JP2008061230A - Data protection management system, and method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system capable of decrypting and browsing encrypted information only within a security protected area. <P>SOLUTION: The present invention relates to a data protection management system comprised of an entering/leaving gate device which detects entering, transmits entering data including encryption key data to an IC card, detecting leaving and issuing an entering data erasing instruction to the IC card; the IC card which receives and records the entering data from the entering/leaving gate device, accepts an encryption key data transmission request from an information processing apparatus and redirects the encryption key data included in the entering data; and the information processing apparatus which stores encryption utilization data, accepts input of an encryption utilization data decryption demand, issues an encryption key data transmission request to the IC card, receives the encryption key data and decrypts the stored encryption utilization data into utilization data. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system and a method for data protection management by encrypting data in a secure area.

  Conventionally, by encrypting information, information content is concealed and protected, and information leakage is prevented.

For example, Patent Document 1 discloses a technique for recording and distributing an encryption public key on an IC card in order to decrypt encryption information and encrypt information. (Prior art 1)
JP 2001-273468 A (3 pages, FIGS. 3 and 4)

  By the way, in the prior art 1, the encryption key data distributed in the security protection area (for example, the security room) can be taken out of the area. Therefore, the encryption key data is used outside the security room for encryption. There was a problem that the converted information could be decrypted. Further, since the obtained encryption key data remains in the IC card, there is a disadvantage that decryption can be performed without obtaining the encryption key data from the next time.

  The present invention has been made in consideration of such a conventional technique, and an object of the present invention is to provide a system that can decrypt and browse encrypted information only in the security protection area. .

  The present invention solves the above problems by the following means. Specifically, the invention of claim 1 is a data protection management system comprising a contact type or non-contact type IC card, an information processing device, and an entrance / exit gate device, wherein the entrance / exit gate device is A storage means for storing encryption key data; and an entry data transmission means for detecting entry and transmitting the entry data including the encryption key data to the IC card; An entrance / exit gate device comprising an entry data erasure instruction means to be issued to the IC card, wherein the IC card receives entrance data from the entrance / exit gate device and records the entrance data Receiving an encryption key data transmission request from the information processing device and returning an encryption key data return means for returning the encryption key data included in the entrance data; The information processing apparatus accepts an input of a request for decryption of encrypted use data and an encryption key, and stores the encryption key in the IC card. An encryption key data receiving means for issuing a data transmission request and receiving the encryption key data; and a decrypting means for decrypting the stored encrypted usage data into the usage data using the received encryption key data. A data protection management system characterized in that the data protection management system is provided.

  Here, the distributed encryption key data cannot be taken out of the security management area.

  According to a second aspect of the present invention, the entrance / exit gate device is a device in which the storage means stores encryption key data having information for specifying a security management area, and the IC card has the storage means The data protection management system according to claim 1, wherein the data protection management system is an IC card that stores entrance data including encryption key data associated with information for specifying a security protection management area.

  Here, by using the encryption key data having information for specifying the security management area, it is possible to prevent the encryption key data from being used outside the designated security management area. In other words, the encryption key data may be changed for each security management area.

  The invention of claim 3 is a data protection management system in which the information processing device and the entrance / exit gate device are network-connected, and the information processing device includes encryption key generation means for generating encryption key data; An encryption key transmitting means for transmitting the generated encryption key data to the entrance / exit gate device, wherein the entrance / exit gate device receives the encryption key data from the information processing device, and The data protection management system according to claim 1, wherein the entrance / exit gate device comprises an encryption key update means for updating stored encryption key data using is there.

  The invention of claim 4 is a data protection management method using stored encryption key data and stored encrypted use data, and detects the entrance and transmits the entrance data including the encryption key data. The admission data transmission step, the admission data reception recording step for receiving and recording the admission data, and the encryption key data for issuing the encryption key data transmission request and receiving the encryption key data possessed by the recorded admission data A receiving step; a decrypting step for decrypting the stored encrypted usage data into usage data using the received encryption key data; and an entry data erasing instruction for issuing an entry data erasing instruction upon detecting exit Data protection characterized in that it includes a step and an admission data erasure step for receiving admission data erasure instructions and erasing admission data. It is a management method.

  According to a fifth aspect of the present invention, the stored encryption key data is encryption key data having information for specifying a security management area, and the admission data transmission step detects the entrance and detects the security management area. The data protection management method according to claim 4, wherein the data protection management method is performed by a procedure of transmitting admission data including encryption key data associated with information for specifying a password.

  The invention of claim 6 includes an encryption key generation step for generating encryption key data, and an encryption key update step for updating the stored encryption key data using the generated encryption key data. 6. The data protection management method according to claim 4, wherein the data protection management method is performed in a procedure.

  The invention of claim 7 is a computer program that causes a computer to operate as the data protection management system according to any one of claims 1 to 3 by being incorporated in the computer.

  The invention according to claim 8 is a computer-readable recording medium in which the computer program according to claim 7 is recorded.

  According to the present invention, it is possible to prevent the encryption key data distributed in the security protection area (for example, security room) from being taken out of the area. In addition, the encryption key data can be changed and used as appropriate.

(Example)
Hereinafter, embodiments of the present invention will be described in more detail with reference to the drawings. FIG. 1 is a diagram for explaining the outline of the data protection management system 1.

  The data protection management system 1 includes a contact-type or non-contact-type IC card 100, an information processing device 300, and an entrance / exit gate device 500.

  The entrance / exit gate device 500 is a device installed at the entrance / exit gate, and has a function of detecting the approach of the IC card 100 and transmitting the entrance data 195 including the stored encryption key data 591 to the IC card 100. Have. The entrance / exit gate device 500 is installed in the safety protection management area 700.

  The IC card 100 is a card held by each person who enters the safety protection area, and receives and stores the entrance data 195 transmitted from the entrance / exit gate device 500. The entrance data 195 is data including encryption key data 591 associated with information specifying the security management area.

  The information processing apparatus 300 stores encrypted usage data 395 that is encrypted usage data, and uses the encryption key data 591 received from the IC card 100 to decrypt the encrypted usage data 395 into usage data. It has a function.

  FIG. 2 is a diagram for explaining the processing flow of the data protection management system 1.

  The entrance / exit gate device 500 detects entry into the security management area 700 and transmits the entry data 195 including the encryption key data 591 to the IC card 100 (FIG. 2 (1)). The IC card 100 receives and records the entrance data 195 from the entrance / exit gate device 500 ((2)).

When the holder of the IC card 100 uses the encrypted usage data 395 recorded in the information processing apparatus 300, the IC card 100 is read by the IC card reading apparatus connected to the information processing apparatus 300 and the encryption is performed. The information processing apparatus 300 is instructed to use the computerized usage data 395. The information processing apparatus 300 recognizes this instruction as an input of an encrypted use data decryption request.
The information processing apparatus 300 accepts the input of the encrypted use data decryption request and issues an encryption key data transmission request to the IC card 100 ((11)). The IC card 100 receives the encryption key data transmission request from the information processing device 300 and returns the encryption key data 591 included in the entrance data 195 ((12)).

  The information processing apparatus 300 receives the encryption key data 591 from the IC card 100 ((13)). The information processing apparatus 300 uses the received encryption key data 591 to decrypt the encrypted use data 395 into use data ((14)). Thereby, the holder of the IC card 100 can use the decrypted usage data in the information processing apparatus 300.

  When the use data has been used, the holder of the IC card 100 takes the IC card 100 away from the IC card reader connected to the information processing apparatus 300. When the information processing device 300 recognizes that the IC card 100 is separated from the IC card reading device, the information processing device 300 encrypts the usage data using the received encryption key data 591 ((15)).

  The entrance / exit gate device 500 detects exit from the security protection management area 700 and issues an entrance data deletion instruction to the IC card 100 ((21)).

  The IC card 100 receives an entry data erasure instruction from the entrance / exit gate device 500 and erases the entry data 195 ((22)).

  In this way, the distributed encryption key data 591 can be brought out of the security management area 700.

  In the above example, the encryption key data 591 also has a role as a decryption key because it complies with a common key method in which encryption and decryption are performed with the same key. However, the present invention is not limited to the common key method, and a public key method may be used. In this case, decryption key data is used instead of the encryption key data 591 and the information processing apparatus 300 needs to store the encryption key data separately.

  Incidentally, different encryption key data 591 may be used in different security management areas 700. Thus, since different encryption key data 591 is used for each security protection management area 700, there is an advantage that safety can be improved.

  FIG. 3 is a detailed configuration diagram of the data protection management system 1. The data protection management system 1 includes a contact-type or non-contact-type IC card 100, an information processing device 300, and an entrance / exit gate device 500.

  The IC card 100 includes an entrance data reception / recording unit 170, an encryption key data return unit 140, an entrance data erasing unit 180, and a storage unit 190. The storage unit 190 stores the entrance data 195 received from the entrance / exit gate device 500.

  The entrance data 195 is data associated with the information 195b specifying the security management area and the encryption key data 591.

  The entrance data reception / recording means 170 has a function of receiving the entrance data 195 from the entrance / exit gate device 500 and recording it in the storage means 190.

  The encryption key data return means 140 has a function of receiving an encryption key data transmission request from the information processing apparatus 300 and returning the encryption key data 591 included in the entrance data 195.

  The admission data erasure means 180 has a function of accepting an admission data erasure instruction and erasing the admission data 195.

  The entrance / exit gate device 500 includes an entrance data transmission unit 570, an entrance data deletion instruction unit 580, and a storage unit 590. The storage unit 590 stores encryption key data 591.

  The admission data transmission means 570 detects admission to the security management area 700 and transmits admission data 195 including encryption key data 591 to the IC card 100. Specifically, the entry to the security management area 700 is detected by detecting that the IC card 100 has approached the entrance / exit gate device 500 and that the entry data 195 is not recorded in the IC card 100. By recognizing

  The admission data erasure instruction means 580 detects exit from the security protection management area 700 and issues an admission data erasure instruction to the IC card 100. Specifically, the detection of the exit from the security management area 700 is that the IC card 100 has approached the entrance / exit gate device 500, and the entrance data 195 is recorded in the IC card 100. By recognizing

  The information processing apparatus 300 includes an encryption key data reception unit 340, a decryption unit 350, an encryption unit 360, and a storage unit 390. The storage unit 390 stores encrypted usage data 395.

  The encryption key data receiving unit 340 has a function of receiving an encryption request data decryption request, issuing an encryption key data transmission request to the IC card 100, and receiving the encryption key data 591.

  The decrypting means 350 has a function of decrypting the stored encrypted usage data 395 into usage data using the encryption key data 591 received from the IC card 100.

  The encryption unit 360 has a function of encrypting usage data using the received encryption key data 591.

  Entrance data reception recording means 170, encryption key data return means 140, entrance data erasure means 180, encryption key data reception means 340, decryption means 350, encryption means 360, entrance data transmission means 570, entrance The data erasure instruction unit 580 is realized by a computer program. The admission data 195, the encryption usage data 395, and the encryption key data 591 are data that can be read by a computer program. The storage unit 190, the storage unit 390, and the storage unit 590 are memories.

  FIG. 4 shows the structure and example of the admission data 195. The entry data 195 includes information 195b for specifying a security area and encryption key data 591. Note that the information 195b specifying the security protection area and the encryption key data 591 are associated with each other.

  Next, a modified example will be described. A modification in which the encryption key data 591 that is periodically changed will be described.

  FIG. 5 is a diagram for explaining the overall configuration of the data protection management system 2 that uses encryption key data that is appropriately changed. The data protection management system 2 using encryption key data that is changed as appropriate includes a contact type or non-contact type IC card 100, an information processing apparatus 300 and an entrance / exit gate apparatus 500 connected to a network.

  The IC card 100 stores entrance data 195. The information processing apparatus 300 stores encrypted usage data 395. The entrance / exit gate device 500 stores encryption key data 591. The entrance / exit gate device 500 is installed in the safety protection management area 700. The above is the same as FIG.

  FIG. 6 is a diagram for explaining a processing flow of the data protection management system 2 using encryption key data that is changed as appropriate.

  The information processing apparatus 300 generates encryption key data 591 (FIG. 6 (1)). The information processing apparatus 300 transmits the generated encryption key data 591 to the entrance / exit gate apparatus 500 ((2)).

  The entrance / exit gate device 500 receives the encryption key data 591 from the information processing device 300, and updates the stored encryption key data 591 using the same (3).

  Note that (11) to (12) in FIG. 6 are the same as (1) to (2) in FIG. Similarly, (21) to (25) in FIG. 6 are the same as (11) to (15) in FIG. Also, (31) to (32) in FIG. 6 are the same as (21) to (22) in FIG.

  FIG. 7 is a detailed configuration diagram of the data protection management system 2 using encryption key data that is appropriately changed.

  The data protection management system 2 using encryption key data that is changed as appropriate includes a contact type or non-contact type IC card 100, a network-connected information processing device 300, and an entrance / exit gate device 500.

  The configuration of the means of the IC card 100 is the same as the configuration of the means of the IC card 100 of FIG.

  The configuration of the means of the entrance / exit gate device 500 is obtained by adding an encryption key update unit 520 to the configuration of the means of the entrance / exit gate device 500 of FIG.

  The encryption key update unit 520 has a function of receiving the encryption key data 591 from the information processing apparatus 300 and using this to update the stored encryption key data 591.

  The information processing apparatus 300 is obtained by adding an encryption key generation means 310 and an encryption key transmission means 320 to the configuration of the means of the information processing apparatus 300 of FIG.

  The encryption key generation unit 310 has a function of generating encryption key data 591. The encryption key transmission unit 320 has a function of transmitting the generated encryption key data 591 to the entrance / exit gate device 500.

  The encryption key update unit 520, the encryption key generation unit 310, and the encryption key transmission unit 320 are realized by a computer program. The other means are the same as in FIG.

  As described above in detail, according to the present invention, it is possible to prevent the encryption key data distributed in the security protection area (for example, the security room) from being taken out of the area. Also, the encryption key data can be changed and used as appropriate.

1 is an overall configuration diagram of a data protection management system 1. FIG. It is a figure explaining the flow of a process of the data protection management system. 1 is a detailed configuration diagram of a data protection management system 1. FIG. It is a figure which shows the structure and example of entrance data 195. (Modification) FIG. 6 is an overall configuration diagram of a data protection management system 2. (Modification) FIG. 10 is a diagram for explaining the processing flow of the data protection management system 2. (Modification) FIG. 6 is a detailed configuration diagram of the data protection management system 2.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Data protection management system 2 Data protection management system 100 using encryption key data changed suitably IC card 170 Entrance data reception recording means 140 Encryption key data return means 180 Entrance data erasure means 190 Storage means 195 Entrance data 300 Information processing apparatus 310 Encryption key generation means 320 Encryption key transmission means 340 Encryption key data reception means 350 Decryption means 360 Encryption means 390 Storage means 395 Encrypted usage data 500 Entrance / exit gate device 520 Encryption key update means 570 Entrance data transmission means 580 Entrance data deletion instruction Means 590 Storage means 591 Encryption key data

Claims (8)

A data protection management system comprising a contact type or non-contact type IC card, an information processing device, and an entrance / exit gate device,
The entrance / exit gate device is:
Storage means for storing encryption key data;
An admission data transmission means for detecting admission and transmitting admission data including the encryption key data to the IC card;
An entry data erasure instruction means for detecting an exit and issuing an entry data erasure instruction to the IC card;
An entrance / exit gate device comprising:
The IC card is
An entrance data reception recording means for receiving and recording entrance data from the entrance / exit gate device;
An encryption key data return means for receiving an encryption key data transmission request from the information processing device and returning the encryption key data included in the entrance data;
An admission data erasure means for accepting an admission data erasure instruction and erasing the admission data;
An IC card comprising:
The information processing apparatus includes:
Storage means for storing encrypted usage data;
An encryption key data receiving means for receiving an encryption key data decryption request, issuing an encryption key data transmission request to the IC card, and receiving the encryption key data;
Decryption means for decrypting the stored encrypted use data into use data using the received encryption key data;
A processing device comprising:
A data protection management system characterized by that. The entrance / exit gate device is:
The storage means stores encryption key data having information for specifying a security management area;
A device,
The IC card is
The storage means stores admission data including encryption key data associated with information specifying a security management area;
IC card
The data protection management system according to claim 1. The information processing device and the entrance / exit gate device are network-connected data protection management systems,
The information processing apparatus includes:
Encryption key generation means for generating encryption key data;
Encryption key transmitting means for transmitting the generated encryption key data to the entrance / exit gate device;
A processing apparatus comprising:
The entrance / exit gate device is:
Encryption key update means for receiving encryption key data from the information processing apparatus and updating the stored encryption key data using the encryption key data,
It is an entrance / exit gate device comprising,
The data protection management system according to claim 1 or claim 2, characterized by that. A data protection management method using stored encryption key data and stored encrypted use data,
An admission data transmission step of detecting admission and transmitting admission data including encryption key data; and
An admission data receiving and recording step of receiving and recording admission data; and
An encryption key data receiving step of issuing an encryption key data transmission request and receiving the encryption key data of the recorded entrance data;
A decryption step of decrypting the stored encrypted usage data into usage data using the received encryption key data;
Detecting the exit, and issuing an entrance data erase instruction step to issue an entrance data erase instruction,
An admission data erasure step for accepting an admission data erasure instruction and erasing the admission data;
A data protection management method characterized in that the method is performed by a procedure including: The stored encryption key data is encryption key data having information for specifying a security management area,
The admission data transmission step detects admission and transmits admission data including encryption key data associated with information for specifying a security management area.
5. The data protection management method according to claim 4, wherein the data protection management method is performed in a procedure. An encryption key generation step for generating encryption key data;
An encryption key update step of updating the stored encryption key data using the generated encryption key data;
6. The data protection management method according to claim 4, wherein the data protection management method is performed by a procedure including: The computer program which makes a computer operate | move as a data protection management system of any one of Claim 1- Claim 3 by incorporating in a computer. A computer-readable recording medium on which the computer program according to claim 7 is recorded.

Images