JP4493677B2 - Terminal data erasure management method and program. - Google Patents

Description

  The present invention relates to a method for managing data erasure processing in a computer.

  When a company purchases a new computer and disposes of the old computer through a disposal company or returns the leased computer to the leasing company, the company stores the old computer in the hard disk device of the old computer or the like. In some cases, delivery to the disposer or the leasing company may be performed while the data is stored. In such a case, the computer itself, the hard disk device, etc. are put on the secondhand market through a disposal company, or the leasing company reuses the computer as a leased product and leases it to another company. There is a risk that confidential information of the company will be leaked from the company data stored inside.

For this reason, before the computer is delivered to the disposal company or the leasing company, confidential data is erased by the company, or the computer collected by the leasing company is initialized before reuse.
In this case, in the normal data erasing method, there are cases where data can be restored from the residual magnetism in the hard disk device, and various methods for completely erasing the data have been considered. Here, as a method of completely erasing data, a plurality of methods such as a method of overwriting all data with "zero" and a method of overwriting a random number multiple times have been proposed. It is possible to prevent leakage of confidential information due to data restoration by a third party.
A related prior art is disclosed in Patent Document 1 below.
JP-A-10-177525

  However, although it is possible to make the data unrecoverable by the data erasing method as described above, for example, when the data erasure processing is entrusted to the leasing company, each company performs the data erasure processing at the leasing company. It was not possible to actually confirm whether or not. In addition, when deleting data before delivery to a disposal company or leasing company within a company, it is possible to confirm whether or not the data has been deleted by an in-company administrator or the like. In order to confirm all terminals, a great deal of time and labor are required, and in practice, such confirmation work is often not performed.

  Therefore, due to carelessness of the person in charge of erasure processing within the company, data may not be erased for each terminal, but it may be handed over to a disposal contractor or a leasing company. If processing is not performed, computers with company data may be distributed in the secondhand market or leased to other companies, and confidential information of the company that is the original owner may be obtained from the terminal. There was a risk of leakage.

  SUMMARY OF THE INVENTION The present invention is to solve the above problems, and in a data erasure processing management of a computer, a data erasure management method capable of easily and surely confirming whether or not data erasure processing has actually been performed. It is to provide.

A data erasure management method according to the present invention is a data erasure management method for performing erasure processing of data in a storage device of a terminal to be managed, and managing the execution result, the managed terminal having completed data erasure processing From the first step of issuing erasure certification information that can be read by the management terminal, the validity of the issued erasure certification information is determined by the management terminal, and the erasure processing result of the managed terminal is determined according to the determination result And a second step of managing.
In addition, in the first step, erasure start information including authentication data generated in the management target terminal is transmitted from the management target terminal to the management terminal before the start of the data erasure process, A step of issuing the first random data included in the erasure certification information, and in the second step, authentication data generated based on the first random data, and from the management target terminal It is determined whether or not the transmitted authentication data matches, and when the authentication data matches, it is determined that the erasure certification information is valid.
A step of transmitting erasure reservation information including second random data generated in the management terminal before receiving the erasure start information to a management target terminal performing data erasure processing from the management terminal; And a step of generating the authentication data from the first random data and the second random data before transmitting the erasure start information in the management target terminal that has received the erasure reservation information. It is characterized by.
Further, the authentication data is obtained by encrypting the second random data based on the first random data.
In the management target terminal that has been subjected to the data erasure process, at least before the second step, a post-process for writing the data erasure information in the storage device is performed.
Further, in the management target terminal that has been subjected to the data erasing process, at least before the second step, post-processing for setting data write prohibition to the storage device is performed.
The erasure reservation information includes information related to designation of the post-processing method, and the post-processing is performed based on designation of the post-processing method included in the erasure reservation information.
Further, the erasure certification information includes information related to designation of a post-processing method included in the reservation information, and after the post-processing, causing the managed terminal to read the erasure certification information; And determining whether or not the specified post-processing is being performed on the managed terminal based on the specification of the post-processing method included in the erasure certification information.

Further, the data erasure program of the present invention is an erasure program for executing data erasure processing of a storage device in a management target terminal managed by a management terminal. This includes processing for issuing erasure certification information that can be read by the management terminal.
In addition, before starting the data erasure process, a process for generating authentication data, a process for transmitting erasure start information including the generated authentication data to the management terminal, and a first for generating the authentication data And issuing the random data included in the erasure certification information.
In addition, the authentication data is generated by the first random data and the second random data included in the erasure reservation information.
Further, it further includes a process of writing erased information in the storage device after completion of the data erasure process.
Further, it further includes a process of setting data write prohibition to the storage device after completion of the data erasing process.
The post-processing is performed based on designation of the management terminal.
The management program of the present invention is a program for managing the data erasure process in the storage device of the management target terminal in the management terminal, and starts the erasure process from the management terminal to the management target terminal. To determine the validity of the erasure certification information issued from the managed terminal that has completed the data erasure process, and manage the erasure process result of the managed terminal according to the determination result It is characterized by having processing to perform.

  According to the present invention, since the erasure certification information that can be read by the management terminal is issued, whether or not the data erasure processing by the data erasure execution program is actually performed in each management target terminal in the management terminal is determined. It can be easily managed.

Hereinafter, an embodiment of the present invention will be specifically described with reference to the drawings.
In this embodiment, as shown in FIG. 1, a management terminal 1 having a management program 10, a management target terminal 2 having a hard disk 21 as a storage device to be erased, and the management target terminal 2 includes an external storage medium 3 such as a floppy disk (registered trademark) or a CD-ROM in which an erase preparation program 30A, an erase execution program 30B, and an erase state confirmation program 30C are stored. The management terminal 1 and the management target terminal 2 are connected by a communication line 5 such as a LAN.

According to the present invention, in such a configuration, the erasure certification information that can be read by the management terminal 1 after executing the erasure execution program 30B in the management target terminal 2 and erasing the data in the hard disk 21. Is issued from the management target terminal 2 by the erasure execution program 30B, and the data erasure management is performed by the management program 10.
Since the data erasing process here is to erase all data including the OS in the hard disk 21, the OS for operating the erasing execution program 30B is stored in the external storage medium 3. It is necessary to keep it. Further, when executing the erasing execution program 30B, it is necessary to restart the computer by reading the external storage medium 3, so that the external storage medium 3 is preliminarily stored before the data erasing process described later. It is necessary to set the BIOS so that the drive corresponding to is read first.

The management program 10 provided in the management terminal 1 includes an erasure reservation process 11, an erasure start acceptance process 12, and an erasure completion acceptance process 13.
The management terminal 1 is provided with a database 14 for storing information related to data erasure processing such as information generated by the management program 10.

The erasure preparation program 30A stored in the external storage medium 3 prepares for processing by the erasure execution program 30B in the managed terminal 2, and has an erasure reservation acceptance process 31 and an erasure start process 32. is doing.
The erasure execution program 30B stored in the external storage medium 3 is for erasing data on the hard disk 21 in the managed terminal 2, and has a data erasure process 33 and an erasure completion process 34. .
The erasure state confirmation program 30C stored in the external storage medium 3 has an erasure state confirmation process 35 for confirming the state of the data erasure process in the managed terminal 2 on which the data erasure process has been executed.

Next, the outline of the data erasure management processing of the management target terminal by this system will be described with reference to the flowchart of FIG.
First, erasure reservation processing is performed in the management terminal 1, and the erasure reservation information is transmitted to the selected management target terminal 2 (step S201). As shown in FIG. 3, the erasure reservation information includes a client ID 301, a server random value 302, and an erasure confirmation process ID 303. In this case, the erasure confirmation processing ID 303 is, for example, “0” when the processing is not performed after the data erasure, “1” when the erased mark is written in the storage device after the data erasure, and after the data erasure. “2” when performing a write prohibition setting such as a BIOS setting change in which data cannot be written to the storage device, and “3” when performing both the erased mark writing and the write prohibition setting. Is used. Therefore, in the case of FIG. 3, both the writing of the erased mark and the write prohibition setting are designated as the processing after the data erasure.
In the managed terminal 2 that has received this erasure reservation information, the erasure reservation acceptance process is performed, and after the authentication data is generated, the erasure as the reservation acceptance confirmation information including the authentication data is sent to the management terminal 1. Start information is transmitted (step S202). As shown in FIG. 4, the erasure start information includes a client ID 401, a server random value 402, an authentication data length 403, and authentication data 404.
In the management terminal 1 that has received this erasure start information, an erasure start acceptance process is performed, and it is determined from the erasure start information whether or not it has been transmitted from a terminal that has been reserved for erasure. On the other hand, the erasure start acceptance information as the determination result is transmitted (step S203). As shown in FIG. 5, the erasure start information includes a client ID 501 and an erasure start acceptance result 502.

In the managed terminal 2 that has received the erasure start acceptance information, the erasure start process is performed based on the determination result included in the erasure start acceptance information (step S204), and the erasure process of data in the hard disk 21 is performed. After that (step S205), an erasure completion process is performed, and erasure certification information is issued to the management terminal 1 (step S206). As shown in FIG. 6, the erasure certification information includes a client ID 601, a client random value 602, an execution date and time 603, and an erasure confirmation process ID 604.
In the management terminal 1 that has received this erasure certification information, an erasure completion acceptance process is performed. By checking the contents of the erasure certification information, whether or not the data erasure process has been normally performed in the managed terminal 2 is determined. Will be managed.

  The database 14 provided in the management terminal 1 stores information based on the erasure reservation information, erasure start information, erasure start acceptance information, erasure certification information, etc., for example, as shown in FIG. A client ID 701, a processing state 702, a server random value 703, a client random value 704, an erase confirmation processing ID 705, an authentication data length 706, authentication data 707, and an erase execution date and time 708 are included. Here, the processing state 702 indicates the processing state in the management target terminal 2, for example, “0” when not processed, “1” when reserved for deletion, and when deletion processing is started. Is indicated by “2”, and when the erasing process is completed, it is indicated by “3”.

Details of each process in the data erasure management method as described above will be described with reference to FIGS.
FIG. 8 is a flowchart showing the erasure reservation process (step S201 in FIG. 2) in the management terminal 1.
As shown in this figure, in the erasure reservation process, the management program 10 is activated in the management terminal 1 (step S801), and the administrator selects a terminal for erasing data from the management target terminals 2 set in advance. When the processing method after data erasure is designated (step S802), a server random value 302 is generated for the management target terminal 2 (step S803). Here, the designation of the processing method is indicated by the erasure confirmation processing ID 303. Further, the server random value 302 is generated for each managed terminal 2.

  Thereafter, the deletion reservation information including the client ID 301 indicating the selected management target terminal 2, the generated server random value 302, and the deletion confirmation processing ID is transmitted to the selected management target terminal 2. (Step S804). The information of the client ID 301, the server random value 302, and the discard confirmation processing ID 303 is stored in the database 14 of the management terminal 1, and the processing state is set to “1” (reserved) (step S805). End.

FIG. 9 is a flowchart showing the erasure reservation acceptance process (step S202 in FIG. 2) in the managed terminal 2 that has received the erasure reservation information.
As shown in this figure, in the erasure reservation accepting process, after the erasure preparation program 30A is activated in the management target terminal 2 (step S901), the erasure reservation information is received from the management terminal 1 (step S902). A client random value is generated (step S903). Thereafter, the server random value 302 included in the erasure reservation information is encrypted based on the generated client random value, and authentication data 404 is generated (step S904).
This encryption may be performed by a well-known method such as hashing, but a processing method is used such that the same authentication data 404 cannot be generated unless the client random value is known. The client random value is preferably generated every time the erasure preparation program 30A is executed or every time erasure reservation information is received from the management terminal 1.
The erase start information including the authentication data 404 and the like generated in this way is transmitted to the management terminal 1 (step S905).
Thereafter, the management target terminal 2 enters a standby state for starting the data erasing process (step S905), and the process ends.

FIG. 10 is a flowchart showing an erase start acceptance process (step S203 in FIG. 2) in the management terminal 1 that has received the erase start information.
As shown in this figure, in the erasure start acceptance process, when erasure start information is received from the management target terminal 2 (step S1001), the database of the management terminal 1 for the client ID 401 included in the erasure start information is shown. 14 is performed (step S1002). As a result, when the corresponding client ID 701 exists (step S1003), the server random value 703 corresponding to the client ID 701 is searched, and the server random value 703 and the server random value 402 included in the erasure start information are searched. Are compared (step S1004). If the two server random values match as a result of the comparison (step S1005), the database 14 stores the authentication data 404 and the authentication data length 403 included in the erasure start information, and the processing state 702 is “2” (deletion start) is set (step S1006), and the deletion start reception information 502 with the deletion start reception result 502 set to “TRUE” is transmitted to the management target terminal 2 (step S1007). Become. If the client ID 401 included in the erasure start information does not exist in the database 14 (step S1003), or if the result of comparison of the server random values does not match (step S1005), the erasure start acceptance information is The erasure start acceptance result 502 set to “FALSE” is transmitted to the management target terminal 2 (step S1008), and the process ends.

FIG. 11 is a flowchart showing from the deletion start process to the deletion completion process (steps S204 to S206 in FIG. 2) in the managed terminal 2 that has received the deletion start acceptance information.
As shown in this figure, first, as erasure start processing, when erasure start acceptance information is received from the management terminal 1 (step S1101), the erasure start acceptance result 502 included in the erasure start acceptance information is referred to. If the result is “TRUE” (step S1102), a data erasure process is performed (step S1103).
As an erasure processing method in this case, for example, a known method such as a method of overwriting a random number a plurality of times or a method of overwriting “0” on all information may be used. In this case, the erasure execution program 30B is stored in the external storage medium 3, and the erasure execution program 30B is directly executed from the external storage medium 3 in each managed terminal 2, thereby causing the OS and the erasure preparation program 30A to be executed. All data in the hard disk 21 can be erased.

Thereafter, as the erasure completion process, first, erasure certification information including the client ID 601, client random value 602, erasure process execution date and time 603, and erasure confirmation process ID 604 is issued to the management terminal 1 ( Step S1104).
Next, the erasure confirmation process ID 303 included in the erasure reservation information is referred to. When the erasure confirmation process ID is “1” or “3”, “TRUE” is set (step S1105), and the erased mark is stored in the hard disk 21. Is written (step S1106).

On the other hand, when the erasure confirmation process ID 303 is “0” or “2”, “FALSE” is set (step S1105), and the erased mark is not written. Thereafter, the erasure confirmation process ID 303 is further referred to. When the erasure confirmation process ID 303 is “2” or “3”, “TRUE” is set (step S1107), and the write prohibition setting for the hard disk 21 of the management target terminal 2 is set. Is performed (step S1108), and the process ends. On the other hand, when the erasure confirmation process ID 303 is “0” or “1”, “FALSE” is set (step S1107), and the process ends without changing the setting of the management target terminal 2.
After the erasure completion processing is completed, the erasure execution program 30B is not left in the management target terminal 2 by removing the external storage medium 3 from the management target terminal 2.
In FIG. 11, in the erasure completion process, the erased mark is written and the write prohibition is set after the erase certification information is issued, but the erase certification information is issued after the erased mark is written. It is good as well.

FIG. 12 is a flowchart showing the deletion completion acceptance process (step S207 in FIG. 2) in the management terminal 1.
As shown in this figure, in the erasure completion acceptance process, after the management program 10 is started in the management terminal 1 (step S1201), the erasure certification information issued by the management target terminal 2 is read (step S1202). ) A search in the database 14 of the management terminal 1 is performed for the client ID 601 included in the erasure certification information (step S1203). As a result, when the corresponding client ID 701 exists (S1204), the server random value 703 corresponding to the client ID 701 is searched, and the server random value 703 is used as the client random value 602 included in the erasure certification information. Originally encrypted and verification authentication data is generated (step S1205). Note that the encryption in this case is performed by the same method as that used for the encryption in the erasure reservation acceptance process.

Next, the verification authentication data generated here is compared with the authentication data 707 stored in the database 14 (step S1206), and if both authentication data match (step S1207), The processing state 702 in the database 14 is set to “3” (erasure end) (step S1208), and the process ends. On the other hand, as a result of searching for the client ID 601 included in the erasure certification information, if it does not exist in the database 14 of the management terminal 1 (step S1204), or if the two authentication data do not match (step S1207), An error message is displayed (step S1209). When this error message is displayed, it can be determined that the erasure certification information has been illegally generated, and it is inferred that the erasure process has not been performed normally.
In this way, in the erasure acceptance completion process, it is possible to easily manage whether or not the erasure process has actually been performed by confirming the erasure certification information with the management terminal 1.

FIG. 13 is a flowchart showing an erase state confirmation process for the management target terminal 2. This erasure state confirmation process is mainly performed immediately before handing over the managed terminal 2 subjected to the erasure process to a disposal processor or a leasing company, and finally confirms the erasure state and cancels the write prohibition setting. Is to do.
As shown in this figure, in the erase state confirmation process, first, after the erase state confirmation program 30C is started (step S1301), the erase certification information is read (step S1302).

Next, the erasure confirmation process ID 604 included in the erasure certification information is referred to. When the erasure confirmation process ID 604 is “2” or “3”, “TRUE” is set (step S1303), and the management target terminal 2 is set. Is confirmed (step S1304), and if write prohibition is set (step S1305), the write prohibition setting is canceled (step S1306). If the write prohibition is not set, an error message is displayed (step S1307). On the other hand, if the erasure confirmation process ID 604 is “0” or “1”, “FALSE” is set (step S1303), and the setting confirmation of the management target terminal 2 is not performed, and the process proceeds to the next process.
Thereafter, the erasure confirmation process ID 604 is further referred to, and when the erasure confirmation process ID 604 is “1” or “3”, “TRUE” is set (step S1308), and the erased mark in the hard disk 21 of the management target terminal 2 is set. Is detected (step S1309), and if an erased mark is detected (step S1310), the process ends, and if no erased mark is detected (step S1310), an error message is displayed. (Step S1311), the process ends. On the other hand, when the erasure confirmation process ID 604 is “0” or “2”, “FALSE” is set (step S1308), and the process ends without detecting the erased mark. If an erased mark is detected in step S1310, the erased mark may be erased before the end of the process.

  As described above, in the data erasure management method of the present invention, when the data erasure is completed, the erasure certification information that can be read by the management terminal is issued. Such management can be easily performed at the management terminal.

In addition, the management terminal sends a server random value generated every time erasure processing is performed to the management target terminal. The management target terminal encrypts the server random value using the client random value as an encryption key and manages the encryption result as authentication data. Returned to the management terminal and stored in the database 14, and stored in the verification authentication data and database generated based on the client random value transmitted for the first time from the management target terminal to the management terminal after the completion of erasure. Whether the authentication data matches or does not match is verified, and only when the authentication data matches, the erasure certification information is recognized as valid. For this reason, even if the server random value is obtained illegally by eavesdropping, the client random value cannot be eavesdropped unless the erasure process is completed. Therefore, even if the erasure process is not performed, it is no longer possible to issue erasure certification information that includes a client random value, and it is guaranteed that the erasure process has been completed and the communication channel has been wiretapped. Even so, forgery of erasure certification information can be prevented.
Therefore, it is possible to guarantee the certainty of the data erasure processing execution, and it is possible to prevent outside leakage of internal information due to forgetting to delete data by the person in charge or inadequate management. It is possible to prevent damage to the company and the corporate image.

In addition, by writing the erased mark in the hard disk after the data erasure process, it is possible to easily grasp whether or not the erasure process was actually performed by checking the erased mark on each managed terminal. can do.
In addition, by setting data write prohibition after data erasure processing, data is accidentally written to each managed terminal after data erasure processing, and corporate information etc. is intentionally stored in the hard disk after data erasure processing. It is possible to prevent an injustice such as writing a message and handing it over to a processor. Furthermore, it is possible to easily grasp whether or not the erasing process is actually performed by confirming the write prohibition setting.

  In the above embodiment, the erase preparation program 30A, the erase execution program 30B, and the erase state confirmation program 30C are described as being stored in the same external storage medium 3, but each is stored in a separate external storage medium 3. It may be stored.

Further, the erasure preparation program 30A may be installed in the management target terminal 2 in advance as shown in FIG.
As the erasure preparation program 30A in this case, a program distributed and installed by the administrator before the data erasure process in the management target terminal 2 is performed is used.
Further, as the erasure execution program 30B, the program stored in the external storage medium 3 distributed in advance by the administrator may be used. However, when the erasure start acceptance process shown in FIG. The data is output to the external storage medium 3. Therefore, although not shown in the figure, the management terminal 1 is provided with the erasure execution program in advance. In this case, certain information such as the client random value generated in the above-described deletion reservation acceptance process is stored in the external storage medium 3 in the deletion start process (S204).

  Thus, by outputting the erasure execution program 30B from the management terminal 1 to the external storage medium 3, it is guaranteed that the erasure execution program 30B has not been tampered with.

  Further, in the present embodiment, an erasure execution program (not shown) provided in the management terminal 1 is output to the external storage medium 3 during the erasure start acceptance process. However, the present invention is not limited to this. The data may be output from the management target terminal 2 to the external storage medium 3 by the deletion start process 32 of the deletion preparation program 30A.

It is a block diagram which shows the structure of the data erasure management system which concerns on one embodiment of this invention. It is a flowchart which shows the outline of the data deletion management method which concerns on one embodiment of this invention. It is a figure which shows an example of the erasure reservation information used for the said data erasure management method. It is a figure which shows an example of the deletion start information used for the said data deletion management method. It is a figure which shows an example of the deletion start reception information used for the said data deletion management method. It is a figure which shows an example of the deletion certification | authentication information used for the said data deletion management method. It is a figure which shows an example of the database provided in the management terminal which comprises the said data erasure management system. It is a flowchart which shows the deletion reservation process in the said data deletion management method. It is a flowchart which shows the deletion reservation process in the said data deletion management method. It is a flowchart which shows the deletion reservation reception process in the said data deletion management method. It is a flowchart which shows the deletion reservation reception start process in the said data deletion management method. It is a flowchart which shows the erasure | elimination completion process in the said data erasure management method. It is a flowchart which shows the disposal pre-processing in the said data erasure management method. It is a block diagram which shows the structure of the data deletion management system which concerns on other embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Management terminal, 10 ... Management program, 11 ... Erase reservation process, 12 ... Erase start acceptance process, 13 ... Erase completion acceptance process, 14 ... Database, 2 ... Management target terminal, 21 ... storage device, 3 ... external storage medium, 30A ... erase preparation program, 30B ... erase execution program, 30C ... erase state confirmation program, 31 erase reservation acceptance process 32 ... Erase start process, 33 ... Data erase process, 34 ... Erase completion process, 35 ... Erase state confirmation process.

Claims (10)

A data erasure management method for performing data erasure processing in a storage device in a terminal to be managed, and recording and managing the execution result in a management database for each management target terminal ,
A first step in which a management terminal transmits erasure reservation information including identification information of the terminal to a management target terminal and reserves a data erasure process;
A second step in which the management target terminal receives the erasure reservation information and transmits erasure start information including identification information of the terminal as confirmation information that the erasure reservation has been accepted, to the management terminal;
The management terminal determines whether the received erasure start information is from the management target terminal that transmitted the erasure reservation information, and if so, returns the determination result to the transmission source management target terminal A third step;
The management target terminal receives the determination result, executes data erasure processing in the storage device, issues identification information of the management target terminal that executed the erasure processing, and erasure certification information including an execution date and time. A fourth step of transmitting to the communication terminal;
A fifth step in which the management terminal updates the erasure processing state for each management target terminal stored in the management database based on the received erasure certification information;
Data erasing management method, characterized in that it comprises a. In the first step, the management terminal transmits identification information corresponding to the post-processing of the erasure process to the management target terminal,
In the fourth step, the management target terminal executes post-processing designated by the identification information corresponding to the post-processing after the erasure processing, and issues the execution result added to the erasure certification information. The data erasure management method according to claim 1, wherein: The data erasure management method according to claim 2, wherein the post-processing is writing of an erased mark or writing prohibition setting . The said management object end is further equipped with the 6th step which cancels | releases the write-protection setting of a management object terminal, or erases the erased mark according to the deletion process result of the said management object terminal. The data erasure management method described. In the first step, the management terminal generates unique first random data for each managed terminal that performs data erasure processing, and performs data erasure processing on the erasure reservation information including the first random data. Transmitting to the management target terminal to be implemented, and storing the first random data in the management database in association with the identification information of the destination management target terminal;
The management target terminal that has received the erasure reservation information in the second step generates unique second random data triggered by the reception of the erasure reservation information, and from the management terminal using the second random data. The received first random data is encrypted, and erasure start information including the encrypted data, the first random data received from the management terminal, and identification information of the terminal itself is transmitted to the management terminal. With steps,
The management terminal that has received the erasure start information in the third step searches the management database based on the identification information received from the management target terminal, and stores the first random stored in correspondence with the identification information The data is compared with the first random data received from the managed terminal, and if the two match, the encrypted data received from the managed terminal is associated with the identification information of the managed terminal And storing in the management database, and sending to the management target terminal information indicating that the management target terminal is allowed to start erasure,
After the managed terminal that has received the information indicating that the start of erasure is permitted in the fourth step executes the erasure process of the data in the storage device in the own terminal, the execution date and time, the identification information of the own terminal, and the first Transmitting the erasure certification information composed of the second random data generated in step 2 to the management terminal,
The management terminal that has received the erasure certification information in the fifth step is stored in association with the identification information from the management database by the identification information of the management target terminal that has transmitted the erasure certification information. After acquiring the random data and the encrypted data, the first random data is encrypted with the second random data received from the management target terminal in the fourth step, and the encrypted data and the management database are encrypted. When the encrypted data acquired from the management terminal is compared, and the two match, the erasure certification information is transmitted after the execution of the data erasure process from the management target terminal reserved for the execution of the data erasure process by the management terminal. It is determined that the data is legitimate erasure certification information, and the information on the execution date and time of the data erasure process in the erasure certification information is identified by the managed terminal. Data erasing method according to claim 1, characterized in that it comprises a <br/> further comprising the step of storing in the management database in association with the information. The management target terminal includes a first program executed on the management terminal and a second program executed when the data erasure process is executed on the management target terminal. It is a program used to record and manage each in the management database,
A first step in which, in the management terminal, the first program transmits erasure reservation information including identification information of the terminal to a management target terminal and reserves a data erasure process;
The second program receives the erasure reservation information in the management target terminal, and transmits erasure start information including identification information of the own terminal to the management terminal as confirmation information that the erasure reservation has been accepted. A second step of :
In the management terminal, the first program determines whether the received erasure start information is from the management target terminal that transmitted the erasure reservation information, based on the identification information of the management target terminal. If so, a third step of returning the determination result to the transmission source managed terminal,
After the second program receives the determination result in the management target terminal and executes the data erasure process in the storage device, the erasure certificate including the identification information of the management target terminal that executed the erasure process and the execution date and time A fourth step of issuing information and transmitting to the management terminal;
A fifth step in which the first program updates the erasure processing state for each management target terminal stored in the management database based on the received erasure certification information in the management terminal;
A program comprising: In the first step, the management terminal transmits identification information corresponding to post-processing of the erasure process to the management target terminal in the first step,
  In the fourth step, the second terminal executes the post-processing instructed by the identification information corresponding to the post-processing after the erasure processing in the fourth step, and the execution result is used as the erasure certification information. The program according to claim 6, wherein the program is additionally issued. The program according to claim 7, wherein the post-processing is writing of an erased mark or writing prohibition setting. The second program further includes a sixth step of canceling the write prohibition setting of the management target terminal or erasing the erased mark in accordance with the erasure processing result of the management target terminal within the management target end. The program according to claim 8 . In the first step, the first program generates unique first random data for each managed terminal that performs data erasure processing, and erases erasure reservation information including the first random data. Transmitting to the management target terminal that performs the process, and storing the first random data in the management database in association with the identification information of the destination management target terminal;
In the second step, the second program generates unique second random data triggered by reception of the erasure reservation information in the second step, and the first program received from the management terminal by the second random data. Encrypting random data, and transmitting to the management terminal erase start information including the encrypted data and the first random data received from the management terminal and identification information of the terminal,
The first program searches the management database based on the identification information received from the management target terminal in the third step, and stores the first random data and the management stored corresponding to the identification information The first random data received from the target terminal is compared, and if the two match, the encrypted data received from the management target terminal is associated with the identification information of the management target terminal for the management Storing in the database, and sending information to the management target terminal that indicates that the management target terminal is allowed to start erasure,
After the second program receives the information indicating that the start of erasure is permitted in the fourth step and executes the erasing process of the data in the storage device in the own terminal, the execution date and time, the identification information of the own terminal And transmitting the erasure certification information consisting of the second random data generated in the second step to the management terminal,
The first program is stored in association with the identification information from the management database by the identification information of the managed terminal that has received the erasure certification information in the fifth step and transmitted the erasure certification information. After acquiring the first random data and the encrypted data, the first random data is encrypted with the second random data received from the management target terminal in the fourth step, the encrypted data and the When the encrypted data acquired from the management database is compared and the two match, the erasure certification information is sent from the management target terminal reserved for the execution of the data erasure process by the management terminal after execution of the data erasure process. It is determined that it is the legitimate erasure certification information that has been sent, and the information on the date and time of execution of data erasure processing in the erasure certification information is managed. Comprising the step of storing in the management database in association with the identification information of the terminal
The program according to claim 1, further comprising:

Images