JP4303697B2 - Information processing apparatus and internal information protection method - Google Patents

Description

  The present invention relates to a portable information processing apparatus and a method for protecting internal information. In particular, even when the information processing apparatus itself is lost, stolen, etc., personal information stored in the information processing apparatus is stored. The present invention relates to an information processing apparatus capable of preventing leakage of internal information and a method for protecting internal information.

  Information processing devices such as cellular phones, PDAs, and portable PCs in recent years have been improved in functionality and are equipped not only with telephone and mail functions but also with functions as electronic money. Such personal information is held. All of the information stored in the information processing apparatus is confidential information such as personal information and should be protected from a third party other than the user. For example, if an information processing device such as a cellular phone is in the hands of a malicious third party other than the user due to loss, theft, etc., there is a risk that personal information held inside the device will be stolen and misused There is.

For example, a technique described in Patent Document 1 is known as a conventional technique that can protect information such as personal information held inside a mobile phone when it is lost or stolen. With this fingerprint authentication function, internal information is not leaked to third parties, and when a mobile phone is lost or stolen, the mobile phone is accessed from an external device via a communication line, and protection processing is performed. In response to an instruction to execute protection processing, information such as personal information held internally is transmitted to a predetermined destination, and information such as personal information held internally is also stored. It is to erase.
JP 2004-229240 A (paragraphs “0007” to “0021”, FIGS. 7 to 12)

  The above-described conventional technology has a problem that the third party other than the user can view the internal information when the setting of the fingerprint authentication function is canceled or not set. In addition, if the mobile phone is lost or stolen, the mobile phone is still in the communicable area even if the personal information is deleted from the external device via the communication line after being sent to the specified destination. Is a premise, and there is a problem that it is not an effective means in places where radio waves do not reach such as underground.

  An object of the present invention is to protect information held internally from a malicious third party other than the user when an information processing device such as a mobile phone, a PDA, or a portable PC is lost or stolen. An object of the present invention is to provide an information processing apparatus capable of safely and easily managing information and a method for protecting internal information.

According to the present invention, the object of the present invention is to provide a portable information processing apparatus configured to have an information storage function and an information protection function that require protection. The information protection function , comprising: receiving means for receiving a signal for identifying; and data erasing means for erasing data held therein when the receiving means cannot receive the signal for identifying the user. When the signal is not received and a signal for identifying the user cannot be received and an operation is performed on the information processing apparatus, the data erasing means erases the data held inside. Is done.

Further, the object is to provide a method for protecting internal information in a portable information processing apparatus configured to have an information storage function that requires protection and an information protection function, and the information protection function includes the information processing apparatus. When it is no longer possible to receive a signal for identifying the user, the data for erasing the data stored therein is erased, and the signal for identifying the user cannot be received in a state where the information protection function is released. In addition, this is achieved by erasing data held inside when an operation is performed on the information processing apparatus .

  According to the present invention, it is possible to protect the internal information recorded in the information processing apparatus from unauthorized users other than the user and ensure the safety of the internal information.

  Embodiments of an information processing apparatus and an internal information protection method according to the present invention will be described below in detail with reference to the drawings. In the embodiment of the present invention described below, a cellular phone is cited as the information processing apparatus, but the present invention can also be applied to a PDA, a portable PC, and the like.

  FIG. 1 is a block diagram showing the configuration of a mobile phone used in the first and second embodiments of the present invention. In FIG. 1, 100 is an authentication unit, 110 is an operation unit, 120 is a storage unit, 130 is a display unit, 140 is a timer unit, 150 is a transmission unit, 160 is a reception unit, 170 is an encryption processing unit, and 180 is a decryption unit. A processing unit, 190 is an antenna, 200 is a control unit, and 300 is a mobile phone.

  In the first embodiment of the present invention described below, when a mobile phone is separated from the user due to loss, theft, etc., the mobile phone voluntarily erases data for personal information protection, This prevents the third party from browsing and misusing the internal information even when the mobile phone is in the hands of a third party other than the user.

  The mobile phone 300 used in each embodiment of the present invention stores an antenna 190, a transmission unit 150 that transmits data, a reception unit 160 that receives data and receives a user identification signal, and stores various types of information. Storage unit 120, authentication unit 100 that performs authentication such as a password, operation unit 110 that receives a user input operation, encryption processing unit 170 that performs transmission data encryption processing, and decryption that performs reception data decryption processing A processing unit 180, a display unit 130 for displaying predetermined information, a timer unit 140 for processing time, and a control unit 200 for controlling and controlling each of the functional units 100 to 180 described above. ing. In addition, personal information that is internal information to be protected includes, for example, the user's name, phone number, e-mail address, schedule and outgoing mail, and other information owned by the user such as address book and received mail Including both information.

  FIG. 2 is a diagram illustrating a usage pattern by the user of the mobile phone 300 according to the first embodiment of the present invention. In FIG. 2, 310 is a small transmitter, and 320 is a user.

  In the first embodiment of the present invention, a user always has a small transmitter 310, and the mobile phone 300 periodically receives a signal specifying a user of the small transmitter 310 owned by the user. Alternatively, the mobile phone 300 is provided with a receiving function such as the biocurrent pattern of the user 320 itself, and the mobile phone 300 receives the biocurrent pattern of the user 320 itself, thereby confirming the presence of the user. . In the first embodiment of the present invention, when this signal cannot be received, the mobile phone 300 erases the information stored in the internal storage unit 120 itself.

  FIG. 3 is a flowchart for explaining the processing operation of the mobile phone 300 according to the first embodiment of the present invention. Next, this will be described.

(1) The mobile phone 300 receives signals from the small transmitter 310 owned by the user at regular time intervals via the antenna 190 and the receiving unit 160, or a signal such as a biocurrent pattern of the user 320 himself / herself. A signal reception process is performed to determine whether or not a signal has been received, and the presence of the user is confirmed (steps S4100 and S4200).

(2) While receiving the signal, the mobile phone 300 determines that the user is present, and continues the processes of steps S4100 and S4200 and follows the instruction from the operation unit 110 by the user. Execute the process.

(3) If the signal could not be received in the determination in step S4200, it is determined whether or not the number of times the signal could not be received is smaller than a predetermined number of reception retries N3, and if N3 has not been reached. Then, the number of signal reception retries is counted up, and the process returns to the process from step S4100 to repeat the process (steps S4300 and S4400).

(4) If it is determined in step S4300 that the number of times the signal has not been received exceeds the predetermined number of reception retries N3, that is, if the signal cannot be received more than N3 times, the mobile phone 300 will It is determined that the user cannot be recognized, and data to be deleted is extracted from the internal information stored in the storage unit 120, and information such as personal information stored in the storage unit 120 of the mobile phone 300 is extracted. Is deleted, and the process ends (steps S4500 and S4600).

  According to the above-described processing in the first embodiment of the present invention, when the user leaves the mobile phone 300, that is, when the mobile phone 300 is lost or stolen, the mobile phone 300 Therefore, even if the mobile phone 300 is lost or stolen, it is possible to prevent the information held inside from being leaked to a third party.

  In general, the user may have to consciously move away from the mobile phone 300, and the personal information protection setting can be canceled, but the first embodiment of the present invention is in such a case. In addition, the information stored inside can be protected.

  FIG. 4 is a flowchart for explaining the processing operation of the mobile phone 300 according to the first embodiment of the present invention when the user leaves the mobile phone 300 after canceling the personal information protection setting. explain.

(1) The user cancels the personal information protection setting using the operation unit 110. This setting cancellation process is effective only for the operation of the user who has been authenticated by the authentication unit 110. As described above, it is assumed that the user leaves the mobile phone 300 with the personal information protection setting canceled (step S4700).

(2) The mobile phone 300 receives the signal from the small transmitter 310 owned by the user via the antenna 190 and the receiving unit 160, or the user himself 320, as in the case of the flow shown in FIG. A signal reception process for receiving a signal such as a bioelectric current pattern is performed to determine whether or not the signal has been received, and the presence of the user is confirmed (steps S4800 and S4900).

(3) While the signal can be received in the determination in step S4900, the mobile phone 300 determines that the user is still present in the vicinity and performs processing in accordance with the instruction from the operation unit 110 by the user. Is executed (step S5000).

(4) After that, it is determined whether or not the operation is continuously performed. If the operation is continuously performed, the process returns to the process from step 4900 and the signal is received while the signal is received. The operation of the telephone 300 is continued (step S5100).

(5) If it is determined in step S5100 that the operation has not been continued, the mobile phone 300 automatically sets personal information protection to apply the personal information protection setting, and the processing here Is finished (step S5500).

(6) If the signal cannot be received in step S4900, the mobile phone 300 determines that the user has left. When the mobile phone 300 is operated in this state, the mobile phone 300 determines that a third party other than the user is attempting the operation (step S5200).

(7) Then, the mobile phone 300 extracts the data to be erased from the internal information stored in the storage unit 120, and stores the personal information and the like stored in the storage unit 120 of the mobile phone 300. The information is deleted, the personal information protection setting is automatically applied, and the process here is terminated (steps S5300 to S5500).

  According to the above-described processing in the first embodiment of the present invention, even when the user releases the personal information protection setting and leaves the mobile phone 300, the operation of the mobile phone 300 by a third party is detected. Then, since the mobile phone 300 erases the internal information by itself, it can be prevented that the information held inside is leaked to a third party.

  In the first embodiment of the present invention described above, the mobile phone 300 protects information by erasing internal information by itself. However, by erasing internal information, the user himself can That information will be lost. The present invention can protect the information by erasing the internal information and prevent the user from losing the information. Next, an example of such a case will be described. explain.

  FIG. 5 is a diagram for explaining a usage pattern by the user of the mobile phone 300 according to the second embodiment of the present invention. In FIG. 5, 330 is a mobile phone company center, 400 is a data processing device, and 410 is a storage device.

  In the second embodiment of the present invention, information in a mobile phone that is registered daily is stored and managed in the mobile phone company center 330. Information registration in the mobile phone company center 330 is performed in real time. Two types of batch update are possible. The mobile phone company center 330 is provided with a data processing device 400 that performs decryption processing and a storage device 410 that stores information from the mobile phone 300.

  The data storage destination is not limited to the mobile phone company center 330 but may be an external device such as a device managed by a third party or a device installed in another place managed by the user. .

  FIG. 6 is a flowchart for explaining the processing operation of the mobile phone 300 according to the second embodiment of the present invention. Next, this will be explained. The example of processing here is an example in the case of registering information in the mobile phone company center 330 in real time.

(1) When information such as data belonging to personal information is input to the mobile phone 300, the mobile phone 300 determines whether or not the registration of the input information has been confirmed. Is accepted (steps S1000 and S1100).

(2) If the registration of the input information is confirmed in step S1100, the input information is stored in the storage unit 120 in the main body of the mobile phone 300, and whether or not automatic transfer to the center 330 is set. If it is determined that automatic transfer is not set, the process returns to the process from step S1000 to repeat the operation from the process of accepting input of information (steps S1200 and S1300).

(3) If automatic transfer to the center 330 is set in the determination in step S1300, the data to be transferred is extracted, and the encryption processing unit 170 performs encryption processing on the data to be transferred and generated. Data is temporarily stored in the storage unit 120 (steps S1400 to S1600).

(4) Thereafter, a transmission process for transmitting the encrypted data to the center 330 is performed, and it is determined whether the transmission is successful or unsuccessful. If the transmission is successful, the communication session is disconnected. Then, the process here ends (steps S1700, S2000).

(5) If the transmission to the center 330 has failed in the determination in step S1700, it is determined whether or not the number of failed transmissions is smaller than the predetermined number of retries N1, and if N1 has not been exceeded, The number of signal transmission retries is counted up, and the process returns to the process from step S1700 to repeat the process (steps S1900 and S1800).

(6) If it is determined in step S1900 that the number of times that the signal could not be transmitted has exceeded the predetermined number of transmission retries N1, that is, if the signal has not been transmitted for the number of times exceeding N1, the processing is suspended. Then, the timer unit 140 measures the time, and after a certain time has elapsed, the transfer process is performed again, and the process here ends.

  In the above description, the encrypted data is discarded from the mobile phone 300 when the transfer to the mobile phone company center 330 is completed.

  FIG. 7 is a flowchart for explaining another example of the processing operation of the mobile phone 300 in the second embodiment of the present invention. Next, this will be explained. The example of processing here is an example in the case of registering information in the mobile phone company center 330 collectively.

(1) The mobile phone 300 receives an instruction from the user to cancel the automatic file transfer setting (setting to execute the flow in FIG. 6), specifies the user by the authentication unit 100, and then sets the automatic file transfer by the operation unit 110. Is released (step S2100).

(2) When information such as data belonging to personal information is input to the mobile phone 300, the mobile phone 300 determines whether or not registration of the input information has been determined. Is received (steps S2200, S2300).

(3) If the registration of the input information is determined in the determination in step S2300, the automatic file transfer setting is cancelled. Therefore, when the registration is determined, the input information is stored in the storage unit 120 in the main body of the mobile phone 300. (Step S2400).

(4) Next, it is determined whether or not the registration of the input information is continuously performed. If the registration of the input information is continuously performed, the process returns to step S2200 and the process is repeated. While the registration of the input information is continuously performed, the file is not transferred from the mobile phone 300 (step S2500).

(5) If it is determined in step S2500 that the input information is not continuously registered, the data to be transferred is extracted, and the encryption processing unit 170 performs encryption processing on the transfer target data to generate The stored data is temporarily stored in the storage unit 120 (steps S2600 to S2800).

(6) Thereafter, a transmission process for transmitting the encrypted data to the center 330 is performed, and it is determined whether the transmission is successful or unsuccessful. If the transmission is successful, the communication session is disconnected. At the same time, the automatic file transfer setting is performed, and the processing here ends (steps S2900, S3100, S3300).

(7) If the transmission to the center 330 has failed in the determination in step S2900, it is determined whether or not the number of transmission failures is smaller than a predetermined number of retries N2, and if N2 has not been exceeded, The number of signal transmission retries is counted up, and the process returns to the process from step S2900 to repeat the process (steps S3200 and S3000).

(8) If it is determined in step S3200 that the number of times the signal could not be transmitted exceeds a predetermined number of transmission retries N2, that is, if the signal could not be transmitted more than N times, the processing is suspended. Then, the timer unit 140 measures the time, and after a certain time has elapsed, the transfer process is performed again, and the process here ends.

  In the above description, the encrypted data is discarded from the mobile phone 300 when the transfer to the mobile phone company center 330 is completed.

  FIG. 8 is a flowchart for explaining the processing operation in which the mobile phone company center 330 receives data from the mobile phone 300 according to the second embodiment of the present invention. Next, this will be described. The processing described here is processing in which the mobile phone company center 330 receives the data transmitted from the mobile phone 300 by the processing of FIGS.

(1) The cellular phone company center 330 receives the data transmitted from the cellular phone 300, and data consistency such as whether or not the cellular phone 300 that transmitted the data is a pre-registered cellular phone. If the data consistency is not checked, nothing is performed and the data reception process is continued (steps S3400 and S3500).

(2) If the data consistency is confirmed in the data consistency check in step 3500, the encrypted data transmitted from the mobile phone 300 is stored in a temporary storage area in the center, and then this data is stored. The decoding process is performed (steps S3600 and S3700).

(3) The success or failure of the decryption process is determined. If the decryption fails and the data has been corrupted, the process returns to step S3400 to receive the data again and repeat the process (step S3800). ).

(4) If it is determined in step 3800 that the decryption is successful and the data is not broken, the data is combined with the existing personal information stored in the in-center storage device 410 and the data is used as information such as new personal information. In the storage device 410 (steps S3900 and S4000).

  The process of storing the data of the mobile phone 300 described in the flow shown in FIGS. 6 to 8 in the mobile phone company center 330 is performed only when the mobile phone 300 exists in the service area of the mobile phone network. When the telephone 300 does not exist within the service area of the mobile phone network, this is performed when the mobile phone 300 enters the service area of the mobile phone network.

  FIG. 9 illustrates a processing operation in which the mobile phone 300 requests data from the mobile phone company center 330 and receives data transmitted from the mobile phone company center 330 in the second embodiment of the present invention. This will be described next. The process described here is a process in which the mobile phone 300 receives the data stored in the mobile phone company center 330 by the process of FIG. 8 and recovers the erased data in the mobile phone 300. Note that the process here is an operation process that can be performed only by the user who is the owner of the mobile phone. Therefore, a user can receive a signal for identifying the user and is registered in the mobile phone company center. Authentication by ID / password is essential.

(1) A signal reception process for identifying a signal receiving user is performed, it is determined whether or not the above-described signal is received, and if the signal is not received, the receiving user is identified. The signal reception process is continued (steps S5600 and S5700).

(2) If it is determined in step S5700 that the signal has been received, the user ID and password input by the user from the operation unit 110 of the mobile phone 300 match those managed by the mobile phone company center 330. Whether or not the user is authenticated (step S5800).

(3) In the authentication process in step S5800, if there is an input error in the user ID and password and the user authentication fails, it is determined whether or not the input error in the user ID and password is smaller than a predetermined N4. If N4 has not been exceeded, the number of times of user authentication is counted up, and the processing from step S5600 is repeated again. If the number of user authentication times has exceeded N4, the processing here ends (step S5900). .

(4) If the user authentication is successful in step S5800, the information transmitted from the mobile phone company center 330 is received by the receiving unit 160 of the mobile phone 300 and stored in the storage unit 120 (step S6000). ).

(5) Next, the cellular phone 300 decrypts the data received from the cellular phone company center 330 and stored in the storage unit 120 by the decryption processing unit 180, stores the data in the storage unit 120 again, and the processing here Is finished (step S6100).

  FIG. 10 is a flowchart for explaining a processing operation in which the mobile phone company center 330 transmits data in response to a data request from the mobile phone 300 to the mobile phone company center 330 in the second embodiment of the present invention. Next, this will be described.

(1) The mobile phone company center 330 manages the user ID and password at the mobile phone company center 330 when the user ID and password input by the operation unit 110 of the mobile phone 300 reach the mobile phone company center. The user authentication process is performed depending on whether or not it matches (step S6200).

(2) In the authentication process in step S6200, if there is an input error in the user ID and password and the user authentication fails, it is determined whether or not the user ID and password input error is smaller than a predetermined N5 times. If the number of times of user authentication has not exceeded N5 times, the number of times of user authentication is counted up, and the authentication processing from step S6200 is repeated again. If the number of times of user authentication has exceeded N5 times, the processing here ends. Step S6300).

(3) If the user authentication is successful in step S5800, the mobile phone company center 330 performs encryption processing on the information to be transmitted to the mobile phone 300 that has made the request, and sends data to the mobile phone 300. Is transferred (steps S6400 and S6500).

  In the process in which the mobile phone 300 described with reference to the flow shown in FIGS. 9 and 10 requests data from the mobile phone company center 330 and the mobile phone 300 receives the data, the user of the mobile phone 300 receives the data from the mobile phone company center. Instruct to send all the data stored in 330 or to send some of the data stored in the mobile phone company center 330 that is necessary at that time To receive data from the mobile phone company center 330.

  Each processing in the above-described embodiment of the present invention can be configured as a processing program and executed by a computer. The processing program is a recording medium such as an HD, DAT, FD, MO, DVD-ROM, or CD-ROM. Can be stored and provided.

  According to the above-described embodiment of the present invention, since the personal information in the mobile phone is erased, even if it is in the hands of a third party other than the user, the confidential information held inside is leaked. Can be prevented.

  Further, according to the embodiment of the present invention, the backup information of the internal information is always stored in the center storage device, so that the information can be recovered even when the mobile phone is lost or stolen. In addition, since it is not necessary to always have backup media, the backup media can be prevented from being stolen.

It is a block diagram which shows the structure of the mobile telephone used by the 1st, 2nd embodiment of this invention. It is a figure explaining the usage type by the user of the mobile telephone in the 1st Embodiment of this invention. 3 is a flowchart illustrating a processing operation of the mobile phone according to the first embodiment of the present invention. 6 is a flowchart for explaining processing operations of the mobile phone in the first embodiment of the present invention when the user releases the personal information protection setting and leaves the mobile phone. It is a figure explaining the usage type by the user of the mobile telephone in the 2nd Embodiment of this invention. It is a flowchart explaining the processing operation of the mobile telephone in the 2nd Embodiment of this invention. It is a flowchart explaining the other example of the processing operation of the mobile telephone in the 2nd Embodiment of this invention. It is a flowchart explaining the processing operation | movement in which the mobile telephone company center in the 2nd Embodiment of this invention receives the data from a mobile telephone. 10 is a flowchart illustrating a processing operation in which a mobile phone requests data from a mobile phone company center and receives data transmitted from the mobile phone company center in the second embodiment of the present invention. 10 is a flowchart for explaining a processing operation in which a mobile phone company center transmits data in response to a data request from a mobile phone to the mobile phone company center in the second embodiment of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Authentication part 110 Operation part 120 Storage part 130 Display part 140 Timer part 150 Transmission part 160 Reception part 170 Encryption processing part 180 Decryption processing part 190 Antenna 200 Control part 300 Mobile telephone 310 Small transmitter 320 User 330 Mobile phone company center 400 Data processing device 410 Storage device

Claims (5)

In a portable information processing apparatus configured to have an information storage function and an information protection function that require protection, the information protection function includes receiving means for receiving a signal for identifying a user who possesses the information processing apparatus. And the data erasing means for erasing the data stored therein when the receiving means cannot receive the signal for identifying the user, and the user is in a state in which the protection function of the information is released. An information processing apparatus characterized in that the data erasing means erases data held therein when it becomes impossible to receive a signal for identifying the data and an operation is performed on the information processing apparatus.   The information processing apparatus according to claim 1, wherein the signal for identifying the user is a signal for identifying the user from a transmitter owned by the user or a signal of a bioelectric current pattern of the user. A communication means for communicating with an external device via a network; data stored therein is transmitted to the external device by the communication means to be stored and held in the external device; and held in the external device. The information processing apparatus according to claim 1, wherein the data stored therein is fetched from an external apparatus. 4. The transmission of data stored inside by the communication means to an external device is performed automatically in real time when processing content is determined or collectively in accordance with a user instruction. The information processing apparatus described. In a method for protecting internal information in a portable information processing apparatus configured to have an information storage function that requires protection and an information protection function, the information protection function is a signal that identifies a user who possesses the information processing apparatus. When it becomes impossible to receive the data, the data for erasing the data held inside is erased, and the signal for identifying the user cannot be received in a state where the protection function of the information is released, and the information processing apparatus A method for protecting internal information, comprising: erasing data held therein when an operation is performed on .

Images