JP2006209232A - Data leakage prevention apparatus, data leakage prevention method, image processing apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely prevent leakage of data stored in a mounted external storage device. <P>SOLUTION: During normal operation after turning on a power supply, a power supply changing-over switch 34 is switched to an HDD power supply circuit 28 and a connection switch 36 is closed to connect an HDD 18 to an HDD controller 26. Here, when detaching is performed in an operation procedure differing from registered detaching conditions, and also the fact that the HDD 18 is now going to be detached is detected, a switch controller 32 changes over the connection destination of the changing-over switch 34 to a high-voltage power supply circuit 30 to apply a high-voltage to the HDD 18 and break it. Before changing over the changing-over switch 34, the switch controller 32 opens the connection switch 36 to prevent the HDD controller 26 from being broken. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a data leakage prevention device, and more particularly to an improvement in certainty of preventing unauthorized acquisition of data by a third party from an external storage device detachably mounted on an information processing device.

  In recent image forming apparatuses, information processing apparatuses are standardly mounted with higher functions and more functions. For example, when performing a copy process, the image forming apparatus temporarily stores the read image in a hard disk drive (HDD) mounted on the information processing apparatus, and executes printing of a plurality of copies, image editing, or the like according to an input instruction. As described above, it is possible not only to print the read image but also to temporarily hold the read image in the HDD, thereby providing a print function according to various demands.

However, since the read image is temporarily written in the HDD, which is a nonvolatile storage means, for example, if the HDD is removed before erasing the read image data and connected to another information processing apparatus or the like, the read image is written in the HDD. Document data (read image) can be obtained illegally by a third party.
Also, as the usage form of HDD, not only temporary storage as in the above example, but also various documents, electronic certificates, information necessary for predetermined processing such as authentication information necessary for cooperation with external devices are stored. Since data is being written / read between the external device and the HDD via the network, the importance of preventing leakage of the storage contents of the HDD has increased. ing. Therefore, for security reasons, it is necessary to prevent data leakage by some method.

  For example, there is a technique in which a work procedure for permitting removal of an HDD is registered in advance, and data is deleted or formatted when the operation is not performed according to the procedure (for example, Patent Document 1). In addition, a circuit that detects unauthorized removal of the HDD is provided, and data leakage is prevented by writing meaningless data to the HDD, erasing data, encryption, circuit destruction, etc. when the removal operation is determined to be unauthorized. There is a technique (for example, Patent Document 2).

JP 2004-192191 A Japanese Patent Laid-Open No. 11-175406

  However, conventionally, it is possible to delete data stored in the HDD by performing deletion, formatting, encryption, etc., but it takes some time to complete the deletion processing. become. For this reason, there is a possibility that some kind of fraud is performed before the processing is completed, and there is no guarantee that all data in the HDD can be surely prevented from being leaked.

  The present invention has been made to solve the above-described problems, and one of its purposes is a data leakage prevention apparatus and data that can more reliably prevent leakage of data stored in an external storage device. It is to provide a leakage prevention method.

  It is another object of the present invention to provide an image processing apparatus that can more reliably prevent leakage of data stored in an installed external storage device.

  In order to achieve the above object, a data leakage prevention apparatus according to the present invention is a data leakage prevention apparatus that prevents data leakage from an external storage device that is detachably mounted on an information processing apparatus. A power supply switch means for selectively connecting power supply means for supplying power for normal operation of the external storage device or high voltage power supply means for outputting power capable of destroying the external storage device; When a storage device extraction operation is detected and a mismatch between the detected extraction operation and a normal extraction condition of the external storage device registered in advance is detected, the power supply switch means is operated to And switch control means for connecting to the high-voltage power supply means.

  The information processing apparatus further includes a lock mechanism that disables removal of the external storage device when the power is off.

  In addition, the external storage device and a connection switch means for detachably connecting the control means of the external storage device mounted on the information processing device, the switch control means is connected to the external storage device and the high storage device. Before connecting the voltage power supply means, the connection switch means is operated to disconnect the external storage device from the control means.

  Further, the present invention is characterized by comprising condition setting means for setting a normal sampling condition of the external storage device and condition storage means for storing the set normal sampling condition.

  An image processing apparatus according to the present invention includes an information processing apparatus including any one of the data leakage prevention apparatuses according to the above inventions.

  Further, a high voltage power supply provided as a standard is used as the high voltage power supply means.

  A data leakage prevention method according to the present invention is implemented in an information processing apparatus in which an external storage device is detachably mounted, and a detection step for detecting an extraction operation of the external storage device, and a detected operation are registered in advance. Comparing the normal extraction condition of the external storage device with the external storage device when it is detected that the external storage device is about to be extracted when the comparison results in a mismatch. And connecting to high voltage power supply means for outputting power capable of destroying the external storage device.

  According to the present invention, the external storage device can be electrically destroyed by applying a high voltage to the external storage device when it is detected that the external storage device is about to be removed. Data can be instantly and reliably lost. As a result, data leakage can be reliably prevented.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram showing an image forming apparatus which is an embodiment of an image processing apparatus according to the present invention. The image forming apparatus 2 according to the present embodiment is generally called a multi-function machine, an operation panel 4 for performing function selection, parameter setting, and the like as a user interface, and a computer 8 that operates by receiving power from a power supply circuit 6. A multifunctional image processing apparatus is assumed in which a scanner 9 as an image reading apparatus and a printer 11 are mounted and further have a communication function via a LAN (Local Area Network) 13. The computer 8 includes an HDD storage box 10 that stores an HDD that is an external storage device, a control board 12 on which a CPU and the like are mounted, a connector 14 that connects the HDD stored in the HDD storage box 10 to the control board 12, And a lock mechanism 16 that makes it impossible to attach or detach the HDD from the HDD storage box 10 when the power is turned off. Note that components unnecessary for the description of the present invention are omitted from the drawings.

  FIG. 2 is a hardware configuration diagram of the data leakage prevention apparatus according to the present embodiment. On the control board 12 corresponding to the main part of the data leakage prevention apparatus, the CPU 20, the memory 22, the UI controller 24 for performing input / output control of the connected operation panel 4, and the HDD 18 inside the HDD storage box 10 connected by the connector 14 are inserted. An HDD controller 26 that performs output control and a network controller 27 that controls data communication with other devices via the LAN 13 are mounted. These components 20 to 27 can be realized by existing chips, devices, and the like. Further, the present embodiment includes an HDD power supply circuit 28, a high voltage power supply circuit 30, a switch controller 32, a power supply changeover switch 34, and a connection switch 36. The components 20 to 27 are connected by an internal bus 38. The HDD power supply circuit 28 steps down the power supplied from the power supply circuit 6 and supplies it to the HDD 18 in order to operate the HDD 18 normally. On the other hand, the high voltage power supply circuit 30 boosts the power supplied from the power supply circuit to a voltage that can destroy the HDD 16 and supplies it to the HDD 18. As will be described later, the switch controller 32 switches the switches 34 and 36 in response to a switch switching instruction. The power switch 34 selectively connects the HDD power circuit 28 or the high voltage power circuit 30 to the HDD 18. The connection switch 36 detachably connects the HDD 18 and the HDD controller 26.

  FIG. 3 is a functional block configuration diagram of the data leakage prevention apparatus according to the present embodiment. FIG. 1 shows a condition setting unit 40, an extraction monitoring unit 42, a data leakage prevention processing unit 44, a switch switching control unit 46, and an extraction condition storage unit 48. The condition setting unit 40 accepts an operation content or the like for permitting removal of the HDD 18 from the connector 14 as a removal condition and registers it in the removal condition storage unit 48. This extraction condition is input and set by the user from the operation panel 4. The removal monitoring unit 42 constantly monitors the connection state of the HDD 18 to the connector 14. When the removal monitoring unit 42 detects a state of being removed from the connector 14 of the HDD 18, the removal monitoring unit 42 transmits the fact to the data leakage prevention processing unit 44. The data leakage prevention processing unit 44 issues a switching instruction for the switches 34 and 36 to the switch switching control unit 46 in response to an input signal from the removal monitoring unit 42. The switch switching control unit 46 switches the power switch 34 and the connection switch 36 in response to a switching instruction from the data leakage prevention processing unit 44. Of the above-described components, the removal condition storage unit 48 is realized by a non-volatile storage unit, and the other components 40 to 46 are executed by hardware such as the control board 12 and the operation panel 4 and the CPU 20 of the control board 12. This is realized by cooperative operation with the software program to be executed.

  Next, the operation of this embodiment at the time of HDD extraction operation will be described using the flowchart shown in FIG.

  First, it is assumed that the HDD 18 is stored in the HDD storage box 10 and connected to the connector 14. When the image forming apparatus 2 is powered off, the lock mechanism 16 is mechanically locked so that the HDD 18 cannot be removed from the HDD storage box 10 (steps 101 and 102). Actually, the HDD storage box 10 is locked so that the lid is not opened. A known technique can be used for the structure of the lock mechanism 16 itself.

  When the image forming apparatus 2 is powered on (step 101), the lock of the HDD 18 by the lock mechanism 16 is released (step 103). In addition, the data leakage prevention processing unit 44 and the removal monitoring unit 42 are activated by supplying power to the control board 12. Further, as an initial state, the power switch 34 connects the HDD 18 to the HDD power circuit 28, and the connection switch 36 connects the HDD 18 to the HDD controller 26. With such a switch position, the HDD 16 can operate normally.

  The user starts removing the HDD 18 after the power is turned on. The data leakage prevention processing unit 44 monitors the operation content and procedure from the operation panel 4 by the user, and sequentially compares the content and procedure operated by the user with the extraction condition registered in the extraction condition storage unit 48. (Step 104). As a result, when an operation according to a predetermined procedure is performed, the data leakage prevention processing unit 44 permits removal of the HDD 18 (step 105), and generates log information indicating that a user operation has been performed. Recording is performed by writing to a predetermined storage means (step 106). Note that the extraction condition is generally input of a correct password.

  On the other hand, when it is detected that the extraction operation according to the predetermined procedure is not performed, if the extraction monitoring unit 42 does not detect that the HDD 18 is about to be extracted from the connector 14, the process returns to step 104. . It should be noted that the removal monitoring unit 42 in the present embodiment makes a predetermined access to the HDD 18 in a short cycle, and determines that the HDD 18 is being removed if the access is not normally completed. However, the removal monitoring method is not limited to this. For example, the power supply state of a data signal line or the like electrically connected to the HDD 18 may be monitored, or the connector 14 may be a sensor means such as an optical sensor. May be provided to detect a change in the positional relationship between the connector 14 and the HDD 18.

  When the data leakage prevention processing unit 44 receives a signal indicating that the HDD 18 is about to be removed from the removal monitoring unit 42, the data leakage prevention processing unit 44 instructs to switch the connection destination of the power switch 34 from the HDD power supply circuit 28 to the high voltage power supply circuit 30; An instruction to open the connection switch 36 is sent to the switch switching control unit 46. The switch switching control unit 46 operates the switches 34 and 36 in accordance with the instructions. When the high voltage power supply circuit 30 is connected to the HDD 18, since a high voltage is applied to the HDD 18, the internal circuit of the HDD 18 such as an IC chip is destroyed (step 108). In addition, the signal value in the data storage portion also varies. As a result, correct data cannot be read from the HDD 18, so that leakage of data can be reliably prevented even if the HDD 18 is removed and taken away.

  In addition, the HDD controller 26 and the HDD 18 are disconnected by opening the connection switch 36. This is to prevent the high voltage supplied to the HDD 18 from being supplied to the HDD controller 26 via the HDD 18. Therefore, in order to separate and protect the HDD controller 26 from the HDD 18, the switch change control unit 46 needs to open the connection switch 36 before the connection between the high voltage power supply circuit 30 and the HDD 18 by switching the power supply changeover switch 34. is there.

  According to the present embodiment, when it is detected that the HDD 18 is about to be removed, a high voltage can be applied to the HDD 18 to destroy the internal circuit of the HDD 18. Can disappear. As a result, the data stored in the HDD 18 can be erased in a short time and surely by deleting or formatting the data stored in the software, so that leakage of the data stored in the HDD 18 can be reliably prevented. .

  In the present embodiment, the HDD 18 and the control board 12 are connected via the connector 14. In other words, the configuration in which the HDD 18 and the control board 12 are fitted into the connectors 14 without using cables, respectively, prevents a high voltage from being applied to the HDD 18 due to disconnection of the connection cable between the HDD 18 and the control board 12. This is to avoid it. Note that the connector 14 does not necessarily have to be used as long as it meets such a purpose, for example, by storing the cable in a box so that it cannot be disconnected from the outside.

  Further, by making it impossible to remove the HDD 18 even when the power is turned off in accordance with the connection form between the HDD 18 and the control board 12, leakage of data stored in the HDD 18 can be prevented more reliably.

For convenience of explanation, the high voltage power supply circuit 30 is mounted on the control board 12, but the data leakage prevention device is mounted on a device having a high voltage power supply unit such as the image forming apparatus 2 of the present embodiment. If present, the high-voltage power supply circuit included in the device may be used effectively. In this case, the control board 12 may be provided with power lines and terminals for connection to the high voltage power supply circuit.
The present embodiment has been described with the configuration in which the data leakage prevention device is mounted on the image forming apparatus typified by a multi-function peripheral equipped with the scanner 9 for reading an image and the printer 11 for outputting an image as described above. However, the data leakage prevention apparatus according to the present invention is not limited to a multifunction peripheral, and includes an HDD such as an image forming apparatus such as a printer and a scanner (image reading apparatus) that reads an image and stores the image in the HDD. The present invention can be applied to any apparatus as long as it is an image processing apparatus that stores data or data for management and control such as user authentication.

1 is a block configuration diagram showing an embodiment of an image forming apparatus according to the present invention. It is a hardware block diagram of the data leakage prevention apparatus in this Embodiment. It is a functional block block diagram of the data leakage prevention apparatus in this Embodiment. 4 is a flowchart showing an operation at the time of HDD extraction operation in the present embodiment.

Explanation of symbols

  2 Image forming apparatus, 4 operation panel, 6 power supply circuit, 8 computer, 9 scanner, 10 HDD storage box, 11 printer, 12 control board, 13 LAN, 14 connector, 16 lock mechanism, 18 hard disk drive (HDD), 20 CPU , 22 Memory, 24 UI controller, 26 HDD controller, 27 Network controller, 28 Power supply circuit, 30 High voltage power supply circuit, 32 Switch controller, 34 Power supply switch, 36 Connection switch, 38 Internal bus, 40 Condition setting unit, 42 Removal Monitoring unit, 44 data leakage prevention processing unit, 46 switch switching control unit, 48 removal condition storage unit.

Claims (7)

In a data leakage prevention device for preventing data leakage from an external storage device detachably mounted on an information processing device,
A power supply switch means for selectively connecting to the external storage device power supply means for supplying electric power for normal operation of the external storage device or high voltage power supply means for outputting electric power capable of destroying the external storage device; ,
Detecting the extraction operation of the external storage device, and operating the power switch switch means when the discrepancy between the detected extraction operation and a normal extraction condition of the external storage device registered in advance is detected. Switch control means for connecting a device and the high voltage power supply means;
A data leakage prevention device characterized by comprising: The data leakage prevention apparatus according to claim 1,
A data leakage prevention apparatus, comprising: a lock mechanism that disables removal of the external storage device when the information processing apparatus is powered off. The data leakage prevention apparatus according to claim 1,
Connection switch means for detachably connecting the external storage device and the control means of the external storage device mounted on the information processing device;
The switch control means operates the connection switch means to disconnect the external storage device and the control means before connecting the external storage device and the high voltage power supply means. . The data leakage prevention apparatus according to claim 1,
Condition setting means for setting normal sampling conditions of the external storage device;
Condition storage means for storing the set normal sampling conditions;
A data leakage prevention device characterized by comprising:   An image processing apparatus comprising: the information processing apparatus on which the data leakage prevention apparatus according to claim 1 is mounted. The image processing apparatus according to claim 5.
A high-voltage power supply provided as a standard is used as the high-voltage power supply means. Implemented in an information processing device that detachably mounts an external storage device,
A detection step of detecting an extraction operation of the external storage device;
Comparing the detected work with normal extraction conditions of the external storage device registered in advance;
High voltage power supply means for outputting power that can destroy the external storage device to the external storage device when it is detected that the external storage device is about to be extracted in the case of a mismatch as a result of comparison Connecting to
A data leakage prevention method comprising:

Images