JP2006268170A - Information processor and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To shorten a time required for the decoding of a data file necessary for the operation of a user by efficiently decoding the data file, and to shorten a time required for the decoding of the data file when the operation of the user ends by efficiently encrypting the data file. <P>SOLUTION: When receiving the execution request for prescribed processing, a computer is made to execute the reference of the file information of a data file corresponding to the use of the data file, the acquisition of the file information of the data files whose number is equivalent to the first rank number from the higher rank by prescribed ranking from among the file information of the data file used before the execution request, the reference of the encrypted file information showing the encryption of the data file, the judgement of whether or not the data file corresponding to the acquired file information has been encrypted and the decoding of the data file whose encryption has been judged. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an information processing apparatus.

  There is a technique for encrypting / decrypting a data file stored in a personal computer or the like as a countermeasure against loss or theft of the personal computer or unauthorized access to the computer from an external network.

  Some data files and data files associated with the data files are collectively decoded (see, for example, Patent Document 1). In addition, some data files that have been decrypted at the time of shutdown or logoff are re-encrypted and stored in order to prevent the user from leaving the data file decrypted and being leaked by the user. Yes (see, for example, Patent Document 2).

Some data files are decrypted when opened and encrypted and stored when closed (see, for example, Patent Document 3).
JP 2004-297229 A JP-A-9-204360 JP 2000-99385 A

  In the above-described technique, a user always encrypts an important data file from around the day, and decrypts and uses the data file when necessary. The data file is encrypted again when it is no longer needed. However, heretofore, this encryption / decryption processing has been performed by the user in each data file unit (or directory unit).

  When encrypting / decrypting a data file, the user needs to input a password each time. In general, there are many cases where the password is input once at the time of decryption and twice at the time of encryption to prevent erroneous input of a password. The user feels stressed by performing this operation every time a data file is required for work. In addition, since the encryption / decryption process naturally takes time, a waiting time is generated for the user. Since the personal computer can perform parallel processing using threads, the encryption processing time for a data file that has already been completed is not so important to the user. However, the decryption processing time for the data file necessary for the work to be started from this time stops the user's work, which causes the user to feel great stress.

  In order to overcome these problems, in recent encryption programs, when logging in to a personal computer, all data files in a directory registered in advance by the user are decrypted in a lump, and the personal computer is logged off or powered off. Some files encrypt all data files in the directory at the time of blocking.

However, when such a method is adopted, every time a directory is added, the user needs to register the added directory in the encryption program. Also, when handling a data file, it must always be conscious whether the data program is included in the registered directory. Furthermore, since all the data files in the registered directory are encrypted / decrypted regardless of the necessity of the data file, the number of data files to be encrypted at logoff increases. As a result, the waiting time increases in the encryption processing, which has had few problems until now, and stress is given to the user. For example, there is a problem that logoff does not end easily.

  It is an object of the present invention to shorten the time required for decrypting a data file necessary for a user's work by efficiently decrypting the data file.

  Another object of the present invention is to reduce the time required for data file encryption at the end of the user's work by efficiently encrypting the data file.

The present invention employs the following means in order to interpret the above problems.
(1) That is, the present invention refers to a use file management information storage unit that stores file information of a data file according to the use of the data file when the computer receives a request to execute a predetermined process. A utilization file information acquisition step of acquiring file information of data files corresponding to a first rank number from a higher rank according to a predetermined ranking among the file information of the data file used before the execution request; The data file corresponding to the file information acquired in the used file information acquisition step is encrypted by referring to the encrypted file management information storage means storing the encrypted file information indicating that the data file is encrypted. The decryption target determination step for determining whether or not the data is encrypted, and the decryption target determination step A decoding step for decoding the determined data file that is a program for causing the execution. With this configuration, when a request to execute a predetermined process is received, only the data file that would be necessary for the user's work is decrypted, and it is not necessary to decrypt the other data files. It is possible to reduce the time required for the process.

  (2) Further, according to the present invention, when the program receives an execution request for the predetermined process, the data file corresponding to the file information acquired in the used file information acquisition step is correlated with the data file. A correlation file information acquisition step for acquiring file information of a predetermined number of data files from highly relevant ones with reference to the work file correlation management information storage means in which the indicated value is stored; The determination step may further include determining whether or not the data file corresponding to the file information acquired in the correlation file information acquisition step is encrypted with reference to the encrypted file management information storage unit. Good. With this configuration, the data file that will be necessary for the user's work and the data file related to the data file can be decoded in advance within the range set by the user in advance, so that the user can perform the current operation. It is possible to smoothly open data files related to the work being performed.

(3) Further, according to the present invention, when the program receives the execution request for the predetermined process, the use file management information storage unit is referred to, and the first to the first in the predetermined ranking A second usage file information acquisition step of acquiring file information of data files corresponding to a second rank number obtained by adding a buffer number indicating a difference from the rank number to the first rank number; With reference to the work file correlation management information storage means for the number of data files corresponding to the second order number acquired in the second usage file information acquisition step, the data files corresponding to the predetermined number from the highly relevant ones are referred to. A second correlation file information acquisition step for acquiring file information of the data file, and decrypted file information indicating that the data file is decrypted are stored. Referring to the decrypted file management information storage means, excluding the file information acquired in the second used file information acquisition step and the data file corresponding to the file information acquired in the second correlation file information acquisition step An encryption target determination step for determining whether or not a data file is decrypted, and an encryption step for encrypting the data file determined to be decrypted in the encryption target determination step may be further provided. Good. With this configuration, a data file that would not be necessary for the user's work can be encrypted in advance within a range preset by the user.

  (4) Further, according to the present invention, when the program executes the predetermined process, the combination of the data file decrypted in the decryption step and the data file subject to the execution request for the predetermined process Further, a correlation management step of adding one unit of a value indicating the relevance between data files constituting the combination and storing the value in the work file correlation management information storage means may be further provided. With this configuration, it is possible to add one unit of a value indicating the relationship between the data file used by the user and the related data file.

  (5) Further, the present invention provides a utilization file management information storage means for storing file information of the data file according to utilization of the data file, and the utilization file management information when a request for executing a predetermined process is received. Referring to the storage means, the file information of the number of data files corresponding to the number of first ranks is obtained from the highest rank among the file information of the data files used before the execution request by a predetermined ranking. Referring to the use file information acquisition means, encrypted file management information storage means for storing encrypted file information indicating that the data file is encrypted, and the use file information referring to the encrypted file management information storage means Decryption target determination means for determining whether or not the data file corresponding to the file information acquired by the information acquisition means is encrypted When a decoding means for decoding the determined data file that is encrypted with the decoding target determining unit may be an information processing apparatus including a. With this configuration, when the information processing apparatus receives an execution request for a predetermined process, only the data file that will be necessary for the user's work is decrypted, and it is not necessary to decrypt the other data files. It is possible to shorten the time required for decoding the data file.

  Further, the present invention may be a method in which a computer, other devices, machines, etc. execute any one of the processes described above. Further, the present invention may be a program in which a computer or other device, machine, or the like realizes any one of the functions described above is recorded on a computer-readable recording medium.

  According to the present invention, it is possible to efficiently decrypt a data file by decrypting a data file necessary for the user's work within a range set by the user. Therefore, it is possible to reduce the time required for decrypting the data file necessary for the work currently performed by the user. Further, according to the present invention, it is possible to maintain a high security level without imposing a burden on the user by previously decrypting the data file related to the user's work within the range set by the user. Furthermore, the data file can be efficiently encrypted by precedingly encrypting the data file that will no longer be related to the user's work within the range set by the user. Therefore, it is possible to minimize the encryption waiting time by reducing the time required to encrypt the data file at the end of the user's work.

  An information processing apparatus according to the best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described below with reference to the drawings. The configuration of the following embodiment is an exemplification, and the present invention is not limited to the configuration of the embodiment.

<Functional overview>
FIG. 1 is a block diagram showing a system configuration of an information processing apparatus in which the present invention is adopted.
This information processing apparatus can be configured by, for example, a personal computer, a server, a portable information terminal, a mobile phone, or the like.

  This information processing apparatus includes a CPU (not shown), a memory, a hard disk, an input / output interface, a communication interface, and the like as hardware. Since such a configuration is well known as a general computer, its description is omitted.

  As shown in FIG. 1, this information processing apparatus has its functions realized by an operating system 101 executed on a CPU (not shown) and a cryptographic application 103 linked to the operating system 101. In addition, the information processing apparatus has various management information on the storage device 102 configured as a memory or a hard disk. The cryptographic application 103 accesses various management information on the storage device 102 and realizes the functions of the information processing apparatus.

  The operating system 101 has an event acquisition function, a screen display function, and a use file management function. The event acquisition function acquires an event triggered by, for example, the user opening a data file, and acquires a start condition of a preceding encryption / decryption instruction process described later. The screen display function is a function for displaying, for example, a list of file names of data files recently used by the user on the screen. The use file management function is a function for storing and managing data files recently used by the user in the latest order, for example. However, the data file used by the user may be stored and managed in order of frequency of use.

  The storage device 102 is composed of, for example, an HDD (hard disk device, memory) or the like, and stores various management information. As shown in FIG. 1, the information processing apparatus has encrypted file management information 201, level management information 202, decrypted file management information 203, work file correlation management information 204, work list management information 205, and used file management information as management information. 206.

  The information processing apparatus has a data file decryption function and a data file encryption function based on the management information, and performs a collective decryption instruction process, a preceding encryption / decryption instruction process, and a collective encryption instruction process.

  FIG. 2 is a diagram illustrating a data structure example of each management information. As shown in FIG. 2, the encrypted file management information 201 stores and manages an actual file path of a data file and an encrypted file path corresponding to the data file when the data file is encrypted. The file path is a character string for indicating the location of the data file and corresponds to the file information in the present invention.

  The encrypted file path is a character string for indicating the location of the encrypted data file. The actual file path is a character string for indicating the location of the data file before encryption of the encrypted data file. For example, the actual file path is a character string such as C: \ WORK \ work status.xls. On the other hand, for this actual file path, for example, the encrypted file path is a character string such as C: \ WORK \ work status.sba.

  When the decrypted data file is encrypted, one record having an actual file path and an encrypted file path is added to the encrypted file management information 201.

The level management information 202 includes elements of a reuse prediction level, a reuse prediction buffer level, and a simultaneous use prediction level. The reuse prediction level is determined when the data files already used by the user when the information processing apparatus receives an execution request for the predetermined process are ranked according to a predetermined standard and counted from the highest ranking. This is the value of the rank number (hereinafter referred to as the first rank number). The user can set a desired value as the reuse prediction level. Here, the ranking based on a predetermined standard is preferably, for example, the ranking in the latest order of the update date of the data file used by the user. However, other criteria, for example, users may be ranked in order of frequency of use using data files. The ranking of the predetermined reference corresponds to the predetermined ranking in the present invention.

  The reuse prediction buffer level is a value added to the value of the first rank number in order to prevent data files near the reuse prediction level value from frequently repeating encryption and decryption. Corresponds to the number of buffers. The user can set a desired value as the reuse prediction buffer level.

  The simultaneous use prediction level is the number of ranks when the data files that are related to the data files used by the users are ranked in descending order of the numerical values, indicating the relevance of the data files. Corresponding value. The user can set a desired value as the simultaneous use prediction level.

  The decrypted file management information 203 stores and manages the decrypted file path. The decrypted file path is a character string indicating the location of the decrypted data file. When the encrypted data file is decrypted, one record is added as decrypted file management information 203.

  The work file correlation management information 204 stores and manages records having two path name pairs (path 1, path 2) and related values. Path 1 and path 2 indicate combinations of two data files. Paths 1 and 2 are the decrypted file path of the decrypted data file or the file path of the data file that is the target of the operation start by the user (hereinafter also referred to as the target file path). The related value indicates the relationship between the decrypted data file and the data file that is the target of the operation start by the user, and corresponds to the value indicating the relationship between the data in the present invention. For example, path 1 is a character string such as C: \ WORK \ work status.xls, path 2 is a character string such as D: \ MyDocument \ sales report.doc, and the related value is a numerical value such as 20.

  The work list management information 205 stores and manages work paths. The work path is a character string indicating the location of a data file that is a work area when performing encryption processing in the preceding encryption instruction processing described later. For example, the work path is a character string such as C: \ WORK \ work status.xls.

  Information (used file management information) 206 obtained from the used file management function stores and manages the used file path. The use file path is a character string indicating the location of the data file used by the user before the information processing apparatus receives a request to execute a predetermined process. Use file path is a character string such as C: \ WORK \ Working Status.xls.

<Processing flow>
FIG. 3 is a flowchart showing an outline of processing of the information processing apparatus. This process can be realized as a computer program executed by a CPU (not shown) included in the information processing apparatus. This process is activated when the user logs into the information processing apparatus. In this process, the information processing apparatus first executes a batch decryption instruction process (S301). Here, when a user logs in, a data file that the user will use and a data file related to the data file are collectively decoded.

Next, the information processing apparatus executes preceding encryption / decryption instruction processing (S302). The preceding encryption / decryption instruction process is repeatedly executed until the user requests an end process. When the execution request for the end process is received, the information processing apparatus executes a batch encryption process (S303).
In this process, the information processing apparatus collectively encrypts the decrypted data files. The termination process execution request is, for example, a logout request. However, the batch encryption may be executed when there is a request for executing a system stop process for turning off the power or a request for executing a suspend process for temporarily stopping the information processing apparatus while the power is supplied. In that case, the batch decryption instruction process may be executed when the information processing apparatus is turned on and the activation of the system is completed. Also, the batch decoding instruction process may be executed when resuming from the suspended state.

  FIG. 4 is a flowchart showing details of the batch decryption instruction process (S301 in FIG. 3). In this process, first, the information processing apparatus refers to the level management information 202 and acquires a reuse prediction level value from the level management information 202 (S401).

  Next, the information processing apparatus refers to the use file management information 206 and acquires a record group of use file paths of data files corresponding to the number of first ranks (S402). Further, the information processing apparatus reads the first record from the record group of the used file path acquired in S402 (S403).

  Then, the information processing apparatus determines whether or not all records of the used file path acquired in S402 have been processed (S404). If all the records of the used file path acquired in S402 have been processed, the information processing apparatus ends the batch decryption instruction process. If all the records of the used file path acquired in S402 have not been processed, the information processing apparatus acquires the used file path from the read record (S405).

  Then, the information processing apparatus refers to the encrypted file management information 201 and acquires the encrypted file path from the encrypted file management information 201 (S406). That is, the information processing apparatus refers to the encrypted file management information 201 and encrypts a file path that matches the character string of the used file path (this is referred to as an actual file path with respect to the encrypted file path). Get the file path.

  Next, the information processing apparatus decrypts the encrypted data file corresponding to the encrypted file path acquired in S406 (S407).

  Further, the information processing apparatus reads the next record from the record group of the used file path acquired in S402 (S408). Thereafter, the information processing apparatus returns the control to S404. In this way, the information processing apparatus combines data files specified by the number of used file paths corresponding to the number of first ranks.

  FIG. 5 is a flowchart showing details of the preceding encryption / decryption instruction process (S302 in FIG. 3). The information processing apparatus monitors the execution request of the user, and executes the process shown in FIG. 5 when there is an execution request for a predetermined file operation start process. Here, the execution request for the predetermined file operation start process is, for example, opening a specific data file (data file operation start process), writing to the opened data file, reading from the opened data file, This refers to closing a data file. In this process, the information processing apparatus executes a preceding decoding instruction process (S501). That is, when an information processing apparatus receives an execution request for an operation start process for a data file, the data file that is likely to be used by the user together with the data file and a data file related to the data file are preceded. And decrypt.

Next, the information processing apparatus executes a preceding encryption instruction process (S502). Here, when the information processing apparatus receives a request to execute a data file operation start process, the data file that is unlikely to be used by the user and the data file related to the data file are encrypted in advance.

  Next, the information processing apparatus executes a work related information collection process (S503). In this process, the information processing apparatus adds one unit of a value indicating the relationship between the data file that has been subjected to the data file operation start process and the related data file.

  After performing the processing from S501 to S503, the preceding encryption / decryption instruction processing ends, and the information processing apparatus monitors the user operation again.

  FIG. 6 is a flowchart showing details of the preceding decoding instruction process (501 in FIG. 5). In this process, first, the information processing apparatus refers to the level management information 202 and acquires a reuse prediction level value from the level management information 202 (S601).

  Next, the information processing apparatus refers to the use file management information 206 and acquires a record group of use file paths of data files corresponding to the number of first ranks (S602).

  Further, the information processing apparatus refers to the encrypted file management information 201, acquires the encrypted file path from the record in which the actual file path that matches the character string of the used file path is stored, and is designated by the encrypted file path. The encrypted data file is decrypted (S603).

  Then, the information processing apparatus reads the first record from the record group of the used file path acquired in S602 (S604). Next, the information processing apparatus determines whether or not the preceding decoding instruction process has been performed for all the records in the used file path acquired in S602 (S605).

  If the processing from S605 to S610 has been performed for all the records in the used file path acquired in S602, the information processing apparatus ends the preceding decoding instruction processing. On the other hand, if there remains a record that has not been subjected to these processes, the information processing apparatus refers to the work file correlation management information 204. The information processing apparatus stores a file path that matches the character string of the used file path stored in the record group acquired in S602 in either the path 1 or the path 2 among the records stored in the work file correlation management information 204. Selected records. Then, the information processing apparatus acquires a record group of the number of values of the simultaneous use prediction level counted from the records with the large related value among the selected records (S606).

  Next, the information processing apparatus selects the file path that does not match the character string of the used file path acquired in S602 out of either the path 1 or the path 2 stored in the record group acquired in S606. Obtain (S607).

  Next, the information processing apparatus refers to the encrypted file management information 201 and acquires the encrypted file path from the encrypted file management information 201 (S608). That is, the information processing apparatus refers to the encrypted file management information 201, and acquires the encrypted file path from the record in which the actual file path that matches the character string of the file path acquired in S607 is stored.

  Next, the information processing apparatus decrypts the encrypted data file specified by the encrypted file path (S609). Note that, as will be described with reference to FIG. 11, in this decoding process, it is determined whether or not the data file has already been decoded. If the data file has been decoded, the process ends.

Furthermore, the information processing apparatus reads the next record from the record group of the used file path acquired in S602 (S608). Thereafter, the information processing apparatus returns the control to S605. In this way, the information processing apparatus pre-combines the data file specified by the number of used file paths corresponding to the number of first ranks and the data file related to the data file.

  FIG. 7 is a flowchart showing details of the preceding encryption instruction process (S502 in FIG. 5). In this process, the information processing apparatus acquires a reuse prediction level value from the level management information 202 (S701).

  Next, the information processing apparatus acquires a reuse prediction buffer level value (hereinafter also referred to as a buffer number) from the level management information 202 (S702).

  Next, the information processing apparatus refers to the use file management information 206, and the number corresponding to the rank number obtained by adding the buffer number to the first rank number from the use file management information 206 (hereinafter referred to as the second rank number). The record group of the used file path of the data file is acquired (S703).

  Next, the information processing apparatus initializes the work list management information 205 (S704). Here, the information processing apparatus deletes the work path record existing in the work list management information 205. Next, the information processing apparatus reads the first record from the record group acquired in S703 (S705). This record is called the record currently being processed.

  Next, the information processing apparatus determines whether all the records in the record group acquired in S703 have been processed (S706). If all records have been processed, the information processing apparatus performs the process of S709. On the other hand, when a record that has not been processed remains, the information processing apparatus performs the process of S707.

  Next, the information processing apparatus refers to the work file correlation management information 204 and uses the file path character string of the record currently being processed in either the path 1 or the path 2 of the record stored in the work file correlation management information 204. It is determined whether or not. When the used file path of the record currently being processed matches the path 1 or path 2, the path and related value of the related file are extracted from the record of the work file correlation management information 204 in which the path 1 and path 2 are stored. Here, the path of the related file refers to a file path that is paired with the use file path and stored in the record of the work file correlation management information 204 (pass 1 and path 2).

  Then, the information processing apparatus stores the path and the related value of the related file in the work list. However, when the number of paths of related files in the work list exceeds the simultaneous use prediction level, only the number of simultaneous use prediction levels is stored in the work list in descending order of the related value (S707).

  Next, the information processing apparatus reads the next record from the record group acquired in S703 (S708).

  If it is determined in step S706 that all records have been processed, the information processing apparatus refers to the decrypted file management information 203 and acquires a record group from the decrypted file management information 203 (S709). Here, the record group acquired from the decrypted file management information 203 is a file that does not match the character string of the file path of all records acquired in S703 and does not match the character string of the work path stored in the work list management information 205. A group of records with paths.

  Next, the information processing apparatus reads the first record from the record group acquired in S709 (S710).

  Next, the information processing apparatus determines whether or not the preceding encryption instruction process has been performed for all the records acquired in S709 (S711). When the preceding encryption instruction process is performed for all the records acquired in S709, the information processing apparatus ends the preceding encryption instruction process. On the other hand, if there is a record that has not been subjected to the preceding encryption instruction process for all the records acquired in S709, the information processing apparatus encrypts the data file specified by the decryption file path of the record (S712). . As will be described with reference to FIG. 10, when the data file is encrypted by this processing, the information processing apparatus ends the processing as it is.

  Further, the information processing apparatus reads the next record from the record group acquired in S709 (S713). Thereafter, the information processing apparatus returns the control to S711.

  In this way, the information processing apparatus precedes the data file specified by the number of used file paths corresponding to the number of second ranks and the decoded data file other than the data file specified by the work path. Encrypt.

  FIG. 8 is a flowchart showing details of the work-related information collection process (S503 in FIG. 5). In this process, the related value is added to the set of the file (pass 1 and path 2) that is the target of the user's operation start and the decrypted file at the present time. That is, in this process, the information processing apparatus refers to the decrypted file management information 203 and acquires a record group of the decrypted file path from the decrypted file management information 203 (S801).

  Next, the information processing apparatus reads the first record from the record group acquired in S801 (S802). Then, the information processing apparatus determines whether all the records acquired in S801 have been processed (S803).

  When all the records acquired in S801 have been processed, the information processing apparatus ends the work related information collection process (S503 in FIG. 5). On the other hand, when there is a record that has not been subjected to the work-related information collection process (S503 in FIG. 5), the information processing apparatus determines the size relationship between the decrypted file path of the record group acquired in S801 and the path code of the target file. Is determined (S804).

  Next, when it is determined in S804 that the code of the decrypted file path is larger than the code of the path of the target file, the information processing apparatus updates the work file correlation management information 204 (S805). That is, the information processing apparatus determines the value of the relation value of the record in which the path 1 of the work file correlation management information 204 matches the decrypted file path, and the path 2 of the work file correlation management information 204 matches the path of the target file. Is increased by one unit.

  On the other hand, when the path 1 of the work file correlation management information 204 matches the decrypted file path, and there is no record in which the path 2 of the work file correlation management information 204 matches the path of the target file (path 1 or path 2). If none of them match, the information processing apparatus adds one record to the work file correlation management information 204. Here, in the added record, the path 1 element of the work file correlation management information 204 is the decrypted file path, the path 2 element is the target file path, and the related value element is 1.

Next, in the determination of the magnitude relationship in S804, the information processing apparatus performs update processing of the work file correlation management information 204 when the code of the decrypted file path is not determined to be larger than the code of the path of the target file. (S806). That is, the information processing apparatus determines the value of the related value of the record in which the path 1 of the work file correlation management information 204 matches the path of the target file and the path 2 of the work file correlation management information 204 matches the decrypted file path. Is increased by one unit.

  On the other hand, when the path 1 of the work file correlation management information 204 matches the path of the target file, and there is no record in which the path 2 of the work file correlation management information 204 matches the decrypted file path (path 1 or path 2). The information processing apparatus adds one record to the work file correlation management information 204. Here, in the added record, the path 1 element of the work file correlation management information 204 is the target file path, the path 2 element is the decrypted file path, and the related value element is 1.

  The processing from S804 to S806 described above is to prevent the order of pass 1 and pass 2 from being switched and being registered in the work file correlation management information 204 twice. With this process, the information processing apparatus accurately corrects the unique combination of the target file and the related file that was decrypted when the predetermined file operation start process was executed on the target file. A related value can be calculated and updated. Here, the target file refers to the data file that is the target of the operation start by the user, and the related file is paired with the use file path and is recorded in the record of the work file correlation management information 204 (path 1, path 2) refers to the data file specified by the stored file path.

  Next, the information processing apparatus reads the next record from the record group of the decrypted file path (S807). Thereafter, the information processing apparatus returns the control to S803. In this way, the information processing apparatus updates the work file correlation management information 204.

  FIG. 9 is a flowchart showing details of the batch encryption instruction process (S303 in FIG. 3). In this process, the information processing apparatus that has received the execution request for the end process refers to the decrypted file management information 203 and acquires all records of the decrypted file path from the decrypted file management information 203 (S901).

  Next, the information processing apparatus reads the first record from all the records acquired in S901 (S902).

  Then, the information processing apparatus determines whether all the records acquired in S901 have been encrypted (S903). If all records have been processed, the information processing apparatus performs the process of S906. On the other hand, when the record which has not been processed remains, the information processing apparatus performs the process of S904.

  Further, the information processing apparatus encrypts the data file corresponding to the decryption file path of the record read in S902 (S904). Next, the information processing apparatus reads the next record from all the records acquired in S901 (S905). Thereafter, the information processing apparatus returns the control to S903.

  Next, the information processing apparatus refers to the decrypted file management information 203 and acquires all records of the decrypted file path from the decrypted file management information 203 (S906).

  Next, the information processing apparatus determines whether there is a record of the decrypted file path acquired in S906 (S907). This process is a process when a record of the decrypted file path remains in the decrypted file management information 203, such as when the file name of the data file is changed. When the record does not exist, the information processing apparatus continues the end process. On the other hand, when a record exists, the information processing apparatus performs the process of S908.

Next, the information processing apparatus outputs all records acquired in S906 to the screen (S908).
. Next, the information processing apparatus determines whether or not the user has instructed to continue the termination process (S909). When the user instructs to continue the end process, the information processing apparatus continues the end process. On the other hand, when the user does not instruct the continuation of the end process, the information processing apparatus stops the end process.

  In this way, the information processing apparatus encrypts the data file specified by the decryption file path acquired from the decryption file management information 203.

  FIG. 10 is a flowchart showing details of the encryption process. In this processing, the information processing apparatus acquires the decryption file path of the data file to be encrypted from the decryption file management information 203, and determines whether or not the decryption data file actually exists in the decryption file path. Determination is made (S1001). If the decrypted data file does not actually exist in the obtained decrypted file path, the information processing apparatus ends the encryption process. On the other hand, when the decrypted data file actually exists in the obtained decrypted file path, the information processing apparatus performs the process of S1002.

  Next, the information processing apparatus encrypts the decrypted data file determined to exist in S1001 (S1002).

  The information processing apparatus adds a record to the encrypted file management information 201 (S1003). That is, the information processing apparatus sets the element of the actual file path of the encrypted file management information 201 as the decryption file path of the data file to be encrypted, and sets the element of the encrypted file path of the encrypted file management information 201 as S1002. Add a record to be the encrypted file path of the data file encrypted in step 1.

  Further, the information processing apparatus deletes the record from the decrypted file management information 203 (1004). That is, the information processing apparatus deletes from the decrypted file management information 203 the record of the decrypted file path that matches the decrypted file path character string of the decrypted data file encrypted in S1002. In this way, the information processing apparatus encrypts the data file to be encrypted.

  FIG. 11 is a flowchart showing details of the decoding process. In this process, the information processing apparatus acquires the encrypted file path of the data file to be decrypted from the encrypted file management information 201, and determines whether or not the encrypted data file actually exists in the encrypted file path. Determination is made (S1101). If the encrypted data file actually exists in the acquired encrypted file path, the information processing apparatus performs the process of S1102. On the other hand, if the encrypted data file does not actually exist in the acquired encrypted file path, the information processing apparatus ends the decryption process.

  Next, the information processing apparatus decrypts the encrypted data file determined to exist in S1101 (S1102).

  Then, the information processing apparatus determines whether the decoding performed in S1102 is successful (S1103). If the decoding performed in S1102 is successful, the information processing apparatus performs the process in S1104. On the other hand, when the decoding performed in S1102 is not successful, the information processing apparatus ends the decoding process.

  Next, the information processing apparatus adds a record to the decrypted file management information 203 (S1104). That is, the information processing apparatus adds a record that uses the decrypted file path element of the decrypted file management information 203 as the decrypted file path of the data file decrypted in S1102.

  Next, the information processing apparatus deletes the record from the encrypted file management information 201 (S1105). That is, the information processing apparatus deletes the record of the actual file path that matches the character string of the file path of the data file decrypted in S1102 from the encrypted file management information 201. In this way, the information processing apparatus combines the data files to be decrypted.

  As described above, according to the information processing apparatus, when the information processing apparatus receives a request for execution of a predetermined process, the data file specified by the number of used file paths corresponding to the first rank number Therefore, it is possible to reduce the time required for decrypting the data file necessary for the work currently performed by the user.

  Also, data corresponding to the number of predicted simultaneous use levels counted from the data file specified by the number of used file paths corresponding to the first rank number and the related file paired with the data file, having the highest related value. Since the file is decrypted, a high security level can be maintained without imposing a burden on the user.

  In addition, the information processing apparatus pre-encrypts data files that are decrypted other than data files specified by the number of used file paths and work paths corresponding to the number of second ranks. Therefore, the encryption waiting time can be minimized by reducing the time required for encrypting the data file at the end of the user's work.

  Here, the second rank number is a value obtained by adding the buffer number to the first rank number. Therefore, when encrypting the decrypted data file, only the data file for the number of simultaneous use expected levels counted from the data file for the buffer number and the related file paired with the data file, with the largest related value Extra decryption is maintained and the remaining data files are encrypted. Therefore, it is possible to reduce the repeated execution of encryption and decryption on the data file to be decrypted by the first rank number.

  In addition, since the information processing apparatus increases the value indicating the relevance between the data file that is the target of the operation start by the user and the decrypted data file by one unit, the work file correlation management information 204 is updated. Is done. For this reason, decoding can be performed based on an appropriate related value in the preceding decoding instruction processing.

<Computer-readable recording medium>
A program that causes a computer to realize any of the above functions can be recorded on a computer-readable recording medium. The function can be provided by causing the computer to read and execute the program of the recording medium.

  Here, the computer-readable recording medium refers to a recording medium in which information such as data and programs is accumulated by electrical, magnetic, optical, mechanical, or chemical action and can be read from a computer. Examples of such a recording medium that can be removed from the computer include a flexible disk, a magneto-optical disk, a CD-ROM, a CD-R / W, a DVD, a DAT, an 8 mm tape, and a memory card.

  In addition, there are a hard disk, a ROM (Read Only Memory) and the like as a recording medium fixed to the computer.

It is the block diagram which showed the system configuration | structure of the information processing apparatus as which this invention is employ | adopted. It is the figure which showed the data structure example of each management information. It is a flowchart which shows the process outline | summary of this information processing apparatus. It is a flowchart which shows the detail of a batch decoding instruction | indication process. It is a flowchart which shows the detail of a prior | preceding encryption / decryption instruction | indication process. It is a flowchart which shows the detail of a preceding decoding instruction | indication process. It is a flowchart which shows the detail of a preceding encryption instruction | indication process. It is a flowchart which shows the detail of a work related information collection process. It is a flowchart which shows the detail of a batch encryption instruction | indication process. It is a flowchart which shows the detail of an encryption process. It is a flowchart which shows the detail of a decoding process.

Explanation of symbols

101 Operating System 102 Storage Device 103 Cryptographic Application 201 Encrypted File Management Information 202 Level Management Information 203 Decrypted File Management Information 204 Work File Correlation Management Information 205 Worklist Management Information 206 Used File Management Information

Claims (5)

On the computer,
When the execution request for the predetermined process is received, the file information of the data file used before the execution request is referred to by referring to the use file management information storage means storing the file information of the data file according to the use of the data file. Among them, a use file information acquisition step for acquiring file information of data files corresponding to the number of first ranks from a higher rank according to a predetermined ranking,
The data file corresponding to the file information acquired in the used file information acquisition step is encrypted with reference to the encrypted file management information storage means storing the encrypted file information indicating that the data file is encrypted A decoding target determination step for determining whether or not
A decryption step of decrypting the data file determined to be encrypted in the decryption target determination step;
A program characterized by having executed. A work file correlation management information storage in which a value indicating the relevance between data files is stored for the data file corresponding to the file information acquired in the use file information acquisition step when the execution request for the predetermined process is received. The method further includes a correlation file information acquisition step of acquiring file information of a predetermined number of data files from a highly relevant one with reference to the means,
The decryption target determination step further refers to the encrypted file management information storage means to determine whether or not the data file corresponding to the file information acquired in the correlation file information acquisition step is encrypted. The program according to claim 1, characterized in that: When the execution request for the predetermined process is received, the use file management information storage unit is referred to, and a buffer number indicating a difference from the first rank number from a higher rank in a predetermined ranking is set as the buffer number. A second usage file information acquisition step of acquiring file information of data files corresponding to the number of second ranks added to the first rank;
By referring to the work file correlation management information storage means for the number of data files corresponding to the second order number acquired in the second usage file information acquisition step, the data files corresponding to the predetermined number from the highly relevant one A second correlation file information acquisition step of acquiring file information of the data file;
With reference to the decrypted file management information storage means storing decrypted file information indicating that the data file is decrypted, the file information obtained in the second use file information obtaining step, and the first An encryption object determination step for determining whether or not a data file excluding a data file corresponding to the file information acquired in the correlated file information acquisition step of 2 is decrypted;
The program according to claim 2, further comprising an encryption step for encrypting the data file determined to be decrypted in the encryption target determination step. When the predetermined process is executed, the data file decrypted in the decryption step;
For each combination of data files subject to the execution request of the predetermined processing, a value indicating the relevance between the data files constituting the combination is added by one unit and stored in the work file correlation management information storage means. The program according to claim 3, further comprising a correlation management step. Use file management information storage means for storing file information of the data file according to the use of the data file;
When an execution request for a predetermined process is received, the use file management information storage means is referred to, and the file information of the data file used before the execution request is changed to a first one having a higher rank according to a predetermined ranking. Use file information acquisition means for acquiring file information of the number of data files corresponding to the number of ranks;
Encrypted file management information storage means for storing encrypted file information indicating that the data file is encrypted;
A decryption target determination unit that refers to the encrypted file management information storage unit and determines whether or not a data file corresponding to the file information acquired by the use file information acquisition unit is encrypted;
Decryption means for decrypting the data file determined to be encrypted by the decryption target determination means;
An information processing apparatus comprising:

Images