JP2009080711A - Information leakage prevention system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To manage the setting of transfer control only by single information without requiring a plurality of pieces of information and to manage access authority of a file at a transfer destination not by a user but by a manager side. <P>SOLUTION: A self-decoding file preparation function and a function for performing setting of permitting the take-out of only a self-decoding file are utilized. When execution authority exists, the take-out of the self-decoding file is permitted. When there is no execution authority, the take-out of the self-decoding file is inhibited. Since a user having no execution authority is inhibited from taking out the self-decoding file, the take-out of a transferred self-decoding file can be also inhibited. The manager may manage only the execution authority of the self-decoding file preparation function of each user on the management server side and can manage retransfer also by the information, so that the retransfer also can be managed on the manager side. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information leakage prevention system, in particular, a “self-decryption file” (executable format encrypted file, and the side receiving it executes a file and inputs a password without requiring a special program. It is related to an information leakage prevention system that permits only taking out.

  Patent Document 1 discloses an information processing system that realizes information sharing promotion and leakage prevention in mail transfer. Specifically, the mail transfer authority and the access authority management table in the mail management program are used to manage the mail transfer authority for each user and the access authority for each file. When the user makes a mail transfer request, the user's mail transfer authority is checked and transfer control is performed. When mail transfer is permitted and a file is to be transferred, the access control of the attached file is checked to control the transfer of the attached file. In addition, the authority to re-transfer attached files at the mail transfer destination is granted, and access control at the transfer destination is also performed to enhance prevention of information leakage.

  Patent Document 2 discloses a system that prevents information from being changed due to unauthorized access or erroneous operation of an electronic document or BOM information shared among a plurality of users, and prevents leakage of confidential information to other departments or other companies. Specifically, in the information management method of the business support system for realizing information sharing between users of electronic information, information data, an information data creation user ID, an information management code for setting an access right to an arbitrary user, A storage device for storing history data for managing access history to information data, a control device for determining whether the access right given to the arbitrary user is valid for the information data accessed by the arbitrary user, and permission by the control device A display editing device is provided for displaying the information accessed, and controls reading or writing of the accessed information.

  Patent Document 3 discloses virus infection and confidential information that can simultaneously prevent the invasion of viruses into the organization and the leakage of confidential information from within the organization, and can freely transmit and receive confidential information by e-mail or the like within the organization. A leakage prevention computer is disclosed. Specifically, a first means for configuring a general environment composed of an OS and an application dedicated to transmission / reception outside the organization, and a second means for configuring a confidential environment composed of an OS and an application dedicated to transmission / reception inside the organization, In terms of data exchange between the two environments constituted by these first and second means, only copying of data in a predetermined format such as text data that does not contain programs or control information is permitted from the general environment to the confidential environment. And third means for prohibiting the duplication of all data from the confidential environment to the general environment or recording all the duplicated data in the storage means and enabling the duplication.

  Patent Document 4 discloses a system for distributing / updating a security policy including access to a network, access to a file on the client machine, file take-out control, and the like to client machines in an organization. Specifically, this is a system that distributes security policies to clients, holds one or more security policies according to the security level of the clients, and which security policy is applied to each client. A security policy comprising: a server comprising means for setting a security policy; a means for sending a security policy to each client; and a client that receives the security policy from the server and applies the security policy set in the server Distribution system.

In Patent Document 5, electronic data including management target information such as personal information, customer information, and confidential information is electronic data that does not include management target information while restricting the transmission destination and reliably realizing security / leakage prevention. Has been disclosed for ensuring convenience by allowing transmission without limitation of the transmission destination. Specifically, when it is determined that the management target information is included in the electronic data to be transmitted from the terminal device, if the transmission destination is specified from the destination information registered in the management server, the electronic data While transmission of data is permitted, transmission of electronic data is prohibited unless the transmission destination is specified from the destination information registered in the management server, and management target information is included in the transmission target electronic data. If it is determined that there is no such data, the transmission of electronic data is permitted.
JP 2002-288087 A JP 2004-178119 A JP 2006-201845 A JP 2006-243791 A JP 2007-200206 A

  The technology described in the privilege document 1 uses two tables, a mail transfer right management table and an access right management table. The mail transfer right management table manages the transfer right for each user, and the access right management table uses a file. Both the management for each user (terminal) that manages the access right for each file and the management for each file must be performed. For this reason, the cost performance of the management table deteriorates and is not realistic. In addition, the user can select the right to retransfer the attached file at the mail transfer destination, but this causes the transfer source user to determine the access right at the transfer destination. The file access right policy should be set by the system administrator, and if the user sets the retransfer right by mistake and forwards the mail, information may leak at the transfer destination. Lack of reliability.

  In the technique described in Patent Document 2, three types of information are managed: an information data creation user ID, an information management code for setting an access right to an arbitrary user, and history data for managing an access history to the information data.

  In the technique described in Patent Document 3, copying of any data is prohibited from the confidential environment to the general environment, or all the copied data is recorded in the storage means so that it can be copied.

  In the technique described in Patent Document 4, a security policy is received from a server, and a security policy set in the own device is applied.

  In the technique described in Patent Document 5, transmission of electronic data is permitted when it is determined that the management target information is not included in the transmission target electronic data.

  The object of the present invention is to increase the cost performance by minimizing the information to be managed, and to provide a mechanism for prohibiting all users from taking out by the administrator. It is to provide an information leakage prevention system having a function of strengthening.

  In order to solve the above-described problems, the information leakage prevention system according to the present invention uses a self-decryption file creation function and a function for performing a setting for allowing only the self-decryption file to be taken out. Add execution authority to the self-decryption file creation function and add a function to switch execution authority for each user. Judgment is made on whether or not to execute the self-decryption file creation function. If the execution authority is granted, only the self-decryption file is allowed to be taken out based on the setting to allow the self-decryption file to be taken out. Establish a mechanism to prohibit taking-out actions. The configuration according to the present invention is shown below.

  A management server that manages permission information for creating a self-decryption file for each user is constructed. Only the system administrator can add / delete / change the execution authority information of the self-decryption file creation function for each user. An inquiry is made to the management server at the timing when the user logs in to the system, information on the authority to execute the self-decryption file creation function is acquired, and the acquired information is stored in the client. When the user tries to execute the self-decryption file creation function, the stored information is determined. If the user has the authority of the self-decryption file creation function, the use of the self-decryption file creation function is permitted. When taking out, the setting to permit only the self-decryption file is applied as before.

  On the other hand, the stored information is determined, and if the user does not have the authority to execute the self-decryption file creation function, the use of the self-decryption file creation function is prohibited. When taking out, the self-decryption file is also prohibited from being taken out and all take-out actions are prohibited. Thereby, retransfer of the self-decrypted file transferred by the user who does not have the authority to execute the self-decrypted file creation function can be prohibited.

  Further, by detecting the take-out action according to the present invention, it is possible to deal with all take-out actions as well as mail.

  An information leakage prevention system according to claim 1 is an information leakage prevention system comprising a management server placed on an intranet and a plurality of clients, wherein each client has a self-decoding file respectively. A self-decryption file creation authority management table that determines whether or not the user has authority to create, and the client accesses the management server when logging in to the information leakage prevention system, and the client decrypts the self-decryption file A self-decrypting file creation authority inquiry means for inquiring whether or not it has the authority to create a self-decryption file, and a self-decryption file for storing information on the presence or absence of the self-decryption file creation authority obtained as a result of the inquiry from the self-decoding file creation authority inquiry means Creation authority information storage means and self-decryption file Generating means, self-decrypting file creation authority determining means for determining the presence or absence of self-decrypting file creation authority, and when the client determines that the client has authority to create a self-decrypting file Only self-decoding file creation control means for permitting execution of self-decoding file creation.

  Furthermore, the information leakage prevention system according to claim 2 is an information leakage prevention system comprising a management server placed on an intranet and a plurality of clients, each of which is self-decoding for each client. A self-decryption file creation authority management table that determines whether or not the user has authority to create a file, and the client accesses the management server when logging in to the information leakage prevention system, and the client Self-decryption file creation authority inquiry means that inquires whether or not it has the authority to create a decrypted file, and self that stores information on the existence of the self-decryption file creation authority obtained as a result of the inquiry by the self-decryption file creation authority inquiry means Decryption file creation authority information storage means and self-decryption file File creation means, file takeout execution means, self-decryption file creation authority determination means for determining whether or not self-decryption file creation authority exists, and self-decryption file identification for determining whether or not the file to be taken out is a self-decryption file And the file to be taken out is determined to be a self-decryption file by the self-decryption file identification means, and the self-decryption file creation authority determination means determines that the client has authority to create a self-decryption file. Only when it is done, it has file take-out control means for allowing file take-out.

  Furthermore, in the information leakage prevention system according to any one of claims 1 and 2, the self-decryption file creation authority information storage unit obtains information on the presence / absence of the self-decryption file creation authority from the management server. When the date information is stored together and a predetermined time has passed since the latest acquisition date, it is desirable to execute the inquiry by the self-decryption file creation authority inquiry means again.

The information leakage prevention system according to the present invention has the following effects.
(1) The management of take-out control has been managed by the transfer right for each user and the access right for each file until now. However, according to the present invention, only the right to execute the self-decryption file creation function for each user is provided. The management table can be managed with high cost performance.
(2) By controlling according to the execution authority of the self-decryption file creation function, a user who can create a self-decryption file creates a self-decryption file and takes it out, and re-transfers the transferred self-decryption file. It can be taken out. On the other hand, a user who cannot create a self-decryption file cannot create a self-decryption file by himself / herself and is prohibited from taking out the self-decryption file. It is possible to distinguish between users that can be taken out and users that cannot be taken out only by the self-decryption file creation permission setting, and an appropriate security policy can be set.
(3) In the present invention, the administrator manages the self-decryption file creation authority for each user, and the permission for taking out is set only by the information. Since only the administrator can set the self-decryption file creation authority of the transfer destination user, it is possible to solve the conventional problem of setting the retransfer authority of the file at the transfer destination at the transfer source.

  Embodiments of the present invention will be described below.

  FIG. 6 is a conceptual diagram showing the operating environment of the information leakage prevention system according to the present invention. A self-decryption file creation authority management program, which is the central part of the information leakage prevention system according to the present invention, is installed on a server management 602 provided on the intranet 601, and terminal devices (client computers) 611, 612, 613 or the like accesses the server 602 via the intranet 601 and logs in to inquire about the existence of self-file creation authority. Of the information leakage prevention system of the present invention, a part for storing information regarding the presence / absence of self-file creation authority, a part for creating a self-decryption file, a part for performing a take-out action, a part for controlling the take-out action, etc. Installed.

  FIG. 7 is a block diagram illustrating a hardware configuration of the terminal device 611. A RAM (random access memory) 702, a ROM (read only memory) 703, an HDD (hard disk drive) 704, a display circuit 705, an input signal processing unit 706, and a network circuit unit 707 are connected to the bus 700 of the CPU 701. . Further, a display device 715 is connected to the display circuit portion 705. Specifically, any of a liquid crystal monitor device, a CRT device, a plasma display device, or the like is used as the display device 715. Input devices such as a mouse 712 and a keyboard 711 are connected to the input signal processing unit 706. The operator of the terminal device 611 operates and inputs the keyboard 711 and the mouse 712 while visually confirming the processing content displayed on the screen of the display device, and the processing content of the terminal device 611 is further advanced. The network circuit unit 707 is further connected to the intranet 601 via necessary equipment. In order to access the management server 602 from the terminal device 611, a network connection is required.

  FIG. 1 shows an outline of the system configuration of the present invention and the processing when a user who can create a self-decryption file and a user who cannot create a self-decryption file log in and take out the system. The information leakage prevention system according to the present invention is installed in the terminal device 10 used by the user A and the terminal device 20 used by the user B. As described above, in the information leakage prevention system, the server side system and the client side system function together. Each user makes an inquiry to the management server at the timing of logging in to the system, and obtains the authority to execute the self-decryption file creation function. Here, the user A has the authority to execute the self-decryption file creation function. On the other hand, user B does not have the authority to execute the self-decryption file creation function. User A can create a self-decryption file based on his / her authority, copy it to removable media, send it to other user B (terminal 20), other terminals 30, 40, etc. Allowed. Since user B does not have the authority to execute the self-decryption file creation function, creation of the self-decryption file is prohibited. Therefore, in an environment where only the self-decryption file is allowed to be taken out, copying to a removable medium, transmission to another terminal, etc. are prohibited.

  FIG. 2 shows the contents of the self-decryption file creation authority management table 200 describing the execution authority information of the self-decryption file creation function for each user stored in the management table on the management server side. Here, user A, user C, etc. have the authority to create a self-decryption file, and user B, user N, etc. have no authority to create a self-decryption file. The administrator can set the execution authority of the user and the self-decryption file creation function of the user in the management table. Only one table is managed.

  FIG. 3 is an outline of a processing flow when the user logs in. When the user logs in (step 301), an inquiry is made to the management server (step 303), and the returned information is stored in the client (step 307, step 311, step 313). The self-decryption file creation authority information stored in the client is referred to as necessary.

  FIG. 4 is an outline of a processing flow when the user executes the self-decryption file creation function. When the user executes the self-decryption file creation function (step 401), the information stored in the client is referred to (step 403). If the user has authority, the self-decryption file creation function is started (step 407 determines TRUE). Step 411) If there is no authority (Step 407 determines FALSE and Step 413), the process ends in an error.

  FIG. 5 is an outline of a processing flow when the user performs a take-out action. In the case of a user who can create a self-decryption file, the self-decryption file creation authority stored on the client side is referred to at the take-out timing (step 501) (step 503). Therefore, the process proceeds to step 509, and the file being taken out is analyzed. If the file to be taken out from the analysis result is a self-decoding file, it is determined as TRUE in step 509 and the take-out is permitted (step 511). On the other hand, in the case of a user who cannot create a self-decryption file, the self-decryption file creation authority is referred to at the time of carrying out (step 501) (step 503). Step 513), prohibiting all the taking-out actions. Thereby, even if it is going to take out the self-decryption file transferred temporarily, carrying out can be prohibited.

  In an environment where only the self-decryption file is allowed to be transferred to strengthen the prohibition of taking out, if the user does not have the authority to create a self-decryption file, the self-decryption file cannot be created by himself / herself. However, the transferred self-decryption file can be transferred. When a self-decrypting file is transferred to a PC of a user who is not permitted to create a self-decoding file, taking out the self-decoding file is prohibited by the present invention, and the prohibition of taking out can be strengthened.

  Since only one management table is required, an information leakage prevention system with high cost performance can be constructed. Therefore, simple and easy-to-understand management is possible, and a system that can be easily introduced into companies and organizations can be provided.

It is a system configuration figure showing an embodiment of the present invention. It is an example of the data of the self-decryption file creation authority for every user stored in the management table on the management server side. It is a processing flow when a user logs in to this system. It is a processing flow when executing the self-decryption file creation function. It is a processing flow when a take-out action is performed. It is a conceptual diagram which shows the operating environment of the information leakage prevention system of this invention. It is a block diagram which shows the hardware constitutions of a terminal device.

Explanation of symbols

10, 20, 30, 40 Terminal device (client computer)
100 Management server 200 Self-decryption file creation authority management table 601 Intranet 602 Server 611, 612, 613 Terminal device 700 Bus 701 CPU
702 RAM
703 ROM
704 HDD
705 Display circuit unit 706 Input signal processing unit 707 Network circuit unit 711 Keyboard 712 Mouse 715 Display device

Claims (3)

An information leakage prevention system comprising a management server placed on an intranet and a plurality of clients,
The management server
A self-decryption file creation authority management table that determines whether each client has the authority to create a self-decryption file,
The client
A self-decryption file creation authority inquiry means for accessing the management server when logging in to the information leakage prevention system and inquiring whether the client has the authority to create a self-decryption file;
As a result of the inquiry by the self-decryption file creation authority inquiry means, self-decryption file creation authority information storage means for storing information on the presence / absence of the acquired self-decryption file creation authority;
A self-decrypting file creation means;
Self-decryption file creation authority determination means for determining whether or not self-decryption file creation authority exists,
Self-decryption file creation control means that permits execution of self-decryption file creation only when the client determines that the client has the right to create a self-decryption file by the self-decryption file creation authority judgment means system. An information leakage prevention system comprising a management server placed on an intranet and a plurality of clients,
The management server
A self-decryption file creation authority management table that determines whether each client has the authority to create a self-decryption file,
The client
A self-decryption file creation authority inquiry means for accessing the management server when logging in to the information leakage prevention system and inquiring whether the client has the authority to create a self-decryption file;
As a result of the inquiry by the self-decryption file creation authority inquiry means, self-decryption file creation authority information storage means for storing information on the presence / absence of the acquired self-decryption file creation authority;
A self-decrypting file creation means;
File export execution means;
Self-decryption file creation authority determination means for determining whether or not self-decryption file creation authority exists,
Self-decoding file identification means for determining whether the file to be taken is a self-decoding file;
When the file to be taken out is determined to be a self-decrypting file by the self-decoding file identification means, and the self-decoding file creation authority determination means determines that the client has authority to create a self-decryption file An information leakage prevention system having a file export control means that permits file export only. An information leakage prevention system according to claim 1 or 2,
The self-decryption file creation authority information storage means stores information on the presence / absence of the self-decryption file creation authority together with date information acquired from the management server, and when a predetermined time has passed since the latest acquisition date The information leakage prevention system for executing again the inquiry by the self-decryption file creation authority inquiry means.

Images