JP2005316677A - Information protection system and information protection method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information protection system and an information protection method by which a user who provides encrypted information can check whether the encrypted information is decrypted by a third person who is not intended by the user or not. <P>SOLUTION: A decryption monitoring device 300 determines whether a device tying to execute decryption is a device specified by transmission destination information or not on the basis of the transmission destination information provided from a user terminal device 100 and a decrypted destination information provided from the device trying to execute decryption and indicating the device, informs the user terminal device 100 of the determined result, and only at the time of receiving permission information from the user terminal device 100, decryption permission information is transmitted to the device trying to perform encryption. Only at the time of receiving the decryption permission information, the device trying to execute decryption executes the decrypting processing. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information protection system and an information protection method.

  Currently, online shopping or electronic commerce is realized with the spread of the Internet. When online shopping or electronic commerce is performed, personal information (for example, a credit card number) is sent over the network.

  When personal information is exchanged via a network, there is a possibility that personal information may leak to a third party from the side that actually received the personal information. For this reason, the possibility that the leaked personal information can be misused by the third party cannot be denied. In particular, when the Internet is used, the anonymity of the user is high, and it is difficult to specify a third party who steals personal information. Accordingly, there has been a problem that the leakage of personal information via the Internet hinders the development of Internet business such as electronic commerce.

  2. Description of the Related Art Conventionally, there is known an information protection technique for preventing information flowing on a network from passing to a third party and misusing the information passed to the third party.

  For example, in order to prevent leakage of personal information on a network such as the Internet, a personal information protection technique for transmitting encrypted personal information is known.

  Japanese Patent Laid-Open No. 2002-288136 describes a user information management apparatus that transmits personal information to a server computer only when the user permits transmission of personal information. Patent Document 1 describes that a known encryption technique may be used when storing and transmitting personal information.

  Patent Document 2 (Japanese Patent Laid-Open No. 2001-331446) describes a secure agent system that uses a secure agent to prevent leakage of personal information.

  Specifically, the secure node generates an anti-tampering execution environment, and stores a secure agent and a secure agent key on the generated execution environment. The secure node distributes the execution environment storing the secure agent and the secure agent key to each of the two computers that perform communication, and causes each of the execution environments to be implemented.

  When transmitting information such as personal information, the transmitting computer encrypts the information with the secure agent key stored in the computer, and transmits the encrypted information to the receiving computer. The receiving computer decrypts the transmitted information with the secure agent key stored in itself.

  Patent Document 3 (Japanese Patent Application Laid-Open No. 2003-345931) describes a personal information distribution management system including a personal information providing device, a personal information utilization device, a personal information authentication device, and a personal information utilization environment authentication device. Yes.

Specifically, the personal information providing device generates a personal information capsule encapsulating the personal information and the disclosure usage rule judging means, and the personal information usage device is the personal information authentication device, the personal information usage environment authentication device, and the disclosure usage rule. The personal information included in the personal information capsule is acquired using the judging means.
JP 2002-288136 A JP 2001-331446 A JP 2003-345931 A

  However, in the user information management device described in Patent Document 1, the secure agent system described in Patent Document 2, and the personal information distribution management system described in Patent Document 3, the user who provided the personal information is encrypted. It is impossible to confirm whether or not the personal information is about to be decrypted by a third party that the user does not know. For this reason, there has been a problem that the user who provided the personal information cannot recognize the leakage of the personal information until the encrypted personal information is decrypted and misused by a third party.

  The problem of the present invention is to provide an information protection system and an information protection method that enable a user who provides information to check whether encrypted information is going to be decrypted by a third party not intended by the user. Is to provide.

  In order to achieve the above object, an information protection system of the present invention encrypts user input information input by a user, and transmits the encrypted user input information to a transmission destination apparatus via a communication line. An information protection system comprising: a device; and a decryption monitoring device that monitors whether or not user input information encrypted by the user terminal device is to be decrypted by a device different from the transmission destination device. The terminal device transmits destination information indicating the destination device to the decryption monitoring device via a communication line, and decrypts the encrypted user input information and the encrypted user input information. An information file indicating an agent that manages the information is transmitted to the transmission destination device via a communication line, and the agent includes a device having the information file. When receiving decryption instruction information for decrypting the encrypted user input information indicated in the information file, a process of transmitting decryption destination information indicating the device having the information file to the decryption monitoring device. The device having the information file is executed, and further, the decryption permission information is received to the effect that the device having the information file allows the decryption monitoring device to decrypt the encrypted user input information. Only when the encrypted user input information is decrypted by the apparatus having the information file, and the decryption monitoring apparatus stores the destination information transmitted from the user terminal apparatus. And the decryption destination information transmitted from the device having the information file and the destination information stored in the storage unit. A determination unit for determining whether or not the device having the transmission destination device is, and notification of the determination result of the determination unit to the user terminal device, and permission information to permit decoding from the user terminal device. And a communication unit that transmits the decryption permission information to the device having the information file only when it is received.

  The information protection method of the present invention includes a user terminal device that encrypts user input information input by a user and transmits the encrypted user input information to a destination device via a communication line, and the user terminal Information protection performed by an information protection system including a decryption monitoring device that monitors whether or not user input information encrypted by a device is going to be decrypted by a device different from the destination device, the user terminal device Transmits transmission destination information indicating the transmission destination device to the decoding monitoring device via a communication line, and transmission destination information transmitted by the decoding monitoring device in the transmission destination information transmission step. Storing in the storage unit, and the user terminal device manages the decryption of the encrypted user input information and the encrypted user input information. An information file transmission step of transmitting an information file indicating an agent to be transmitted to the transmission destination device via a communication line, and encrypted user input information indicated in the information file by the device having the information file by the agent A decoding destination information transmitting step for causing the apparatus having the information file to execute a process of transmitting the decoding destination information indicating the apparatus having the information file to the decoding monitoring apparatus when receiving the decoding instruction information for decoding The device having the information file is the transmission destination device based on the transmission destination information stored in the storage unit and the decoding destination information transmitted from the device having the information file. A determination step for determining whether or not the decoding monitoring device determines the determination result of the determination step as the user terminal And the decryption permission information indicating that the encrypted user input information is permitted to be decrypted only when the permission information indicating that the decryption is permitted is received from the user terminal device. A communication step for transmitting to the device having the information file; and the agent decrypts the encrypted user input information only when the device having the information file receives the decryption permission information from the decryption monitoring device. And a decrypting step for causing the apparatus having the information file to execute the process of converting the information into a file.

  According to the above invention, the encrypted user input information is not decrypted unless it passes through the agent. Further, before decryption, the user terminal device is notified whether or not the device to decrypt the encrypted user input information is the transmission destination device, and information indicating that the decryption may be executed. Is decrypted only when is transmitted from the user terminal device. For this reason, in order to decrypt the encrypted user input information, permission of the user of the user terminal device that transmitted the encrypted user input information is required, and the encrypted user input information is the user's intention. It is possible to prevent decryption by a third party who does not.

  In the information protection system, when the communication unit further receives transmission destination information transmitted from the user terminal device, the communication unit transmits the agent to the user terminal device, and the agent receives the user input information. It is desirable to cause the user terminal device to execute encryption processing for encryption.

  In the information protection method, an agent transmission step of transmitting the agent to the user terminal device when the decryption monitoring device receives transmission destination information transmitted from the user terminal device; and the agent inputs the user input It is desirable to further include an encryption step for causing the user terminal device to execute an encryption process for encrypting information.

  According to the above invention, encryption and decryption can be performed by one agent.

  In the information protection system, an agent transmitted from the communication unit to the user terminal device includes agent identification information indicating itself, and the storage unit associates the transmission destination information with the agent identification information. The agent further includes a process of transmitting the decoding destination information and the agent identification information to the decoding monitoring apparatus when the apparatus having the information file receives the decoding instruction information. The information is executed by the apparatus, and the determination unit is associated with the agent identification information transmitted from the apparatus having the information file, and the decoding information transmitted from the apparatus having the information file is stored in the storage unit. Based on the destination information, the device having the information file is the destination device. It is desirable to determine Luke.

  In the information protection method, the agent transmission step transmits an agent including agent identification information indicating itself to the user terminal device, and the storage step associates the transmission destination information with the agent identification information. Storing, and when the agent further receives the decryption instruction information, the decryption destination information transmission step transmits the decryption destination information and the agent identification information to the decryption monitoring device. And the determination step is stored in the storage unit in association with the agent identification information transmitted from the device having the information file in the decryption destination information transmission step. The information in the transmission destination information and the decoding destination information transmission step Based on the decoding destination information transmitted from the device having a Airu, it is desirable that the information has a file system to determine whether it is the destination device.

  According to the above invention, the transmission destination information and the agent identification information are stored in the storage unit in association with each other, and the transmission destination information stored in the storage unit in association with the agent identification information transmitted from the device having the information file. And the decryption destination information transmitted from the device having the information file, it is determined whether or not the device having the information file is the transmission destination device. Therefore, even if the decryption monitoring device transmits a plurality of agents to a plurality of user terminal devices, each user input information encrypted based on each agent is decrypted by a third party not intended by the user. Can be prevented.

  The user input information is preferably personal information.

  According to the above invention, personal information is protected. For this reason, it becomes possible to prevent the safety | security of Internet business, such as electronic commerce which requires the exchange of personal information on a communication line, becoming low.

  According to the present invention, the encrypted user input information can be decrypted only through the agent. Further, before decryption, the user terminal device is notified whether or not the device to decrypt the encrypted user input information is the transmission destination device, and information indicating that the decryption may be executed. Is decrypted only when is transmitted from the user terminal device. For this reason, in order to decrypt the encrypted user input information, permission of the user of the user terminal device that transmitted the encrypted user input information is required, and the encrypted user input information is the user's intention. It is possible to prevent decryption by a third party who does not.

  Embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a block diagram showing an information protection system according to an embodiment of the present invention.

  In FIG. 1, the information protection system includes a user terminal device 100 and a decryption monitoring device 300. Furthermore, the information protection system includes a user terminal device 100, a network (communication line) 200 such as the Internet, a decryption monitoring device (CA station) 300, an information center device 400, and a third party terminal device 500. including.

  The user terminal device 100, the decryption monitoring device (CA station) 300, the information center device 400, and the third party terminal device 500 are connected to each other via the network 200. The third party terminal device 500 can access the information center device 400 without going through the network 200.

  The user terminal device 100 is, for example, a personal computer, encrypts user input information input by the user, and transmits the encrypted user input information to the information center device 400 as a transmission destination device via the network 200. To do.

  Furthermore, the user terminal device 100 transmits destination information (disclosure destination) indicating the information center device 400 to the decryption monitoring device 300 via the network 200. Also, the user terminal device 100 transmits an information file including the encrypted user input information and an agent that manages the decryption of the encrypted user input information to the information center device 400 via the network 200. .

  Note that the information file transmitted to the information center device 400 may be illegally captured by the third party terminal device 500.

  The user terminal device 100 includes a communication unit 101, an input unit 102, a display unit 103, a ROM 104, a RAM 105, and a CPU (control circuit) 106.

  The communication unit 101 is connected to the network 200 and exchanges various information via the network 200.

  The input unit 102 includes, for example, a keyboard and a mouse and is operated by a user. The input unit 102 receives various inputs from the user.

  The display unit 103 displays a screen indicated by screen information supplied from the CPU 106.

  The ROM 104 as a computer-readable recording medium stores a program that defines the operation of the user terminal device 100.

  A RAM 105 as a computer-readable recording medium is used as a work area for the CPU 106. The RAM 105 stores an agent provided from the decryption monitoring apparatus 300 via the network 200. The agent stored in the RAM 105 is software (program) having autonomy. For example, information encryption and decryption are performed on a device having the agent (specifically, on a device having the agent). It is executed by a built-in computer.

  The CPU 106 as a computer controls the operation of the user terminal device 100 by reading the operation program stored in the ROM 104 and executing the read operation program.

  Further, the CPU 106 executes a process defined by the agent stored in the RAM 105.

  For example, when the communication unit 101 receives personal information request information for requesting personal information transmitted from the information center apparatus 400, the CPU 106 displays a personal information input screen for prompting input of personal information on the display unit 103. Let Note that the personal information request information transmitted from the information center apparatus 400 includes transmission destination information indicating the information center apparatus 400 (for example, the address of the information center apparatus 400).

  When the user operates the input unit 102 to input personal information, the CPU 106 stores the input personal information in the RAM 105.

  When the user operates the input unit 102 to input agent distribution request information including transmission destination information indicating the information center device 400 as an information transmission destination (disclosure destination), the CPU 106 receives the agent distribution accepted by the input unit 102. The communication unit 101 executes an agent distribution request information transmission process for transmitting request information to the decryption monitoring apparatus 300 via the network 200. As the transmission destination information, for example, the address of the information center device 400 is used. Further, when transmitting the agent distribution request information to the decryption monitoring apparatus 300, the communication unit 101 adds the address of the user terminal apparatus 100 to the agent distribution request information, and the agent distribution to which the address of the user terminal apparatus 100 is added. Request information is transmitted to the decryption monitoring apparatus 300.

  When the communication unit 101 receives an agent provided from the decryption monitoring apparatus 300 via the network 200, the CPU 106 stores the agent received by the communication unit 101 in the RAM 105.

  Further, the CPU 106 activates an agent stored in the RAM 105.

  The agent activated on the user terminal device 100 encrypts the personal information stored in the RAM 105, generates a personal information file including the encrypted personal information and the agent itself, and generates the generated personal information file. Is stored in the RAM 105 by the CPU 106.

  When the user operates the input unit 102 to transmit the personal information file stored in the RAM 105 to the information center apparatus 400, the CPU 106 transmits the personal information file stored in the RAM 105 to the information center apparatus 400. Causes the communication unit 101 to execute file transmission processing.

  The decryption monitoring apparatus 300 monitors whether the user input information encrypted by the user terminal apparatus 100 is going to be decrypted by an apparatus different from the information center apparatus 400 indicated as the transmission destination (disclosure destination). The decryption monitoring apparatus 300 includes a communication unit 301, a RAM 302, a ROM 303, and a CPU (control circuit) 304.

  The communication unit 301 is connected to the network 200 and exchanges various information via the network 200. For example, the communication unit 301 receives agent distribution request information transmitted from the user terminal device 100 and transmits the agent to the user terminal device 100.

  A RAM 302 as a computer-readable recording medium is used as a work area for the CPU 304.

A ROM 303 as a computer-readable recording medium stores a program that defines the operation of the decryption monitoring apparatus 300. The ROM 303 stores an agent to be provided to the user terminal device 100. The CPU 304 as a computer reads the operation program stored in the ROM 303, and executes the read operation program, thereby decoding the monitoring apparatus. 300 operations are controlled.

  For example, when the communication unit 301 receives agent distribution request information transmitted from the user terminal device 100, the CPU 304 acquires the address and transmission destination information of the user terminal device 100 from the received agent distribution request information. Further, the CPU 304 reads the agent stored in the ROM 303. The agent stored in the ROM 303 includes agent identification information indicating itself. Further, the CPU 304 causes the communication unit 301 to execute an agent transmission process for transmitting the read agent to the user terminal device 100 via the network 200.

  Further, the CPU 304 sends agent identification information indicating the agent provided to the user terminal device 100, the address of the user terminal device 100 added to the agent distribution request information, and transmission destination information (indicated by the agent distribution request information). The information is stored in the RAM 302 in association with the disclosure destination.

  The information center device 400 is a computer device used by a public institution (for example, a city hall) or a business operator (for example, a provider) that handles personal information. The information center apparatus 400 includes a communication unit 401, a memory 402, a ROM 403, and a CPU (control circuit) 404.

  The communication unit 401 is connected to the network 200 and exchanges various information via the network 200. For example, the communication unit 401 transmits personal information request information to the user terminal device 100 and receives a personal information file transmitted from the user terminal device 100.

  A memory 402 as a computer-readable recording medium stores a personal information file received by the communication unit 401.

  A ROM 403 serving as a computer-readable recording medium stores a program that defines the operation of the information center apparatus 400.

  The CPU 404 as a computer controls the operation of the information center apparatus 400 by reading the operation program stored in the ROM 403 and executing the read operation program. For example, the CPU 404 stores the personal information file received by the communication unit 401 in the memory 402.

  Third party terminal device 500 includes communication unit 501, input unit 502, ROM 503, RAM 504, and CPU 505.

  A communication unit 501 is connected to the network 200 and exchanges various information via the network 200. The communication unit 501 communicates with the communication unit 401 without going through the network 200. For example, the communication unit 501 takes in a personal information file from the information center device 400.

  The input unit 502 includes, for example, a keyboard, a mouse, and a recording medium reading unit, and is operated by a user. The input unit 502 receives various inputs from the user. For example, the input unit 502 takes in the personal information file from a recording medium (for example, floppy) on which the personal information file read from the memory 402 is recorded, using the recording medium reading unit.

  A ROM 503 serving as a computer-readable recording medium stores a program that defines the operation of the third party terminal device 500.

  A RAM 504 serving as a computer-readable recording medium is used as a work area for the CPU 505.

  A CPU 505 as a computer controls an operation of the third party terminal device 500 by reading an operation program stored in the ROM 503 and executing the read operation program. For example, the CPU 505 stores a personal information file captured by the communication unit 501 or the input unit 502 in the RAM 504.

  The agent included in the personal information file receives the decryption instruction information indicating that the device having the personal information file including the agent decrypts the encrypted user input information included in the personal information file. Processing for transmitting inquiry information including decryption destination information (for example, the address of the device having the personal information file) indicating the device having the information file and agent identification information indicating the device to the decryption monitoring device 300; The computer (for example, CPU) of the device having the file is executed.

  Further, the agent included in the personal information file receives from the decryption monitoring device 300 the decryption permission information indicating that the device having the personal information file including the agent is allowed to decrypt the encrypted user input information. Only when it is received, the computer (for example, CPU) of the apparatus having the personal information file is executed to decrypt the encrypted user input information.

  When the communication unit 301 receives the inquiry information, the CPU 304 of the decryption monitoring apparatus 300 reads the agent identification information and the address (decryption destination information) of the apparatus having the agent from the received inquiry information. The CPU 304 reads out the transmission destination information (disclosure destination) and the address of the user terminal device 100 stored in the RAM 302 in association with the read agent identification information.

  The CPU 304 determines whether or not the transmission destination information (disclosure destination) read from the RAM 302 matches the address (decryption destination information) read from the inquiry information. The CPU 304 causes the communication unit 301 to execute transmission processing for transmitting the determination result to the address of the user terminal device 100.

  When the communication unit 101 receives the determination result of the CPU 304, the CPU 106 of the user terminal device 100 displays the determination result on the display unit 103.

  The user sees the determination result of the CPU 304 displayed on the display unit 103, recognizes whether or not the personal information provided by the user is likely to be decrypted by a third party not intended by the user, and decrypts by the agent. The input unit 102 is operated so as to input decryption permission / inhibition information indicating whether to permit or not.

  The CPU 106 causes the communication unit 101 to execute a process of transmitting the decryption permission / inhibition information received by the input unit 102 to the decryption monitoring apparatus 300.

  When the communication unit 301 receives the decryption permission / inhibition information, the CPU 304 of the decryption monitoring apparatus 300 causes the communication unit 301 to execute a process of transmitting the decryption permission / inhibition information to the device that transmitted the inquiry information.

  Next, the operation will be described.

  FIG. 2 is a sequence diagram for explaining the operation of the information protection system. Hereinafter, the operation of the information protection system will be described with reference to FIG.

  First, an operation in which the user terminal device 100 transmits a personal information file to the information center device 400 will be described.

  In step 21, the information center device 400 transmits personal information request information to the user terminal device 100. Specifically, the CPU 404 causes the communication unit 401 to execute transmission processing for transmitting personal information request information to the user terminal device 100.

  When the communication unit 101 receives personal information request information, the user terminal device 100 (specifically, the CPU 106) causes the display unit 103 to display a personal information input screen that prompts input of personal information.

  When the user operates the input unit 102 to input personal information, the CPU 106 stores the input personal information in the RAM 105.

  In step 22, when the user operates the input unit 102 to input agent distribution request information indicating the address of the information center device 400 as transmission destination information (disclosure destination), the CPU 106 receives the agent distribution accepted by the input unit 102. The communication unit 101 executes an agent distribution request information transmission process for transmitting request information to the decryption monitoring apparatus 300 via the network 200.

  When transmitting the agent distribution request information to the decryption monitoring apparatus 300, the communication unit 101 adds the address of the user terminal apparatus 100 to the agent distribution request information, and the agent distribution to which the address of the user terminal apparatus 100 is added. Request information is transmitted to the decryption monitoring apparatus 300.

  When the communication unit 301 receives the agent distribution request information transmitted from the user terminal device 100, the CPU 304 transmits destination information (information center device 400) indicating the address and disclosure destination of the user terminal device 100 from the received agent distribution request information. Address).

  Subsequently, the CPU 304 reads the agent 51 stored in the ROM 303 and causes the communication unit 301 to execute an agent transmission process for transmitting the read agent 51 to the user terminal device 100 via the network 200. Further, the CPU 304 transmits the agent identification information of the agent 51 provided to the user terminal device 100, the provision destination of the agent 51 (the address of the user terminal device 100), and the disclosure destination indicated by the agent distribution request information. The destination information (the address of the information center apparatus 400) is stored in the RAM 302 in association with it.

  FIG. 3 is an explanatory diagram showing an example of information stored in the RAM 302. In FIG. 3, agent identification information 302a, an agent provision destination (user terminal device 100 address) 302b, and a disclosure destination (transmission destination information: address of information center device 400) 302c are associated with RAM 302. Stored.

  Returning to FIG. 2, when the communication unit 101 receives the agent 51 provided from the decryption monitoring apparatus 300, the CPU 106 stores the agent 51 received by the communication unit 101 in the RAM 105.

  Subsequently, the CPU 106 activates the agent 51 stored in the RAM 105.

  In step 24, the agent 51 activated by the user terminal device 100 encrypts the personal information stored in the RAM 105, and further generates a personal information file 52 including the encrypted personal information and the agent 51 itself. The CPU 106 is caused to execute processing for storing the generated personal information file 52 in the RAM 105.

  In step 25, when the user operates the input unit 102 to transmit the personal information file 52 stored in the RAM 105 to the information center apparatus 400, the CPU 106 stores the personal information file 52 stored in the RAM 105 in the information center apparatus. The communication unit 101 is caused to execute a personal information file transmission process to be transmitted to 400.

  In step 26, the CPU 404 stores the personal information file 52 received by the communication unit 401 in the memory 402.

  Next, an operation when the information file is passed to a third party not intended by the user of the user terminal device 1 will be described.

  In step 27, a user of the third party terminal device 500, specifically, a third party not intended by the user of the user terminal device 1, acquires the personal information file 52 stored in the memory 402 of the information center device 400. When the input unit 502 is operated so as to capture, the CPU 505 causes the communication unit 501 to execute processing for capturing the personal information file 52 stored in the memory 402 of the information center apparatus 400. Alternatively, the user of the third party terminal device 500 takes out the personal information file 52 directly from the information center device 400 using an external recording medium such as a floppy and inputs the taken personal information file 52 to the input unit 502.

  In step 28, when the user of the third party terminal device 500 operates the input unit 502 to activate the agent in the personal information file 52, the agent in the personal information file 52 is activated.

  In step 29, when the agent included in the personal information file 52 is activated on the device storing the agent, the agent storing the device (in the example shown in FIG. 2, the third-party terminal device 500). 2) (in the example shown in FIG. 2, the address of the third-party terminal device 500) is obtained, and query information including the obtained decryption destination information and its own agent identification information is generated, Processing for transmitting the generated inquiry information to the decryption monitoring device 300 is performed by a device storing itself (the third-party terminal device 500 in the example shown in FIG. 2), specifically, a computer of the device (for example, CPU).

  When the communication unit 301 receives the inquiry information, the CPU 304 of the decryption monitoring apparatus 300 reads the agent identification information of the agent 51 and the decryption destination information (the address of the apparatus in which the agent 51 is stored) from the received inquiry information. . The CPU 304 reads out the transmission destination information (disclosure destination) and the agent provision destination (address of the user terminal device 100) stored in the RAM 302 in association with the read agent identification information (see FIG. 3).

  In step 30, the CPU 304 determines whether or not the transmission destination information (disclosure destination) read from the RAM 302 matches the decryption destination information read from the inquiry information. Subsequently, the CPU 304 causes the communication unit 301 to execute transmission processing for transmitting the determination result to the address of the user terminal device 100.

  When the communication unit 101 receives the determination result of the CPU 304, the CPU 106 of the user terminal device 100 displays the determination result on the display unit 103.

  The user looks at the determination result displayed on the display unit 103, recognizes whether the personal information provided by the user is likely to be decrypted by a third party not intended by the user, and decrypts the information by the agent 51. The input unit 102 is operated so as to input decryption permission / inhibition information indicating whether to permit or not.

  In step 31, the CPU 106 causes the communication unit 101 to execute a process of transmitting the decryptability information received by the input unit 102 to the decryption monitoring apparatus 300.

  In step 32, when the communication unit 301 receives the decryption permission / inhibition information, the CPU 304 of the decryption monitoring apparatus 300 causes the communication unit 301 to execute a process of transmitting the decryption permission / inhibition information to the device that transmitted the inquiry information.

  In step 33, when the agent included in the personal information file receives the decryption permission / inhibition information, only when the received decryption permission / inhibition information indicates that the decryption is permitted (for example, the received decryption permission / inhibition information). Only when the encrypted user input information is permitted to be decrypted), a decryption process for decrypting the encrypted information included in the information file is performed. CPU 505 is executed.

  According to the present embodiment, the personal information is stored as an information file in the information center apparatus 400 in an encrypted state, so even if personal information leaks to an unintended third party via an external storage medium or the like, Encrypted information can only be decrypted via an agent.

  Further, before decryption, information indicating whether or not the device trying to decrypt the encrypted information is the device that transmitted the encrypted information is notified to the provider of the personal information. Therefore, there is an effect that unauthorized use of the encrypted information can be prevented. In particular, the effect is remarkable in the case of an Internet business such as electronic commerce that transmits and receives personal information over the highly anonymous Internet.

  The information encrypted by the user terminal device 100 is not limited to personal information and can be changed as appropriate.

  In the embodiment described above, the illustrated configuration is merely an example, and the present invention is not limited to the configuration.

It is the block diagram which showed the information protection system of one Example of this invention. It is a sequence diagram for demonstrating operation | movement of the information protection system shown in FIG. It is explanatory drawing which showed an example of the information stored in RAM shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 User terminal device 101 Communication part 102 Input part 103 Display part 104 ROM
105 RAM
106 CPU
200 Network 300 Decryption Monitoring Device 301 Communication Unit 302 RAM
303 ROM
304 CPU
400 Information center 401 Communication unit 402 Memory 403 ROM
404 CPU
500 Third party terminal device 501 Communication unit 502 Input unit 503 ROM
504 RAM
505 CPU

Claims (8)

A user terminal device that encrypts user input information input by a user and transmits the encrypted user input information to a transmission destination device via a communication line, and user input information encrypted by the user terminal device An information protection system including a decryption monitoring device that monitors whether or not decryption is being performed by a device different from the destination device,
The user terminal device transmits transmission destination information indicating the transmission destination device to the decryption monitoring device via a communication line, and includes the encrypted user input information and the encrypted user input information. An information file indicating an agent that manages decryption is transmitted to the destination device via a communication line,
When the agent receives the decryption instruction information indicating that the device having the information file decrypts the encrypted user input information indicated in the information file, the agent receives the decryption destination information indicating the device having the information file Decryption to the effect that the device having the information file executes the process of transmitting the information to the decryption monitoring device, and further permits the device having the information file to decrypt the encrypted user input information. Only when accepting permission information from the decryption monitoring device, causes the device having the information file to execute a process of decrypting the encrypted user input information,
The decryption monitoring device comprises:
A storage unit for storing transmission destination information transmitted from the user terminal device;
Judgment to determine whether the device having the information file is the destination device based on the destination information stored in the storage unit and the decryption destination information transmitted from the device having the information file And
The determination result of the determination unit is notified to the user terminal device, and the decryption permission information is transmitted to the device having the information file only when permission information indicating that decryption is permitted is received from the user terminal device. And an information protection system. The information protection system according to claim 1,
When the communication unit further receives the transmission destination information transmitted from the user terminal device, the communication unit transmits the agent to the user terminal device,
The information protection system, wherein the agent causes the user terminal device to execute an encryption process for encrypting the user input information. In the information protection system according to claim 2,
The agent transmitted from the communication unit to the user terminal device includes agent identification information indicating itself,
The storage unit stores the destination information and the agent identification information in association with each other,
When the device having the information file receives the decryption instruction information, the agent further executes a process of transmitting the decryption destination information and the agent identification information to the decryption monitoring device to the device having the information file. Let
The determination unit includes the destination information stored in the storage unit in association with the agent identification information transmitted from the device having the information file and the decryption destination information transmitted from the device having the information file. An information protection system that determines whether or not a device having the information file is the transmission destination device based on the information file. In the information protection system according to any one of claims 1 to 3,
The information protection system, wherein the user input information is personal information. A user terminal device that encrypts user input information input by a user and transmits the encrypted user input information to a transmission destination device via a communication line, and user input information encrypted by the user terminal device Information protection performed by an information protection system including a decryption monitoring device that monitors whether or not the device is different from the destination device,
A transmission destination information transmission step in which the user terminal device transmits transmission destination information indicating the transmission destination device to the decoding monitoring device via a communication line;
A storage step in which the decryption monitoring device stores the transmission destination information transmitted in the transmission destination information transmission step in a storage unit;
Information file transmission in which the user terminal device transmits an information file indicating the encrypted user input information and an agent that manages the decryption of the encrypted user input information to the transmission destination device via a communication line Steps,
When the device having the information file receives the decryption instruction information indicating that the encrypted user input information indicated in the information file is decrypted, the agent receives the decryption destination information indicating the device having the information file. A decryption destination information transmission step for causing a device having the information file to execute processing to be transmitted to a decryption monitoring device;
The device having the information file is based on the destination information stored in the storage unit and the decryption destination information transmitted from the device having the information file in the decryption destination information transmission step. A determination step of determining whether the device is a transmission destination device;
The decryption monitoring apparatus decrypts the encrypted user input information only when the decryption monitoring apparatus notifies the user terminal apparatus of the determination result of the determination step and receives permission information indicating that decryption is permitted from the user terminal apparatus. A communication step for transmitting to the device having the information file decryption permission information to the effect that
Only when the device having the information file receives the decryption permission information from the decryption monitoring device, the agent executes the process of decrypting the encrypted user input information to the device having the information file And a decrypting step. The information protection method according to claim 5,
When the decryption monitoring device accepts transmission destination information transmitted from the user terminal device, an agent transmission step of transmitting the agent to the user terminal device;
An information protection method, further comprising: an encryption step for causing the user terminal device to execute an encryption process in which the agent encrypts the user input information. The information protection method according to claim 6,
The agent transmission step transmits an agent including agent identification information indicating itself to the user terminal device,
The storing step stores the destination information and the agent identification information in association with each other,
In the decryption destination information transmission step, when the device having the information file receives the decryption instruction information, the agent further transmits the decryption destination information and the agent identification information to the decryption monitoring device. Causing a device having the information file to execute,
The determining step includes the destination information stored in the storage unit in association with the agent identification information transmitted from the device having the information file in the decoding destination information transmitting step and the information in the decoding destination information transmitting step. An information protection method for determining whether or not a device having the information file is the transmission destination device based on decryption destination information transmitted from the device having a file. The information protection method according to any one of claims 5 to 7,
The information protection method, wherein the user input information is personal information.

Images