JP2013122791A - Electronic apparatus, control method thereof and control program thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem in which: there is disclosed a technique that a command for corrupting data stored is transmitted and security, confidentiality, is enhanced when an electronic apparatus is lost; however, when the lost electronic apparatus is found, the technique hardly corresponds to flexibility, a degree of freedom of operation, such as an immediate stop of data corruption; and the degree of freedom thereof is hardly enhanced.SOLUTION: An electronic apparatus of one embodiment communicates with an external device and is provided with an instructions receiving section capable of receiving start prohibition instructions, cryptographic key deletion instructions and internal data deletion instructions imparted with execution delay time output from the external device. Further, the electronic apparatus is provided with an instructions processing section that, when the start prohibition instructions, the cryptographic key deletion instructions and the internal data deletion instructions imparted with the execution delay time are received, prohibits its own start, performs deletion processing of the cryptographic key stored and delays deletion processing of internal data stored by the delay time.

Description

  Embodiments described herein relate generally to an electronic device, an electronic device control method, and an electronic device control program.

  In recent years, electronic devices capable of communicating with external devices and executing commands instructed from the external devices are becoming popular.

  For example, there is a technique capable of setting a command start time in an electronic device (external storage medium such as a USB memory) having a wireless communication function.

  Further, in the electronic device, for example, when a delete command is received from the external control device, the timer set for the time is started, and when the set time is up, the stored data can be deleted There is.

  And, applying these technologies, for example, if the electronic device is lost, consider sending a command to the electronic device, destroying the data stored in the electronic device, and improving security (confidentiality) Has been.

  However, in the above example, since the above command is executed with a timer time set in advance in the electronic device, for example, when a lost electronic device is found, the above unusable command is immediately released and the above electronic command is released. There was a problem that it was difficult to cope with the flexibility (operation freedom) such as canceling the data destruction of the device.

  For this reason, it has been a problem to improve the degree of freedom of operation with respect to the processing of the electronic device internal data while considering the security of the electronic device internal data.

JP 2006-330949 A

  There is a technique for improving security (confidentiality) by transmitting a command for destroying stored data when an electronic device is lost. However, when a lost electronic device is found, there is a problem that it is difficult to deal with the flexibility (freedom of operation) such that data destruction is stopped immediately, and improving the flexibility is an issue. It was.

  The electronic device according to the embodiment includes an instruction receiving unit that communicates with the first external device and receives an encryption key deletion instruction output from the first external device.

  In addition, when the encryption key deletion instruction is received, a processing unit that outputs the stored encryption key to the second external device and performs a deletion process is provided.

1 is a system diagram showing an example of a system in which an electronic device according to an embodiment and a server are connected. 1 is an external view showing an external appearance of an electronic apparatus according to an embodiment. 1 is a block diagram illustrating an example of a configuration of an electronic device according to an embodiment. The figure which shows an example of the input screen of the electronic device A which instruct | indicates to the electronic device B used in the system with which the electronic device and server which concern on embodiment are connected. 6 is a flowchart showing an operation when an electronic device is found before a delay time (within 24H) in a system in which the electronic device according to the embodiment is connected to a server. 9 is a flowchart showing an operation when an electronic device is not found before a delay time (within 24H) in a system in which the electronic device according to the embodiment is connected to a server. 6 is a flowchart for explaining the operation of a system in which an electronic apparatus according to an embodiment and a server are connected.

  Hereinafter, embodiments will be described with reference to the drawings.

  FIG. 1 is a system diagram illustrating an example of a system in which an electronic device and a server according to the embodiment are connected.

  In this embodiment, for example, as shown in FIG. 1, a plurality of electronic devices (PCs) such as an electronic device A31, an electronic device B32, and an electronic device C33 are connected via a server 20.

  For example, the electronic device A31 and the electronic device B32 are connected via an external device (server 20).

  That is, a plurality of electronic devices (PC) such as the electronic device A31, the electronic device B32, and the electronic device C33 communicate with the external device (server 20).

  Then, as will be described later, for example, from the external device (server 20) to the electronic device B32, an “activation” prohibition instruction, an “encryption key” deletion instruction, and an internal data deletion instruction with an execution “delay” time are provided. Is output.

  The electronic device B32 receives the “activation” prohibition instruction, the “encryption key” deletion instruction, and the internal data deletion instruction with the execution “delay” time output from the external device (server 20).

  When the electronic device B32 receives the “activation” prohibition instruction, the “encryption key” deletion instruction, and the internal data deletion instruction with the execution “delay” time, the electronic apparatus B32 activates itself. The encryption key stored in the electronic device B32 is deleted.

  At this time, the process of deleting the internal data stored in the electronic device B32 is delayed by the delay time.

  FIG. 2 is an external view illustrating an external appearance of the electronic apparatus according to the embodiment.

  Here, the electronic device A31 will be described as an example of a plurality of electronic devices (PCs) such as the electronic device A31, the electronic device B32, and the electronic device C33.

  The electronic device A31 is realized as, for example, a notebook type personal computer (notebook PC or PC) 31.

  Note that this embodiment is not limited to a personal computer, and can also be applied to a TV, a mobile phone, a portable electronic device, and the like.

  As shown in FIG. 2, the electronic device A <b> 31 includes a computer (notebook PC) main body 11 and a video display unit 12. The video display unit 12 incorporates, for example, an LCD (liquid crystal display) 17.

  The video display unit 12 is rotatable between a computer (notebook PC) main body 11 so as to be rotatable between an open position where the upper surface of the computer (notebook PC) main body 11 is exposed and a closed position covering the upper surface of the computer (notebook PC) main body 11. Is attached.

  The computer (notebook PC) main body 11 has a thin box-shaped housing, and on its upper surface, a keyboard 13, a power button 14 for powering on / off the electronic device A31, a touch pad 16, a speaker. 18A, 18B, etc. are arranged.

  In addition, a USB connector 19 for connecting a USB (Universal Serial Bus) 2.0 standard USB cable or a USB device is provided on the right side of the computer (notebook PC) main body 11, for example.

  Furthermore, an external display connection terminal corresponding to, for example, the HDMI (High-Definition Multimedia Interface) standard is provided on the back surface of the computer (notebook PC) main body 11 (not shown). This external display connection terminal is used to output a digital video signal to an external display.

  FIG. 3 is a block diagram illustrating an example of the configuration of the electronic device according to the embodiment.

  As shown in FIG. 3, the electronic device (client) 31 includes a CPU (Central Processing Unit) 101, a system memory 103, a south bridge 104, a GPU (Graphics Processing Unit) 105, a VRAM (Video RAM: Random Access Memory) 105A, Sound controller 106, BIOS-ROM (Basic Input / Output Only Memory) 107, LAN (Local Area Network) controller 108, hard disk drive (HDD (storage device)) 109, optical disk drive (ODD) 110, USB controller 111A , Card controller 111B, card slot 111C, Line LAN controller 112 includes a embedded controller / keyboard controller (EC / KBC) 113, EEPROM (Electrically Erasable Programmable ROM) 114 or the like.

  The CPU 101 is a processor that controls the operation of each unit in the electronic device (client) 31.

  The CPU 101 executes the BIOS stored in the BIOS-ROM 107. The BIOS is a program for hardware control. The CPU 101 also includes a memory controller that controls access to the system memory 103. Also, for example, it has a function of executing communication with the GPU 105 via a PCI EXPRESS serial bus or the like.

  The GPU 105 is a display controller that controls the LCD 17 used as a display monitor of the electronic apparatus (client) 31.

  A display signal generated by the GPU 105 is sent to the LCD 17. The GPU 105 can also send a digital video signal to the external display 1 via the HDMI control circuit 3 and the HDMI terminal 2.

  The HDMI terminal 2 is the aforementioned external display connection terminal. The HDMI terminal 2 can send an uncompressed digital video signal and a digital audio signal to the external display 1 such as a television with a single cable. The HDMI control circuit 3 is an interface for sending a digital video signal to an external display 1 called an HDMI monitor via the HDMI terminal 2.

  The south bridge 104 controls each device on a PCI (Peripheral Component Interconnect) bus and each device on an LPC (Low Pin Count) bus. Further, the south bridge 104 includes an IDE (Integrated Drive Electronics) controller for controlling the HDD 109 and the ODD 110.

  Further, the south bridge 104 has a function of executing communication with the sound controller 106.

  The sound controller 106 is a sound source device, and outputs audio data to be reproduced to the speakers 18A and 18B or the HDMI control circuit 3. The LAN controller 108 is a wired communication device that executes, for example, IEEE 802.3 standard wired communication, while the wireless LAN controller 112 is a wireless communication device that executes, for example, IEEE 802.11g standard wireless communication. The USB controller 111A executes communication with an external device that supports the USB 2.0 standard, for example.

  For example, the USB controller 111A is used for receiving an image data file stored in a digital camera. The card controller 111 </ b> B executes data writing and reading with respect to a memory card such as an SD card inserted into a card slot provided in the computer (notebook PC) main body 11.

  The EC / KBC 113 is a one-chip microcomputer in which an embedded controller for power management and a keyboard controller for controlling the keyboard 13 and the touch pad 16 are integrated. The EC / KBC 113 has a function of turning on / off the electronic device (client) 31 in accordance with the operation of the power button 14 by the user.

  The display control in this embodiment is performed, for example, by causing the CPU 101 to execute a program recorded in the system memory 103, the HDD 109, or the like.

  FIG. 4 is a diagram illustrating an example of an input screen of the electronic device A that instructs the electronic device B, which is used in a system in which the electronic device and the server according to the embodiment are connected.

  As described above, the electronic device A31 and the electronic device B32 are connected via the server 20 and can communicate with each other.

  Here, a command for instructing the electronic device B 32 to operate is input to the electronic device A 31 and transmitted via the server 20.

  FIG. 4A shows an input example of command 1 (41) transmitted to the electronic device B32 in order to maintain the security of the internal data of the electronic device B32 when the electronic device B32 is lost, for example.

  Here, the command 1 (41) is, for example, an “activation” prohibition instruction 41a, an “encryption key” deletion instruction 41b, and an internal data deletion instruction 41c.

  Here, the delay time of the “activation” prohibition instruction 41a is 0 hour (immediately), and the delay time of the “encryption key” deletion instruction 41b is 0 hour (immediately). However, the internal data deletion instruction 41c has a substantial execution “delay” time (for example, 24 hours (24H)).

  Here, are all these commands (“startup” prohibition instruction 41a, “encryption key” deletion instruction 41b and internal data deletion instruction 41c) selected, and send command 1? When “Yes” 42 is instructed to the above question, the command 1 (41) is transmitted to the server 20. Upon receiving this command 1 (41), the server 20 transmits it to the electronic device B32.

  As described above, the electronic device B32 communicates with the external device (server 20), and the internal data output from the external device (server 20) with the activation prohibition instruction, the encryption key deletion instruction, and the execution delay time attached thereto. Receive and execute a delete instruction.

Thereby, for example, when the electronic device is lost, a command is transmitted to the electronic device, the stored data is destroyed, and security (confidentiality) can be improved.
FIG. 4B shows an input example of command 2 (43) in which, for example, the lost electronic device B32 is found and a command for substantially canceling the transmitted command 1 (41) is transmitted to the electronic device B32.

  Here, the command 2 (43) is, for example, an “activation” permission instruction 43a, an “encryption key” write-back instruction 43b, and an internal data deletion cancellation instruction 43c.

  Further, here, the delay time of the “activation” permission instruction 43a is 0 hour (immediately), and the delay time of the “encryption key” deletion writing return instruction 43b is 0 hour (immediately). The internal data deletion cancellation instruction 43c is also given a delay time of 0 hours (immediately).

  In this case, are all these commands (“activation” permission instruction 43a, “encryption key” write back instruction 43b, and internal data deletion cancellation instruction 43c) selected and sent command 2? When “Yes” 44 is instructed to the above question, the command 2 (43) is transmitted to the server 20. Upon receiving this command 2 (43), the server 20 transmits it to the electronic device B32.

  As described above, the electronic device B32 communicates with the external device (server 20), and is output from the external device (server 20). The start prohibition instruction with the execution delay time of 0 hours (immediately), the encryption key A deletion instruction and an internal data deletion instruction are received and executed.

  As a result, for example, when a lost electronic device is found, the flexibility (operation flexibility) of wanting to stop data destruction immediately is improved, and the degree of freedom in the operation of internal data processing of the electronic device is improved. It becomes possible to make it.

  FIG. 5 is a flowchart showing an operation when an electronic device is found before the delay time (within 24H) in the system in which the electronic device and the server according to the embodiment are connected.

  Here, for example, as described above, the electronic device B32 is lost, and the electronic device is found before the delay time (within 24H).

  For example, the user operates the electronic device A31, performs the input shown in FIG. 4A, and instructs the transmission of the command 1 (41).

  Then, the command 1 is transmitted from the electronic device A31 to the server 20 to which communication is connected (51). As described above, the command 1 is a delay time of 0 hours for prohibiting activation of the electronic device itself and deleting the encryption key. The internal data deletion delay time is 24 hours (24H).

  The server 20 receives the command 1 and transmits the command 1 to the electronic device B32 to which communication is connected (52).

  The electronic device B32 receives the command 1 and executes it.

  That is, the activation of the electronic device B32 itself is prohibited with a delay time of 0 hour. Also, the encryption key is deleted with a delay time of 0 hour. As described above, the internal data deletion delay time is 24 hours (24H), and the internal data deletion processing is executed with a predetermined delay time (24 hours).

  In addition, this delay time is time-measured by the time measuring part which electronic device B32 comprises, for example (not shown).

  In this embodiment, according to the encryption key deletion process, for example, the encryption key stored in the HDD 109 of the electronic device B32 is output to the external device (server 20).

  The external device (server 20) receives the encryption key output from the electronic device B32 and stores it in the internal storage unit (not shown).

  In this case, for example, the electronic device B32 is found before the delay time (within 24H).

  For example, the user operates the electronic device A31, performs the input shown in FIG. 4B, and instructs the transmission of the command 2 (43).

  Then, the command 2 is transmitted from the electronic device A31 to the server 20 to which communication is connected (54). As described above, the command 2 is the activation permission of the electronic device itself, the encryption key return, and the internal data deletion cancellation. These delay times are all given 0 hours (0H).

  The server 20 receives the command 2 and transmits the command 2 to the electronic device B32 to which communication is connected (55).

  The electronic device B32 receives and executes the command 2.

  That is, activation of the electronic device B32 itself is permitted. Also, the encryption key is written back. Also, the internal data deletion instruction is cancelled. These delay times are all assigned 0 hours (0H), and are implemented without any particular delay time.

At this time, the encryption key to be written back is stored in the server 20 and transmitted to the electronic device B32 in response to the transmission of the command 2 from the server 20 to the electronic device B32 (56). )
As a result, the electronic device B32 returns to the activation-permitted state.

  FIG. 6 is a flowchart showing an operation when an electronic device is not found before the delay time (within 24H) in the system in which the electronic device and the server according to the embodiment are connected.

  Here, for example, as described above, the electronic device B32 is lost and not found before the delay time (within 24H).

  For example, when the electronic device B32 is lost, the user operates the electronic device A31 and performs the input shown in FIG. 4A in the same manner as described above to instruct the transmission of the command 1 (41).

  Then, the command 1 is transmitted from the electronic device A31 to the server 20 to which communication is connected (51). Command 1 is a delay time of 0 hours for prohibiting activation of the electronic device itself and deleting the encryption key, as described above. The internal data deletion delay time is 24 hours (24H).

  The server 20 receives the command 1 and transmits the command 1 to the electronic device B32 to which communication is connected (52).

  The electronic device B32 receives the command 1 and executes it.

  That is, the activation of the electronic device B32 itself is prohibited with a delay time of 0 hour. Also, the encryption key is deleted with a delay time of 0 hour. As described above, the internal data deletion delay time is 24 hours (24H), and the internal data deletion processing is executed with a predetermined delay time (24 hours).

  This delay time is measured by, for example, a timer unit configured by the electronic device B32.

  In this embodiment, similarly to the above, according to the encryption key deletion process, for example, the encryption key stored in the HDD 109 of the electronic device B32 is output to the external device (server 20).

  The external device (server 20) receives the encryption key output from the electronic device B32 and stores it in the internal storage unit (not shown).

  In this case, for example, the electronic device B32 is not found before the delay time (within 24H).

That is, here, after the transmission of the command 1, the user does not particularly operate the electronic device A31.

  In addition, the electronic device B32 includes the timekeeping unit as described above, and times the delay time for deleting internal data. When the delay time is reached (or exceeds the delay time), for example, internal data held in the HDD 109 or the like is deleted.

  Note that the data deletion here can be performed with higher accuracy by performing random deletion (overwriting of data). This random deletion (data overwriting) can also be applied to the deletion of the encryption key.

  In this embodiment, when the internal data deletion is performed (or when the internal data deletion is completed), the internal data deletion is performed from the electronic device B32 toward the external device (server 20). Internal data deletion notification or internal data deletion completion notification to the effect that internal data deletion has been completed is output.

  When the external device (server 20) receives these notifications, for example, it updates the status of the electronic device B32 registered in the external device (server 20).

  As a result, the electronic device B32 is determined to be unstartable. And it becomes possible to improve the security (confidentiality) of internal data when the electronic device B32 is lost.

  By configuring as described above, in this embodiment, the activation control of the electronic device itself from the outside, the encryption control of the storage device configured in the electronic device, and the data deletion of the storage device configured in the electronic device Control or the like can be performed.

  An electronic device that exchanges commands with an external device (server 20) can control the execution time of an irreversible command such as data deletion from the server side by setting a predetermined command delay time. It becomes possible. In addition, for example, important data can be flexibly operated such as immediately deleting or setting a time for investigation after losing an electronic device.

  FIG. 7 is a flowchart for explaining the operation of the system in which the electronic apparatus and the server according to the embodiment are connected.

  Step S100 is a start step here. Then, it progresses to step S101.

  Step S101 is a step in which the command 1 for instructing the operation of the electronic device B32 is transmitted from the electronic device A31 to the server 20. As described above, the command 1 is, for example, “activation” prohibition and “encryption key” deletion with a delay time of 0 hour. “Internal data” is deleted after “delay” for 24 hours. Then, it progresses to step S102.

  Step S102 is a step in which the external device (server 20) receives the command 1 and transmits it to the electronic device B32. Then, it progresses to step S103.

  Step S103 is a step of detecting whether the electronic device 32 has received the command 1. If it is detected that the electronic device 32 has received the command 1, the process proceeds to step S104 (Yes). If the electronic device 32 does not detect that the command 1 has been received, the processing here is repeated (No).

  Step S104 is a step in which the electronic device 32 executes the command 1 described above. As described above, “activation” prohibition and “encryption key” deletion of the electronic device 32 are executed, and “internal data” deletion is executed with a “delay” of 24H. Then, it progresses to step S105.

  Step S105 is a step in which the electronic device B32 transmits the “encryption key” to the server 20. Then, it progresses to step S106.

  In step S106, the server 20 holds the “encryption key”. Then, it progresses to step S107.

  Step S107 is a step of detecting whether or not the “delay” time (24H) assigned to the internal data deletion has been reached (or has elapsed). If it is detected that the “delay” time (24H) assigned to the internal data deletion has been reached (or passed), the process proceeds to step S108 (Yes). When it is detected that the “delay” time (24H) assigned to the internal data deletion has not been reached (or has not elapsed), the process proceeds to step S111 (No).

  Step S108 is a step in which the electronic device B32 deletes “internal data”. Then, it progresses to step S109.

  Step S109 is a step of transmitting a notification that the “internal data” deletion has been executed (or completed) from the electronic device B32 to the server 20. Then, it progresses to step S110.

  Step S110 is a step in which the server 20 updates the status of the registered electronic device B32. Then, it progresses to step S114.

  Step S111 is a step of transmitting the command 2 from the server 20 to the electronic device B32. As described above, the command 2 has a delay time of 0 hour, and the electronic device B32 can be “activated”. The step of writing back the “encryption key” held in the server 20 and canceling the deletion of “internal data”) It is. Then, it progresses to step S112.

  Step S112 is a step of detecting whether or not the electronic device B32 has received the command 2. If it is detected that the command 2 has been received, the process proceeds to step S113 (Yes). If it is detected that the command 2 is not received, the process returns to step S107 and the above process is repeated (No).

  Step S113 is a step in which the electronic device B32 executes the command 2. That is, the electronic device B32 can be “activated” with a delay time of 0 hour, and the “encryption key” held in the server 20 is written back as described above. In addition, the deletion instruction of “internal data” is canceled. Then, it progresses to step S114.

  Step S114 is an end step, and the process here ends.

  In this embodiment, the electronic device can also be configured by a portable terminal driven by a battery, for example. In this case, it is desirable to have a communication means that can be energized at all times and an RTC (Real Time Clock) that measures time even when the power is turned off.

  The RTC is, for example, a timekeeping IC mounted on a motherboard. It is possible to operate by receiving power supply from the built-in battery when the power is turned off.

  In addition, the electronic device receives a command from an application in another electronic device or a server on the network by communication means such as wirelessly from a remote location, permits activation, prohibits activation, deletes an internal data encryption key, Various commands such as writing back the encryption key of internal data and deleting internal data can be received.

  The commands are classified into reversible operations such as activation control and internal data encryption key operations, and irreversible data such as deletion of internal data.

  In addition, as described above, the delay time is specified in the command received by the electronic device, and the electronic device, for example, measures the command reception time and executes the command after the delay time has passed.

  When a loss of an electronic device is detected, a command for prohibiting activation and a command for deleting an encryption key for internal data is issued with a delay time of 0 hour. At the same time, an internal data deletion command is issued with a delay time of 24 hours.

  Also, if an electronic device is found in 24 hours before the data deletion, it is returned to the state before the loss by issuing a permission for activation and a command for writing back the encryption key of the internal data with a delay time of 0 hour, It becomes possible to continue using the electronic device.

  Further, when an electronic device is not found within the delay time (24 hours) until data deletion, data deletion is executed, and leakage of confidential information inside can be prevented.

  In this embodiment, a delay time is designated for a predetermined command. This makes it possible to flexibly operate irreversible instructions such as data deletion.

  By configuring as described above, in this embodiment, for example, when an electronic device is lost, a command for destroying stored data is transmitted, and immediately when a lost electronic device is found, It is possible to improve flexibility by dealing with flexibility (freedom of operation) such as canceling data destruction.

  Note that all the control processing procedures of the above-described embodiment can be executed by software. For this reason, it is possible to easily realize the same effect as that of the above-described embodiment only by installing and executing this program on a normal computer through a computer-readable storage medium storing the program for executing the control processing procedure. it can.

  Note that the above embodiment is not limited to the description itself, and in the implementation stage, the constituent elements can be variously modified and embodied without departing from the spirit of the invention.

  Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment.

  For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  20 ... server, 31 ... electronic device (PC) A, 32 ... electronic device (PC) B, 33 ... electronic device (PC) C.

Claims (9)

An instruction receiving unit for communicating with the first external device and receiving an encryption key deletion instruction output from the first external device;
An electronic device comprising a processing unit that outputs a stored encryption key to a second external device and performs a deletion process when receiving the encryption key deletion instruction. The instruction receiving unit further receives an internal data deletion instruction output from the first external device, which is an instruction to delete internal data after a predetermined time;
The electronic device according to claim 1, wherein the processing unit deletes the stored internal data after the predetermined time has elapsed when the internal data deletion instruction is received. The instruction receiving unit further receives a start prohibition instruction output from the first external device,
The electronic device according to claim 1, wherein the processing unit prohibits its own activation when receiving the activation prohibition instruction.   The electronic device according to claim 1, wherein the first external device and the second external device are the same device.   The electronic device according to claim 1, wherein when the internal data deletion process is executed, the execution of the deletion process is notified to the first external device.   If the predetermined time has not been reached, if an activation enable instruction, an encryption key write-back instruction, and an internal data deletion cancellation instruction are received, the activation is enabled, the encryption key write-back is processed, and the internal data deletion is performed. The electronic device according to claim 3, wherein no processing is performed.   The electronic device according to claim 6, wherein the encryption key to be written back is output from the first external device. Communicating with a first external device and receiving an encryption key deletion instruction output from the first external device;
A method for controlling an electronic device, comprising: a step of outputting a stored encryption key to a second external device and performing a deletion process when the encryption key deletion instruction is received. Communicating with a first external device and receiving an encryption key deletion instruction output from the first external device;
An electronic device control program for controlling an electronic device, including a step of outputting a stored encryption key to a second external device and performing a deletion process when receiving the encryption key deletion instruction.

Images