JP2020129159A - Management method, management system, management server and management program of computer - Google Patents

Abstract

To prevent information leakage at the time of disaster in which it is difficult to operate a PC.SOLUTION: A PC management method takes an emergency measure (for example, PC lock, data elimination or encryption) which prevents information leakage from a server to a PC via the internet at the time of disaster. The method includes, as steps executed by the server, a disaster information acquisition step which acquires disaster information, and a measure execution command distribution step which transmits a measure execution command instructing to take the emergency measure to the PC, when the disaster information is acquired. The method includes, as the steps executed by the PC, a measure execution command reception step which receives the measure execution command from the server, and a measure execution step which executes the emergency measure.SELECTED DRAWING: Figure 1

Description

The present invention relates to a computer management method, a management system, a management server, and a management program, and in particular, when a management server acquires disaster information, a disaster is taken by taking an emergency measure such as locking a computer registered in advance. Technology for preventing information leakage at times.

With the widespread use of computers such as personal computers (hereinafter referred to as "PC") ranging from government offices, public institutions, private companies to individuals, leakage of information stored in PCs has become a problem. This is because there are many cases where various kinds of confidential information such as personal information and confidential information necessary for business are stored in the PC. Therefore, various techniques for erasing the information in the PC so that it cannot be restored are provided, and are used when the PC is sold or disposed of.

Further, as a document proposing a technique for preventing information leakage from a PC, there are the following patent documents related to the present inventor.

JP, 2007-316789, A JP, 2014-115724, A

By the way, in order to prevent information leakage, it cannot be said that it is sufficient to increase the integrity of the erasing technique itself, that is, the difficulty of restoring the erased data.

This is because the conventional erasing technique is a so-called normal technique and does not always function sufficiently in an emergency such as when a large-scale disaster occurs.

For example, it is difficult to predict the occurrence of disasters such as earthquakes, tsunamis, and fires in advance, and warnings and evacuation advisories will be issued to inform of the occurrence of these disasters while using a PC and the occurrence of imminent disasters such as Earthquake Early Warning. When receiving the information, it is considered that ensuring personal safety is prioritized, and that there is no time or spirit to operate the PC. In addition, since the occurrence of a disaster is sudden, the PC is normally in the logged-on state during work and may be left as it is in a situation where evacuation is required immediately.

Therefore, in order to prevent information leakage more reliably, not only should the integrity of the erasing technology be improved, but also measures should be taken to prevent information leakage without being influenced by the behavior of the PC user in an emergency such as a disaster. Is desirable.

On the other hand, the invention described in the above patent document is intended to prevent information leakage from a lost notebook PC, and does not consider information leakage when a disaster occurs.

Therefore, an object of the present invention is to provide a new proposal capable of preventing information leakage even in the event of a disaster where it is difficult to operate a computer.

In order to solve the above problems and achieve the object, a computer management method according to the present invention is a computer management method for taking emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster. As a step executed by the server, a disaster information acquisition step of acquiring disaster information that is information indicating that a disaster has occurred or is about to occur, and when the disaster information is acquired, take the emergency measure. A measure execution command distribution step of transmitting a measure execution command to instruct the computer via a computer network, the step executed by the computer, the measure execution command receiving step of receiving the measure execution command from a management server, And a step of executing the emergency measure when the measure execution instruction is received.

According to the present invention, when a disaster occurs (including a case where a disaster has not yet occurred but is predicted to occur), the computer executes an emergency measure in response to a notification or instruction from the management server to prevent information leakage from the computer. .. Emergency measures include, for example, locking the computer, erasing information stored in the computer, or encrypting information stored in the computer.

Here, the “lock” of the computer means that a third party cannot use the computer (cannot read/write data). For example, unless the computer is logged off (or signed out/same below) and a predetermined password is input, the lock cannot be unlocked to log on (or sign in/same below). Note that when the lock is applied, it does not matter whether the running application program is terminated or not. Further, for example, a new password may be set, and unless the password is entered, logon may be disabled and then shutdown (power off) may be performed. In this case, the password may be requested at the operating system (hereinafter referred to as "OS") level (in a state where the OS is started), or the boot level (before the OS is started) password may be requested. Is also good.

Further, “erasing” information stored in the computer means erasing information stored in a storage device (auxiliary storage device such as a hard disk drive (HDD) or solid state drive (SSD)). To tell. The specific method of erasing does not matter. For example, the "erase" can be performed by overwriting meaningless fixed data such as "0" or random data such as random numbers over the entire storage area once or a plurality of times. It is also possible. The area to be erased is typically the entire data area, but not only the data area but also the protected area can be the target of the erasing process, and a specific folder (for example, My Documents), file, or data area It may be a copy (such as a partition unit).

In addition, when performing "erasure" as an emergency measure, information to be erased may be backed up. Specifically, before erasing, the information to be erased is transmitted to the management server via the computer network, and the transmitted information is stored by the management server.

Further, the “encryption” of information stored in the computer is highly dependent on the method of encrypting the entire storage device (disk) including the OS area (system area and program files) (entire HDD area). However, it is also possible to use a method of encrypting only a specific folder (for example, My Documents) or a specific area (for example, a data area).

In addition, the "disaster" referred to in the present invention is not limited to natural disasters and includes man-made disasters. Specific examples are earthquakes, tsunamis, river floods (floods), storm surges, landslides, debris flows, typhoons, heavy rains, volcanic eruptions, pyroclastic flows, fires, wildfires, terrorism, emergency (military attacks), nuclear accidents, etc. Are included in the “disaster”, but may be other than these.

The management server obtains disaster information, but this "disaster information" is information about a disaster that has occurred or is expected to occur, and is typically the national or local public entity or these institutions (public offices, etc.). It is published by such a public institution. A typical example is disaster information included in J-alert. More specifically, information about earthquakes such as the Earthquake Early Warning and Nankai Trough Earthquake Information provided by the Meteorological Agency, information about tsunamis such as large tsunami warnings and tsunami warnings, information about volcanoes such as eruption warnings, and record short-time heavy rainfall information. And information on weather such as designated river flood forecasts and landslide disaster warning information, and emergency-related information such as ballistic missile information and large-scale terror information provided by the Cabinet Secretariat.

However, the “disaster information” is not necessarily limited to the information provided by public institutions. For example, information about a fire generated by a fire alarm in a building is also included in the “disaster information” referred to in the present invention, and the management server acquires such disaster information and distributes the information to a computer registered in advance. It is also possible to cause the computer to execute an emergency measure by transmitting an emergency measure execution command.

In addition, even if the type of disaster is the same, there may be several levels of disaster information with different warning levels. For example, as warnings, from the highest level to the lowest level, "special warnings" (those that are expected to cause a serious disaster because the expected phenomenon is particularly abnormal), "warnings" ( It is known that there is a risk of serious disaster), and "Caution" (those that may cause a disaster). Regarding evacuation, in the same way, from the highest level to the lowest level, "evacuation order" (it is necessary to secure your personal safety in an extremely dangerous state), "evacuation advisory" (safe in a very dangerous state Evacuation to a place is required), and “evacuation preparation” (notice to prepare for evacuation).

In the present invention, with respect to such disaster information having different warning levels, only the highest level information (for example, a special warning or evacuation instruction) can be targeted for executing the emergency measure, or one step in addition to the highest level or Even information that is several levels lower (eg warnings and evacuation advisories) can be targeted for action implementation. In this case, the type of emergency measures to be executed should be changed according to the level of disaster information, such as executing "erase" as an emergency measure in the case of a special alarm and executing "lock" in the case of an alarm. You can Similarly, for example, "Erase" is executed in the case of earthquake early warning, and "Lock" is executed in the case of record short-duration heavy rainfall information. For example, emergency measures to be executed according to the type of disaster (disaster information). It is also possible to change the type of.

The measure execution command is preferably transmitted from the management server to the computer by push technology (active transmission by server push). Although it is possible to use pseudo push transmission such as polling, the measure according to the present invention is an emergency measure and requires swiftness.

In one aspect of the present invention, a disaster (disaster information) for which an emergency measure should be executed is registered (stored) in the management server in advance, and a computer corresponding to the disaster information is acquired when the disaster information is acquired. On the other hand, the management server sends a measure execution command.

Specifically, as a step executed by the management server before the action execution command distribution step, one or more pieces of disaster information of a plurality of types of disaster information are specified as disaster information for executing emergency measures on the computer. If the disaster information registered in the measure execution disaster registration step is acquired in the disaster information acquisition step, the measure execution disaster registration step is performed. A measure execution command is transmitted to the computer registered in association with the disaster information.

Further, in the above aspect, the computer in which the disaster information includes information for identifying the target area, and the location information indicating the location of the computer is registered in association with the computer identification information as a step executed by the management server before the action execution command distribution step. The location registration step is further included, and the disaster information registered in the action execution disaster registration step is acquired in the disaster information acquisition step and the target area of the acquired disaster information corresponds to the location registered in the computer location registration step. When it is the case, it is preferable to transmit the measure execution command to the computer registered in association with the disaster information as the measure execution command distribution step.

Some disaster information is distributed nationwide like J-alert related emergency information, but it is common to target specific regions (administrative units such as prefectures or municipalities). This is because the emergency measures are executed only for the computers located in the area covered by the disaster information.

Two or more locations may be registered as the location. This is because, for example, in a portable PC such as a notebook PC, there are a plurality of places where it is used, such as at work and at home. By making it possible to register a plurality of locations, it becomes possible to prevent information leakage by executing an emergency measure even when a disaster occurs on the go.

Specifically, in the computer location registration step, it is possible to register two or more locations as the location of the computer in association with the same computer identification information, and in the action execution command distribution step, the disaster information acquired in the disaster information acquisition step. A measure execution command is transmitted to a computer in which any location registered in association with the information and registered in the computer location registration step corresponds to the target area of the disaster information.

Furthermore, in any of the above aspects, when the emergency measure includes a plurality of different types of measures and the disaster information registered in the measure execution disaster registration step is registered disaster information, a plurality of types of disasters are registered in the measure execution disaster registration step. Two or more pieces of disaster information in the information are registered as registered disaster information, and any one of a plurality of types of measures is registered in association with each of the registered disaster information, and the measure execution command is The computer may execute the measure specified by the measure execution command as an emergency measure, including the information indicating the measure registered in association with the registered disaster information.

In each of the above-described embodiments described as the preferred embodiments of the present invention, the condition for executing the emergency measure, that is, the type of disaster information, the location information of the computer, and the like are registered in advance on the management server side. It is also possible to register these pieces of information in advance on the computer side that executes the emergency measure (referred to as “second aspect”). The second aspect will be described below.

A computer management method according to a second aspect of the present invention is the computer management method according to the present invention, wherein the action execution command includes information specifying a type of disaster information, and the computer executes the action execution command reception step. The step includes a measure execution disaster registration step of registering one or more disaster information of a plurality of kinds of disaster information in the computer as disaster information for executing emergency measures, and the disaster stored in the measure execution disaster registration step. When the information corresponds to the disaster information included in the measure execution command received in the measure execution command reception step, the computer executes the measure execution step.

Also in the second aspect, as in the first aspect, only the computer located in the disaster information target area is to execute the emergency measure, two or more locations are registered as the location of the computer, and It is possible to take different emergency measures depending on the type of disaster information.

Specifically, in the computer management method according to the second aspect, the measure execution instruction further includes information for identifying the target area, and the location of the computer is set as the step executed by the computer before the step of receiving the measure execution instruction. The disaster information specified by the measure execution command received in the measure execution command reception step corresponds to the disaster information registered in the measure execution disaster registration step, which further includes a computer address registration step of registering the location information shown in the computer. In addition, when the target area specified by the measure execution command received in the measure execution command reception step corresponds to the location registered in the computer location registration step, the computer may execute the measure execution step.

In the computer management method according to the second aspect, in the computer location registration step, it is possible to register two or more locations as the location of the computer in association with the same computer identification information. The disaster information specified by the command corresponds to the disaster information registered in the measure execution disaster registration step, and the target area specified by the measure execution command received in the measure execution command reception step is the computer location registration step. The computer may perform the action implementation step if it corresponds to any one of the registered locations.

Furthermore, in the computer management method according to the second aspect, when the emergency measure includes a plurality of different types of measures and the disaster information registered in the measure execution disaster registration step is registered disaster information, in the measure execution disaster registration step, Two or more types of disaster information of a plurality of types of disaster information are registered as registered disaster information, and any one of the plurality of types of measures is registered in association with each of the registered disaster information, As a result, in the measure execution step, the computer may execute the measure registered in association with the disaster information in the measure execution disaster registration step as an emergency measure.

The present invention can take the form of a computer management system, a management server, and a management program, as well as the above management method.

That is, the computer management system according to the present invention is a computer management system that takes urgent measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster, wherein the management server has a disaster occurring or has occurred. A disaster information acquisition unit that acquires disaster information, which is information indicating that it is likely to occur, and an action execution instruction that instructs the computer to take emergency measures when the disaster information acquisition unit acquires disaster information. A measure execution command distribution unit for transmitting via a computer network, the computer is an emergency measure management unit that receives a measure execution command from the management server; and when the emergency measure management unit receives a measure execution command, And an emergency measure execution unit for executing emergency measures.

Further, the emergency measure execution unit can execute, as an emergency measure, any one of locking the computer, erasing the information stored in the computer, and encrypting the information stored in the computer.

Furthermore, in the case where the emergency measure executed by the emergency measure execution unit is erasing of information stored in the computer, the emergency measure management unit is stored in the computer before the emergency measure is executed. The information may be transmitted to the management server via the computer network, in which case the management server stores the transmitted information.

Also in the computer management system according to the present invention, similar to the computer management method, there are a first mode in which conditions for executing emergency measures are registered in the management server side and a second mode in which they are registered in the computer side. It is possible to adopt.

That is, in the computer management system according to the first aspect, in the computer management system, one or more pieces of disaster information of a plurality of types of disaster information are identified as disaster identification information for executing emergency measures on the computer, and computer identification information for identifying the computer. The management server further includes a measure-execution disaster storage unit that is registered in association with the measure-execution command storage unit, and when the disaster information acquisition unit acquires the disaster information, the measure-execution instruction distribution unit is associated with the disaster information and stored in the measure-execution disaster storage unit. An action execution command is transmitted to the stored computer.

Further, in the computer management system according to the first aspect, the disaster information includes information that identifies the target area, and the action execution disaster storage unit stores the location information indicating the location of the computer in association with the computer identification information. When the disaster information acquisition unit acquires the disaster information, the measure execution command delivery unit is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and the measure execution disaster storage unit There is a case where the location stored in is transmitted to the computer that corresponds to the target area of the disaster information.

Further, the action execution disaster storage unit stores two or more locations as computer locations in association with the same computer identification information, and the action execution command delivery unit, when the disaster information acquisition unit acquires the disaster information, Any one of the two or more locations where the disaster information is registered in the action execution disaster storage unit as disaster information for executing emergency measures and is stored in the action execution disaster storage unit is the target of the disaster information. In some cases, a measure execution order may be sent to a computer applicable to the area.

Furthermore, when the emergency measure execution unit can execute a plurality of types of emergency measures, and the disaster information stored in the measure execution disaster storage unit is used as registered disaster information, the measure execution disaster storage unit can generate multiple types of disasters. Two or more pieces of disaster information among the information are stored as registered disaster information, and any one of a plurality of types of emergency measures is stored in association with each of the registered disaster information, and the measure execution command is a registered disaster. The emergency measure execution unit may execute the emergency measure specified by the measure execution instruction, including the information indicating the emergency measure stored in association with the information.

Also, in the computer management system according to the first aspect, in the computer management system of the present invention, the action execution instruction includes information specifying a type of disaster information, and the computer is one or more of a plurality of types of disaster information. Further, the emergency measure execution unit stores the disaster information stored in the measure execution disaster storage unit as the disaster information for executing the emergency measure. The emergency measure execution unit receives the disaster information stored in the measure execution disaster storage unit by the emergency measure management unit. Sometimes emergency measures are taken.

On the other hand, in the computer management system according to the second aspect, the measure execution command further includes information for identifying the target area, and the measure execution disaster storage unit further stores location information indicating the location of the computer. The disaster information specified by the measure execution command received by the user corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution command is stored in the measure execution disaster storage unit. When the location specified by the location information that is present corresponds to the location, the emergency response execution unit executes the emergency response.

Moreover, in the computer management system according to the second aspect, the measure execution disaster storage unit can store two or more locations as the location of the computer, and the disaster specified by the measure execution command received by the emergency measure management unit. Either the information corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution instruction is specified by the location information stored in the measure execution disaster storage unit. When applicable to the location, the Emergency Measures Execution Department may execute emergency measures.

Further, also in the computer management system according to the second aspect, the emergency measure execution unit can execute a plurality of types of emergency measures, and the measure execution disaster storage unit includes a type of disaster information and a plurality of types of emergency measures. The emergency measure execution unit may store any one of them in association with each other, and the emergency measure execution unit may execute the emergency measure corresponding to the disaster information specified by the measure execution instruction received by the emergency measure management unit.

Further, the management server according to the present invention is a management server that causes the computer to execute an emergency measure for preventing information leakage from the computer in the event of a disaster, and is disaster information that is information indicating that a disaster has occurred or is likely to occur. The disaster information acquisition unit that acquires the information, and the action execution instruction distribution unit that transmits the action execution instruction to the computer via the computer network to instruct emergency action when the disaster information acquisition unit acquires the disaster information. With. The emergency measure is, for example, locking, erasing, or encryption, like the computer management system described above.

Further, in the management server of the present invention, as a preferred mode, one or more pieces of disaster information of a plurality of types of disaster information are registered as disaster information for executing emergency measures on a computer in association with computer identification information for identifying the computer. When the disaster information acquisition unit acquires the disaster information, the measure execution command delivery unit stores the measure execution disaster storage unit in a computer stored in the measure execution disaster storage unit in association with the disaster information. Alternatively, the measure execution command may be transmitted.

Furthermore, in the management server according to the above aspect, the disaster information includes information for identifying the target area, and the action execution disaster storage unit stores the location information indicating the location of the computer in association with the computer identification information. The command delivery unit, when the disaster information is acquired by the disaster information acquisition unit, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing the emergency measure, and is stored in the measure execution disaster storage unit. The action execution command may be transmitted to a computer whose location is the target area of the disaster information.

Further, in the management server according to this aspect, the measure execution disaster storage unit stores two or more locations as the location of the computer in association with the same computer identification information, and the measure execution command distribution unit uses the disaster information acquisition unit. Any of two or more locations where the disaster information is registered in the measure-execution disaster memory unit as disaster information for executing emergency measures when the disaster information is acquired and stored in the measure-execution disaster memory unit It is also possible to send an action execution command to a computer whose location corresponds to the target area of the disaster information.

Further, in the management server according to the above aspect, when the emergency measure includes a plurality of different types of emergency measures and the disaster information stored in the measure execution disaster memory unit is registered disaster information, the measure execution disaster memory unit, Two or more types of disaster information among a plurality of types of disaster information are stored as registered disaster information, and each of these registered disaster information is stored in association with any one of a plurality of types of emergency measures. The measure execution instruction may include information indicating the emergency measure stored in association with the registered disaster information. This is so that appropriate emergency measures (desired by computer users and owners) can be applied depending on the type of disaster information.

Further, the computer management program according to the present invention causes the computer to execute the emergency measure when a measure execution command for instructing to take an emergency measure to prevent information leakage from the computer at the time of disaster is received from the management server via the computer network. And a measure execution command receiving step of receiving a measure execution command from the management server and a measure execution step of executing an emergency measure when the measure execution command is received. .. The emergency measure is, for example, locking, erasing, or encryption, like the computer management system described above.

Further, in this computer management program, as a preferred mode, the action execution instruction includes information for identifying disaster information, which is information indicating that a disaster has occurred or is about to occur, and before the action execution instruction reception step is executed, A disaster registered in the measure execution disaster registration step that causes the computer to perform a measure execution disaster registration step of storing one or more pieces of disaster information of a plurality of types of disaster information in a computer as disaster information for executing emergency measures. When a measure execution command including information is received in the measure execution command reception step, the computer may execute the measure execution step.

Further, in the computer management program according to the above aspect, the disaster information includes information for identifying the target area, and in the action execution disaster registration step, the location information indicating the location of the computer is further stored in the computer, and the action execution command reception step is performed. When the target area of the disaster information specified by the received action execution command corresponds to the location stored in the action execution disaster registration step, the computer may perform the action execution step.

In the above-mentioned action execution disaster registration step, two or more locations are stored as location information, and the target area of the disaster information specified by the action execution instruction received in the action execution instruction receiving step is stored in the action execution disaster registration step. The computer may be allowed to execute the action execution step when any of the locations described is met.

Further, in the computer management program according to the above aspect, when the emergency measure includes a plurality of different types of different emergency measures and the disaster information stored in the measure execution disaster storage unit is registered disaster information, the measure execution disaster registration step is performed. , Two or more types of disaster information of a plurality of types of disaster information are stored as registered disaster information, and each of these registered disaster information is stored in association with any one of a plurality of types of emergency measures, In the measure execution step, the emergency measure stored in association with the registered disaster information may be executed. This is so that appropriate emergency measures (desired by computer users and owners) can be applied depending on the type of disaster information.

According to the present invention, it is possible to prevent information leakage even in the event of a disaster where it is difficult to operate a computer.

Other objects, features and advantages of the present invention will become apparent from the following description of embodiments of the present invention based on the drawings. In each figure, the same reference numerals indicate the same or corresponding parts.

FIG. 1 is a block diagram showing the computer management system according to the first embodiment of the present invention as it is grasped from the functional side. FIG. 2 is a flowchart showing a processing procedure in the computer management system of the first embodiment. FIG. 3 is a diagram showing a storage table of user information in the user information storage unit (measure execution disaster storage unit) in the first embodiment. FIG. 4 is a block diagram showing the computer management system according to the second embodiment of the present invention in terms of its function. FIG. 5 is a flowchart showing a processing procedure in the computer management system of the second embodiment.

[First Embodiment]
As shown in FIG. 1 to FIG. 3, the computer management system according to the first embodiment of the present invention instructs a pre-registered user PC 11 to execute an emergency measure from a management server 21 through the Internet (computer network) 3 in the event of a disaster. Is delivered to the user PC 11 to execute an emergency measure to prevent information leakage. In the following description, the computer management system may be simply referred to as "system", the management server simply as "server", the user PC simply as "PC", and the emergency measures simply as "measures".

The management server 21 includes a use request receiving unit 22 that receives a use application of the system according to the present embodiment, the type of disaster information to which the emergency measure is applied, the content of the emergency measure to be executed, and information that identifies the user PC 11 (user ID and (Authentication information consisting of password), user information storage unit 23 that stores location information of user PC 11, disaster information acquisition unit 24 that acquires disaster information from disaster information distribution organization 1 that publishes disaster information through Internet 3, disaster prevention Emergency is performed by searching the disaster radio receiving unit 25 that receives disaster information via radio from the disaster information delivery agency 2 that publishes disaster information by radio delivery such as radio, and the user information storage unit 23 when the disaster information is acquired. Communication via the Internet 3 with the applicable PC search unit 27 that extracts the PC 11 that should execute the measure, the measure execution command distribution unit 26 that transmits the measure execution command to the PC 11 extracted by the applicable PC search unit 27, And a communication control unit (network interface) 28 for controlling.

The disaster information from the disaster information distribution organization 2 that publishes the disaster information wirelessly is acquired by the disaster information acquisition unit 24 via the disaster wireless reception unit 25. Further, in the case of the present embodiment, the disaster information distribution institutions 1 and 2 are public institutions (eg, the Fire Service Agency) such as government agencies and local public organizations.

On the other hand, the user PC 11 includes an emergency measure execution unit 14 that executes an emergency measure, an emergency measure management unit 12 that generates a usage request, receives a measure execution command, and instructs the emergency measure execution unit 14 to execute a measure. An authentication information storage unit 13 that stores authentication information for establishing a connection with the management server 21 and a communication control unit (network interface) 17 that controls communication via the Internet 3 are provided. The emergency measure execution unit 14 also includes a PC lock unit 14a that performs a lock process for the PC 11, a data erasure unit 14b that erases data, and an encryption unit 14c that encrypts the hard disk (HDD) 16. Each of these units in the PC 11 is realized by a disaster PC management program installed in advance in the PC 11 that uses the system of this embodiment.

In addition to the above-described configuration, the PC 11 has an OS 15 and a configuration (not shown) generally provided in the PC, that is, an arithmetic processing unit (CPU), a main storage device, an input device (keyboard, mouse, etc.), a display device (display, etc.). Etc. (the same applies to the management server 21). The disaster PC management program and the OS 15 are stored in the HDD 16. However, in order to show the functions of the system according to the present embodiment, the HDD 16 is not shown in FIG. 1 (the same applies to FIG. 4 described later/same below). Is shown as one functional block of. Further, although the HDD 16 is provided as an auxiliary storage device in the present embodiment, another auxiliary storage device such as an SSD (solid state drive) may be provided.

Further, although only one user PC 11 is shown in FIG. 1, the management server 21 manages a plurality (a large number) of PCs and delivers an action execution command to these PCs in the event of a disaster. Further, although only one server is shown for the management server 21, the management server may be composed of a plurality of servers that cooperate with each other, and these servers may perform distributed processing.

The disaster PC management program is a resident program that is automatically started when the PC 11 is started. The program establishes a connection to the management server 21 when it is started, and the management server is always active while the PC 11 is running. The PC 11 (the emergency measure management unit 12 via the communication control unit 17) receives the measure execution command distributed from the Internet 21 via the Internet 3. Note that when the emergency measure management unit 12 (disaster PC management program) accesses the management server 21, a user issued by the management server 21 in response to a usage application (usage request) described later and stored in the authentication information storage unit 13. A connection with the management server 21 is established by automatic authentication using an ID (Identification) and a password.

Processing by the system according to the present embodiment will be described with reference to FIGS. 2 and 3.

First, when the disaster PC management program is installed in the user PC 11 desiring to use this system (step S101), the emergency measure management unit 12 generates a usage request for using this system (step S102), and manages this. An application for using this system is made by transmitting it to the server 21 via the Internet 3. The management server 21 that has received this usage request issues a user ID and password to the PC 11 (emergency measure management unit 12) (step S103), and sends them to the PC 11. In response to this, in the PC 11, the emergency measure management unit 12 stores these user ID and password in the authentication information storage unit 13 (step S104).

Next, the emergency measure management unit 12 requests the management server 21 for option data of registered items. The registered items include information that should be stored in the user information storage unit 23 and that specifies disaster information for executing emergency measures and information that specifies measures to be executed (PC lock, data deletion, data deletion with backup, and Which of the encryptions is to be executed) and information (prefecture and municipality) that identifies the location of the PC 11 are included.

The management server 21 (use request reception unit 22) reads option data relating to each information of the above-mentioned registered items stored in the management server 21 in response to the request from the user PC 11 (step S105), and the user PC 11 (emergency). It is transmitted to the measure management unit 12). In response to this, in the user PC 11, the emergency measure management unit 12 causes the display device (not shown) to display the option data, and causes the user (user or owner of the PC 11) to select each information (step S106). The disaster information presented to the user as the option (selectable disaster information) is disaster information that the disaster information acquisition unit 24 can acquire from the disaster information distribution institutions 1 and 2.

The data selected by the user in step S106 is transmitted to the management server 21 by the emergency measure management unit 12, and in the management server 21, the usage request reception unit 22 associates the data with the identification information (user ID and password) of the PC 11 concerned. It is saved in the user information storage unit 23, and the use registration is completed (step S107).

FIG. 3 shows an example of user information (registration items) stored in the user information storage unit 23. As shown in this figure, the user "Kou" having the registration number 100001 identified by the user ID "15t9ah" and the password "ak26b9" has four disaster information as disaster information (registered disaster information) for executing emergency measures. That is, "Earthquake early warning", "Great tsunami warning", "Tsunami warning" and "Record short-time heavy rainfall information" are registered, and "Erase data" is deleted in case of emergency early warning as an emergency measure to be executed. Registration is performed so that "data deletion" is performed in the case of an alarm, "PC lock" is performed in the case of a tsunami warning, and "PC lock" is similarly performed in the case of record short-duration heavy rainfall information. In the system of the present embodiment, it is possible to perform different measures depending on the type of disaster information in this way.

Further, the user K has registered two locations of “PC 11”, “Shibuya-ku, Tokyo” and “Kohoku-ku, Yokohama-shi, Kanagawa”, and the registered disaster information for any of these locations as the target area When acquired by the disaster information acquisition unit 24 of the management server 21, the corresponding emergency measure (registered corresponding to the registered disaster information) will be executed.

In the system of this embodiment, two locations can be registered as the location of the PC 11, but it is also possible to register only one location of the PC location that can be registered, or a system that can register three or more locations. It is also possible to

Similarly, the user "Otsu" with the registration number 100002 specified by the user ID "u2rbm3" and the password "25fx63" has three pieces of disaster information "eruption warning evacuation instruction", "eruption warning evacuation recommendation", and "landslide disaster warning". "Alarm" is registered disaster information, and "erasing data with backup", "encryption", and "PC lock" are registered as measures to be taken in response to these. In particular, this user B is registered to execute "Erase instruction of eruption warning" and "Delete data with backup", and execute "PC lock" for evacuation warning of eruption warning with lower warning level. ing. In the system of the present embodiment, it is possible to execute different measures depending on the difference in the warning level of disaster information.

Note that this user B has registered only one “Karuizawa Town, Nagano Prefecture” as a PC location, and when the management server 21 acquires registered disaster information for that location, the PC 11 Measures are implemented at.

The registered items stored in the user information storage unit 23, that is, registered disaster information, execution measures, and PC location can be changed by the user. Specifically, the disaster PC management program (emergency measure management unit 12) can generate a change request of registered items, and the authentication information (user ID and password) stored in the authentication information storage unit 13 When the emergency measure management unit 12 transmits the change request to the management server 21, the use request reception unit 22 authenticates with the authentication information included in the change request, and is stored in the user information storage unit 23 in association with the authentication information. The information regarding the registered items is transmitted to the user PC 11.

Further, the use request accepting unit 22 can transmit the option data of the registered items to the user PC 11 in response to the request from the user PC 11 in response to the change request, as in the case of the use application. In the same way as above, select data to be registered from the options, and change (including addition and deletion) the PC location registered in the user information storage unit 23, disaster information for executing emergency measures, and execution measures at any time. You can

Referring back to FIG. 2, when the management server 21 receives the disaster information published by the disaster information distribution institutions 1 and 2 (obtained by the disaster information acquisition unit 24) (step S108), the action execution command distribution unit 26 is executed. Causes the applicable PC search unit 27 to search the information in the user information storage unit 23 and to extract the PC 11 corresponding to the received disaster information (step S109).

Here, the disaster information distributed by the disaster information distribution organizations 1 and 2 includes information that specifies the type of disaster (disaster information) and information that specifies the target area. From these information, the applicable PC search The unit 27 extracts the PC 11 in which the disaster information is registered, and the registered PC location (in case of registering a plurality of PC locations, one of the locations) corresponds to the target area.

For example, referring to the example of FIG. 3, the earthquake information bulletin targeting “Kohoku Ward, Yokohama City, Kanagawa Prefecture” (also in the case of targeting the entire Kanagawa or Kanto region) is a disaster information distribution organization. When the disaster information acquisition unit 24 receives the information from the first and second, and the disaster information acquisition unit 24 receives it, the PC that registers "Earthquake Early Warning" as the registered disaster information and "Kohoku Ward, Yokohama City, Kanagawa Prefecture" as the PC location ( User A) is extracted.

Note that the user Hei uses "Earthquake Early Warning" as the registered disaster information as in the case of Party A, but the target area of the Earthquake Early Warning acquired by the management server 21 is "Kohoku Ward, Yokohama-shi, Kanagawa" Is “Ichikawa City, Chiba Prefecture”, the PC of Hei is not extracted by the applicable PC search unit 27 and is not a target for executing emergency measures. However, if the disaster information covers the entire Kanto region, "Chiba Prefecture" is also included in the Kanto region, so a PC of Hei is also extracted and is subject to the implementation of measures (in case of Hei, backup is included). Data is erased).

Then, when the applicable PC 11 is extracted by the applicable PC search unit 27, the measure execution command distribution unit 26 transmits a measure execution command to these PCs 11 via the Internet 3. This action execution command includes information that specifies the type of action to be executed (PC lock, data erasure, backup data erasure, or encryption). The emergency measure management unit 12 causes the emergency measure execution unit 14 to execute the emergency measure specified by (step S110).

If the measure to be executed is data erasure with backup, the emergency measure execution unit 14 (data erasure unit 14b) sends backup data (erasure target) to the management server 21 via the emergency measure management unit 12 before erasing the data. Information), and then erase the data. The management server 21 stores the backup data transmitted from the PC 11 (step S111).

In the present embodiment, the conditions for executing emergency measures (registration disaster information and execution measures, information about PC location) are registered in advance on the management server 21 side, and when the disaster information is acquired, only the corresponding PC 11 is taken measures. Although the execution command has been distributed, it is also possible to employ a system configuration in which the condition is registered in advance on the PC 11 side instead of the server 21 side and the PC 11 side determines whether or not the disaster information is to execute measures. Hereinafter, such a system will be described as a second embodiment with reference to FIGS. In the description, the same components as those in the first embodiment will be denoted by the same reference numerals in the drawings, redundant description will be omitted, and different points will be mainly described.

[Second Embodiment]
As shown in FIG. 4, in the computer management system according to the second embodiment of the present invention, the management server 41 has the same configuration, but the disaster information acquisition unit 24 receives the disaster information from the disaster information distribution institutions 1, 2. At this time, the applied PC search unit 27 extracts all the user PCs 31 registered in the user information storage unit 23, and the action execution command distribution unit 26 executes the action on all the extracted user PCs 31. Send the instruction. This action execution instruction includes information that specifies the type of disaster information and information about the area targeted by the disaster information (target area information). The user information storage unit 23 stores the identification information (authentication information including the user ID and password) of the user PC 31 issued by the use request receiving unit 22 receiving the use request. Differently, no information about the location of the PC, registered disaster information, and implementation measures is stored.

On the other hand, the user PC 31 (disaster PC management program) includes the measure execution disaster storage unit 18, and the measure execution disaster storage unit 18 stores the measure execution disaster storage unit 18 stored in the user information storage unit 23 in the first embodiment. Conditions, that is, disaster information (registered disaster information) for executing emergency measures, measures to be executed, and information regarding the PC location are stored, and the above-mentioned measure execution command transmitted from the management server 41 is itself (PC31). Take the emergency action that is registered when the action is to be taken by.

Processing by the system of the present embodiment will be described based on FIG.

As shown in FIG. 5, the disaster PC management program is installed in the PC 31 (step S201), a usage request is generated (step S202) and transmitted to the server 41, a user ID and a password are issued (step S203), and the PC 31 is sent. Transmission and storage of the user ID and password (step S204) are the same as those in the first embodiment.

Next, in this embodiment, emergency measures are registered (step S205). This registration is either disaster information for executing emergency measures (registered disaster information) or the type of measures to be executed when the disaster information is published (PC lock, data deletion, backup data deletion, encryption). Or) and information regarding the PC location in the measure execution disaster storage unit 18.

In addition, in the registration, the user is required to manage the disaster PC so that the same registration as the use registration in the management server 41 of the first embodiment (registration by providing options can be selected and registered) can be performed. The option data may be provided together with the program by being stored in a storage medium or downloaded from the server 41.

When the disaster information is acquired by the management server 41 (step S206) and the measure execution command is transmitted to the PC 31, the emergency measure management unit 12 stores the disaster information included in the command in the measure execution disaster storage unit 18. It is determined whether the information is registered disaster information (step S207). If it is not the registered disaster information, the process is terminated assuming that it is not necessary to execute the measures, while if it is the registered disaster information, the emergency measure management unit 12 determines that the area specified by the target area information included in the command. Determines whether or not it corresponds to the PC location stored in the measure execution disaster storage unit 18 (step S208). When the target area does not correspond to the PC location, the processing is terminated as it is not necessary to execute the measures, while when the target area corresponds to the PC location, the emergency measure management unit 12 writes the disaster information to the disaster information. The emergency measure execution unit 14 is caused to execute the measures stored in the measure execution disaster storage unit 18 in association with each other (step S209).

When the measure to be executed is data erasure with backup, the measure is executed after transmitting the information to be deleted to the management server 41 before the measure is executed, as in the first embodiment. Is stored (step S210).

Although the embodiments of the present invention have been described above, it is obvious to those skilled in the art that the present invention is not limited to these and various modifications can be made within the scope of the claims.

For example, in the above-described embodiment, the execution measure can be selected, but the system may be provided with only a single measure (for example, one of lock, encryption, and data deletion), or a system from a computer. Measures other than those described in this specification may be executed as long as the measures can prevent information leakage.

Further, in the above-described embodiment, the location of the PC is registered in advance, but it is also possible to utilize the location information by providing the user PC with the function of acquiring the location information (current location information) by GPS. Specifically, in the system of the first embodiment, the measure execution command distribution unit 26 transmits a measure execution command including the target area information of the disaster information to the user PC 11, and the user PC 11 that receives the command executes a GPS command. The emergency measure management unit 12 may determine whether the current location of the PC 11 is included in the target area specified by the target area information. If the current location is included in the target area, the emergency measure may be executed. Further, also in the system of the second embodiment, if similar processing is performed, it is possible to prevent information leakage by executing emergency measures in the event of a disaster.

1, 2 Disaster information distribution organization 3 Computer network (Internet)
11,31 User PC
12 emergency measure management unit 13 authentication information storage unit 14 emergency measure execution unit 14a PC lock unit 14b data erasing unit 14c encryption unit 15 OS
16 Auxiliary storage device (HDD)
17,28 Communication control unit (network interface)
18 Measure Execution Disaster Storage Unit 21, 41 Management Server 22 Usage Request Reception Unit 23 User Information Storage Unit 24 Disaster Information Acquisition Unit 25 Disaster Radio Reception Unit 26 Measure Execution Command Distribution Unit 27 Applied PC Search Unit

Claims (34)

A computer management method for taking emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster,
The steps performed by the management server include:
A disaster information acquisition step of acquiring disaster information, which is information indicating that a disaster has occurred or is about to occur,
When the disaster information is acquired, a measure execution command distribution step of transmitting a measure execution command instructing to take the emergency measure to the computer via the computer network,
The steps performed by the computer include:
An action execution instruction receiving step of receiving the action execution instruction from the management server;
And a measure executing step for executing the emergency measure when the measure executing instruction is received. The emergency measures are
Locking the computer, or
Erasing information stored in the computer, or
The computer management method according to claim 1, which is encryption of information stored in the computer. The emergency measure is erasure of information stored in the computer,
The computer management method according to claim 1, wherein information to be erased is transmitted to the management server via the computer network before the erasing, and the management server stores the transmitted information. As a step executed by the management server before the step of delivering the action execution command, one or more disaster information of a plurality of types of disaster information is specified as the disaster information for executing the emergency action on the computer. Including an action execution disaster registration step of registering in association with computer identification information,
When the disaster information registered in the action execution disaster registration step is acquired in the disaster information acquisition step, the action is executed for the computer registered in association with the disaster information as the action execution command distribution step. The computer management method according to claim 1, wherein the execution command is transmitted. The disaster information includes information identifying a target area,
As a step executed by the management server before the action execution command distribution step, a computer location registration step of registering location information indicating a location of the computer in association with the computer identification information is further included.
When the disaster information registered in the action execution disaster registration step is acquired in the disaster information acquisition step and the target area of the acquired disaster information corresponds to the location registered in the computer location registration step. The computer management method according to claim 4, wherein, as the action execution instruction distribution step, the action execution instruction is transmitted to a computer registered in association with the disaster information. In the computer location registration step, it is possible to register two or more locations as locations of the computer in association with the same computer identification information,
In the action execution command distribution step, any location registered in association with the disaster information acquired in the disaster information acquisition step and registered in the computer location registration step is stored in a computer corresponding to a target area of the disaster information. The computer management method according to claim 5, wherein the measure execution command is transmitted to the computer. The emergency measures include multiple types of different measures,
When the disaster information registered in the action execution disaster registration step is the registered disaster information,
In the action execution disaster registration step,
Two or more types of disaster information among a plurality of types of disaster information are registered as registered disaster information, and any one of the plurality of types of measures is registered in association with each of these registered disaster information,
The measure execution instruction includes information indicating a measure registered in association with the registered disaster information,
7. The computer management method according to claim 4, wherein in the measure execution step, the computer executes the measure specified by the measure execution instruction as the emergency measure. The action execution instruction includes information identifying the type of disaster information,
As a step executed by the computer before the step of receiving the action execution command, one or more disaster information of a plurality of types of disaster information is registered in the computer as disaster information for executing the emergency action. Including a registration step,
The computer executes the measure execution step when the disaster information stored in the measure execution disaster registration step corresponds to the disaster information included in the measure execution command received in the measure execution command reception step. 4. The computer management method according to any one of 3 to 3. The action execution instruction further includes information identifying a target area,
As a step executed by the computer before the step of receiving the action execution instruction, a computer location registration step of registering location information indicating the location of the computer in the computer is further included.
The disaster information specified by the measure execution command received in the measure execution command reception step corresponds to the disaster information registered in the measure execution disaster registration step, and the measure execution command received in the measure execution command reception step 9. The computer management method according to claim 8, wherein the computer executes the action execution step when the target area specified by is corresponding to the location registered in the computer location registration step. In the computer location registration step, it is possible to register two or more locations as locations of the computer in association with the same computer identification information,
The disaster information specified by the measure execution command received in the measure execution command reception step corresponds to the disaster information registered in the measure execution disaster registration step, and the measure execution command received in the measure execution command reception step 10. The computer management method according to claim 9, wherein the computer executes the action execution step when the target area specified by is corresponding to any one of the locations registered in the computer location registration step. The emergency measures include multiple types of different measures,
When the disaster information registered in the action execution disaster registration step is registered disaster information,
In the action execution disaster registration step,
Two or more types of disaster information among a plurality of types of disaster information are registered as registered disaster information, and any one of the plurality of types of measures is registered in association with each of the registered disaster information,
As a result, in the measure execution step, the computer executes the measure registered in association with the disaster information in the measure execution disaster registration step as the emergency measure, the computer according to claim 8. Management method. A computer management system that takes emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster,
The management server is
A disaster information acquisition unit that acquires disaster information, which is information indicating that a disaster has occurred or is about to occur,
When the disaster information acquisition unit acquires the disaster information, a measure execution command distribution unit that transmits a measure execution command to instruct the emergency measure to be taken to the computer via the computer network,
The computer is
An emergency measure management unit that receives the measure execution command from the management server;
An emergency measure execution unit that executes the emergency measure when the emergency measure management unit receives the measure execution instruction. The emergency measure execution unit,
Locking the computer, or
Erasing information stored in the computer, or
14. The computer management system according to claim 13, which executes encryption of information stored in the computer. The emergency measure executed by the emergency measure execution unit is erasing of information stored in the computer,
Before the emergency measure is executed, the emergency measure management unit transmits the information stored inside the computer to the management server via the computer network,
The computer management system according to claim 13, wherein the management server stores the transmitted information. The management server registers one or more pieces of disaster information of a plurality of types of disaster information as disaster information for executing the emergency measure on the computer in association with computer identification information that identifies the computer. Further equipped with,
When the disaster information acquisition unit acquires disaster information, the measure execution command delivery unit sends the measure execution command to a computer stored in the measure execution disaster storage unit in association with the disaster information. The computer management system according to any one of claims 12 to 14, which transmits. The disaster information includes information identifying a target area,
The measure execution disaster storage unit stores location information indicating the location of the computer in association with the computer identification information,
The measure execution command delivery unit, when the disaster information acquisition unit acquires the disaster information, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing an emergency measure, and the measure execution is performed. The computer management system according to claim 15, wherein the location stored in the disaster storage unit transmits the action execution instruction to a computer corresponding to a target area of the disaster information. The measure execution disaster storage unit stores two or more locations as locations of the computer in association with the same computer identification information,
The measure execution command delivery unit, when the disaster information acquisition unit acquires the disaster information, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing an emergency measure, and the measure execution is performed. The computer management system according to claim 16, wherein one of the two or more locations stored in the disaster storage unit sends the measure execution instruction to a computer corresponding to a target area of the disaster information. .. The emergency measure execution unit is capable of executing multiple types of emergency measures,
When the disaster information stored in the measure execution disaster storage section is used as registered disaster information,
The measure execution disaster storage unit,
Two or more types of disaster information of a plurality of types of disaster information are stored as registered disaster information, and one of the plurality of types of emergency measures is stored in association with each of these registered disaster information. Cage,
The action execution instruction includes information indicating an emergency action stored in association with the registered disaster information,
The computer management system according to claim 15, wherein the emergency measure execution unit executes an emergency measure specified by the measure execution instruction. The action execution instruction includes information identifying the type of disaster information,
The computer further includes a measure execution disaster storage unit that stores one or more disaster information of a plurality of types of disaster information as disaster information for executing the emergency measure,
The emergency measure executing unit executes the emergency measure when the disaster information stored in the measure executing disaster storage unit is received by the emergency measure managing unit. Computer management system. The action execution instruction further includes information identifying a target area,
The measure execution disaster storage unit further stores location information indicating the location of the computer,
The disaster information specified by the measure execution command received by the emergency measure management unit corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution command is the measure. 20. The computer management system according to claim 19, wherein the emergency measure execution unit executes the emergency measure when the location is identified by the location information stored in the execution disaster storage unit. The measure execution disaster storage unit can store two or more locations as locations of the computer,
The disaster information specified by the measure execution command received by the emergency measure management unit corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution command is the measure. 21. The computer management system according to claim 20, wherein the emergency measure execution unit executes the emergency measure when corresponding to any of the locations specified by the location information stored in the execution disaster storage unit. The emergency measure execution unit is capable of executing multiple types of emergency measures,
The measure execution disaster storage unit stores the type of disaster information and any one of the plurality of types of emergency measures in association with each other,
The computer management system according to any one of claims 19 to 21, wherein the emergency measure execution unit executes an emergency measure corresponding to the disaster information specified by the measure execution instruction received by the emergency measure management unit. A management server that causes the computer to execute emergency measures to prevent information leakage from the computer in the event of a disaster,
A disaster information acquisition unit that acquires disaster information, which is information indicating that a disaster has occurred or is about to occur,
And a measure execution command distribution unit for transmitting a measure execution command for instructing to take the emergency measure to the computer via a computer network when the disaster information acquisition unit acquires the disaster information. Characteristic management server. The emergency measures are
Locking the computer, or
Erasing information stored in the computer, or
The management server according to claim 23, which is encryption of information stored in the computer. The system further comprises a measure execution disaster storage unit for registering one or more disaster information of a plurality of types of disaster information as disaster information for executing the emergency measure by the computer in association with computer identification information for identifying the computer.
When the disaster information acquisition unit acquires disaster information, the measure execution command delivery unit transmits the measure execution command to a computer stored in the measure execution disaster storage unit in association with the disaster information. 25. The management server according to claim 23, which transmits. The disaster information includes information identifying a target area,
The measure execution disaster storage unit stores location information indicating the location of the computer in association with the computer identification information,
The measure execution command delivery unit, when the disaster information acquisition unit acquires the disaster information, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing an emergency measure, and the measure execution is performed. The management server according to claim 25, wherein the location stored in the disaster storage unit transmits the measure execution command to a computer corresponding to a target area of the disaster information. The measure execution disaster storage unit stores two or more locations as locations of the computer in association with the same computer identification information,
The measure execution command delivery unit, when the disaster information acquisition unit acquires the disaster information, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing an emergency measure, and the measure execution is performed. 27. The management server according to claim 26, wherein any one of the two or more locations stored in the disaster storage unit sends the measure execution instruction to a computer corresponding to a target area of the disaster information. The emergency measures include a plurality of different emergency measures,
When the disaster information stored in the measure execution disaster storage section is used as registered disaster information,
The measure execution disaster storage unit,
Two or more types of disaster information of a plurality of types of disaster information are stored as registered disaster information, and one of the plurality of types of emergency measures is stored in association with each of these registered disaster information. Cage,
The management server according to any one of claims 25 to 27, wherein the action execution instruction includes information indicating an emergency action stored in association with the registered disaster information. A computer management program for causing the computer to execute the emergency measure when a measure execution command instructing to take an emergency measure to prevent information leakage from the computer at the time of a disaster is received from the management server via the computer network,
An action execution instruction receiving step of receiving the action execution instruction from the management server;
And a measure executing step of executing the emergency measure when the measure executing instruction is received. The emergency measures are
Locking the computer, or
Erasing information stored in the computer, or
The computer management program according to claim 29, which is encryption of information stored in the computer. The action execution instruction includes information specifying disaster information, which is information indicating that a disaster has occurred or is likely to occur,
Before executing the measure execution command receiving step, a measure execution disaster registration step of storing one or more disaster information of a plurality of types of disaster information in the computer as disaster information for executing the emergency measure is performed on the computer. Let me do it
31. The computer is caused to execute the measure executing step when a measure executing command including disaster information registered in the measure executing disaster registering step is received in the measure executing command receiving step. Computer management program. The disaster information includes information identifying a target area,
In the action execution disaster registration step, location information indicating the location of the computer is further stored in the computer,
When the target area of the disaster information specified by the measure execution command received in the measure execution command reception step corresponds to the location stored in the measure execution disaster registration step, the computer executes the measure execution step. The computer management program according to claim 31. In the action execution disaster registration step, two or more locations are stored as the location information,
If the target area of the disaster information specified by the measure execution command received in the measure execution command reception step corresponds to any of the locations stored in the measure execution disaster registration step, the measure execution step is performed by the computer. The computer management program according to claim 32, which is executed by a computer. The emergency measures include a plurality of different emergency measures,
When the disaster information stored in the measure execution disaster storage section is used as registered disaster information,
In the action execution disaster registration step,
Two or more types of disaster information among a plurality of types of disaster information are stored as registered disaster information, and each of these registered disaster information is stored in association with any one of the plurality of types of emergency measures.
The computer management program according to any one of claims 31 to 33, wherein in the action execution step, an emergency action stored in association with the registered disaster information is executed.

Images