JP2011022758A - Information processing system, application program and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing system, a program and a storage medium, allowing use of an existing OS (operating system) and an external device as it is without using dedicated hardware (a dedicated media device), allowing connection control according to the kind of the external device regardless of a connection system, and allowing inexpensive security management. <P>SOLUTION: When the external device is connected, a similar filter part 44 receives basic information and detailed information of the external device from the basic OS instead of a filter part 40, and an application body part 42 receives the basic information and the detailed information of the external device received by the similar filter part 44, and performs the connection control with the external device based on the basic information and the detailed information. The filter part 40 receives information except the basic information and the detailed information of the external device from the basic OS 50, and delivers necessary information to the application body part 42. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information processing system, an application program, and a storage medium.

  Conventionally, an external device such as a USB is connected to an external connection port of a personal computer or server (hereinafter referred to as a personal computer) by plug and play (hereinafter referred to as PnP).

  In addition, when the external device can store data in a storage medium such as a memory or a DVD such as a USB memory or a writable DVD drive, the use is restricted to prevent information leakage. (Patent Document 1).

  In Patent Document 1, authentication information is stored in a storage unit of a USB peripheral device that is an external device, and only when the authentication information input to the personal computer or the like matches the authentication information stored in the USB peripheral device. The use of the USB peripheral device is permitted. However, in Patent Document 1, if the authentication information input to the personal computer or the like matches the authentication information stored in the USB peripheral device, the information can be freely used by an external device. In other words, if correct authentication information is illegally input, information is leaked.

Because of such a problem, an OS (operating system) that can refuse connection with all external devices by setting has also been proposed.
For example, in Windows 2000 (registered trademark), the use of a USB port can be refused in batch at a time regardless of the type of external device depending on the setting.

In addition, such as Windows XP (registered trademark) and Windows VISTA (registered trademark) that have a function of making the USB memory unusable or read-only have been proposed.
Further, in Patent Document 2, in an information processing apparatus in which use of an external memory is prohibited, the information processing apparatus stores a serial number unique to the external memory so that the specific external memory can be used. When the information processing apparatus is connected to the external memory, the use of the external memory is permitted when the serial number sent from the connected external memory matches the serial number stored in advance. ing.

JP 2003-150285 A JP 2007-148733 A

  By the way, the above-mentioned Windows 2000 (registered trademark) does not have an interface (API) that delivers detailed information (type, connection style, manufacturer name, etc.) of a connected external device to a user application as a standard.

  As a result, there is a problem that original information for determining the type of the connected external device cannot be acquired on the user application side, and as a result, connection rejection cannot be controlled according to the type of the connected external device.

  In addition, Windows XP (registered trademark) and Windows VISTA (registered trademark) have a function to make a USB storage medium unusable / read-only, but other than USB storage medium, for example, by equipment / manufacturers in IEEE1394 or ATA connection system Sorting is not possible.

  Furthermore, in Windows (registered trademark), in order to realize connection control according to the type of external device, it is necessary to prepare dedicated hardware separately, and all existing (general-purpose) devices are replaced with dedicated products. There is a need.

  In the present invention, an existing OS and an external device can be used as they are without using dedicated hardware (media device), and connection control can be performed according to the type of external device regardless of the connection method. Another object of the present invention is to provide an information processing system, a program, and a storage medium that can perform security management at low cost.

  In order to achieve the above object, the invention according to claim 1 is connectable to an external device by a plug-and-play method, and is transmitted from the external device and basic information on whether or not the external device is connected. In an information processing system including a computer from which the basic OS acquires detailed information including the media type and drive type of the external device, the information processing system includes a storage unit that stores a program for controlling connection with the external device, When executed by the computer, the computer functions as a filter means, a pseudo filter means, and an application main body means. The pseudo filter means is connected to an external device when the external device is connected. Basic information and detailed information are received from the basic OS instead of the filter means. The application body means receives basic information and detailed information of the external device received by the pseudo filter means, and performs connection control with the external device based on the basic information and detailed information. However, the gist of the information processing system is that information other than basic information and detailed information of the external device is received from the basic OS and necessary information is passed to the application main body means. .

  According to a second aspect of the present invention, in the first aspect, when the drive type, which is detailed information of the external device received from the pseudo filter unit, is removable, the application main body unit permits only reading to the external device. It is characterized by.

  According to a third aspect of the present invention, in the first aspect, the application main body unit reads the external device when the drive type, which is detailed information of the external device received from the pseudo filter unit, is a stationary or built-in device, and It is characterized by permitting writing.

  The invention according to claim 4 is connectable to an external device by a plug-and-play method, and when the external device is connected, basic information on whether or not the external device is connected, and the media of the external device transmitted from the external device A program used in an information processing system including a computer from which a basic OS acquires detailed information including the type and drive type of the computer, wherein the program includes a filter unit, a pseudo filter unit, and an application body unit. The pseudo filter means receives basic information and detailed information of the external device from the basic OS instead of the filter means when the external device is connected, and the application main body means The basic information and detailed information of the external device received by the pseudo filter means are received. , For controlling connection with the external device based on the basic information and detailed information, and the filter means receives information other than the basic information and detailed information of the external device from the basic OS, and The gist of the present invention is a program characterized by passing necessary information to the application main body means.

  A fifth aspect of the present invention is a storage medium for storing the application program according to the fourth aspect.

  According to the first aspect of the present invention, the existing OS and external device can be used as they are without using dedicated hardware (media device), and depending on the type of external device regardless of the connection method. Connection control is possible, and security management can be performed at low cost.

  According to the invention of claim 2, when the external device is removable, only reading to the external device is permitted, but writing to the external device is not permitted, so that information leakage from the information processing system is prevented, Security management can be improved.

  According to the invention of claim 3, when the drive type which is the detailed information of the external device is a stationary or built-in device, reading and writing can be performed assuming that the external device is a device which does not leak information.

  According to the invention of claim 4, an existing OS and an external device can be used as they are without using dedicated hardware (media device), and depending on the type of the external device regardless of the connection method. Connection control is possible, and an application program that can perform security management at low cost can be provided.

  According to the invention of claim 5, the existing OS and external device can be used as they are without using dedicated hardware (media device), and depending on the type of external device regardless of the connection method. Connection control is possible, and a storage medium storing an application program that can perform security management at low cost can be provided.

1 is a schematic block diagram showing an entire information processing system. The flowchart which an application program performs. The flowchart which an application program performs. Explanatory drawing showing the correlation between basic OS and an application program. The flowchart which the application program of other embodiment performs.

Next, an embodiment of an information processing system embodying the present invention will be described with reference to FIGS.
FIG. 1 is a schematic block diagram showing the entire information processing system.

  As shown in the figure, the information processing system 10 is composed of a computer, and includes a CPU 12, a ROM 14, a RAM 16, a keyboard 18, a mouse 20, a display device 22, a stationary (or built-in) storage device 24 (for example, a hard disk), Interfaces 26 for connecting to external devices 36 are connected to each other via a bus 30. The CPU 12 is connected to a BIOS 32 connected to the bus 30. The interface 26 is an interface for connecting the external device 36, and includes a SCSI controller, a USB controller, a LAN board, a sound board, and the like.

  The BIOS 32 exchanges information with the various hardware (input / output devices) connected to the bus 30. In addition, a basic OS (operating system) that operates on a computer is connected to the bus 30, and an external device recognition unit 34 that recognizes connection with the external device 36 is provided.

  Of the various types of hardware recognized by the external device recognition unit 34, the BIOS 32 allocates resources reserved in advance to the hardware connected by the non-PnP method, and uses the PnP method for the bus 30. For the connected hardware, resources required by the hardware are allocated to the hardware so as not to interfere with each other.

  The ROM 14 stores a basic OS (operating system) executed by the CPU 12. The RAM 16 is a working memory area for the CPU 12 or a storage memory area for temporarily storing data. As the basic OS, for example, Windows 2000 (registered trademark) can be cited as an existing OS that can connect an external device by the PnP method, but is not limited, and other OSs that can connect an external device by the PnP method are available. An existing OS may be used.

  The basic OS is a system device such as a keyboard 18, mouse 20, display device 22, storage device 24, LPT, COM port, and external device 36 connected via a SCSI controller, USB controller, sound board, LAN board, and the like. Are recognized and managed by the external device recognition unit 34.

  Then, when the external device recognition unit 34 recognizes the connection with the external device 36, the basic OS acquires basic information on whether or not the external device 36 is connected and detailed information requested to the external device.

  The detailed information includes the media type, connection method, manufacturer name, connection method, manufacturer name, and drive type of the external device. If the external device is a storage device, the storage capacity is also included in the detailed information.

  Media types include USB memory, PCMCIA memory, digital camera, digital video, CD (including those that can be written and writable or read only), DVD (including those that can be writable and writable or read only), Examples include, but are not limited to, BlueRay (registered trademark) (including writable and writable or read only), stationary / built-in HDD (hard disk), and the like.

  The connection methods include USB, IEEE 1394, SCSI, iSCSI, ATAPI, ATA, SSA, RAID, Fiber Channel, and the like, but these connection methods are examples and are not limited.

Drive types include, but are not limited to, removable and stationary / built-in types.
The storage device 24 stores an application program (hereinafter referred to as “this program”) that controls connection of an external device. When this program is activated, the functions of the filter unit 40, the application main unit 42, and the pseudo filter unit 44 are activated as shown in FIG. The filter unit 40 corresponds to a filter unit, the application main unit 42 corresponds to an application main unit, and the pseudo filter unit 44 corresponds to a pseudo filter unit. The function of each part will be described later. For example, the application main body 42 may have a function of creating and managing a database, or may have a spreadsheet function, and the function of the application main body is not limited at all.

  Now, the operation of the information processing system 10 configured as described above will be described with reference to FIGS. 2 and 3 are flowcharts of processing performed by the CPU 12 according to the program when the program is executed.

  The CPU 12 starts this program and starts up the pseudo filter unit 44, the filter unit 40, and the application main unit 42 that receive only the connection information of the external device from the basic OS 50 at the time of starting the application in S10 shown in FIG. (See FIG. 4).

  In S <b> 12, the CPU 12 notifies the basic OS 50 of the address of the pseudo filter unit 44 instead of the original filter unit 40. This address is for notifying the pseudo filter unit 44 only about the connection information of the external device. Therefore, information other than the connection information of the external device acquired by the basic OS 50 is notified to the filter unit 40. When the filter unit 40 receives information other than connection information (basic information and detailed information) of the external device from the basic OS 50, only the information necessary for the application main unit 42 is included in the application main unit 42. Notify and discard unnecessary information.

  In S14, the application stands by until an external device is connected. Even during this standby, the user can utilize the above-described functions prepared in the application main body 42 by operating the keyboard 18 and mouse 20 on the application main body 42.

  Next, the case where an external apparatus is connected by PnP while the program is running as described above will be described with reference to FIG. For convenience of explanation, it is assumed that the external device 36 shown in FIG. 1 can be connected by the PnP method, and this external device 36 is connected to the information processing system 10.

  When the external device 36 is connected to the interface 26 of the information processing system 10, in S 20, the CPU 12 performs a connection process with the external device recognition unit 34 via the interface 26 and the external device recognition unit 34. Specifically, when there is a connection request from the external device 36 to the interface 26, the external device recognition unit 34 recognizes the connection and notifies the basic OS 50 to that effect. Further, the interface 26 requests detailed information of the external device 36 from the external device 36, and notifies the basic OS 50 when the detailed information is received from the external device 36. Also, the interface 26 does not interfere with the hardware resources already connected to the external device 36 connected to the bus 30 by the PnP method based on the connection state of the hardware managed by the BIOS 32. Allocate resources required by the external device 36.

In S <b> 22, the CPU 12 passes connection information (that is, basic information and detailed information) of the external device 36 to be passed to the filter unit 40 from the basic OS 50 to the pseudo filter unit 44.
In S <b> 24, the CPU 12 passes connection information (that is, basic information and detailed information) of the external device 36 from the pseudo filter unit 44 to the application main body unit 42. As a result, the application main body 42 can recognize that the external device 36 is newly connected based on the basic information.

  In S26, since the application main body 42 recognizes that the external device 36 is newly connected based on the basic information of the connection information, the connection of the external device 36 is based on the detailed information of the external device. To control.

  Specifically, in the detailed information of the external device 36, a writable device that is the type of media, for example, a USB memory, a PCMCIA memory, a CD (writeable and writable), a DVD (writeable and writable) ), BlueRay (registered trademark) (writable and writable) that can be read and written and the drive type is removable, the application main unit 42 has a restriction after S28. Connect. As described above, the application main body 42 is preliminarily provided with data for determining to which external device connection control is performed.

  In the detailed information, when the external device 36 is a medium that can be read but cannot be written, such as a digital camera and digital video, or a stationary / built-in drive (hard disk), The application main body 42 notifies the basic OS 50 to make an unrestricted connection. In this case, the basic OS 50 does not perform connection refusal processing on the interface 26 because there is a notification that connection without restriction is performed.

In S <b> 28, the application main body 42 displays a menu for reading data in the external device 36 on the display device 22.
In S30, when the user operates the keyboard 18 and mouse 20 to instruct data read processing from the external device 36, the read processing is performed and the data read from the external device 36 is stored in the storage device. 24 is written. In the present embodiment, the number of reading processes in S30 is limited, and only once. A limit on the number of files stored in the external device 36 and a limit on the file capacity may be provided.

  When the writing from the external device 36 to the storage device 24 is completed, the application main body 42 issues a disconnection instruction to the basic OS 50 in S32. Upon receiving this disconnection instruction, the basic OS 50 performs a disconnection process via the interface 26 to disconnect the connection with the external device 36, that is, the communication.

  Unlike the present program, in a conventional application program that does not perform connection control, that is, a general application program, when the program is started, the pseudo filter unit 44 is not created, and the filter unit and the application body Part is developed. When the external device is connected, the filter unit receives connection information (basic information and detailed information) of the external device acquired by the basic OS 50. In the filter unit, the detailed information is discarded, only the basic information is passed to the application main unit, and it is recognized only that the external device is connected. Since the connection is not rejected in the application main unit, data can be written if the external device is writable, which may cause information leakage.

According to this embodiment, the following effects can be obtained.
(1) The information processing system 10 of the present embodiment can be connected to an external device by the PnP method, and includes basic information on whether or not the external device is connected, and the media of the external device transmitted from the external device. A computer is provided with which the basic OS acquires detailed information including type and drive type. Further, the information processing system 10 includes a storage device 24 (storage means) that stores the program.

  The program is executed by a computer to function as a filter unit 40 (filter unit), a pseudo filter unit 44 (pseudo filter unit), and an application main unit 42 (application main unit). When the external device 36 is connected, the pseudo filter unit 44 (pseudo filter unit) receives basic information and detailed information of the external device 36 from the basic OS instead of the filter unit 40 (filter unit), and the application main body The unit 42 (application body means) receives the basic information and detailed information of the external device 36 received by the pseudo filter unit 44, and performs connection control with the external device 36 based on the basic information and detailed information.

  Further, the filter unit 40 (filter unit) receives information other than the basic information and detailed information of the external device 36 from the basic OS 50 and passes necessary information to the application main unit 42 (application main unit). As a result, according to the information processing system 10 of the present embodiment, an existing OS and an external device can be used as they are without using dedicated hardware (media device), and an external device can be used regardless of the connection method. Connection control can be performed according to the type of device, and security management can be performed at low cost.

  Further, according to the present embodiment, connection information of an external device can be received from the basic OS 50 of the information processing system 10 via the pseudo filter unit 44. For this reason, since it is only necessary to set a condition for performing connection restriction in the application main body 42, it is not necessary to pre-register data of an external device for performing connection restriction in the information processing system 10. In particular, in Patent Document 2, the use of an external memory is permitted by serial number pre-registration, but in this embodiment, such serial number pre-registration is not necessary.

  (2) In the information processing system 10 according to the present embodiment, the application main body 42 (application main body means) has a removable drive type as detailed information of the external device 36 received from the pseudo filter section 44 (pseudo filter means). In some cases, only reading to the external device 36 is permitted. As a result, according to the information processing system 10 of the present embodiment, writing to the removable external device 36 is not permitted, so that information leakage from the information processing system 10 can be prevented and security management can be improved. In addition, since the external device 36 can be read, necessary data can be captured and stored in the information processing system 10. That is, the external device capable of writing data can be used by setting the conditions for only reading data.

  (3) In the information processing system 10 of the present embodiment, the application main body 42 (application main body means) is a stationary or built-in drive type that is detailed information of the external device 36 received from the pseudo filter section 44 (pseudo filter means). In the case of this device, reading and writing to the external device 36 are permitted. As a result, the external device 36 can be read and written by assuming that there is no information leakage.

  (4) The program of the present embodiment can be connected to an external device by the PnP method, and the external device transmitted from the external device and basic information on whether or not the external device is connected when the external device is connected It is a program used for the information processing system 10 provided with the computer from which the basic OS acquires detailed information including the media type and drive type. The program causes the computer to function as filter means, pseudo filter means, and application body means. Then, when the external device 36 is connected, the pseudo filter means receives basic information and detailed information of the external device 36 from the basic OS instead of the filter means. The application body means receives the basic information and detailed information of the external device 36 received by the pseudo filter means, and controls connection with the external device 36 based on the basic information and detailed information. Further, the filter means receives information other than the basic information and detailed information of the external device 36 from the basic OS, and passes necessary information to the application main body means.

  As a result, according to this program, the existing OS and external device can be used as they are without using dedicated hardware (media device), and depending on the type of external device regardless of the connection method. Connection control is possible, and an application program that can perform security management at low cost can be provided.

  (5) The storage device 24 (storage means) of the present embodiment stores the program of (4) above as a storage medium. As a result, the storage device 24 of the present embodiment can use an existing OS and external device as they are without using dedicated hardware (media device), and the type of external device regardless of the connection method. Accordingly, it is possible to provide a storage medium storing an application program that enables connection control in accordance with the security control and can perform security management at low cost.

(Second Embodiment)
Next, a second embodiment will be described with reference to FIG. Since the information processing system 10 of the second embodiment is the same as the hardware of the information processing system 10 of the first embodiment, the same components as those of the first embodiment are denoted by the same reference numerals.

  In the second embodiment, as shown in FIG. 5, in the flowchart of the process described in FIG. 3 of the first embodiment, S28 and S30 are omitted, and the process of S32 is performed after S26. It is different from the form. That is, in the second embodiment, in S26, in the detailed information of the external device 36, in the detailed information of the external device 36, a writable device such as a USB memory, a PCMCIA memory, a CD (writeable and writable), DVD ( If the drive type is removable and the drive type is removable such as BlueRay (registered trademark) (writeable and writable), a disconnection instruction is issued in S32. .

Therefore, in the second embodiment, it is possible to make it impossible to connect and use the removable external device 36 that can be written to the information processing system 10.
Thus, by having the information processing system 10, the program, and the storage unit (storage medium) of the second embodiment, the second embodiment has the above (1), (3) to (5) of the first embodiment. ).

The embodiment of the present invention can be modified and embodied as follows.
In the embodiment, the storage medium for storing the application program is a hard disk that is the storage device 24. However, a semiconductor storage device including a floppy disk (registered trademark), CD, DVD, USB memory, etc., DAT (registered trademark) It may be a tape, a Blu-ray (registered trademark) disk, or the like.

  -In 1st Embodiment, the frequency | count of the reading process of S30 was restrict | limited and it was set as 1 time, However, You may restrict | limit to multiple times.

10 ... Information processing system, 12 ... CPU, 14 ... ROM, 16 ... RAM,
18 ... keyboard, 20 ... mouse, 22 ... display device,
24 ... Storage device (storage means), 26 ... Interface, 30 ... Bus,
32 ... BIOS, 34 ... external device recognition unit,
40: Filter section (filter means),
42... Application body (application body means)
44 ... Pseudo filter part (pseudo filter means), 50 ... Basic OS.

Claims (5)

The basic OS can be connected to an external device by a plug-and-play method, and includes basic information on whether or not the external device is connected and detailed information including the media type and drive type of the external device transmitted from the external device. In an information processing system equipped with a computer acquired by
Comprising storage means for storing a program for controlling connection with an external device;
The program is executed by the computer to cause the computer to function as filter means, pseudo filter means, and application main body means,
The pseudo filter means receives basic information and detailed information of the external device from the basic OS instead of the filter means when the external device is connected.
The application body means receives basic information and detailed information of the external device received by the pseudo filter means, and performs connection control with the external device based on the basic information and detailed information.
An information processing system, wherein the filter means receives information other than basic information and detailed information of the external device from the basic OS and passes necessary information to the application main body means.   2. The information processing according to claim 1, wherein when the drive type, which is detailed information of the external device received from the pseudo filter unit, is removable, the application main body unit permits only reading to the external device. system.   2. The application main body unit permits reading and writing to the external device when the drive type, which is detailed information of the external device received from the pseudo filter unit, is a stationary or built-in device. Information processing system described in 1. It can be connected to an external device by a plug-and-play method, and includes basic information on whether or not the external device is connected when the external device is connected, the media type of the external device transmitted from the external device, and the drive type A program used in an information processing system including a computer from which a basic OS acquires detailed information,
The program causes the computer to function as filter means, pseudo filter means, and application main body means,
The pseudo filter means receives basic information and detailed information of the external device from the basic OS instead of the filter means when the external device is connected.
The application body means receives basic information and detailed information of the external device received by the pseudo filter means, and performs connection control with the external device based on the basic information and detailed information.
A program characterized in that the filter means receives information other than basic information and detailed information of the external device from the basic OS and passes necessary information to the application main body means.   A storage medium for storing the application program according to claim 4.

Images