JP2014115972A - File security ensuring system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To inhibit a file including a confidential document, etc. that is to be transmitted as an attached file, from being opened at an incorrect transmission destination.SOLUTION: In a file security ensuring system, when an information processing device 2 (transmission side) transmits an electronic mail with an attached file including a confidential document, etc. to an information processing device 3 (reception side), the information processing device 2 (transmission side) encrypts the file including the confidential document, etc. on the basis of a name of a safety transmission folder 13 existing in the information processing device 2 (transmission side), generates an archive file of the encrypted file and a restoration program, attaches the archive file to the electronic mail to be transmitted, and transmits the target electronic mail with the attached file to the information processing device 3 (reception side). The information processing device 3 (reception side) which has received the electronic mail to which the archive file is attached, stores the archive file in a safety reception folder 14, and when the restoration program included in the archive file is executed, generates a decryption key on the basis of a name of a safety reception folder 14 and restores the encrypted file including the confidential document, etc.

Description

  The present invention relates to a file security system in the case where a file created by one user is transferred to another user when the same file is shared among a plurality of users, and in particular, the file is attached. The present invention relates to a file safety ensuring system capable of ensuring the safety of an attached file in an electronic mail in which an attached file cannot be opened at an erroneous transmission destination when the electronic mail is erroneously transmitted.

  In recent years, when exchanging documents and information, file exchange via a recording medium such as a USB memory, and exchange by e-mail are generally performed. When exchanging documents, images, information, etc. by e-mail, the desired files such as text files, image files, or audio files created and saved using information processing devices such as personal computers and mobile phones You can easily send an attached file to a destination by selecting and pressing the send button, but you can send an attached file with a simple operation. Even in such a case, since the attachment file is erroneously transmitted by a simple operation, there is a problem that confidential information that should be managed by a company is often leaked to the outside.

  As related to the above-described background art, Patent Document 1 discloses that when an e-mail transmission operation is performed, it is determined whether or not the e-mail is an erroneously transmitted e-mail, and may be an erroneously transmitted e-mail. In the case where there is a characteristic, a mail control device, a program, a method, and an e-mail system are disclosed that can suspend disclosure of an e-mail to a recipient at an appropriate time corresponding to the degree. Such a situation is the same not only when a file attached to an e-mail is transmitted / received but also when a file is transferred via a recording medium.

  This problem is common in the security ensuring system at the time of file transfer as a problem in ensuring the safety of a file that has been transferred to the wrong partner, such as by mistakenly passing a recording medium.

JP 2009-295076 A

  In Patent Document 1, since the disclosure of the email is suspended at the recipient, the effect of promptly transmitting information to the other party, which is one of the advantages of email, cannot be obtained. There is a problem of lacking. In addition, when sending important texts etc., it is generally said that instead of entering directly in the email message field, a file containing important texts etc. is attached and sent. There is also a fact.

  The present invention has been made in view of the above problems, and can quickly receive an e-mail at a transmission destination. Even when an e-mail is erroneously transmitted, the e-mail is attached to the e-mail at the erroneous transmission destination. In addition to a system for ensuring the security of attached files in e-mails that prevent the disclosure of information such as confidential documents sent as attachments by preventing information from being opened, It is an object of the present invention to provide a security system for files used for transfer.

The file security ensuring system of the present invention is an information processing system comprising a plurality of information processing devices capable of recording files,
A file safety ensuring program is installed in at least one of the plurality of information processing devices. In the information processing device in which the file safety ensuring program is installed, at least one file is stored in a folder with a specific name. When recording and encrypting the specific file, the file security ensuring program is started, an encryption key is generated based on the specific name of the folder, and the specific file is encrypted using the encryption key. And remember the encrypted file,
In another information processing device of the plurality of information processing devices, when the encrypted file is received, the encrypted file is stored in a folder with a specific name, and the encrypted file is stored. When decrypting the file, a decryption key is generated based on a specific name of the folder in which the file is stored, and the decryption process of the encrypted file is performed using the decryption key. It is characterized by comprising.

  In the file security ensuring system, a decryption program is attached to the encrypted file, and the decryption process is performed by the decryption program.

In the information processing system comprising a plurality of information processing devices capable of recording a file and having a mail transmission / reception function,
At least the transmission side information processing device has an attached file safety ensuring program installed in the storage device, and the transmission side information processing device attaches a specific file to an e-mail and sends it to the reception side information processing device. When opening
In the information processing device on the transmission side, a file to be attached and transmitted is stored in a folder with a specific name, the attached file security ensuring program is started, and the folder in which the file to be transmitted is stored is specified. An encryption key is generated based on the name of the file, the specific file is encrypted using the encryption key, and the encrypted confidential information file is decrypted when received by the receiving information processing device. And archive the restoration program for further processing,
An email attached with the archived processed file is transmitted from the transmission-side information processing device to the reception-side information processing device,
In the information processing device on the receiving side, when the archived processed file attached to the e-mail is stored in a folder with a specific name and then decrypted, the decryption key is based on the specific name of the folder And the decryption processing of the encrypted file is performed using the decryption key.

The system for ensuring file safety in an e-mail according to the present invention includes:
Equipped with information processing equipment with mail sending / receiving function on the sending side and the receiving side,
When a file having specific confidential information attached to an e-mail transmitted from a transmission-side information processing device to a reception-side information processing device is to be opened by the reception-side information processing device, the transmission-side information processing device Install the attached file safety ensuring program in the storage device of the device, create a safety transmission folder with a specific name in the storage device of the transmission-side information processing device, and have the specific confidential information in the safety transmission folder Save the file
And a safety reception folder having a name that matches the specific name of the safety transmission folder is created in advance in the storage device of the information processing apparatus on the receiving side,
When the attached file safety ensuring program is started in the transmission side information processing device, the control means provided in the transmission side information processing device generates an encryption key based on the name of the safety transmission folder, and the encryption Encrypt the file with the specific confidential information with the encryption key,
Archive and further process the encrypted confidential information file and a restoration program for decryption when received by the receiving information processing device,
The e-mail attached with the archived processed file is transmitted from the transmission-side information processing device, received by the reception-side information processing device, and archived attached to the e-mail by the reception-side information processing device. After the processed file is saved in the safety reception folder, when the restoration program for the archived processed file is started by a predetermined operation, the control means provided in the information processing device on the receiving side sets the name of the safety reception folder. A decryption key is generated based on the decryption process of the confidential information file encrypted with the decryption key,
The encrypted confidential information file included in the processed file is restored under the safety reception folder.

An information processing device of the present invention is an information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
In the information processing apparatus in which the file safety ensuring program is installed and the file safety ensuring program is installed, when recording at least one file in a folder with a specific name and encrypting the specific file, Activating a file safety ensuring program, generating an encryption key based on a specific name of the folder, encrypting the specific file using the encryption key, and storing the encrypted file And

An information processing device of the present invention is an information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
A file safety ensuring program is installed, the file safety ensuring program includes a folder name acquisition unit that acquires the name of the folder specified by the user, and a key generation unit that generates an encryption key based on the acquired folder name An encryption unit that encrypts a file having specific confidential information designated by the encryption key generated by the key generation unit by a predetermined algorithm, and restores the data encrypted by the encryption unit And a decryption program providing unit having an algorithm for the above.

An information processing device of the present invention is an information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
When the encrypted file is received, the encrypted file is stored in a folder with a specific name, and when the encrypted file is decrypted, the file is stored. The decryption key is generated based on a specific name of the folder, and the decryption process of the encrypted file is performed using the decryption key.

An information processing device according to the present invention is an information processing device used in an information processing system including a plurality of information processing devices capable of recording files, and is provided with an encrypted file and a decryption program for decrypting the encrypted file. In an information processing device equipped with a decryption program for receiving an archive file and decrypting the encrypted file,
The decryption program includes a folder name acquisition unit that acquires a name of a storage folder of the archive file, a key generation unit that generates a decryption key from the acquired folder name, and generates encrypted data and decrypts it using the decryption key And a decoding unit for performing the conversion process.

  According to the configuration of the secure system for attached files in an e-mail according to the present invention, a file having confidential information is encrypted based on the name of the safety transmission folder, and the safety reception is performed when the encrypted file is decrypted. Decoding can be based on the name of the folder. That is, it is possible to obtain and decrypt a valid decryption key only when the name of the safety reception folder matches the name of the safety transmission folder. On the contrary, decryption cannot be performed if they do not match.

  Further, according to the configuration of the file security ensuring system of the present invention, a folder having a specific name for storing a file desired to be encrypted in the information processing device (hereinafter also referred to as an encrypted folder) is created, and the encrypted folder Information processing device that generates an encryption key based on the name of the file, encrypts a desired file based on the encryption key, archives it with a decryption program, and decrypts the encrypted file The data is transferred by various means or transferred via a removable medium such as a USB memory, and encrypted in a folder (hereinafter also referred to as a decryption folder) created on the storage medium of the information processing device that performs the decryption. After saving the file, the decryption program included in the encrypted file is executed by executing the encrypted file. To get da name to generate a decryption key, it is possible to perform the decoding process on the basis of the decryption key.

  According to the present invention, even if a file is transferred to the wrong user by sending and receiving the wrong file, the file cannot be correctly restored unless it is a legitimate user without a legitimate folder. Also, in the case of e-mail, even if an e-mail is mistakenly sent to a non-authorized recipient by mistake, there is no valid folder on the receiving side, that is, reception of the same name as the sending folder of the transmitting information processing device. If the folder does not exist on the receiving information processing device, the receiving information processing device will not be able to correctly restore attached files including confidential documents attached to e-mails. By disabling the restoration as information, the operation is restricted so that an attached file including a confidential document attached to an electronic mail cannot be opened correctly. In other words, restoration is performed, but the restored information is not information that can be understood by humans. Therefore, even if the recipient inadvertently mistakenly sends a confidential document as an attached file to another user, it can be prohibited to correctly open the attached file at an incorrect transmission destination. The above safety can be ensured.

  In the present invention, between correct users, it is preferable that both of them have a folder with the same name when sending and receiving files between them. These folders may be referred to as “safety transmission folder” and “safety reception folder”.

  In addition, according to the present invention, even if decryption processing of an encrypted file is performed by a non-authorized user due to erroneous transmission of an e-mail, loss of removable media, outflow of a file due to computer virus infection, etc. If the decryption process is executed without storing the encrypted file in a valid folder, that is, a folder having the same name as the encrypted folder, the decryption key for decrypting the encrypted file is valid. Restoration can be suppressed because it is not a thing. Therefore, for example, even if the user inadvertently mistakenly sends a confidential document as an attached file, it is possible to prohibit opening the attached file at an unauthorized wrong transmission destination. Security can be significantly improved.

It is a conceptual diagram explaining the encryption / decryption of a file when correct transmission is performed in the file security ensuring system of the present invention. It is a conceptual diagram explaining the encryption / decryption of a file when incorrect transmission is performed in the file security ensuring system of the present invention. It is a schematic block diagram which shows the Example which applied the file security ensuring system of this invention to mail transmission / reception. It is explanatory drawing which shows the folder and file structure which were stored in the memory | storage means of the transmission side information processing apparatus of the Example which applied the file security ensuring system of this invention to mail transmission / reception. It is explanatory drawing which shows the folder and file which were stored in the memory | storage means of the information processing apparatus of the receiving side of the Example which applied the security ensuring system of this invention to mail transmission / reception. It is a flowchart which shows the operation example of one Example of the file security ensuring system of this invention, The operation | movement of a transmission side information processing apparatus is shown on the left side, and the operation | movement of a reception side information processing apparatus is shown on the right side. It is explanatory drawing which shows the safety transmission folder of one Example of the file security ensuring system of this invention. It is explanatory drawing which shows the display screen of the transmission side information processing apparatus at the time of inputting the name of a safety reception folder in one Example of the file security ensuring system of this invention. It is explanatory drawing which shows the safety reception folder of one Example of the file security ensuring system of this invention. It is explanatory drawing which shows the outline of operation | movement of the attached file safety ensuring program in the transmission side information processing apparatus in one Example of the file safety ensuring system of this invention. It is explanatory drawing which shows the outline of operation | movement of the decoding program in the information processing apparatus of the receiving side in one Example of the security ensuring system of this invention. It is a flowchart figure which shows operation | movement of the automatic generation function of the folder name used in the case of encryption and a decoding in one Example of the file security ensuring system of this invention.

The form for implementing this invention is demonstrated below. Of course, it is needless to say that the present invention can be easily applied to configurations other than those described in the present embodiment without departing from the spirit of the invention.
Although the present invention will be described primarily for the safety of a file attached at the time of mail transmission / reception, the present invention is not limited to the attached file at the time of mail transmission / reception, and is generally a USB. The present invention can also be applied to information sharing via a removable storage medium such as a memory or on a shared personal computer used by a plurality of users. Accordingly, the description of file transmission / reception is naturally applicable to file transmission / reception in general, such as file transfer and file copy.

  The safety ensuring system 1 shown in FIG. 3 includes information processing devices that can send and receive e-mail between the transmission side and the reception side. In this embodiment, for convenience of explanation, the information processing device shown on the left side of FIG. In the following description, 2 is the transmission side, and the information processing device 3 shown on the right side is the reception side.

  As shown in FIG. 3, each of the information processing device 2 (transmission side) and the information processing device 3 (reception side) is connected to be communicable through an Internet line 40. Each stores various data such as control means 5A and 5B for controlling the entire information processing device, mail transmission / reception functions (mailers) 6A and 6B, an attached file security ensuring program to be described later, and a file attached to the mail. Storage devices (storage means) 7A, 7B, various files stored in the respective storage devices 7A, 7B and various information stored in association with the files are displayed on screens 8A, 8B, recording media, etc. The reading devices 9A and 9B for storing the information stored in the storage devices 7A and 7B for reading and storing the read information are configured.

  4 shows a state in which the configuration of folders and files stored in the storage device 7A of the information processing device 2 (transmission side) is drawn out and conceptually represented, and FIG. 5 shows the information processing device 3 (reception side). ) Shows a state conceptually extracted from the structure of folders and files stored in the storage device 7B. As shown in FIGS. 4 and 5, in the folders stored in the storage devices 7A and 7B of the information processing devices 2 and 3, the received folders 10A and 10A each store files attached to received e-mails. 10B, transmission folders 11A and 11B in which files attached to the transmitted e-mail are temporarily stored, folders such as transmission encrypted folders 12A and 12B in which e-mails that have been encrypted at the time of transmission are stored Although not shown, each folder stores various files corresponding to each. Note that the reception folder, the transmission folder, and the transmission encrypted folder may have a single folder structure, or the reception folder and the transmission folder may be configured to store the transmission encrypted file in the transmission folder. In addition, in the folders stored in the storage devices 7A and 7B of the information processing devices 2 and 3, folders for storing general files such as XX folder, XX folder, aa folder, and bb folder coexist. May be.

  Here, a specific attached file as a confidential document stored in the storage device 7A of the information processing device 2 (transmission side) is sent via the transmission side mail transmission / reception function 6A, the Internet 40 line, etc. and the reception side mail transmission / reception function 6B. An example of an operation when transmitting to a specific information processing device 3 (reception side) will be described below with reference to the drawings as an example.

  As shown in FIG. 6, the user of the information processing device 2 (transmission side) first installs the attached file security ensuring program of the present invention in the storage device 7A of the information processing device 2 (step 1). It is only necessary to install the attached file security ensuring program (step 1) once, and it is natural that the installation is not always performed at the time of file encryption. After installation, start from "Start (after program installation)".

  Next, when the mail transmission / reception function is enabled after the installation of the attached file safety ensuring program of the present invention, as shown in FIG. 7, identification of the safety transmission folder as a temporary storage destination of the attached file attached to the e-mail is specified. The safety transmission folder 13 corresponding to the specific name is created in the transmission folder 11A of the information processing device 2 (transmission side) (step 2-1).

  Here, the specific name of the safety transmission folder 13 is “FOLDR_AAA”. Next, a confidential file 51 is created and stored in the safety transmission folder 13 (step 3). In this case, the confidential aisle 51 to be attached to the mail may be copied from a separately created location and transferred to the safety transmission folder 13.

  Separately from this information processing device 2 (transmission side), the user of the information processing device 3 (reception side) is contacted by another e-mail or the like, and has the same name as the specific name “FOLDR_AAA” of the safety transmission folder 13 As shown in FIG. 9, the safety reception folder 14 is created in the reception folder 10B of the information processing device 3 (reception side) (step 2-2). If this step is before trying to decrypt the encrypted confidential file received by the information processing device 3 (receiving side), the timing is not particularly limited.

  In the next stage, a method for encrypting the confidential file 51 to be transmitted as an attachment to an e-mail will be described in detail later. In that case, as shown in FIG. 8, an item column indicating “Please select a safety transmission folder” appears as a selection request on the screen of the display device 8A of the information processing device 2 (transmission side). It can also be configured. At that time, by selecting “FOLDR_AAA” of the safety transmission folder 13 created in the transmission folder 11A of the information processing device 2 (transmission side), the file name in the safety transmission folder 13 named “FOLDR_AAA” Is displayed, and a file to be encrypted is selected from the files (step 4).

  Next, when the control means 5A provided in the information processing device 2 (transmission side) starts the attached file safety ensuring program by the operation of the transmission side user, a file having specific confidential information is stored in the safety transmission folder 12A. An archive file in which the encrypted data restoration program is attached to the encrypted data is generated and recorded (step 5). When the selected confidential file is encrypted, it is encrypted using “FOLDR_AAA” having a specific name of the safety transmission folder 13 as a key. However, the encrypted file restoration program forming a part of the recorded archive file does not include the information “FOLDR_AAA” of the specific name of the safety transmission folder 13. This is extremely important for securing the attached file.

  Next, the e-mail attached with the archive file is transmitted from the information processing device 2 (transmission side) (step 6). Then, the archive file received by the information processing device 3 (reception side) that is the transmission destination (step 7) and recorded in the safety transmission folder 13 of the information processing device 2 (transmission side) by the predetermined operation is processed. It is sent to the device 3 (reception side). If the information processing device 3 (reception side) is a valid recipient, the same name “FOLDR_AAA” as the specific name of the safety transmission folder 13 provided in the information processing device 2 (transmission side) is obtained in step 2-2. The safety transmission folder 14 is provided. Further, if the information processing device 3 (reception side) is a valid recipient, it is possible to know the specific name “FOLDR_AAA” by making an inquiry or the like, and to provide the safety transmission folder 14 with that name. Thereby, the received archive file can be stored in the safety reception folder 14 (FIG. 9) (step 8).

  In this way, when the archive file including the encrypted file and the restoration program is stored in the safety reception folder 14 of the information processing device 3 (reception side), the restoration program processed into the archive file is executed by a predetermined operation. When activated, the control means 5B provided in the information processing device 3 (reception side) performs decryption processing based on the specific name of the safety reception folder 14, and the encrypted data is restored in the safety reception folder 14. (Step 9). The restoration program in the archive file decrypts the confidential file 52 encrypted using the specific name of the safety reception folder 14 as a key, but the safety transmission of the information processing device 2 (transmission side) that can correctly decrypt the file. There is no information about the specific name of the folder 13, and the secret file 52 is simply decrypted using the specific name of the safety reception folder 14 as a key. Therefore, when the name of the safety reception folder 14 is not valid, that is, the name of the safety reception folder 14 is different from the specific name of the safety transmission folder 13 of the information processing device 2 (transmission side), the decryption process is performed. Although it is possible, the original confidential file 51 cannot be obtained even if it is restored by the restoration program.

  Here, with reference to FIG. 1 and FIG. 2, a more convenient embodiment will be described for secure transmission / reception of confidential files between the information processing device 2 (transmission side) and the information processing device 3 (reception side). .

  The information processing device 2 of company A as the transmission side is provided with a company A transmission / reception folder 60, and the information processing device 3 of company B as the reception side is provided with a transmission / reception folder 70 of company B. Further, in the A company transmission / reception folder 60 of the information processing apparatus 2 of the A company, the A / B company transmission / reception folder 61, the A / C company transmission / reception folder 62, the A / D company transmission / reception folder 63, AE in advance. An inter-company transmission / reception folder 64 is provided, and specific folder names are given, for example, as AB company 1a2b3c4d, AC company 2b3c4d5e, AD company 3c4d5e6f, and AE company 4d5e6f7g. Similarly, in the B company transmission / reception folder 70 of the information processing apparatus 3 of B company, a B-A company transmission / reception folder 71, a BF company transmission / reception folder 72, a BG company transmission / reception folder 73, B- An inter-H company transmission / reception folder 74 is provided, and specific folder names are given, for example, as AB company 1a2b3c4d, BF company 2b3c4d5e, BG company 3c4d5e6f, and BH company 4d5e6f7g.

In the present invention, in order to achieve normal file transmission / reception between the information processing device 2 of the company A and the information processing device 3 of the company B, the transmission / reception folder 61 between the companies A and B in the transmission / reception folder 60 of the company A is used. The specific name “between AB company 1a2b3c4d” and the specific name “between company AB transmission / reception folder 71 in company B transmission / reception folder 70” “AB company 1a2b3c4d” must be the same name. This is because, in the present invention, when encrypting 66 the confidential file 65, the encrypted file 68 is created using the name 67 of the folder 61 in which the confidential file 65 is stored as an encryption key. This is because, at the time of decryption, decryption 76 is performed using the name 77 of the folder 71 in which the reception side file 75 of the encrypted confidential file 68 is stored as a decryption key, thereby creating a restored file 78.
That is, the state shown in FIG. 1 shows a case of correct transmission / reception, and the content of the file 78 decrypted on the receiver side and the content of the confidential file 65 to be sent are the same and recognized normally. File.

  On the other hand, in FIG. 2, a case where an incorrect file is transmitted and received between the information processing device 2 of company A and the information processing device 4 of company X will be described.

  The information processing device 2 of company A as the transmission side has the same configuration as that described in FIG. The information processing device 4 of company X as the receiving side is provided with a company X transmission / reception folder 80. The X company transmission / reception folder 80 of the information processing apparatus 4 of the X company includes, in advance, an XY intercompany transmission / reception folder 81, an XX intercompany transmission / reception folder 82, an XN intercompany transmission / reception folder 83, and an XO intercompany communication folder. A transmission / reception folder 84 is provided, and the specific folder names are given, for example, as 1x2m3n4o between XY companies, 2m3n4o5p between XM companies, 3n4o5p6q between XN companies, and 4o5p6q7r between XO companies.

In this state, it is assumed that an email attached with the confidential file 68 encrypted from the information processing device 2 of company A to the information processing device 3 of company B is erroneously sent to the information processing device 4 of company X. To do. Even in that case, in the present invention, when the user of the company A performs the file creation work, it is normal to think that the file is directed to the company B or the file between the companies A and B. There is almost no doubt that the file is stored in the transmission / reception folder 61 between AB companies. Even in that case, when the secret file 65 is encrypted 66, the encrypted file 68 is created using the name 67 of the folder 61 in which the secret file 65 is stored as an encryption key. Then, the encrypted file 68 is transmitted and received toward the information processing device 4 of company X, which is the wrong transmission destination. In the information processing device 4 of company X, the received file 85 is temporarily stored in the transmission / reception folder 81 between XY companies and an attempt is made to open the file 85. At that time, the restoration program of the present invention uses the name 87 “1 × 2m3n4o between XY companies” of the folder 81 in which the receiving-side file 85 of the confidential file 68 encrypted at the time of decryption is stored as a decryption key 86. To create a restored file 88. In this case, the specific name “AB company 1a2b3c4d” of the AB transmission / reception folder 61 used as the fitting key at the time of encryption and the XY company used as the decryption key at the time of decryption Although the specific name of the transmission / reception folder 81 is different from “XY company 1 × 2m3n4o”, the decryption work is performed, but the resulting file does not become the contents of the original confidential file 65.
That is, the state shown in FIG. 2 shows the case of erroneous transmission / reception, and the content of the file 88 decrypted on the receiver side is completely different from the content of the confidential file 65 to be sent, and the content is The file cannot be understood.

  Next, the archive file generation process (encryption process) and the archive file decryption process will be described in further detail. In FIG. 10, each program is shown as a block diagram in the storage device 7A and the folder 14, but each program is actually loaded on a volatile memory (not shown) and executed by the control units 5A and 5B such as a CPU. Is.

An archive file generation process (encryption process) in the information processing device 2 (transmission side) will be described with reference to FIG.
The attached file security ensuring program 15 includes a folder name acquisition unit 15a that acquires the name of the folder specified by the user, a key generation unit 15b that generates an encryption key based on the acquired folder name, and a key generation unit 15b. An encryption unit 15c that encrypts a file having specific confidential information designated by the generated encryption key with a predetermined algorithm, and an algorithm for restoring the data encrypted by the encryption unit 15c The decryption program adding unit 15d is configured.

  Thereby, the name of the safety transmission folder 13 designated by the user is acquired by the folder name acquisition unit 15a, and the key generation unit 15b of the attached file safety ensuring program 15 generates an encryption key based on the name of the safety transmission folder 13. To do. Here, it is assumed that the name of the safety transmission folder 13 is “folder A”. The encryption unit 15c encrypts data stored in the safety transmission folder 13 based on an encryption key that generates data specified by the user. The encrypted data 22 is processed into the archive file 20 with the decryption program 21 attached thereto by the decryption program adding unit 15d. The archive file 20 generated in this way is transmitted to the information processing device 3 (reception side) via a storage medium such as a USB memory or attached to an e-mail.

  Decryption processing of the received archive file 20 in the information processing device 3 (reception side) will be described with reference to FIG. The received archive file 20 is stored in the safety reception folder 13 by the user. It is assumed that “Folder A” is set as the name of the safety reception folder 13 on the assumption that it is a correct transmission destination. As described above, the decryption program 21 is assigned to the archive file 20 generated by the attached file security ensuring program 15 in the information processing device 2 (transmission side). The decryption program 21 generates a folder name acquisition unit 21a that acquires the name of the storage folder of the archive file 20, a key generation unit 21b that generates a decryption key from the acquired folder name, and generates and decrypts encrypted data 22. A decrypting unit 21c that performs decryption processing with a key is provided. The user on the receiving side needs to execute the decryption program 21 when decrypting the archive file 20. The decryption program 21 instructed to be executed by the user is expanded on a volatile memory (not shown) by the control unit 5B of the information processing device 3 (reception side). The decryption program 21 acquires the name of the safety reception folder 13 in which the archive file 20 is stored by the folder name acquisition unit 21a, and generates a decryption key based on the name of the safety reception folder 13 acquired by the key generation unit 21b. To do. Similarly, the decryption unit 21c decrypts the encrypted data 22 in the archive file 20 based on the generated decryption key. After decryption, files having specific confidential information obtained by decryption (data B19b and data C19c in FIG. 11) are stored in the safety reception folder 13.

  According to the encryption process and the decryption process as described above, for example, as shown in FIGS. 10 and 11, by setting the folder name to be saved by the transmission side and the reception side in advance as “folder A”, After remembering the password for encryption and decryption, after saving the file with confidential information in the folder, simply execute the attached file security ensuring program or execute the archive file decryption program, It becomes possible to encrypt and decrypt files having confidential information. If the name of the safety reception folder does not match the name of the safety transmission folder, the encrypted file cannot be correctly released depending on the generated decryption key, and the file having the encrypted confidential information Can be decrypted, but restoration as a correct file fails, and a file having confidential information cannot be restored.

  The more complex the folder name is, the higher the security strength is. However, if the folder name is randomly generated to make it a complex name, the destination of the encrypted file with the folder name at a glance can be specified. It becomes difficult to specify. In order to solve this, a function for automatically generating a folder name with high usability and high encryption strength will be described with reference to FIG. The folder name has a fixed length of 32 characters.

  When the automatic file name generation function is executed, first, various variables are initialized (S1201). Subsequently, the user is prompted to select a folder, and the folder name is acquired. The acquired folder name is stored in the variable p (S1202). A character is selected based on the random number and stored in the variable c (S1204). It is determined whether the character stored in the variable c can be used for the folder name or the file name (S1205). If the character cannot be used, the character is selected again based on the random number. If the folder name or file name can be used, the variable s is added with the character stored in the variable c. Steps S1204 to S1206 are repeated (S1203 to S1207) until the number of characters of the variable s and the number of characters of the customer name input by the user become the predetermined number of characters (32 characters in FIG. 12). At this point, the user exits the loop and adds a random character string to the folder name selected by the user by adding the character string stored in the variable s after the folder name selected by the user stored in the variable p. Can do.

  By adopting the folder name to which the automatically generated character string is added in this way, it is possible to adopt it as a random character string folder name without worrying about the password folder name. For example, if the folder selected by the user is a customer name, the above function can be used to name the customer name and make it a random character string folder name. It is also easy to grasp. By distributing the folder name generated in this way to users on the sending side and receiving side using the attached file security ensuring program and using it as the name of the folder for decryption, a file security ensuring system with high encryption strength can be obtained. Can be built.

  In the present invention, even if an e-mail is inadvertently sent to a recipient other than a legitimate recipient by carelessness, the attached file does not have a legitimate folder on the receiving side, that is, an information processing device. When the safety reception folder 14 having the same name as the safety transmission folder 13 of 2 (transmission side) does not exist in the information processing device 3 (reception side), the information processing device 3 (reception side) has the restoration program 21 included in the archive file 20. The attached file containing confidential documents attached to the e-mail cannot be restored (reverted to the original file), and can be decrypted but cannot be restored. It is possible to prevent information leakage due to erroneous transmission of an attached file including a confidential document. In other words, even if the recipient inadvertently mistakenly sends a confidential document as an attached file, it can be prohibited from opening the attached file as a correct file at an incorrect transmission destination. It is possible to ensure safety.

  As mentioned above, although the Example of this invention was explained in full detail, this invention is not limited to the said Example, A various deformation | transformation implementation is possible within the range of the summary of this invention. For example, in the above embodiment, an encrypted archive file is attached and transmitted by e-mail, and this is received and decrypted on the receiving side. However, the present invention is not limited to this, but FTP (File Transfer Protocol) or The encryption and decryption described in the above embodiment when transferring a file using HTTP (Hyper Text Transfer Protocol) and other various transfer methods, and when transferring a file via a USB memory or other removable media There is no problem even if the procedure is applied. In addition, the decryption program is attached to the encrypted file to be the archive file. However, the present invention is not limited to this, and the decryption program is separately installed in the information processing device 3 (reception side) so that only the encrypted file is stored. Decryption processing may be performed by a decryption program that is sent to the information processing device 3 (reception side) and installed on the information processing device 3 (reception side).

1 Safety Assurance System 2 Sender Information Processing Equipment (Company A)
3 Receiving information processing equipment (Company B)
4 Information processing equipment on the receiving side (Company X)
40 Internet line 5A Control means of transmission side information processing equipment 5B Control means of reception side information processing equipment 6A Mail transmission / reception function (mailer) of transmission side information processing equipment
6B Mail transmission / reception function of the information processing device on the receiving side (mailer)
7A Storage device (storage means) of transmitting information processing device
7B Receiving side information processing device storage device (storage means)
8A Display device of transmitting information processing device 8B Display device of receiving information processing device 9A Reading device of transmitting information processing device 9B Reading device of receiving information processing device 10A Receiving folder (mail receiving folder) of transmitting information processing device
10B Reception folder of the information processing device on the receiving side (mail reception folder)
11A Sending information processing device sending folder (mail sending folder)
11B Sending information processing device sending folder (mail sending folder)
12A Transmitted folder of the transmission-side information processing device 12B Transmitted folder of the reception-side information processing device 13 Safety transmission folder 14 Safety reception folder 15 Attached file security ensuring program 15a Folder name acquisition unit 15b Key generation unit (encryption key generation unit)
15c Encryption unit 15d Decryption program giving unit 19b, 19c Data (file having confidential information)
20 Archive 21 Decryption Program 21a Folder Name Acquisition Unit 21b Key Generation Unit (Decryption Key Generation Unit)
21c Decryption unit 22 Encrypted data

Claims (8)

In an information processing system comprising a plurality of information processing devices capable of recording files,
A file safety ensuring program is installed in at least one of the plurality of information processing devices. In the information processing device in which the file safety ensuring program is installed, at least one file is stored in a folder with a specific name. When recording and encrypting the specific file, the file security ensuring program is started, an encryption key is generated based on the specific name of the folder, and the specific file is encrypted using the encryption key. And remember the encrypted file,
In another information processing device of the plurality of information processing devices, when the encrypted file is received, the encrypted file is stored in a folder with a specific name, and the encrypted file is stored. When decrypting the file, a decryption key is generated based on a specific name of the folder in which the file is stored, and the decryption process of the encrypted file is performed using the decryption key. A file security system characterized by comprising.   2. The file security ensuring system according to claim 1, wherein a decryption program is attached to the encrypted file, and the decryption process is performed by the decryption program. In an information processing system that can record files and has multiple information processing devices with mail transmission / reception functions,
At least the transmission side information processing device has an attached file safety ensuring program installed in the storage device, and the transmission side information processing device attaches a specific file to an e-mail and sends it to the reception side information processing device. When opening
In the information processing device on the transmission side, a file to be attached and transmitted is stored in a folder with a specific name, the attached file security ensuring program is started, and the folder in which the file to be transmitted is stored is specified. An encryption key is generated based on the name of the file, the specific file is encrypted using the encryption key, and the encrypted confidential information file is decrypted when received by the receiving information processing device. And archive the restoration program for further processing,
An email attached with the archived processed file is transmitted from the transmission-side information processing device to the reception-side information processing device,
In the information processing device on the receiving side, when the archived processed file attached to the e-mail is stored in a folder with a specific name and then decrypted, the decryption key is based on the specific name of the folder Is generated, and the decryption process of the encrypted file is performed using the decryption key. Equipped with information processing equipment with mail sending / receiving function on the sending side and the receiving side,
When a file having specific confidential information attached to an e-mail transmitted from a transmission-side information processing device to a reception-side information processing device is to be opened by the reception-side information processing device, the transmission-side information processing device Install the attached file safety ensuring program in the storage device of the device, create a safety transmission folder with a specific name in the storage device of the transmission-side information processing device, and have the specific confidential information in the safety transmission folder Save the file
And a safety reception folder having a name that matches the specific name of the safety transmission folder is created in advance in the storage device of the information processing apparatus on the receiving side,
When the attached file safety ensuring program is started in the transmission side information processing device, the control means provided in the transmission side information processing device generates an encryption key based on the name of the safety transmission folder, and the encryption Encrypt the file with the specific confidential information with the encryption key,
Archive and further process the encrypted confidential information file and a restoration program for decryption when received by the receiving information processing device,
The e-mail attached with the archived processed file is transmitted from the transmission-side information processing device, received by the reception-side information processing device, and archived attached to the e-mail by the reception-side information processing device. After the processed file is saved in the safety reception folder, when the restoration program for the archived processed file is started by a predetermined operation, the control means provided in the information processing device on the receiving side sets the name of the safety reception folder. A decryption key is generated based on the decryption process of the confidential information file encrypted with the decryption key,
A system for ensuring file security in an e-mail, wherein the encrypted confidential information file included in the processed file is restored under the safety reception folder. An information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
In the information processing apparatus in which the file safety ensuring program is installed and the file safety ensuring program is installed, when recording at least one file in a folder with a specific name and encrypting the specific file, Activating a file safety ensuring program, generating an encryption key based on a specific name of the folder, encrypting the specific file using the encryption key, and storing the encrypted file Information processing equipment. An information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
A file safety ensuring program is installed, the file safety ensuring program includes a folder name acquisition unit that acquires the name of the folder specified by the user, and a key generation unit that generates an encryption key based on the acquired folder name An encryption unit that encrypts a file having specific confidential information designated by the encryption key generated by the key generation unit by a predetermined algorithm, and restores the data encrypted by the encryption unit An information processing device comprising: a decryption program providing unit provided with an algorithm for the purpose. An information processing device used in an information processing system including a plurality of information processing devices capable of recording files,
When the encrypted file according to claim 5 is received, the encrypted file is stored in a folder with a specific name, and when the encrypted file is decrypted, Information configured to generate a decryption key based on a specific name of a folder in which a file is stored, and to decrypt the encrypted file using the decryption key Processing equipment. An information processing device used in an information processing system including a plurality of information processing devices capable of recording a file, receives an encrypted file and an archive file to which a decryption program for decrypting the encrypted file is attached, and In an information processing device equipped with a decryption program for decrypting an encrypted file,
The decryption program includes a folder name acquisition unit that acquires a name of a storage folder of the archive file, a key generation unit that generates a decryption key from the acquired folder name, and generates encrypted data and decrypts it using the decryption key An information processing apparatus comprising a decryption unit that performs a digitization process.

Images