JP2011147088A - Information processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely prevent electronic information from being taken out in an unauthorized manner using an auxiliary storage device such as a USB memory. <P>SOLUTION: When a storage instruction of data into a USB memory 50 is transmitted (S14), a database server 20 generates an encryption key and a decryption key (S18) and then encrypts the designated data using the encryption key (S20). The encrypted data are stored in the USB memory 50 (S22, S24). The database server 20 transmits the decryption key and identification information to a manager PC 30 (S30). The manager PC 30 determines whether to transmit the decryption key to a PC 10A based on the identification information (S32) and then further determines whether to finally transmit the decryption key based on approval information inputted by a manager (S36). If a final approval is obtained, the decryption key is transmitted to the PC 10A (S38), and the encrypted data being stored in the USB memory 50 are decrypted by the decryption key (S44). <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information processing system that prevents illegal take-out of electronic information. Specifically, when storing predetermined electronic information in an auxiliary storage device attached to another information processing device, the electronic information is encrypted, temporarily stored in the auxiliary storage device, and a determination according to the importance of the electronic information, etc. Make a decision based on the approval information input by the input unit, and save it in the auxiliary storage device by transmitting a decryption key for decrypting the electronic information to another information processing device based on the judgment result Thus, it is possible to decrypt the encrypted electronic information.

  In recent years, a removable disk such as a USB memory has been widely used as an auxiliary storage device capable of carrying copied electronic information (data). A removable disk such as a USB memory has been reduced in size and increased in capacity, and has been widely used by users as an easy storage medium. On the other hand, since a USB memory or the like can be easily taken out because of its small size, there is a high risk of loss, theft, or illegal take-out, and there is a problem that it easily leads to leakage of confidential information.

  As a means of solving illegal data export, for example, when copying electronic data to be managed, the expiration date of the copy data is added to both the original data of the copy source and the copy destination data, and the copy data is returned from the copy destination. There has been proposed a fraud prevention device that monitors whether or not a copy data that has not returned by the expiration date is detected, determines that the data has been illegally taken out, and notifies the administrator by a notification means (see Patent Document 1). .

  In addition, when a user who is not properly logged in attempts to illegally take electronic data, the fake data is transferred indefinitely, and information relating to the user who is not properly logged in is recorded as log information. A monitoring / checking system has been proposed (see Patent Document 2).

JP 2004-288083 A JP 2006-301798 A

However, the illegal take-out prevention methods disclosed in Patent Documents 1 and 2 have the following problems.
(I) In the unauthorized take-out prevention method disclosed in Patent Document 1, when copy data that has not been returned by the expiration date is detected, it is determined that the take-out is unauthorized and the system notifies the administrator. If the copied person does not return the copied data, the data itself is taken out as it is. Therefore, if the person who took the data is malicious, the electronic information will be leaked to the outside, and the fundamental problem of prohibiting the data from being taken out cannot be solved. There is.
(Ii) In the illegal take-out prevention method disclosed in Patent Document 2, if a person with a legitimate authority has malicious intent, it is possible to log in legitimately, so that illegal take-out of data becomes possible. There is.
(Iii) In cases like (i) and (ii) above, a method of encrypting data is also performed when storing data in a USB memory or the like, but generally a decryption key is stored. Generated by the person (the person who performs encryption), the problem remains that the data is illegally taken out if the person who performs the storage process is malicious.

  Therefore, the present invention has been made in view of the above problems, and an object thereof is to provide an information processing system that can reliably prevent illegal take-out of electronic information by an auxiliary storage device such as a USB memory. There is.

  In order to solve the above-described problems, the information processing system according to the present invention is illegal in storing electronic information in an auxiliary storage device when storing predetermined electronic information in an auxiliary storage device attached to another information processing device. An information processing system that uses an information processing device to determine whether or not to take out the information processing device, wherein the information processing device associates and stores electronic information and identification information for identifying the type of the electronic information, and a database Generated by the key generation unit, the key generation unit for generating the encryption key for encrypting the predetermined electronic information stored in the key, the decryption key for decrypting the encrypted electronic information, and the key generation unit Using an encryption key, an encryption unit that encrypts electronic information instructed to be stored by another information processing apparatus, and identification information corresponding to the electronic information encrypted by the encryption unit are stored in a database. A control unit that determines whether or not to transmit the decryption key to another information processing device based on the acquired identification information, and the other information processing device that receives the decryption key based on the determination result of the control unit And an input unit for inputting approval information indicating whether or not to finally transmit, and the control unit transmits the decryption key to another information processing apparatus based on the approval information input by the input unit This is a final decision as to whether or not to do so.

  In the information processing system according to the present invention, when an instruction to save electronic information from another information processing device to the auxiliary storage device is transmitted, the key generation unit encrypts the electronic information with the encryption key A decryption key for decrypting the digitized electronic information is generated. In the encryption unit, the specified data is encrypted using the encryption key, and the encrypted electronic information is stored in the auxiliary storage device.

  In the control unit, identification information corresponding to the electronic information encrypted by the encryption unit is acquired from the database, and it is determined whether or not to transmit the decryption key to another information processing apparatus based on the acquired identification information. Is done. Further, in the input unit, approval information indicating whether or not the decryption key may be transmitted to another information processing device based on the result determined by the control unit is input. The approval information is input by an administrator, for example. The control unit determines whether to finally transmit the decryption key to another information processing apparatus based on the approval information input by the input unit. When the control unit determines that the decryption key is to be transmitted to another information processing apparatus, the decryption key is transmitted to the other information processing apparatus.

  The decryption unit of the other information processing apparatus uses the decryption key transmitted from the information processing apparatus to decrypt the encrypted electronic information stored in the auxiliary storage device. The decrypted electronic information is stored in the auxiliary storage device. On the other hand, when the control unit determines that the decryption key is not transmitted to another information processing apparatus, the decryption key is discarded.

  In the present invention, the auxiliary storage device means a storage device that can be removed from the information processing device and carried. For example, an external hard disk, a USB memory, an SD card, a floppy (registered trademark) disk, etc. Includes removable disks and the like.

  According to the present invention, when the electronic information stored in the database is stored in the auxiliary storage device, in addition to the determination based on the identification information associated with the electronic information, based on the approval information indicating the final determination. Thus, since it is determined whether or not to transmit the decryption key to another information processing apparatus, illegal take-out of electronic information can be prevented more reliably. As a result, information leakage of electronic information by a malicious person can be prevented.

It is a figure which shows the structural example of the information processing system which concerns on one Embodiment of this invention. It is a figure which shows the block structural example of PC for a person in charge. It is a figure which shows the block structural example of a database server. It is a figure which shows the structural example of a database. It is a figure which shows the structural example of PC for managers. It is a figure which shows the management table structural example which shows the propriety of transmission permission of a decoding key. It is a flowchart which shows an example of operation | movement of an information processing system.

Hereinafter, the best mode for carrying out the invention (hereinafter referred to as an embodiment) will be described.
[Configuration example of information processing system]
When the data (electronic information) of the database 206 is stored in the USB memory 50 attached to the PC 20 for the person in charge, the information processing system 500 according to the present invention once encrypts the data and stores it in the USB memory 50 for management. The encrypted data can be decrypted by transmitting the decryption key Kd to the personal computer 10 only when the personal computer 30 determines that the confidentiality and importance of the designated data are low. . As shown in FIG. 1, the information processing system 500 includes a PC 10A for the person in charge A (hereinafter, the PC 10A for the person in charge A is referred to as PC 10A) and a PC 10B for the person in charge B (hereinafter referred to as PC 10B for the person in charge B). PC 10C for the person in charge C (hereinafter, the PC 10C for the person in charge C is referred to as PC 10C), the database server 20, and the administrator PC 30. The PCs 10A, 10B, and 10C for the person in charge A, the database server 20, and the administrator PC 30 are electrically connected via the LAN cable 40. The person-in-charge A PCs 10A, 10B, and 10C (hereinafter, the persons-in-charge A PCs 10A, 10B, and 10C may be referred to as person-in-charge PCs 10) constitute an example of another information processing apparatus. An example of the first information processing apparatus is configured, and the administrator PC 30 configures an example of the second information processing apparatus.

[Configuration example of PC for person in charge]
As shown in FIG. 2, the person-in-charge PC 10 includes a CPU (Central Processing Unit) 100, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 104, an operation unit 106, a USB interface 109, a decoding unit 110, A display unit 112 and a communication unit 114 are provided. CPU 100, ROM 102, RAM 104, operation unit 106, USB interface 109, decryption unit 110, display unit 112, and communication unit 114 are electrically connected to each other via a bus 116.

  The ROM 102 stores a program for operating the person-in-charge PC 10. The RAM 104 is used as a temporary storage area for programs read from the ROM 102. The CPU 100 reads a program stored in the ROM 102 and executes processing according to the program. The communication unit 114 functions as an input / output interface, and is connected to each of the database server 20 and the administrator PC 30 via the LAN cable 40 (see FIG. 1).

  A USB memory 50 is detachably attached to the USB interface 108. The USB memory 50 is an example of an auxiliary storage device, is a portable storage medium, and has a predetermined storage capacity. In the description to be described later, the decryption function is provided on the person-in-charge PC 10 side, but the decryption function may be provided on the USB memory 50 side. As the auxiliary storage device, in addition to the USB memory 50, for example, an SD memory card, a compact flash (registered trademark), a floppy (registered trademark) disk, a removable medium such as an optical disk, an external hard disk, or the like can be used. .

  Based on the decryption instruction from the CPU 100, the decryption unit 110 decrypts the encrypted data read from the USB memory 50 using the decryption key Kd transmitted from the administrator PC 30. When the USB memory 50 is provided with a decryption function, when the decryption key Kd is supplied from the administrator PC 30, the decryption key Kd is supplied from the person-in-charge PC 10 to the USB memory 50. In the USB memory 50, the decryption key Kd is used to decrypt the encrypted data.

  The display unit 112 includes, for example, a liquid crystal display, an organic EL (Electroluminescence) display, and the like, and displays an operation screen for the person in charge to specify data to be stored stored in the database 206. The operation unit 106 includes, for example, a keyboard and a mouse, and receives selection information based on designation data instructed to be saved by a person in charge and supplies the selection information to the CPU 100.

  When an instruction for saving predetermined data stored in the database 206 is input by the person in charge on the operation screen of the display unit 112, the CPU 100 inputs the input storage instruction (selection information) via the LAN cable 40. Send to. In addition, when the encrypted data corresponding to the save instruction is transmitted from the database server 20, the CPU 100 saves the encrypted data in the USB memory 50 attached to the person-in-charge PC 10. In addition, when the decryption key Kd is transmitted from the administrator PC 30 via the LAN cable 40, the CPU 100 supplies the decryption unit Kd with the decryption key Kd and the encryption stored in the USB memory 50. Data is read and supplied to the decoding unit 110. Further, when the decryption process by the decryption unit 110 is completed, the CPU 100 supplies the decrypted decrypted data to the USB memory 50 via the USB interface 108.

[Example of database server configuration]
As illustrated in FIG. 3, the database server 20 includes a CPU 200, a ROM 202, a RAM 204, a database 206, an encryption unit 210, a key generation unit 212, and a communication unit 214. The configurations and operations of the ROM 202 and the RAM 204 are the same as those of the ROM 102 and the RAM 104 of the person-in-charge PC 10 described above, and a description thereof will be omitted. CPU 200, ROM 202, RAM 204, database 206, encryption unit 210, key generation unit 212, and communication unit 214 are electrically connected to each other via a bus 216. The communication unit 214 functions as an input / output interface and is connected to the person-in-charge PC 10 and the administrator PC 30 via the LAN cable 40 (see FIG. 1).

  The database 206 stores department management information such as sales information and customer information in a predetermined department. Each department management information is associated with identification information A indicating the level of confidentiality and importance as shown in FIG. For example, the sales information is associated with the identification information “A1”, and the customer information is associated with the identification information “A2”. In this example, the greater the number assigned to the identification information A, the higher the sensitivity and importance of the information. Therefore, customer information is more sensitive and important than sales information. This department management information and identification information A associating work, updating work, and the like are performed by a person (for example, an administrator) having a predetermined authority with access restrictions. In the above-described example, the identification information A is assigned for each sales information and customer information. However, the identification information A may be set for each lower level information such as name, address, and account number. it can.

  When an instruction to save predetermined data is supplied from the person-in-charge PC 10, the key generation unit 212 decrypts the encryption key Ke for encrypting the designated data designated to be saved by the person in charge and the encrypted data. And a decryption key Kd for generating the data according to the designated data. The encryption key Ke and the decryption key Kd may be the same or different. If the encryption key Ke and the decryption key Kd are different from each other, the decryption key Kd is transmitted to the administrator PC 30 and does not remain in the database server 20. Therefore, even when the database server 20 is illegally accessed, It is possible to prevent the decryption key Kd from leaking. The key generation unit 212 supplies the generated encryption key Ke to the encryption unit 210 and supplies the decryption key Kd to the communication unit 214.

  The encryption unit 210 encrypts the specified data read from the database 206 using the encryption key Ke supplied from the key generation unit 212 based on the encryption processing instruction from the CPU 200. As the encryption method, for example, DES (Data Encryption Standard), AES (Advanced Encryption Standard), or the like is used. The encryption process can also be performed by the CPU 200.

  When an instruction to save designated data is supplied from the person-in-charge PC 10, the CPU 200 reads the designated data from the database 206 and supplies it to the encryption unit 210, and encrypts an encryption instruction for encrypting the read designated data. To the conversion unit 210. Further, when the encryption of the designated data by the encryption unit 210 is completed, the CPU 200 supplies the encrypted data to the person-in-charge PC 10 that has issued the designated data storage processing request via the communication unit 214. Further, when the encryption of the designated data is completed, the CPU 200 reads out and obtains the identification information A associated with the designated data instructed to be stored from the database 206, and the decryption key Kd supplied from the key generation unit 212. The identification information A is transmitted to the administrator PC 30 via the communication unit 214. At this time, the user ID input at the time of login of the person-in-charge PC 10 may be acquired, and the acquired user ID may be transmitted to the administrator PC 30 together with the decryption key Kd and the identification information A. As will be described later, this user ID is used when prohibiting data from being taken out only for a specific individual.

[Configuration example of administrator PC]
As shown in FIG. 5, the administrator PC 30 includes a CPU 300, a ROM 302, a RAM 304, a storage unit 306, a display unit 308, an input unit 310, and a communication unit 312. Each of the CPU 300, ROM 302, RAM 304, storage unit 306, display unit 308, input unit 310, and communication unit 312 is electrically connected to each other via a bus 314. Note that the configurations and operations of the ROM 302 and RAM 304 are the same as those of the ROM 102 and RAM 104 of the person-in-charge PC 10 described above, and a description thereof will be omitted. The communication unit 312 functions as an input / output interface and is connected to each of the person-in-charge PC 10 and the database server 20 via the LAN cable 40 (see FIG. 1).

  The storage unit 306 has a management table TB in which transmission permission / inhibition information P indicating whether or not the decryption key Kd transmitted from the database server 20 is transmitted to the person-in-charge PC 10 is stored. In the management table TB, as shown in FIG. 6, the identification information A transmitted from the database server 20 is associated with transmission permission / inhibition information P indicating whether transmission of the decryption key Kd to the person-in-charge PC 20 is permitted. Is remembered. For example, the identification information “A1” is associated with “permission” information indicating permission to take data outside, and the identification information “A2” is “not permitted” indicating non-permission (prohibition) of taking data outside. "Permit" information is associated. Access to this management table TB is restricted so that it can be updated and rewritten only by an authorized administrator.

  When the identification information A and the decryption key Kd are transmitted from the database server 20, the CPU 300 refers to the management table TB, acquires the transmission permission information P corresponding to the identification information A, and based on the acquired transmission permission information P. It is then determined whether or not to send the decryption key Kd to the person-in-charge PC 10. For example, if the transmission permission / inhibition information P acquired from the management table TB is “permitted”, the CPU 300 determines that the decryption key Kd may be transmitted to the person-in-charge PC 10. On the other hand, when the transmission permission / inhibition information P acquired from the management table TB is “non-permitted”, it is determined that the decryption key Kd is not transmitted to the person-in-charge PC 10.

  The display unit 308 includes a liquid crystal display, an organic EL display, and the like, and displays a selection screen for the administrator to select whether to permit transmission of the decryption key Kd to the person-in-charge PC 10 or not. For example, the identification information A indicating the level of importance and confidentiality of the designated data instructed to be stored is displayed on the selection screen, or the user ID of the person in charge who has logged into the person-in-charge PC 10 is displayed. This display can support the final determination as to whether or not to transmit the administrator's decryption key Kd to the person-in-charge PC 10. The input unit 310 includes, for example, a keyboard, a mouse, and the like, and approval information (transmission) indicating whether or not transmission of the decryption key Kd input by the administrator on the selection screen to the responsible person PC 10 is finally permitted. Is accepted and cannot be transmitted) and supplied to the CPU 100.

[Operation example of information processing system]
Next, an example of the operation of the information processing system 500 according to the present invention will be described. In the following description, an operation example of the information processing system 500 when an operation of storing predetermined data in the database 206 is performed in the USB memory 50 inserted in the slot of the person-in-charge A PC 10A will be described.

  As shown in FIG. 7, the person in charge A inputs the user ID and password on the initial screen displayed on the display unit 112 of the PC 10A in step S10. Subsequently, in step S12, the person in charge A inserts the USB memory 50 into the slot of the person in charge A PC 10A. In step S14, the person in charge A selects predetermined data stored in the database 206 to be stored in the USB memory 50 on the operation screen of the display unit 112. In step S <b> 16, when data to be stored is selected by the person in charge A, the CPU 100 of the PC 10 </ b> A generates selection information based on the data selected by the person in charge A and supplies it to the CPU 200 of the database server 20.

  In step S18, when the selection information is transmitted from the PC 10A, the key generation unit 212 of the database server 20 generates an encryption key Ke for encrypting the designated data and decryption for decrypting the encrypted data. Generate a key Kd. Subsequently, in step S20, the encryption unit 210 of the database server 20 encrypts the designation data read from the database 206 using the encryption key Ke generated by the key generation unit 212. In step S22, the database server 20 transmits the encrypted data encrypted by the encryption unit 210 to the PC 10A via the LAN cable 40.

  In step S24, the PC 10A performs a storing process for storing the encrypted data transmitted from the database server 20 in the USB memory 50 inserted in the slot. Thereby, the encrypted data is stored in the USB memory 50 in step S26. At this stage, since the encrypted data is stored in the USB memory 50, the data cannot be decrypted even if the USB memory 50 is removed from the PC 10A and read by another PC.

  In step S28, the CPU 200 of the database server 20 acquires the designated data selected by the person in charge A from the selection information transmitted from the PC 10A, and obtains the identification information A associated with the obtained designated data from the database 206. In step S30, the CPU 200 transmits the identification information A acquired from the database 206 and the decryption key Kd generated by the key generation unit 212 to the administrator PC 30 via the communication unit 214. For example, when the data selected by the person in charge A is “customer unit price”, the identification information “A1” is acquired by referring to the database 206, and the acquired identification information “A1” is transmitted to the administrator PC 30. To do. If the data selected by the person in charge A is “account number”, the identification information “A2” is acquired by referring to the database 206, and the acquired identification information “A2” is transmitted to the administrator PC 30. To do.

  Next, in step S32, the administrator PC 30 refers to the management table TB using the identification information A transmitted from the database server 20, and acquires the transmission permission / inhibition information P associated with the identification information A. Based on the transmission permission / inhibition information P, it is determined whether or not to transmit the decryption key Kd to the PC 10A. That is, it is determined whether or not the confidentiality and importance of the designated data instructed to be stored by the person in charge A are high. For example, the CPU 300 of the administrator PC 30 acquires “permitted” information from the management table TB when the identification information A is “A1”, and from the management table TB when the identification information A is “A2”. By acquiring “non-permitted” information, it is determined whether the confidentiality and importance of the designated data are high. If the administrator PC 30 determines that the confidentiality and importance of the designated data are high based on the transmission permission / inhibition information P (non-permission), the process proceeds to step S40. If it is determined that the importance is not high, the process proceeds to step S34.

  Subsequently, if it is determined that the confidentiality and importance of the designated data are not high, the display unit 308 logs in to the identification information A indicating the confidentiality and importance level of the designated data and the PC 10A in step S34. And a selection button (transmission permission button, transmission non-permission button) for selecting whether or not to transmit the decryption key Kd is displayed on the selection screen. The information displayed on this selection screen is used as support information when the administrator finally determines whether or not to transmit the decryption key Kd to the PC 10A.

  In step S <b> 36, the CPU 300 of the administrator PC 30 makes a final determination as to whether or not to transmit the decryption key Kd to the PC 10 </ b> A based on the approval information input by the input unit 310. When the transmission permission button is selected by the administrator on the selection screen, the CPU 300 of the administrator PC 30 obtains the final approval by the administrator based on the approval information indicating the transmission permission supplied from the input unit 310. As a result, the process proceeds to step S38. On the other hand, when the transmission non-permission button is selected by the administrator on the selection screen, it is assumed that final approval by the administrator cannot be obtained based on the approval information indicating transmission non-permission supplied from the input unit 310. Proceed to S40. In this case, since the confidentiality of the designated data is high, the decryption key Kd is discarded so that the designated data cannot be decrypted in step S40. If the approval information cannot be obtained immediately due to the absence of the administrator, for example, for selecting whether or not the decryption key Kd can be transmitted to a mobile phone or a portable PC that is always carried by the administrator. Information can also be sent to get the manager's final decision.

  When the administrator's final permission is obtained, the administrator PC 30 transmits the decryption key Kd to the PC 10A via the LAN cable 40 in step S38. In step S42, when the decryption key Kd is transmitted from the administrator PC 30, the PC 10A reads the encrypted data stored in the USB memory 50 and temporarily stores it in the RAM 104 or the like. In step S44, the encrypted data is decrypted using the decryption key Kd transmitted from the administrator PC. When the data decryption is completed, the storage process is again performed on the USB memory 50 inserted into the slot of the PC 10A in steps S46 and S48, and the decrypted data is stored.

  In the above-described example, the decryption process is performed on the PC 10A side for the person in charge A, but can be performed on the USB memory 50 side. Alternatively, a password based on the decryption key may be generated by the administrator PC 30, and the generated password may be transmitted from the administrator PC 30 to the PC 10A instead of the decryption key Kd. In this case, the password is displayed on the screen of the display unit 112 of the person-in-charge PC 10, and when the password is input by the person in charge A, the encrypted data is decrypted and stored in the USB memory 50.

  As described above, according to the present embodiment, specified data is encrypted and temporarily stored in the USB memory 50. Even if the USB memory 50 is illegally taken out at this time, the data is not stored. It can be prevented from being viewed illegally. In addition, when the decryption of the encrypted data stored in the USB memory 50 is permitted, the administrator PC 30 determines whether to transmit using the management table TB and transmits the approval information input by the input unit 310. Since whether or not the decryption key Kd can be transmitted is determined in the determination of whether or not the decryption key Kd can be transmitted, it is possible to reliably and easily prevent outflow (leakage) of highly sensitive and highly important data to the outside. Further, since the administrator only needs to make a final determination after determining (supporting) whether or not the decryption key Kd can be transmitted using the management table TB, the burden on the determination can be reduced. Furthermore, since the person who performs the data storage (person in charge) is different from the person who performs the decryption judgment (administrator PC 30), the decryption key Kd cannot be obtained even if the person in charge is malicious. The outflow due to taking out can be surely prevented.

  It should be noted that the technical scope of the present invention is not limited to the above-described embodiments, and includes those in which various modifications are made to the above-described embodiments without departing from the spirit of the present invention. In the above-described embodiment, the database server 20 and the administrator PC 30 are provided independently. However, the database server 20 and the administrator PC 30 may be configured as one information processing apparatus. In this case, the number of devices can be reduced by one, and components such as the communication units 214 and 314 are not necessary, so that a system can be constructed with a lower cost. Further, since the decryption key Kd and the identification information A need not be transmitted, the processing speed can be increased. Further, the identification information A is not limited to confidentiality and importance. In addition, any one of confidentiality and importance can be associated with department management information.

10 ... PC for person in charge, 10A ... PC for person in charge A, 10B ... PC for person in charge B, 10C ... PC for person in charge C, 20 ... Database server, 30 ... PC for administrator, 50 ... USB memory, 108 ... USB interface, 110 ... decryption unit, 200 ... CPU, 206 ... database, 210 ... encryption unit, 212 ... Key generation unit, 214 ... communication unit, 300 ... CPU, 306 ... storage unit, 308 ... display unit, 310 ... input unit, 312 ... communication unit, Ke ... Encryption key, Kd ... Decryption key, TB ... Management table

Claims (5)

An information processing system for determining by an information processing device whether or not the storage of the electronic information in the auxiliary storage device is illegally taken when storing predetermined electronic information in an auxiliary storage device attached to another information processing device There,
The information processing apparatus includes:
A database that stores the electronic information in association with identification information for identifying the type of the electronic information;
A key generation unit that generates an encryption key for encrypting the predetermined electronic information stored in the database, and a decryption key for decrypting the encrypted electronic information;
An encryption unit that encrypts the electronic information instructed to be stored by the other information processing apparatus using the encryption key generated by the key generation unit;
Whether to acquire the identification information corresponding to the electronic information encrypted by the encryption unit from the database, and to transmit the decryption key to the other information processing apparatus based on the acquired identification information A control unit for determining
An input unit for inputting approval information indicating whether or not to finally transmit the decryption key to the other information processing device based on a determination result of the control unit;
The control unit makes a final determination as to whether or not to transmit the decryption key to the other information processing device based on the approval information input by the input unit. . The information processing system according to claim 1, wherein the identification information is information indicating at least an importance level and / or a confidentiality level of the electronic information. The control unit of the information processing apparatus includes:
The information processing system according to claim 1 or 2, wherein when it is determined that the decryption key is not transmitted to the other information processing apparatus, the decryption key is discarded. A table for storing transmission permission information indicating whether or not to transmit the decryption key to the other information processing apparatus in association with the identification information;
Whether the control unit acquires transmission permission information associated with the identification information with reference to the table, and determines whether to transmit the decryption key to the other information processing apparatus based on the transmission permission information The information processing system according to any one of claims 1 to 3, wherein the information processing system is determined. The information processing device includes a first information processing device having the database, the key generation unit, and the encryption unit, and a second information processing device having the control unit and the input unit,
The first information processing apparatus includes:
The electronic information encrypted by the encryption unit is transmitted to the auxiliary storage device via the other information processing device, and the decryption key and the identification information are transmitted to the second information processing device. Have a communication department,
The second information processing apparatus
The communication unit that transmits the decryption key to the other information processing apparatus when the control unit determines to transmit the decryption key to the other information processing apparatus. The information processing system according to claim 4.

Images