JP4173471B2 - Information management system, information management method, recording medium, and information management program - Google Patents

Description

  The present invention relates to an information management system, an information management method, a recording medium, and an information management program.

  In recent years, electronic delivery has been performed in which an electronic file obtained by digitizing a document, an image, or the like is stored in a recording medium such as a CD (Compact Disk) and mailed or delivered to a delivery destination. In such electronic delivery, when so-called confidential information is delivered electronically, security measures must be taken to ensure high confidentiality.

As a security measure to ensure a high level of confidentiality, for example, when an ID of a legitimate user's optical disk drive is recorded on the optical disk, the ID is compared with the ID of the optical disk drive currently in use, and these match. A method of starting a program recorded on an optical disc has been proposed (see, for example, Patent Document 1).
JP 2000-123479 A

  According to the technology disclosed in Patent Document 1 described above, unauthorized use of the recording medium can be prevented even if the personal identification number is known to others, but the confidential information recorded on the recording medium is browsed. In some cases, a corresponding playback device (optical disk drive) must be used, which is not convenient.

  For this reason, attempts have been made to maintain security by devising a method for managing the encryption of recorded information and its key without limiting the playback apparatus, but this has not been sufficient.

  For example, one of the patterns of fraud is that a member of an organization that owns a recording medium makes a copy of the recording medium without knowing the right to use it, and delivers the copy to a third party. Furthermore, it is conceivable that a decryption key is also obtained illegally and delivered together with a copy of the recording medium. In this case, since the physical recording medium remains as it is, it is difficult to detect that fraud has been performed. A third party who illegally obtains a copy of the recorded secrets immediately when the key can be obtained, and even when the key cannot be obtained, is recorded early or later by various attack methods. Information can be acquired.

  The present invention has been proposed in view of the above-described conventional problems, and the object of the present invention is to improve security by preventing access to recorded information without an original recording medium. An information management system, an information management method, a recording medium, and an information management program are provided.

  In order to solve the above problems, in the present invention, as described in claim 1, encryption and encryption are performed based on unique information that can be read but cannot be written recorded on a recording medium. Means for generating a key used for decryption; means for writing a part of the key to the storage medium; and part of the key and the recording information from the recording medium on which the encrypted recording information is written. A gist of the information management system is provided with means for reading and decrypting the recorded information by further using another part of the key under its own management.

  According to a second aspect of the present invention, there is provided means for reading the unique information from a recording medium on which unique information that can be read but cannot be written, and the unique information and an arbitrary input by the administrator Means for generating a public key and first and second secret keys based on the information, means for writing the first secret key to the storage medium, and recording information encrypted by the public key Means for reading the first secret key and the recording information from the recording medium, and further decrypting the recording information using the second secret key under its control. .

  According to a third aspect of the present invention, the unique information can be recorded when the storage medium is manufactured.

  According to a fourth aspect of the present invention, the recording medium is a compact disc, and the unique information can be recorded as part of groove information of the compact disc.

  In addition, as described in claim 5, the unique information may include a lead-in start time included in the groove information.

  According to a sixth aspect of the present invention, the unique information can be recorded in a non-standard part of the recording medium.

  According to a seventh aspect of the present invention, the recording medium is a compact disc, and the non-standard part is an innermost part.

  The recording medium may have a read-only area and a writable area.

  According to a ninth aspect of the present invention, a program for controlling writing and reading of the recording information and a key issuing program may be recorded in the read-only area.

  In addition, as described in claim 10, the unique information can be recorded in a part of the read-only area.

  In addition, as described in claim 11, the public key can be stored in a portable memory device.

  According to a twelfth aspect of the present invention, the second secret key can be stored in a portable memory device.

  According to a thirteenth aspect of the present invention, a step of generating a key used for encryption and decryption based on unique information that is readable but not writable recorded on a recording medium, and A step of writing a part of the key to a storage medium; and reading the part of the key and the recording information from the recording medium on which the encrypted recording information is written; And a step of decrypting the recorded information using a part of the information.

  In addition, as described in claim 14, a step of reading the unique information from a recording medium on which unique information that can be read but cannot be written, and the arbitrary information input by the unique information and the administrator A step of generating a public key and first and second secret keys based on the information, a step of writing the first secret key to the storage medium, and record information encrypted by the public key is written And reading the first secret key and the record information from the recording medium, and further using the second secret key under its control to decrypt the record information. be able to.

  In addition, as described in claim 15, specific information that can be read but cannot be written, a part of a key generated based on the specific information, and encrypted recording information It can be configured as a written recording medium.

  In addition, as described in claim 16, the unique information that can be read but cannot be written, the public key that is generated based on the unique information and arbitrary information input by the administrator, and the first and It can be configured as a recording medium in which the first secret key of the second secret key and the record information encrypted by the public key are written.

  According to a seventeenth aspect of the present invention, there is provided a function for generating a key used for encryption and decryption based on unique information that can be read but cannot be written recorded on a recording medium, and A function of writing a part of the key to a storage medium, and reading the part of the key and the recording information from the recording medium in which the encrypted recording information is written; It is possible to configure as an information management program for realizing a function of decrypting the recorded information by further using a part.

  In addition, as described in claim 18, a function of reading the unique information from a recording medium on which unique information that can be read but cannot be written, and the arbitrary information input by the unique information and the administrator A function for generating a public key and first and second secret keys based on information, a function for writing the first secret key to the storage medium, and record information encrypted by the public key are written As an information management program for realizing a function of reading the first secret key and the record information from the record medium and further decrypting the record information using the second secret key under its own management Can be configured.

  In the information management system, information management method, recording medium, and information management program of the present invention, access control is performed based on unique information that can be read but cannot be recorded recorded on the recording medium. For this reason, the recording information cannot be accessed without the original recording medium, and security can be improved.

  Preferred embodiments of the present invention will be described below with reference to the drawings.

  FIG. 1 is a configuration diagram of an information management system according to an embodiment of the present invention.

  In FIG. 1, a medium manufacturer 1 uses a stamper 11 to manufacture a recording medium 12 on which unique information that can be read but cannot be written is recorded. Delivered in a blank state.

  FIG. 2 is a configuration diagram when the recording medium 12 is a hybrid compact disc. A program (control program) for controlling writing and reading to the recording medium 12 and a key issuing program (key issuing program) are shown. It has a recorded read-only area 121 and a writable area 122 in which information to be delivered electronically by the information supplier 3 described later is written. The reason why the control program and the key issuing program are recorded in advance in the recording medium 12 is to eliminate software environment dependence (inconvenience such as inability to use because there is no predetermined program).

  Also, the recording medium 12 is provided with an innermost standard outer portion 123 that can be read and written only by a dedicated disk drive. Note that the use of the innermost outer standard outer 123 has an advantage that the moving distance of the pickup when reading from the inside of the compact disk can be reduced according to the mechanism of a normal disk drive. Further, although there is a non-standard part at the outermost peripheral portion of the recording medium 12, it is not preferable because there are few non-standard parts and it is easily influenced by the mechanical characteristics of the recording medium.

  FIG. 3 is a logical configuration diagram of the recording medium 12, and unique information can be recorded at the time of manufacture in the innermost circumference standard external 123, and a secret key can be recorded later by the orderer 2. The read-only area 121 stores the above-described control program and key issuing program, and can record unique information at the time of manufacture. Further, the writable area 122 includes an extended area that is an extended area of the write test, a power calibration area that is an area for the write test, and a programmable memory area in which control information of the medium (recording medium) is recorded. And a lead-in provided in front of the information area for recording information, an information area for recording information, and a lead-out provided after the information area. It is possible to record the secret key by the orderer 2 in a part of the information area.

  Fig. 4 is a logical configuration diagram of the groove information of a compact disk. Information is contained in a periodic undulation of a groove called a wobble, and this undulation is precisely defined and defined when manufactured by a stamper. Physical information. In this groove information, the lead-in start time (time difference between the lead-in start and the information area start) shown in FIG. 3 is recorded and can be used as unique information of the recording medium. Note that the groove information can be detected at low cost by utilizing a wobble detection mechanism in a disk drive that is generally available.

  Returning to FIG. 1, the orderer 2 generates a key for encryption and decryption from the recording medium 12 delivered from the medium manufacturer 1 and writes a part of the key into the recording medium 12. 21, a memory device 22 for an information supplier for storing a part of a key, and a memory device 23 for a user are provided.

  The administrator device 21 generates a unique information reading unit 211 that reads unique information from the recording medium 12, and generates a public key and first and second secret keys based on the read unique information and arbitrary information input by the administrator. A key generation unit 212 for performing the operation, a first secret key writing unit 213 for writing the first secret key among the generated keys to the recording medium 12, and a memory device 22 for the information supplier using the public key among the generated keys. And a second secret key output unit 215 for writing the second secret key of the generated keys to the user memory device 23.

  Then, the recording medium 12 in which a part of the key is written is provided to the information supplier 3 together with the memory device 22 for the information supplier in which the public key is written, and the memory for the user in which the second secret key is written. The device 23 is distributed to a predetermined user.

  The information supplier 3 is provided with a supplier device 31 that encrypts and writes the recording information to be electronically delivered to the recording medium 12 provided by the orderer 2. The merchant device 31 includes a public key reading unit 311 that reads a public key from the memory device 22 for the information supplier, and encryption that encrypts recorded information based on the read public key and other information as necessary. A unit 312 and an information writing unit 313 for writing encrypted recording information to the recording medium 12 are provided. The recording medium 12 on which the record information is written is delivered to the orderer 2 (electronic delivery).

  On the other hand, the orderer 2 is provided with a user device 24 for browsing recorded information from the recording medium 12. The user device 24 includes an information reading unit 241 that reads a first secret key and encrypted recording information from the recording medium 12, and a second secret key reading unit that reads a second secret key from the user memory device 23. 242 and a decrypting unit 243 for decrypting the encrypted recording information based on these keys.

  FIG. 5 is a general configuration diagram of the administrator device 21, the user device 24, and the supplier device 31. The control unit a that controls the entire device, the input unit b such as a keyboard / mouse, and a display such as a monitor. A unit c, a storage unit d such as a memory and a hard disk device, a disk drive f connected to the control unit a through the interface e, and a USB unit h connected to the control unit a through the interface g. ing. In addition, when reading and writing information corresponding to the standard outside of the recording medium 12 in each device 21, 24, 23, a dedicated disk drive f is required.

  The operation of the above embodiment will be described below.

  FIG. 6 is a flowchart showing processing in the administrator device 21.

  In FIG. 6, after the recording medium 12 on which the unique information that can be read but cannot be written is delivered from the medium manufacturer 1, the administrator device 21 uses the unique information reading unit 211 to record the recording medium 12. The unique information is read from (step S1).

  Next, a public key and first and second secret keys are generated by the key generation unit 212 based on the read unique information and arbitrary information input by the administrator (step S2).

  Then, the first secret key of the generated keys is written to the recording medium 12 by the first secret key writing unit 213 (step S3).

  In addition, the public key of the generated keys is written in the memory device 22 for the information supplier by the public key output unit 214 (step S4).

  Further, the second secret key of the generated keys is written into the user memory device 23 by the second secret key output unit 215 (step S5).

  Next, FIG. 7 is a flowchart showing the processing in the supplier device 31.

  In FIG. 7, the information supplier 3 who has received the recording medium 12 from the orderer 2 reads the public key from the memory device 22 for the information supplier by the public key reading unit 311 in the supplier device 31 (step S11). . Further, the unique information is read from the recording medium 12 as necessary.

  Next, based on the read public key and the unique information as necessary, the encryption unit 312 encrypts the recorded information (step S12). At this time, the recording information is not directly encrypted with the public key, but the recording information is encrypted with the common key, and the common key used for the encryption is encrypted with the public key and attached to the recording information. As a result, it is possible to speed up the process for decoding.

  Then, the encrypted recording information is written to the recording medium 12 by the information writing unit 313 (step S13).

  Next, FIG. 8 is a flowchart showing processing in the user device 24.

  In FIG. 8, in the orderer 2 that has received the electronic delivery of the recording medium 12 from the information supplier 3, when the user browses the recording information, the user device 24 uses the first secret key and the encryption from the recording medium 12. The recorded information, and also the unique information as required are read by the information reading unit 241 (step S21).

  Next, the second secret key reading unit 242 reads the second secret key from the user memory device 23 (step S22).

  Based on these keys and the like, the encrypted recording information is decrypted by the decrypting unit 243 (step S23).

  In this case, the recorded information cannot be browsed without the user memory device 23 in which the secret key is recorded, and the recorded information cannot be browsed only from the original recording medium 12. There is no risk of leakage of confidential information due to illegal leaks, and extremely high security can be maintained.

  The present invention has been described above by the preferred embodiments of the present invention. While the invention has been described with reference to specific embodiments, various modifications and changes may be made to the embodiments without departing from the broad spirit and scope of the invention as defined in the claims. Obviously you can. In other words, the present invention should not be construed as being limited by the details of the specific examples and the accompanying drawings.

It is a block diagram of the information management system concerning one Embodiment of this invention. It is a block diagram of a recording medium. It is a logical block diagram of a recording medium. It is a logic block diagram of the groove information of a compact disc. It is a block diagram of an apparatus. It is a flowchart which shows the process in an administrator apparatus. It is a flowchart which shows the process in a dealer apparatus. It is a flowchart which shows the process in a user apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Medium manufacturer 11 Stamper 12 Recording medium 121 Read-only area 122 Writable area 123 Outside innermost standard 2 Ordering person 21 Administrator apparatus 211 Specific information reading part 212 Key generation part 213 1st secret key writing part 214 Public key Output unit 215 Second secret key output unit 22, 23 Memory device 24 User device 241 Information reading unit 242 Second secret key reading unit 243 Decryption unit 3 Information supplier 31 Merchant device 311 Public key reading unit 312 Encryption unit 313 Information writing section

Claims (18)

Means for generating a key used for encryption and decryption based on unique information that can be read but cannot be written recorded on a recording medium;
Means for writing a part of the key to the storage medium;
A part of the key and the recording information are read from the recording medium in which the encrypted recording information is written, and the recording information is decrypted by further using the other part of the key under its control. And an information management system. Means for reading the unique information from a recording medium on which unique information that can be read but cannot be written is recorded;
Means for generating a public key and first and second secret keys based on the unique information and arbitrary information input by the administrator;
Means for writing the first secret key to the storage medium;
Read the first secret key and the record information from the recording medium in which the record information encrypted by the public key is written, and further use the second secret key under its own management to record the record information The information management system according to claim 1, further comprising: means for decrypting.   The information management system according to claim 1, wherein the unique information is recorded when the storage medium is manufactured. The recording medium is a compact disc,
4. The information management system according to claim 1, wherein the unique information is recorded as a part of groove information of the compact disc.   5. The information management system according to claim 4, wherein the unique information includes a lead-in start time included in the groove information.   The information management system according to any one of claims 1 to 3, wherein the unique information is recorded in a non-standard part of the recording medium. The recording medium is a compact disc,
The information management system according to claim 6, wherein the non-standard part is an innermost peripheral part.   The information management system according to any one of claims 1 to 7, wherein the recording medium has a read-only area and a writable area.   9. The information management system according to claim 8, wherein a program for controlling writing and reading of the recorded information and a key issuing program are recorded in the read-only area.   The information management system according to claim 8, wherein the unique information is recorded in a part of the read-only area.   The information management system according to claim 2, wherein the public key is stored in a portable memory device.   The information management system according to claim 2, wherein the second secret key is stored in a portable memory device. A step of generating a key used for encryption and decryption based on unique information that can be read but cannot be written recorded on a recording medium;
Writing a part of the key to the storage medium;
A part of the key and the recording information are read from the recording medium in which the encrypted recording information is written, and the recording information is decrypted by further using the other part of the key under its control. An information management method comprising a process. Reading the unique information from a recording medium on which unique information that is readable but not writable is recorded;
Generating a public key and first and second secret keys based on the unique information and arbitrary information input by the administrator;
Writing the first secret key to the storage medium;
Read the first secret key and the record information from the recording medium in which the record information encrypted by the public key is written, and further use the second secret key under its own management to record the record information The information management method according to claim 13, further comprising: a step of decrypting. Specific information that can be read but not written,
A part of the key generated based on the unique information,
A recording medium on which encrypted recording information is written. Specific information that can be read but not written,
A public key generated based on the unique information and arbitrary information input by the administrator, and the first secret key of the first and second secret keys;
16. The recording medium according to claim 15, wherein recording information encrypted with the public key is written. A function for generating a key used for encryption and decryption based on unique information that can be read but cannot be written recorded on a recording medium;
A function of writing a part of the key to the storage medium;
A part of the key and the recording information are read from the recording medium in which the encrypted recording information is written, and the recording information is decrypted by further using the other part of the key under its control. An information management program for realizing functions and a computer. A function for reading the unique information from a recording medium on which unique information that can be read but cannot be written is recorded;
A function of generating a public key and first and second secret keys based on the unique information and arbitrary information input by the administrator;
A function of writing the first secret key to the storage medium;
Read the first secret key and the record information from the recording medium in which the record information encrypted by the public key is written, and further use the second secret key under its own management to record the record information The information management program according to claim 17, wherein a function for decrypting the information is realized by a computer.

Images