JP2005182409A - Erasure information management method and erasure information management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an erasure information management method and an erasure information management system, managing information about erased data to prevent information leakage, and allowing an individual to confirm that the data erasure is certainly performed. <P>SOLUTION: This erasure information management method has: an acquisition procedure for acquiring erasure information, and identification information for identifying the individual using a portable terminal; a management procedure for managing the erasure information and the identification information acquired in the acquisition procedure; an authentication procedure for authenticating whether the individuals coincide with each other or not, on the basis of the identification information managed in the management procedure, and the identification information from the individual; and a provision procedure for providing the erasure information managed in the management procedure to the individual as a certificate certificating the erasure of the data, on the basis of the authentication procedure. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an erasure information management method and an erasure information management system, and in particular, erases data recorded in an old mobile phone when changing the model of a mobile phone (mobile terminal) and manages erasure information related to the erased data. The present invention relates to an erasure information management method and an erasure information management system.

  2. Description of the Related Art Conventionally, personal information and image data, and data such as an address book that manages other people's phone numbers and mail addresses are recorded on a mobile phone used by an individual. In the process of using a mobile phone, an individual often changes the model to a new mobile phone. At this time, data recorded in the old mobile phone is erased in various forms as shown in FIG. FIG. 1 is a diagram for explaining the flow of a conventional data erasing method for a mobile phone. In FIG. 1, an individual 5 who uses a mobile phone 4 requests a model change at a handling store 6 (step S1). In the handling store 6, the phone number used by the individual is registered in the new mobile phone, and the data recorded in the old mobile phone is transferred to the new mobile phone, and the model is changed. In the handling store 6, the old mobile phone 4 after the model change is disposed (step S2). In the handling store 6, the data recorded in the old mobile phone 4 may be erased and confirmation may be obtained from an individual.

The process of disposing of the old mobile phone is either when the old mobile phone is discarded as it is or when it is collected (carrier recovery) by a contractor (step S4) or after the data recorded on the old mobile phone is erased. (Step S3), it may be discarded into a trash box, or may be collected by a carrier.
The processing here is a part that is not visible to the individual, and the individual cannot know the process of disposing of the old mobile phone. The individual cannot confirm whether the data recorded in the old mobile phone is actually erased or whether the personal data is leaked.

  In addition, as a conventional technique for managing deletion of data recorded in a terminal such as a mobile phone, the center that manages the wireless (mobile terminal) when the password for starting the operation of the wireless (mobile terminal) fails a specified number of times. The wireless (portable terminal) encrypts the inside (data) in response to the fact that it is illegally used, and after the backup copy is taken at the center, the inside of the wireless (portable terminal) (data) There is a wireless unauthorized use prevention system configured to delete all of the above (Patent Document 1).

Further, as a conventional technique for preventing leakage of data recorded on a terminal such as a mobile phone, the password input by the CPU is compared to determine whether they match, and as a result, each time a mismatch is determined. In addition, the number of mismatches is counted as the number of password input failures, and it is determined whether or not the counted number of input failures exceeds a preset input limit number. There is a portable information terminal device that erases applications / data in a device or a removable memory card (Patent Document 2).
JP-A-8-314805 JP 2001-117661 A

  However, when the old mobile phone is handed over to the store as described above, the process of disposing of the old mobile phone is a part that is not visible to the individual, so that the data recorded on the old mobile phone has been securely deleted, There has been a problem that it is impossible for an individual to confirm whether or not personal data is leaked to others.

  In addition, as described above, there is a problem that there is a possibility that information may be leaked because there is no special rule regarding the erasing method of data recorded in the old mobile phone.

  In addition, if the data of the old mobile phone is leaked, the store side has not taken any measures against the damage caused by the leaked data, so there may be a disadvantage, and for the individual, the mobile phone in the store There was a problem that the anxiety when handing over could not be removed.

  Accordingly, an object of the present invention is to manage information on erased data to prevent information leakage and to allow an individual to confirm that data has been erased reliably and to an erase information management system. Is to provide.

  In order to solve the above-mentioned problems, the present invention provides an erasure information management method for managing erasure information related to erased data of a mobile terminal, as described in claim 1, wherein the individual uses the mobile terminal. The acquisition procedure for acquiring the identification information for identifying the information and the erasure information, the management procedure for managing the identification information and the erasure information acquired by the acquisition procedure, the identification information from the individual, and the management An authentication procedure for authenticating whether or not the individual matches based on the identification information managed by the procedure, and the erasure information managed by the management procedure based on the authentication procedure. And a providing procedure provided to the individual as a certificate certifying the erasure.

  In such an erasure information management method, identification information for identifying an individual who uses a mobile terminal and erasure information are acquired and managed. Based on the identification information from the individual and the managed identification information, the individual Information is leaked by managing information related to erased data by providing the individual with erase information managed based on the authentication result as a certificate proving the data erase. In addition, it is possible for an individual to confirm that data has been erased reliably.

  In order to solve the above problem, the present invention provides the data corresponding to the portable terminal in response to a request from the erasing terminal for erasing the data of the portable terminal. An erasing program distribution procedure for distributing an erasing program for erasing to the erasing terminal may be adopted.

  In such an erasure information management method, an erasure program for erasing data corresponding to a mobile terminal is distributed appropriately to the erasure terminal in response to a request from the erasure terminal for erasing the data of the mobile terminal. Data that is compatible with mobile phones can be deleted.

  In order to solve the above problems, the present invention provides a configuration in which the erasure program causes the erasure terminal to transmit the erasure information and the identification information after erasing the data. Also good.

  In such an erase information management method, the erase information and the identification information can be reliably acquired and managed by causing the erase program to transmit the erase information and the identification information from the erase terminal after erasing the data.

  In order to solve the above-mentioned problem, the present invention provides, as described in claim 4, the erasure terminal is a store terminal installed in a store that handles erasure of the data, or an individual used by the individual. It is good also as a structure which is a terminal.

  In such an erasure information management method, since the erasure terminal is a store terminal or a personal terminal, the mobile phone data can be erased not only at the store terminal but also at the personal terminal.

  In order to solve the above-mentioned problem, the present invention provides, as described in claim 5, the providing procedure, wherein the certificate is provided to the personal terminal when the certificate is provided to the personal terminal. It is good also as a structure which has the output procedure to output.

  In such an erasure information management method, when the certificate is provided to the personal terminal, the certificate can be output to the personal terminal screen or paper medium by outputting the certificate on the personal terminal. Can reliably confirm that the data has been erased.

  Further, in order to solve the above-mentioned problem, according to the present invention, the authentication procedure uses the personal terminal in response to a request for providing the certificate from the personal terminal. It may be configured to authenticate whether the individual matches the individual who has deleted the data in the certificate.

  In such an erasure information management method, in response to a certificate provision request from a personal terminal, authentication is performed as to whether the individual using the personal terminal matches the individual who erased the data in the certificate. Thus, a certificate can be provided when an individual desires.

  In order to solve the above problems, the present invention provides an erasure information management system for managing erasure information related to erased data of a mobile terminal, as claimed in claim 7, wherein the mobile terminal uses the mobile terminal. Acquisition means for acquiring identification information for identifying the individual to be deleted and the erasure information, the identification information acquired by the acquisition means, a database for storing the erasure information, the identification information from the individual, and Based on the identification information stored in the database, authentication means for authenticating whether or not the individual matches, and on the authentication means, the erasure information stored in the database is converted to the data. It may be configured to have providing means for providing the individual with the erased certificate.

  In such an erasure information management method, identification information for identifying an individual who uses a mobile terminal and erasure information are acquired and managed. Based on the identification information from the individual and the managed identification information, the individual Information is leaked by managing information related to erased data by providing the individual with erase information managed based on the authentication result as a certificate proving the data erase. In addition, it is possible for an individual to confirm that data has been erased reliably.

  In order to solve the above problems, the present invention may be a program for causing a computer to execute an erasure information management method, and a recording medium storing the program.

  According to the present invention, identification information for identifying an individual who uses a mobile terminal and erasure information are acquired and managed, and the individual matches based on the identification information from the individual and the managed identification information. By managing the information about the deleted data and preventing information leakage by providing the individual with the deletion information managed based on the authentication result as a certificate proving the deletion of the data. At the same time, the individual can reliably confirm that the data has been erased.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 2 is a block diagram showing an erasure information management system according to the first embodiment of the present invention. In FIG. 2, an erasure information management system 10 is installed in a service center, supports a server 20 for erasing data recorded on a mobile phone 4, and manages erasure information related to the erased data, and stores handling the data. The system includes a store terminal 30 that is installed and erases data of the mobile phone 4, and a personal terminal 40 that is owned by an individual who uses the mobile phone 4 and acquires a certificate that is erase information. The server 20, the store terminal 30, and the personal terminal 40 are connected by a network 1 such as the Internet. The personal terminal is a device such as a personal computer or a mobile phone that can be connected to a network by an individual.

  The server 20 is a server computer, and each component is controlled by a CPU (Central Processing Unit). The CPU performs erasure information management processing according to a program for executing the present invention stored in the memory unit. For example, the process until this erasure information management process is executed will be described below. The erasure information management process program is read from a recording medium (not shown) on which the erasure information management process program is recorded by the installer built in the server 20 and read out. The recorded program is installed in, for example, an auxiliary storage device. When an erasure information management process described later is started, the CPU starts the process according to the program installed in the auxiliary storage device. The recording medium may be any medium that can store a program such as a CD-ROM and can be read by a computer. The erasure information management process of the first embodiment will be described in detail with reference to FIGS.

  The server 20 mainly includes a data erasure acceptance processing unit 21 that accepts a data erasure request of the mobile phone 4 from the store terminal 30, and a program distribution processing unit that distributes an erasure program to the store terminal 30 in response to the data erasure request. 22, an erasure information acquisition processing unit 23 that acquires erasure information from the store terminal 30, an authentication processing unit 24 that authenticates an individual for whom an erasure certificate (data) is requested, and a predetermined erasure certificate for the personal terminal 40. An erasure certificate provision processing unit 25 provided to the mobile phone 4, an erasure program DB 200 storing erasure programs corresponding to various mobile phones in order to erase data recorded on the mobile phone 4, acquired erasure information, etc. It consists of a stored erasure information management DB 210.

  The data erasure acceptance processing unit 21 accepts a data erasure request for the mobile phone 4 from the store terminal 30. At this time, model information such as the model number of the mobile phone 4 is transmitted to the server 20 as data erasure request information. The program distribution processing unit 22 extracts a data erasure request, that is, an erasure program corresponding to the model information of the mobile phone 4 from the erasure program DB 200 and distributes it to the store terminal 30. When the data of the mobile phone 4 is erased by the store terminal 30, the erase information acquisition processing unit 23 acquires erase information, identification information, and the like regarding the erased data. The erasure information and identification information acquired by the erasure information acquisition processing unit 23 are stored in the erasure information management DB 210. The authentication processing unit 24 authenticates whether or not the individual for whom the erasure certificate is requested from the personal terminal 40 matches the individual who owns the mobile phone from which the data has been erased. The erasure certificate provision processing unit 25 provides the erasure information stored in the erasure information management DB 210 to the personal terminal 40 as an erasure certificate according to the authentication result of the authentication processing unit 24. The table stored in the erasure program DB 200 will be described in detail with reference to FIG. 5, the table stored in the erasure information management DB 210 with reference to FIG. 6, and the screen example displaying the erasure certificate with reference to FIG.

  The erasure certificate provision processing unit 25 of the server 20 may print the erasure certificate on a paper medium with an existing printer installed in the server 20 when the erasure certificate is provided to the personal terminal 40. Good.

  The flow of erasure information management processing will be described below.

  First, when there is a request for data deletion of the mobile phone 4 from an individual to the store terminal 30, the store terminal 30 requests the server 20 to delete data via the network 1. The server 20 extracts an erasure program corresponding to the mobile phone 4 from the erasure program DB 200 and distributes it to the store terminal 30. The store terminal 30 erases the data recorded on the mobile phone 4 based on the provided erase program. The store terminal 30 provides the server 20 with erase information regarding the erased data. The server 20 stores the provided erasure information in the erasure information management DB 210.

  After the data of the mobile phone 4 is erased, when the data erasure certificate is requested from the personal terminal 40 to the server 20, the server 20 identifies the individual who requested the erasure certificate and the mobile phone that has erased the data. Authenticates whether the person you own matches. The server 20 provides the erasure information stored in the erasure information management DB 210 to the personal terminal 40 as an erasure certificate according to the authentication result. In the personal terminal 40, the erasure certificate provided from the server 20 can be displayed on the screen and output to a paper medium as necessary.

  An erasure program for erasing data at the store terminal 30 can be downloaded from the server 20 in advance (or obtained by another method) and stored in the store terminal 30. The store terminal 30 is not limited to erasing data recorded on the mobile phone 4, but the mobile phone 4 can be connected to the personal terminal 40 to delete the data. The second embodiment will be described in detail with reference to FIGS.

  When deleting the data of the mobile phone 4, the data may be deleted according to a preset rule, or only the data that the individual desires to delete may be deleted.

  In this way, the store terminal 30 erases the data of the mobile phone 4 and provides the server 20 with erase information and identification information. The server 20 manages the acquired erase information and identification information with the erase information management DB 210, By providing an erasure certificate from the personal authentication result in response to a request for erasure certificate from the terminal 40, information related to the erased data is managed to prevent information leakage, and the individual can securely erase the data. You can see what happened.

  Next, an outline of the erasure information management process executed through the store terminal 30 of the erasure information management system 10 will be described. FIG. 3 is a diagram showing an outline of the erasure information management process according to the first embodiment of the present invention. In FIG. 3, first, the store terminal 30 is requested by an individual to delete data when the model of the mobile phone 4 is changed (step S11). The store terminal 30 transmits the model information of the mobile phone 4 and requests download of the delete program in order to delete data to the server 20 (step S12).

  The server 20 receives a request for downloading the erasure program from the store terminal 30 (step S13). Further, the server 20 extracts an erasing program corresponding to the mobile phone 4 from the erasing program DB 200 and distributes it to the store terminal 30 (step S14).

  The store terminal 30 downloads the erasure program 201 from the server 20 (step S15). The store terminal 30 erases the data recorded on the mobile phone 4 based on the erase program 201 (step S16). The store terminal 30 uploads erasure information regarding the erased data to the server 20 (step S17).

  The server 20 stores the provided erasure information (identification information (telephone number), number of erasures (including breakdown), implementation date, and implementer) in the erasure information management DB 210 (step S18).

  Further, after the data of the mobile phone 4 is erased, a data erasure certificate is requested from the personal terminal 40 to the server 20 (step S19). The server 20 authenticates whether or not the individual who requested the erasure certificate matches the individual who owns the mobile phone from which data was erased (step S20). The server 20 extracts an erasure certificate (identification information, number of erasures (including breakdown), implementation date, and implementer) from the erasure information stored in the erasure information management DB 210 based on the authentication result (step S21). Further, the server 20 provides the extracted erasure certificate to the personal terminal 40 (step S22). In the personal terminal 40, the erasure certificate provided from the server 20 is displayed on the screen and output to the paper medium 50 as necessary (step S23).

  As described above, the store terminal 30 erases the data of the mobile phone 4 and provides the server 20 with erase information and identification information. The server 20 manages the acquired erase information and identification information, and erases the data from the personal terminal 40. In response to the certificate request, by providing an erase certificate from the personal authentication result, information on the erased data is managed to prevent information leakage, and the individual is sure that the data has been erased. Can be confirmed. In step S19, a certificate request can be made to the server 20 whenever an individual desires from the personal terminal 40.

  Next, details of the erasure information management process executed by the erasure information management system 10 will be described. FIG. 4 is a flowchart showing an erasure information management process executed via the store terminal. In FIG. 4, first, in the process of step S <b> 31, the store terminal 30 acquires model information of the mobile phone 4 from which data is deleted. In step S32, the store terminal 30 transmits the model information of the mobile phone 4 and requests download of the deletion program in order to delete the data to the server 20.

  In the process of step S <b> 33, the server 20 receives a deletion program download request from the store terminal 30. In the process of step S34, the server 20 searches the erasure program DB 200 for an erasure program corresponding to the mobile phone 4. In the process of step S35, the server 20 determines whether or not there is a target erasure program. If there is no target erase program in the process of step S35, the erase information management process is terminated. If there is a target erasure program in the process of step S35, the server 20 extracts the target erasure program and distributes it to the store terminal 30 in the process of step S36.

  In the process of step S <b> 37, the store terminal 30 downloads an erasing program from the server 20. In the process of step S38, the store terminal 30 erases the data recorded on the mobile phone 4 based on the erase program. In the process of step S <b> 39, the store terminal 30 uploads erasure information regarding the erased data to the server 20. In the process of step S40, the server 20 stores the erasure information in the erasure information management DB 210.

  In addition, after the data of the mobile phone 4 is erased in the process of step S41, the personal terminal 40 requests the server 20 for a data erasure certificate. In the process of step S42, the server 20 receives a request for an erasure certificate. In the process of step S43, the server 20 authenticates whether or not the individual who requested the erasure certificate matches the individual who owns the mobile phone from which the data was erased. In the process of step S43, the server 20 authenticates whether or not the individual who requested the erasure certificate matches the individual who owns the mobile phone from which the data was erased. In the process of step S44, the server 20 determines whether it is possible to provide an erasure certificate based on the authentication result. If it is not possible to provide an erase certificate in the process of step S44, the erase certificate provision process is terminated. If it is possible to provide an erasure certificate in step S44, the server 20 provides the erasure certificate to the personal terminal 40 in step S45. In the process of step S46, the personal terminal 40 displays the acquired erasure certificate on the screen. The personal terminal 40 can also output the erase certificate displayed on the screen to a paper medium.

  As described above, the store terminal 30 erases the data of the mobile phone 4 and provides the server 20 with erase information and identification information. The server 20 manages the acquired erase information and identification information, and erases the data from the personal terminal 40. In response to the certificate request, by providing an erase certificate from the personal authentication result, information on the erased data is managed to prevent information leakage, and the individual is sure that the data has been erased. Can be confirmed.

  Next, a table stored in the erasing program DB 20 of the server 20 will be described. FIG. 5 is a diagram showing a table stored in the erase program DB. In FIG. 5, the table 202 includes items indicating model information of the mobile phone 4 and items indicating corresponding programs. The program distribution processing unit 22 of the server 20 refers to the table 202 based on the model information transmitted from the store terminal 30, extracts a target erasure program, and distributes it to the store terminal 30. As a result, an erasure program corresponding to various mobile phones 4 can be managed and distributed to the store terminal 30 (or the personal terminal 40), and data is efficiently deleted, such as erasing only predetermined data. be able to.

  Next, a table stored in the erasure information management DB 220 of the server 20 will be described. FIG. 6 is a diagram showing a table stored in the erasure information management DB. In FIG. 6, a table 211 includes items indicating identification information 212 for identifying the mobile phone 4 (individual) such as model information (model number, serial number, etc.) and phone number of the mobile phone 4 and erasure of the mobile phone 4. An item indicating deletion information 213 regarding the number of recorded data (address, still image, moving image, e-mail, etc.) and recording (date and time, implementer, etc.) and an item indicating a certificate number 214 assigned to each deletion information. It is configured.

  Accordingly, the erasure information can be efficiently managed for each identification information, and the erasure information can be provided to an individual as an erasure certificate.

  Next, the erasure certificate displayed on the screen of the personal terminal 40 of the erasure information management system 10 will be described. FIG. 7 is a screen diagram showing a data erasure certificate. In FIG. 7, a screen 51 is a screen on which the erasure certificate data provided from the server 20 is displayed on the personal terminal 40. On the screen 51, a display area 52 displaying identification information (1. certificate number, 2. mobile phone number, 3. mobile phone serial number, 4. model number) for identifying the mobile phone 4 and an erase related to the erased data are displayed. Information (5. Erasing Information Summary (5.1. Erasing Address Book, 5.2. Erasing Still Image, 5.3. Erasing Moving Image, 5.4. Erasing Mail), 6. Lock Password, 7. Other, 8 Display area 53 displaying data erase date and time, 9. Data eraser (store), and display area 54 displaying certificate information (certificate issue date, certificate issuance). The individual can also output the erasure certificate of the screen 51 to a paper medium as necessary.

  In this way, as shown in the screen 51, the data erasure certificate of the mobile phone 4 provided from the server 20 is displayed on the personal terminal 40, or the erasure certificate of the screen 51 is output to a paper medium. Can reliably confirm that the data has been erased.

  Next, an outline of the erasure information management process executed by the personal terminal 40 in the second embodiment of the present invention will be described. FIG. 8 is a diagram showing an outline of the erasure information management process according to the second embodiment of the present invention. In FIG. 8, first, the personal terminal 40 transmits the model information of the mobile phone 4 and requests the deletion program download (step S50). The server 20 receives a request for downloading the erasure program from the personal terminal 40 (step S51). Further, the server 20 extracts the erasure program corresponding to the mobile phone 4 from the erasure program DB 200 and distributes it to the personal terminal 40 (step S52).

  In the personal terminal 40, the erasure program 201 is downloaded from the server 20 (step S53). The personal terminal 40 erases the data recorded on the mobile phone 4 based on the erase program 201 (step S54). The personal terminal 40 uploads erasure information regarding the erased data to the server 20 (step S55). The personal information terminal 40 that performs the erasure program download request, download, erasure execution, and erasure information upload may have the same configuration as the mobile phone 4.

  The server 20 stores the provided erasure information (identification information (telephone number), number of erasures (including breakdown), implementation date and implementer) in the erasure information management DB 210 (step S56).

  Further, after the data of the mobile phone 4 is erased, a data erasure certificate is requested from the personal terminal 40 to the server 20 (step S57). The server 20 authenticates whether or not the individual who has requested the erasure certificate matches the individual who owns the mobile phone from which the data has been erased (step S58). The server 20 extracts an erasure certificate (identification information, number of erasures (including breakdown), implementation date and implementer) from the erasure information stored in the erasure information management DB 210 based on the authentication result (step S59). Further, the server 20 provides the extracted erasure certificate to the personal terminal 40 (step S60). In the personal terminal 40, the erasure certificate provided from the server 20 is displayed on the screen and output to the paper medium 50 as necessary (step S61).

  As described above, the personal terminal 40 alone erases the data of the mobile phone 4 and provides the server 20 with the deletion information and the identification information. The server 20 manages the acquired deletion information and the identification information. By providing an erase certificate from the personal authentication result in response to a request for an erase certificate, information on the erased data is managed to prevent information leakage, and the individual has securely erased the data. Can be confirmed.

  Next, details of the erasure information management process of the second embodiment will be described. FIG. 9 is a flowchart showing the erasure information management process executed by the individual terminal alone. In FIG. 9, first, in the process of step S <b> 70, the personal terminal 40 acquires model information of the mobile phone 4 from which data is deleted. In the process of step S71, the personal terminal 40 transmits the model information of the mobile phone 4 to request downloading of the erasure program in order to erase the data to the server 20.

  In the process of step S <b> 72, the server 20 receives a request for downloading the erasure program from the personal terminal 40. In the process of step S73, the server 20 searches the erasure program DB 200 for an erasure program corresponding to the mobile phone 4. In the process of step S74, the server 20 determines whether or not there is a target erase program. If there is no target erase program in the process of step S74, the erase information management process is terminated. If there is a target erasure program in the process of step S74, the server 20 extracts the target erasure program and distributes it to the personal terminal 40 in the process of step S75.

  In the process of step S76, the personal terminal 40 downloads the erasure program from the server 20. In the process of step S38, the personal terminal 40 erases the data recorded on the mobile phone 4 based on the erase program. In the process of step S <b> 78, the personal terminal 40 uploads erasure information regarding the erased data to the server 20. In step S79, the server 20 stores the erasure information in the erasure information management DB 210.

  In addition, after the data of the mobile phone 4 is erased in the process of step S80, the personal terminal 40 requests the server 20 for a data erasure certificate. In step S81, the server 20 receives a request for an erasure certificate. In the process of step S82, the server 20 authenticates whether or not the individual who requested the erasure certificate matches the individual who owns the mobile phone from which data was erased. In the process of step S83, the server 20 authenticates whether or not the individual who requested the erasure certificate matches the individual who owns the cellular phone from which data has been erased. In the process of step S83, the server 20 determines whether it is possible to provide an erasure certificate based on the authentication result. If it is not possible to provide an erase certificate in the process of step S83, the erase certificate provision process is terminated. If the deletion certificate can be provided in the process of step S83, the server 20 provides the deletion certificate to the personal terminal 40 in the process of step S84. In the process of step S85, the personal terminal 40 displays the acquired erasure certificate on the screen. The personal terminal 40 can also output the erase certificate displayed on the screen to a paper medium.

  As described above, the personal terminal 40 erases the data of the mobile phone 4 and provides the server 20 with the erasure information and the identification information. The server 20 manages the obtained erasure information and the identification information, and erases the data from the personal terminal 40. In response to the certificate request, by providing an erase certificate from the personal authentication result, information on the erased data is managed to prevent information leakage, and the individual is sure that the data has been erased. Can be confirmed.

It is a figure for demonstrating the flow of the data erasing method of the conventional mobile telephone. It is a block diagram which shows the deletion information management system which concerns on 1st Example of this invention. It is a figure which shows the outline | summary of the erasure | elimination information management process which concerns on 1st Example of this invention. It is a flowchart figure which shows the deletion information management process performed via a shop terminal. It is a figure which shows the table stored in deletion program DB. It is a figure which shows the table stored in deletion information management DB. It is a figure which shows a data deletion certificate. It is a figure which shows the outline | summary of the erasure | elimination information management process which concerns on 2nd Example of this invention. It is a flowchart figure which shows the deletion information management process performed with an individual terminal alone.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Network 4 Mobile phone 10 Erase information management system 20 Server 21 Data erasure acceptance processing part 22 Program distribution process part 23 Erase information acquisition process part 24 Authentication process part 25 Erase certificate provision process part 30 Shop terminal 40 Personal terminal 200 Erase program DB
210 Erase information management DB

Claims (7)

An erasure information management method for managing erasure information related to erased data on a mobile device,
An acquisition procedure for acquiring identification information for identifying an individual using the mobile terminal and the erasure information;
A management procedure for managing the identification information and the erasure information acquired by the acquisition procedure;
An authentication procedure for authenticating whether or not the individual matches based on the identification information from the individual and the identification information managed by the management procedure;
An erasure information management method comprising: a provision procedure for providing the erasure information managed by the management procedure based on the authentication procedure to the individual as a certificate proving erasure of the data.   In accordance with a request from an erasing terminal for erasing data of the portable terminal, the erasing program distribution procedure for distributing an erasing program for erasing the data corresponding to the portable terminal to the erasing terminal is provided. The erasure information management method according to claim 1.   3. The erasure information management method according to claim 2, wherein the erasure program causes the erasure terminal to transmit the erasure information and the identification information after erasing the data.   The erasure information management method according to claim 2 or 3, wherein the erasure terminal is a store terminal installed in a store handling erasure of the data, or a personal terminal used by the individual.   5. The erasure information management method according to claim 4, wherein the providing procedure includes an output procedure for outputting the certificate by the personal terminal when the certificate is provided to the personal terminal.   The authentication procedure authenticates whether an individual who uses the personal terminal matches an individual who has deleted the data in the certificate in response to a request for provision of the certificate from the personal terminal. 6. The erasure information management method according to claim 4 or 5. An erasure information management system for managing erasure information related to erased data on a mobile device,
Acquisition means for acquiring identification information for identifying an individual who uses the mobile terminal and the erasure information;
A database for storing the identification information acquired by the acquisition means and the erasure information;
Authentication means for authenticating whether or not the individual matches based on the identification information from the individual and the identification information stored in the database;
An erasure information management system comprising: provision means for providing the individual with the erasure information stored in the database based on the authentication means as a certificate for erasing the data.

Images