at remote locations, even if a disaster occurs in one location, it is possible to secure and access electronic data without affecting other storage devices (for example, see Patent Document 1). ).
[0004]
In the method disclosed in Patent Document 1, since a storage device for storing electronic data is connected to the Internet, it is very important to ensure security for the storage device and each subscriber's access to electronic data.
[0005]
Even when an ID or password is used to access the storage device, if an outsider knows the ID and password, there is a possibility that important electronic data may be stolen or changed.
[0006]
In addition, since the system administrator can freely view the electronic data in the storage device, it becomes difficult for each subscriber to store the confidential electronic data that no one wants to see in the storage device. Furthermore, when a computer virus occurs on the Internet, if a storage device is infected, electronic data may be destroyed or access to the storage device may not be possible.
[0007]
[Patent Document 1]
JP-A-11-149412
[Problems to be solved by the invention]
SUMMARY OF THE INVENTION An object of the present invention is to solve the above-mentioned problems and protect important electronic data stored in a storage device on the Internet from disasters, computer viruses, and viewing or changing by outsiders, so that subscribers can use it with peace of mind. An electronic lending safe system is provided.
[0009]
[Means for Solving the Problems]
In order to solve the above problems, the present invention provides a storage device for electronic data and a subscriber terminal device on a wide range communication network such as the Internet, and provides a storage area in the storage device to a subscriber, In an electronic lending safe system in which electronic data can be written or read from a subscriber terminal device to or from the storage area via a communication network, a subscriber authentication unit that authenticates an accessing subscriber in the storage device; An encryption unit for encrypting electronic data using an encryption key owned by a user, an encryption unit for encrypting electronic data using an encryption key owned by an electronic lending safe system administrator, and An electronic lending safe access unit for accessing the stored storage area, a decryption unit for decrypting electronic data using an encryption key owned by the electronic lending safe system administrator, Subscriber provided a decoding unit to decode an electronic data read from the electronic safe deposit box using a decryption key owned. According to this electronic lending safe system, the electronic data created by each subscriber is double-encrypted by the encryption by the subscriber and the encryption by the administrator and is stored in the storage area, so that access to the storage area is achieved. It is possible to prevent the electronic data from being viewed or changed by a person who is not permitted to use, and at the same time, to use the electronic lending safe without worrying about the reading by the system administrator.
[0010]
Further, in the electronic lending safe system according to the present invention, when a subscriber writes or reads out electronic data, a path for authenticating the subscriber is connected in advance to the subscriber terminal. Features. In this electronic lending safe system, before a subscriber accesses the electronic lending safe, the subscriber is authenticated by a high-security path that does not allow eavesdropping from outside, so that the authentication information of each subscriber is transmitted from outsiders. Can be protected.
[0011]
Further, according to the present invention, in the electronic lending safe system, a security system including a subscriber authentication system and a subscriber encryption system is constructed in the storage device. This can prevent a person who is not permitted to access from viewing or changing the electronic data.
[0012]
According to the present invention, in the storage device of the electronic lending safe system, a virus check is performed on the electronic data sent from the subscriber before performing the subscriber encryption. By performing a virus check on the plaintext electronic data sent from the subscriber, it is possible to prevent virus infection in the storage device and the storage area, and to prevent the electronic data of each subscriber from being damaged or lost. In addition, the storage device and the electronic data can be protected from viruses that have occurred on the Internet.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of an electronic lending safe system according to the present invention will be described with reference to FIGS.
[0014]
FIG. 1 shows the configuration of an electronic lending safe system using the present invention. Company A's PC 2A, Company B's PC 2B, and Mr. C's PC 2C have contracts with arbitrary providers, respectively, and are connected to the Internet 3. The Internet 3 is connected to the storage device 1 that configures the electronic lending safes 6a to 6n owned by the operating company of the electronic lending safe system. The electronic lending safes 6a to 6n are storage areas for electronic data provided in the storage device 1 and owned by the operating company of the electronic lending safe system, and provide these areas to each subscriber. The storage device 1 manages electronic data in the electronic lending safes 6a to 6n and controls access to the electronic lending safe.
[0015]
In the present embodiment, an electronic lending safe 6a is assigned to Company A, and similarly, an electronic lending safe 6b is assigned to Company B, and an electronic lending safe 6c is assigned to Mr. C. I do. Each subscriber, Mr. A, Mr. B, and Mr. C can access their assigned electronic lending safe via the Internet 3 and the storage device 1.
[0016]
The operating company of the above-mentioned electronic lending safe system collects the usage fee of the electronic lending safe from each subscriber, and performs the operation of the system and the equipment management based on the cost.
[0017]
Similarly to the method described in Patent Literature 1, each subscriber is given a unique login ID from the operating company of the electronic lending safe system at the time of contracting for the electronic lending safe, and at the same time, the password and the password selected by each subscriber by himself / herself. Register the IP address of the PC to be used. When each subscriber uses the electronic lending safe, the storage device 1 is accessed, the login ID given at the time of the contract, the registered password, and the transmission source IP address are recognized as the subscriber who has contracted. Is allowed to access the assigned electronic lending safe.
[0018]
Therefore, as in the case of the company A in FIG. 1, when a business traveler uses an electronic lending safe from the business travel destination via the PC 2A-1, an additional IP address is applied in advance to the operating company of the electronic lending safe system. By publishing the login ID and password to the PC 2A-1 at the business trip destination, the user can access the electronic lending safe 6a from the business trip destination.
[0019]
The operating company of the electronic lending safe system encrypts the electronic data stored in the electronic lending safes 6a to 6n, so that anyone who is not permitted to access the electronic lending safe cannot view or change the electronic data. I have to. The configuration of the storage device 1 that realizes encryption in this electronic lending safe system will be described below with reference to FIG.
[0020]
The storage device 1 includes a control unit 11, a subscriber encryption unit 12, a work memory 13, an administrator encryption unit 14, an electronic lending safe access unit 15, an administrator decryption unit 16, a subscriber decryption unit 17, and an electronic lending unit. It comprises safes 6a to 6n.
[0021]
The control unit 11 performs subscriber authentication 112, reception of an encryption key / decryption key managed by the subscriber, transmission / reception of electronic data, and control of each internal block. Further, the control unit 11 has a function of controlling a path connection with the subscriber terminal device 2 and a function 111 of performing a virus check on received electronic data.
[0022]
The subscriber encryption unit 12 has a function of encrypting electronic data to be stored by the subscriber using an encryption key managed by the subscriber and transmitting the encrypted electronic data to the work memory 13.
[0023]
The work memory 13 has a function of storing electronic data encrypted with the subscriber encryption key and storing the electronic data of the subscriber decrypted with the administrator decryption key.
[0024]
The administrator encryption unit 14 reads the electronic data encrypted by the subscriber encryption unit 12 from the work memory 13, encrypts the electronic data using an encryption key managed by the system administrator, and transmits the encrypted data to the electronic lending safe access unit 15. It has the function to do.
[0025]
The electronic lending safe access unit 15 has a function of storing and reading out electronic data with respect to the electronic lending safes 6a to 6n according to a request from the control unit 11.
[0026]
The administrator decryption unit 16 reads the electronic data read from the electronic lending safe at the request of the subscriber from the electronic lending safe access unit 15 and decrypts the electronic data using the decryption key managed by the system administrator. 13 is provided.
[0027]
The subscriber decryption unit 17 has a function of reading out the electronic data decrypted by the administrator decryption unit 16 from the work memory 13, decrypting the electronic data using a decryption key managed by the subscriber, and transmitting the decrypted electronic data to the control unit 11. ing.
[0028]
Hereinafter, the flow of electronic data when a subscriber accesses the electronic lending safe via the storage device 1 will be described in detail with reference to FIGS. 3 and 4 in a case where the PC 2B of Company B accesses the electronic lending safe 6b. Will be described.
[0029]
The process of storing the electronic data 60 from the company B PC 2B in the electronic lending safe 6b will be described with reference to FIG. First, a pass is connected from the company B PC 2B to the storage device, and the subscriber is authenticated by the storage device 1 using the login ID and the password (step S1). Next, the electronic data 60 and the encryption key b01 managed by the company B are transmitted from the company B PC 2B to the control unit 11 in the storage device 1 via the Internet 3 (step S2).
[0030]
The control unit 11 performs a virus check 111 on the received electronic data 60 and encryption key b01 (step S3). As a result, if a virus is confirmed, the electronic data 60 and the encryption key b01 are discarded, and a notification of virus confirmation is sent to the PC B2 of Company B. If no virus is found, the subscriber encryption unit 12 encrypts the electronic data 60 with the encryption key b01 (step S4) to create the electronic data 601 and temporarily stores it in the work memory 13 (step S5). .
[0031]
The control unit 11 performs an encryption process on the electronic data 601 using the encryption key b02 managed by the system administrator to create the electronic data 602 in the administrator encryption unit 14 (step S6), and duplicates the data. The encrypted electronic data 602 is transmitted to the electronic lending safe access unit 15.
[0032]
The electronic lending safe access unit 15 stores the electronic data 602 in the electronic lending safe 6b according to an instruction from the control unit 11 (step S7).
[0033]
Next, a process for reading out the electronic data 601 stored in the electronic lending safe 6b from the company B PC 2B will be described with reference to FIG. As in the case of storing electronic data, first, a pass is connected to the storage device from the company B PC 2B, and the subscriber is authenticated by the storage device 1 using the login ID and the password (step S11). Company B PC 2B transmits a read request for electronic data to control unit 11 in storage device 1 (step S12).
[0034]
Since the electronic lending safe 6b stores the electronic data 602 obtained by doubly encrypting the electronic data 60, the control unit 11, which has received the read request, transmits the decryption key managed by the company B so as to transmit the decryption key. At the same time as making a request to the company PC 2B (step S13), it instructs the electronic lending safe access unit 15 to read the electronic data 602 from the electronic lending safe 6b (step S14).
[0035]
The electronic lending safe access unit 15 reads the double-encrypted electronic data 602 from the electronic lending safe 60b and sends it to the administrator decryption unit 16 (step S15).
[0036]
The control unit 11 decrypts the electronic data 602 into the electronic data 601 using the decryption key b12 managed by the system administrator in the administrator decrypting unit 16 (step S16), and temporarily stores it in the work memory 13 (step S17). ).
[0037]
During this time, the company B PC 2B transmits the decryption key b11 in response to the decryption key request in step S13 (step S18).
[0038]
The control unit 11 in the subscriber decryption unit 17 decrypts the electronic data 601 using the decryption key b11 received from the company B PC, obtains the electronic data 60 (step S19), and transmits it to the company B PC 2B. (Step S20).
[0039]
In this way, the electronic lending safe manager, upon receiving a write request from the subscriber, authenticates that this subscriber is a registered subscriber, and then sends the raw data or The virus check of the encrypted data is performed, the sound data is encrypted using the subscriber encryption key, and the electronic data is double-encrypted using the administrator encryption key and stored in the electronic lending safe. It is possible to prevent anyone other than the subscriber from accessing the electronic lending safe, secure the security of the electronic data, and reliably protect against viruses. Also, even if an intruder other than the subscriber accesses the electronic lending safe and retrieves the subscriber's electronic data 601, an intruder who does not have a subscriber decryption key can decrypt the read electronic data. Data security is protected.
[0040]
As described above, the operating company of the electronic lending safe system attempts to access the electronic lending safe of a person other than the subscriber or another subscriber by constructing the security system for the storage device 1 and the electronic lending safes 6a to 6n. Protects electronic data from those who do. The login ID and password used in the electronic lending safe system are transmitted and received in an encrypted form to prevent eavesdropping. This security system employs a transparent encryption method.
[0041]
With regard to virus infection, virus check is performed before encrypting electronic data received from a subscriber, thereby preventing infection of the electronic lending safe. The storage device 1 periodically performs a virus check in addition to the electronic data from each subscriber, and prevents the virus that has occurred on the Internet 3 from infecting the storage device 1 itself. Destruction of electronic data due to malfunction or the like can also be prevented.
[0042]
By using the above-mentioned double encryption in combination with the security system and the virus check, it is possible to strongly prevent electronic data from being viewed and changed by an outsider impersonating the subscriber. For example, even if the login ID and the password are eavesdropped by an outsider by any method, first, the access can be denied due to the mismatch of the transmission source IP address.
[0043]
Even if the security system is breached, the electronic data cannot be completely restored without the decryption key managed by each subscriber, so that the browsed electronic data becomes meaningless.
[0044]
Further, in order to cope with the case where the decryption key managed by the subscriber is stolen, the storage device in which the number of encryption / decryption keys managed by the subscriber is increased and the number of times of encryption is increased, is further improved. High security can be maintained.
[0045]
In addition, the electronic data in the electronic lending safe, which can be freely viewed by the system administrator, is encrypted with the encryption key managed by the subscriber, so the confidential electronic data that the subscriber does not want anyone to see is also strict. Will be stored.
[0046]
【The invention's effect】
As described above, according to the present invention, since the electronic data is encrypted using not only the encryption key owned by the system administrator but also the encryption key owned by each subscriber, the electronic data in the electronic lending safe is transmitted to the system administrator. Even they are not viewed and can be stored very safely. In addition, even in the case of an attack or virus infection by an outsider, a highly reliable electronic lending safe system can be provided by constructing a security system and exercising a virus check function.
[Brief description of the drawings]
FIG. 1 is a configuration diagram of an electronic lending safe system.
FIG. 2 is a configuration diagram of a storage device configuring the electronic lending safe system according to the present invention.
FIG. 3 is a flowchart of storing electronic data in an electronic lending safe according to the present invention.
FIG. 4 is a flowchart of reading electronic data from an electronic lending safe according to the present invention.
[Explanation of symbols]
Reference Signs List 1 storage device 11 control unit 111 virus check function 112 authentication function 12 subscriber encryption unit 13 work memory 14 administrator encryption unit 15 electronic safe access unit 16 subscriber decryption unit 17 administrator decryption unit 2A PC of company A
2A-1 Company A business traveler PC
2B Company B PC
2C C Company PC
3 Internet 6a-6n Electronic lending safe 60 Electronic data 601 Electronic data (single encryption)
602 Electronic data (double encryption)
b01 Subscriber encryption key b02 Administrator encryption key b11 Subscriber decryption key b12 Administrator decryption key

Claims (4)

A storage device for electronic data and a subscriber terminal device are provided on a wide range of communication network, a storage area in the storage device is provided to the subscriber, and electronic data is transmitted from the subscriber terminal device to the storage region via the communication network. In an electronic lending safe system where data can be written or read,
In the storage device,
A subscriber authentication unit for authenticating the accessing subscriber;
An encryption unit that encrypts electronic data using an encryption key owned by each subscriber;
An encryption unit that encrypts electronic data using an encryption key owned by an electronic lending safe system administrator;
An electronic safe access unit for accessing a storage area provided to the subscriber;
A decryption unit that decrypts electronic data using an encryption key owned by an electronic lending safe system administrator;
A decryption section for decrypting electronic data read from the electronic lending safe using a decryption key owned by each subscriber. 2. The electronic lending safe system according to claim 1, wherein when the subscriber writes or reads out the electronic data, a path for authenticating the subscriber is connected in advance to the subscriber terminal. Electronic safe box system as described. 3. The electronic lending safe system according to claim 1, wherein in the electronic lending safe system, a security system including a subscriber authentication system and a subscriber encryption system is constructed in the storage device. 4. The storage device of the electronic lending safe system, wherein electronic data sent from a subscriber is checked for viruses before performing subscriber encryption. 3. The electronic lending safe system according to any one of 3.

Images