JP2004118241A - Data processing terminal, data control server, data processing method and program for executing this method by computer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure security equal to data before a change even in data after the change when requiring to change the data content by making data use impossible except for a terminal for acquiring prescribed data. <P>SOLUTION: When requiring the data from a data processing terminal 2, a data control server calls out the data from a data storage means 12, and calls out security information on the prescribed data from a security information storage means 10. These data are enciphered, and are transferred to the data processing terminal from the data control server. The data processing terminal decodes these data, and then, enciphers the decoded data again by using one's own terminal ID (identification information) acquired by a terminal ID acquiring means 19, and stores the data in a data storage means 23. When using this data, the data is decoded by a terminal security decoding means 25 by using the terminal ID. Even when updating the data, the security information is succeeded. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
TECHNICAL FIELD The present invention relates to a data processing terminal, a data management server, a data processing method, and a program for executing the method by a computer, which protect data transmitted and received between a server and a client through a communication line. The present invention relates to a data processing terminal, a data management server, a data processing method, and a program for causing a computer to execute the method, which efficiently manages data such as design, manufacturing data, and technical documents created in a cycle.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, when data security is protected in data management, when data is taken out from a server terminal that manages the data, it is common to perform control such as reading or rewriting of data according to a predetermined access right. .
[0003]
For protection of data after extraction, for example, by encrypting transmission information for broadcasting and broadcasting to an unspecified number of people, by transmitting a decryption key to a specific terminal through a communication path, Japanese Patent Application Laid-Open Publication No. H10-157, for example, discloses a technology that can prevent unauthorized decryption of encrypted transmission information, encrypts and distributes electronic book information with a dedicated viewing key, and requests a decryption key. If there is, a technique for performing a predetermined charging process and distributing a decryption key capable of decrypting the encrypted data (for example, see Patent Document 2) is known.
[0004]
[Patent Document 1]
JP-A-10-117173 (paragraphs [0027] to [0031], FIG. 2)
[Patent Document 2]
JP 2000-112857 A (paragraph [0010])
[0005]
[Problems to be solved by the invention]
However, in the conventional technology, if the user who took out the data has the right authority, it is possible to freely take out the data, and with respect to the taken out data, it is also easy to copy the data, When data is copied to the outside, it cannot be prevented that the data is copied or altered in a casual manner, and there is a problem that the data is reused as another data and another use.
[0006]
Further, in the conventional technology for handling transmission information and electronic book information in broadcasting, unauthorized use is restricted only to browsing and reproducing data, and both the server and the client, such as data generated in a product development cycle, are limited. It cannot be applied to data that should be set so that the data can be revised. In the method of decrypting encrypted data by acquiring a decryption key, there is a problem that if the decryption key is illegally acquired, the data is easily decrypted and copied.
[0007]
In view of the above problems, the present invention makes it impossible to use data on terminals other than those that have obtained predetermined data, and when it is necessary to revise (change) the data contents, Another object of the present invention is to provide a data processing terminal, a data management server, a data processing method, and a program for executing the method by a computer, which can ensure the same security as the data before revision.
[0008]
[Means for Solving the Problems]
In order to achieve the above object, in the data processing terminal according to the first aspect and the data processing method according to the fifteenth aspect, the data processing terminal stores data via a communication transmission path and manages data security. Receiving the data from the data management server that performs the processing, obtains the identification information that enables the data processing terminal to be identified, and encrypts the data received from the data management server using the obtained identification information. Like that.
Thus, data received by a predetermined data processing terminal can be decoded only by the data processing terminal.
[0009]
Further, in the data processing terminal according to the second aspect, the data processing terminal receives security information in which the authority to use the data received from the data management server is determined.
As a result, it is possible to attach the usage right to the data received by the data processing terminal.
[0010]
Furthermore, in the data processing terminal according to the third aspect, when at least one of the data and security information received from the data management server is subjected to predetermined encryption in order to enhance the security of the data in the communication transmission path, , The data processing terminal decrypts predetermined encryption.
As a result, it is possible to increase security in a communication transmission path between two terminals where data transfer is performed.
[0011]
Further, in the data processing terminal according to claim 4 and the data processing method according to claim 16, when the data received from the data management server is encrypted using the acquired identification information, In addition, data obtained by combining data received from the data management server and security information is encrypted.
This makes it possible to set the data and the security information as a set and perform encryption that can be decrypted only by the data processing terminal.
[0012]
Further, in the data processing terminal according to claim 5 and the data processing method according to claim 17, when the encrypted data encrypted using the identification information is used, the encrypted data is encrypted using the identification information. Is to be decrypted.
This makes it possible to decrypt the encrypted data, when necessary, using the identification information of the data processing terminal.
[0013]
Further, in the data processing terminal according to the sixth aspect and the data processing method according to the eighteenth aspect, the decrypted data decrypted by using the identification information is updated, and the security information and the update related to the decrypted data before the update are updated. The subsequent decoded data is stored in association with the decoded data.
As a result, even when the data is updated, the security information before the update can be inherited.
[0014]
Furthermore, in the data processing terminal according to the seventh aspect and the data processing method according to the nineteenth aspect, the security information relating to the decrypted data before the update and the decrypted data after the update are combined using the identification information. Try to encrypt data.
As a result, it is possible to set the updated data and the security information relating to the data before the update, and to perform encryption that can be decrypted only by the data processing terminal.
[0015]
Furthermore, in the data processing terminal according to claim 8 and the data processing method according to claim 20, the data processing terminal transmits, to the data management server, security information relating to the decrypted data before the update and the decrypted data after the update. When transmitting encrypted data in combination with the above, the identification data is added to the encrypted data and transmitted.
Accordingly, the data management server that has received the encrypted data of the security information related to the decrypted data before update and the decrypted data after update can decrypt the encrypted data using the added identification information. It becomes possible.
[0016]
Furthermore, in the data processing terminal according to the ninth aspect, when transmitting the encrypted data and the identification information added to the encrypted data to the data management server, the data processing terminal may perform the encryption in order to increase the security of the data in the communication transmission path. Data and identification information are subjected to predetermined encryption.
As a result, it is possible to increase security in a communication transmission path between two terminals where data transfer is performed.
[0017]
In order to achieve the above object, in the data management server according to the tenth aspect and the data processing method according to the twenty-first aspect, the data management server receives a data request from a data processing terminal, and stores the data request. Means for reading the requested data, reading security information of the requested data from the security information storage means for storing security information for which the right to use the data is determined, and sending the requested data to the data processing terminal. The security information of the requested data is transmitted.
This makes it possible to attach the use authority to the data transmitted to the data processing terminal.
[0018]
Further, in the data management server according to the eleventh aspect and the data processing method according to the twenty-second aspect, when data transmitted by the data processing terminal is updated, the security related to the data before the update is transmitted from the data processing terminal. The information and the updated data are combined to receive data encrypted with identification information capable of identifying the data processing terminal and identification information of the data processing terminal.
Accordingly, the data management server that has received the encrypted data of the updated data and the security information relating to the data before the update can further receive the identification information serving as the decryption key of the encrypted data.
[0019]
Furthermore, in the data management server according to the twelfth aspect and the data processing method according to the twenty-third aspect, the data processing terminal combines the security information relating to the data before update and the data after update from the data processing terminal. When the encrypted data and the identification information are received with the identification information that can be identified, the data of the combination of the security information related to the data before the update and the data after the update are decrypted using the identification information. Like that.
Accordingly, the data management server that has received the encrypted data of the updated data and the security information relating to the data before the update further receives the identification information serving as the decryption key of the encrypted data, and uses this identification information. Thus, the encrypted data can be decrypted.
[0020]
Further, in the data management server according to the thirteenth aspect and the data processing method according to the twenty-fourth aspect, the security information relating to the data before update received from the data processing terminal and the security information set in the data in advance And determining that the data is valid if the two security values match.
Thereby, even when the data is updated, the same security information is inherited before and after the update, and the validity of the data is guaranteed.
[0021]
Further, in the data management server according to the present invention, when at least one of the data encrypted using the identification information and the identification information is subjected to the predetermined encryption, the predetermined encryption is decrypted. Like that.
As a result, it is possible to increase security in a communication transmission path between two terminals where data transfer is performed.
[0022]
Further, according to the twenty-fifth aspect, there is provided a program for causing a computer to execute the data processing method of the present invention.
[0023]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a configuration diagram showing an embodiment according to the present invention. The data management server 1 of the present invention shown in FIG. 1, the in-house client terminal 2 which is the data processing terminal of the present invention, the firewall 3, the Internet 4, the client terminal 5 of the company A, and the client terminal 6 of the company B protect the distribution data security. The system is configured.
[0024]
The data management server 1 is a server that manages, for example, a file (hereinafter, also referred to as data) in which a description document such as a drawing or a specification document generated in a product development cycle is digitized. The data management server 1 is connected to the in-house client terminal 2 by, for example, an in-house LAN, receives a data retrieval or storage request from the in-house client terminal 2, manages access rights in file units, and according to the access rights. It is possible to determine permission / non-permission of access to a file from the in-house client terminal 2.
[0025]
In addition, the data management server 1 is connected to client terminals of another company (the client terminal 5 of the company A and the client terminal 6 of the company B) via the firewall 3 and the Internet 4. And a data retrieval or storage request from the client terminal 6 of the company B, the access right is managed in file units, and the file from the client terminal 5 of the company A or the client terminal 6 of the company B is transferred in accordance with the access right. It is possible to determine permission / non-permission of access.
[0026]
The data management server 1 and each client terminal (in-house client terminal 2, client terminal 5 of company A, client terminal 6 of company B: these may be collectively referred to as data processing terminals) are arithmetic means, control means It can be realized by a general PC (Personal Computer) including a storage unit, a display unit such as a display, and an input unit such as a keyboard.
[0027]
Next, a detailed configuration of the data management server 1 and the in-house client terminal 2 shown in FIG. 1 will be described. FIG. 2 is a detailed configuration diagram of the data management server and the in-house client terminal 2 according to the present invention.
[0028]
The data management server 1 shown in FIG. 2 includes a security information storage unit 10 for storing security information of each data (each file) stored in a data storage unit 12, and a security information setting unit 11 for managing security information of each data. A data storage unit 12 for storing data such as drawings and documents necessary for a product development cycle, a data input / output unit 13 for managing data input / output of the data storage unit 12, and security information including authority added to the data. An information encryption / decryption unit 15 that extracts and collectively encrypts / decrypts data and security information, and encrypts data that depends on the terminal ID (identification information) of the in-house client terminal 2 (using specific ID data). Terminal security decryption means 14 for decrypting, data communication means 16 for transmitting and receiving data It has.
[0029]
On the other hand, the in-house client terminal 2 shown in FIG. 2 includes a data communication unit 17 for transmitting / receiving data to / from the data management server 1, an information encryption / decryption unit 18 for encrypting / decrypting the acquired data, A terminal ID acquisition unit 19 that is an identification information acquisition unit that acquires a terminal ID unique to the terminal (for example, if a personal computer uses a MAC address, etc.), extracts security information of the acquired data from the decrypted download data, A data encryption terminal key generation unit 20 that generates an encryption key using a terminal ID (identification information) as a decryption key. The acquired data corresponds to the decryption key generated by the data encryption terminal key generation unit 20. Terminal security encryption means 21 for performing encryption with an encryption key; data input / output means 22 for controlling data input / output; , A data encryption detection unit 24 for detecting whether data stored in the data storage unit 23 is encrypted, a terminal security decryption unit 25 for decrypting encrypted data with a decryption key, It has security determining means 26 for determining the security of data and determining the authority to use the data, an application input / output interface 27 for exchanging data with each application, and an application 28 for displaying and processing unencrypted data.
[0030]
Although the configuration of the in-house client terminal 2 has been described above, the configurations of the client terminal 5 of the company A and the client terminal 6 of the company B are the same as above. Although the data management server 1 and the in-house client terminal 2 are shown to be realized by the above-described units, the same functions are programmed so that the programs can be executed by a central processing unit such as a CPU. It is also possible to realize the same function.
[0031]
Next, an operation when data is downloaded (transferred) from the data management server 1 to the in-house client terminal 2 in the distribution data security protection system shown in FIGS. 1 and 2 will be described with reference to FIG. I do. The case where the in-house client terminal 2 downloads data will be described. The operation when downloading data at the client terminal 5 of company A or the client terminal 6 of company B connected via the firewall 3 and the Internet 4 will be described. It is also possible to read the in-house client terminal 2 as the client terminal 5 of the company A or the client terminal 6 of the company B.
[0032]
FIG. 3 is a sequence chart for explaining an operation when data is downloaded from the data management server to the in-house client terminal according to the present invention. First, the data management server 1 is accessed on the in-house client terminal 2 and necessary data (data to be downloaded: referred to as download data) is selected from data stored in the data storage unit 12 on the data management server 1. Is also selected (step S101). This is performed, for example, by providing a list of data stored in advance in the data storage unit 12 of the data management server 1 to the in-house client terminal 2 and selecting necessary download data from the list of data. When download data is selected at the in-house client terminal, a download request for the selected download data is transmitted from the in-house client terminal 2 to the data management server 1 (step S102).
[0033]
The data management server 1 receives a data download request from the in-house client terminal 2 (step S103). Then, the security information setting means 11 retrieves the security information stored in the security information storage means 10 (step S104), and checks whether the download request from the in-house client terminal violates the security contents (step S104). S105). As information referred to as security information, for example, it is possible to use setting information of which client terminal each data may be transmitted to, and thereby, the data management server 1 allows the in-house client terminal 2 to approve the Can be performed.
[0034]
That is, for example, it is possible to determine, as security information, a setting of permission / non-permission of distribution for each data, and permission information (that is, whether or not distribution is possible beyond the firewall 3 and the Internet 4) It is also possible to set information indicating whether the data is handled only in the in-house LAN). If it is determined in step S105 that the security content is violated, an error occurs, and the transmission of the download data requested by the in-house client terminal 2 is not performed.
[0035]
FIG. 7 is a diagram showing the correspondence between the state of data and the contents according to the present invention. In FIG. 7, names (A to F) are given to the states of the data corresponding to the contents of the data. Also, the encircled line indicates inter-site encryption, and the double encircled line indicates terminal ID encryption. The security information extracted in step S104 is in the state A (security information).
[0036]
On the other hand, if the security content is confirmed and it is determined that there is no security violation, the data input / output unit 13 extracts the data requested from the in-house client terminal 2 from the data storage unit 12 (step S106). Then, the security information extracted in step S104 and the download data extracted in step S106 are supplied to the information encryption / decryption unit 15. At this point, the data is held in the data encryption / decryption means 15 in the state of B in FIG.
[0037]
Next, the information encryption / decryption means 15 encrypts the data together with the security information and the data (step S107). After encryption, the state of the data becomes the state C shown in FIG. Note that the encryption performed in step S107 is inter-site encryption for increasing confidentiality on the transmission path. As inter-site encryption, general DES (Data Encryption Standard) or RSA (Ron Riverst, Adi Shamir, It is possible to use encryption, such as public key encryption technology developed by Leonard Adleman). The encrypted data (encrypted by combining the security information and the data) is sent to the in-house client terminal 2 via the data communication means 16 via the LAN (step S108).
[0038]
The in-house client terminal 2 receives the encrypted data transmitted from the data management server 1 in step S108 (step S109), and the received data is supplied to the information encryption / decryption unit 18 to perform information encryption / decryption. The data is decoded by the decoding means 18 (step S110). The data after decryption in step S110 is in the state B shown in FIG. When the decryption is completed in step S110, the terminal ID acquisition unit 19 immediately acquires the terminal ID (identification information) of the in-house client terminal 2 (step S111). As the terminal ID, for example, a host ID can be used for a workstation, and a MAC address of a LAN card can be used for a PC. Further, it is also possible to use identification information other than the above, which enables identification of the in-house client terminal 2.
[0039]
The terminal ID is supplied to the data encryption terminal key generation means 20, and the data encryption terminal key generation means 20 generates a decryptable encryption key using the terminal ID obtained in step S111 as a decryption key (step S112). Then, the data in the state of B in FIG. 7 and the encryption key generated in step S112 are supplied to the terminal security encryption unit 21, and the terminal security encryption unit 21 uses the encryption key to The data decrypted in step S110 is encrypted again (step S113). The data at this point is in the state D shown in FIG. 7, and has been subjected to terminal ID encryption (encryption performed using an encryption key that can be decrypted using the terminal ID as a decryption key). Thus, the data encrypted in step S113 is stored in the data storage unit 23 on the client side via the data input / output unit 22 (step S109). Since the stored data can be decrypted by using the terminal ID as the decryption key, it can be decrypted only by the same terminal (a terminal that has encrypted this data).
[0040]
As described above, according to the above-described operation, the data management server 1 refers to the security information and approves the in-house client terminal 2 (from the in-house client terminal 2 not approved by the data management server 1). Since the data cannot be downloaded), and the in-house client terminal 2 that has downloaded the data has encrypted the data so that it can be decrypted only using the terminal ID (identification information) unique to each terminal as a decryption key. Even if data is copied or moved to another terminal, the content cannot be viewed on the other terminal.
[0041]
Next, referring to FIG. 4, in the in-house client terminal 2 shown in FIG. 1 and FIG. 2, the encrypted data stored in the data storage unit 23 by the above-described operation is called using an application and browsed (file open). ) Will be described. In the following, the internal client terminal 2 will be described. However, the operation of the client terminal 5 of the company A or the client terminal 6 of the company B is the same, and the internal client terminal 2 is replaced with the client terminal 5 of the company A or the client terminal of the company B. 6 can also be read.
[0042]
FIG. 4 is a sequence chart for explaining an operation of calling and browsing the encrypted data stored in the data storage means 23 using an application in the in-house client terminal according to the present invention. First, the in-house client terminal 2 starts the application 28 (step S201). After the activation of the application 28, data is selected from the selection screen to be browsed, and the selected data is taken out from the data storage unit 23 on the client side via the data input / output unit 22 (step S202). Then, the data encryption detection unit 24 detects whether the data extracted in step S202 is encrypted (step S203). When the extracted data is not encrypted, the data is displayed using the application 28 through the application input / output I / F 27 as a normal operation (step S209).
[0043]
On the other hand, in step S203, when the data encryption detection unit 24 detects that the extracted data is encrypted data (Yes in step S203), the terminal ID acquisition unit 19 operates. The terminal ID of the terminal being acquired is acquired (step S204), and the terminal security decryption means 25 decrypts the extracted encrypted data using the acquired terminal ID as a decryption key (step S205). When the encrypted data has been normally decrypted (step S205), the data is in the state B shown in FIG.
[0044]
Next, it is confirmed whether or not the decryption has been normally performed in step S205 (step S206). For example, when the data is not decrypted normally due to a different ID and an error occurs, the data is to be used by a client terminal different from the client terminal that has downloaded the data from the data management server 1 (ie, a different terminal). It recognizes that the decryption has been performed using the decryption key of the ID) (recognition by the CPU controlling the whole), displays a warning on the display (step S207), and interrupts the process. On the other hand, if the data has been decrypted normally, the security information is confirmed by the security determining means 26 (step S208), and the data decrypted using the application 28 (decrypted data) through the application input / output I / F 27. ) Is displayed (step S209).
[0045]
As described above, according to the above-described operation, the data management server 1 permits downloading by decrypting the encrypted data using the terminal ID (identification information) unique to each terminal as the decryption key. It is possible to display data only on the in-house client terminal 2 that has been downloaded and encrypted using its own terminal ID, and to prevent unauthorized duplication to other terminals Becomes possible.
[0046]
Next, referring to FIG. 5, in the in-house client terminal 2 shown in FIG. 1 and FIG. 2, the operation when data is saved and printed after the data is called using the application by the above operation. Will be described. In the following, the internal client terminal 2 will be described. However, the operation of the client terminal 5 of the company A or the client terminal 6 of the company B is the same. 6 can also be read.
[0047]
FIG. 5 is a sequence chart for explaining the operation when data storage and printing are performed after encrypted data is decrypted and called using an application in the in-house client terminal according to the present invention. First, using the application 28, a command for printing data or saving data after editing is executed (step S301). When the command is executed, the security determining unit 26 checks the security information of the data on which the command is to be executed (Step S302). FIG. 8 is a diagram for explaining the contents of the security information according to the present invention. The security information of the data downloaded from the data management server 1 and stored in the data storage unit 23 is in a format shown in FIG. 8, and for each data (file name), authority, download date and time, server ID (download (Identification information of the data management server 1). As the authority, it is possible to set r: call (view) authority, w: write (revision) authority, x: execution authority, o: overwrite authority, p: print authority, and the like.
[0048]
The security determining unit 26 refers to the authority portion described above, compares the authority set in the data with the content of the command to be executed, and determines whether to permit execution of the command (step S303). . If it is determined that there is no execution permission (No in step S303), a warning indicating that there is no authority on the application 28 is displayed on the display (step S304). On the other hand, when it is determined that the execution is permitted (Yes in step S303), it is determined whether or not the execution content is to save the edited data (step S305). If the data is not stored, it is determined whether or not to print the data (step S380). If the data is to be printed, a print command is executed (step S306), and the data is not printed. In this case, the input command is executed (step S390). On the other hand, in the case of data storage, the data storage processing after step S307 is performed. Here, in step S305, it is determined whether the command to be executed is a command for saving data or a command for printing data. However, a determination including other commands is performed, and after the command is determined, the command May be performed.
[0049]
If it is determined in step S305 that the data is to be stored (YEs in step S305), the terminal ID acquisition unit 19 acquires the terminal ID (step S307), and the data encryption terminal key generation unit 20 acquires the terminal ID in step S307. A decryptable encryption key is generated using the terminal ID as a decryption key (step S308). Then, the terminal security encrypting means 21 encrypts the edited or modified data together with the security information of the data set before the modification of the data (step S309), and the encrypted data is Is stored in the data storage unit 23 via the data input / output unit 22 (step S310).
[0050]
As described above, according to the above-described operation, the security (authority described in the security information) controlled by the data management server 1 can be reliably applied to the in-house client terminal 2. Further, even when the download data is re-edited by the in-house client terminal 2 and new data is created, the security information of the data before editing can be inherited by the data after editing.
[0051]
Next, referring to FIG. 3, in the distribution data security protection system shown in FIGS. 1 and 2, data edited at the in-house client terminal 2 is uploaded (transferred) to the data management server 1. The operation will be described. The case where the in-house client terminal 2 downloads data will be described. The operation when downloading data at the client terminal 5 of company A or the client terminal 6 of company B connected via the firewall 3 and the Internet 4 will be described. It is also possible to read the in-house client terminal 2 as the client terminal 5 of the company A or the client terminal 6 of the company B.
[0052]
FIG. 6 is a sequence chart for explaining the operation when the edited data is uploaded from the in-house client terminal to the data management server according to the present invention. First, data (data to be uploaded: sometimes referred to as upload data) to be registered in the data management server 1 is selected on the in-house client terminal 2 (step S401). The data (target data) selected in step S401 is retrieved from the data storage unit 23 by the data input / output unit 22 (step S402). The extracted data is in the state of D shown in FIG.
[0053]
Next, the terminal ID obtaining means 19 obtains the terminal ID (identification information) of the in-house client terminal 2 (step S403), and the information encryption / decryption means 18 obtains the data extracted in step S402 and the data extracted in step S402. The encryption is performed together with the acquired terminal ID (step S404). The data encrypted in step S404 is in the state of E shown in FIG. Then, the encrypted data created in step S404 is transmitted from the in-house client terminal 2 to the data management server 1 via the data communication means 17 (step S405).
[0054]
The data management server 1 receives the encrypted data transmitted from the in-house client terminal 2 via the data communication unit 16 (step S406), and the information encryption / decryption unit 15 decrypts the received encrypted data. (Step S407). The data at this point is in the state of F shown in FIG. Further, the terminal security decryption means 14 decrypts the encrypted security information and data using the terminal ID obtained at the time of decryption in step S407 as a decryption key (step S408). The data attains the state B shown in FIG. 7 by the decoding in step S408. Further, security information related to this data is obtained from the security information storage means 10 (step S409).
[0055]
Next, the security information setting unit 11 compares the security information obtained by the decryption in step S408 with the security information extracted from the security information storage unit 10 in step S409, and confirms whether or not they match ( Step S410). If the security information does not match, the data transmitted from the in-house client terminal 2 is regarded as illegal, and an error is notified to the in-house client terminal 2 via the data communication means 16 (step S411). In the present embodiment, the security information obtained by decryption and the security information retrieved from the security information storage unit 10 are compared and confirmed by the security information setting unit 11, but the terminal security decryption is performed. It is also possible to perform the comparison by the means 11 or other comparison and confirmation means, and to perform the comparison and confirmation means.
[0056]
Upon receiving the error (step S412), the in-house client terminal 2 displays the error on the screen (step S413). On the other hand, if the security information matches in step S410, the data input / output unit 13 saves (registers) the upload data in the data storage unit 12 (step S414). Via the means 16, a notice of normal registration (normal registration) is sent to the corresponding in-house client terminal 2 (step S415). Then, the in-house client terminal 2 receives the notification of the normal registration from the data management server through the data communication means 17 (step S416), and displays the normal end on the screen (step S413).
[0057]
As described above, according to the above operation, when the data management server 1 receives the upload of the corrected data from the in-house client terminal 2, the data management server 1 illegally refers to the security information and corrects the corrected data. It is determined whether or not the data has been altered, and if the data has been illegally altered (No in step S410), the registration is not performed. It is possible to make settings so that the data can be corrected, and it is guaranteed that the data registered in the data management server 1 is always valid data.
[0058]
In the above description, an embodiment has been described in which data is downloaded from the data management server 1 and viewed and corrected by the in-house client terminal 2. Alternatively, the present invention can be applied to a mode of browsing or modifying the client terminal 6 of the company B, or a system of distributing (downloading) and collecting (uploading) other data.
[0059]
【The invention's effect】
As described above, according to the present invention, in the data processing terminal, the data obtained from the data management server and the security information thereof are encrypted by the identification information of the data processing terminal. Terminals other than the data processing terminal that has acquired the information will not be able to decrypt it, thereby preventing unauthorized duplication of data. Even when data is updated, the security information is inherited before and after the update, so that it is possible to update the data while ensuring security.
[Brief description of the drawings]
FIG. 1 is a configuration diagram showing an embodiment according to the present invention.
FIG. 2 is a detailed configuration diagram of a data management server and an in-house client terminal 2 according to the present invention.
FIG. 3 is a sequence chart for explaining an operation when data is downloaded from a data management server to an in-house client terminal according to the present invention;
FIG. 4 is a sequence chart for explaining an operation of calling and browsing encrypted data stored in the data storage means 23 using an application in the in-house client terminal according to the present invention.
FIG. 5 is a sequence chart for explaining an operation when data is saved or data is printed after data is called using an application in the in-house client terminal according to the present invention.
FIG. 6 is a sequence chart for explaining an operation when the edited data is uploaded from the in-house client terminal to the data management server according to the present invention;
FIG. 7 is a diagram showing a correspondence relationship between data states and contents according to the present invention;
FIG. 8 is a diagram for explaining the content of security information according to the present invention.
[Explanation of symbols]
1 data management server
2 Internal client terminals
3 Firewall
4 Internet
5 Client terminal of company A
6 Client terminal of company B
10 Security information storage means
11 Security information setting means
12, 23 data storage means
13, 22 data input / output means
14 Terminal security decryption means
15, 18 Information encryption / decryption means
16, 17 Data communication means
19 Terminal ID acquisition means
20 Data encryption terminal key generation means
21 Terminal security encryption means
24 Data encryption detection means
25 Terminal security decryption means
26 Security judgment means
27 Application input / output I / F
28 Applications

Claims (25)

A data processing terminal that can be connected via a communication transmission line to a data management server that stores data and performs security management of the data,
Communication means for communicating with the data management server;
Identification information acquisition means for acquiring identification information enabling identification of the data processing terminal;
Using the identification information acquired by the identification information acquisition means, terminal security encryption means for encrypting the data received from the data management server by the communication means,
A data processing terminal having: 2. The data processing terminal according to claim 1, wherein the communication unit receives security information in which authority to use the data received from the data management server is determined. 3. It operates when at least one of the data and the security information received from the data management server has been subjected to a predetermined encryption in order to enhance the security of the data in the communication transmission path, and the predetermined encryption is performed. The data processing terminal according to claim 1, further comprising a data decryption unit configured to decrypt at least one of the data and the security information. When encrypting the data received from the data management server by the terminal security encryption unit, the terminal security encryption unit encrypts data obtained by combining the data received from the data management server with the security information. The data processing terminal according to claim 2, wherein the data processing terminal is configured to be configured. 5. The device according to claim 1, further comprising a terminal security decrypting unit that operates when using the encrypted data encrypted by the terminal security encrypting unit and decrypts the encrypted data using the identification information. The data processing terminal according to one of the above. When the decrypted data decrypted by the terminal security decrypting means is updated, the security information relating to the decrypted data before the update and the decrypted data after the update are stored in association with each other. 6. The data processing terminal according to any one of 1 to 5. The terminal security encryption means is configured to use the identification information to encrypt data obtained by combining the security information relating to the decrypted data before the update and the decrypted data after the update. 7. The data processing terminal according to 6. The encrypted data is transmitted to the data management server by encrypting the security information related to the decrypted data before the update encrypted by the terminal security encrypting unit and the decrypted data after the update in combination. 8. The data processing terminal according to claim 7, wherein the data processing terminal is configured to add the identification information to the encrypted data and transmit the encrypted data. When transmitting the encrypted data and the identification information added to the encrypted data to the data management server, the encrypted data and the encrypted data are transmitted to increase the security of the data in the communication transmission path. 9. The data processing terminal according to claim 8, further comprising data encryption means for performing predetermined encryption on the identification information added to the data. A data management server connectable to a data processing terminal that requests data via a communication transmission path,
Server-side communication means for communicating with the data processing terminal;
Data storage means for storing the data,
Security information storage means for storing security information in which the use authority of the data stored in the data storage means is determined,
A data management server configured to transmit the requested data and the security information of the requested data to the data processing terminal when the data processing terminal requests the data. When the transmitted data is updated in the data processing terminal, the security information and the data after the update related to the data before the update are combined from the data processing terminal to identify the data processing terminal. The data management server according to claim 10, wherein the data management server receives data encrypted with possible identification information and a terminal ID of the data processing terminal. The data processing terminal, the security information relating to the data before the update and the data after the update are combined and encrypted with identification information capable of identifying the data processing terminal; and And a server-side terminal security decryption unit that operates when the security information is received and decrypts data of a combination of the security information related to the data before the update and the data after the update using the identification information. The data management server according to claim 11. After the decryption by the server-side terminal security decryption means, the security information related to the decrypted data before the update received from the data processing terminal, and the security information of the data stored in the security information storage means Security information setting means for comparing
13. The data management server according to claim 12, wherein when the two pieces of security information match, the data is determined to be valid. A server-side data decrypting unit that operates when at least one of the encrypted data and the terminal ID of the data processing terminal is subjected to predetermined encryption, and includes a server-side data decryption unit that decrypts the predetermined encryption. 14. The data management server according to any one of 10 to 13. A data processing method in a data processing terminal connectable via a communication transmission path to a data management server that stores data and performs security management of the data,
Receiving the data from the data management server;
Obtaining identification information enabling identification of the data processing terminal;
Using the obtained identification information, encrypting the data received from the data management server;
A data processing method comprising: When encrypting the data received from the data management server using the obtained identification information, the method includes a step of encrypting data obtained by combining the data received from the data management server and the security information. The data processing method according to claim 15. 17. The data processing method according to claim 15, further comprising a step of decrypting the encrypted data using the identification information when using the encrypted data encrypted using the identification information. 18. Updating decrypted data using the identification information;
Storing the security information related to the decrypted data before the update and the decrypted data after the update in association with each other;
The data processing method according to any one of claims 15 to 17, comprising: 20. The data processing method according to claim 18, further comprising a step of encrypting, by using the identification information, data obtained by combining the security information relating to the decrypted data before update and the decrypted data after update. When transmitting to the data management server encrypted data in which the security information related to the decrypted data before update and the decrypted data after update are combined, the identification information is added to the encrypted data and transmitted. 20. The data processing method according to claim 19, comprising a step. A data processing method in a data management server connectable to a data processing terminal that requests data via a communication transmission path,
Receiving the request for the data from the data processing terminal;
Reading the requested data from data storage means;
Reading security information of the requested data from security information storage means for storing security information in which the use authority of the data is determined;
Transmitting, to the data processing terminal, the requested data and the security information of the requested data;
A data processing method comprising: When the transmitted data is updated by the data processing terminal, the data processing terminal can identify the data processing terminal by combining the security information related to the data before the update and the data after the update. 22. The data processing method according to claim 21, further comprising a step of receiving the data encrypted with identification information and the identification information. From the data processing terminal, the security information related to the data before the update and the data after the update are combined with the encrypted data with identification information capable of identifying the data processing terminal, and the identification information 23. The data processing method according to claim 22, further comprising a step of, when the security information is received, decoding data of a combination of the security information and the data after the update using the identification information. Using the identification information, after decrypting data of the combination of the security information and the data after the update before the update, the security information on the data before the update received from the data processing terminal and Comparing the data with the security information;
If the two pieces of security information match, determining that the data is valid;
The data processing method according to claim 23, comprising: A program for causing a computer to execute the data processing method according to claim 15.

Images