JP2005309501A - Program mounted in electronic device accessing memory card, and information processor performing access management for electronic device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve usability of a memory card while maintaining firm security related to personal data or the like on the memory card. <P>SOLUTION: A host 102 is an electronic device accessing the memory card 101. Dedicated software 118 is a program mounted in the host 102, makes the host 102 realize: a function transmitting first information for identifying the memory card 101 and second information for identifying the host 102 to a server 103; and a function executing the access to the memory card 101 by use of information for the memory card access obtained from the server 103 when receiving the permission of the access to the memory card 101 from the server 103 by a decision result of the server 103. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a program mounted on an electronic device that accesses a memory card that stores information such as content and an information processing apparatus that manages access to the electronic device, and more particularly to a technique for preventing unauthorized access to a memory card. .

  In recent years, the memory card market has expanded rapidly. Since current memory cards do not have a large capacity, they are mainly used for recording still images with a digital still camera and recording small amounts of data. It is expected that usage methods that could not be established will be established. For example, video data such as movies and dramas may be stored in a memory card and sold, or daily data of individual patients may be managed at a hospital or the like. In addition, it is conceivable that the recording medium of the digital video equipment is also shifted from the current DV tape or the like to a memory card.

  As the capacity of the memory card increases, it is expected that not only the current usage method but also various usage methods will be established. However, when various usage methods are established as the capacity increases, the data stored in the memory card often becomes personal data or copyright-related data. Needless to say, it is necessary.

  Currently, an SD (Secure Digital) memory card is an example of a memory card equipped with a security function for copyright protection. In the SD memory card, in addition to a user data area that can be accessed by a general-purpose device, a protection area that can be accessed only by an authorized special device is provided. By storing an important encryption key or the like in this protection area, important data can be protected from general-purpose devices. However, in this case, since it is possible to access any legitimate device, a third-party user can access the memory card, and personal data may be leaked.

  Therefore, at present, a standard called device binding that allows only one specific device to access the SD memory card is being studied and proposed. Also, an encryption technique using a PGP (Pretty Good Privacy) key is often used in e-mail so that the data itself cannot be read by others.

Further, in Patent Document 1, in a memory card lending system for a print service, the encrypted image data recorded on the memory card is restricted so that the user cannot arbitrarily read and use it. A technique is disclosed in which image data is decrypted after collating the ID information of the memory card and the member information of the user, and printed out in the service department.
JP 2003-67480 A (FIG. 6 etc.)

  However, in the method such as device binding described above, since the memory card specifies a device or a user, the use is considerably limited, and the goodness of the memory card that can be applied to various devices as a bridge medium is not utilized. There's a problem. Further, the technique of the above document has a problem that even an authorized user cannot decrypt encrypted data stored in a memory card and read it freely.

  The present invention has been made in view of the above circumstances, and provides a program and an information processing apparatus capable of improving the usability of a memory card while maintaining strong security with respect to personal data and the like on the memory card. Objective.

  A program according to the present invention is a program installed in an electronic device that accesses a memory card, and the first information for identifying the memory card and the electronic device are identified to the electronic device. Obtained from the information processing apparatus when permission to access the memory card is received from the information processing apparatus based on the determination result of the information processing apparatus. And a function of executing access to the memory card using the memory card access information.

  The information processing apparatus according to the present invention is an information processing apparatus that manages access to an electronic device that accesses a memory card, and an electronic device that can access the memory card is registered for each memory card. When receiving means for storing registration information, first information for identifying a memory card, and second information for identifying the electronic device, the electronic device is based on the content of the registration information. Means for determining whether access to the memory card is permitted or not, and means for transmitting key information to the electronic device when permission to access the memory card by the electronic device is determined. It is characterized by doing.

  It is possible to improve the usability of the memory card while maintaining strong security with respect to personal data on the memory card.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
<System configuration>
FIG. 1 is a block diagram showing a system configuration for access management in an embodiment of the present invention.
This system includes a semiconductor memory card 101 (hereinafter abbreviated as a memory card 101), a host device 102 (hereinafter abbreviated as a host 102), and a server device 103 (hereinafter abbreviated as a server 103) on a network. including.

  First, the memory card 101 will be described. The memory card 101 includes a processor module 104, a NAND flash memory 105 (hereinafter abbreviated as “NAND memory 105”), and an interface terminal 106.

  The processor module 104 includes a controller 110 that is a main control unit of the memory card 101, an SRAM 111 that is used as a work buffer memory, a ROM 112 that stores a control program, and nine interface terminals of the memory card 101. An IO interface 113 that performs interface processing between the memory card 101 and the host 102 is connected.

  The NAND memory 105 includes a management data area 107 for mainly storing management information related to a memory card, a confidential data area 108 for storing confidential data, and a protected data area for storing important data as data storage areas. 109.

  The currently released memory card 101 has an area called a user data area that can be freely accessed and used by a user using the memory card 101. In this embodiment, for security enhancement, This user data area is eliminated, and data such as content is stored in the protected data area 109. Of course, data such as contents may be stored in the user data area without losing the user data area. In order to maintain security, data is stored in an encrypted state.

  The protected data area 109 is an area that can be accessed only when the validity of the host 102 is proved by mutual authentication with the host 102 connected to the memory card 101.

  The management data area 108 is an area where card information such as security information and media ID of the memory card 101 is stored.

  The secret area 107 stores key information used for encryption and secret data used for authentication, and is inaccessible from the host 102.

  The interface terminal 106 has nine signal terminals, CLK as a clock terminal, CMD for command transfer and response transfer to the corresponding command, DAT0, DAT1, DAT2, DAT3 as data terminals, and as a power supply terminal VDD and GND as a ground terminal are arranged.

  Next, the host 102 will be described. The host 102 is an electronic device equivalent to a personal computer, a portable information terminal, a mobile phone, an audio device, and the like, and can store and read content data such as video / audio / characters from the memory card 101. It is.

  The host 102 is connected to the memory card interface 119 to which the memory card 101 can be mounted, a CPU 114 that serves as a host control center, a system memory 115 including a RAM, a disk storage device 117 such as a hard disk device, and the Internet. Network interface 116 for performing the above.

  Dedicated software (SecureSoft) 118 is installed in the disk storage device 117. The dedicated software 118 performs various processes for ensuring that only a valid host can access the memory card, and is tamper resistant software that prevents tampering from the outside. is there. The dedicated software 118, for example, transmits information necessary for registering or changing the memory card 101 to the server 103, performs processing for obtaining access permission from the server 103 before accessing the memory card 101, For example, a process for obtaining key information (hereinafter referred to as an encryption key) used for encryption / decryption of data from the server 103 is performed.

  Next, the server 103 will be described. The server 103 is an information processing apparatus corresponding to a computer or the like, and performs access management of a plurality of hosts including the host 102. This server 103 performs, for example, registration processing of information indicating a host that can access the memory card for each memory card, change processing thereof, and permission / non-permission of access to each memory card of each host. Or perform a decision process.

  The server 103 includes a CPU 122 that serves as a control center of the server 103, a system memory 123 including a RAM, a disk storage device 124 such as a hard disk device, and a network interface 121 for connecting to the Internet. . The disk storage device 124 stores a card registration table 125 including information indicating a host that can access the memory card for each memory card.

  FIG. 2 is a diagram illustrating an example of the card registration table 125 stored in the server 103. In this card registration table 125, for each “media ID” of each memory card, “password when changing registration contents”, “encryption key”, “accessible host”, “operation during access”, “access status” ”,“ Operation at unauthorized access ”,“ Mail address ”,“ Used capacity (and card capacity) ”are registered.

  “Media ID” is identification information of each memory card, and is represented by, for example, 64 bits of alphanumeric characters. Note that a serial number (manufacturing number) of a memory card may be employed instead of the media ID.

  “Password for changing registered contents” is an authentication password required when the user changes the registered contents. The “encryption key” is key information necessary for the host to encrypt the data when storing the data in the corresponding memory card or to decrypt the data when the data is read from the memory card. .

  The “accessible host” is identification information that identifies one or a plurality of hosts that should be allowed to access the corresponding memory card. For example, at least two of the IP address, the MAC address, and the user's telephone number Identification information is adopted (for example, it is determined as an accessible host when two pieces of identification information match). In the case of a network configuration in which the IP address is automatically assigned by a DHCP (Dynamic Host Configuration Protocol) server, the IP address assigned to the router for connecting to the external network may be registered. . In this case, all the devices connected to the registered router can be accessed with only the IP address, but it is possible to limit to a specific device by checking both the IP address and the MAC address.

  “Operation at the time of access” is described for each “accessible host”, and among various access methods (write access, read access, erase access), an access method that the host can execute on the corresponding memory card, This is information indicating whether or not the registered contents can be changed by the host. “Access status” is described for each “accessible host”, and is information indicating the date and time of the latest access performed by the host to the corresponding memory card.

  “Operation at unauthorized access” is information indicating an operation to be performed when there is an access request by a host that does not correspond to an accessible host. For example, there are an operation for instructing the host to delete all data in the corresponding memory card, an operation for permitting only data write access, an operation for permitting only data read access, and the like. In order to prevent important data such as personal information and copyright information from leaking to others, it is necessary to register information indicating an operation to instruct the host to delete the data in the corresponding memory card. desirable.

  “Mail address” is information indicating a mail address of a destination to which the fact should be notified when an access request to the corresponding memory card is made. The notification may be performed only when there is an access request from a host that does not correspond to the accessible host. The owner of the device notified by e-mail can know the fact that there is a request to access the corresponding memory card.

  “Use capacity (and card capacity)” is information indicating the current data use capacity (and the original capacity of the memory card) of the corresponding memory card. This information is acquired through the host when the corresponding memory card is connected to the host.

  The registration of each piece of information described above is realized by the server 103 acquiring information input on the host by the user under the control of the dedicated software 118 when the corresponding memory card is inserted into the host for the first time. Is done.

<System operation>
Next, the operation of the system including the memory card 101, the host 102, and the server 103 will be described using the flowcharts of FIGS. Here, an operation in which the memory card 101 is registered in the server 103 and the host 102 writes and reads data after registration will be described.

First, the operation when registering the memory card 101 in the server 103 will be described with reference to FIG.
When the memory card 101 is inserted into the memory card interface 119 of the host 102 with the power of the host 102 turned on, or when the host 102 is turned on with the memory card 101 installed, the memory card 101 is in a power-on state (step 301). At this time, the host 102 recognizes the memory card 101 (step 302) and activates the dedicated software 118. Thereafter, the processing of each step in the host 102 is executed by the dedicated software 118.

  The host 102 performs initialization processing of the memory card 101 (step 303), and thereafter requests the memory card 101 to transmit the media ID of the memory card 101 (step 304). On the other hand, when the memory card 101 receives a transmission request for the media ID from the host 102 (step 305), the memory card 101 transmits the media ID to the host 102 (step 306).

  When the host 102 acquires the media ID from the memory card 101 (step 307), it next acquires the IP address and MAC address of the host 102 (step 308).

  The host 102 transmits the acquired media ID and its own IP address and MAC address to the server 103 via the Internet (step 309). At this time, it is desirable to transmit and receive data safely using a security function such as hypertext transfer protocol over transport layer security (HTTPS) or PKI.

  When the server 103 receives the media ID, IP address, and MAC address (step 310), whether the media ID has already been recorded on the card registration table 125 (that is, whether the memory card 101 has been registered). ) Is determined (step 311). If the memory card 101 has already been registered (Y in step 311), the process proceeds to the processing shown in FIGS.

  On the other hand, if the memory card 101 has not been registered (N in Step 311), the server 103 notifies the host 102 to that effect and prompts the registration of the memory card 101.

  Until the memory card 101 is registered in the server 103, the host 102 cannot use the memory card 101. Therefore, the host 102 registers with the user using the memory card 101 the contents to be registered (IP address of accessible host, operation when accessible device is accessed, operation when accessed from inaccessible device, mail (Such as an address) is prompted (step 312), and the content entered thereby is transmitted to the server 103 (step 313).

  When the server 103 receives the contents to be registered from the host 102 (step 314), the server 103 records the contents on the card registration table 125 (step 315). In addition, the server 103 creates an encryption key for a memory card at the time of registration and records it on the same table.

Next, with reference to FIG. 4, the operation when data is written to the registered memory card 101 will be described.
After determining that the memory card 101 has been registered in step 311 in FIG. 3 described above, the server 103 acquires the IP address and MAC address acquired from the host 102 and the IP recorded in the card registration table 125. The address and the MAC address are compared (step 401), and it is determined whether or not the host 102 is an accessible host (step 402). When the host 102 is an accessible host (Y in step 402), the server 103 transmits information indicating that access to the memory card 101 is permitted to the host 102.

  When the host 102 receives information indicating that access to the memory card 101 is permitted from the server 103 (step 403), the host 102 next downloads an encryption key used for accessing the memory card 101. (Step 404).

  When the server 103 receives a request for downloading an encryption key from the host 102 (step 405), since the host 102 is an access-permitted host, the “encryption key” indicated on the card registration table 125 is received in response to the request. The execution of the download is permitted (step 406). As a result, the host 102 downloads the encryption key (step 407).

  The server 103 records the permitted date and time in the “access status” on the card registration table 125 for the host 102 that has permitted access to the memory card 103, and there has been an access request from the host 102 to the memory card 101. It is assumed that the fact is notified to the destination indicated by the “mail address” on the card registration table 125.

  Next, in order to access the protected data area 109 of the memory card 101, the host 102 performs mutual authentication between the host 102 and the memory card 101 (steps 408 and 409).

  After the mutual authentication, the host 102 encrypts data such as contents to be written to the memory card 101 using the encryption key downloaded from the server 103 (step 410), and performs a data write command to the memory card 101. Is issued (step 411).

  When the memory card 101 receives a data write command from the host 102 (step 412), the memory card 101 transmits a response to the host 102 (step 413). When the host 102 receives the response from the memory card 101 (step 414), the host 102 transmits the encrypted data to the memory card (step 415).

  When the memory card 101 receives the encrypted data from the host 102 (step 416), the memory card 101 writes the encrypted data in the protected data area 109 of the NAND memory 105 (step 417).

  On the other hand, if it is determined in step 402 that the host 102 is not an accessible host (N in step 402), the server 103 determines to deny access to the memory card 101 by the host 102 (step 418). Then, the server 103 causes the host 102 to execute the operation defined in “operation at unauthorized access” on the card registration table 125 (for example, delete all data in the memory card). Further, it notifies the destination indicated by “mail address” on the card registration table 125 that there has been unauthorized access. In addition, when a part of access method is possible in “operation at unauthorized access” on the card registration table 125, an access request is permitted only for the access method. In addition, when there is a request for downloading an encryption key from the host 102 that is not an accessible host, the server 103 rejects the download request.

  Next, with reference to FIG. 5, an operation when data is read from the registered memory card 101 will be described. Note that the processing in steps 501 to 509 in FIG. 5 is the same as the processing in steps 401 to 409 in FIG. 4 described above, and a description thereof will be omitted. Here, the processing after step 510 will be described.

  After performing mutual authentication, the host 102 issues a data read command to the memory card 101 (step 510). When the memory card 101 receives a data read command from the host 102 (step 511), the memory card 101 transmits a response to the host 102 (step 512). Thereby, the host 102 receives a response from the memory card 101 (step 513).

Next, the memory card 101 reads the encrypted data stored in the protected data area 109 and transmits it to the host 102 (step 514). When the host 102 receives the encrypted data from the memory card 101 (step 515), the host 102 decrypts the encrypted data using the encryption key downloaded from the server 103 (step 516).
Note that the processing in step 517 in FIG. 5 is the same as the processing in step 418 in FIG. 4 described above, and a description thereof will be omitted.

<Specific example when the user uses a memory card>
A case where a specific user uses a memory card will be described with reference to FIGS. Here, (i) when registering a memory card, (ii) when the memory card can be accessed, and (iii) when the memory card cannot be accessed, the description will be divided into three.

  First, (i) the case of registering a memory card will be described with reference to FIGS.

  FIG. 6 is a diagram showing a system configuration when a user A registers the memory card A in the memory card manufacturer management server X through the Internet by operating the personal computer A. Here, for convenience, a common code A is given to the user, the personal computer, and the memory card. The memory card A, the personal computer A, and the memory card manufacturer management server X correspond to the memory card 101, the host 102, and the server 103, respectively. Further, it is assumed that the user A registers the registration contents shown in FIG. Here, personal computer A and personal computer B are registered as hosts that can access memory card A.

Next, an operation when the user A registers the memory card A will be described with reference to FIG.
For example, the user A purchases the memory card A at a mass store or the like (step 701). This memory card A is a security memory card having the same structure as the memory card 101 for storing data such as contents in the protected data area 109 (FIG. 1) as described above. The memory card A immediately after purchase cannot store data unless registration to the server X is completed.

  Next, the user A inserts the purchased memory card A into the personal computer A at home (step 702). When the personal computer A recognizes the memory card A (step 703), it activates the dedicated software 118 (step 704). The operation of the personal computer A described below is realized by the dedicated software 118.

  The personal computer A initializes the memory card A and acquires a media ID from the memory card A (step 705). Then, the personal computer A transmits the acquired media ID and the personal computer A's own IP address and MAC address to the server X of the seller through the Internet (step 706).

  When the server X receives the media ID, IP address, and MAC address transmitted from the personal computer A (step 707), the server X determines whether the media ID therein has already been registered in the card registration table 125 (step 708). ). In the case of a memory card whose media ID is not registered, a message indicating that the media ID is not registered is transmitted to the personal computer A. If the media ID has already been registered, the process proceeds to a process for determining whether the personal computer A is an accessible host by referring to the IP address and MAC address transmitted from the personal computer A. However, the description thereof is omitted here.

  When the personal computer A receives the message transmitted from the server X, it displays a registration screen for registering the memory card and displays “accessible host”, “operation at access”, “unauthorized access” shown in FIG. User A is prompted to input information such as “time operation”, “password when changing registered contents”, and “mail address” (step 709). An example of a registration screen displayed on the screen of the personal computer A at this time is shown in FIG.

  User A inputs information on the registration screen displayed on personal computer A (step 710). For example, as shown in FIG. 8, as an accessible host, the IP address “111.222.111.222” and the MAC address “AA.BB.CC.DD.EE.FF” of the personal computer A and the IP address of the personal computer B The address “222.111.22.211” and the MAC address “AA.11.BB.22.CC.33” are entered in the fields of the host 1 and the host 2, respectively.

  In addition, as the “operation during access”, “all access is possible” is set when PC A requests access, and “only read operation is possible” when PC B requests access, and other PCs request access. In this case, “delete all data in card” is set as “operation at unauthorized access”. Also, for example, “hanako@xxx.ne.jp” is input as the “mail address”, and “send mail to the above mail address when a computer other than the host 1 (PC A) accesses” is set. .

  When the user A performs a registration content transmission operation (step 711), the personal computer A transmits the registration content to the server X (step 712). Upon receiving the registration content transmitted from the personal computer A (step 713), the server X registers the received registration content in the card registration table 125 together with the previously received media ID, IP address, and MAC address (step 713). 714). As a result, the user A can use the memory card A.

  Next, a case of accessing a registered memory card will be described with reference to FIGS. In this access, there are (ii) a case where the memory card can be accessed and (iii) a case where the memory card cannot be accessed.

  FIG. 9 shows that a user B who owns a personal computer B who can access the memory card A and a user C who owns a personal computer C which cannot access the memory card manufacturer management server X via the Internet. It is a figure which shows the system configuration | structure when communicating with. It is a system configuration diagram. The server X stores the same registration contents as the registration contents shown in FIG.

  The memory card A stores user A's private video data and is lent to the user B from the user A. On the other hand, the memory card A may be in the hands of a third party user C against the intention of the user A. For example, the user A may lose the memory card A, and the user C may obtain the memory card A. In that case, the user C may attempt to access the memory card A using the personal computer C.

  The personal computer B and the personal computer C are equipped with the dedicated software 118 shown in FIG. In order for the user B who owns the personal computer B to access the memory card A attached to the personal computer B, it is necessary to communicate with the server X through the Internet and obtain access permission to the memory card A. In addition, in order to execute access to the memory card A attached to the personal computer C, the user C who owns the personal computer C needs to communicate with the server X through the Internet and obtain permission to access the memory card A. is there. In this example, the personal computer B is permitted to access the memory card A, while the personal computer C is denied access to the memory card A.

  Next, with reference to FIG. 10, (ii) the case where the memory card can be accessed will be described. It is assumed that the user A's private video data has already been stored in the memory card A, and this memory card A is lent to the user B.

  User B inserts memory card A into personal computer B owned by user B (step 1001). When the personal computer B recognizes the inserted memory card A (step 1002), it activates the dedicated software 118 (step 1003). Thereafter, the processing of each step in the personal computer B is executed by the dedicated software 118.

  The personal computer B initializes the memory card A and acquires a media ID from the memory card A (step 1004). Then, the personal computer B transmits the acquired media ID of the memory card A and the IP address and MAC address of the personal computer B to the server X (step 1005).

  When the server X receives the media ID, IP address, and MAC address (step 1006), whether the media ID has already been recorded on the card registration table 125 (that is, whether the memory card A has been registered). ) Is determined (step 1007). Since the memory card A is a registered memory card (Y in Step 1007), the received IP address and MAC address, and the IP address and MAC address of the host registered as “accessible host” To determine whether the personal computer B is an accessible host (step 1008). Since the IP address and the MAC address of the personal computer B have already been registered, the comparison results match and it is confirmed that the personal computer B is an accessible host (Y in step 1008). As a result, the server X transmits a message indicating that the personal computer B is an accessible host and information defining the access operation (or method) to the memory card to the personal computer B (step 1009).

  On the card registration table 125, since the “operation at the time of access” of the personal computer B is limited to “read access only”, the server X stores information defining the access operation limited to only read access. Send to B.

  When the personal computer B receives the message and the operation definition information from the server X (step 1010), it requests the download of the encryption key for the memory card A (step 1011). In response to the request, the server X permits and executes the download of the encryption key (step 1012).

  The personal computer B performs mutual authentication with the memory card A and then reads the data in the memory card A. At this time, the personal computer B decrypts the read data using the encryption key downloaded from the server X (step 1013). Thereby, the user B can read desired data (step 1014).

  Note that when the user A accesses the memory card A using the personal computer A, the operation is the same as that of FIG. However, on the card registration table 125, since the “operation at access” of the personal computer A is set to “all accessible”, the server X sends a message indicating that the personal computer A is an accessible host to the personal computer A. When transmitting to, information defining an access operation that enables all access is transmitted to the personal computer A. Thereby, the personal computer A can encrypt the data with the encryption key downloaded from the server X and write it to the memory card A, or decrypt the data read from the memory card A with the same encryption key. For this reason, the user A can store the private video data as described above in the memory card A using the personal computer A.

  Next, with reference to FIG. 11, (iii) a case where the memory card cannot be accessed will be described. Here, it is assumed that the user A loses the memory card A and the third party user C tries to access the memory card A with the personal computer C.

  The user C inserts the memory card A into the personal computer C owned by the user C (step 1101). When the personal computer C recognizes the inserted memory card A (step 1102), it activates the dedicated software 118 (step 1103). Thereafter, the processing of each step in the personal computer C is executed by the dedicated software 118.

  The personal computer C initializes the memory card A and acquires a media ID from the memory card A (step 1104). Then, the personal computer C transmits the acquired media ID of the memory card A and the IP address and MAC address of the personal computer C to the server X (step 1105).

  When the server X receives the media ID, IP address, and MAC address (step 1106), whether or not the media ID is already recorded on the card registration table 125 (that is, whether or not the memory card A has been registered). ) Is determined (step 1107). Since the memory card A is a registered memory card (Y in step 11), the received IP address and MAC address, and the IP address and MAC address of the host registered as “accessible host” To determine whether the personal computer C is an accessible host (step 1108). Since the IP address and MAC address of the personal computer C are not registered, the comparison results do not match, and it is confirmed that the personal computer C is an unauthorized access host (N in step 1108).

  The server X transmits a message indicating that access is denied and information defining the operation at the time of unauthorized access (instruction for instructing all data in the memory card to be erased) to the personal computer CB (step 1109). To the user A (step 1110). Further, the server X rejects the encryption key download request from the personal computer C if any.

  When the personal computer C receives the access denial message and the unauthorized access operation definition information from the server X (step 1111), the personal computer C deletes all data stored in the protection area of the memory card A according to the operation definition information (step 1111). 1112). Then, the personal computer C notifies the user C that access is impossible through a screen or the like (step 1113).

  In this way, it is possible to limit the hosts that can access the memory card A and to control the access operation to the memory card A for each host. Further, unauthorized access to the memory card A can be prevented, and a strong security system can be constructed.

<Specific example of changing the registered contents of a memory card registered by the user>
Next, with reference to FIG. 12 and FIG. 13, a case where the registration contents of the memory card A registered by the user A in the server X are changed will be described. Here, an example will be described in which the user A makes the personal computer B inaccessible out of the two personal computers A and B currently registered as accessible hosts to the memory card A. The system configuration in this case is the same as that in FIG.

Here, with reference to FIG. 12, an operation in the case where the registered content of the memory card A registered by the user A in the server X is changed will be described.
User A inserts memory card A into personal computer A (step 1301). When the personal computer A recognizes the memory card A (step 1302), it activates the dedicated software 118 (step 1303). The operation of the personal computer A described below is realized by the dedicated software 118.

  The personal computer A initializes the memory card A and acquires a media ID from the memory card A (step 1304). Then, the personal computer A transmits the acquired media ID and the personal computer A's own IP address and MAC address to the server X through the Internet (step 1305).

  When the server X receives the media ID, IP address, and MAC address transmitted from the personal computer A (step 1306), the server X determines whether the media ID therein has already been registered in the card registration table 125 (step 1307). ). Since the memory card A is a registered memory card (Y in step 1307), the received IP address and MAC address, and the IP address and MAC address of the host registered as “accessible host” To determine whether the personal computer A is an accessible host (step 1308). Since the IP address and MAC address of the personal computer A have already been registered, the comparison results match, and it is confirmed that the personal computer A is an accessible host (Y in step 1308). As a result, the server X transmits to the personal computer A a message indicating that the personal computer A is an accessible host and information defining the access operation (or method) to the memory card.

  When the personal computer A receives the message and the operation definition information transmitted from the server X (step 1309), the personal computer A displays a screen indicating the access method to the memory card A to the user A. As a result, the user A can access the memory card A and change the registered contents of the memory card A (step 1310). Here, the user A instructs the personal computer A to change the registered contents of the memory card A (step 1311).

  Upon receiving this registration content change instruction (step 1312), the personal computer A displays a screen prompting the user A to input a password and change content necessary for changing the registration content (step 1313).

  User A inputs a password for changing registered contents on the screen of personal computer A (step 1314). An example of the registration screen displayed on the screen of the personal computer A at this time is shown in FIG. Here, in order to make the access to the memory card A by the personal computer B impossible, the user A clicks the “delete host” button corresponding to the “personal computer B” registered in the “accessible host” in the screen. This is input to the personal computer A as a change content (step 1315).

  The personal computer A transmits the changed content and password input by the user A to the server X (step 1316). After confirming the change contents and the password (step 1317), the server X changes the corresponding part on the card registration table 125 according to the change contents (step 1318). Here, the description related to “PC B” on the card registration table 125 is deleted.

  As a result, access to the memory card A from the personal computer B becomes impossible. Therefore, even if the memory card A is inserted into the personal computer B and data in the memory card A is read out by the personal computer B, the data cannot be read out. It becomes impossible.

  Further, the registration contents can be changed even if the memory card A is not on the spot (without inserting the memory card A into the personal computer). However, the change can be performed only when the server X is accessed from the accessible device corresponding to the memory card A and the host (the personal computer A in the above example) which is a host capable of changing the registered contents.

  In addition to changing the registration details, such as deleting accessible hosts as in the above example, you can change access privileges (change access methods, etc.) or add accessible hosts. It is possible to go. Furthermore, it is possible to delete or add files stored in the memory card. Thus, for example, after user A assigns memory card A to user B, if user A finds that important data is still stored in memory card A, user A can access the server from personal computer A. It is possible to acquire information in the memory card A and delete important data in the memory card A.

  As described above, according to the present embodiment, the user A who is the owner of the personal computer A can flexibly change the access authority to the memory card A while maintaining strong security with respect to personal data on the memory card A and the like. It becomes possible to do.

  In this embodiment, the host IP address, the MAC address, and the user telephone number are exemplified as the identification information for specifying the accessible host. In addition, the host computer name, CPU-ID, device ID, location Information, digital signatures, serial numbers, etc. may be employed.

  In this embodiment, the host downloads the encryption key from the server every time the memory card is accessed. However, when the host already holds the encryption key corresponding to the memory card. There is no need to download the encryption key again.

  In this embodiment, the host acquires the media ID of the memory card and transmits it to the server. However, if the server has a table of media IDs corresponding to the serial number of the card, the server Instead of sending a media ID, a serial number corresponding to the media ID may be sent.

  Further, in the present embodiment, an example in which a user who has purchased a memory card can perform a setting to limit the accessible host for the memory card has been shown, but in the case of a memory card in which content is already stored before sale, The content seller may register an accessible host in the server before selling the memory card.

  In this embodiment, an example in which an accessible host is set for each memory card has been described. However, an accessible host may be set for each file in the memory card.

  In the present embodiment, the server has shown an example of confirming that the target host device is an accessible host using the card registration table, but before finally certifying that the target host device is an accessible host, Furthermore, it is also possible to make a call to a telephone number registered in advance and make access impossible unless there is a response from the registered host within a certain time.

  In this embodiment, when an access request to a memory card is received from an arbitrary host, an example is shown in which an email is transmitted to a destination of a registered email address. However, there is an access from a specific device. An email may be sent only in such a case. Further, instead of sending mail, the message may be sent to the destination from a host specific TCP port registered in advance by the dedicated software 118. That is, by directly accessing the TCP port, it is possible to send a message to the destination client.

  Further, in the present embodiment, an example is shown in which access to the memory card is permitted only when it is determined that the device is accessible. However, even if it is an inaccessible host, the host of a specially established organization If so, the memory card may be accessible.

  In the present embodiment, an example in which there is one server is shown, but a plurality of servers may exist. In this case, only one of a plurality of servers is registered with a certain memory card. The accessible host may be set by a plurality of servers.

  The server shown in this embodiment is preferably managed by the memory card manufacturer, but in addition, the server may be managed by the host device manufacturer, a third party organization, a convenience store, a memory card store, and the like. Also good.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

1 is a block diagram showing a system configuration for access management in an embodiment of the present invention. The figure which shows an example of the card registration table preserve | saved at the server. The flowchart which shows the operation | movement in the case of registering a memory card with a server. The flowchart which shows operation | movement in the case of writing data with respect to the registered memory card. The flowchart which shows operation | movement in the case of reading data from the registered memory card. The figure which shows the system configuration | structure in case the user A registers the memory card A with the memory card manufacturer management server X through the internet by operating the personal computer A. The flowchart which shows operation | movement when the user A registers the memory card A. The figure which shows an example of the memory card registration screen displayed on a screen. A case where a user B who owns a personal computer B that can access the memory card A and a user C who owns a personal computer C that cannot access the memory card A communicate with the memory card manufacturer management server X via the Internet. The figure which shows a system structure. The flowchart which shows operation | movement when a memory card is accessible. The flowchart which shows operation | movement when a memory card cannot be accessed. The flowchart which shows operation | movement when the registration content of the memory card A which the user A registered to the server X is changed. The figure which shows an example of the memory card registration content change screen displayed on a screen.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 101 ... Semiconductor memory card, 102 ... Host device, 103 ... Server device, 104 ... Processor module, 105 ... NAND flash memory 105, 106 ... Interface terminal, 107 ... Management data area, 108 ... Confidential data area, 109 ... Protection Data area, 110 ... controller, 111 ... SRAM, 112 ... ROM, 113 ... IO interface, 114 ... CPU, 115 ... system memory, 116 ... network interface, 117 ... disk storage device, 118 ... dedicated software (SecureSoft), 121 ... Network interface 122... CPU, 123... System memory 124... Disk storage device 125.

Claims (5)

A program installed in an electronic device that accesses a memory card.
A function of transmitting first information for identifying the memory card and second information for identifying the electronic device to a predetermined information processing apparatus;
The access to the memory card is executed using the memory card access information obtained from the information processing apparatus when the information processing apparatus receives permission to access the memory card based on the determination result of the information processing apparatus. A program characterized by realizing functions.   The program according to claim 1, wherein the memory card access information obtained from the information processing apparatus is key information used for encryption and decryption of data to be stored in the memory card. An information processing apparatus for managing access to an electronic device that accesses a memory card,
Means for storing registration information in which an electronic device capable of accessing the memory card is registered for each memory card;
When the first information for identifying the memory card and the second information for identifying the electronic device are received, the electronic device accesses the memory card based on the content of the registration information. Means to determine permission / denial;
An information processing apparatus comprising: means for transmitting key information to the electronic device when permission to access the memory card by the electronic device is determined.   In the registration information stored in the storage means, it is possible to register, for each memory card, address information of a destination to be notified of the fact when there is an access request to the memory card. The information processing apparatus according to claim 3.   4. The registration information stored in the storage means can define an operation to be performed when there is an access request from an unauthorized electronic device for each memory card. The information processing apparatus described in 1.

Images