JP2013131105A - Information transfer system and information transfer method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information transfer system and an information transfer method for inhibiting leakage of data even when a portable storage device which is used for transfer of the data is lost or robbed.SOLUTION: When data is transferred from an information apparatus 1 to an information apparatus 2, a plurality of portable storage devices 10 which store the data to be transferred are used. One portable storage device 10 is connected to the information apparatus 1 via a USB to input the data. The portable storage device 10 encrypts the input data, and simultaneously divides the data to generate divided data. The divided data is distributed to other portable storage devices 10 to be stored by an information management server 30 which is connected to the portable storage devices 10 via a wireless LAN. When the data is output to the information apparatus 2, the information management server 30 collects the divided data from the respective portable storage devices 10. The portable storage devices 10 are connected to the information apparatus 2, the encrypted data is restored from the divided data, and after that, the encrypted data is decrypted to be output to the information apparatus 2.

Description

  The present invention relates to an information delivery system and an information delivery method for delivering data (information) between information devices such as computers.

  In recent years, a USB memory using a flash memory and various memory cards are often used as a storage medium instead of a writable optical disk such as a CD or a DVD. The flash memory is a kind of rewritable ROM including, for example, an EEPROM or the like, and is stored as a nonvolatile memory in a state in which data is stored even when it is removed from a device equipped with a power source and stored under a predetermined condition. The deleted data can be deleted.

These flash memory-related products are becoming more compact, easier to carry than optical discs, and are not so expensive. For example, the purpose of data transfer and data storage without using communication lines in information devices such as personal computers. It is used in. Further, as portable electronic devices, for example, portable information devices such as a mobile phone, a smartphone, a portable player, and a portable game machine, a memory card is used as a main storage device.
The memory card requires a dedicated reader / writer for each type, and the above-described portable information device has a built-in memory card reader / writer. The USB memory does not require a dedicated reader / writer and can be used by connecting to a USB terminal provided in a personal computer or the like.

  Such a flash memory may be lost by being carried. In particular, flash memories that have been miniaturized are more likely to be lost than optical disks. In the flash memory, stored data is retained even when there is no power supply. Therefore, there is a risk of data leakage due to loss of the flash memory. In recent years, as a countermeasure against data leakage, encryption software is attached to the flash memory, and it is recommended to encrypt and store data when storing data in the flash memory.

However, if the stored data is not necessarily encrypted, there is a user who stores the data without encryption, and there is a risk of data leakage. Depending on the type of encryption, the encryption may be decrypted in a relatively short time.
Among such portable storage devices (portable storage media), a device having a controller unit that prevents reading of data stored in a protection target storage area has been proposed (for example, see Patent Document 1).

  When this portable storage medium is connected to a device such as a personal computer or a mobile phone, the controller unit takes in the predetermined data on the device side, and the predetermined data has been authenticated by a predetermined authentication process. Confirm that the data is Further, the controller unit, when the predetermined data satisfies the predetermined combination condition with the authentication information stored on the portable storage medium side, the device side of the data stored in the protection target storage area of the portable storage medium Reading from is enabled.

  In this proposal, it is proposed to use, for example, user identification information stored in a SIM (registered trademark) card of a mobile phone as the predetermined data described above. At the start, the data is sent to the base station and authenticated.

  In addition, when the mobile phone is lost, the reading of data from a portable storage medium (memory card) can be locked by remote control. Also, when the mobile phone is out of service area where communication with the base station is not possible, the reading of data from the portable storage medium is locked. In addition, in order to make the data in the portable storage medium usable even in an apparatus that does not have the predetermined data, the data in the protected storage area can be read out by another authentication method, for example, by inputting a password.

  As a method for stealing data, there is a case where data is taken out for each personal computer. In such a case, for example, when a PHS terminal and a personal computer are connected using a relatively short-range wireless communication network such as PHS, and the PHS terminal can be connected to a predetermined base station, It has been proposed that a computer to which a PHS terminal is connected can be used only when the PHS terminal is located within a range rather than out of range with respect to a predetermined base station (see, for example, Patent Document 2). In this case, it has also been proposed that a non-volatile memory is mounted on the PHS terminal so that the non-volatile memory can be used only while the PHS terminal is in the service area.

JP 2011-3133 A JP 2008-219469 A

  By the way, in Patent Document 1, the protection of data in a memory card connected to a mobile phone is one of the objects. However, at the time when the memory card is connected to the mobile phone, authentication is performed and data Can be read. That is, when the mobile phone and the memory card are connected, anyone can read the data in the memory card. Therefore, in the case where the mobile phone is lost, a function for locking the reading of data from the memory card by remote operation and a function for locking the reading of data on the memory card in a mobile phone out of service area are provided. .

  However, if a specific mobile phone is deliberately taken, data can be viewed on the mobile phone until the loss of the mobile phone is noticed and the lock function by remote control is activated. In addition, reading of data stored in the protected storage area is blocked by the control unit of the portable storage medium, but when the portable storage medium is deprived, the portable unit has a control unit that blocks reading of the data. The storage medium may be analyzed.

  That is, even if the data of the portable storage medium cannot be read immediately, there is a possibility that the data will be read in the future. In addition, when the portable storage medium is a memory card connected to a mobile phone, if the entire mobile phone is stolen, not only the analysis of the control unit, but also the analysis of the mobile phone program, There is a possibility that data can be read out via a mobile phone.

  Also in Patent Document 2, when a PHS terminal having a non-volatile memory is taken away or when a PHS terminal is taken together with an information device such as a personal computer, data is read out by analysis of the PHS terminal. There is a possibility.

  The present invention has been made in view of the above circumstances, and an information delivery system and information capable of preventing leakage of data even when a portable storage device used for data delivery is lost or stolen. The purpose is to provide a delivery method.

In order to solve the above-described problem, the information delivery system according to claim 1 is an information delivery system for delivering data between information devices via a portable storage device,
In order to transfer the data between the output side information device that outputs the data to be transferred and the input side information device to which the data to be transferred is input, the data is stored and the data is transferred A plurality of portable storage devices capable of moving between information devices;
An information management server capable of short-range wireless communication with the portable storage device in communication range;
The portable storage device is
A connection device connected to the information device to input / output data to / from the information device;
A volatile memory for storing data input from the information device;
A wireless communication device that performs short-range wireless communication with the information management server;
A control device for controlling the connection device, the volatile memory, and the wireless communication device;
A battery for supplying power to at least the volatile memory,
The information management server
A server wireless communication device that performs short-range wireless communication with each of the wireless communication devices of the plurality of portable storage devices;
A storage device for storing data transmitted to and received from the portable storage device by short-range wireless communication with the wireless communication device;
Identification information that can identify each of the plurality of portable storage devices registered as one group, and an association database in which data associated with the identification information is registered;
A server control device for controlling the server wireless communication device and the storage device;
The control device of the portable storage device is:
When data is input from the output side information device by the connection device, the data is encrypted to be encrypted data, and the encrypted data is divided into a plurality of divided data to be divided into the volatile memory. Storing the divided data in the volatile memories of the other portable storage devices in the group in which the identification information is registered in the association database of the information management server, Transmitting a part of the divided data to the information management server using the wireless communication device, and erasing the transmitted divided data from the volatile memory;
When outputting data to the input side information device via the connection device, from the information management server that collects the divided data from the other portable storage device in the group, using the wireless communication device, Receiving the collected divided data, restoring the encrypted data before the division from the received divided data and the divided data stored in the volatile memory, and decrypting the restored encrypted data, Output the decrypted data to the information device via the connection device,
The server control device of the information management server is:
A plurality of divided data transmitted from the portable storage device to which the data of the output-side information device is input are allocated and transmitted to the other portable storage devices in the group using the server wireless communication device. ,
In addition, the divided data is received and collected from other portable storage devices in the group other than the portable storage device that outputs data to the input side information device, and the received divided data is stored in the input side information device. The data is transmitted to the portable storage device that outputs the data.

The information delivery system according to claim 2 is the invention according to claim 1,
The control device of the portable storage device is:
When dividing the encrypted data, the encrypted data is divided by a set dividing method, and the position on the encrypted data before the division for each divided data based on the dividing method. And store it in volatile memory
Using the wireless communication device, together with the divided data, transmits the restoration information associated with the divided data to the information management server, and erases the transmitted divided data and restoration information,
When restoring the encrypted data from the divided data, restore the encrypted data based on the restoration information associated with each divided data,
The server control device of the information management server is:
The identification of each portable storage device registered in the association database when transmitting the divided data to each portable storage device when receiving the divided data and the restoration information associated with the divided data In association with the information, register the restoration information associated with the divided data transmitted to the portable storage device corresponding to the identification information,
When the divided data is received from each portable storage device and collected, the restoration information linked to the identification information of each portable storage device is read from the linkage database, and the portable storage corresponding to the identification information The division data and the restoration information are transmitted to the portable storage device that outputs data to the input side information device in a state where the restoration information is associated with the division data received from a device.

The information delivery system according to claim 3 is the invention according to claim 1 or 2,
The control device of the portable storage device is:
While repeatedly performing the process of erasing the divided data stored in the volatile memory every predetermined time,
When erasing the divided data based on the passage of a predetermined time, when the wireless communication device and the server wireless communication device of the information management server are connected by short-range wireless communication, the divided data The erasing is stopped.

The information delivery system according to claim 4 is the invention according to claim 3,
The control device of the portable storage device prohibits a process of erasing the divided data stored in the volatile memory for a set time.

The information delivery method according to claim 5 is:
The data is transferred between the output side information device that outputs the data to be transferred and the input side information device to which the data to be transferred is input in order to transfer the data between the information devices via the portable storage device. Therefore, a plurality of the portable storage devices that can move between the information devices that store the data and transfer the data,
An information management server capable of short-range wireless communication with the portable storage device in communication range;
The portable storage device is
A connection device connected to the information device to input / output data to / from the information device;
A volatile memory for storing data input from the information device;
A wireless communication device that performs short-range wireless communication with the information management server;
A control device for controlling the connection device, the volatile memory, and the wireless communication device;
A battery for supplying power to at least the volatile memory,
The information management server
A server wireless communication device that performs short-range wireless communication with each of the wireless communication devices of the plurality of portable storage devices;
A storage device for storing data transmitted to and received from the portable storage device by short-range wireless communication with the wireless communication device;
Identification information that can identify each of the plurality of portable storage devices registered as one group, and an association database in which data associated with the identification information is registered;
An information delivery method performed in an information delivery system comprising the server wireless communication device and a server control device that controls the storage device,
The control device of the portable storage device is:
When data is input from the output side information device by the connection device, the data is encrypted to be encrypted data, and the encrypted data is divided into a plurality of divided data to be divided into the volatile memory. Storing the divided data in the volatile memories of the other portable storage devices in the group in which the identification information is registered in the association database of the information management server, Transmitting a part of the divided data to the information management server using the wireless communication device, and erasing the transmitted divided data from the volatile memory;
When outputting data to the input side information device via the connection device, from the information management server that collects the divided data from the other portable storage device in the group, using the wireless communication device, Receiving the collected divided data, restoring the encrypted data before the division from the received divided data and the divided data stored in the volatile memory, and decrypting the restored encrypted data, Output the decrypted data to the information device via the connection device,
The server control device of the information management server is:
A plurality of divided data transmitted from the portable storage device to which the data of the output-side information device is input are allocated and transmitted to the other portable storage devices in the group using the server wireless communication device. ,
In addition, the divided data is received and collected from other portable storage devices in the group other than the portable storage device that outputs data to the input side information device, and the received divided data is stored in the input side information device. The data is transmitted to the portable storage device that outputs the data.

The information delivery method according to claim 6 is the invention according to claim 5,
The control device of the portable storage device is:
When dividing the encrypted data, the encrypted data is divided by a set dividing method, and the position on the encrypted data before the division for each divided data based on the dividing method. Associate recovery information indicating
Using the wireless communication device, together with the divided data, transmits restoration information associated with the divided data to the information management server,
When restoring the encrypted data from the divided data, restore the encrypted data based on the restoration information associated with each divided data,
The server control device of the information management server is:
The identification of each portable storage device registered in the association database when transmitting the divided data to each portable storage device when receiving the divided data and the restoration information associated with the divided data In association with the information, register the restoration information associated with the divided data transmitted to the portable storage device corresponding to the identification information,
When the divided data is received from each portable storage device and collected, the restoration information linked to the identification information of each portable storage device is read from the linkage database, and the portable storage corresponding to the identification information The division data and the restoration information are transmitted to the portable storage device that outputs data to the input side information device in a state where the restoration information is associated with the division data received from a device.

The information delivery method according to claim 7 is the invention according to claim 5 or 6,
The control device of the portable storage device is:
While repeatedly performing the process of erasing the divided data stored in the volatile memory every predetermined time,
When erasing the divided data based on the passage of a predetermined time, when the wireless communication device and the server wireless communication device of the information management server are connected by short-range wireless communication, the divided data The erasing is stopped.

The information delivery system according to claim 8 is the invention according to claim 7,
The control device of the portable storage device prohibits a process of erasing the divided data stored in the volatile memory for a set time.

  In the invention according to claim 1 or 5, while storing the data input from the information device, the memory for storing the divided data obtained by encrypting the data is a volatile memory. Since power is supplied from the battery, the divided data stored in the volatile memory is lost when the battery runs out (when the voltage decreases).

  Therefore, if the battery capacity is small, the data stored in the portable storage device in a short time when the portable storage device is lost and discovered by an outsider or the portable storage device is taken away. Will disappear. Non-volatile memory retains stored data even when power is cut off, so even if there is no data leakage at present, outsiders will discover what was lost in the future Although there is a risk of data leaking, in the case of volatile memory, if something lost is discovered by an outsider, the data is lost and data leakage can be suppressed.

  Also, even if the portable storage device is stolen, if the operation to retrieve the stored data is not performed immediately, all the data stored in the volatile memory will be lost due to battery exhaustion, and data leakage will occur. Can be suppressed.

  In addition, since each portable storage device only stores a part of the divided data of the reciprocal number after being encrypted, it is possible to encrypt only by taking a part of the portable storage device in the group. Data cannot be restored, and encrypted data cannot be decrypted.

  Moreover, unless all the portable storage devices in the group are within the communication range of the server wireless communication device, the divided data cannot be delivered. Therefore, the divided data cannot be restored by collecting the divided data in the portable storage device taken out from the above communication range (for example, in a predetermined building of an organization such as a company). That is, even if the portable storage device taken outside is given a situation in which data is output to the information equipment, the divided data cannot be restored, and the portable storage device other than the stolen portable storage device has run out of battery and the divided data Will disappear. Moreover, when it is noticed that even one portable storage device has been stolen, data leakage can be suppressed by erasing the divided data stored in the remaining portable storage devices.

Moreover, even if all portable storage devices are stolen, encrypted data cannot be restored if the divided data is lost from the volatile memory due to battery exhaustion.
Note that at least one of the divided data obtained by dividing the encrypted data may be stored in the storage device of the information management server. In this case, even if all portable storage devices in the group are deprived, all the divided data are not prepared, and the encrypted data cannot be restored from the divided data.

  In the invention according to claim 2 or claim 6, when restoring the encrypted data from the divided data, if there is no restoration information indicating the position on the encrypted data before the division of each divided data, the divided data Recovery from data is extremely difficult. In addition, the restoration information is in the association database of the information management server in a state where the divided data is stored in the volatile memory of each portable storage device. Therefore, even if all portable storage devices are stolen, restoration information is not available, and restoration of encrypted data becomes difficult. Thereby, leakage of data can be suppressed.

In the invention according to claim 3 or claim 7, even if the power of the volatile memory is not turned off as described above, the connection between the wireless communication device of the portable storage device and the server wireless communication device of the information management server is disconnected. Then, the erasing process of the divided data stored in the volatile memory performed every predetermined time becomes effective, and the divided data is erased. Thereby, leakage of data can be suppressed.
The short-range wireless communication between the wireless communication device and the server wireless communication device is performed based on, for example, a wireless LAN (Wi-Fi) communication protocol, and is within the communication range of the server wireless communication device (master device) as an access point. If there is a wireless communication device (slave unit) for the portable storage device that is turned on, it will be in the connected state, and when it is turned off, out of the communication range, If you move to a difficult place, the connection will be disconnected.

In the invention according to claim 4 or 8, even if the connection between the wireless communication device of the portable storage device and the server wireless communication device of the information management server is disconnected within the set time, the portable storage device The divided data stored in the device is not erased.
Thus, for example, when the server wireless communication device is located at the reciprocal location and the communication areas of the server wireless communication device do not overlap, the server is moved when the portable storage device is moved from the input side information device to the output side information device Even when the wireless communication device goes out of the communication area, the data can be moved if the wireless communication apparatus enters the communication area on the input side information device side as the movement destination within the set time.

  In the information delivery system and information delivery method of the present invention, data leakage can be prevented even if a portable storage device used for information delivery is lost or stolen.

It is a block diagram for demonstrating the information delivery system and information delivery method which concern on embodiment of this invention. It is a block diagram for demonstrating the modification of the said information delivery system and the information delivery method. It is a block diagram for demonstrating another modification of the said information delivery system and the information delivery method. It is a block diagram for demonstrating another modification of the said information delivery system and the information delivery method.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
The information delivery system of this embodiment uses a portable storage device instead of data communication for delivery of data from the information equipment to the information equipment. This portable storage device is basically not intended to store data as a storage device, but is used, for example, to exchange data between information devices such as personal computers and servers. is there.

Communication between information devices in a company is basically performed online via a network (for example, LAN, WAN, Internet, etc.). For example, information devices that are not connected to the network are stand-alone information devices. In this case, it is necessary to exchange data with a USB memory or a memory card.
In addition, when a number of information devices that transmit / receive data to / from each other are not connected via a file server, generally, the maximum capacity of data that can be transmitted / received is small. Such a portable storage device is required.

  As shown in FIG. 1, the information delivery system of this embodiment is a reciprocal number for delivering data between two information devices 1 and 2 (for example, computers) that cannot be connected online by a network or the like. A portable storage device 10 and an information management server 30 capable of transmitting and receiving with the portable storage device 10 via a wireless LAN are provided.

One of the information devices 1 and 2 is, for example, a stand-alone computer that is not connected to a network. The information devices 1 and 2 are connected to different LANs, for example. However, when the LAN of the information device 1 and the LAN of the information device 2 are not connected, or when the information device 1 and the information device 1 are connected via the network. Even when communication with the device 2 is possible, there is a case where there is no file server to which both the information device 1 and the information device 2 can be connected to the network, and large-capacity data cannot be transmitted and received.
It also includes cases where online data transmission / reception is prohibited for security reasons or other reasons.

  In this example, a USB as a general-purpose serial bus is used for connection between the information devices 1 and 2 and the portable storage device 10. Note that the connection between the information devices 1 and 2 and the portable storage device 10 is not limited to the USB, and other methods (such as various serial buses and parallel buses) may be used.

  The portable storage device 10 includes a connection unit for data transmission / reception, a USB connection unit 11 serving also as a connection unit for power supply, a rechargeable battery (battery) 12 to which power is supplied from the connection unit 11, and a rechargeable type. A RAM (volatile memory) 13 to which power is supplied from the battery 12, a wireless communication device 14 for a wireless LAN (Wi-Fi slave device), a control device 15 that controls the connection device 11, the RAM 13, and the wireless communication device 14. With.

The rechargeable battery 12 supplies power not only to the RAM 13 but also to the wireless communication device 14 and the control device 15 when the portable storage device 10 is not connected via USB.
The portable storage device 10 may include a power switch. The power switch may be automatically turned on when the portable storage device 10 is connected to the information device via USB. Note that the data stored in the RAM 13 is lost when the power is turned off. Therefore, the power may be always turned on without providing a power switch.

The connection device 11 includes a USB terminal and a USB control unit, and is used for writing data into the RAM 13 and reading data through the control device 15.
In this embodiment, the portable storage device 10 is not recognized as a large-capacity storage class-compliant device, as in a normal USB memory, but reads / writes data via the control device 15 described above. It is recognized as an information device connected by USB, and for example, a dedicated driver is installed and used.

  Further, the control device 15 may behave as a device compliant with the large capacity storage class in a pseudo manner, and may be recognized as a device compliant with the large capacity storage class from the personal computer side. When the information devices 1 and 2 are personal computers, the USB storage port driver may be automatically read so that data can be written and read from the personal computers. In this case, data cannot be read from the portable storage device unless a predetermined condition is satisfied as will be described later.

  The rechargeable battery 12 supplies power to the RAM 13, the wireless communication device 14, and the control device 15. In this portable storage device 10, the RAM 13 is connected not only when connected to the information devices 1 and 2 via USB and receiving power from the information devices 1 and 2, but also when not connected to the information devices 1 and 2. The wireless communication device 14 and the control device 15 are operable by receiving power from the rechargeable battery 12. The rechargeable battery 12 has a small capacity in this embodiment. For example, the rechargeable battery 12 has a capacity capable of operating the portable storage device 10 for several minutes to several hours.

Note that the capacity of the rechargeable battery 12 is determined based on a required operating time of the portable storage device 10 or based on a time during which data stored in the RAM 13 can be handled safely as will be described later. The
The RAM 13 is a volatile memory, and the stored data is erased when the power supply from the rechargeable battery 12 is interrupted. Since a general USB memory uses a non-volatile flash memory, data stored for a long time is retained even after the USB connection with the information devices 1 and 2 is canceled. In the storage device 10, when the rechargeable battery 12 is discharged and the power is reduced, the data stored in the RAM 13 is erased. That is, the capacity of the rechargeable battery 12 functions as a timing device for data stored in the RAM 13. As the RAM 13, for example, a static RAM with low power consumption or a dynamic RAM with high power consumption is used. In consideration of the short data retention time in the RAM 13, the dynamic RAM can be used without any problem.

  The wireless communication device 14 is a well-known Wi-Fi one-chip communication device that functions as a slave for an access point of a wireless LAN (Wi-Fi). In this embodiment, a connection setting is made to the server wireless communication device 31 (wireless LAN base unit) having a Wi-Fi access point provided in the information management server 30 by an encryption standard such as WPA. If there is a portable storage device 10 in which power remains in the rechargeable battery 12 within the connection range of the access point of the wireless communication device 31, the portable storage device 10 is connected to the access point of the server wireless communication device 31. Data can be sent to and received from the.

  Note that the mobile storage devices 10 may perform ad hoc communication using the wireless communication device 14, and may directly transmit and receive data between the mobile storage devices 10 under the control of the control device 15.

  The control device 15 is, for example, an embedded MPU (CPU) and has a built-in ROM, RAM, etc. for storing a program. The control device 15 basically encrypts data when writing data to the portable storage device 10 via the USB, and decrypts data when reading data from the portable storage device 10. Note that password entry is required for encryption and decryption. Further, as a method of encryption and combination, a common key stored in the ROM of the control device 15 may be used.

  Also, an encryption method using a public key and a secret key may be employed. For encryption, a public key stored in the ROM of the control device 15 is used, and for decryption, encryption is performed via a wireless LAN. The encrypted secret key may be received from the information management server 30 and the secret key decrypted on the RAM of the control device 15 may be used.

  Further, for example, when writing data to one portable storage device 10, the control device 15 encrypts the data to be written as described above, and then uses the encrypted data that has been encrypted. Dividing according to the number of In this case, it is preferable to divide the data so that a part in which data can be recognized is not partially generated during decoding. That is, it is preferable to divide the encrypted data so that it cannot be decrypted.

  At the time of division, for example, data is divided based on a preset pattern from encrypted binary data. For example, an odd number and an even number of encrypted binary data (for example, treated as a hexadecimal number sequence) are divided, divided into three number sequences every three, or a predetermined number such as 100 It is possible to divide the blocks into a plurality of blocks and to divide them into the respective portable storage devices 10 in order. The divided data does not have to have the same capacity, and the data capacity may be increased only in the main portable storage device 10 that is sequentially connected to the information devices 1 and 2 and transfers data.

  For example, after one portable storage device 10 is connected to the output side information device 1 and the data output from the information device 1 is encrypted, the divided data obtained by dividing the encrypted data into another portable storage device 10 is wireless LAN. In such a case, the data capacity stored in the portable storage device 10 connected to the information device 1 may be increased and the data capacity stored in the other portable storage device 10 may be decreased.

  Further, when dividing, the control device 15 outputs to the information management server 30 restoration information indicating the position on the encrypted data before the division of each divided data in order to restore the divided data divided from the encrypted data. It is supposed to be. For example, the odd-numbered numerical values in the above-mentioned number sequence or the first, fourth, and seventh blocks in the above-mentioned number-sequenced 100 blocks are the restoration information. In addition, when the encrypted data is represented as binary data by the above-described hexadecimal number and address, data indicating the address of each numerical value of the divided data may be used as the restoration information.

  In addition, after one portable storage device 10 is connected via USB and data read from the output-side information device 1 is encrypted and divided by the control device 15 of the portable storage device 10, the information management server 30 The encrypted and divided data is written to each portable storage device 10 via the wireless LAN. In this case, except for the portable storage device 10 connected to the information device 1, each portable storage device 10 may be anywhere within the wireless LAN access point of the information management server 30. Note that the divided data transmitted from the main portable storage device 10 is erased from the RAM 13 of the main portable storage device 10, and only the divided data that has not been transmitted is stored in the RAM 13 of the main portable storage device 10. .

  In addition, in using the capacity of the rechargeable battery 12 as a time-limited device as described above, it is preferable that each portable storage device 10 is connected to the information device 1 or the like and is removed from the charged state at the time of use. Only the main portable storage device 10 may be moved, and the other portable storage device 10 may be held in a state connected to the output-side information device 1 or the like. In this case, data is erased due to a decrease in power of the rechargeable battery in the main portable storage device 10 that is likely to be lost or stolen by moving.

  In writing in each portable storage device 10 other than the main portable storage device 10 in this case, the divided data that has been encrypted and divided is stored in the RAM 13 without being encrypted again. It is also possible to encrypt again. In this case, after decrypting the encrypted data from the divided data as described later, before decrypting the encrypted data in the portable storage device 10 other than the main, after decrypting the encrypted divided data in each portable storage device, The encrypted data is restored and the encrypted data is decrypted.

  Further, when storing the divided data that is encrypted and divided in each portable storage device 10, it is output to the information management server 30 from the output side information device 1 to the portable storage device 10, and further encrypted and divided. Data that can specify all portable storage devices 10 to which the divided data is written is sent to the information management server 30 via the wireless LAN and stored. In this embodiment, a MAC address used in a LAN device (network device such as a LAN card) is used as identification information for identifying (specifying) each portable storage device 10. It should be noted that the MAC addresses of the repetitive portable storage devices 10 grouped in advance may be registered.

  At this time, the information management server 30 divides each MAC address as the above-described identifying information corresponding to each portable storage device 10 in one group storing the encrypted and divided data. The restoration information associated with the data is linked and stored. That is, association data (restoration information) indicating which divided portion of the encrypted data is stored in which portable storage device 10 is registered in the association database 33 of the information management server 30.

  The information management server 30 may also store the divided data. That is, a number obtained by adding 1 to the number of portable storage devices 10 used when the control device 15 encrypts the data output to the portable storage device 10 connected to the information device 1 and divides it into a reciprocal number. The divided data may be stored in each portable storage device 10 and the information management server 30.

  When the control device 15 of the main portable storage device 10 is connected to the information device 2 and outputs data to the information device, the divided data (information management server 30) stored in each portable storage device 10 is output. Data may be included) through the information management server 30 and the divided data is collected into the original encrypted data, and then the encrypted data is decrypted. In this case, it is necessary to input a password from the information device 1.

  For example, the information management server 30 is arranged in a corporate facility, and the range corresponding to the radio wave intensity or the like is set as a wireless LAN communication range. Further, the information management server 30 is basically not connected to a network (LAN) provided for information devices such as personal computers and servers in corporate facilities. For example, when one information management server 30 is installed, the information management server 30 becomes stand-alone. As shown in FIG. 3, when the number of information management servers 30 is operated, a network is formed only by the information management server 30. Since the information management server 30 is provided with a wireless LAN access point (server wireless communication device 31), a network is formed with the portable storage device 10 by the wireless LAN.

The information management server 30 is constructed on a server wireless communication device 31 that constitutes a wireless LAN access point, a storage device 32 that temporarily stores the above-mentioned divided data, and this storage device 32, and will be described later. A linking database 33 that stores linking-related data, and a server control device 34 that controls data transmission / reception via the wireless LAN, registration, extraction, and deletion of data in the linking database 33 are provided.
The server wireless communication device 31 is a well-known wireless LAN access point. As shown in FIG. 2, the server wireless communication device 31 may be connected to the server wireless communication device 31 serving as a reciprocal access point corresponding to the area that is the application range of the information delivery system. .

  The association database 33 stores the MAC addresses of the portable storage devices 10 of each group used for the movement of information between the information devices 1 and 2 in association with each group under the control of the server control device 34. It has become. The portable storage device 10 used for data movement may be color-identified for each group so that the group can be identified by appearance, or conversely, the group may not be recognized by appearance. .

  Further, as described above, the restoration information is registered in the association database 33 by associating it with the MAC address of the portable storage device 10 in which each divided data is stored. For example, in a setting in which two portable storage devices 10 are included in a group, the number of encrypted data is divided into an odd number column and an even number column, and the divided data of the odd number column is stored in one portable storage device 10. Data indicating that even-numbered divided data is stored in the other portable storage device 10 is stored.

That is, it is linked that odd-numbered divided data is stored corresponding to the MAC address of one portable storage device 10 and even-numbered divided data is stored corresponding to the MAC address of the other portable storage device 10. It is stored as attached data.
In this embodiment, division patterns such as odd columns and even columns are set in advance, and the encrypted data is divided based on this division pattern, and the linked data linked to the MAC address is used as the linked data. Information for restoration is required.
Further, at the time of data decryption, the division stored in the reciprocal portable storage device 10 by the control device 15 of the main portable storage device 10 based on the above-described linkage data registered in the linkage database 33. Restore the data to the original encrypted data.

  In addition, when the encrypted data is divided and restored, the information management server 30 establishes a wireless LAN between the main portable storage device 10 of the portable storage devices 10 in the group and the other portable storage devices 10. To transfer data. That is, when the main portable storage device 10 encrypts and splits the data input from the information device 1, the main portable storage device 10 includes other portable storage devices 10 (including the information management server 30). May be transmitted to the information management server 30 via the wireless LAN, and the information management server 30 that has received the divided data temporarily stores the divided data in the storage device 33, and the associated data described above. Based on this, each divided data is transmitted to the portable storage device 10 other than the main. The transmitted divided data is erased from the storage device 33.

In the portable storage device 10 and the information management server 30, data is basically moved, and the transmitted data is deleted.
In addition, when data is output from the main portable storage device 10 to the information device 2, the divided data is transmitted from the portable storage devices 10 other than the main to the information management server 30. The information management server 30 temporarily stores the divided data in the storage device 33, and associates the restoration information corresponding to the transmitted MAC address of the portable storage device 10 with each divided data. These divided data and restoration information are transmitted to the main portable storage device 10. The transmitted divided data and restoration information are deleted from the storage device 33.
The server control device 34 basically includes a CPU, a ROM, a RAM, and the like like a personal computer or the like, but may use an embedded MPU as with the portable storage device 10.

  In such an information delivery system, for example, when information is transferred from the output-side information device 1 to the input-side information device 2, a number of portable storage devices 10 grouped into one group are used. The grouping of the repetitive portable storage devices 10 may be performed in advance and stored in the association database 33 of the information management server 30. Further, for example, in the information device 1 on the data output side, it is also possible to connect a number of portable storage devices 10 to be grouped and perform an operation of grouping these portable storage devices 10.

  In this case, for example, when each portable storage device 10 is connected to the information device 1, the management program of the portable storage device 10 may be automatically started on the information device 1 side. In this case, the management program needs to be installed on the information device 1 side. Note that the management program may also be installed when the above-described dedicated driver is installed.

  In this case, the grouping program of the control device 15 of each portable storage device 10 is launched from the management program side, and the group registration of the MAC address from each portable storage device 10 connected to the information device 1 to the information management server 30 The MAC addresses of the portable storage devices 10 grouped in the information management server 30 are registered as one group in the association database. The MAC address of each portable storage device 10 (wireless communication device 14) is received by the server wireless communication device 31 of the information management server 30 when connected by wireless LAN.

  When grouping, the MAC addresses of the plurality of portable storage devices 10 to be grouped are registered in the association database 33 of the information management server 30 as a group, and are stored in association with each MAC address. The above-described division pattern of data (for example, the above-described even-numbered column or odd-numbered column) may be stored.

  When data to be transferred from the information device 1 to the information device 2 is stored in the portable storage device 10 in a grouped state, power is supplied to the wireless communication device 14 by all the portable storage devices 10 in the group. The wireless communication device 14 needs to be recognized and connected to the server wireless communication device 31 of the information management server 30. When there is a portable storage device 10 that is not connected to the server wireless communication device 31 in the group, the divided data cannot be transferred and an error occurs.

  Basically, it is preferable that all portable storage devices 10 in the group are connected to the information device 1 or the like by USB and supplied with power through USB connection. Note that at least the main portable storage device 10 (arbitrary portable storage device 10) needs to be connected to the information device 1. Also in this case, when the main portable storage device 10 is connected to the information device 1, the above-described management program is automatically or manually activated, and the portable storage device 10 is put in a state of waiting for data input.

When the management program is launched, for example, a window of a folder corresponding to the portable storage device 10 is displayed on the information device 1.
Here, the portable storage device that becomes the main from the data information device 1 by, for example, overlaying an icon of data (file) to be stored in the information device 1 on the window indicating the portable storage device 10 displayed on the display of the information device 1. The operator instructs the movement to 10. At this time, data to be sent from the information device 1 to the information device 2 is sent from the information device 1 to the main portable storage device 10.

  In the main portable storage device 10, when data is input, the data is stored in the RAM 13 under the control of the control device 15, and the information device 1 is monitored by the management program running on the information device 1. When the operator inputs the password, and the operator inputs the password, the password is input from the information device 1 to the main portable storage device 10, and encryption is started. The encrypted data that has been encrypted is stored in the RAM 13. At this time, the original data input from the information device 1 is deleted when the encryption is completed.

  The main portable storage device 10 associates the number of grouped portable storage devices 10 and division pattern data with the information management server 30 by wireless LAN via the wireless communication device 14 and the server wireless communication device 31. The encrypted data is divided based on the number of portable storage devices 10 in the group and the division pattern read from the database 33.

  Further, the main portable storage device 10 transmits the divided data and the restoration information to the information management server 30 via the wireless LAN. The information management server 30 transmits the received divided data to the portable storage device 10 other than the main in the group specified by each MAC address in the group via the wireless LAN. In the main portable storage device 10, the transmitted divided data is deleted.

  The portable storage devices 10 other than the main in the group receive the divided data by the wireless LAN via the wireless communication device 14 and store them in the RAM 13. Each portable storage device 10 transmits data indicating that the divided data is stored in the RAM 13 to the information management server 30 via the wireless LAN, and the information management server 30 sends these data to the main portable storage device 10. By transmitting via the wireless LAN, the main portable storage device 10 outputs the completion of data storage from the information device 1 to the management program of the information device 1. Then, it is displayed that the transfer of data from the information device 1 to the portable storage device 10 has been completed.

  Next, the main portable storage device 10 is removed from the information device. As a result, the power supply by the USB connection is cut off, so that the portable storage device 10 operates only by the power supply from the rechargeable battery 12. The capacity of the rechargeable battery 12 is small. For example, the capacity of the rechargeable battery 12 is such that power can be supplied for a set approximate time from several minutes to several hours. For example, if the data is not output by connecting to the information device 2 within several tens of minutes, the data in the RAM 13 is lost due to battery exhaustion.

  Therefore, the main portable storage device 10 removed from the information device 1 is immediately carried to the information device 2 and connected to the information device 2 by USB. As a result, power is again supplied to the information device 2 to prevent the data in the RAM 13 from being lost. In this state, the information device 2 also starts the management program for the portable storage device 10. The operator performs an operation of moving the data stored in the information device 2 from the portable storage device 10 to the information device 2 that is the data receiving side, according to the management program of the portable storage device 10. At this time, the management program requests input of a password.

  At this time, all the portable storage devices 10 in the group need to be powered on and connected to the server wireless communication device 31 of the information management server 30 via the wireless LAN. In the process described later, if there is any wireless communication device 14 that is not connected to the server wireless communication device 31 in the portable storage device 10 in the group, an error occurs. Further, the portable storage devices 10 other than the main need not be connected to the server wireless communication device 31 serving as an access point of the information management server 30 and the power is not turned off.

  Further, as shown in FIG. 2, a plurality of server wireless communication devices 31 can be connected to one information management server 30 by wire, and a plurality of information management servers 30 are also shown in FIG. Can be connected to each other via a wireless LAN, a wired LAN, or a WAN to form a network, and the main portable storage device 10 is grouped in an information management server 30 other than the information management server 30 connected by the wireless LAN. The other portable storage device 10 may be connected by a wireless LAN. In this case, the information of the association database 33 of each information management server 30 is shared via the network between the information management servers 30 and the information associated with the MAC address belonging to each group of the association database is determined. Information regarding whether the management server 30 is connected to the wireless LAN may be registered.

  Based on the data from the management program of the information device 2, the main portable storage device 10 requests the information management server 30 to transmit the divided data. In the information management server 30, the group of the portable storage device 10 is specified in the association database 33 from the MAC address of the main portable storage device 10 connected by the wireless LAN, and other than the above-described MAC address in the group. It requests each control device 15 of the portable storage device 10 with the MAC address to transmit the divided data via the wireless LAN.

  Each portable storage device 10 other than the main transmits the divided data stored in the RAM 13 to the information management server 30 via the wireless communication device 14 by wireless LAN. When the information management server 30 receives the divided data transmitted from the portable storage device 10 of each MAC address, the information management server 30 extracts the restoration information associated with the MAC address in the association database, and converts it into the received divided data. The restoration information is associated and transmitted to the main portable storage device 10.

  In the control device 15 of the main portable storage device 10, based on the restoration program stored in the control device 15, data in a state in which the divided data and the information for restoration are linked is received, and the divided data and the divided data are divided. According to the pattern, the divided divided data is restored to be encrypted data. Next, the control device 15 combines the encrypted data restored based on the decryption program. At this time, as described above, the information may be combined using the secret key stored on the information management server 30 side.

The combined data is output from the main portable storage device 10 to the information device 2. As a result, data is transferred from the output side information device 1 to the input side information device 2 via the portable storage device 10.
In the embodiment shown in FIG. 1, there is one information management server 30, and the information management server 30 is provided with a server wireless communication device 31 as one access point. Accordingly, there is one wireless LAN communication area corresponding to the access point, and it is necessary that all the portable storage devices 10 in the group be arranged in this one communication area, and the output side information device 1 and The information device on the input side needs to be arranged within this one communication area.

  In the modification shown in FIG. 2, one information management server 30 includes server wireless communication devices 31 as two access points. Therefore, there are a number of communication ranges for each access point. The communication areas may be separated or partially overlapped. When the communication range is away, the wireless LAN connection is temporarily disconnected when the main portable storage device 10 is moved.

  In the modified example shown in FIG. 3, not the access point but the information management server 30 is arranged in a repetitive number. In this case as well, a reciprocal communication range occurs as in the case shown in FIG. In this case, since there are a number of information management servers 30, the information management servers 30 are connected to each other via a dedicated network as described above, and the linked data is shared and the divided data is moved between the information management servers. It is necessary to make it possible.

  In such an information delivery system and information delivery method, the data storage portion of the portable storage device 10 is constituted by the volatile RAM 13, so that, for example, charging can be performed with the USB disconnected. If the battery 12 runs out, the data will be lost. At this time, by setting the capacity of the rechargeable battery 12 to such an extent that the portable storage device 10 can be operated for several minutes to several hours, data can be lost in a relatively short time. Therefore, even if a third party discovers the lost portable storage device 10, there is a high possibility that data is lost at that time.

In addition, when the portable storage device 10 discovered after being lost or taken away is taken out of the facility of the company, the rechargeable battery 12 is likely to run out, and the data is lost. It is highly likely that it has disappeared.
Further, since the encrypted data is divided and stored in the plurality of portable storage devices 10 in the group, even if some portable storage devices 10 in the group are lost or lost due to theft, some portable storage devices The original encrypted data cannot be restored from the divided data of the device 10.
This makes it difficult to decrypt the encrypted data.

  Further, by erasing the remaining data in the portable storage device 10 (for example, causing the battery to run out), the data cannot be restored. As a result, the data cannot be decrypted and the data is not abused.

  In addition, the restoration and decoding of the divided data performed on the portable storage device 10 basically requires that the portable storage device 10 is connected to the wireless LAN of the information management server 30. Therefore, even if all the portable storage devices 10 in the group are stolen, it is difficult to restore the divided data in a state away from the information management server 30. In particular, because the information management server 30 side has restoration information indicating which part of the encrypted data is the divided data, it is difficult to restore the divided data, and it is necessary to decrypt the encrypted data even if it can be restored.

  Further, there is no need to carry the main portable storage device 10 and other portable storage devices 10 in the group together, and there is a possibility that the portable storage device 10 in the group may be lost or stolen at once. Low. Further, if the divided data is also stored in the information management server 30, even if all the portable storage devices 10 in the group are stolen, if the information management server 30 is not stolen, the data is restored as described above. Becomes impossible.

  In the above example, the data is lost when the rechargeable battery 12 runs out of battery. However, in the control device 15 of the portable storage device 10, the data is stored in the RAM 13 every predetermined time (for example, several tens of seconds to several minutes). It is also possible to operate an erasing program for erasing data (files) that have been stored. At this time, if the wireless communication device 14 is confirmed to be connected to the server wireless communication device 31 of the information management server 30 via the wireless LAN, the deletion program stops erasing data.

  Therefore, when the wireless LAN connection is released, the data stored in the portable storage device 10 is erased in a short time. In this case, without waiting for the battery to run out, the portable storage device 10 can be taken out of the wireless LAN area to erase the data and prevent data leakage. The portable storage device 10 may be provided with a display device (display) that displays the passage of the predetermined time.

  The time during which the voltage of the rechargeable battery 12 decreases and the data in the RAM 13 disappears changes due to differences in the environment such as the charging state and temperature of the rechargeable battery 12, the quality of the RAM 13 varies, and the data is lost. It is difficult to accurately predict the time. On the other hand, when the data is erased at regular intervals while the wireless LAN connection is disconnected, for example, the information management server 30 side logs a disconnection time log of the portable storage device 10. By storing the data, it is possible to accurately estimate the data erasing time from the cutting time and the time when the erasing of the erasing program is repeated.

  Further, the erasure in the erasure program may be invalidated for a preset time. For example, when 1 hour is set as the set time, the data stored in the RAM 13 is deleted when a predetermined time elapses from the set time and the wireless LAN is not connected. Note that the set time basically needs to be shorter than the time when the rechargeable battery runs out.

  In this case, for example, as shown in FIGS. 2 and 3, when a plurality of access points and a plurality of information management servers 30 are provided, and the access points and the information management servers 30 are separated from each other. In addition, when the information devices 1 and 2 to which data should be transmitted correspondingly are away from each other, when the portable storage device 10 moves from the base of the information device 1 to the base of the information device 2, the portable storage device 10 Even if the connection is disconnected, data can be prevented from being erased.

In this case, when the same information management server 30 is provided and the information management servers 30 are connected to each other by WAN, dedicated line, VPN, etc. It can also be used for transmission.
In this case, the portable storage devices 10 other than the main in the group remain on the output-side information device 1 side, and divided data and the like are sent by the connection between the information management servers 30 described above. .

  Even in the wireless LAN communication area, the radio wave is blocked by being covered by a person having the portable storage device 10, or the radio wave condition passes when the portable storage device 10 is moved, There is a risk that the connection of the wireless LAN may be temporarily disconnected due to the influence of noise from other wireless devices or the like. There is a possibility that the timing of disconnecting the wireless LAN in the wireless LAN area coincides with the timing of erasing data by the erasing program. In this case, the data in the portable storage device 10 is erased, and it is necessary to input the data to the portable storage device again, and the usability of the portable storage device 10 may be deteriorated. Therefore, even when the portable storage device 10 is used in a wireless LAN area, the erasure program may be invalidated for a set time.

  Moreover, as shown in FIG. 4, each information management server 30 of a different company or establishment is not connected, and is stored in the portable storage device 10 other than the main in the group left on the information device 1 side. The division data and the association data including the MAC address, division pattern, and restoration information of the portable storage device 10 in the group in the information management server 30 on the information device 1 side are directly transmitted to the information management server 30 on the information device 2 side. If the data cannot be sent online, the data may be sent using another device.

For example, the personal computers 41 and 42 connected to the Internet are arranged on the information device 1 side and the information device 2 side, respectively. Basically, as in the above-described embodiment, the data to be transmitted to the information device 2 of the information device 1 is encrypted and divided by the main portable storage device 10, via the information management server 30 on the information device 1 side. The divided data is stored in the portable storage device 10 other than the main in the group. In FIG. 4, there are two portable storage devices 10 in the group.
At this time, association data such as a division pattern associated with the MAC address of the association database 33 of the information management server 30 on the information device 1 side is stored in one of the portable storage devices 10 other than the main in the group. I will let you.

The portable storage device 10 is connected to the personal computer 41 by USB. One personal computer 42 on the information device 2 side is connected to the portable storage device 10 outside the group that does not store the divided data by USB.
On the personal computer 41 side, data (files) such as divided data and association data stored in the portable storage device 10 connected via USB is attached to an email and transmitted to the personal computer 42 on the information device 2 side.

  On the personal computer 42 side, the email is received and the attached data is stored in the RAM 13 of the portable storage device 10 outside the group connected to the personal computer 42 by USB. At this time, the MAC address in the association data is converted from the MAC address of the portable storage device 10 connected to the personal computer 41 to the MAC address of the portable storage device 10 connected to the personal computer 42. Note that the MAC address before conversion is attached to the email and transmitted.

The association data with the MAC address converted is transmitted to the information management server 30 on the information device 2 side by wireless LAN, and stored in the association database 33 of the information management server 30.
In addition, when there are a plurality of portable storage devices 10 other than the main in the group, the above-described processing using the e-mail is repeated for the number of portable storage devices 10. At this time, the conversion of the MAC address of the association data is performed by transmitting the MAC address before the conversion and the MAC address after the conversion to the information management server 30 via the wireless LAN, so that the association database 33 of the information management server 30 is obtained. Do it above.

The main portable storage device 10 is carried by an operator, for example.
By rewriting the MAC address of the association data as described above, all the portable storage devices 10 other than the main portable storage device 10 in the group are switched to the portable storage device 10 prepared on the information device 2 side.
These portable storage devices 10 store the divided data as described above, and the associated database 33 of the information management server 30 on the information device 2 side rewrites the MAC other than the main portable storage device 10. Restoration information that can restore the divided data corresponding to the address is stored.

Therefore, the encrypted data is restored from the above-mentioned divided data, and the encrypted data is decrypted.
Thus, for example, when data is transferred, the information management server 30 that sets the information device 1 side that outputs data as the wireless LAN communication area and the information device 2 side that receives data as the wireless LAN communication range. Even when the information management server 30 is not directly connected to the online server, the divided data and the tied data are transmitted by another method, for example, e-mail from a personal computer, a smartphone, etc. Data is transferred from the information device 1 side to the information device 2 side by arranging and transferring the divided data on the information device 1 side and the information device 2 side.

  In addition, when the divided data is transmitted / received via e-mail, the capacity of the divided data is limited. This case can be dealt with by increasing the number of portable storage devices 10 to be used, increasing the number of divisions, and reducing the divided data. Further, if the divided data stored in the main portable storage device 10 has a large capacity and the divided data of the other portable storage devices 10 in the group has a small capacity, the number of portable storage devices 10 in the group. It can be handled without increasing the number.

  The portable storage device 10 connected to the information device 1 on the data passing side and the portable storage device 10 connected to the information device 2 on the data receiving side are the main portable storage devices 10 in the group. Although the same portable storage device 10 is used, if the portable storage device 10 is in the group, the portable storage device 10 connected to the information device 1 and data is input and the data is output connected to the information device 2. The portable storage device 10 may be different.

  That is, if the divided data is collected in any portable storage device 10 in the group connected to the information device 2, the divided data can be restored and decrypted in any portable storage device 10 in the group. It is. In this case, the key used for decrypting the encrypted data may be received from the information management server 30.

  Further, although the portable storage device 10 is supplied with power through USB connection, it may be configured such that power cannot be supplied through USB connection at the USB terminal, and a power supply terminal may be provided separately from the USB terminal. . In this case, when the portable storage device 10 is stolen, power is not supplied even if the USB terminal is connected, and the voltage of the rechargeable battery 12 decreases and data is stored in the RAM 12 while attempting to retrieve data. Lost data is lost.

DESCRIPTION OF SYMBOLS 1 Output side information apparatus 2 Input side information apparatus 10 Portable storage device 11 Connection apparatus 12 Rechargeable battery (battery)
13 RAM (volatile memory)
14 Wireless communication device 15 Control device 30 Information management server 31 Server wireless communication device 32 Storage device 33 Association database 34 Server control device

Claims (8)

An information delivery system for delivering data between information devices via a portable storage device,
In order to transfer the data between the output side information device that outputs the data to be transferred and the input side information device to which the data to be transferred is input, the data is stored and the data is transferred A plurality of portable storage devices capable of moving between information equipment bases;
An information management server capable of short-range wireless communication with the portable storage device in communication range;
The portable storage device is
A connection device connected to the information device to input / output data to / from the information device;
A volatile memory for storing data input from the information device;
A wireless communication device that performs short-range wireless communication with the information management server;
A control device for controlling the connection device, the volatile memory, and the wireless communication device;
A battery for supplying power to at least the volatile memory,
The information management server
A server wireless communication device that performs short-range wireless communication with each of the wireless communication devices of the plurality of portable storage devices;
A storage device for storing data transmitted to and received from the portable storage device by short-range wireless communication with the wireless communication device;
Identification information that can identify each of the plurality of portable storage devices registered as one group, and an association database in which data associated with the identification information is registered;
A server control device for controlling the server wireless communication device and the storage device;
The control device of the portable storage device is:
When data is input from the output side information device by the connection device, the data is encrypted to be encrypted data, and the encrypted data is divided into a plurality of divided data to be divided into the volatile memory. Storing the divided data in the volatile memories of the other portable storage devices in the group in which the identification information is registered in the association database of the information management server, Transmitting a part of the divided data to the information management server using the wireless communication device, and erasing the transmitted divided data from the volatile memory;
When outputting data to the input side information device via the connection device, from the information management server that collects the divided data from the other portable storage device in the group, using the wireless communication device, Receiving the collected divided data, restoring the encrypted data before the division from the received divided data and the divided data stored in the volatile memory, and decrypting the restored encrypted data, Output the decrypted data to the information device via the connection device,
The server control device of the information management server is:
A plurality of divided data transmitted from the portable storage device to which the data of the output-side information device is input are allocated and transmitted to the other portable storage devices in the group using the server wireless communication device. ,
In addition, the divided data is received and collected from other portable storage devices in the group other than the portable storage device that outputs data to the input side information device, and the received divided data is stored in the input side information device. An information delivery system, wherein the data is transmitted to the portable storage device that outputs the data. The control device of the portable storage device is:
When dividing the encrypted data, the encrypted data is divided by a set dividing method, and the position on the encrypted data before the division for each divided data based on the dividing method. Associate recovery information indicating
Using the wireless communication device, together with the divided data, transmits restoration information associated with the divided data to the information management server,
When restoring the encrypted data from the divided data, restore the encrypted data based on the restoration information associated with each divided data,
The server control device of the information management server is:
The identification of each portable storage device registered in the association database when transmitting the divided data to each portable storage device when receiving the divided data and the restoration information associated with the divided data In association with the information, register the restoration information associated with the divided data transmitted to the portable storage device corresponding to the identification information,
When the divided data is received from each portable storage device and collected, the restoration information linked to the identification information of each portable storage device is read from the linkage database, and the portable storage corresponding to the identification information The divided data and the restoration information are transmitted to the portable storage device that outputs data to the input-side information device in a state where the restoration information is associated with the divided data received from a device. Item 2. The information delivery system according to Item 1. The control device of the portable storage device is:
While repeatedly performing the process of erasing the divided data stored in the volatile memory every predetermined time,
When erasing the divided data based on the passage of a predetermined time, when the wireless communication device and the server wireless communication device of the information management server are connected by short-range wireless communication, the divided data The information delivery system according to claim 1 or 2, wherein erasure is stopped.   4. The information delivery system according to claim 3, wherein the control device of the portable storage device prohibits a process of deleting the divided data stored in the volatile memory for a set time. The data is transferred between the output side information device that outputs the data to be transferred and the input side information device to which the data to be transferred is input in order to transfer the data between the information devices via the portable storage device. Therefore, a plurality of the portable storage devices that can move between the information devices that store the data and transfer the data,
An information management server capable of short-range wireless communication with the portable storage device in communication range;
The portable storage device is
A connection device connected to the information device to input / output data to / from the information device;
A volatile memory for storing data input from the information device;
A wireless communication device that performs short-range wireless communication with the information management server;
A control device for controlling the connection device, the volatile memory, and the wireless communication device;
A battery for supplying power to at least the volatile memory,
The information management server
A server wireless communication device that performs short-range wireless communication with each of the wireless communication devices of the plurality of portable storage devices;
A storage device for storing data transmitted to and received from the portable storage device by short-range wireless communication with the wireless communication device;
Identification information that can identify each of the plurality of portable storage devices registered as one group, and an association database in which data associated with the identification information is registered;
An information delivery method performed in an information delivery system comprising the server wireless communication device and a server control device that controls the storage device,
The control device of the portable storage device is:
When data is input from the output side information device by the connection device, the data is encrypted to be encrypted data, and the encrypted data is divided into a plurality of divided data to be divided into the volatile memory. Storing the divided data in the volatile memories of the other portable storage devices in the group in which the identification information is registered in the association database of the information management server, Transmitting a part of the divided data to the information management server using the wireless communication device, and erasing the transmitted divided data from the volatile memory;
When outputting data to the input side information device via the connection device, from the information management server that collects the divided data from the other portable storage device in the group, using the wireless communication device, Receiving the collected divided data, restoring the encrypted data before the division from the received divided data and the divided data stored in the volatile memory, and decrypting the restored encrypted data, Output the decrypted data to the information device via the connection device,
The server control device of the information management server is:
A plurality of divided data transmitted from the portable storage device to which the data of the output-side information device is input are allocated and transmitted to the other portable storage devices in the group using the server wireless communication device. ,
In addition, the divided data is received and collected from other portable storage devices in the group other than the portable storage device that outputs data to the input side information device, and the received divided data is stored in the input side information device. An information delivery method comprising: transmitting the data to the portable storage device that outputs the data. The control device of the portable storage device is:
When dividing the encrypted data, the encrypted data is divided by a set dividing method, and the position on the encrypted data before the division for each divided data based on the dividing method. And store it in volatile memory
Using the wireless communication device, together with the divided data, transmits the restoration information associated with the divided data to the information management server, and erases the transmitted divided data and restoration information,
When restoring the encrypted data from the divided data, restore the encrypted data based on the restoration information associated with each divided data,
The server control device of the information management server is:
The identification of each portable storage device registered in the association database when transmitting the divided data to each portable storage device when receiving the divided data and the restoration information associated with the divided data In association with the information, register the restoration information associated with the divided data transmitted to the portable storage device corresponding to the identification information,
When the divided data is received from each portable storage device and collected, the restoration information linked to the identification information of each portable storage device is read from the linkage database, and the portable storage corresponding to the identification information The divided data and the restoration information are transmitted to the portable storage device that outputs data to the input-side information device in a state where the restoration information is associated with the divided data received from a device. Item 6. The information delivery method according to Item 5. The control device of the portable storage device is:
While repeatedly performing the process of erasing the divided data stored in the volatile memory every predetermined time,
When erasing the divided data based on the passage of a predetermined time, when the wireless communication device and the server wireless communication device of the information management server are connected by short-range wireless communication, the divided data 7. The information delivery method according to claim 5, wherein the erasing is stopped.   8. The information delivery method according to claim 7, wherein the control device of the portable storage device prohibits a process of erasing the divided data stored in the volatile memory for a set time.

Images