JP3961634B2 - Information processing apparatus and computer-readable recording medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention is an information processing device for storing sensitive information encrypted, relates a computer readable recording medium body which records a program used for realization of an information processing apparatus, especially, the confidentiality of sensitive information while maintaining, and an information processing apparatus for realizing the improvement in operability, and to a computer-readable recording medium body which records a program used for realization of the information processing apparatus.
[0002]
In the case of handling confidential information, the information processing apparatus employs a configuration that encrypts confidential information in order to prevent leakage. Even small portable terminals that have recently become popular have adopted a configuration in which confidential information is encrypted because the risk of leakage of confidential information is high due to loss or theft of the terminal.
[0003]
On the other hand, if a configuration for encrypting confidential information is adopted, the user is forced to input an encryption key necessary for the decryption. The input of this encryption key causes operability to deteriorate. From now on, it is necessary to construct a new information processing apparatus that improves the operability while maintaining the confidentiality of confidential information.
[0004]
[Prior art]
When handling a file of confidential information, the information processing apparatus adopts a configuration in which the confidential information is encrypted and the encryption key used for the encryption is registered in the file in order to realize confidentiality.
[0005]
Then, when the user who requests the reference of the encrypted confidential information is requested to input the encryption key, the user designates the encryption key and the reference of the confidential information is issued. When checking whether the input encryption key and the encryption key registered in the file match, and determining that they match, the encryption key registered in the file is used to determine the confidential information of the file. It is configured to decrypt.
[0006]
Then, after the user edits the decrypted confidential information, when requesting that it be encrypted again and stored in a file, the user is requested to input an encryption key, When the encryption request for confidential information is issued by specifying the encryption key from the user, it is checked whether the encryption key entered by the user matches the encryption key registered in the file. When determining this, a configuration is adopted in which confidential information is encrypted and stored in the file using an encryption key registered in the file.
[0007]
Conventionally, when this configuration is adopted, from the standpoint of maintaining the confidentiality of confidential information, the user is prompted to enter an encryption key each time a confidential information reference request is made, and the confidential information is encrypted. The configuration is such that an encryption key is input each time a request is made.
[0008]
[Problems to be solved by the invention]
However, according to such a conventional technique, the user has to input the encryption key each time the file storing the encrypted confidential information is operated, and the operation becomes complicated. There was a point.
[0009]
If this operation is disliked and encryption of confidential information is neglected, there is a problem that the risk of leakage of confidential information increases. In particular, a small portable terminal that has recently become widespread has an advantage that the work place is not limited. On the other hand, an unauthorized operation by a third party occurs, and this risk is extremely high.
[0010]
The present invention has been made in view of such circumstances, and has a configuration for storing encrypted confidential information, and is a new one that improves operability while maintaining confidentiality of confidential information. an object, such as providing an information processing apparatus, and provide a new computer-readable recording medium body which records a program used for realization of the information processing apparatus.
[0011]
[Means for Solving the Problems]
FIG. 1 illustrates the principle configuration of the present invention.
In the figure, reference numeral 1 denotes an information processing apparatus comprising the present invention, which handles encrypted confidential information.
[0012]
The information processing apparatus 1 according to the present invention includes an input / output device 10, a storage device 11, a memory 12, a clock 13, an input unit 14, a determination unit 15, an erasing unit 16, a conversion unit 17, and a setting unit. 18.
[0013]
The input / output device 10 serves as a dialog means with the user. The storage device 11 stores encrypted confidential information. The memory 12 temporarily holds the encryption key. The clock 13 keeps time information.
[0014]
The setting means 18 receives an encryption key input request command input from the input / output device 10 prior to the input of the encryption key, and based on the information on the encryption key holding time described in the encryption key input request command, Set the encryption key retention time. Input means 14 receives the encryption key that Teku is continuing input from the input-output device 10 in the encryption key input request command stored in the memory 12. At this time, the input means 14 may check the validity of the input encryption key and store it in the memory 12 on condition that it is a valid encryption key. Or determining means 15, or determines whether during the time set by the input point or set from unit 18 of the encryption key by the input means 14 holding has elapsed, it ceased input operation which is operated by the input-output device 10 Do while when the holding set of al setting means 18 has elapsed whether the judges.
[0015]
The erasing unit 16 erases the encryption key held in the memory 12. Conversion means 17, using the encryption key held in the memory 12, or to decrypt the secret information to the plain text to be stored in the storage device 11, that encrypts confidential information of the plaintext to be edited by the input device 10.
[0016]
Here, the functions of the information processing apparatus 1 according to the present invention are specifically realized by a program, and this program is stored in a floppy disk or the like, or stored in a disk or the like of a server, and the like. The present invention is realized by being installed in the information processing apparatus 1 and operating on the memory.
[0017]
In the information processing apparatus 1 of the present invention thus constituted, receives an encryption key input request command setting section 18 comes is input prior from the input-output device 10 to the input of the encryption key, the encryption key input request command based on the retention time of the information of the encryption key to be described, to set the retention time of the encryption key, followed by it, the memory 12 receives the encryption key input unit 14 that Teku inputted from the input-output device 10 When stored, the judging means 15 refers to the time information of the clock 13 to judge whether or not the holding time set by the setting means 18 has elapsed from the input time of the encryption key. In response, the erasure unit 16 erases the encryption key held in the memory 12 when the determination unit 15 determines that the retention time has elapsed.
[0018]
Further, in the information processing apparatus 1 of the present invention thus constituted, receives an encryption key input request command setting section 18 comes is input prior from the input-output device 10 to the input of the encryption key, the encryption key input based on the retention time of the information of the encryption key described in the request command, set the retention time of the encryption key, and followed it, receives an encryption key that Teku inputted input means 14 from the input-output device 10 memory 12, whether or not the holding time set by the setting unit 18 has elapsed since the input operation operated by the input / output device 10 is interrupted by referring to the time information of the clock 13. The erasure unit 16 erases the encryption key held in the memory 12 when the determination unit 15 determines that the retention time has elapsed.
[0019]
As described above, in the information processing apparatus 1 according to the present invention, the encryption key input by the user is held in the memory 12 for a certain period of time, and then automatically deleted, whereby the encryption key is stored in the memory 12. While maintaining the confidentiality of confidential information, the user can plainly encrypt encrypted confidential information without entering an encryption key and can encrypt confidential confidential information. Improved operability can be realized.
[0020]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention will be described in detail according to embodiments.
FIG. 2 shows an embodiment of the information processing apparatus of the present invention.
[0021]
The information processing apparatus 1 of the present invention according to this embodiment includes an input / output device 10, a storage device 11, an erasure time setting program 20, a set time storage area 21, an encryption key input erasure program 22, and an encryption key storage area. 23 and an encryption / decryption program 24.
[0022]
The input / output device 10 has a keyboard and a display screen, and serves as a dialog means with the user. The storage device 11 includes a ciphertext file 30 that manages encrypted confidential information, and an encryption key that is provided in association with the ciphertext file 30 and that is used to encrypt confidential information stored in the ciphertext file 30. And an encryption key management file 31 for managing. Here, the encryption key stored in the encryption key management file 31 may be further encrypted by itself, but here, for convenience of explanation, it is assumed that it is not encrypted.
[0023]
The erase time setting program 20 is installed via a floppy disk, a line, or the like, and sets the erase time of the encryption key. The set time storage area 21 stores the set value of the erase time set by the erase time setting program 20.
[0024]
The encryption key input erasure program 22 is installed via a floppy disk, a line, or the like, and executes the encryption key input and erasure. The encryption key storage area 23 stores the encryption key input by the encryption key input / erasure program 22.
[0025]
The encryption / decryption program 24 is installed via a floppy disk, a line, etc., and encrypts plaintext confidential information and stores it in the encrypted text file 30 or reads encrypted confidential information from the encrypted text file 30. Decrypt.
[0026]
FIG. 3 shows an example of a processing flow executed by the erasure time setting program 20, FIG. 4 shows an example of a processing flow executed by the encryption key input erasure program 22, and FIGS. 5 and 6 show an encryption / decryption program. An example of a processing flow executed by 24 is illustrated. Next, according to these processing flows, the present invention will be described in detail.
[0027]
When the erasure time setting program 20 is started, first, as shown in the processing flow of FIG. 3, first, in step 1, the default value of the erasure time is stored in the set time storage area 21.
[0028]
Subsequently, in step 2, when it is detected that the setting value of the erasing time is input from the user and it is detected that the setting value of the erasing time is input, the process proceeds to step 3 and the setting time storage area 21 is reached. The default value of the erase time stored in is replaced with the set value of the erase time input by the user.
[0029]
Subsequently, in step 4, it is determined whether or not a termination request has been issued by the user. When determining that the termination request has been issued, the process is terminated, and when determining that the termination request is not issued. By returning to step 2, the set value of the erase time stored in the set time storage area 21 is rewritten to the one designated by the user.
[0030]
In this way, the erase time setting program 20 performs processing so as to store the set value of the erase time set by the user in the set time storage area 21.
On the other hand, when the encryption key input erasure program 22 is started, as shown in the processing flow of FIG. 4, first, in step 1, it waits for the input of the encryption key from the user, and the encryption key is When the input is detected, the process proceeds to step 2 where the input encryption key and the encryption key managed in the encryption key management file 31 are collated to determine the encryption key input from the user. Check if it is legitimate.
[0031]
When it is determined that the encryption key input from the user is not valid according to the determination process in step 2, the process is terminated without accepting the encryption key. On the other hand, when it is determined that the encryption key input by the user is valid, the process proceeds to step 3 where the input encryption key is stored in the encryption key storage area 23, and in the subsequent step 4, The set value of the erase time stored in the set time storage area 21 is read.
[0032]
Subsequently, in step 5, “0” is set to the value of the variable t indicating the elapsed time, and in the subsequent step 6, the time counting process is started, and the value of the variable t is sequentially incremented as time elapses. Subsequently, at step 7, it is determined whether or not the value of the variable t has reached the erase time set value read at step 4, and when it is determined that the variable t has not been reached, the process returns to step 6 to return to the variable When the process of incrementing the value of t is continued and it is determined that it will be reached, the process proceeds to step 8 where the encryption key stored in the encryption key storage area 23 is erased (destroyed) and the process ends.
[0033]
In this way, when a valid encryption key is input from the user, the encryption key input erasure program 22 stores it in the encryption key storage area 23 and sets the erase time set by the user from that storage. When elapses, the stored encryption key is processed to be deleted.
[0034]
According to the processing of the encryption key input erasure program 22, the encryption key storage area 23 holds the encryption key input by the user for a specified time.
In response to the processing of the encryption key input erasure program 22, when the encryption / decryption program 24 enters the encryption processing, first, as shown in the processing flow of FIG. When it is detected that the encryption instruction command is input after waiting for the input of the command, the process proceeds to step 2 to determine whether or not the encryption key is held in the encryption key storage area 23. .
[0035]
When it is determined by this determination processing that the encryption key is held in the encryption key storage area 23, the process proceeds to step 3, and the plaintext confidential information edited by the user using the held encryption key. Is encrypted and stored in the ciphertext file 30. On the other hand, when determining that the encryption key is not held in the encryption key storage area 23, the process proceeds to step 4, and a message indicating that encryption is impossible is output to the input / output device 10.
[0036]
When entering the decryption process, as shown in the process flow of FIG. 6, first, in step 1, the file display command is input after waiting for the user to input the file display command. If this is detected, the process proceeds to step 2 to determine whether or not the encryption key is held in the encryption key storage area 23.
[0037]
When it is determined by this determination processing that the encryption key is held in the encryption key storage area 23, the process proceeds to step 3 to read out the confidential information stored in the ciphertext file 30, and the held encryption key Is used to decrypt the confidential information of the read ciphertext, and the decrypted plaintext confidential information is displayed on the display screen in step 4. On the other hand, when determining that the encryption key is not held in the encryption key storage area 23, the process proceeds to step 5, and a message indicating that decryption is impossible is output to the input / output device 10.
[0038]
In this manner, in the information processing apparatus 1 of the present invention, the encryption key input by the user is held in the encryption key storage area 23 for a certain period of time, and then automatically erased. While the key is held in the encryption key storage area 23, the user can plainly encrypt the encrypted confidential information without inputting the encryption key, and can encrypt the confidential confidential information.
[0039]
In the processing flow of FIG. 4, the encryption key input erasure program 22 erases the stored encryption key when the set value of the erase time set by the user has elapsed after storing the encryption key in the encryption key storage area 23. However, as shown in the processing flow of FIG. 7 (the difference from the processing flow of FIG. 4 is that step 7a is provided), an input operation occurs in the input / output device 10. Each time the value of the variable t is reset, when the set value of the erasure time set by the user elapses after the input operation at the input / output device 10 is interrupted, the stored encryption key is You may take the structure which erases.
[0040]
Also, in the processing flow of FIG. 4, the encryption key input erasure program 22 assumes that the encryption key is already stored in the encryption text file 30 and the encryption key is stored in the encryption key management file 31. The encryption key input from the user is checked for validity. However, when the ciphertext file 30 is not created, the encryption key input by the user is regarded as valid. Therefore, it is stored in the encryption key storage area 23 as it is. According to this processing, the ciphertext file 30 can be created by the encryption / decryption program 24.
[0041]
Next, the present invention will be described in more detail with reference to FIG.
In the figure, 40 is a file operation command, 41 is an encryption key setting unit, 42 is a command control unit, 43 is a file operation control unit, 44 is an encryption processing unit, 45 is an encryption key holding unit, and 46 is a time setting. Part.
[0042]
The file operation command 40 represents an encryption instruction command or a decryption instruction command (the above-described file display command) input via the input / output device 10. Here, the encryption instruction command is “encrypt” and the decryption instruction command is “decrypt”. The input string “encrypt file-name” means “encrypt file named file-name”. The same applies to decoding. The command name and file name input in this format are passed to the command control unit 42.
[0043]
The encryption key setting unit 41 is a command for prompting the input of the encryption key, and here, the command name is “seckey”. When only this command name is input, the encryption key is input by displaying a prompt to input the encryption key, the input encryption key and the command name are passed to the command control unit 42, and the encryption key is input. The set time is passed to the time setting unit 46. Also, if a number such as “seckey 3600” is entered, the number is passed to the time setting unit 46.
[0044]
The command control unit 42 receives the file operation command 40, the encryption key setting unit 41, and other commands, analyzes the command name, and when the command is “encrypt” / “decrypt”, “encrypt” / “ “decrypt” and “file-name” are passed to the file operation control unit 43, and if the command is an encryption key setting command, the encryption key is passed to the encryption key holding unit 45.
[0045]
The file operation control unit 43 controls the encryption processing unit 44 based on the command name and “file-name” received from the command control unit 42 to encrypt or decrypt “file-name”.
[0046]
The encryption processing unit 44 encrypts or decrypts “file-name” using the encryption key held in the encryption key holding unit 45.
The encryption key holding unit 45 receives and holds the encryption key from the command control unit 42, and receives the encryption key destruction instruction from the time setting unit 46 and discards the held encryption key.
[0047]
The time setting unit 46 receives the time from the encryption key setting unit 41, counts the time from the received time, or monitors the input / output device 10, and if the input operation of the input / output device 10 stops, the time setting unit 46 Counting is performed, and when the count value reaches a preset time, the encryption key holding unit 45 is instructed to discard the encryption key. In this process, when a number is received from the encryption key setting unit 41, the number is used as the number of seconds, and the time pointed to by the number of seconds is used as the time until the cipher destruction is instructed.
[0048]
In the case of such a configuration, the user inputs a command “seckey” serving as the encryption key setting unit 41. When started in this way, the encryption key setting unit 41 displays an “Enter-Key:” prompt and prompts the input of the encryption key. In response to this, the user inputs an encryption key such as “MAD01772”.
[0049]
In response to the input of the encryption key, the encryption key setting unit 41 passes “seckey MAD01772” to the command control unit 42, and inputs the time “97: 07: 31: 12: 30 (July 31, 1997). 12:30).
[0050]
In response to this, the command control unit 42 determines from the character string “seckey” that the command is to hold the encryption key, passes “MAD01772” to the encryption key holding unit 45, and receives this to receive the encryption key holding unit. 45 holds “MAD01772”.
[0051]
Next, the operation of decrypting the ciphertext and converting it into plaintext will be described.
The user inputs “decrypt file-name” when decrypting. In response to this, the command control unit 42 determines that it is a decryption instruction, and passes “decrypt file-name” to the file operation control unit 43. In response to this, the encryption processing unit 44 checks whether or not the encryption key is held in the encryption key holding unit 45, and when it is held, performs the decryption process using that and holds it. If not, the decoding process is not performed.
[0052]
Next, the encryption key destruction process will be described.
When the time setting unit 46 receives “97: 07: 31: 12: 30” from the encryption key setting unit 41, the time setting unit 46 counts a time (for example, 1200 seconds) set by default from the time of reception, and the time Is passed, the encryption key holding unit 45 is instructed to discard the encryption key. At this time, when the time is received from the encryption key setting unit 41 at the time when 1200 seconds have not passed, the counting of 1200 seconds starts again from that time. Further, when a number (for example, “3600”) not delimited by “:” is received, counting for 3600 seconds starts from that point.
[0053]
As another function, upon receiving “97: 07: 31: 12: 30” from the encryption key setting unit 41, the time setting unit 46 starts monitoring the input operation of the input / output device 10 and performs the input operation. The time set by default (for example, 1200 seconds) is counted from the time when the password stops, and when the time elapses, the encryption key holding unit 45 is instructed to discard the encryption key. At this time, when the input operation of the input / output device 10 starts again or the time is received from the encryption key setting unit 41 at the time when 1200 seconds have not passed, the count of 1200 seconds starts again from that time. Furthermore, when a number that is not delimited by “:” (for example, “3600”) is received, if the input time is during an input operation, a count of 3600 seconds starts from the next time (the input operation is interrupted) If the input operation is being counted, the 3600-second count starts from that point.
[0054]
In this way, the encryption key input by the user is held in the encryption key holding unit 45 for a certain period of time, and during that time, the user can not only enter the encryption key, but also can encrypt the confidential information and be uncultured. Confidential information can be encrypted.
[0055]
Although the present invention has been described with reference to the illustrated embodiments, the present invention is not limited thereto. For example, in the processing flow of FIG. 4, when the encryption key input from the user is valid, it is stored in the encryption key storage area 23. You may take the structure which stores. Even if this configuration is adopted, the decryption cannot be made normal and no major inconvenience occurs.
[0056]
【The invention's effect】
As described above, in the information processing apparatus of the present invention, the encryption key input by the user is held in the memory for a certain period of time, and then automatically erased, whereby the encryption key is stored in the memory. While being held, the user can plainly encrypt the encrypted confidential information without entering the encryption key, and can encrypt the confidential confidential information, while maintaining the confidentiality of the confidential information, Improved operability can be realized.
[Brief description of the drawings]
FIG. 1 is a principle configuration diagram of the present invention.
FIG. 2 is an example of the present invention.
FIG. 3 is a processing flow executed by an erasing time setting program.
FIG. 4 is a processing flow executed by an encryption key input erasure program.
FIG. 5 is a processing flow executed by an encryption / decryption program.
FIG. 6 is a processing flow executed by an encryption / decryption program.
FIG. 7 is a processing flow executed by an encryption key input erasure program.
FIG. 8 shows an embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Information processing apparatus 10 Input / output device 11 Memory | storage device 12 Memory 13 Clock 14 Input means 15 Judgment means 16 Erasing means 17 Conversion means 18 Setting means

Claims (6)

In an information processing apparatus comprising an input device and a storage device that stores encrypted confidential information,
An encryption key input request command input prior to the input of the encryption key from the input device is received, and the encryption key retention time is determined based on the encryption key retention time information described in the encryption key input request command. Setting means for setting;
Input means for storing in the memory receives an encryption key that Teku inputted subsequently to the encryption key input request command from the input device,
Determining means for determining whether or not the holding time has elapsed since the input time of the encryption key by the input means;
An erasing unit for erasing the encryption key held in the memory when the determining unit determines the passage of the holding time ;
Using the encryption key held in the memory, further comprising a converting means for decoding secret information stored in the storage device in clear text,
A characteristic information processing apparatus. In an information processing apparatus comprising an input device and a storage device that stores encrypted confidential information,
An encryption key input request command input prior to the input of the encryption key from the input device is received, and the encryption key retention time is determined based on the encryption key retention time information described in the encryption key input request command. Setting means for setting;
Input means for storing in the memory receives an encryption key that Teku inputted subsequently to the encryption key input request command from the input device,
Determining means for determining whether or not the holding time has elapsed since the operation of the input device was interrupted;
An erasing unit for erasing an encryption key stored in the memory when the determining unit determines that the retention time has elapsed;
Using the encryption key held in the memory, further comprising a converting means for decoding secret information stored in the storage device in clear text,
A characteristic information processing apparatus. The information processing apparatus according to claim 1 or 2,
The conversion means, the confidential information in plain text to be edited by the input device, the encrypting using the encryption key held in the memory,
A characteristic information processing apparatus. The information processing apparatus according to any one of claims 1 to 3 ,
The input means checks the validity of the encryption key to be input, to be stored in the memory on condition that it is a legitimate encryption key,
A characteristic information processing apparatus. An input device, a computer-readable recording medium body program recording the beam used for realization of an information processing apparatus and a storage device for storing sensitive information encrypted,
The encryption key input request command received prior to the input of the encryption key from the input device is received, and the encryption key retention time is determined based on the encryption key retention time information described in the encryption key input request command. The setting process to set,
An input process for storing in the memory receives an encryption key that Teku inputted subsequently to the encryption key input request command from the input device,
A determination process for determining whether or not the retention time has elapsed since the input time of the encryption key by the input process;
An erasing process for erasing an encryption key held in the memory when the elapse of the holding time is determined by the determining process;
The memory using the encryption key held in the computer-readable recording medium body storage for sensitive information was recorded because of the program may execute the conversion processing for decoded into plain text to the computer of the storage device. An input device, a computer-readable recording medium body which records a program used for realization of an information processing apparatus and a storage device for storing sensitive information encrypted,
The encryption key input request command received prior to the input of the encryption key from the input device is received, and the encryption key retention time is determined based on the encryption key retention time information described in the encryption key input request command. The setting process to set,
An input process for storing in the memory receives an encryption key that Teku inputted subsequently to the encryption key input request command from the input device,
A determination process for determining whether or not the holding time has elapsed since the operation of the input device was interrupted;
An erasure process for erasing the encryption key stored in the memory when the determination process determines that the retention time has elapsed;
The memory using the encryption key held in the computer-readable recording medium body storage for sensitive information was recorded because of the program may execute the conversion processing for decoded into plain text to the computer of the storage device.

Images