JP4228322B1 - Portable terminal device, file management program, and file management system - Google Patents

Abstract

[PROBLEMS] To improve the convenience of a user by making it possible to use a managed file outside the company while reliably preventing outflow, leakage, and unauthorized use of the managed file including personal information and confidential information.
When a management target file written in a storage unit 20b of a portable terminal device 20 is accessed by an unaffiliated information processing apparatus 100, the user may be a valid user of the encryption management target file. Only when authenticated, the encrypted management target file is not only decrypted, but the decrypted management target file is expanded on the storage unit 20b of the mobile terminal device 20 and stored in the unaffiliated information processing apparatus 100. Is prohibited by the storage prohibition means 26 of the portable terminal device 20 linked with the storage prohibition function 26a in the unaffiliated information processing apparatus 100, while the unaffiliated information processing apparatus 100 on the temporary storage unit 100c of the unaffiliated information processing apparatus 100 Access to the management target file by 100 is executed.
[Selection] Figure 1

Description

  The present invention saves an electronic file including personal information and confidential information managed as a management target file in a company or the like in a mobile terminal device (mobile device) such as a smartphone or a USB (Universal Serial Bus) memory. It is related with the management technique of a management object file applied when taking out outside.

In general, when electronic files used for work in a company or the like are used outside the company (for example, making presentations using another company's PC (Personal Computer) in another company or working from home using a home PC) The electronic file is written to a mobile device such as a smartphone (mobile phone) or a USB memory from an in-house PC and taken out of the office.

  On the other hand, in recent years, with the heightened awareness of protection of personal information, it is desired to reliably prevent inadvertent leakage / leakage of personal information and unauthorized use of personal information. In particular, with the enforcement of the Personal Information Protection Law, there is a need for businesses that handle personal information to more reliably prevent the leakage or leakage of personal information and unauthorized use. Here, personal information is information that can identify a specific individual by itself or in combination, and includes, for example, name, date of birth, contact information (address, address, telephone number, e-mail address, etc.). . Customer information, business partner information, etc. stored and handled in various companies often correspond to personal information.

  Naturally, such personal information corresponds to confidential information with high confidentiality for companies, but as confidential information for companies, in addition to personal information, new products before publication, technology before patent application, Information related to management strategies, etc. According to the Institute of Systems Audits, confidential information is defined as information that may impair the value of management resources when disclosed to anyone other than the authorized person or used for other purposes. Has been.

  In order to reliably prevent the outflow / leakage and unauthorized use of personal information and confidential information as described above, for example, a technique disclosed in Patent Document 1 below has been proposed. This patent document 1 particularly corresponds to prevention of leakage / leakage and unauthorized use of personal information, and depending on the judgment value of the personal information file, prohibiting the output of the personal information file from the terminal, The access to the personal information file is managed by the file access management server (see, for example, paragraphs 0072 and 0073). When managing access to a personal information file by a file access management server, the personal information file is encrypted with an encryption key managed by the file access management server and then written to the mobile device as described above There is also.

For example, the following patent documents 2 to 5 and the following non-patent document 1 disclose techniques related to the present application. Non-Patent Document 1 discloses a technique that enables access to encrypted data on a portable disk when a correct passphrase is input, and prevents writing to an internal disk. Japanese Patent Application Laid-Open No. 2004-228561 discloses a technique for ensuring security when a client computer accesses a server computer via a network. Japanese Patent Application Laid-Open No. 2004-228561 discloses a technique in which a card application that operates on a secure device such as an IC card authenticates an application that operates on a terminal such as a portable terminal. Patent Document 4 below discloses a technique for booting and identifying an operating system that enforces digital rights. Patent Document 5 below discloses a technique related to data encryption processing in an external storage device typified by a hard disk device.
Japanese Patent No. 3705439 International Publication No. 2005/081120 JP 2004-265026 A US Pat. No. 6,327,652 JP 2004-201038 A Ramon Caceres, Casey Carter, Chandra Narayanaswami, and Mandayam Raghunath, 'Reincarnating PCs with portable SoulPad', Proceedings of the 3rd international conference on Mobile systems, applications, and services, USA, ACM, June 8, 2005, p.65 -p.78, ISBN: 1-931971-31-5

  As described above, files to be managed (personal information files, confidential information files, etc.) encrypted under the control of the file access management server can usually be decrypted only by an in-house PC that can access the file access management server. Even if it is written and carried on the device, it cannot be decrypted and used on another company's PC or home PC that cannot access the file access management server. This prevents personal information and confidential information from being leaked, leaked, or illegally used.

  However, in consideration of user convenience, the file access management server can be accessed from another company's PC or home PC, and the encryption management target file written and carried on the mobile device is transferred to the other company's PC or home. It is conceivable that the PC can be decrypted and used, but in such a configuration, the decrypted managed file remains on the hard disk of the other company's PC or the home PC, and personal information or confidential information There is a risk that information leakage, leakage, and unauthorized use may not be suppressed.

For example, since a PC at home is used by a family other than the authorized user (employee) of the file to be managed, file sharing software such as Winny is used by the family without the knowledge of the authorized user. In some cases, the contents of managed files remaining on the hard disk or the like (personal information or confidential information) may leak or leak, contrary to the intentions of legitimate users.

  The present invention was devised in view of such a situation, and makes it possible to use a managed file outside the company while reliably preventing the leakage, leakage or unauthorized use of a managed file including personal information or confidential information. The purpose is to improve user convenience.

In order to achieve the above object, a portable terminal device of the present invention (Claim 1) is connected to an information processing device so as to communicate with each other, and includes at least a processing unit and a storage unit, The processing unit includes a plurality of terminals and a file management server that manages, as managed files, electronic files that satisfy a predefined management target standard among electronic files created and used by the plurality of terminals. Whether the information processing apparatus belongs to one of the plurality of terminals in the file management system, whether the information processing apparatus has a terminal-dedicated program belonging to the file management system. Or whether the identification information of the information processing apparatus is registered in the file management server as terminal identification information belonging to the file management system. Affiliation determining means for determining the affiliation, the affiliation determining means based on the fact that the information processing apparatus has a program dedicated to the terminal or the identification information of the information processing apparatus is registered in the file management server When the management target file is written in the storage unit from the information processing apparatus determined to belong to the file management system by the encryption, the management target file is encrypted, and then the encrypted management target file is stored in the storage unit. Encryption means for registering and storing in the information processing apparatus, the information processing apparatus does not have a program dedicated to the terminal, or the identification information of the information processing apparatus is not registered in the file management server From an unaffiliated information processing apparatus determined not to belong to the file management system by the determination means, the encryption means Authentication information input request means for requesting the user of the unaffiliated information processing apparatus to input authentication information when receiving an access request to the encrypted management target file that is encoded and registered and stored in the storage unit The user is allowed to manage the encryption based on the authentication information transmitted from the unaffiliated information processing apparatus in response to the input request by the authentication information input request means and the registered authentication information registered in advance. Authentication means for performing authentication determination as to whether or not the file is a valid user, and when the authentication means authenticates that the user is a valid user, the unaffiliated information processing apparatus Program possession judging means for judging whether or not a program for an unaffiliated information processing apparatus necessary for accessing the computer to be managed is held, and the program possession judging means Installation means for installing the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus when it is determined that the affiliation information processing apparatus does not have the unaffiliated information processing apparatus program; When it is determined by the means that the unaffiliated information processing apparatus has the unaffiliated information processing apparatus program, or the unaffiliated information processing apparatus program is transferred to the unaffiliated information processing apparatus by the installation means. Decryption means for decrypting the encrypted management target file after being installed and developing it on the storage unit; a storage prohibition function obtained by executing the program for unaffiliated information processing apparatus in the unaffiliated information processing apparatus; By linking, the unmanaged information processing apparatus converts the management target file expanded on the storage unit by the decoding unit. And prohibiting storage in the data storage storage unit in the non-participating information processing device, while the data processing in the non-participating information processing device temporarily prohibits access to the management target file by the non-participating information processing device on the temporary storage unit A storage prohibiting unit to be executed, and when receiving a read storage request for the encryption management target file in the storage unit from the belonging information processing apparatus, the decryption unit decrypts the encryption management target file, and It functions as storage control means for storing the management target file decrypted by the decryption means in the data storage unit of the information processing apparatus to which it belongs.

  Further, in the portable terminal device of the present invention (Claim 2), the processing unit has the same affiliation determination means, encryption means, authentication information input request means, authentication means, program possession determination means, installation means, decryption means, and In addition to functioning as a storage prohibition unit, identification information that identifies the information processing apparatus to which the management target file has been registered and stored is added in advance to the management target file registered and stored in the storage unit. When the read / save request for the encryption management target file in the storage unit is received from the belonging information processing apparatus, the belonging information processing apparatus determines that the belonging information processing apparatus is based on the identification information added to the encryption management target file. Identification information determination means for determining whether or not the information processing apparatus belongs to the original file of the encryption management target file, and the identification information determination means Therefore, if it is determined that the information processing apparatus belongs to the original file, the decryption unit decrypts the encrypted management target file, and the decryption unit decrypts the management target file. It functions as a storage control means for storing data in the data storage unit of the information processing apparatus to which it belongs.

  In such a portable terminal device, when access to the management target file by the non-participating information processing apparatus is completed, the encryption unit stores the management target file on the temporary storage unit of the non-participating information processing apparatus. The processing unit may function so as to be encrypted and written in the storage unit.

Further, the file management program of the present invention (Claims 4 to 6) realizes the function as the above-described portable terminal device (Claims 1 to 3), and is communicably connected to the information processing apparatus. This is executed by the processing unit in the portable terminal device configured to include at least the processing unit and the storage unit, and the above-described affiliation determination unit, encryption unit, authentication information input request unit, authentication unit, and program possession determination The processing unit functions as means, installation means, decryption means, storage prohibition means, storage control means, and identification information determination means.

  Furthermore, the file management system of the present invention (Claim 7) comprises at least a processing unit and a storage unit, and an output unit for writing or transmitting an electronic file held in the storage unit to an external medium. An information processing device and a portable terminal device that is connected to the information processing device as an external medium so as to be communicable with each other, includes at least a processing unit and a storage unit, and is installed with the above-described file management program In addition, the processing unit of the information processing apparatus includes a management target file determination unit that determines whether an electronic file written / transmitted by the output unit to the external medium corresponds to the management target file; When the target file determination means determines that the file is a management target file, the external medium installs the file management program. Portable terminal device determining means for determining whether or not the file management program is installed, and the portable terminal device determining means determines that the external medium is a portable terminal device installed with the file management program When the output unit permits writing / transmission of the management target file to the external medium, the portable terminal device determination unit determines that the external medium is not a portable terminal device in which the file management program is installed. In this case, the output unit functions as permission / denial means for prohibiting writing / transmission of the management target file to the external medium.

  According to the above-described portable terminal device and file management program of the present invention, the management target file written in the storage unit of the portable terminal device from the affiliated information processing device belonging to the file management system is encrypted. Even if the user who owns the terminal device is lost or stolen, the third party cannot understand the contents of the managed file, and the Leakage and unauthorized use can be reliably prevented.

  In addition, when a user accesses a management target file written in the storage unit of the portable terminal device with an unaffiliated information processing device that does not belong to the file management system (for external use on a PC of another company, a home PC, etc.) When the user is authenticated as an authorized user of the encrypted management target file, the encrypted management target file is not only decrypted, but also the decrypted management target file is decrypted. Is linked to a storage prohibition function obtained by executing a program for an unaffiliated information processing apparatus in the unaffiliated information processing apparatus, which is expanded on the storage unit of the portable terminal device and stored in the unaffiliated information processing apparatus. Access to the management target file by the unaffiliated information processing device is executed on the temporary storage unit of the unaffiliated information processing device while being prohibited by the storage prohibition means of the terminal device Is will be.

  Therefore, the managed file is not saved in the data storage unit such as the hard disk of the unaffiliated information processing apparatus, and the contents (personal information, confidential information, etc.) of the managed file remaining on the unaffiliated information processing apparatus side While reliably preventing accidental leakage / leakage or unauthorized use, the managed file can be used outside the company, and the convenience of the user is greatly improved.

At this time, upon receiving a read / save request for the encryption management target file in the storage unit of the mobile terminal device from the affiliated information processing device belonging to the file management system, the storage control unit of the mobile terminal device encrypts the decryption unit Since the management target file is decrypted and the decrypted management target file is stored in the data storage unit of the belonging information processing apparatus, any information processing apparatus belonging to the file management system can be It becomes possible to suck up the management target file stored in the storage unit from the portable terminal device.

  In addition, identification information for specifying the affiliation information processing apparatus to which the management target file is written is added in advance to the management object file written in the storage unit of the portable terminal device, and the affiliation information processing apparatus stores the information of the portable terminal device. When the read / save request for the encryption management target file is received by the copy management unit, the information processing apparatus to which the read / save request is made, based on the identification information added to the encryption management target file, It is determined whether or not the information processing apparatus belongs to the registered information storage device. When the information processing apparatus performs registration storage, the management target file stored in the storage unit of the mobile terminal device is received from the mobile terminal device. If it is not an information processing device that has been sucked up and registered and saved, the file to be managed cannot be picked up from the mobile terminal device. With this configuration, the management target file written in the storage unit of the mobile terminal device can be sucked up only by the information processing apparatus to which the management target file has been written. And unauthorized use can be prevented more reliably.

  Furthermore, when access to the management target file by the unaffiliated information processing apparatus is completed, the management target file (the management target file after editing) on the temporary storage unit of the unaffiliated information processing apparatus is encrypted by the encryption unit in the mobile terminal apparatus. Plaintext) is encrypted and written to the storage unit of the mobile terminal device, so that even if the user who owns the mobile terminal device is lost or stolen, The user cannot grasp the contents of the management target file after the editing, and can surely prevent the management target file from being leaked or leaked or illegally used.

  Also, according to the file management system of the present invention, when an electronic file written / transmitted from the storage unit of the information processing apparatus to the external medium is a management target file, the external medium is the file management program of the present invention. Is permitted to write / send the managed file to an external medium, while the external medium is not a portable terminal apparatus installed with the file management program, the managed file Is configured so that writing / transmission to an external medium is prohibited, so that a mobile terminal device in which the file management program is not installed (a mobile terminal device in which a safety measure for a management target file is not taken) is provided. While the managed file can be prevented from being written out, the file management program is installed. Since the management target file is allowed to be written to the mobile terminal device having the above-described effects, the management target file including personal information and confidential information is prevented from being leaked or leaked or illegally used. As a result, the management target file can be used outside the company, and the convenience of the user is greatly improved.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Description of the First Embodiment [1-1] Configuration of the First Embodiment FIG. 1 is a block diagram showing the configuration of the file management system as the first embodiment of the present invention. As shown in FIG. In addition, the file management system (in-house system) 1A of the first embodiment includes a mobile terminal device 20 and a file management server 30 in addition to a plurality of user terminals 10, and these terminals 10 and the file management server. 30 are connected to each other via a network [for example, an in-house LAN (Local Area Network)] 40 so that they can communicate with each other.

Each user terminal (client terminal, information processing apparatus / affiliated information processing apparatus) 10 in the first embodiment is a personal computer (PC) used by each employee (user, employee) in a company or the like. It is comprised by the terminal device and has the function structure mentioned later.

  The mobile terminal device 20 is configured by a mobile device such as a smartphone (mobile phone) or a USB memory that is used and possessed by each employee, and has a functional configuration described later.

  The file management server 30 is connected to a plurality of user terminals 10 via the network 40 so that they can communicate with each other, and is defined in advance among electronic files created and used by the plurality of terminals 10 in the file management system 10A. An electronic file that satisfies a predetermined management target standard is managed as a management target file.

  As the predetermined management target standard in the present embodiment, all document files (files excluding program files) created and used in each user terminal 10 may be set as management target files, or a predetermined extension ( For example, a file having “.doc”, “.ppt”, “.pdf”, “.xls” or the like may be used as a management target file, or a predetermined keyword (for example, commonly used in a company) Electronic files (files that are highly likely to be confidential information files) may be managed files, and electronic files that have a predetermined number of personal information elements that can identify specific individuals ( A file having a high possibility of a personal information file) may be used as a management target file.

  One or more types of such files are set as management target files. All files may be managed files. Moreover, you may define things other than the file mentioned above as a management object file. Actually, it is desirable that the management target standard for defining the management target file is defined for each company or the like according to the policy or the like in the company or the like that introduces the file management system 1A (1B).

  Personal information includes information (various personal information elements) that can identify a specific individual by itself or in combination, such as name, date of birth, and contact information (address, address, telephone number, email address). It is a waste. In addition to these, personal information includes title, basic resident register number, account number, credit card number, license number, passport number, and the like.

The user terminal 10 is an information processing apparatus belonging to the file management system 1A of the first embodiment (an information processing apparatus in which a file to be managed is managed by the file management server 30), and a CPU (Central Processing unit (processing unit) 10a, storage unit 10b capable of holding data including various application software and various electronic files, and portable terminal device 20 and external medium 50 (to be described later) communicate with each other to transmit data. And a transmission / reception function for transmitting / receiving various types of information to / from the file management server 30 and other user terminals 10A via the network 40. .

  Note that an application program (file management program) for causing the CPU 10a to function as means 11 to 13 to be described later is installed in advance in the storage unit 10b from the file management server 30 or the like.

Here, the storage unit 10b is a hard disk, ROM (Read
Only Memory (RAM), RAM (Random Access Memory), and storage devices connected to the user terminal 10 such as a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-) ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.), magnetic disks, optical disks, magneto-optical disks, as well as storage devices using IC cards, ROM cartridges, magnetic tapes, and other recording media (data storage storage) Part).

  The interface unit 10c functions as an output unit that writes or transmits an electronic file held in the storage unit 10b to the mobile terminal device 20 or the external medium 50, and is originally provided in an information processing apparatus such as a PC. As the interface unit 10c, for example, a function for exchanging data by wireless communication with the mobile terminal device 20 (interface unit 20c described later) and the external medium 50, or a connector such as a USB bus is provided. A function for exchanging data through the network is used.

  The CPU 10a functions as the management target file determination unit 11, the portable terminal device determination unit 12, and the permission / refusal unit 13 by reading the above-described file management program from the storage unit 10b and executing it.

  The management target file determining means 11 is an electronic file (writing / transmitting) written / transmitted to the portable terminal device 20 or the external medium 50 by the interface unit (output unit) 10c in response to an electronic file writing / transmission request of the CPU 10a It is determined whether or not the target file corresponds to a management target file that satisfies the predetermined management target standard.

  The predetermined management target standard for determining the management target file is actually defined for each company as described above, but the management target file determination unit 10a of the present embodiment is a document file. Or a file having a predetermined extension (eg, at least one of “.doc”, “.ppt”, “.pdf”, “.xls”, etc.), or a predetermined keyword (eg, company Files (confidential information files) that contain development codes used as common names), or files that have a predetermined number or more of personal information elements that can identify specific individuals (personal information files) A file that satisfies at least one of the conditions is determined to correspond to a management target file that satisfies the predetermined management target criterion.

  In the present embodiment, the management target file determination unit 11 performs determination when writing / transmitting an electronic file from the interface unit (output unit) 10 c to the mobile terminal device 20 or the external medium 50 in the user terminal 10. However, the determination function in the management target file determination unit 11 or the file management server 30 determines whether all the files stored in the user terminal 10 are management target files in advance. Is given a flag indicating that, and when writing / sending a file, the management target file determination means 11 refers to the presence / absence of the flag, so that the writing / transmission target file is a management target file. It may be determined whether or not. However, in this case, if the flag is not given, the management target file determination unit 11 does not immediately determine that the file is not a management target file, but may be a management target file due to file editing. Therefore, it is determined whether or not the predetermined management target standard is satisfied immediately before the writing / transmission of the file.

  In addition, as a method for determining whether the management target file determination unit 11 determines whether the writing / transmission target file is a personal information file, for example, Japanese Patent No. 3705439 (the above-mentioned Patent Reference 1) and Japanese Patent No. 3743783 Can be used.

When the export / transmission target file is determined to be a management target file by the management target file determination unit 11, the portable terminal device determination unit 12 determines that the external medium of the export / transmission destination is a computer (actually a CPU 20a described later). ), Which will be described later.
It is determined whether or not the mobile terminal device 20 is installed with an application program (file management program) for functioning as

  More specifically, the portable terminal device determination unit 12 communicates with the portable terminal device 20 or the external medium 50 connected to the interface unit 10c via the interface unit 10c, thereby installing the file management program. Information is collected, and based on the collected information, the connected mobile terminal device 20 or the external medium 50 is installed with the file management program, and the processing unit such as a CPU is used as means 21-28, 241,242. It is determined whether or not it is in a state where it can function. At this time, identification information (for example, MAC (Media Access Control) address, etc.) of all the mobile terminal devices 20 that are installed with the file management program and constitute the file management system 1A is registered in advance in the file management server 30 or the like. The mobile terminal device determination unit 12 communicates with the mobile terminal device 20 or the external medium 50 connected to the interface unit 10c via the interface unit 10c, thereby obtaining the identification information of the mobile terminal device 20 or the external medium 50. It may be configured to determine whether or not the read identification information is registered in the file management server 30 or the like.

  And the portable terminal device determination means 12 determines that the portable terminal device 20 or the external medium 50 connected to the interface unit 10c has the file management program installed (or the portable device connected to the interface unit 10c). When it is determined that the identification information of the terminal device 20 / external medium 50 is registered in the file management server 30 or the like), the determination result is notified to the permission / refusal means 13 while the file management program is installed. If it is determined that the identification information of the mobile terminal device 20 / external medium 50 connected to the interface unit 10c is not registered in the file management server 30 or the like; (Including the case where nothing is connected) It is adapted to notify the permission unit 13 as result.

  In FIG. 1, the portable terminal device 20 is assumed to be in a state in which the file management program is installed and the CPU 20a can function as the means 21 to 28, 241, 242, and the external medium 50 is Assume that no file management program is installed.

  The permission / refusal means 13 is notified by the portable terminal device determination means 12 that the external medium of the writing / transmission destination is the portable terminal device 20 in which the file management program is installed (that is, the determination result is notified). The interface unit (output unit) 10c permits writing / transmission of the management target file to the mobile terminal device 20, while the mobile terminal device determination means 12 determines that the external medium of the writing / transmission destination is the above file. When it is determined that the mobile terminal device 20 is not installed with the management program (that is, the determination result that the external medium 50 other than the mobile terminal device 20 is connected to the interface unit 10c, or nothing is connected to the interface unit 10c) The interface unit (output unit) 10c. It is intended to ban the book and out / transmission to the mobile terminal device 20 of the management target file.

  When it is determined that the external medium of the writing / transmission destination is not the portable terminal device 20 in which the file management program is installed, the permission / refusal unit 13 determines the result of determination by the portable terminal device determination unit 12 (other than the portable terminal device 20) A function for notifying a user or the like as an error by a beep sound, a pop-up window display, etc. (for example, as shown in FIG. 2). It is assumed that an error notification function (to be described later) is also performed with reference to step S15.

  Further, the permission / refusal unit 13, when the writing / transmission target file is determined not to be a management target file by the management target file determination unit 11, the portable terminal device connected with the writing / transmission target file to the interface unit 10 c 20 or the external medium 50 is allowed to be written / transmitted, but if no external medium is connected to the interface unit 10c, a message such as a beep or a pop-up window is displayed as an error to the user. It shall also fulfill the function of notifying.

  In addition, CPU10a of the user terminal 10 of this embodiment also has the function mentioned later, referring FIG.2 S17-S25. That is, by executing the file management program, the CPU 10a responds to the occurrence of the file read / save request, and the file read / save request is transmitted to the mobile terminal device 20 (an external medium installed so as to execute the file management program). A function for determining whether the mobile terminal device 20 is connected to the interface unit 10c when it is determined that the request is for the mobile terminal device 20 (S18) S19), when the mobile terminal device 20 is not connected, a function for notifying the user or the like as an error by a beep sound, pop-up window display, or the like (S23), and when the mobile terminal device 20 is connected Identification information for identifying the user terminal 10 [eg MAC (Media Access Control) address, etc. ] To the portable terminal device 20 together with a file read / save request (including file name information for specifying the file) and the function (S18) is determined not to be a request for the portable terminal device 20 A function for determining whether or not an external medium 50 other than the mobile terminal device 20 is connected to the interface unit 10c (S24), and if the external medium 50 is not connected, a beep sound, a pop-up window display, etc. A function for notifying the user or the like as an error (S23) and a function for transmitting a file read / save request (including file name information for specifying a file) to the external medium 50 when the external medium 50 is connected ( S25) and the electronic file from the portable terminal device 20 or the external medium 50 in response to the file read / save request So that the play and the ability to save the electronic file in the storage unit 10b upon receiving (S22) a.

  On the other hand, as described above, the mobile terminal device (external medium) 20 is a mobile device such as a smartphone (mobile phone) or a USB memory that is used and possessed by each employee, and an internal user terminal (file) as an external medium. It is possible to communicate with the user information processing apparatus (belonging to the management system 1A) 10 and a user terminal (non-participation information processing apparatus not belonging to the file management system 1A) 100 such as outside the company, for example, another company's home. Is connected to.

The mobile terminal device 20 includes at least a CPU (Central Processing Unit) 20a that executes various processes, and a storage unit that can hold various application software including the file management program and data including various electronic files. 20b and an interface unit 20c that communicates with each other and exchanges data with the user terminal 10 (interface unit 10c) and the user terminal 100 (interface unit 100d). When the mobile terminal device 20 is a smartphone (mobile phone) or the like, a voice call function, an electronic mail function, a Web browser function, and the like are also provided.

As described above, the file management program for causing the CPU 20a to function as means 21 to 28, 241, 242 described later is stored in the storage unit 20b as the user terminal (affiliated information processing apparatus) 10 or the file management server 30. It is installed in advance from
Here, the storage unit 20b includes a hard disk, a ROM (Read Only Memory), a RAM (Random Access Memory) built in the mobile terminal device 20, a card type medium inserted into and attached to the mobile terminal device 20, and a chip type medium. It is a storage device using a recording medium such as.

  The interface unit 20c exchanges various requests and electronic files with the user terminal 10 (interface unit 10c) and the user terminal 100 (interface unit 100d), and is a portable terminal such as a smartphone or a USB memory. The interface unit 20c is, for example, a wireless communication between the user terminal 10 (interface unit 10c) and the user terminal 100 (interface unit 100d) outside the corporate system. A function for exchanging data or a function for exchanging data via a connector such as a USB bus is used.

  Here, the external user terminal (unaffiliated information processing apparatus) 100 does not belong to the file management system 1A (the file management program for causing the CPU to function as the means 11 to 13 is not installed). ) Except for in-house user terminal (affiliated information processing device) 10, it comprises a CPU (processing unit) 100 a, a hard disk (data storage storage unit) 100 b, a temporary storage unit 100 c and an interface unit 100 d. Yes. As will be described later, the CPU 100a functions as a storage prohibition unit (storage prohibition function) 26a by executing a program for an unaffiliated information processing apparatus installed from the mobile terminal device 20 and stored in the hard disk 100b or the like. It has become.

  The temporary storage unit 100c in the user terminal 100 is a small-capacity memory that temporarily holds data during data processing in the user terminal 100, for example, a cache memory or the like interposed between the CPU 100a and the hard disk 100b. In the user terminal 10 shown in FIG. 1, the illustration corresponding to the temporary storage unit 100 c of the user terminal 100 is omitted. In this temporary storage unit 100c, only the data is temporarily stored. If the state in which the data is not used is continued, the data is overwritten and erased from the oldest when the new data is read to the temporary storage unit 100c. Therefore, the data is not stored on the temporary storage unit 100c. On the other hand, when data is written in the data storage unit such as the hard disk 100b, ROM, or RAM, the data is stored in the data storage unit unless an erasure / deletion instruction is issued by the user or the like. Will continue.

  The CPU 20a reads out the above-described file management program from the storage unit 20b and executes it, whereby the affiliation determination means 21, the encryption means 22, the authentication information input request means 23, the authentication means 24, the program possession determination means 241, and the installation means 242 , Functions as decryption means 25, storage prohibition means 26, identification information determination means 27, and storage control means 28.

  When the mobile terminal device 20 is connected to the information processing device via the interface 20c, the affiliation determination unit 21 is connected to the file management system 1A described above by the connected information processing device among the plurality of user terminals 10. In other words, it is determined whether the information processing apparatus belongs to one of the information processing apparatuses (user terminal 10) or the non-participation information processing apparatus (user terminal 100).

  More specifically, the affiliation determination unit 21 communicates with the information processing apparatus connected to the interface unit 20c via the interface unit 20c, thereby performing the file management program (a program dedicated to a terminal belonging to the file management system 1A). ) Is collected, and based on the collected information, the connected information processing apparatus is installed with the file management program, and the processing unit such as a CPU can function as the means 11-13. It is determined whether or not it is in a proper state.

At this time, identification information (for example, a MAC (Media Access Control) address, etc.) regarding all belonging information processing apparatuses (user terminals 10) belonging to the file management system 1A is registered in advance in the file management server 30 or the like. The affiliation determining means 21 reads out the identification information of the information processing device by communicating with the information processing device connected to the interface unit 20c via the interface unit 20c, and also has a wireless communication function of the mobile terminal device 20 It may be configured to communicate with the file management server 30 to determine whether the read identification information is registered in the file management server 30 or the like.

  The affiliation determination means 21 is installed and possessed by the file management program and is in a state where the processing unit such as the CPU 10a can function as the means 11-13 (or connected to the interface unit 20c). The information processing device connected to the interface unit 20c belongs to the file management system 1A (when the identification information of the information processing device is determined to be registered in the file management server 30 or the like) If the file management program is not installed (held) and the processing unit such as the CPU 10a cannot function as the means 11 to 13 (or the interface) The identification information of the information processing apparatus connected to the unit 20c is the file management server. The information processing apparatus connected to the interface unit 20c is determined to be an unaffiliated information processing apparatus (user terminal 100) that does not belong to the file management system 1A. It has become.

  The encryption unit 22 is a management target when a management target file is written in the storage unit 20b from the information processing apparatus (user terminal 10) determined to belong to the file management system 1A by the affiliation determination unit 21. The file is encrypted with a predetermined encryption key. The encryption management target file encrypted by the encryption unit 22 includes identification information for identifying the belonging information processing apparatus (user terminal 10) notified from the belonging information processing apparatus (user terminal 10). It is added and written to the storage unit 20b.

  In addition, as will be described later, the encryption unit 22 performs management on the temporary storage unit 100c of the unaffiliated information processing apparatus 100 when access to the management target file by the unaffiliated information processing apparatus 100 (CPU 100a) is completed. When the target file is edited, it also functions to re-encrypt the management target file after editing with a predetermined encryption key and write it to the storage unit 20b.

  The authentication information input request unit 23 is encrypted by the encryption unit 22 from the unaffiliated information processing apparatus (user terminal 100 / CPU 100a) determined not to belong to the file management system 1A by the affiliation determination unit 21, and is stored in the storage unit. When an access request for the encryption management target file written in 20b is received, authentication information (ID / password, biometric information, etc.) is input to the user of the unaffiliated information processing apparatus (user terminal 100). To make a request. In the present embodiment, the authentication information is an ID number (identification number) and a password.

  The authentication unit 24 is a registration authentication registered in advance by the authentication information transmitted from the unaffiliated information processing apparatus (user terminal 100) in response to the input request from the authentication information input request unit 23 and the file management server 30 or the like. Based on the information, it is determined whether or not the user is a valid user of the encryption management target file.

At this time, if the authentication information from the unaffiliated information processing apparatus (user terminal 100) matches the registered authentication information, the authentication unit 24 indicates that the user is the encryption management target registered in the file management server 30. It authenticates that the user is a legitimate user of the file (an employee of a company that has built the file management system 1A). If they do not match, the authentication means 24 notifies the unaffiliated information processing apparatus (user terminal 100) to that effect, and this unaffiliated information processing apparatus (user terminal 100).
), An error notification is given to the user or the like by a beep sound or a pop-up window display.

  Further, the registration authentication information may be previously written and registered in the storage unit 20b of the mobile terminal device 20 from the file management server 30 or the affiliated information processing device (user terminal 10), or the mobile terminal device 20 may be wirelessly connected. If it has a communication function or the like, the authentication unit 24 may perform an authentication operation after making an inquiry to the file management server 30 or the like in the file management system 1A using the wireless communication function or the like.

  When the authentication unit 24 authenticates that the user is a valid user, the program possession determination unit 241 determines that the hard disk 100b or the like of the unaffiliated information processing apparatus (user terminal 100) It is determined whether or not a program for an unaffiliated information processing apparatus (a program for causing the CPU 100a to function as the storage prohibition means 26a as described later) necessary for access to is stored.

  More specifically, the program possession determination unit 241 communicates with an unaffiliated information processing apparatus (user terminal 100) connected to the interface unit 20c via the interface unit 20c, similarly to the above-described belonging determination unit 21. Thus, information on the installation status of the unaffiliated information processing apparatus program is collected, and based on the collected information, the connected unaffiliated information processing apparatus (user terminal 100) performs the unaffiliated information processing. It is determined whether the apparatus program is installed and a processing unit such as a CPU can function as the storage prohibiting unit 26a. It should be noted that the function as the program possession determination means 241 can also be used as the function as the affiliation determination means 21 described above.

  When the program possession determining unit 241 determines that the unaffiliated information processing apparatus (user terminal 100) does not possess the unaffiliated information processing apparatus program, the installation unit 242 The program is installed in an unaffiliated information processing apparatus (user terminal 100). The unaffiliated information processing apparatus program installed in the unaffiliated information processing apparatus (user terminal 100) is stored in the hard disk 100b or the like.

  The decryption means 25 determines whether the unaffiliated information processing apparatus (user terminal 100) possesses the program for unaffiliated information processing apparatus by the program possession determination means 241 or the installation means 242 determines unaffiliation information. After the processing device program is installed in the unaffiliated information processing device (user terminal 100), the encryption management target file in the storage unit 20b is decrypted with the decryption key corresponding to the predetermined encryption key, and the storage unit 20b. It expands on top.

  The storage prohibition means 26 is decrypted by cooperating with a storage prohibition function (storage prohibition means 26a) obtained by executing the program for unaffiliated information processing apparatus in the CPU 100a of the unaffiliated information processing apparatus (user terminal 100). The unaffiliated information processing apparatus (user terminal 100) is prohibited from storing the management target file expanded on the storage unit 20b by the means 25 in the hard disk 100b of the unaffiliated information processing apparatus (user terminal 100). In the temporary storage unit 100c, the CPU 100a of the unaffiliated information processing apparatus (user terminal 100) accesses the management target file.

When the identification information determination unit 27 receives a read / save request for the encryption management target file in the storage unit 20b from the affiliation information processing apparatus (user terminal 10), the identification information determination apparatus 27 (user) The identification information of the terminal 10) is compared with the identification information added to the encryption management target file, and the information processing apparatus (user terminal 10) that made the request is added to the encryption management target file. It is determined whether or not the information processing apparatus corresponding to the identification information (that is, the affiliation information processing apparatus (user terminal 10) that registered and stored the original file of the encryption management target file).

  At this time, the identification information determination unit 27 makes a request when the identification information of the belonging information processing apparatus (user terminal 10) matches the identification information added to the encryption management target file. While the belonging information processing apparatus (user terminal 10) is determined to be the corresponding belonging information processing apparatus, it is added to the identification information of the belonging information processing apparatus (user terminal 10) that made the request and the encryption management target file. If the identification information does not match, the information processing apparatus (user terminal 10) is notified to that effect, and the user is notified by a beep sound, a pop-up window display, etc. in the information processing apparatus (user terminal 10). Error notification for etc. is performed.

  The storage control unit 28 receives a request for reading and storing the encryption management target file in the storage unit 20b from the belonging information processing apparatus (user terminal 10) determined to belong to the file management system 1A by the belonging determination unit 21. In this embodiment, the identification information determination unit 27 determines that the belonging information processing apparatus (user terminal 10) that made the request is the belonging information processing apparatus that registered and stored the encryption management target file. If it is determined, the decryption means 25 decrypts the encrypted management target file with the decryption key, and the management target file decrypted by the decryption means 25 is stored in the storage unit 10b of the belonging information processing apparatus (user terminal 10). It is to be saved.

  Note that, as will be described later with reference to FIG. 3, the storage control unit 28 registers and stores the encryption management target file by the affiliation information processing apparatus (user terminal 10) that has requested reading and storage of the encryption management target file. When the identification information determination unit 27 determines that the information processing apparatus belongs to and the user who has made the read / save request by the authentication unit 24 is the encryption management target registered in the file management server 30 When a file is authenticated as a legitimate user (an employee of a company that has built the file management system 1A, etc.), the file to be managed is decrypted by the decryption means 25 and the managed information file (user) You may make it preserve | save in the memory | storage part 10b of the terminal 10).

  Further, in this embodiment, after the authentication by the authentication unit 24, the ownership determination by the program possession determination unit 241 is performed, and the installation to the portable terminal device 20 is performed by the installation unit 242 when the unaffiliated information processing apparatus program is not retained. However, for example, when it is determined by the affiliation determination means 21 that the mobile terminal device 20 is connected to the unaffiliated information processing apparatus (user terminal 100), the program possession determination means 241 after the authentication by the authentication means 24 If the non-belonging information processing apparatus program is not held, the installation unit 242 may install the portable terminal device 20 when the possession determination is performed. In this case, the CPU 100a of the unaffiliated information processing apparatus (user terminal 100) is linked with the function obtained by executing the program for the unaffiliated information processing apparatus, thereby requesting not only the storage prohibiting means 26 but also the authentication information input request. The function as the means 23 and the authentication means 24 can be realized.

Further, in the present embodiment, when the storage control unit 28 adds identification information and the affiliated information processing apparatus that has made a read / save request matches the affiliated information processing apparatus that has performed registration and storage, encryption management is performed. Although decryption saving of the target file is permitted, if the information processing apparatus belongs, decryption saving of the encryption management target file may be permitted. In this case, it is not necessary to add the identification information as described above when registering and storing the encryption management target file in the storage unit 20b of the portable terminal device 20, and the function as the identification information determination means 27 described above is provided. No need to prepare for 20.

[1-2] Operation of the First Embodiment Next, according to the flowchart (steps S11 to S25) shown in FIG. 2, the user terminal (affiliation information processing) in the file management 1A system of the first embodiment configured as described above. The operation of the apparatus 10 will be described.

  In the CPU 10a of the user terminal (affiliated information processing device) 10 in the file management 1A system, a request (electronic file writing / transmission request) to the mobile terminal device 20 or the external medium 50 connected to the interface unit (output unit) 10c. And the file read / save request) are monitored (steps S11 and S17), and when the electronic file write / send request is issued (YES route in step S11), the management target file determination unit 11 performs the above-described processing. In addition, an electronic file (writing / transmission target file) to be written / transmitted from the interface unit (output unit) 10c to the portable terminal device 20 or the external medium 50 in response to the writing / transmission request is a management target file. It is determined whether or not there is (step S12).

  When it is determined that the writing / transmission target file is a management target file by the management target file determination unit 11 (YES route in step S12), the portable terminal device determination unit 12 determines that the external medium of the writing / transmission destination is Whether the file management program is installed and the processing unit such as a CPU can function as the units 21 to 28, 241, 242, or the mobile terminal device 20 / connected to the interface unit 10c. It is determined whether or not the identification information of the external medium 50 is registered in the file management server 30 or the like (step S13).

  When the mobile terminal device determination unit 12 determines that the external medium connected to the interface unit 10c is the mobile terminal device 20 in which the file management program is installed (or the mobile terminal device connected to the interface unit 10c) 20 / when the identification information of the external medium 50 is registered in the file management server 30 or the like; YES route of step S13), the fact is notified to the permission / refusal means 13 as a determination result, and the permission / refusal means 13 outputs the interface part (output) Part) 10c is allowed to write / send the management target file to the portable terminal device 20, and the management target file is sent to the portable terminal device 20 through the interface unit 10c together with the write request and identification information for identifying the user terminal 10. Is output (step S14). Thereafter, the processing shifts to steps S34 to S37 after the YES route in step S33 of FIG.

  Further, when the portable terminal device determination unit 12 determines that the external medium of the writing / transmission destination is not the portable terminal device 20 in which the file management program is installed (that is, the external medium 50 other than the portable terminal device 20 is an interface). When the determination result connected to the unit 10c or the determination result that nothing is connected to the interface unit 10c is notified; the NO route in step S13), the permission / rejection means 13 causes the interface unit (output unit) to The writing / transmission of the management target file to the portable terminal device 20 by 10c is prohibited, and the fact that the writing / transmission is prohibited is connected to the interface unit 10c by the external medium 50 other than the portable terminal device 20. Or information regarding whether nothing is connected to the interface unit 10c. , Beep, is notified as an error to the user or the like due to a pop-up window display (step S15).

On the other hand, when the management target file determination unit 11 determines that the writing / transmission target file is not a management target file (NO route in step S12), the permission / refusal unit 13 sends the writing / transmission target file to the interface unit 10c. Writing / transmission to the connected portable terminal device 20 or the external medium 50 is permitted, and the writing / transmission target file is output to the portable terminal device 20 together with the write request through the interface unit 10c (step S16). . At this time, if no external medium is connected to the interface unit 10c, the permission / rejection means 13 notifies the user or the like as an error by a beep sound or a pop-up window display.

  When the CPU 10a of the user terminal (affiliated information processing device) 10 in the file management 1A system issues a file read / save request for the mobile terminal device 20 or the external medium 50 connected to the interface unit (output unit) 10c. (NO route in step S11 and YES route in step S17) Thereafter, the following processing is performed by the CPU 10a.

  In other words, in response to the occurrence of the file read / save request, whether the file read / save request is for the portable terminal device 20 (an external medium in which the file management program is installed) is determined. Is determined based on the content of the mobile terminal device (step S18), and if it is determined that the request is for the mobile terminal device 20 (YES route of step S18), it is determined whether the mobile terminal device 20 is connected to the interface unit 10c. (Step S19). The determination operation in step S19 is performed using the same function (determination function in step S13) as that of the mobile terminal device determination unit 12 described above.

  If it is determined that the mobile terminal device 20 is not connected (NO route of step S19), the user terminal 10 is notified of this as an error by a beep sound, a pop-up window display, or the like (step S23). ). When it is determined that the mobile terminal device 20 is connected (YES route in step S19), the identification information (PCID) for specifying the user terminal 10 is a file read / save request (file name information for specifying a file, etc.) Are transmitted to the portable terminal device 20 (step S20). Thereafter, the processing shifts to steps S40 to S44 after the YES route in step S39 of FIG.

  On the other hand, if it is determined in step S18 that the request is not for the mobile terminal device 20 (NO route), it is determined whether an external medium 50 other than the mobile terminal device 20 is connected to the interface unit 10c (step S24). If it is determined that the external medium 50 is not connected (NO route in step S24), the user terminal 10 is notified of this as an error by a beep sound, a pop-up window display, or the like (step S23). . If it is determined that the external medium 50 is connected (YES route in step S24), a file read / save request (including file name information for specifying the file) is transmitted to the external medium 50 (step S25). ).

  When an electronic file is received from the portable terminal device 20 or the external medium 50 in response to the file read / save request transmitted in step S20 or step S25 (YES route in step S21), the electronic file is stored in the storage unit 10b. On the other hand, if the electronic file is not transmitted from the portable terminal device 20 or the external medium 50 even after a predetermined time has passed in response to the file read / save request transmitted in step S20 or step S25 (step S22) (step S22) (NO route of S21), the fact is notified as an error to the user or the like by a beep sound, pop-up window display, etc. in the user terminal 10 (step S23).

The operation of the mobile terminal device 20 in the file management 1A system of the first embodiment configured as described above will be described according to the flowchart shown in FIG. 3 (steps S31 to S62).
The CPU 20a of the mobile terminal device 20 monitors whether or not the mobile terminal device 20 is connected to any information processing device (user terminal 10, 100) (step S31). When connected to the processing device (user terminal 10, 100) (YES route in step S31), first, the affiliation determination means 21 installs the file management program by the connected information processing device as described above. Whether or not the processing unit such as the CPU 10a can function as the units 11 to 13 (or whether or not the identification information of the information processing apparatus is registered in the file management server 30 or the like). ), Whether or not the information processing apparatus belongs to the file management system 1A, that is, Whether it is a broadcast processing device (user terminal 10) and non-affiliation information processing apparatus (user terminal 100) it is determined (step S32).

  When the affiliation determination means 21 determines that the information processing apparatus connected to the interface unit 20c is an affiliation information processing apparatus (user terminal 10) belonging to the file management system 1A ("affiliation" route in step S32) ), It is monitored whether an electronic file writing / transmission request or a file read / save request is transmitted from the affiliated information processing apparatus (user terminal 10) connected to the interface unit 20c (steps S33 and S39). ).

  Then, when an electronic file writing / transmission request is transmitted from the belonging information processing apparatus (user terminal 10) (step S14 in FIG. 2; YES route in step S33), the writing / transmission request, and An electronic file (management target file) to be written is received together with identification information for specifying the information processing apparatus (user terminal 10) to which the request is issued (step S34). The received electronic file is encrypted with a predetermined encryption key (step S35), and further, the belonging information processing apparatus (user terminal 10) is included in the encryption management target file encrypted by the encryption means 22. Is added after the identification information for identifying the affiliation information processing apparatus (user terminal 10) notified from (step S36) Encrypted management object file is added to broadcast is written to the storage unit 20b (Step S37).

  Thereafter, it is determined whether or not the mobile terminal device 20 is disconnected from the affiliation information processing device (user terminal 10) (step S38). If the mobile terminal device 20 is not disconnected (NO route of step S38), the process of step S33 is performed. On the other hand, if it is disconnected (YES route in step S38), the process returns to step S31.

  When a file read / save request is transmitted from the affiliation information processing apparatus (user terminal 10) (step S20 in FIG. 2; NO route in step S33 and YES route in step S39), the file read / save request is received. It is determined whether or not a certain electronic file exists in the storage unit 20b and is an encryption management target file (step S40). When the target electronic file is an encryption management target file existing in the storage unit 20b (YES route in step S40), the identification information determination unit 27 identifies the belonging information processing apparatus (user terminal 10) that made the request. The information (identification information transmitted together with the file read / save request) is compared with the identification information added to the encryption management target file, and the affiliation information processing apparatus (user terminal 10) making the request Information processing apparatus corresponding to the identification information added to the encryption management target file (that is, the information processing apparatus (user terminal 10) to which the encryption management target file has been written (registered and saved)). Is determined (steps S41 and S42).

At this time, if the identification information of the belonging information processing apparatus (user terminal 10) that matches the identification information added to the encryption management target file matches, the belonging information processing apparatus (user) It is determined that the terminal 10) is the affiliation information processing apparatus that has registered and stored the encryption management target file (YES route in step S42), and the storage control unit 28 is caused to function by the identification information determination unit 27 to perform decryption. The means 25 causes the encryption management target file to be read and stored to be decrypted by the decryption key (step S43), and the management target file decrypted by the decryption means 25 is sent to the information processing apparatus (user terminal) through the interface unit 20c. 10) (step S44), and from the YES route of step S21 in FIG. 2 to step S22. It will be migrated to the storage process. Thereafter, the process proceeds to step S38.

  It should be noted that the processing of steps S47 to S52, which will be described later, is executed between step S42 and step S43 described above, and the affiliated information processing apparatus (user terminal 10) that made the read / save request for the encryption management target file performs encryption. When the identification information determination unit 27 determines that the information processing apparatus belongs to which the management target file has been registered and saved, and the user who has made a read and save request by the authentication unit 24 registers with the file management server 30 The storage control means 28 is caused to function when it is authenticated that it is a legitimate user (such as an employee of a company that built the file management system 1A) of the encrypted management target file. The management target file decrypted by the decryption means 25 is sent to the information processing apparatus (user terminal 10) through the interface unit 20c. To send output may be configured (Step S44) As.

  Further, when the electronic file (encryption management target file) that is the target of the file read / save request does not exist in the storage unit 20b (NO route in step S40), this is regarded as an error and the information processing apparatus (user terminal 10). (Step S45), the user information is notified by a beep sound, a pop-up window display, etc. in the information processing apparatus (user terminal 10). Thereafter, the process proceeds to step S38.

  Further, when the identification information of the belonging information processing apparatus (user terminal 10) that has made the file read / save request does not match the identification information added to the encryption management target file (NO route in step S42), read / save Even when the requesting user is not a valid user, the information processing apparatus (user terminal 10) is notified as an error to that effect (step S45), and this information processing apparatus (user terminal 10). The user is notified of an error by a beep sound, a pop-up window display, or the like. Thereafter, the process proceeds to step S38.

  Furthermore, when an electronic file writing / transmission request or a file read / save request is not transmitted from the belonging information processing apparatus (user terminal 10), or a request other than these requests is transmitted (in step S33). (NO route and NO route in step S39), the process proceeds to step S38. However, in the latter case, the information processing apparatus (user terminal 10) is notified of the fact as an error via the interface unit 20c.

  On the other hand, when it is determined by the affiliation determining means 21 that the information processing apparatus connected to the interface unit 20c is an unaffiliated information processing apparatus (user terminal 100) that does not belong to the file management system 1A ("S" in step S32). “Unaffiliated” route), monitoring whether an access request for an encryption management target file written in the storage unit 20b is transmitted from an unaffiliated information processing apparatus (user terminal 100) connected to the interface unit 20c (Step S46).

When an access request for the encryption management target file is transmitted from the unaffiliated information processing apparatus (user terminal 100) (YES route in step S46), the authentication information input request unit 23 uses the unaffiliated information processing apparatus (utilization). The authentication information input request is made to the user of the user terminal 100) (step S47), and the authentication information of the user is assigned to the unaffiliated information processing apparatus (user When transmitted from the terminal 100) (YES route in step S48), the authentication unit 24 causes the unaffiliated information processing apparatus (
Whether or not the user is a valid user of the encryption management target file based on the authentication information transmitted from the user terminal 100) and the registered authentication information registered in advance by the file management server 30 or the like. Is determined (step S51).

  If the authentication information from the unaffiliated information processing apparatus (user terminal 100) matches the registered authentication information, the authentication means 24 allows the user to verify the validity of the encryption management target file registered in the file management server 30. Is authenticated (such as an employee of a company that has built the file management system 1A) (YES route in step S52).

  When it is authenticated that the user is a legitimate user, the program possession determining unit 241 causes the hard disk 100b of the unaffiliated information processing apparatus (user terminal 100) to belong to the unaffiliated information necessary for accessing the encryption management target file. It is determined whether or not a processing device program (a program that causes the CPU 100a to function as the storage prohibition unit 26a or the like) is held (step S53). If it is determined that the processing device program is not held (NO route of step S54), installation is performed. The means 242 installs the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus (user terminal 100) and stores it in the hard disk 100b or the like (step S55).

  When it is determined by the program possession determination unit 241 that the unaffiliated information processing apparatus (user terminal 100) already possesses the program for the unaffiliated information processing apparatus (YES route in step S54), or by the installation unit 242 After the unaffiliated information processing apparatus program is installed in the unaffiliated information processing apparatus (user terminal 100), the decryption means 25 decrypts the encryption management target file in the storage unit 20b corresponding to the predetermined encryption key. Decrypted by the key and expanded on the storage unit 20b. Thereafter, storage is performed by the storage prohibition unit 26 that is linked with the storage prohibition function (storage prohibition unit 26a) obtained by executing the program for the unaffiliated information processing device in the CPU 100a of the unaffiliated information processing device (user terminal 100). The storage target file expanded on the unit 20b is temporarily stored in the unaffiliated information processing apparatus (user terminal 100) while prohibiting the management target file from being stored in the hard disk 100b of the unaffiliated information processing apparatus (user terminal 100). Access to the management target file is executed by the CPU 100a of the unaffiliated information processing apparatus (user terminal 100) on the unit 100c (step S56).

  Then, access to the management target file by the unaffiliated information processing apparatus 100 (CPU 100a) ends (YES route in step S57), and the management target file on the temporary storage unit 100c of the unaffiliated information processing apparatus 100 is edited (changed). If this is the case (YES route in step S58), the edited management target file is sucked up from the temporary storage unit 100c of the unaffiliated information processing apparatus 100 through the interface unit 10 (step S59) and predetermined by the encryption unit 22 Is encrypted again with the encryption key (step S60), and the encryption management target file is written in the storage unit 20b (step S61). In this embodiment, since the original encryption management target file is stored in the storage unit 20b, the management target file on the temporary storage unit 100c of the unaffiliated information processing apparatus 100 has not been edited (changed). For (NO route of step S58), steps S59 to S61 can be omitted.

  Thereafter, it is determined whether or not the mobile terminal device 20 has been disconnected from the unaffiliated information processing device (user terminal 100) (step S62). If the mobile terminal device 20 has not been disconnected (NO route of step S62), the process of step S46 is performed. On the other hand, if it is disconnected (YES route in step S62), the process returns to step S31. If an access request is not transmitted from the unaffiliated information processing apparatus (user terminal 100) (NO route in step S46), the process proceeds to step S38.

  Here, when the authentication information from the unaffiliated information processing apparatus (user terminal 100) and the registered authentication information do not match, the authentication means 24 indicates that as an error to the unaffiliated information processing apparatus (user terminal 100). (Step S50), an error notification is given to the user or the like by a beep sound, pop-up window display, etc. in the unaffiliated information processing apparatus (user terminal 100). Thereafter, the process proceeds to step S62.

  If authentication information is not transmitted from an unaffiliated information processing apparatus (user terminal 100) even after a predetermined time has elapsed since the authentication information input request was made in step S47 (NO route in step S48 and step S49). Is also notified to the unaffiliated information processing apparatus (user terminal 100) as an error (step S50), and the unaffiliated information processing apparatus (user terminal 100) displays a beep sound and a pop-up window display. An error notification is made to the user or the like. Thereafter, the process proceeds to step S62.

[1-3] Effects of the First Embodiment Thus, according to the file management system 1A (the mobile terminal device 20 and the file management program) as the first embodiment of the present invention, it belongs to the file management system 1A. Since the management target file written in the storage unit 20b of the mobile terminal device 20 from the belonging information processing apparatus (user terminal 10) is encrypted, the user who owns the mobile terminal device 20 should Even if the portable terminal device 20 is lost or stolen, a third party cannot grasp the contents of the management target file, and the outflow / leakage and unauthorized use of the management target file can be surely prevented.

  Further, when a user accesses an encryption management target file written in the storage unit 20b of the mobile terminal device 20 with an unaffiliated information processing device (user terminal 100) that does not belong to the file management system 1A (other company) When the user is authenticated as an authorized user of the encryption management target file, the encryption management target file is decrypted only when the user is authenticated as a valid user of the encryption management target file. In addition, the decrypted management target file is expanded on the storage unit 20b of the mobile terminal device 20 and stored in the unaffiliated information processing device (user terminal 100). Forbidden by the storage prohibition means 26 of the portable terminal device 20 in conjunction with the storage prohibition means 26a realized by executing the program for the unaffiliated information processing apparatus in the user terminal 100). While, so that the access to the non-affiliation information processing apparatus 100 CPU 100a according to the managed files on the temporary storage unit 100c of the non-affiliation information processing apparatus 100 is executed.

  Therefore, the management target file is not stored in the data storage unit such as the hard disk 100c of the unaffiliated information processing apparatus (user terminal 100), and the data related to the management target file remaining in the temporary storage unit 100c is not stored. Since it is overwritten and erased with new data processing at the user terminal 100, the contents (personal information and confidential information) of the management target file remaining on the unaffiliated information processing apparatus (user terminal 100) side Etc.) can be prevented from being leaked, leaked, or illegally used by file sharing software such as Winny, while the managed files can be used outside the company, greatly improving user convenience. Will be improved.

On the other hand, when access to the management target file by the unaffiliated information processing apparatus (user terminal 100) is completed, the encryption unit 22 in the mobile terminal apparatus 20 temporarily stores the unaffiliated information processing apparatus (user terminal 100). Since the management target file (the management target file plaintext after editing) on the storage unit 100c is picked up and encrypted and written in the storage unit 20b of the mobile terminal device 20, the user who owns the mobile terminal device 20 In the unlikely event that this mobile terminal device 20 is lost or stolen, the third party cannot grasp the contents of the managed file after editing, and it is ensured that the managed file will be leaked, leaked, or illegally used. Can be prevented.

  When a request for reading and storing the encryption management target file in the storage unit 20b of the mobile terminal device 20 is received from the belonging information processing apparatus (user terminal 10) belonging to the file management system 1A, the storage of the mobile terminal device 20 is performed. Since the control unit 28 causes the decryption unit 25 to decrypt the encrypted management target file, and stores the decrypted management target file in the storage unit 10b of the affiliation information processing apparatus (user terminal 10), the file management system If the belonging information processing apparatus (user terminal 10) belongs to 1A, the management target file stored in the storage unit 20b of the mobile terminal device 20 can be sucked from the mobile terminal device 20.

  At this time, identification information for specifying the affiliation information processing apparatus (user terminal 10) to which the management target file is written is added in advance to the management target file written in the storage unit 20b of the mobile terminal device 20, and the affiliation information When a request for reading and storing the encryption management target file in the storage unit 20b of the portable terminal device 20 is received from the processing device (user terminal 10), the reading is performed based on the identification information added to the encryption management target file. It is determined whether or not the affiliation information processing apparatus (user terminal 10) that issued the save request is the affiliation information processing apparatus (user terminal 10) that registered and saved the original file of the encryption management target file. When the information processing apparatus stores the information, the management target file stored in the storage unit 20b of the mobile terminal device 20 is downloaded from the mobile terminal device 20 If the file is not an information processing apparatus that has registered and saved, the management target file written in the storage unit 20b of the mobile terminal device 20 is configured so that the management target file cannot be sucked from the mobile terminal device 20. Thus, it is possible to download only the information processing apparatus (user terminal 10) to which the management target file has been written, and it is possible to more reliably prevent the management target file from being leaked or leaked or illegally used.

  Further, by executing the processing of steps S47 to S52 between step S42 and step S43 of FIG. 3, the belonging information processing apparatus (user terminal 10) that made the request is a corresponding belonging information processing apparatus. The user who made the read / save request by the authentication unit 24 when judged by the identification information judgment unit 27 is a legitimate user (file management system) of the encryption management target file registered in the file management server 30. The storage control means 28 is caused to function when it is authenticated that it is an employee of a company that has constructed 1A, and the management target file decrypted by the decryption means 25 passes through the interface unit 20c to the information processing apparatus (user) It is transmitted to the terminal 10). As a result, even if the belonging information processing apparatus (user terminal 10) does not confirm whether or not the user who made the read / save request is a valid user, Reading and saving cannot be performed, and the outflow / leakage and unauthorized use of managed files including personal information and confidential information can be prevented more reliably.

According to the file management system 1A of the first embodiment, when the electronic file written / transmitted from the storage unit 10b of the information processing apparatus (user terminal 10) to the external medium is a management target file. If the external medium is the portable terminal device 20 in which the file management program is installed, writing / transmission of the management target file to the external medium is permitted, while the external medium is installed with the file management program. If it is not a portable terminal device (external medium), writing / transmission of the management target file to the external medium is prohibited. Therefore, the portable terminal device (managed object) in which the file management program is not installed To prevent managed files from being written to a portable terminal device that has not been secured) On the other hand, since the file management program is installed and the portable terminal device 20 having the above-described effects is allowed to write the management target file, the management target file including personal information and confidential information is leaked. -While preventing leaks and unauthorized use, the managed files can be used outside the company, greatly improving user convenience.

  The functions as means 21 to 28, 241, and 242 in the portable terminal device 20 are used when a management object file write request from the belonging information processing apparatus (user terminal 10) / encryption management object file read / save request is made. , When an access request to an encryption management target file from an unaffiliated information processing apparatus (user terminal 100) is made valid (that is, the CPU 20a is executed by the CPU 20a and the CPU 20a functions as means 21-28, 241, 242) In other cases, the CPU 20a of the mobile terminal device 20 may be configured to operate according to a request from the outside without functioning as the means 21 to 28, 241, 242.

  Such switching (execution / non-execution of the file management program) is performed, for example, from the CPU 10a of the information processing apparatus (user terminal 10) to which the management object file write request / encryption management object file read / save request is made. This is performed based on an instruction or the determination of the CPU 20a of the mobile terminal device 20 that receives an access request from an unaffiliated information processing device (user terminal 100).

  As a result, the file management program is executed by the CPU 20a of the mobile terminal device 20 only when processing is performed on the management target file / encryption management target file, and the functions as the means 21-28, 241, 242 are realized. For example, the steps shown in FIG. 3 are used when processing an ordinary electronic file other than the management target file (an electronic file that does not need to be conscious of leakage / leakage or unauthorized use). Processing corresponding to S34 to S36, S41 to S45, S47 to S56, S59, and S60 can be omitted, and processing for the normal electronic file can be performed quickly.

[2] Description of Second Embodiment [2-1] Configuration of Second Embodiment FIG. 4 shows a configuration of a file management system as a second embodiment of the present invention and a security evaluation service providing system including this file management system. The security evaluation service providing system shown in FIG. 4 requests a manager (system manager, manager of the company, etc.) of the file management system (in-house system) 1B of the second embodiment. In response, the management server 120, which will be described later, provides the in-company system 1B with a service (security evaluation service) for performing security evaluation and electronic education of the in-company system 1B to be evaluated (managed object).

  Therefore, in the system of the second embodiment shown in FIG. 4, a plurality of in-company systems 1B that can be evaluated and a plurality of user terminals 10 belonging to each in-company system 1B can be managed to provide the service. A management server (security evaluation service providing server) 120 is connected to be communicable with each other via the external communication network 110. Here, the external communication network 110 includes the Internet, a public line network, and the like.

The in-company system (file management system) 1B is configured in substantially the same manner as the file management system 1A in the first embodiment described with reference to FIG. 1, but in the in-company system 1B in the second embodiment. A plurality of user terminals 10 are communicably connected to each other via an in-house LAN 40 which is a common local area communication network, and the in-house LAN 40 has a proxy server 60 and a file management server similar to the first embodiment. 30 is connected, and each user terminal 10 is connected to the external communication network 110 via the in-house LAN 40 and the proxy server 60 so as to be connected to various external servers (including the management server 120). ing. That is, each user terminal 10 and the management server 120 are configured to be communicably connected to each other via the in-house LAN 40, the proxy server 60, and the external communication network 110.

  Note that each user terminal (affiliated information processing device) 10 belonging to the in-company system 1B is used by each employee (user, employee) in the company or the like in the same manner as the user terminal 10 of the first embodiment. A CPU 10a that executes various processes, a storage unit 10b that can hold data including various application software and various electronic files, a portable terminal device 20, and an external medium 50. Interface unit 10c that communicates with each other to exchange data. Note that an application program (file management program) for causing the CPU 11 to function as the same means 11 to 13 as in the first embodiment is installed in the storage unit 10b. The CPU 10a also functions as execution means 14, 15, and 16 described later by executing various programs including an agent file described later. In FIG. 4, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof is omitted.

  Further, as described above, the management server 120 is connected to each user terminal 10 belonging to a plurality of in-company systems 1B that can be an evaluation target so as to be able to communicate with each other. An evaluation service is provided, and includes an environment information collection agent file transmission unit 121, an environment information reception unit 122, an evaluation unit 123, an evaluation result notification unit 124, a first electronic education control unit 125, a determination unit 126, a warning unit 127, and a first unit. 2 Functions as the electronic education control means 128. The functions as these means 121 to 128 are realized by executing a management program (security evaluation service providing program) installed in advance by a processing unit (CPU; not shown) constituting the management server 120.

  The environment information collection agent file transmission unit 121 transmits the environment information collection agent file to each of the plurality of user terminals 10 in the system 1B to be evaluated, for example, by attaching it to an e-mail. At this time, information (email address and the like) related to each user terminal 10 of the transmission destination is received together with a security evaluation request from the administrator of the in-company system 1B. The environment information collection agent file to be transmitted to each user terminal 10 is once transmitted to the management terminal or the like (not shown) of the in-company system 10 by the environment information collection agent file transmission means 121, and the management terminal Or the like may be transmitted to each user terminal 10 through the in-house LAN 40.

  In the management server 120, a process (task) desired to be executed by each user terminal 10 is created in advance as an agent file, and the agent file is stored in the storage unit or the like. Here, the environment information collection agent file causes each user terminal 10 to execute a process of collecting environment information in each user terminal 10 and a process of notifying the collection result to the management server 120.

  The environment information collection agent file transmitted to each user terminal 10 is automatically or on the user terminal 10 when the user performs a predetermined operation (for example, a double click operation with a mouse) on the file. It is executed by the CPU 10a. In other words, the CPU 10a functions as the environment information collection agent file execution means 14, and the environment information in the user terminal 10 is collected along with the execution operation, and the collected result is the in-house LAN 40, proxy server 60 and external communication network. 110 is sent and notified to the management server 120 through 110.

  Here, the environmental information collected at each user terminal 10 is information (asset information / inventory information / execution environment information) related to the operating environment at each user terminal 10, and an evaluation process performed by the evaluation unit 123 as described later. Or information necessary for the determination process by the determination means 126 (information relating to the contents of the safety condition described later; for example, information regarding all software installed in each user terminal 10) is sufficient. However, if necessary, it is also possible to collect the following information regarding hardware resources and software resources in the user terminal 10 as environmental information.

  As information about hardware resources, for example, computer name / OS / CPU / CPU speed / keyboard type / physical memory / available memory / video card / resolution / printer / swap size / domain name / logon user name / model name / Network card / MAC address / IP address / Netmask / Default gateway / DNS server / Socket version / Total capacity and free space for each local drive / BIOS version / BIOS manufacturer / machine manufacturer / machine name / machine serial machine UUID / motherboard manufacturer Information on name / mother board name / CPUID and the like.

  Information related to software resources includes information (for example, product name, detailed version, file size, file update date) related to software (various application programs) held in the user terminal 10. If the user terminal 10 has security patch update software (for example, “Windows (registered trademark) Update”) for repairing an OS security hole, the security patch update information (whether it is the latest one or not) Whether or not) is also collected. In addition, when the user terminal 10 has anti-virus software (for example, “Norton AntiVilus (registered trademark)” or the like), the update information of the virus definition file in the anti-virus software (whether it is the latest or not) Is also collected. In addition, when the user terminal 10 has security software such as security patch update software, anti-virus software, anti-spyware software, etc., the setting status (security setting; on / off status, etc.) is also included. Collected.

The environment information receiving unit 122 receives the environment information transmitted from each user terminal 10 and passes it to the evaluation unit 123 and the determination unit 126.
In the system of the second embodiment, the environment information collection agent file transmission unit 121 and the environment information reception unit 122 in the management server 120 and the environment information collection agent file execution unit 14 in each user terminal 10 include a plurality of user terminals. Environmental information collecting means for collecting environmental information in each of the user terminals 10 from each user terminal 10 to the management server 120 is configured.

  The evaluation means 123 is based on the environment information in each user terminal 10 collected by the environment information collection means, that is, the environment information in each user terminal 10 of the evaluation target system 1B received by the environment information reception means 122. By determining whether or not each user terminal 10 satisfies at least one safety condition (described later) and quantifying the degree of safety for the plurality of user terminals 10, the security level of the entire corporate system 1B is determined. (Evaluation level of security status) is evaluated and determined.

  At that time, as will be described later with reference to FIG. 6, the evaluation means 123 is a ratio of the user terminals 10 that satisfy at least one safety condition (described later) among the plurality of user terminals 10 in the evaluation target system 1B. The degree of safety may be quantified based on the above, or as described later with reference to FIGS. 7 and 8, the degree of safety may be quantified based on the ratio and the importance of safety conditions (described later). Good.

  Then, the evaluation means 123 of the second embodiment gradually evaluates the security level evaluation level (security level) of the evaluation target system 1B according to the result of quantifying the degree of safety (the ratio P and the evaluation value V described later). ) To decide. For example, the evaluation level is set to 5 levels of 1 to 5, the evaluation level is “5” when the safety level of the evaluation target system 1B is the highest, and the evaluation level is “1” when the safety level of the evaluation target system 1B is the lowest. To do.

Moreover, the safety conditions mentioned above specifically include the following items (1) to (5). Any safety condition is a condition in which the degree of safety is higher when each user terminal 10 satisfies the safety condition than when the user terminal 10 does not satisfy the safety condition.
(1) The security software is installed on the user terminal 10 and is turned on.
(2) The security patch update information of the security patch update software as the security countermeasure software in the user terminal 10 is the latest.
(3) The update information of the virus definition file of the antivirus software as the security countermeasure software in the user terminal 10 is the latest.
(4) The dangerous software is not installed in the user terminal 10. Examples of dangerous software include virtual VPN software, P2P software, spyware, and file exchange software (for example, Winny).
(5) The user terminal 10 does not have an unauthorized copy of software or the like.

  When the evaluation means 123 performs the evaluation process using the method shown in FIGS. 6 and 7, the evaluation level is determined by calculating the ratio of the user terminals 10 that satisfy all the safety conditions of these items (1) to (5). Alternatively, the evaluation level may be determined by calculating a ratio of the user terminals 10 that satisfy at least one of the safety conditions of these items (1) to (5). Further, when performing the evaluation process by the method shown in FIG. 7, as described later, at least one of the safety conditions of items (1) to (5) is ensured for the safety of the evaluation target system 1B. Therefore, it is assumed that the degree of importance is extremely high and is set in advance as an important safety condition.

  When performing the evaluation process by the method shown in FIG. 8, the importance for ensuring the safety of the in-company system 1B is set for each safety condition (1) to (5). In this case, importance Mi (i = 1 to 5) as a weight used for calculating an evaluation value V to be described later with reference to FIG. 8 is set in advance for each safety condition (1) to (5). Has been. The importance Mi is set so as to increase as the necessity of satisfying the safety condition increases in order to ensure the safety of the in-company system 1B.

  The evaluation result notifying means (notifying means) 124 sends the evaluation result (including the calculated ratio, table value, and evaluation level) obtained by the evaluating means 123 to each user terminal 10 or a terminal such as an administrator (not shown). ) To be displayed and notified to the users and managers of the plurality of user terminals 10 (such as the manager of the in-company system 1B).

  In addition, when periodic evaluation is requested in the evaluation request of the evaluation target system 1B, in the system of the second embodiment, the environmental information of each user terminal 10 of the evaluation target system 1B is periodically transmitted by the environmental information collection unit. The evaluation unit 123 periodically evaluates the degree of safety (security level evaluation level / security level) for the plurality of user terminals 10 (evaluation target system 1B) based on the periodic collection results. Then, the evaluation result notifying unit 124 notifies the periodic evaluation results to the managers and users of the plurality of user terminals 10 and displays them on the terminals of the managers and the user terminals 10.

The first electronic education control means (electronic education control means) 125 uses electronic education (e-learning) about security including at least the matters relating to the above safety conditions (1) to (5), that is, the in-company system 1B. Electronic education about security at the time is executed by a plurality of user terminals 10 belonging to the in-company system 1B as first electronic education agent file creation / holding means 1251 and first electronic education agent file transmission means 1252. It has the function of

  The first electronic education agent file creation / holding means 1251 creates a first electronic education agent file that causes each of the plurality of user terminals 10 belonging to the evaluation target system 1B to perform electronic education about security in the company system 1B. Create or maintain. As described above, in the management server 120, a process (task) desired to be executed by each user terminal 10 is created as an agent file.

  Here, the first electronic education agent file causes each user terminal 10 to execute electronic education about security in the in-company system 1B. If necessary, the first electronic education agent file is created by the first electronic education agent file creating / holding means 1251. The first electronic education agent file for general security in the in-company system 1B may be created in advance and held in the first electronic education agent file creation / holding means 1251.

  The first electronic education agent file transmission means 1252 attaches the first electronic education agent file created or held by the first electronic education agent file creation / holding means 1251 to the e-mail after creation or reading. Are transmitted to a plurality of user terminals 10 in the system 1B to be evaluated. At this time, information (e-mail address, etc.) related to each user terminal 11 of the transmission destination is received together with a security evaluation request from the administrator of the in-company system 1B as described above. The first electronic education agent file to be transmitted to each user terminal 10 is once transmitted to a management terminal or the like (not shown) of the in-company system 1B by the first electronic education agent file transmission means 1252. It may be transmitted from the management terminal or the like to each user terminal 10 through the in-house LAN 40.

  Note that the first electronic education control means 125 in this embodiment is obtained by the evaluation means 123 in addition to the functions described above (functions used in the processing of steps S107 and S108 in FIG. 5 as described later with reference to FIG. 5). It also has a function of causing a plurality of user terminals 10 belonging to the in-company system 1B to execute electronic education (e-learning) corresponding to the evaluation result (evaluation level or the like). As will be described later with reference to FIG. 5, this function is used in the processing in steps S118 and S119 in FIG. 5, but can also be used in the processing in steps S107 and S108 in FIG.

  In this case, the first electronic education agent file creation / holding means 1251 is an electronic that causes each of the plurality of user terminals 10 belonging to the evaluation target system 1B to perform electronic education according to the evaluation result obtained by the evaluation means 123. Create or maintain educational agent files. This electronic education agent file causes each user terminal 10 to execute electronic education corresponding to the evaluation result by the evaluation means 123. When the evaluation result is obtained, the first electronic education agent file creation / holding means 1251 The electronic education agent file corresponding to the evaluation result may be created in advance for each evaluation result, and may be held in the first electronic education agent file creation / holding means 1251. Then, the first electronic education agent file transmission unit 1252 generates the electronic education agent file according to the evaluation result created or held by the first electronic education agent file creation / holding unit 1251 as the first electronic education agent file. Similar to the transmission of a file, it is transmitted to a plurality of user terminals 10 in the system 1B to be evaluated by attaching it to an e-mail after creation or reading.

  The first electronic education agent file transmitted to each user terminal 10 or the electronic education agent file according to the evaluation result is automatically or the user performs a predetermined operation (for example, double-clicking with the mouse). When the operation is performed, it is executed by the CPU 10a on the user terminal 10. That is, the CPU 10a functions as the first electronic education agent file execution means 15, and in accordance with the execution operation, the electronic education according to the overall security in the in-company system 1B or the evaluation result according to the evaluation result is performed at the user terminal 10. This is executed for the user of the user terminal 10.

  At this time, the first electronic education agent file execution means 15 in each user terminal 10 transmits information regarding whether or not the electronic education has been completed in each user terminal 10 through the in-house LAN 40, the proxy server 60 and the external communication network 110. You may comprise so that it may be transmitted / notified to the management server 120 or notified to the administrator of the evaluation target system 1B. As a result, the management server 120, the administrator, and the like can grasp the user (employee) who has performed electronic education / the user (employee) who has not performed electronic education, and can perform more thorough electronic education. .

  In addition, the electronic education is used so that the operation of the electronic education (electronic education about security in general or electronic education according to the evaluation result) is not terminated until the user completes and completes the electronic education at each user terminal 10. It may be configured to force the person to execute. Thereby, electronic education can be executed reliably and thoroughly regardless of the user's will and consciousness.

  Further, the user terminal 10 that has completed the electronic education displays a completed desktop stamp indicating that the electronic education has been completed on the desktop, while the user terminal 10 that has not completed the electronic education displays the desktop. In addition, an incomplete desktop stamp indicating that the electronic education has not been completed may be displayed in a stamped manner. This desktop stamp (bitmap image) cannot be deleted / moved on the user terminal 10 side, and is pasted on the desktop wallpaper. Therefore, the user can delete the desktop stamp by operating himself / herself. It cannot be moved, is always displayed on the desktop, and is exposed not only to the user but also to others. Therefore, by displaying the completed desktop stamp and the incomplete desktop stamp on the desktop, it is possible to encourage the user's will and awareness to voluntarily execute the electronic education, and the electronic education (security E-education in general or e-education according to evaluation results) can be executed reliably and thoroughly.

  When all of the plurality of user terminals 10 belonging to the evaluation target system 1B satisfy the above-mentioned safety conditions, electronic education for each user terminal 10 (according to electronic education and overall evaluation results for security in general) However, even in such a case, it is preferable to conduct electronic education to confirm and re-recognize security.

  The judging means 126 is based on the environmental information in each user terminal 10 periodically collected by the environmental information collecting means described above after the first electronic education control means 125 performs electronic education on the plurality of user terminals 10. Then, it is determined whether or not each user terminal 10 satisfies at least the safety conditions (1) to (5) (whether or not a safety condition is violated).

  The warning unit 127 gives a warning to the user terminal 10 itself that has been determined that the safety condition is not satisfied by the determination unit 126, and to the user or administrator of the terminal 10 that the safety condition has been violated. The warning is sent to the violator's user terminal 10 or its administrator's terminal and displayed, and the warning is given to the violator or administrator (such as the administrator of the in-company system 1B). It is.

  In the second embodiment, in the user terminal 10 that has received the above-described warning from the warning unit 127 of the management server 120, the user terminal (affiliated information processing device) 10 transfers to the external medium in response to the warning. Restricts writing / sending electronic files.

  For example, the user terminal 10 does not function as the management target file determination unit 11, the portable terminal device determination unit 12 and the permission / rejection unit 13 before the restriction (first state; the file management program is not installed) Alternatively, after being restricted from a state where it is installed but not executed by the CPU 10a), a state that functions as the management target file determination unit 11, the mobile terminal device determination unit 12 and the permission / rejection unit 13 described above (second state; the file management program is The file management server 30 or the CPU 10a switches to a state in which it is installed and executed by the CPU 10a.

  At this time, the CPU 10a in the user terminal 10 may function as these means 11 to 13 by reading out and executing a file management program stored in advance in the storage unit 10b, or a warning from the management server 120. When the means 127 issues a warning, the file management program is transmitted to the user terminal 10 together with the warning via the external communication network 110, the proxy server 60, and the in-house LAN 40, and installed in the storage unit 10b. The CPU 10a may be caused to function as the means 11 to 13 by being executed by the CPU 10a. Accordingly, the CPU 10a of the user terminal 10 that has received the warning from the warning unit 127 of the management server 120 functions as the units 11 to 13 similar to those of the first embodiment after receiving the warning.

  Thereby, the state (first state) in which the electronic file is freely written / transmitted from the user terminal (affiliated information processing device) 10 to the external medium is changed to the more restrictive second state, that is, When the electronic file written / transmitted to / from an external medium is a management target file, the management target file is only transferred to the external medium when the external medium is the mobile terminal device 20 in which the file management program is installed. If the external medium is not the portable terminal device 20, the writing / transmission of the management target file to the external medium is prohibited.

  The user terminal 10 functions as the management target file determination unit 11, the portable terminal device determination unit 12, and the permission / rejection unit 13 before the restriction (second state; the file management program is installed and executed by the CPU 10a). State), after the restriction, all electronic files are written to an external medium (mobile terminal device 20, external medium 50, etc.) regardless of the determination result by the management target file determination unit 11 or the mobile terminal device determination unit 12. / Switching to the state for prohibiting transmission (third state) by switching the prohibition condition by the permission / refusal means 13 by the file management server 30 or the CPU 10a.

  Thereby, only when the external medium is the mobile terminal device 20 in which the file management program is installed, the state (second state) in which writing / transmission of the management target file to the external medium is permitted is more limited. Strict third state, that is, writing / transmitting all electronic files to the external medium) regardless of whether the electronic file is a management target file or whether the external medium is the portable terminal device 20 It will be limited to the prohibited state.

  The second electronic education control unit 128 causes the user terminal 11 that is determined not to satisfy the safety condition by the determination unit 126 to execute the electronic education on the matter related to the safety condition (violating safety condition). It has functions as second electronic education agent file creation / holding means 1281 and second electronic education agent file transmission means 1282.

  The second electronic education agent file creation / holding means 1281 provides detailed electronic education on matters related to safety conditions (violating safety conditions) determined not to be satisfied by the determination means 126 by the determination means 126. The second electronic education agent file to be executed by the user terminal 10 determined not to satisfy the above is created or held. As described above, in the management server 120, a process (task) desired to be executed by each user terminal 10 is created as an agent file.

  Here, the second electronic education agent file causes the user terminal 10 that has made the violation to execute detailed electronic education on matters related to the violation safety condition, and the determination means 126 has determined that there is a violation. The second electronic education agent file creation / retention means 1281 may be created at the time, or the second electronic education agent file creation / retention means is created in advance by creating a second electronic education agent file for the violator for each safety condition. It may be held at 1281.

  The second electronic education agent file transmission unit 1282 attaches the second electronic education agent file created or held by the second electronic education agent file creation / holding unit 1281 to the e-mail after creation or reading. , It is transmitted to the user terminal 10 that has made the violation. At this time, information (e-mail address, etc.) regarding the user terminal 10 that has violated the transmission destination is already received together with a security evaluation request from the administrator of the in-company system 1B and managed by the management server 120 as described above. It shall be. The second electronic education agent file to be transmitted to the user terminal 10 is once transmitted to the management terminal or the like (not shown) of the in-company system 1B by the second electronic education agent file transmission means 1282, and the management is performed. It may be transmitted from the terminal or the like to the corresponding user terminal 10 through the in-house LAN 40.

  The second electronic education agent file transmitted to the user terminal 10 is automatically or on the user terminal 10 when the user performs a predetermined operation (for example, a double click operation with a mouse) on the file. It is executed by the CPU 10a. That is, the CPU 10 a functions as the second electronic education agent file execution means 16, and in accordance with the execution operation, detailed electronic education on matters relating to the violation safety condition in the user terminal 10 is performed by the user terminal 10. It is executed for users (persons who violate safety conditions).

  At this time, the second electronic education agent file execution means 16 in the user terminal 10 of the violator uses the in-house LAN 40, the proxy server 60, and the external communication network 110 as information on whether or not the electronic education has been completed at the user terminal 10. It may be configured to transmit / notify to the management server 120 through, or notify the administrator of the evaluation target system 1B. As a result, the management server 120, the administrator, and the like can grasp whether or not the violator has performed electronic education, and can perform more thorough electronic education.

  Also, do not end the operation of electronic education (detailed electronic education on matters related to violation safety conditions) until the violator (user) completes and completes electronic education at user terminal 10 of the violator. You may comprise so that a user may perform electronic education compulsorily. Thereby, regardless of the user's will and consciousness, detailed electronic education on matters related to violation safety conditions can be executed reliably and thoroughly.

Further, as in the case of completing the electronic education using the first electronic education agent file, the user terminal 10 that has completed the detailed electronic education on the matters related to the violation safety condition has completed the electronic education on the desktop. The user terminal 10 that has not completed the electronic education is displayed on the desktop with an incomplete desktop stamp indicating that the electronic education has not been completed. May be. As a result, completed desktop stamps and incomplete desktop stamps are stamped and displayed on the desktop, so that users can encourage their will and awareness to voluntarily conduct electronic education. It is possible to ensure that detailed electronic education on matters related to is executed thoroughly and thoroughly.

[2-2] Operation of the Second Embodiment Next, the operation of the system of the second embodiment configured as described above will be described with reference to FIGS.
First, the operation of the management server 120 according to the second embodiment will be described with reference to the flowchart shown in FIG. 5 (steps S101 to S124). As shown in FIG. 5, in the management server (security evaluation service providing server) 120, whether or not there is a new security evaluation request for the in-company system 1B connected via the external communication network 110, and periodic Whether or not the evaluation timing has come is monitored periodically (every predetermined control cycle) (steps S101 and S111), and when a new security evaluation request is received from the administrator of the in-house system 1B (step S101) YES route), the environment information collection agent file is electronically converted by the environment information collection agent file transmission means 121 based on the information (email address etc.) regarding each user terminal 10 of the transmission destination sent together with the security evaluation request. Attach to an e-mail, etc. It is transmitted to each of the plurality of user terminals 10 (step S102).

  Here, according to the flowchart (steps S251 to S254) shown in FIG. 9, the environment information collecting operation of each user terminal 10 in the evaluation target system 1B of the second embodiment will be described. As shown in FIG. 9, each user terminal 10 monitors whether or not an environment information collection agent file has been received from the management server 120 (step S251), and upon receiving the environment information collection agent file (step S251). YES route of S251), or when the user performs a predetermined operation (for example, a double click operation with a mouse) on the file, the environment information collection agent file is executed by the CPU 10a on the user terminal 10 (Step S252).

  Thereby, the environment information (asset information / inventory information / execution environment information; information related to the contents of the safety condition; for example, information about all software installed in each user terminal 10) in the user terminal 10 is obtained. Collected (step S253), and the collected result is transmitted / notified to the management server 120 through the in-house LAN 40, the proxy server 60 and the external communication network 110 (step S254).

  The management server 120 receives environmental information from each user terminal 10 belonging to the evaluation target system 1B (step S103), and receives environmental information from all user terminals 10 belonging to the evaluation target system 1B (step S103). (YES route of S104), security evaluation by the evaluation means 123 is executed (step S105).

  Note that in step S104, security evaluation is performed when environment information is received from all user terminals 10 belonging to the evaluation target system 1B. When environment information cannot be received, security evaluation by the evaluation unit 123 may be performed based on the environment information received when the predetermined time has elapsed.

In step S104, it is not determined whether environment information has been received from all the user terminals 10 as described above, but a predetermined number or more or a predetermined ratio of the user terminals 10 belonging to the evaluation target system 1B. It is determined whether or not environmental information has been received from the above user terminals 10, and evaluation is performed based on the received environmental information when environmental information is received from a predetermined number or more or a predetermined ratio of user terminals 10 Security evaluation by means 123 may be performed.

Next, first to third examples of security evaluation methods by the evaluation unit 123 that can be executed in step S105 will be described with reference to FIGS.
FIG. 6 is a flowchart (steps S221 to S223) for explaining the operation of the evaluation unit 123 (first example of the security evaluation method) in the management server 120 of the second embodiment. As shown in FIG. In the first example of the evaluation method, for example, at least one of the above-described safety conditions (1) to (5) is set as the safety condition in advance.

  Then, the evaluation unit 123 refers to the environment information in each user terminal 10 of the evaluation target system 1B received by the environment information reception unit 122, and sets one user terminal 10 belonging to the evaluation target system 1B. It is determined whether or not all the set safety conditions are satisfied (step S221). When the determination of the safety condition is completed for all the user terminals 10 that have received the environment information, the ratio (the ratio with respect to the total number of user terminals 10 in the evaluation target system 1B) P of the user terminals 10 that satisfy the safety condition is calculated. (Step S222).

  The higher the ratio P of the user terminals 10 that satisfy the safety conditions, the higher the user terminal 10 that may have some adverse effects in the evaluation target system 1B (causing a security problem, being infected with a virus, file exchange software, etc. The ratio (number) of user terminals 10 that are highly likely to cause information leakage due to wear or the like and user terminals 10 that have performed illegal copying is low, and the degree of safety of the evaluation target system 1B is high. The security situation is considered good.

  Therefore, when the degree of safety (security status) of the evaluation target system 1B is evaluated in, for example, five levels (evaluation levels 1 to 5) as described above, the evaluation level “5” is set when the ratio P is 90 to 100%. Allocation, evaluation level “4” is allocated when the ratio P is 80 to 90%, evaluation level “3” is allocated when the ratio P is 70 to 80%, and evaluation level when the ratio P is 50 to 70% “2” is assigned, and an evaluation level “1” is assigned in advance when the ratio P is less than 50%. Based on such evaluation level setting, the evaluation unit 123 determines an evaluation level corresponding to the ratio P calculated in step S222 for the evaluation target system 1B (step S223).

  In the first example of the security evaluation method shown in FIG. 6, the case where the safety condition is at least one of items (1) to (5) has been described, but the present invention is not limited to this. Instead, safety conditions other than these items (1) to (5) may be included, and safety conditions other than items (1) to (5) may be included.

FIG. 7 is a flowchart (steps S231 to S236) for explaining the operation (second example of the security evaluation method) of the evaluation unit 123 in the management server 120 of the second embodiment. As shown in FIG. In the second example of the evaluation method, for example, at least one of the above-described safety conditions (1) to (3) and (5) is set as the safety condition in advance. “Dangerous software is not installed in the user terminal” is assumed to have an extremely high importance for ensuring the safety of the evaluation target system 1B, and is set as an important safety condition.

Then, the evaluation unit 123 refers to the environment information in each user terminal 10 of the evaluation target system 1B received by the environment information reception unit 122. First, for a plurality of user terminals 10 belonging to the evaluation target system 1B, It is determined one by one whether the safety condition (4) set as the important safety condition is satisfied (step S231). At this time, if there is at least one user terminal 10 that does not satisfy the safety condition (4) (YES route in step S232), that is, if there is at least one user terminal 10 installed with dangerous software, Without determining other safety conditions, a predetermined low evaluation level (for example, “1”) is determined as the evaluation level of the evaluation target system 1B to which the user terminal 10 belongs, and the evaluation target This is given to the system 1B (step S233).

On the other hand, when there is no user terminal 10 that does not satisfy the safety condition (4) (step S
232 NO route), that is, if there is no user terminal 10 installed with dangerous software, the same evaluation process as in the first example described with reference to FIG. 6 is performed.
That is, it is determined whether each of the plurality of user terminals 10 belonging to the evaluation target system 1B satisfies all the set safety conditions except for the safety condition (4) (step S234). The ratio of the user terminals 10 satisfying the safety condition at the time when the determination of the safety conditions is completed for all the user terminals 10 that have received the environment information (ratio to the total number of user terminals 10 in the evaluation target system 1B) P Is calculated (step S235). Based on the same evaluation level setting as in the first example, the evaluation unit 123 determines an evaluation level corresponding to the ratio P calculated in step S235 for the evaluation target system 1B (step S236).

In the second example of the security evaluation method shown in FIG. 7, the case where the important safety condition is the safety condition of the item (4) has been described. However, the present invention is not limited to this, and other items Safety conditions of (1) to (3), (5) may be set as important safety conditions, and safety conditions other than these items (1) to (5) may be set as important safety conditions A plurality of safety conditions may be set as important safety conditions.

  FIG. 8 is a flowchart (steps S241 to S248) for explaining the operation (third example of the security evaluation method) of the evaluation unit 123 in the management server 120 of the second embodiment. As shown in FIG. In the third example of the evaluation method, for example, all of the above-described safety conditions (1) to (5) are set as safety conditions in advance. In the third example, the importance levels M1 to M5 as described above are set in advance.

  Then, the evaluation unit 123 refers to the environment information in each user terminal 10 of the evaluation target system 1B received by the environment information reception unit 122, and sets one user terminal 10 belonging to the evaluation target system 1B. It is determined whether or not each of the safety conditions (1) to (5) is satisfied (step S241). Percentage of user terminals 10 that satisfy each safety condition (1) to (5) when the determination of each safety condition (1) to (5) is completed for all the user terminals 10 that have received the environmental information. (Ratio to the total number of user terminals 10 in the evaluation target system 1B) P1 to P5 are respectively calculated (steps S242 to S246).

Thereafter, the evaluation unit 123 calculates an evaluation value V, which becomes a larger value as the number (ratio) of the user terminals 10 that do not satisfy the safety condition having a high importance Mi (i = 1 to 5) increases, according to the following formula. Calculate (step S247).
Evaluation value V = Σ (100−Pi) × Mi
Here, Σ means the sum of (100−Pi) × Mi calculated when i is 1, 2, 3, 4, 5 respectively.

This evaluation value V indicates that all user terminals 10 belonging to the evaluation target system 1B have safety conditions (1)
When all of-(5) are satisfied, the ratios P1 to P5 are all 100%, so the evaluation value V is 0. As the number (ratio) of user terminals 10 that do not satisfy the safety conditions (1) to (5) increases, in particular, the user terminals 10 that do not satisfy the safety condition having a large importance Mi value.
As the number (ratio) increases, the evaluation value V increases.

  That is, as the evaluation value V is smaller (closer to 0), the user terminal 10 that may have some adverse effect on the evaluation target system 1B (causes a security problem, is infected with a virus, or is a file exchange software) The ratio (number) of the user terminals 10 that are likely to cause information leakage due to, etc. or the user terminals 10 that have performed illegal copying is low, and the security level of the evaluation target system 1B is high. The situation is considered good.

  Therefore, when the degree of safety (security status) of the evaluation target system 1B is evaluated in, for example, five levels (evaluation levels 1 to 5) as described above, in the third example of the security evaluation method, the evaluation value V is 0 to K1. Is assigned an evaluation level “5”, assigned an evaluation level “4” when the evaluation value V is K1 to K2 (> K1), and assigned an evaluation level “4” when the evaluation value V is K2 to K3 (> K2). 3 ”is assigned, the evaluation level“ 2 ”is assigned when the evaluation value V is K3 to K4 (> K3), and the evaluation level“ 1 ”is assigned when the evaluation value V is K4 to K5 (> K4). , Set in advance. Based on such evaluation level setting, the evaluation unit 123 determines an evaluation level corresponding to the evaluation value V calculated in step S247 for the evaluation target system 1B (step S248). Note that K5 which is the maximum value of the evaluation value V is the value of the evaluation value V when the ratios P1 to P5 are all 0%, that is, 100 × (M1 + M2 + M3 + M4 + M5).

In the third example of the security evaluation method shown in FIG. 8, the case where the safety condition is the items (1) to (5) has been described. However, the present invention is not limited to this, and these items are (1)
Safety conditions other than (5) may be included, and safety conditions other than items (1) to (5) may be included.

  As described above, when the security evaluation result of the evaluation target system 1B is obtained in step S105 (one of the security evaluation methods in FIGS. 6 to 8), the evaluation result notification unit 124 determines that the evaluation result is a plurality of evaluation results. It is displayed on a terminal (not shown) of the user terminal 10 or an administrator (such as an administrator of the evaluation target system 1B) and notified to each user or administrator (step S106 in FIG. 5).

  At this time, the notified evaluation result includes at least the five evaluation levels obtained in step S105. In addition to this evaluation level, more detailed information, for example, calculated ratios P, P1 to P5, The evaluation value V may be included, or more detailed information, for example, information such as which user terminal 10 did not satisfy which safety condition may be included. Note that what kind of information is notified as the evaluation result may be determined in advance in the management server 120 or may be determined in accordance with an instruction from the administrator who has requested the security evaluation.

  And in the management server 120 of this embodiment, the electronic security (e-learning) about the security containing the matter which concerns on the said safety conditions (1)-(5) at least, ie, the security in general when using the system 1B in a company The electronic education agent file (first electronic education agent file) is created as a first electronic education agent file in order to execute electronic education on the plurality of user terminals 10 belonging to the in-company system 1B. It is created by the holding means 1251 or read from the first electronic education agent file creation / holding means 1251 (step S107).

Note that the first electronic education agent file may correspond to each of the above-described five evaluation levels, and performs electronic education related to environmental information having a particular problem based on the detailed information of the evaluation result. It may be a thing. If an agent file for executing the corresponding electronic education is held in the first electronic education agent file creation / holding means 1251, the agent file is read out and held as the first electronic education agent file. If not, it is created by the first electronic education agent file creation / holding means 1251.

  In this way, the agent file read from the first electronic education agent file creation / holding means 1251 or the agent file created by the first electronic education agent file creation / holding means 1251 is sent together with the security evaluation request. A plurality of users in the evaluation target system 1B, for example, attached to an e-mail by the first electronic education agent file transmission means 1252 based on the received information (e-mail address, etc.) regarding each user terminal 10 of the transmission destination. It is transmitted to each of the terminals 10 (step S108).

  Here, according to the flowchart (steps S261 to S264) shown in FIG. 10, the electronic education operation of each user terminal 10 in the evaluation target system 1B of the present embodiment will be described. As shown in FIG. 10, each user terminal 10 monitors whether or not the first electronic education agent file has been received from the management server 120 (step S261). (YES route of step S261) When the user performs a predetermined operation (for example, a double-click operation with a mouse) on the file, the first electronic education agent file is stored on the user terminal 10. It is executed by the CPU 10a (step S262).

  Thereby, the electronic education about the security in general is performed for the user of the user terminal 10 in the user terminal 10 (step S263). In this embodiment, the electronic education result (for example, each user) Information regarding whether or not the electronic education has been completed at the terminal 10 is transmitted / notified to the management server 120 through the in-house LAN 40, the proxy server 60, and the external communication network 110 (step S264).

  The management server 120 receives an electronic education result from each user terminal 10 belonging to the evaluation target system 1B (step S109), and the electronic education result is sent to the administrator of the evaluation target system 1B via the management server 120. And the user of each user terminal 10 is notified (step S110). The electronic education result may be notified directly from each user terminal 10 to the administrator of the evaluation target system 1B.

  On the other hand, when it becomes the regular evaluation timing for the in-company system 1B that has completed the processing of steps S102 to S110 (system evaluation / notification processing and electronic education processing for security in general) as described above (YES from the NO route of step S101 to step S111 YES). Route), the environment information collection agent file is sent by the environment information collection agent file transmission means 121 based on the information (email address etc.) regarding each destination user terminal 10 sent at the time of the new security evaluation request. Or the like, and transmitted to each of the plurality of user terminals 10 in the evaluation target system 1B (step S112). At this time, the environment information collection operation executed by each user terminal 10 that has received the environment information collection agent file is the same as the procedure described above with reference to FIG.

  The management server 120 receives environment information from each user terminal 10 belonging to the evaluation target system 1B (step S113), and when environment information is received from all user terminals 10 belonging to the evaluation target system 1B (step S113). (YES route of S114), security evaluation by the evaluation means 123 is executed (step S115).

  In step S114, security evaluation is performed when environment information is received from all user terminals 10 belonging to the evaluation target system 1B. When environment information cannot be received, security evaluation by the evaluation unit 123 may be performed based on the environment information received when the predetermined time has elapsed.

  In step S114, it is not determined whether environment information has been received from all the user terminals 10 as described above, but a predetermined number or more or a predetermined ratio of the user terminals 10 belonging to the evaluation target system 1B. It is determined whether or not environmental information has been received from the above user terminals 10, and evaluation is performed based on the received environmental information when environmental information is received from a predetermined number or more or a predetermined ratio of user terminals 10 You may make it perform the security evaluation process (step S115) by the means 123, and the judgment process (step S120) by the judgment means 126. FIG.

  In step S115, when the security evaluation result of the evaluation target system 1B is obtained by the security evaluation method described above with reference to FIGS. 6 to 8, for example, the evaluation result is notified by the evaluation result notifying unit 124. 10 or a manager (such as a manager of the evaluation target system 1B) (not shown), and is notified to each user or manager (step S116 in FIG. 5).

  Further, in the management server 120, based on the security evaluation result in step S115, it is determined whether or not it is necessary to perform common electronic education for all of the plurality of user terminals 10 belonging to the evaluation target system 1B. (Step S117). For example, when all of the plurality of user terminals 10 belonging to the evaluation target system 1B satisfy the safety condition, or when the current security evaluation result for the evaluation target system 1B is not different from the previous time, or better than the previous time. If it is, it is determined that the electronic education is unnecessary (NO route of step S117), and the process is ended (return to step S101).

  On the other hand, if this is not the case, that is, if the current security evaluation result for the evaluation target system 1B is worse than the previous time, it is determined that electronic education is necessary (YES route in step S117), and The same electronic education on general security is performed, or the electronic education (e-learning) corresponding to the security evaluation result obtained in step S115 is performed. In the second embodiment, the latter electronic education, that is, the electronic education corresponding to the security evaluation result obtained in step S115 is performed.

  At this time, in the management server 120 of the second embodiment, in accordance with the security evaluation result obtained in step S115, electronic education (e-learning) corresponding to the security evaluation result is given to a plurality of user terminals belonging to the in-company system 1B. 10, the electronic education agent file is created by the first electronic education agent file creation / holding means 1251 or read from the first electronic education agent file creation / holding means 1251. (Step S118).

  Here, the electronic education agent file corresponding to the security evaluation result may correspond to each of the above-described five evaluation levels, or may be particularly problematic environmental information based on the detailed information of the evaluation result. Such electronic education may be performed. Also, if the agent file for executing the corresponding electronic education is held in the first electronic education agent file creation / holding means 1251, the agent file must be held while being read out as the electronic education agent file. For example, the first electronic education agent file creation / holding means 1251 creates the file.

  In this way, the agent file read from the first electronic education agent file creation / retention means 1251 or the agent file created by the first electronic education agent file creation / retention means 1251 is used when a new security evaluation request is made. Based on the information (e-mail address etc.) regarding each user terminal 10 that has already been sent, the first electronic education agent file transmission means 1252 attaches it to an e-mail, etc. Is transmitted to each of the user terminals 10 (step S119).

  At this time, the electronic education operation executed by each user terminal 10 that has received the electronic education agent file is the same as the procedure described above with reference to FIG. Thereafter, the management server 120 receives an electronic education result from each user terminal 10 belonging to the evaluation target system 1B (step S109), and the electronic education result is sent to the evaluation target system 1B via the management server 120. The administrator or the like or the user of each user terminal 10 is notified (step S110).

  In the second embodiment, in step S117, it is determined that electronic education is necessary when the current security evaluation result for the evaluation target system 1B is worse than the previous time. When all of the plurality of user terminals 10 belonging to 1B satisfy the above-mentioned safety conditions, or when the current security evaluation result for the evaluation target system 1B is not different from the previous time or better than the previous time. Even in such a case, electronic education for each user terminal 10 (electronic education for security in general and electronic education according to the evaluation result) may be performed for confirmation and re-recognition of security.

  In the management server 120, when environment information is received from all user terminals 10 belonging to the evaluation target system 1B (YES route in step S114), the following is performed in parallel with steps S115 to S119 described above. Steps S120 to S124 are executed.

  That is, first, whether or not each user terminal 10 satisfies at least the safety conditions (1) to (5) based on the environmental information in each user terminal 10 received in step S113 by the judging means 126 ( It is determined whether or not a safety condition has been violated (step S120).

  If there is no violation of the safety condition (NO route in step S121), the process ends (returns to step S101). On the other hand, if there is a violation of the safety condition (YES route in step S121), the warning means 127 sends a warning indicating that the safety condition has been violated to the user terminal 10 of the violator or a terminal such as the administrator. Is displayed, and a warning is given to the violator, the manager, etc. (the manager of the in-company system 1B, etc.). The warning is given by a pop-up display or a warning sound on the terminal display unit (step S122).

  Then, in the user terminal (affiliated information processing device) 10 that has received the warning, the CPU 10a functions from a state (first state) that does not function as the management target file determination unit 11, the mobile terminal device determination unit 12, and the permission / refusal unit 13. By switching to the (second state), the state (first state) in which electronic file writing / transmission from the user terminal (affiliated information processing device) 10 to the external medium is freely performed (the first state) is more limited. The second state is severe, that is, the management target file is limited to a state in which writing / transmission can be performed only by the mobile terminal device 20 in which the file management program is installed (step S122).

In the user terminal (affiliated information processing apparatus) 10 that has received the warning in step S122, the file management program 30 for the management object file is switched by switching the prohibition condition by the permission / refusal means 13 in the CPU 10a by the file management server 30 or the CPU 10a. The second state in which writing / transmission cannot be performed unless the mobile terminal device 20 is installed is the more restrictive third state, that is, whether the electronic file is a management target file or whether the external medium is a mobile terminal Regardless of whether or not the device 20 is used, the writing / transmission of all electronic files to an external medium may be restricted.

  It should be noted that during the time limit for writing / sending electronic files to such external media, the user terminal 10 that has violated the safety condition performs the second electronic education (detailed electronic education on matters related to the violating safety condition). It may end when the acceptance violation safety condition is resolved, or for the user terminal 10 that has violated the safety condition, the second electronic education (detailed electronic education on matters related to the violation safety condition) Even if the violation is resolved, it may be always performed after the violation.

  Then, in the management server 120 of the second embodiment, in order to execute electronic education (e-learning) on matters relating to the violation safety condition to the user terminal 10 of the violator, the agent file for electronic education ( (Second electronic education agent file) is created by the second electronic education agent file creation / retention means 1281 or read from the second electronic education agent file creation / retention means 1281 (step S123).

  If the agent file for executing the corresponding electronic education is held in the second electronic education agent file creation / holding means 1281, the agent file is read out as the second electronic education agent file and held. If not, it is created by the second electronic education agent file creation / retention means 1281.

  In this way, the agent file read from the second electronic education agent file creation / retention means 1281 or the agent file created by the second electronic education agent file creation / retention means 1281 is already at the time of the security evaluation request. From the sent information (email address, etc.) relating to each of the plurality of user terminals 10 belonging to the evaluation target system 1B, the e-mail address of the violator's user terminal 10 is searched and based on the e-mail address. Then, the second electronic education agent file transmission means 1282 transmits it to the user terminal 10 of the person violating the safety condition by attaching it to an e-mail (step S124).

  At this time, the electronic education operation (detailed electronic education regarding the matter related to the violation safety condition) executed on the user terminal 10 of the violator who has received the second electronic education agent file has been described above with reference to FIG. Since it is the same as the procedure, its description is omitted. Thereafter, the management server 120 receives the electronic education result from the violator's user terminal 10 (step S109), and the electronic education result is sent to the administrator of the evaluation target system 1B via the management server 120, etc. The user (violator) of the user terminal 10 is notified (step S110).

[2-3] Effects of the Second Embodiment As described above, according to the system as the second embodiment of the present invention, at least one safety condition (for example, the above items (1) to (5) is set in each user terminal 10. ) After executing electronic education about security including matters relating to at least one of the above) (for example, electronic education about security in general when using the in-company system 1B), environmental information on each user terminal 10 Are collected from each user terminal 10 to the management server 120, and this management server 120 (determination means 126) determines whether or not each user terminal 10 satisfies the safety condition based on the collected environment information. When a warning is issued to the user (safety condition violator) or the administrator of the user terminal 10 that is determined by the warning means 127 not to satisfy the safety condition. In both cases, detailed electronic education is executed for the user terminal 10 regarding matters related to the violation safety condition. In other words, if there is a violation of safety conditions after e-education of security in general, the violation is likely to be intentional by the user, and a warning about the violation is given to the user and administrator, Electronic education about violations will be implemented for users who are violators.

  Therefore, the warning raises the security awareness of the administrator, and the administrator can reliably grasp the system status and secure and maintain a safe environment in the in-company system 1B. In addition, a warning is given to the user (violator), and electronic education for ensuring security for the user (violator) can be performed in accordance with the actual situation of each user terminal 10, and It is possible to increase the security awareness of the user (violator) and further contribute to securing and maintaining a safe environment in the internal system 1B of the company. In other words, since it is possible to conduct electronic education for violations that are likely to have been intentionally performed by users after electronic education on security in general, thorough user education (employee education) It is possible to carry out the process, which contributes to securing and maintaining a safe environment for the in-company system 1B.

  In addition, environmental information in each of the plurality of user terminals 10 (for example, environment information in each of the plurality of user terminals 10 belonging to the internal system 1B such as a company) is collected from each user terminal 10 to the management server 120, In this management server 120, based on the collected environment information in each user terminal 10, the security level for the plurality of user terminals 10, that is, the security status of the internal system 1 B in a company or the like is evaluated, and the evaluation result Is notified to users and administrators.

  As a result, a service for evaluating the security status of the in-company system 1B can be provided to the company, etc., and even if there is no system administrator, the manager and the administrator are indifferent to security measures. Even in such a case, the security status of the in-company system 1B and each terminal 10 can be grasped extremely accurately and easily, and the security awareness of the manager, administrator, and user is increased, and a safe environment in the in-company system 1B is secured.・ Can be maintained. In particular, the service provided by the management server 120 in this way is effective for small and medium-sized businesses that are not as conscious of security as large companies. By using this service, The manager can grasp the security status of his / her system 1B and conduct electronic education very easily and thoroughly.

  At this time, the management server 120 satisfies at least one safety condition (for example, at least one of the above items (1) to (5)) among the plurality of user terminals 10 as shown in FIG. Based on the ratio P of the user terminal 10, or based on the important safety conditions set as in the second example shown in FIG. 7, or as shown in FIG. ) Based on the ratios P1 to P5 of the user terminals 10 satisfying the above and the importance levels M1 to M5 of the safety conditions (1) to (5), the safety degrees of the plurality of user terminals 10 (evaluation target system 1B) are calculated. It is possible to evaluate numerically.

  According to the first method shown in FIG. 6, for example, if the ratio of the user terminals 10 that satisfy at least one of the safety conditions of the items (1) to (5) is 100%, the highest evaluation is given. Then, a stepwise evaluation level (security level) corresponding to the ratio can be given to the evaluation target system 1B. That is, as the system 1B has more user terminals 10 that satisfy the safety conditions (1) to (5), a higher numerical value can be obtained and a higher evaluation level can be given, and the evaluation according to the level of safety is evaluated system 1B. Can be defeated.

In addition, as in the second method shown in FIG. 7, the safety condition “item 4) that“ hazardous software is not installed in the user terminal ”is to ensure the safety of the evaluation target system 1B. Since the importance is extremely high, if there is at least one user terminal 10 that does not satisfy the above item (4) by setting it as an important safety condition, that is, one user terminal 10 in which dangerous software is installed. However, by giving a low evaluation level to the evaluation target system 1B regardless of the ratio of other items, the degree of safety (security status, security level) of the evaluation target system 1B can be easily and reliably evaluated. be able to.

  Further, as in the third method shown in FIG. 8, the evaluation value V that increases as the number (ratio) of the user terminals 10 that do not satisfy the safety condition with high importance Mi (i = 1 to 5) increases. By determining the evaluation level, a low evaluation level (security level) can be given to the system 1B in which the user terminal 10 that does not satisfy the safety condition with high importance exists, and the evaluation according to the high safety level Can be given to the evaluation target system 1B.

  At this time, the environment information collection agent file is transmitted from the management server 120 to the plurality of user terminals 10, and the environment information collection agent file is executed in each user terminal 10, whereby the environment information in the user terminal 10 is managed by the management server. 120 can be collected. Therefore, the management server 120 creates an environment information collection agent file and transmits the environment information collection agent file to the plurality of user terminals 10 belonging to the evaluation target system 1B all at once. The environmental information in 10 can be collected very easily.

  Further, the first and second electronic education agent files and the electronic education agent files corresponding to the evaluation results are transmitted from the management server 120 to each user terminal 10 to cause each user terminal 10 to execute these electronic education agent files. Thus, in addition to electronic education about security in general and electronic education about violations, it is possible to cause the user of the user terminal 10 to execute electronic education according to the evaluation result. Therefore, the management server 120 simply transmits the first electronic education agent file and the electronic education agent file corresponding to the evaluation result to the plurality of user terminals 10 belonging to the evaluation target network 1B, and thus the plurality of users. In addition to being able to execute electronic education on security in general for the terminal 10 and electronic education according to the evaluation results, it is also possible to send a second electronic education agent file to the user terminal 10 of the violator, Detailed electronic education on violations for violators can be carried out very easily. This makes it possible to thoroughly perform security user education (employee education) in the in-company system 1B.

  In addition, based on the environmental information collected regularly, the security level (degree of safety) about the plurality of user terminals 10 (evaluation target system 1B) is periodically evaluated, and the periodic evaluation results are obtained from a plurality of evaluation results. By notifying the user, administrator, etc. of the user terminal 10, the user, administrator, etc. can periodically grasp the security status of the in-company system 1B, and the in-company system 1B0 is safe. It will contribute to securing and maintaining the environment.

  On the other hand, according to the system as the second embodiment of the present invention, after the electronic education about security in general and the electronic education about the security according to the evaluation result by the evaluation means 123, the warning means 127 of the management server 120 In the user terminal (user terminal determined not to satisfy the safety conditions) 10 that has received the warning, the electronic file from the user terminal (affiliated information processing apparatus) 10 to the external medium is transferred in response to the warning. Export / send is restricted.

At this time, the CPU 10a operates as a management target file determination unit 11 and a portable terminal device determination unit 12.
The user terminal (affiliated information processing apparatus) 10 can freely write / send electronic files to / from an external medium by switching from a state that does not function as the permission / refusal means 13 (first state) to a state that functions (second state). The above-described state (first state) is limited to the second state in which the file to be managed can be written / transmitted only by the mobile terminal device 20 in which the file management program is installed. The same effect as the first embodiment can be obtained.

  In the user terminal (affiliated information processing device) 10 that has received the warning, the prohibition condition by the permission / refusal means 13 in the CPU 10a is switched, and the second state is changed to the more restrictive third state, that is, the electronic file is managed. Regardless of whether the file is a file or whether the external medium is the portable terminal device 20, security awareness is realized by switching to a state in which writing / transmission of all electronic files to the external medium is prohibited. For users of user terminals 10 who have received warnings, who are considered to be extremely low, writing / transmission of electronic files to external media is completely prohibited without considering the convenience, and personal information Security is ensured by giving priority to the prevention and leakage of managed files including confidential information.

[3] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
For example, in the system according to the second embodiment (security evaluation service providing system), the warning server 127 of the management server 120 performs the electronic education about security in general and the electronic education about the security according to the evaluation result by the evaluation unit 123. In the user terminal 10 (user terminal determined not to satisfy the safety condition) that has received the warning, the user is switched from the first state to the second state or from the second state to the third state. Although the writing / transmission of the electronic file from the terminal 10 to the external medium is restricted, the present invention is not limited to this. For example, the first electronic education control means 125 (or the second electronic education control means) 128) results of electronic education executed on each user terminal 10 (processing results of steps S108 and S109 in FIG. 5) Or in each user terminal 10 from the first state to the second state, or from the second state to the third state, and from the user terminal 10 to the external medium. The writing / sending of electronic files may be restricted.

  Moreover, according to the whole evaluation result notified by step S106 shown in FIG. 5, with respect to all the user terminals 10 which select any one of the 1st state-the 3rd state mentioned above, and belong to the evaluation object system 1B. May be applied. At this time, for example, the evaluation level is made to correspond to three stages (first to third states), and when the evaluation target system 1B has a high evaluation level (high security awareness), the first state is selected, When the evaluation level of the evaluation target system 1B is medium (medium security awareness), the second state is selected. When the evaluation level of the evaluation target system 1B is low (security awareness is low), the third state is selected. A state may be selected. Further, when the evaluation level is made to correspond to two stages (two of the first to third states), and the evaluation level of the evaluation target system 1B is high (security awareness is high), the first state or When the second state is selected and the evaluation level of the evaluation target system 1B is low (security awareness is low), the second state or the third state may be selected.

Here, the selected state is uniformly applied to all user terminals 10 belonging to the evaluation target system 1B. However, the evaluation result or electronic education result (test scoring result) for each user from the management server 120 is used. In particular, the user terminal 10 of the user whose individual evaluation result or electronic education result is better than the overall average or the user terminal of a bad user is based on the overall evaluation result. A state different from the selected state may be selected individually. For example, when the state selected based on the overall evaluation result is the third state, the user terminal 10 of the user with the excellent evaluation result (electronic education result) is set to the first state or the second state. If the state selected based on the overall evaluation result is the second state, the user terminal 10 of the user with the excellent evaluation result (electronic education result) The first state may be selected and applied, and the third state may be selected and applied to the user terminal 10 of a user with a poor evaluation result (electronic education result).

  In the system (security evaluation service providing system) of the second embodiment, the management server 120 is provided outside the company, and the external management server 120 performs security evaluation and electronic education for the in-company system 1B (security evaluation service). ) Is provided to the in-company system 1B, but the present invention is not limited to this, and the function as the management server 120 described above functions as the file management server 30 or the in-company management server (illustrated). In order to manage the in-house system 1B rather than as a service for the in-company system 1B, such a server is configured to perform security evaluation and electronic education of the in-company system 1B described above. May be.

  Furthermore, the management target file determination unit 11, the mobile terminal device determination unit 12, the permission / refusal unit 13, the affiliation determination unit 21, the encryption unit 22, the authentication information input request unit 23, and the authentication unit 24 described above in the first and second embodiments. , Program possession determination means 241, installation means 242, decryption means 25, storage prohibition means 26, 26a, identification information determination means 27, and storage control means 28 (all or part of the functions of each means) are computers ( In this embodiment, the CPU 10a, 20a, 100a) is realized by executing a predetermined application program (file management program).

  Similarly, the environment information collection agent file transmission unit 121, the environment information reception unit 122, the evaluation unit 123, the evaluation result notification unit 124, the first electronic education control unit 125, the determination unit 126, and the warning unit 127 described above in the second embodiment. The function (all or part of each function) as the second electronic education control means 128 is performed by a computer (including a CPU, an information processing device, and various terminals) by a predetermined application program (providing a management program / security evaluation service) This is realized by executing a program.

  The above-mentioned program is, for example, a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.), etc. It is provided in a form recorded on a computer-readable recording medium. In this case, the computer reads the file management program or the management program / security evaluation service providing program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a program recorded on a recording medium. The file management program is stored in the computer as described above on the management target file determination unit 11, the portable terminal device determination unit 12, the permission / refusal unit 13, the affiliation determination unit 21, the encryption unit 22, the authentication information input request unit 23, and the authentication unit. 24, a program holding determination unit 241, an installation unit 242, a decryption unit 25, a storage prohibition unit 26, 26a, an identification information determination unit 27, and a program code for realizing functions as a storage control unit 28. The application program as the management program / security evaluation service providing program is stored in the above-described computer by the environment information collection agent file transmission unit 121, the environment information reception unit 122, the evaluation unit 123, the evaluation result notification unit 124, and the first electronic It includes program codes for realizing the functions as the education control means 125, the judgment means 126, the warning means 127, and the second electronic education control means 128. Also, some of the functions may be realized by the OS instead of the application program.

  Furthermore, as a recording medium in the present embodiment, in addition to the flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk described above, an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM) In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

It is a block diagram which shows the structure of the file management system as 1st Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the user terminal (affiliation information processing apparatus) in the file management system of 1st Embodiment. It is a flowchart for demonstrating operation | movement of the portable terminal device in the file management system of 1st Embodiment. It is a block diagram which shows the structure of the file management system as 2nd Embodiment of this invention, and the security evaluation service provision system containing this file management system. It is a flowchart for demonstrating operation | movement of the management server (security evaluation service provision server) of 2nd Embodiment. It is a flowchart for demonstrating operation | movement (1st example of a security evaluation method) of the evaluation means in the management server of 2nd Embodiment. It is a flowchart for demonstrating operation | movement (2nd example of a security evaluation method) of the evaluation means in the management server of 2nd Embodiment. It is a flowchart for demonstrating operation | movement (3rd example of a security evaluation method) of the evaluation means in the management server of 2nd Embodiment. It is a flowchart for demonstrating the environmental information collection operation | movement of each user terminal in the evaluation object system of 2nd Embodiment. It is a flowchart for demonstrating the electronic education operation | movement of each user terminal in the evaluation object system of 2nd Embodiment.

Explanation of symbols

1A, 1B file management system (in-house system)
10 User terminal (information processing device / affiliated information processing device)
10a CPU (Processor)
10b Storage unit (data storage storage unit)
10c interface unit (output unit)
DESCRIPTION OF SYMBOLS 11 Management object file determination means 12 Portable terminal device determination means 13 Acceptance / rejection means 14 Environment information collection agent file execution means (environment information collection means)
15 First electronic education agent file execution means 16 Second electronic education agent file execution means 20 Mobile terminal device (external medium)
20a CPU (processing unit)
20b storage unit 20c interface unit 21 affiliation determination unit 22 encryption unit 23 authentication information input request unit 24 authentication unit 241 program possession determination unit 242 installation unit 25 decryption unit 26, 26a storage prohibition unit 27 identification information determination unit 28 storage control unit 30 File management server 40 network (company LAN)
50 External medium 60 Proxy server 100 External user terminal (information processing apparatus / unaffiliated information processing apparatus)
100a CPU (processing unit)
100b Hard disk (data storage unit)
100c Temporary storage unit 100d Interface unit 110 External communication network 120 Management server (security evaluation service providing server)
121 Environment information collection agent file transmission means (environment information collection means)
122 Environmental information receiving means (environmental information collecting means)
123 Evaluation means 124 Evaluation result notification means (notification means)
125 1st electronic education control means (electronic education means)
1251 First electronic education agent file creation / holding means 1252 First electronic education agent file transmission means 126 Judgment means 127 Warning means 128 Second electronic education control means 1281 Second electronic education agent file creation / holding means 1282 Second electronic education agent File transmission means

Claims (7)

A mobile terminal device that is communicably connected to an information processing device and includes at least a processing unit and a storage unit,
The processing unit
A file management system comprising a plurality of terminals and a file management server that manages electronic files satisfying a predefined management target standard among electronic files created and used by the plurality of terminals as management target files , Whether the information processing apparatus belongs as one of the plurality of terminals, based on whether the information processing apparatus has a terminal-dedicated program belonging to the file management system, or Affiliation determination means for determining whether the identification information of the information processing apparatus is registered in the file management server as terminal identification information belonging to the file management system,
The information processing apparatus belongs to the file management system by the affiliation determining means based on whether the information processing apparatus has a program dedicated to the terminal or the identification information of the information processing apparatus is registered in the file management server. When the management target file is written to the storage unit from the belonging information processing apparatus determined to be encrypted, the management target file is encrypted, and then the encrypted management target file is registered and stored in the storage unit means,
Based on the fact that the information processing apparatus does not have a program dedicated to the terminal, or the identification information of the information processing apparatus is not registered in the file management server, it belongs to the file management system by the affiliation determining means. When an access request is received from an unaffiliated information processing apparatus that has been determined to be unencrypted by the encryption means to the encrypted management target file that has been registered and stored in the storage unit, an authentication information input request is issued. Authentication information input request means for a user of the unaffiliated information processing apparatus;
Based on the authentication information transmitted from the non-participating information processing apparatus in response to the input request by the authentication information input request means and the registered authentication information registered in advance, the user can manage the encryption management target file. An authentication means for determining whether or not the user is a valid user,
When the authentication unit authenticates that the user is a legitimate user, the unaffiliated information processing apparatus has an unaffiliated information processing apparatus program necessary for accessing the encryption management target file. Program possession judging means for judging whether or not
If the unaffiliated information processing device determines that the unaffiliated information processing device does not possess the unaffiliated information processing device program, the program possession determining means installs the unaffiliated information processing device program into the unaffiliated information processing device. Installation means to
When it is determined that the unaffiliated information processing apparatus possesses the unaffiliated information processing apparatus program by the program possession determining means, or the unaffiliated information processing apparatus program is unaffiliated by the installation means Decryption means for decrypting the encryption management target file and deploying it on the storage unit after being installed in the information processing apparatus;
In conjunction with the storage prohibition function obtained by executing the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus, the management target file expanded on the storage unit by the decryption means The management target file by the non-participating information processing device on the temporary storage unit temporarily holding data during data processing in the non-participating information processing device while prohibiting saving in the data storage unit in the information processing device Storage prohibition means for executing access to, and
When a request to read and store the encryption management target file in the storage unit is received from the belonging information processing apparatus, the decryption unit decrypts the encryption management target file and the management unit decrypted by the decryption unit A storage control means for storing the target file in the data storage unit of the information processing apparatus to which it belongs;
A mobile terminal device that functions as: A mobile terminal device that is communicably connected to an information processing device and includes at least a processing unit and a storage unit,
The processing unit
A file management system comprising a plurality of terminals and a file management server that manages electronic files satisfying a predefined management target standard among electronic files created and used by the plurality of terminals as management target files , Whether the information processing apparatus belongs as one of the plurality of terminals, based on whether the information processing apparatus has a terminal-dedicated program belonging to the file management system, or Affiliation determination means for determining whether the identification information of the information processing apparatus is registered in the file management server as terminal identification information belonging to the file management system,
The information processing apparatus belongs to the file management system by the affiliation determining means based on whether the information processing apparatus has a program dedicated to the terminal or the identification information of the information processing apparatus is registered in the file management server. When the management target file is written to the storage unit from the information processing apparatus that has been determined to be encrypted, the management target file is encrypted, and then the encrypted management target file is registered and stored in the management target file. Encryption means for registering and storing in the storage unit with identification information for identifying the belonging information processing apparatus,
Based on the fact that the information processing apparatus does not have a program dedicated to the terminal, or the identification information of the information processing apparatus is not registered in the file management server, it belongs to the file management system by the affiliation determining means. When an access request for an encrypted management target file encrypted by the encryption unit and written to the storage unit is received from an unaffiliated information processing apparatus that has been determined not to exist, an authentication information input request is not received. Authentication information input request means for the user of the belonging information processing apparatus,
Based on the authentication information transmitted from the non-participating information processing apparatus in response to the input request by the authentication information input request means and the registered authentication information registered in advance, the user can manage the encryption management target file. An authentication means for determining whether or not the user is a valid user,
When the authentication unit authenticates that the user is a legitimate user, the unaffiliated information processing apparatus has an unaffiliated information processing apparatus program necessary for accessing the encryption management target file. Program possession judging means for judging whether or not
If the unaffiliated information processing device determines that the unaffiliated information processing device does not possess the unaffiliated information processing device program, the program possession determining means installs the unaffiliated information processing device program into the unaffiliated information processing device. Installation means to
When it is determined that the unaffiliated information processing apparatus possesses the unaffiliated information processing apparatus program by the program possession determining means, or the unaffiliated information processing apparatus program is unaffiliated by the installation means Decryption means for decrypting the encryption management target file and deploying it on the storage unit after being installed in the information processing apparatus;
In conjunction with the storage prohibition function obtained by executing the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus, the management target file expanded on the storage unit by the decryption means The management target file by the non-participating information processing device on the temporary storage unit temporarily holding data during data processing in the non-participating information processing device while prohibiting saving in the data storage unit in the information processing device Storage prohibition means to execute access to
When a request to read and store the encryption management target file in the storage unit is received from the belonging information processing apparatus, the belonging information processing apparatus performs the encryption based on the identification information added to the encryption management target file. Identification information determining means for determining whether or not the information processing apparatus is a belonging information processing apparatus that has registered and stored the original file of the computer to be managed, and
When the identification information determination unit determines that the information processing apparatus belongs to the original file, the decryption unit decrypts the encryption management target file and the decryption unit decrypts the decrypted file. A storage control means for storing a management target file in a data storage unit of the information processing apparatus to which the file belongs;
A mobile terminal device that functions as: When access to the management target file by the unaffiliated information processing apparatus is completed,
The processing unit functions so that the encryption unit encrypts and writes the management target file on the temporary storage unit of the unaffiliated information processing apparatus to the storage unit. The mobile terminal device according to claim 2. A file management program executed by the processing unit in a portable terminal device that is communicably connected to the information processing device and includes at least a processing unit and a storage unit,
A file management system comprising a plurality of terminals and a file management server that manages electronic files satisfying a predefined management target standard among electronic files created and used by the plurality of terminals as management target files , Whether the information processing apparatus belongs as one of the plurality of terminals, based on whether the information processing apparatus has a terminal-dedicated program belonging to the file management system, or Affiliation determination means for determining whether the identification information of the information processing apparatus is registered in the file management server as terminal identification information belonging to the file management system,
The information processing apparatus belongs to the file management system by the affiliation determining means based on whether the information processing apparatus has a program dedicated to the terminal or the identification information of the information processing apparatus is registered in the file management server. When the management target file is written to the storage unit from the belonging information processing apparatus determined to be encrypted, the management target file is encrypted, and then the encrypted management target file is registered and stored in the storage unit means,
Based on the fact that the information processing apparatus does not have a program dedicated to the terminal, or the identification information of the information processing apparatus is not registered in the file management server, it belongs to the file management system by the affiliation determining means. When an access request is received from an unaffiliated information processing apparatus that has been determined to be unencrypted by the encryption means to the encrypted management target file that has been registered and stored in the storage unit, an authentication information input request is issued. Authentication information input request means for a user of the unaffiliated information processing apparatus;
Based on the authentication information transmitted from the non-participating information processing apparatus in response to the input request by the authentication information input request means and the registered authentication information registered in advance, the user can manage the encryption management target file. An authentication means for determining whether or not the user is a valid user,
When the authentication unit authenticates that the user is a legitimate user, the unaffiliated information processing apparatus has an unaffiliated information processing apparatus program necessary for accessing the encryption management target file. Program possession judging means for judging whether or not
If the unaffiliated information processing device determines that the unaffiliated information processing device does not possess the unaffiliated information processing device program, the program possession determining means installs the unaffiliated information processing device program into the unaffiliated information processing device. Installation means to
When it is determined that the unaffiliated information processing apparatus possesses the unaffiliated information processing apparatus program by the program possession determining means, or the unaffiliated information processing apparatus program is unaffiliated by the installation means Decryption means for decrypting the encryption management target file and deploying it on the storage unit after being installed in the information processing apparatus;
In conjunction with the storage prohibition function obtained by executing the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus, the management target file expanded on the storage unit by the decryption means The management target file by the non-participating information processing device on the temporary storage unit temporarily holding data during data processing in the non-participating information processing device while prohibiting saving in the data storage unit in the information processing device Storage prohibition means for executing access to, and
When a request to read and store the encryption management target file in the storage unit is received from the belonging information processing apparatus, the decryption unit decrypts the encryption management target file and the management unit decrypted by the decryption unit A storage control means for storing the target file in the data storage unit of the information processing apparatus to which it belongs;
A file management program that causes the processing unit to function. A file management program executed by the processing unit in a portable terminal device that is communicably connected to the information processing device and includes at least a processing unit and a storage unit,
A file management system comprising a plurality of terminals and a file management server that manages electronic files satisfying a predefined management target standard among electronic files created and used by the plurality of terminals as management target files , Whether the information processing apparatus belongs as one of the plurality of terminals, based on whether the information processing apparatus has a terminal-dedicated program belonging to the file management system, or Affiliation determination means for determining whether the identification information of the information processing apparatus is registered in the file management server as terminal identification information belonging to the file management system,
The information processing apparatus belongs to the file management system by the affiliation determining means based on whether the information processing apparatus has a program dedicated to the terminal or the identification information of the information processing apparatus is registered in the file management server. When the management target file is written to the storage unit from the information processing apparatus that has been determined to be encrypted, the management target file is encrypted, and then the encrypted management target file is registered and stored in the management target file. Encryption means for registering and storing in the storage unit with identification information for identifying the belonging information processing apparatus,
Based on the fact that the information processing apparatus does not have a program dedicated to the terminal, or the identification information of the information processing apparatus is not registered in the file management server, it belongs to the file management system by the affiliation determining means. When an access request is received from an unaffiliated information processing apparatus that has been determined to be unencrypted by the encryption means to the encrypted management target file that has been registered and stored in the storage unit, an authentication information input request is issued. Authentication information input request means for a user of the unaffiliated information processing apparatus;
Based on the authentication information transmitted from the non-participating information processing apparatus in response to the input request by the authentication information input request means and the registered authentication information registered in advance, the user can manage the encryption management target file. An authentication means for determining whether or not the user is a valid user,
When the authentication unit authenticates that the user is a legitimate user, the unaffiliated information processing apparatus has an unaffiliated information processing apparatus program necessary for accessing the encryption management target file. Program possession judging means for judging whether or not
If the unaffiliated information processing device determines that the unaffiliated information processing device does not possess the unaffiliated information processing device program, the program possession determining means installs the unaffiliated information processing device program into the unaffiliated information processing device. Installation means to
When it is determined that the unaffiliated information processing apparatus possesses the unaffiliated information processing apparatus program by the program possession determining means, or the unaffiliated information processing apparatus program is unaffiliated by the installation means Decryption means for decrypting the encryption management target file and deploying it on the storage unit after being installed in the information processing apparatus;
In conjunction with the storage prohibition function obtained by executing the unaffiliated information processing apparatus program in the unaffiliated information processing apparatus, the management target file expanded on the storage unit by the decryption means The management target file by the non-participating information processing device on the temporary storage unit temporarily holding data during data processing in the non-participating information processing device while prohibiting saving in the data storage unit in the information processing device Storage prohibition means to execute access to
When a request to read and store the encryption management target file in the storage unit is received from the belonging information processing apparatus, the belonging information processing apparatus performs the encryption based on the identification information added to the encryption management target file. Identification information determining means for determining whether or not the information processing apparatus is a belonging information processing apparatus that has registered and stored the original file of the computer to be managed, and
When the identification information determination unit determines that the information processing apparatus belongs to the original file, the decryption unit decrypts the encryption management target file and the decryption unit decrypts the decrypted file. A storage control means for storing a management target file in a data storage unit of the information processing apparatus to which the file belongs;
A file management program that causes the processing unit to function.   When the access to the management target file by the unaffiliated information processing apparatus is completed, the encryption unit encrypts the management target file on the temporary storage unit of the unaffiliated information processing apparatus and writes it to the storage unit The file management program according to claim 4, wherein the processing unit is caused to function as described above. An information processing apparatus configured to include at least a processing unit and a storage unit and an output unit that writes or transmits an electronic file held in the storage unit to an external medium;
7. The external medium is communicably connected to the information processing apparatus and includes at least a processing unit and a storage unit, and the file management program according to any one of claims 4 to 6 is installed. A portable terminal device,
The processing unit of the information processing apparatus
Management target file determination means for determining whether an electronic file written / transmitted to the external medium by the output unit corresponds to the management target file;
Portable terminal device determining means for determining whether or not the external medium is a portable terminal device in which the file management program is installed when the managed file determination unit determines that the file is a management target file; and
When the portable terminal device determining means determines that the external medium is a portable terminal device installed with the file management program, the output unit permits writing / transmission of the management target file to the external medium. On the other hand, when the portable terminal device determination means determines that the external medium is not a portable terminal device in which the file management program is installed, the output unit writes / transmits the management target file to the external medium. Permission or prohibition means,
A file management system characterized by functioning as

Images