JP2006330949A - External storage medium security management system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem of being unable to ensure the security of data against loss or theft. <P>SOLUTION: A security system 1 for a USB memory has a portable USB memory 2 having a data storage part 22 for storing data, and a management terminal 3 for managing security by communicating with the USB memory 2 by radio. The USB memory 2 has a timer time monitoring part 29D which starts counting deletion timer time upon detecting a deletion timer start command coming from the management terminal 3, and which determines whether or not the deletion timer time is up; and a memory side storage control part 29B which, when the deletion timer time is determined to be up, deletes the data stored in the data storage part. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention provides a portable external storage medium such as a USB memory having a data storage area for externally storing data in a personal computer, for example, and wirelessly communicates with the external storage medium, and security management of the external storage medium The present invention relates to an external storage medium security management system and an external storage medium security management method having an external control device such as a mobile phone.

  In recent years, portable external storage media such as a USB memory having a data storage area capable of storing a large amount of data in a personal computer have been widely used in recent years.

  However, since the external storage medium is portable and may be stolen or lost, it is essential to ensure the security of the data stored in the external storage medium.

  Therefore, these external storage media have a software password protection function, connect the external storage medium to a personal computer, enter the password from the personal computer, and the external storage medium only when this password matches. A function that allows access to stored data is widely known.

  However, even with an external storage medium with such a password protection function, if the password is decrypted, the stored data can be easily accessed, so that further security improvements can be made in the future. It is the actual situation that is desired.

  Thus, although not in the technical field of an external storage medium such as a USB memory, various methods are conventionally known from the viewpoint of protecting data stored in the storage medium (see, for example, Patent Document 1 and Patent Document 2).

  For example, Patent Document 1 relates to protection of data stored in a memory card such as an IC card. The expiration date is set in advance, and the data stored in the memory card is deleted when the expiration date elapses. To do.

  Therefore, according to Patent Document 1, since the data stored in the memory card is automatically deleted when the expiration date has passed, unauthorized use of the memory card after the expiration date has passed can be prevented. .

  Patent Document 2, for example, relates to the security of data such as phonebook data stored in a mobile phone, for example, and accesses the mobile phone from another phone, and from the other phone on the mobile phone side. When remote access corresponding to the specific operation is detected, the data stored in the mobile phone is erased.

  Therefore, according to Patent Document 2, even if the mobile phone is lost, communication access is made to the mobile phone from another phone, and data stored in the mobile phone is erased by remote control. It is possible to ensure the security of data stored in the memory.

Japanese Patent No. 2515741 (see claim 1 and FIG. 1 within the scope of claims) Japanese Patent Laid-Open No. 7-193865 (see abstract and FIG. 1)

  However, according to the above-described conventional Patent Document 1, when the expiration date has passed, the data stored in the memory card is voluntarily erased to prevent the use of the memory card after the expiration date. However, even if the memory card is lost or stolen, the data in the memory card can be accessed until the expiration date of the memory card, ensuring data security against loss or theft. Can not do it.

  Further, according to the above-mentioned conventional patent document 2, although it is not a technical field related to an external storage medium such as a USB memory, even if the mobile phone is lost or stolen, it can be remotely operated from another phone to the mobile phone. The phone book data stored in the mobile phone can be deleted, but if the user is not aware of the loss or theft, the data on the mobile phone cannot be deleted. It cannot be secured.

  The present invention has been made in view of the above points, and an object of the present invention is to store data in the external storage medium even if the user does not recognize the loss or theft in response to the loss or theft of the external storage medium. It is an object of the present invention to provide an external storage medium security management system and an external storage medium security management method that can ensure security.

  In order to achieve the above object, an external storage medium security management system according to the present invention includes a portable external storage medium having a data storage area for storing data, and the external storage medium by wirelessly communicating with the external storage medium. An external storage medium security management system having an external control device for security management, wherein the external storage medium includes a timer time setting means for setting a timer time, and the timer according to a start command from the external control device When the timer operation set by the time setting means is started, the timer time monitoring determination means for determining whether or not the timer time has expired and the timer time monitoring and determination means time up. If it is determined that the data has been stored, the data storage area has control means for erasing data stored therein.

  An external storage medium security management system according to the present invention includes a portable external storage medium having a data storage area for storing data, and an external control device that wirelessly communicates with the external storage medium to manage security of the external storage medium. The external storage medium security management system has a timer time setting means for setting a timer time, and the timer time setting means is set in response to a start command from the external control device When the timer time counting operation is started, the timer time monitoring determination means for determining whether or not the timer time has expired, and when the timer time monitoring determination means determines that the timer time has expired, When notifying the time-up notification to the external control device and detecting a data erasure command from the external control device, The data in stored in the serial data storage area and to a control means for erasing.

  In the external storage medium security management system of the present invention, when the control means determines that the timer time has expired by the timer time monitoring determination means, it notifies the external control device of a time-up notification, and When the reset command from the external control device is detected, after resetting the current timer time counting operation, the timer time monitoring determining means to start again the timer time setting operation set by the timer time setting means To control.

  In the external storage medium security management system according to the present invention, when the timer time monitoring determination means detects an activation command from the external control device, the timer time counting operation is started.

  The external storage medium security management system according to the present invention includes a portable external storage medium having a data storage area for storing data, and performs security polling with the external storage medium at predetermined intervals to secure the external storage medium. An external storage medium security management system having an external control device to manage, wherein the external storage medium is a polling communication monitoring means for determining whether or not polling communication with the external control device is within a predetermined period; When the polling communication monitoring means determines that the polling communication with the external control device is not within a predetermined period, the polling communication monitoring means includes a control means for erasing data stored in the data storage area.

  In the external storage medium security management system of the present invention, when the external storage medium starts a timer time setting means for setting a timer time and a timer operation set by the timer time setting means, the timer time is set. Timer time monitoring determination means for determining whether the time has expired, and the control means determines that polling communication with the external control device is not within a predetermined period by the polling communication monitoring means. The timer time monitoring determination unit is controlled to start the timer time counting operation, and when the timer time monitoring determination unit determines that the timer time has expired, the data is stored in the data storage area. The data of was deleted.

  In the external storage medium security management system according to the present invention, after the control unit detects an external read access of data stored in the data storage area, the polling communication monitoring unit performs polling communication with the external control device. If it is determined that it is within a predetermined period, reading of data stored in the data storage area is permitted, and the polling communication monitoring means determines that polling communication with the external control device is not within the predetermined period. Then, the data stored in the data storage area is erased.

  In order to achieve the above object, the external storage medium security management method of the present invention includes a portable external storage medium having a data storage area for storing data, and an external control device that performs wireless communication with the external storage medium. The external control device is a method for security management of the external storage medium, and starts counting the timer time set on the external storage medium side in response to a start command from the external control device. When the timer expires, the data stored in the data storage area is deleted.

  The external storage medium security management method of the present invention comprises a portable external storage medium having a data storage area for storing data, and an external control device that communicates wirelessly with the external storage medium. A method for security management of an external storage medium, wherein in response to a start command from the external control device, when the timer time set on the external storage medium side is started and the timer time is up, An up notification is sent to the external control device, and when a data erase command from the external control device is detected, the data stored in the data storage area is erased.

  When the external storage medium security management method of the present invention detects a reset command from the external control device, it resets the current timer time counting operation, and then starts the timer time counting operation again after the reset. I did it.

  The external storage medium security management method of the present invention includes a portable external storage medium having a data storage area for storing data, and an external control device that executes polling communication with the external storage medium at a predetermined cycle interval, A method for security management of the external storage device by the external control device, wherein the external storage device determines whether or not polling communication with the external control device is within a predetermined period, and the external control device When it is determined that the polling communication is not within the predetermined period, the data stored in the data storage area is erased.

  According to the external storage medium security management system of the present invention configured as described above, an external storage medium and an external control device wirelessly connected to the external storage medium are provided, and in response to an activation command from the external control device When the timer time is started on the external storage medium side and it is determined that the timer time has expired, the data stored in the external storage medium is erased. If the external control device automatically generates a startup command when the storage medium is lost or stolen, the external storage medium can be used to prevent the loss or theft even if the user does not recognize the loss or theft. Data security.

  According to the external storage medium security management system of the present invention, the external storage medium includes an external storage medium and an external control device wirelessly connected to the external storage medium, and the external storage medium side according to a start command from the external control device When the timer time measurement operation is started and it is determined that the timer time has expired, a time-up notification is notified to the external control device, and when a data erase command from the external control device is detected, the external storage medium For example, if the external control device automatically generates an activation command when the external storage medium is lost or stolen, the user himself / herself loses or steals the data. Even if it is not recognized, the time-up notification can recognize the loss or theft, and the user can select whether or not to erase the data on the external storage medium. It can be, as a result, it is possible to ensure the security of data in the external storage medium.

  According to the external storage medium security management system of the present invention, when it is determined that the timer time has expired, a time-up notification is notified to the external control device, and when a reset command from the external control device is detected, After resetting the timer time counting operation, the timer time monitoring determination means is controlled to start the timer time counting operation again, so even if the timer time has expired, the user side operation It is also possible to restart the timer operation without erasing data.

  According to the external storage medium security management system of the present invention, an external storage medium and an external control device that performs polling communication with the external storage medium at a predetermined cycle interval are provided. If it is determined that the polling communication is not within the predetermined period, the data stored in the data storage area is deleted. Therefore, at the time when it is determined that the polling communication is not within the predetermined period, for example, loss or theft may occur. Therefore, it is possible to secure the data security of the external storage medium against loss or theft.

  According to the external storage medium security management system of the present invention, when it is determined that the polling communication is not within the predetermined period, the timer time counting operation is started, and further, it is determined that the timer time has expired. Since the data stored in the data storage area is erased, the data can be erased after the timer time elapses after the polling communication disappears within the predetermined period.

  According to the external storage medium security management system of the present invention, when it is determined that the polling communication with the external control device is within a predetermined period after detecting the external read access, the reading of the stored data is permitted, If it is determined that the polling communication is not within the predetermined period, the stored data is erased. Even if the external read access to the external storage medium is detected, the polling communication is not within the predetermined period. Since it is determined that it is an unauthorized access to the data and the data is erased, the security of the data in the external storage medium can be ensured against loss or theft.

  According to the external storage medium security management method of the present invention, the external storage medium and the external control device are wirelessly connected, and in response to a start command from the external control device, a timer operation is performed on the external storage medium side. When it is determined that the timer has expired, the data stored in the external storage medium is erased. For example, when the external storage medium is lost or stolen, the external control device When the activation command is automatically generated, the security of data in the external storage medium can be ensured against the loss or theft even if the user does not recognize the loss or theft.

  According to the external storage medium security management method of the present invention, the external storage medium and the external control device are wirelessly connected, and the timer operation is counted on the external storage medium side in response to a start command from the external control device. When it is determined that the timer has expired, a notification of time-up is sent to the external control device. When a data erase command from the external control device is detected, the data stored in the external storage medium is erased. For example, if the external control device automatically generates an activation command when the external storage medium is lost or stolen, the time can be saved even if the user does not recognize the loss or theft. Notification of the loss or theft, and the user can select whether or not the data on the external storage medium needs to be erased. It is possible to ensure the security of data in the storage body.

  According to the external storage medium security management method of the present invention, when it is determined that the timer has expired, a time-up notification is notified to the external control device, and when a reset command from the external control device is detected, After resetting the timer time counting operation, the timer time counting operation is started again, so even if the timer time has expired, the timer time is not erased without erasing the data by the user side operation. The timing operation can be started again.

  According to the external storage medium security management method of the present invention, polling communication is performed between the external storage medium and the external control device at predetermined intervals, and polling communication with the external control device is performed within the predetermined cycle on the external storage medium side. If it is determined that the data stored in the data storage area is erased, when it is determined that the polling communication is not within the predetermined period, for example, it is determined that there has been loss or theft, Data security of the external storage medium can be ensured against loss or theft.

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments relating to an external storage medium security management system according to the present invention will be described below with reference to the drawings, taking a security system using a USB memory as an external storage medium as an example.
(Embodiment 1)
FIG. 1 is a system configuration diagram showing an overall configuration of a USB memory security system according to the first embodiment.

  A USB memory security system 1 shown in FIG. 1 is connected to a USB terminal of a personal computer, for example, and a portable USB memory 2 having a data storage unit for storing a large amount of data, and wireless communication with the USB memory 2 In addition, a management control terminal device (hereinafter simply referred to as a management terminal) 3 for security management of the USB memory 2 is provided.

  The USB memory 2 and the management terminal 3 execute polling communication at a predetermined cycle interval. The management terminal 3 may be substituted for a mobile phone, for example.

  FIG. 2 is a block diagram showing a schematic configuration inside the USB memory 2 according to the first embodiment.

  The USB memory 2 shown in FIG. 2 inputs data from the personal computer through the connection interface unit 21 connected to the USB terminal on the personal computer side and the write interface according to the write access, and stores it according to the read access. The data storage unit 22 that outputs the data, the memory side communication unit 24 that wirelessly communicates with the management terminal 3 via the memory side antenna 23, the memory side signal processing unit 25 that performs various signal processing, and the USB memory 2 are powered. A memory-side battery unit 26 that supplies various LEDs, a memory-side power control unit 28 that controls the memory-side battery unit 26, and a memory-side control unit 29 that controls the entire USB memory 2. have.

  The connection interface unit 21 includes a data interface 21A that inputs and outputs data through a USB terminal, and a power supply unit 21B that supplies power through the USB terminal. The memory-side power supply control unit 28 charges the memory-side battery unit 26 with power when it is supplied with power through the power feeding unit 21B.

  The memory-side control unit 29 includes a memory-side communication monitoring unit 29A that monitors wireless communication with the management terminal 3, a memory-side storage control unit 29B that stores and controls the data storage unit 22, and a memory that performs a timer operation. Side timer unit 29C, timer time monitoring unit 29D for monitoring the timer time, battery remaining amount checking unit 29E for detecting the remaining battery level of the memory side battery unit 26, and memory for detecting the remaining memory level of the data storage unit 22 It has a remaining amount confirmation unit 29F and a memory-side ID processing unit 29G that manages its own registration ID for the management terminal 3.

  FIG. 3 is a block diagram showing a schematic configuration inside the management terminal 3 according to the first embodiment.

  The management terminal 3 shown in FIG. 3 includes a management-side communication unit 32 that wirelessly communicates with the USB memory 2 via the management-side antenna 31, a management-side signal processing unit 33 that performs various signal processing, and an input unit 34A, a display unit, for example. 34B, a peripheral device unit 34 such as a speaker 34C and a microphone 34D, an I / O control unit 35 that manages an input / output interface with the peripheral device unit 34, a management-side battery unit 36 that supplies power to the management terminal 3, and A management-side power supply control unit 37 that controls the management-side battery unit 36, an external power supply port 38 for supplying external power to the management-side battery unit 36, a data processing unit 39 that performs various data processing, and each USB A storage unit 40 that stores an ID management table and the like related to the memory 2 and a management-side control unit 41 that controls the entire management terminal 3 are provided.

  The management-side control unit 41 includes a management-side communication monitoring unit 41A that monitors wireless communication with the USB memory 2 through the management-side communication unit 32, a management-side timer unit 41B that performs a timer operation, and the USB memory 2. It has a command control unit 41C for instructing a command and an ID determination / registration unit 41D for determining registration of the ID of the USB memory 2.

  FIG. 4 is an explanatory diagram briefly showing the contents of the ID management table 40A in the storage unit 40.

  The management terminal 3 can register IDs of a plurality of USB memories 2, and the ID management table 40A is set in the memory ID 40a for identifying the USB memory 2, the password 40b of the USB memory 2, and the USB memory 2. The erasing timer time 40c and the current status 40d of the USB memory 2 are stored and managed. It is assumed that the management terminal 3 stores and manages the current status of the USB memory 2 in order to perform polling communication with the registered USB memory 2 at predetermined intervals.

  The external storage medium is a USB memory 2, the data storage area is a data storage unit 22, the external control device is a management terminal 3, the external storage medium security management system is a USB memory security system 1, a timer time setting means, The timer time monitoring determination unit corresponds to the memory side timer unit 29C and the timer time monitoring unit 29D, the control unit corresponds to the memory side storage control unit 29B, and the polling communication monitoring unit corresponds to the memory side communication monitoring unit 29A.

  Next, the operation of the USB memory security system 1 showing the first embodiment will be described. FIG. 5 is a sequence showing processing operations related to the ID registration processing between the USB memory 2 and the management terminal 3 according to the first embodiment.

  The ID registration process shown in FIG. 5 is a process for registering an ID between the USB memory 2 and the management terminal 3 and setting and registering an erasing timer time.

  When the management side control unit 41 of the management terminal 3 inputs the memory ID and password of the USB memory 2 related to the ID registration request through the input unit 34A (step S101), the ID including the memory ID and password through the command control unit 41C. A registration request command is notified to the USB memory 2 (step S102), and a response waiting timer is started (step S103).

  When the memory side control unit 29 of the USB memory 2 detects the ID registration request command, it determines whether or not the ID is locked (step S104). The case where the ID is already locked indicates that the ID has already been registered in the ID management table 40A on the management terminal 3 side, and the case where the ID is not locked indicates that the ID is the ID management table on the management terminal 3 side. 40A indicates that it is not registered.

  If it is determined that the ID is not locked, the memory-side control unit 29 notifies the management terminal 3 of an ID registration request response to respond to the ID registration request command in step S102 (step S105). The management-side control unit 41 in the management terminal 3 determines whether an ID registration request response has been received (step S106).

  If the ID registration request response has not been received, the management-side control unit 41 determines whether or not the response waiting timer started in step S103 has expired (step S107).

  If the response waiting timer has not expired, the management-side control unit 41 proceeds to step S106 to monitor whether or not an ID registration request response has been received.

  If the management-side control unit 41 receives the ID registration request response, the management-side control unit 41 registers the memory ID of the USB memory 2 in the ID management table 40A (step S108). When registering in the ID management table 40A, the management-side control unit 41 notifies the USB memory 2 of an ID registration completion command through the command control unit 41C (step S109).

  When the memory side control unit 29 of the USB memory 2 detects the ID registration completion command, the memory side ID processing unit 29G determines that the ID has been locked (step S110).

  When the management-side control unit 41 notifies the USB memory 2 of the ID registration completion command in step S109, the management-side control unit 41 sets and inputs an erasure timer time corresponding to the USB memory 2 through the input unit 34A (step S111). An erase timer setting command is notified to the USB memory 2 through the control unit 41C (step S112). At this time, in the ID management table 40A, the memory ID, password, and erasure timer time corresponding to the USB memory 2 are set and registered.

  When the memory side control unit 29 of the USB memory 2 detects the erasing timer setting command, it sets and registers the erasing timer time included in the erasing timer setting command (step S113), and notifies the management terminal 3 of the completion of timer registration. (Step S114).

  When receiving the timer registration completion, the management-side control unit 41 of the management terminal 3 notifies the USB memory 2 of a timer synchronization request command through the command control unit 41C (step S115). When detecting the timer synchronization request command, the memory-side control unit 29 of the USB memory 2 sets timer synchronization so as to establish timer synchronization with the management terminal 3 (step S116), and notifies the management terminal 3 of completion of synchronization setting. (Step S117), the processing operation ends.

  In addition, if the response waiting timer has expired in step S107, the management-side control unit 41 of the management terminal 3 ends this processing operation.

  If it is determined in step S104 that the ID has been locked, the memory side control unit 29 of the USB memory 2 determines that the ID has already been registered and ends this processing operation.

  According to the ID registration process shown in FIG. 5, it is possible to register and manage the memory ID for each USB memory 2 on the management terminal 3 side and set and register the erasure timer time for each USB memory 2.

  FIG. 6 is a flowchart showing the processing operation of the memory-side control unit 29 of the USB memory 2 related to the timer-type data erasing process of the first embodiment.

  In the timer-type data erasure process shown in FIG. 6, when an erasure timer activation command from the management terminal 3 is detected, the timer operation for counting the erasure timer time is started and stored in the data storage unit 22 after the erasure timer time elapses. This process automatically deletes the data inside.

  The memory side control unit 29 in the USB memory 2 determines whether or not an erasure timer activation command for activating an erasure timer in the memory side timer 29C from the management terminal 3 has been detected (step S11). Note that the erase timer start command corresponds to a command for starting the timing operation of the erase timer.

  The memory-side control unit 29 initializes the timing operation of the memory-side timer unit 29C (step S12), and starts the counting operation of the erasing timer time being set by the memory-side timer unit 29C (step S13).

  The memory side control unit 29 detects the remaining battery level of the memory side battery unit 26 through the remaining battery level checking unit 29E (step S14), and determines whether the remaining battery level is equal to or greater than a predetermined amount (step S15). .

  If the memory-side control unit 29 determines that the remaining battery level is not equal to or greater than the predetermined amount, the remaining battery level of the memory-side battery unit 26 is small, and wireless communication with the management terminal 3 may be interrupted. The battery remaining alarm is notified to the management terminal 3 (step S16), and it is determined whether or not the erasure timer time started in step S13 has expired through the timer time monitoring unit 29D (step S17). The user of the management terminal 3 can recognize that the remaining battery level of the USB memory 2 is low based on the remaining battery alarm.

  If the erasure timer time has expired, the memory-side control unit 29 erases the data stored in the data storage unit 22 through the memory-side storage control unit 29B (step S18), and the memory-side timer unit 29C Then, a timer stop operation is executed to stop the timing operation that is currently being measured (step S19), and the management terminal 3 is notified of the completion of data erasure (step S20), thereby terminating this processing operation. The user of the management terminal 3 can recognize that the data in the USB memory 2 has been deleted based on the completion of the data deletion.

  On the other hand, if the memory-side control unit 29 has not detected an erase timer start command in step S11, the processing operation ends.

  If it is determined in step S15 that the remaining battery level is equal to or greater than the predetermined amount, the memory side control unit 29 proceeds to step S17 in order to monitor whether or not the erasing timer time has expired. If the erasing timer time has not expired, the memory-side control unit 29 proceeds to step S14 in order to monitor the remaining battery level.

  According to the timer-type data erasure process shown in FIG. 6, when the erasure timer activation command is detected from the management terminal 3, the time counting operation for the currently set erasure timer time is started, and after the erasure timer time elapses, the data storage unit 22 Data stored in the memory can be automatically deleted.

  According to the first embodiment, the USB memory 2 and the management terminal 3 wirelessly connected to the USB memory 2 are provided, and erasure is performed on the USB memory 2 side in response to an erasure timer start command from the management terminal 3. When the timer operation is started, and when it is determined that the erasure timer time is up, the data stored in the data storage unit 22 of the USB memory 2 is erased. When the management terminal 3 automatically generates an erase timer start command when the terminal 2 is lost or stolen, the USB memory can be used against the loss or theft even if the user does not recognize the loss or theft. 2 data security can be ensured.

In the first embodiment, as shown in FIG. 6, the data stored in the data storage unit 22 is automatically deleted after the erasure timer time elapses. The operation of this case will be described as a second embodiment.
(Embodiment 2)
The same components as those in the USB memory security system 1 according to the first embodiment are denoted by the same reference numerals, and the description of the overlapping configuration and operation is omitted.

  FIG. 7 is a flowchart showing the processing operation of the memory-side control unit 29 in the USB memory 2 related to the timer-type data erasing process of the second embodiment.

  When the timer-type data erasure process shown in FIG. 7 detects an erasure timer start command, the timer-type data erasure process starts counting the erasure timer time, notifies the management terminal 3 of the data erasure necessity notification after the erasure timer time elapses, and This is processing for entrusting the necessity to the user's intention on the management terminal 3 side.

  The memory-side control unit 29 in the USB memory 2 determines whether or not an erasure timer activation command for activating the erasure timer time from the management terminal 3 has been detected (step S31). Note that the erase timer start command corresponds to a command for starting the time counting operation of the erase timer time.

  The memory side control unit 29 initializes the time counting operation of the memory side timer unit 29C (step S32), and starts the time counting operation of the erasing timer time being set (step S33).

  The memory side control unit 29 detects the remaining battery level of the memory side battery unit 26 through the remaining battery level checking unit 29E (step S34), and determines whether or not the remaining battery level is equal to or greater than a predetermined amount (step S35). .

  If it is determined that the remaining battery level is not equal to or greater than the predetermined amount, the memory-side control unit 29 determines that the remaining battery level of the memory-side battery unit 26 is low, and wireless communication with the management terminal 3 is interrupted. A battery remaining alarm is reported to the management terminal 3 (step S36), and it is determined whether or not the erasure timer time started in step S33 has expired through the timer time monitoring unit 29D (step S37). The user of the management terminal 3 can recognize that the remaining battery level of the USB memory 2 is low based on the remaining battery alarm.

  If the erasure timer time has expired, the memory-side control unit 29 notifies the management terminal 3 of a data erasure necessity notification (step S38). In addition, based on the data erasure necessity notification, it is possible to prompt the user of the management terminal 3 to decide whether or not to erase the data in the USB memory 2.

  The memory side control unit 29 determines whether or not an erasure command is detected from the management terminal 3 (step S39). Note that the command control unit 41C of the management terminal 3 notifies the USB memory 2 of an erase command in response to an erase command operation.

  If the memory side control unit 29 detects an erasure command from the management terminal 3, the memory side control unit 29 erases the data stored in the data storage unit 22 (step S40), and the memory side timer unit 29C is currently counting time. Is stopped (step S41), and the management terminal 3 is notified of the completion of data erasure (step S42), thereby ending this processing operation.

  Further, if the erase command is not detected in step S39, the memory-side control unit 29 determines whether a reset command is detected from the management terminal 3 (step S43). Note that the command control unit 41C of the management terminal 3 notifies the USB memory 2 of a reset command in response to a reset command operation.

  If the memory-side control unit 29 detects a reset command, the memory-side control unit 29 proceeds to step S32 in order to initialize the counting operation of the erasing timer time.

  If the reset command is not detected in step S43, the memory-side control unit 29 proceeds to step S39 to monitor the detection of the erase command.

  On the other hand, if the memory side control unit 29 does not detect an erase timer start command in step S31, the processing operation is terminated.

  If it is determined in step S35 that the remaining battery level is equal to or greater than the predetermined amount, the memory-side control unit 29 proceeds to step S37 in order to monitor whether or not the erasing timer time has expired. If the erasure timer time has not expired in step S37, the memory side control unit 29 proceeds to step S34 to monitor the remaining battery level.

  According to the timer-type data erasure process shown in FIG. 7, when an erasure timer activation command is detected from the management terminal 3, the erasure timer time counting operation is started, and a data erasure necessity notification is sent after the erasure timer time has elapsed. When a deletion command is detected from the management terminal 3 after notification of necessity of data deletion, the data stored in the data storage unit 22 is deleted, and when a reset command is detected, the timed timer is reset once. Thereafter, the timing operation of the erasure timer time can be resumed.

  According to the second embodiment, the USB memory 2 and the management terminal 3 wirelessly connected to the USB memory 2 are provided, and erasure is performed on the USB memory 2 side in response to an erasure timer start command from the management terminal 3. When it is determined that the erasure timer time has expired, the management terminal 3 is notified of the necessity of data erasure, and a data erasure command from the management terminal 3 is detected. Then, since the data stored in the USB memory 2 is erased, for example, when the management terminal 3 automatically generates an erase timer start command when the USB memory 2 is lost or stolen, Even if the user himself / herself does not recognize the loss or theft, the loss or theft can be recognized by the data erasure necessity notification, and the necessity of erasing the data in the USB memory 2 on the user side is also possible. It can be selected, as a result, it is possible to ensure the security of data during storage in the USB memory 2.

  According to the second embodiment, when it is determined that the erasing timer time has expired, the management terminal 3 is notified of the data erasure necessity notification, and when the reset command from the management terminal 3 is detected, After resetting the timekeeping operation of the timer time that is currently being timed, the timekeeping operation of the erasure timer time is resumed, so the timer timekeeping operation can be performed without erasing the data by the user side operation. You can also resume.

In the first or second embodiment, when the erase timer start command from the management terminal 3 is detected, the timer operation of the erase timer is started. For example, the polling with the management terminal 3 is started. When the communication is interrupted, the time counting operation for the erasing timer time may be started. This operation will be described as a third embodiment.
(Embodiment 3)
The same components as those in the USB memory security system 1 according to the first embodiment are denoted by the same reference numerals, and the description of the overlapping configuration and operation is omitted.

  FIG. 8 is a flowchart showing the processing operation of the memory-side control unit 29 in the USB memory 2 related to the polling communication type data erasing process of the third embodiment.

  The polling communication type data erasure process shown in FIG. 8 starts the time measuring operation of the erasing timer time when it is determined that there is no polling communication within a predetermined period, and is stored in the data storage unit 22 after the erasing timer time elapses. It is a process to erase the data inside.

  The memory-side control unit 29 in the USB memory 2 initializes a polling monitoring timer that times a predetermined period (step S51), and starts a timing operation of polling monitoring timer time in the memory-side timer unit 29C (step S52).

  The memory side control unit 29 determines whether or not the polling communication of the management terminal 3 is detected within a predetermined period through the memory side communication monitoring unit 29A (step S53). If the memory side control unit 29 does not detect the pinging communication of the management terminal 3 within a predetermined period, the memory side control unit 29 initializes the time counting operation of the erasing timer time of the memory side timer unit 29C (step S54), and the erasing timer time Is started (step S55).

  When starting the counting operation of the erasing timer time, the memory side control unit 29 determines whether the erasing timer time started in step S55 has expired through the timer time monitoring unit 29D (step S56). If the erasure timer time has expired, the memory-side control unit 29 erases the data stored in the data storage unit 22 (step S57), and the memory-side timer unit 29C performs the timekeeping operation currently being timed. A timer stop operation is executed to stop the operation (step S58), the LED 27 is turned on to notify the completion of data erasure (step S59), and the processing operation is terminated. Note that the user of the USB memory 2 can recognize that the data erasure stored in the data storage unit 22 has been completed according to the lighting contents of the LED 27.

  Further, if the erasing timer time has not expired in step S56, the memory side control unit 29 determines whether or not polling communication is detected through the memory side communication monitoring unit 29D (step S60).

  If the polling communication is not detected in step S60, the memory side control unit 29 proceeds to step S56 in order to monitor the erasure timer time up.

  If the polling communication is detected in step S60, the memory-side control unit 29 performs a timer stop operation to stop the erasing timer time counting operation (step S61), and restarts the polling monitoring timer. The process proceeds to step S51.

  If the polling communication is detected within the predetermined period in step S53, the memory-side control unit 29 determines that it is normal, and proceeds to step S51 in order to restart the timing operation for the predetermined period.

  According to the polling communication type data erasure process shown in FIG. 8, when it is determined that the polling communication with the management terminal 3 has not been detected within a predetermined period, the erasure timer time is started. After the elapse of time, the data stored in the data storage unit 22 can be erased.

  According to the third embodiment, the USB memory 2 and the management terminal 3 that performs polling communication with the USB memory 2 at a predetermined cycle interval are provided, and polling communication with the management terminal 3 is performed on the USB memory 2 side for a predetermined period. If it is determined that it is not within, the timer operation for erasing the timer is started, and after the erasing timer time elapses, the data stored in the data storage unit 22 is erased. The security of data in the USB memory 2 can be ensured.

  In the third embodiment, when it is determined that polling communication with the management terminal 3 cannot be detected within a predetermined period, the data is erased after the erasure timer time elapses. The data may be erased if polling communication with the management terminal 3 cannot be detected within a predetermined period without waiting for the timer time.

In the first to third embodiments, for example, data stored in the USB memory 2 is erased at a predetermined timing after the erasure timer time elapses. However, unauthorized access to the USB memory 2 is performed. When data is detected, the data stored in the USB memory 2 may be erased. The operation in this case will be described as a fourth embodiment.
(Embodiment 4)
The same components as those in the USB memory security system 1 according to the first embodiment are denoted by the same reference numerals, and the description of the overlapping configuration and operation is omitted.

  FIG. 9 is a flowchart showing the processing operation of the memory-side control unit 29 in the USB memory 2 related to the USB memory unauthorized access prevention processing of the fourth embodiment.

  The USB memory unauthorized access prevention process shown in FIG. 9 is a process for prohibiting data reading by unauthorized access when a third party unauthorized access to the USB memory 2 is detected, for example.

  The memory side control unit 29 of the USB memory 2 determines whether data access is detected through the connection interface unit 21 (step S71).

  If data access is detected, the memory side control unit 29 determines whether communication with the management terminal 3, for example, polling communication is detected through the memory side communication monitoring unit 29A (step S72).

  If the communication with the management terminal 3, for example, polling communication is not detected, the memory side control unit 29 determines that the access is unauthorized, and displays the unauthorized access to notify the unauthorized access (step S73). In order to warn of data erasure, an erasure confirmation is displayed (step S74). The unauthorized access display in step S73 and the erase confirmation display in step S74 are displayed on the LED 27 on the USB memory 2 and the display screen of the accessed personal computer.

  The memory-side control unit 29 initializes the time-counting operation for the erasure confirmation timer time of the memory-side timer unit 29C (step S75), and starts the time-keeping operation for the erasure confirmation timer time (step S76). The erase confirmation timer time is, for example, about 5 minutes.

  When the memory-side control unit 29 starts to count the erasure confirmation timer time, the memory side control unit 29 determines whether or not the erasure confirmation timer time has expired through the timer time monitoring unit 29D (step S77). If the erasure confirmation timer time has expired, the memory-side control unit 29 erases the data stored in the data storage unit 22 (step S78), and stops the time counting operation of the erasure confirmation timer time. The top operation is executed (step S79), and the data erasure completion indicating that the data erasure is completed is notified (step S80), and this processing operation is terminated. Note that the user of the USB memory 2 and the personal computer can recognize that the data has been erased on the LED 27 or the screen based on the completion of the data erasure.

  In addition, if the erasure confirmation timer time has not expired in step S77, the memory side control unit 29 detects whether communication with the management terminal 3, for example, polling communication is detected through the memory side communication monitoring unit 29A. Is determined (step S81).

  If the communication with the management terminal 3, for example, polling communication is not detected in step S81, the memory-side control unit 29 proceeds to step S77 and starts step S81 in order to start the timer operation for erasure confirmation timer time. If communication with the management terminal 3, for example, polling communication is detected, it is determined as normal, data access is permitted (step S82), and this processing operation is terminated. That is, when the polling communication is normal, it can be determined that the management terminal 3 and the USB memory 2 are adjacent to each other, and it can be determined that the USB memory 2 is not lost or stolen.

  On the other hand, if the memory-side control unit 29 has not detected data access in step S71, the processing operation ends. Further, if the communication from the management terminal 3, for example, polling communication is detected in step S72, the memory side control unit 29 determines that it is normal and proceeds to step S82 to permit data access.

  According to the USB memory unauthorized access prevention processing shown in FIG. 9, when data access to the USB memory 2 is detected, it is determined whether or not polling communication with the management terminal 3 is detected, and polling communication is not detected. Is determined to be unauthorized access, and the data stored in the data storage unit 22 is erased after the erasure confirmation timer elapses, and when polling communication is detected, it is determined that the access is normal and data access is permitted. be able to.

  According to the fourth embodiment, after reading access is detected on the USB memory 2 side, if it is determined that polling communication with the management terminal 3 is within a predetermined period, reading of stored data is permitted. In addition, if it is determined that the polling communication is not within the predetermined period, the stored data is erased. Therefore, even if the read access to the USB memory 2 is detected, the polling communication is not within the predetermined period. In this case, since it is determined that the data is illegally accessed, the data is deleted, so that the security of the data in the USB memory 2 can be ensured against loss or theft.

  According to the external storage medium security management method of the present invention, the external storage medium and the external control device are wirelessly connected, and in response to a start command from the external control device, a timer operation is performed on the external storage medium side. When it is determined that the timer has expired, the data stored in the external storage medium is erased. For example, when the external storage medium is lost or stolen, the external control device If the activation command is automatically generated, the security of the data in the external storage medium can be secured against loss or theft even if the user does not recognize the loss or theft. This is useful for portable external storage media such as USB memory.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a system configuration diagram showing a schematic configuration of an entire USB memory security system showing a first embodiment relating to an external storage medium security management system of the present invention. It is a block diagram which shows schematic structure inside the USB memory concerning 1st Embodiment. It is a block diagram which shows schematic structure inside the management terminal in connection with 1st Embodiment. It is explanatory drawing which shows briefly the table content of the ID management table of the management terminal in connection with 1st Embodiment. It is a sequence which shows the processing operation regarding the ID registration process between the USB memory and management terminal concerning 1st Embodiment. It is a flowchart which shows the processing operation of the memory side control part in the USB memory of the timer type | mold data erasing process in connection with 1st Embodiment. It is a flowchart which shows the processing operation of the memory side control part in USB memory of the timer type data erasing process in connection with 2nd Embodiment. It is a flowchart which shows the processing operation of the memory side control part in the USB memory of the polling communication type | mold data erasing process in connection with 3rd Embodiment. It is a flowchart which shows the processing operation of the memory side control part in USB memory of the USB memory unauthorized access prevention process in connection with 4th Embodiment.

Explanation of symbols

1 USB memory security system (external storage media security management system)
2 USB memory (external storage medium)
3 Management terminal (external control device)
22 Data storage unit (data storage area)
29A Memory side communication monitoring unit (polling communication monitoring means)
29B Memory-side storage control unit (control means)
29C Memory side timer part (Timer time setting means)
29D Timer time monitoring unit (timer time monitoring determination means)

Claims (10)

An external storage medium security management system comprising a portable external storage medium having a data storage area for storing data, and an external control device for wirelessly communicating with the external storage medium and managing the security of the external storage medium ,
The external storage medium is
Timer time setting means for setting the timer time;
In response to a start command from the external control device, when the timer time set by the timer time setting means is started, timer time monitoring determination means for determining whether the timer time has expired,
An external storage medium security management system comprising: control means for erasing data stored in the data storage area when the timer time monitoring judging means judges that the timer time has expired. An external storage medium security management system comprising a portable external storage medium having a data storage area for storing data, and an external control device for wirelessly communicating with the external storage medium and managing the security of the external storage medium ,
The external storage medium is
Timer time setting means for setting the timer time;
In response to a start command from the external control device, when the timer time set by the timer time setting means is started, timer time monitoring determination means for determining whether the timer time has expired,
When it is determined by the timer time monitoring determination means that the timer time has expired, a notification of time up is sent to the external control device, and when a data erase command from the external control device is detected, the data storage area And an external storage medium security management system characterized by having control means for erasing stored data. The control means includes
When it is determined by the timer time monitoring determination means that the timer time has expired, a notification of time up is sent to the external control device, and when a reset command from the external control device is detected, the current timer time 3. The external storage medium according to claim 2, wherein, after resetting the time counting operation, the timer time monitoring determining means is controlled to start again the time counting operation of the timer time set by the timer time setting means. Security management system. External storage medium security having a portable external storage medium having a data storage area for storing data, and an external control device that performs polling communication with the external storage medium at a predetermined cycle and manages the security of the external storage medium A management system,
The external storage medium is
Polling communication monitoring means for determining whether polling communication with the external control device is within a predetermined period;
And an external control means for erasing data stored in the data storage area when the polling communication monitoring means determines that the polling communication with the external control device is not within a predetermined period. Storage media security management system. The external storage medium is
Timer time setting means for setting the timer time;
When the timer time set by the timer time setting means is started, the timer time monitoring determining means for determining whether or not the timer time is up,
The control means includes
When the polling communication monitoring means determines that the polling communication with the external control device is not within a predetermined period, the timer time monitoring determining means is controlled to start the timer time counting operation. 5. The external storage medium security management system according to claim 4, wherein if the time monitoring determination means determines that the timer has expired, the data stored in the data storage area is erased. The control means includes
After detecting external read access of data stored in the data storage area, if the polling communication monitoring means determines that the polling communication with the external control device is within a predetermined period, the data storage area Permits reading of data being stored, and erases data stored in the data storage area when the polling communication monitoring means determines that polling communication with the external control device is not within a predetermined period. The external storage medium security management system according to claim 4. External storage medium security comprising a portable external storage medium having a data storage area for storing data and an external control device wirelessly communicating with the external storage medium, wherein the external control device performs security management of the external storage medium A management method,
In response to the start command from the external control device, start the timer operation of the timer time set on the external storage medium side,
An external storage medium security management method comprising: erasing data stored in the data storage area when the timer expires. External storage medium security comprising a portable external storage medium having a data storage area for storing data and an external control device wirelessly communicating with the external storage medium, wherein the external control device performs security management of the external storage medium A management method,
In response to the start command from the external control device, start the timer operation of the timer time set on the external storage medium side,
When the timer expires, a notification of time-up is sent to the external control device,
An external storage medium security management method comprising: erasing data stored in the data storage area when detecting a data erase command from the external control device. Upon detecting a reset command from the external control device, reset the timing operation of the current timer time,
9. The external storage medium security management method according to claim 8, wherein the timer operation is started again after the reset. A portable external storage medium having a data storage area for storing data, and an external control device that executes polling communication with the external storage medium at a predetermined cycle interval. The external control device secures the external storage medium. An external storage medium security management method for managing,
It is determined whether or not polling communication with the external control device is within a predetermined period on the external storage medium side,
An external storage medium security management method comprising: erasing data stored in the data storage area when it is determined that polling communication with the external control device is not within a predetermined period.

Images