JP2010191531A - Network attached storage apparatus, setting method therefor, and network attached storage setting system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network attached storage apparatus, a setting method therefor, and a network attached storage setting system by which setting information is hardly referred to or falsified illegally. <P>SOLUTION: The network attached storage apparatus which can be accessed from the other apparatus via a network includes: an FW area 31 for storing an apparatus unique encryption key unique to an own apparatus; an IC reading unit 32 for reading information from a non-contact IC card 20; a determination unit 33 for determining whether or not an encryption key read from the non-contact IC card 20 matches the apparatus unique encryption key; and a setting information analysis/reflection unit 34 if the determination unit 33 has determined the matching for reflecting setting information read from the non-contact IC card 20 together with the encryption key in a setting information storage unit 35 as the setting for the own apparatus. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a method for setting network-attached storage (NAS), and more particularly, a network-attached storage device that is less likely to be illegally referred to or falsified, and its setting method, and network-attached storage setting. About the system.

  In recent years, with the spread of broadband environments, “network connection storage (hereinafter referred to as“ NAS device ”), which is a file server dedicated machine that is directly connected to a network and used, has become widespread.

  The NAS device is called by such a name because it seems that the storage device is directly connected to the network, and it can be used as a shared disk from a computer connected to the network in the same way as a normal file server. Is possible.

In order to make the NAS device actually usable, not only a physical connection to the network but also a logical setting such as designation of an IP address and a disk capacity is required. In addition, simply connecting a NAS device to the network allows all computers on the network to access the NAS device, so that only a specific computer can be accessed by setting access authority and the like. There is a need.
Information such as an IP address, disk capacity, access authority, etc. necessary for using the NAS device will be referred to as “setting information” in the following description.

When setting the NAS device, either of the following methods (1) and (2) has been used.
(1) A terminal device is connected to the NAS device, and setting information described on paper or the like is input to the terminal device.
(2) Create a setting script based on the input setting information and execute it on the terminal device.

These methods include
(A) Although it is necessary to use an external storage medium such as paper or a flexible disk on which the setting contents are recorded in order to refer to the setting contents, such an external storage medium can be easily referred to by a third party.
(B) If a terminal device connected to the NAS device is used by a third party, the setting of the NAS device may be referred to or altered, or data in the NAS device may be destroyed.
There is a problem.

  As a technique related to changing the setting of the device of the electronic device, there is a “customized information automatic setting system, program and recording medium” disclosed in Patent Document 1. The invention disclosed in Patent Document 1 is a device that is shared by a plurality of users, reads an ID card, recognizes the user, and switches to a use environment for each user.

JP 2003-131775 A

However, in the invention described in Patent Document 1, ID information and customization information are associated with each other and stored in advance in the apparatus, and the usage environment is merely switched based on the ID information in the ID card. You cannot switch to a setting that is not stored.
Therefore, when applying to the NAS apparatus setting change in Patent Document 1, it is necessary to store in advance the possible settings in the NAS apparatus, but this flexibly responds to changes in the network configuration. Because it can not be, it is not realistic.

  As described above, a network-connected storage device, a setting method thereof, and a network-connected storage setting system in which setting information is unlikely to be referred to or tampered with illegally have not been provided.

  The present invention has been made in view of such problems, and it is an object of the present invention to provide a network-connected storage device, a setting method thereof, and a network-connected storage setting system in which setting information is less likely to be illegally referred to or falsified. .

  In order to achieve the above object, according to a first aspect of the present invention, there is provided a network-connected storage device that is accessible from another device via a network, and stores a device-specific encryption key unique to the device. The determination key storage means, the means for reading information from the non-contact IC, the determination means for determining whether or not the encryption key read from the non-contact IC matches the device-specific encryption key, and the determination means The network-connected storage apparatus is provided with means for reflecting the setting information read together with the encryption key from the non-contact IC as the setting of the own apparatus when the determination is made.

  In order to achieve the above object, according to a second aspect of the present invention, there is provided a network-connected storage device setting system for reflecting setting information to a network storage device accessible from another device via a network. A setting information generating device, a non-contact IC holding medium having a non-contact IC, and a network-connected storage device. The setting information generating device generates setting information based on information input via a user interface. The network connection storage device includes a device-specific encryption unique to the device itself, a device for storing the encryption key in a non-volatile manner, and a device for transferring the setting information and the encryption key to the non-contact IC holding medium. Encryption key storage means for storing the encryption key, means for reading information from the non-contact IC holding medium via the non-contact IC, If the determination means for determining whether the encryption key read from the contact IC holding medium via the non-contact IC matches the device-specific encryption key and the determination means match, the non-contact IC holding is determined. There is provided a network connection storage apparatus setting system characterized by having means for reflecting setting information read together with an encryption key from a medium as a setting of the own apparatus.

  In order to achieve the above object, according to a third aspect of the present invention, there is provided a network-connected storage device setting method that can be accessed from another device via a network. It is determined whether or not the encryption key read from the device matches the device-specific encryption key unique to the device stored in the device in advance. In addition, the present invention provides a setting method for a network-connected storage apparatus, which reflects the setting information read together with the setting of the own apparatus.

  According to the present invention, it is possible to provide a network-connected storage apparatus, a setting method thereof, and a network-connected storage setting system in which setting information is unlikely to be illegally referred to or falsified.

It is a figure which shows the structure of the NAS apparatus which concerns on 1st Embodiment which implemented this invention suitably. It is a figure which shows the structure of the NAS apparatus setting system which concerns on 1st Embodiment which implemented this invention suitably. It is a figure which shows the flow of the data in the process at the time of apparatus shipment. It is a figure which shows the data flow at the time of setting information creation. It is a figure which shows the data flow at the time of reflecting setting information in a NAS apparatus. It is a figure which shows the structure of the NAS apparatus setting system which concerns on 2nd Embodiment which implemented this invention suitably.

[First Embodiment]
A first embodiment in which the present invention is suitably implemented will be described. FIG. 1 shows the configuration of the NAS device according to this embodiment. FIG. 2 shows the configuration of a NAS device setting system using the NAS device according to this embodiment. This system includes a device setting tool 10, a non-contact IC (Integrated Circuit) card 20, and a NAS device 30.

  The device setting tool 10 includes a setting editor 11, an encryption key storage unit 12, an IC writing unit 13, and an information storage unit 14, and is connected to a management computer 40. The management computer 40 is a computer that can execute software for starting the setting editor 11. The setting editor 11 is activated by setting software executed in the management computer 40, displays a setting information input screen or the like on the management computer 40, and receives the setting information input via the management computer 40 as the information storage unit 14. To store. The encryption key storage unit 12 stores the encryption key in a nonvolatile manner. The IC writing unit 13 is a functional unit that encrypts information by a known encryption process and writes the information to the non-contact IC by non-contact communication. Note that a known algorithm can be applied as an encryption algorithm for information to be written in the non-contact IC, and a detailed description thereof will be omitted. The information storage unit 14 is a storage area for storing setting information input from the setting editor 11.

  The non-contact IC card 20 includes a communication unit 21 and an information storage unit 22. The communication unit 21 is a functional unit that transmits and receives information by non-contact communication. The information storage unit 22 is a storage area in which information is read and written via the communication unit 21.

The NAS device 30 includes a firmware (FW) area 31, an IC reading unit 32, a determination unit 33, a setting information analysis / reflection unit 34, and a setting information storage unit 35.
The FW area 31 is a storage area in which software (so-called firmware) that controls each hardware of the NAS device 30 is stored. The IC reading unit 32 is a functional unit that reads and decrypts encrypted information from the non-contact IC by non-contact communication. The determination unit 33 determines whether or not the encryption key read by the IC reading unit 32 matches the encryption key stored in the FW area 31. The setting information analysis / reflection unit 34 analyzes the setting information input based on the determination result in the determination unit 33 and stores it in the setting information storage unit 35. The setting information storage unit 35 is a storage area for storing the setting information of the NAS device 30, and the setting content indicated by the setting information stored here is effective as the setting of the NAS device 30.

The operation when the apparatus is shipped will be described. FIG. 3 shows a data flow in processing at the time of shipment of the apparatus. Processing at the time of device shipment is performed using the encryption key setting device 50. The encryption key setting device 50 includes an encryption key generation unit 51, an FW writing function unit 52, and an encryption key writing unit 53.
First, the encryption key generation unit 51 generates an encryption key. The generated encryption key is written into the FW area 31 of the NAS device 30 by the FW writing function unit 52. The encryption key is preferably written in the FW area 31 so as not to be rewritten. The encryption key is also written into the encryption key storage unit 12 of the apparatus setting tool 10 by the encryption key writing unit 53.

  In this way, the encryption key corresponding to the NAS device 30 on a one-to-one basis is also stored in the device setting tool 10. After the setting of the encryption key is completed by the above procedure, the NAS device 30 is shipped with the device setting tool 10 and setting software for starting it attached.

  Next, an operation when creating the setting information will be described. FIG. 4 shows a data flow when setting information is created. When creating the setting information, the management computer 40 executes setting software and starts the apparatus setting tool 10. Then, setting information is created by operating the setting editor 11 via the management computer 40. It is preferable that the setting software has an operation simulation function so that it can be confirmed on the software whether there is a setting error. The created setting information is stored in the information storage unit 14. Thereafter, the IC writing unit 13 transmits the setting information and the encryption key to the non-contact IC card 20. The non-contact IC card 20 receives the setting information and the encryption key via the communication unit 21 and stores these information in the information storage unit 22.

An operation when the setting information is reflected on the NAS device 30 will be described. FIG. 5 shows a data flow when the setting information is reflected on the NAS device 30. When the contactless IC card 20 is held over the IC reading unit 32 of the NAS device 30, the encryption key and the setting information stored in the information storage unit 22 of the contactless IC card 20 are transferred to the NAS device 30 via the communication unit 21. Sent. The NAS device 30 determines in the determination unit 33 whether or not the encryption key read from the non-contact IC card 20 matches the encryption key stored in the FW area 31.
If they match, the IC reading unit 32 outputs the setting information to the setting information analyzing / reflecting unit 34. The setting information analysis / reflection unit 34 analyzes the input setting information, updates the data in the setting information storage unit 35, and reflects the setting information on the NAS device 30. In the case of the initial setting, setting information is newly stored.
On the other hand, if they do not match, the setting information read from the non-contact IC card 20 is discarded and the setting is not changed.

  As described above, according to the NAS device setting system according to the present embodiment, the setting of the NAS device cannot be changed without using a contactless IC card in which an encryption key corresponding to the NAS device is stored one-to-one. There is no risk of unauthorized changes to NAS device settings.

  In addition, since the information stored in the non-contact IC card is encrypted, even if the non-contact IC card is lost, it is difficult for others to refer to or use the setting information stored therein. If the contactless IC card is lost, the NAS device setting system can be used again by requesting the NAS device manufacturer to reissue the contactless IC card.

  In addition, since the NAS device can be configured such that the terminal device cannot be connected, there is no possibility that the NAS device itself is accessed and the setting information is stolen or tampered with.

  In addition, since there is a non-contact IC card that stores the encryption key and the setting information, the processing for reflecting the setting on the NAS device can be performed. Therefore, the person who created the setting information does not necessarily have to go to the place where the NAS device is installed. Absent. That is, the senior administrator can perform the process up to storing the setting information and the encryption key in the contactless IC card, and the process of actually reflecting the setting on the NAS device can be entrusted to another person.

[Second Embodiment]
A second embodiment in which the present invention is suitably implemented will be described. FIG. 6 shows the configuration of the NAS device setting system according to this embodiment. The NAS device setting system includes a device setting tool 10, a mobile phone terminal 60, and a NAS device 30.
The device setting tool 10 is substantially the same as that of the first embodiment, but includes a communication unit 15 instead of the IC writing unit 13. The communication unit 15 is a functional unit that transmits and receives information via the network 80.

  The mobile phone terminal 60 includes a communication unit 61, an information storage unit 62, and a mobile communication unit 63. The mobile communication unit 63 is a functional unit that transmits and receives information via the mobile phone network 70. The communication unit 61 and the information storage unit 62 are the same as the communication unit 21 and the information storage unit 22 of the first embodiment.

  The NAS device 30 is the same as that in the first embodiment.

  In the NAS device setting system according to this embodiment, the setting information generated by the device setting tool 10 and the encryption key in the encryption key storage unit 12 are transferred to the mobile phone terminal 60 via the network 80 and the mobile phone network 70. Is the same as that of the first embodiment except for being sent.

  In the NAS device setting system according to the present embodiment, since the setting information and the encryption key are transmitted to the mobile phone terminal via the mobile phone network, the mobile phone terminal is brought close to the device setting tool to perform communication using a contactless IC. There is no need to do it. For this reason, if the senior administrator creates setting information and transfers it to the setting operator's mobile phone terminal via the mobile phone network, the setting operator sets the mobile phone terminal by holding it over the NAS device. Can work. That is, unlike the first embodiment, there is no need to physically exchange a medium in which setting information and an encryption key are stored.

  Each of the above embodiments is an example of a preferred embodiment of the present invention, and the present invention is not limited to this and can be variously modified.

DESCRIPTION OF SYMBOLS 10 Device setting tool 11 Setting editor 12 Encryption key storage part 13 IC writing part 14, 22, 62 Information storage part 15, 21, 61 Communication part 20 Non-contact IC card 30 NAS apparatus 31 FW area 32 IC reading part 33 Determination Unit 34 setting information analysis / reflection unit 35 setting information storage unit 60 mobile phone terminal 63 mobile communication unit 70 mobile phone network 80 network

Claims (9)

A network-attached storage device that can be accessed from other devices via a network,
An encryption key storage means for storing a device-specific encryption key unique to the device;
Means for reading information from a non-contact IC;
Determination means for determining whether or not an encryption key read from a contactless IC matches the device-specific encryption key;
A network-connected storage apparatus, comprising: means for reflecting the setting information read together with the encryption key from the non-contact IC as the setting of the own apparatus when the determination means determines that they match.   The network-connected storage device according to claim 1, wherein the encryption key storage unit stores the device-specific encryption key in a firmware area.   3. The network-connected storage device according to claim 2, wherein the encryption key storage unit stores the device-specific encryption key in a non-rewritable manner. A network-connected storage device setting system for reflecting setting information to a network storage device accessible from another device via a network,
A setting information generation device, a non-contact IC holding medium including a non-contact IC, and the network connection storage device,
The setting information generation device includes:
Means for generating the setting information based on information input via a user interface;
Means for storing the encryption key in a nonvolatile manner;
Means for transferring the setting information and the encryption key to the non-contact IC holding medium,
The network attached storage device is:
An encryption key storage means for storing a device-specific encryption key unique to the device;
Means for reading information from the non-contact IC holding medium via the non-contact IC;
Determining means for determining whether or not an encryption key read from the contactless IC holding medium via the contactless IC matches the device-specific encryption key;
A network-connected storage device setting system, comprising: means for reflecting the setting information read together with the encryption key from the non-contact IC holding medium as the setting of the own device when it is determined that the determination means match .   5. The network-connected storage device setting system according to claim 4, wherein the setting information generation device transfers the setting information and the encryption key to the non-contact IC holding medium via the non-contact IC. The non-contact IC holding medium comprises means for communicating via a mobile phone network;
5. The network-connected storage device setting system according to claim 4, wherein the setting information generation device transfers the setting information and the encryption key to the contactless IC holding medium via a mobile phone network.   7. The network-connected storage device setting system according to claim 4, wherein the encryption key storage unit stores the device-specific encryption key in a firmware area.   8. The network-connected storage device setting system according to claim 7, wherein the encryption key storage unit stores the device-specific encryption key in a non-rewritable manner. A method for setting a network-attached storage device that can be accessed from another device via a network,
The network connection storage device determines whether or not the encryption key read from the contactless IC matches the device-specific encryption key unique to the device stored in the device in advance. In this case, the setting information read from the non-contact IC together with the encryption key is reflected as the setting of the own device.

Images