JP4575228B2 - Use control method, management method, apparatus, and program of portable storage medium - Google Patents

Description

  The present invention generally relates to operation control of an information processing apparatus. More particularly, the present invention relates to a technique for controlling and managing use of a portable storage medium in an information processing apparatus.

  In recent years, computers have been used in various companies, and important data such as confidential information and personal information has been managed by computers. Therefore, the computer is required to have high security so that, for example, data is not copied to an external storage medium and taken out. One method for ensuring such high security is to use a security function possessed by an OS (Operating System). That is, for each user attribute managed by the OS, a different authority is given regarding whether or not a portable storage medium or a drive device of the storage medium can be used.

Also, in a USB bus switching device that switches between a USB storage device that stores control information and a USB peripheral device that is connected to the information processing device and operates, the USB storage device is connected to the USB controller of the information processing device. Discloses a technique for connecting a USB peripheral device to an information processing device via a USB controller when authentication information input by a user can be authenticated by an authentication program stored in the computer (Patent Document 1). .
JP 2003-150285 A

  However, in the prior art, an authorized user or a user who knows authentication information can always use a portable storage medium, while an unauthorized user or a user who does not know authentication information. Had the problem of not being able to use any portable storage media. That is, in the conventional technology, there is a problem that flexible control such as temporarily canceling the use restriction according to the situation cannot be performed in consideration of user convenience.

  In addition, since authorized users can use portable storage media at any time, there is a problem that an administrator such as corporate security cannot grasp the usage status of portable storage media in information processing devices. It was.

  It is an object of the present invention to provide a portable storage medium use control method, management method, apparatus, and program for solving the above-described problems.

  In order to solve the above problems, a method for controlling use of a portable storage medium in an information processing apparatus is provided.

  The information processing apparatus confirms the usage permission including the usage time of the storage medium during the activation process. The information processing apparatus sets the storage medium to be usable on condition that the use permission is confirmed and the current time is within the use time included in the use permission.

  Preferably, the information processing apparatus has a built-in storage medium storing the BIOS, and the BIOS confirms whether or not the use is permitted, and sets it to be usable when the condition is satisfied.

  Preferably, the information processing apparatus receives and authenticates use permission of the storage medium issued by the information processing apparatus manager based on a request from the information processing apparatus user. Then, the information processing apparatus stores the authenticated use permission in a predetermined storage area, preferably a BIOS setting area. The use permission is confirmed by the information processing device (BIOS) reading the use permission information stored in the setting area at the time of activation.

  Preferably, an administrator password is set in advance in the information processing apparatus. The use permission issued by the administrator includes use permission information indicating the content of use permission of the storage medium, and an administrator CRC generated from the administrator password and the use permission information. Then, the authentication is performed by generating an authentication CRC from the use permission information included in the use permission from the administrator and the administrator password set in the information processing apparatus, and comparing the authentication CRC with the administrator CRC. This is done by determining whether or not to do so.

  Preferably, the use permission information includes an identifier of an information processing apparatus that should be permitted to use. The authentication is further performed by comparing the identifier of the information processing device and the identifier of the information processing device that should be permitted to be used included in the use permission information to determine whether they match.

  Preferably, the information processing device disables the use of the storage medium by not initializing a controller that controls the storage medium or the drive device of the storage medium on the condition that it is confirmed that there is no use permission. Set.

  Preferably, a filter driver that prohibits writing to a predetermined storage medium is installed in advance in the information processing apparatus. Then, the filter driver prohibits writing to a predetermined storage medium based on the use permission. The predetermined storage medium includes a USB device capable of writing data.

  Preferably, the information processing apparatus monitors the passage of usage time included in the usage permission. Then, in response to the fact that the usage time has elapsed as a result of monitoring, the information processing apparatus forcibly ends the use of the storage medium.

  Further, in order to solve the above-described problem, in the administrator-side information processing device (first information processing device), the use of a portable storage medium in the user-side information processing device (second information processing device) is managed. A method is provided.

  In response to a request from the user of the user-side information processing apparatus, the administrator-side information processing apparatus creates a use permission for the storage medium for the user-side information processing apparatus, and uses the created use permission for the user side. Send to information processing device. Here, the use permission includes a use time for permitting use of the storage medium in the user side information processing apparatus.

  Preferably, the manager-side information processing apparatus records the creation of the use permission and its transmission. Then, logging data for use permission creation is collected at regular intervals such as weekly or monthly, and a management report is created based on the collected logging data.

  As described above, the present invention has been described as a method for controlling use of a portable storage medium and a method for managing use control in an information processing apparatus. However, the present invention can also be grasped as an apparatus, a program, or a program product. . The program product can include, for example, a storage medium storing the above-described program.

  It should be noted that the above summary of the invention does not enumerate all necessary features of the present invention, and that sub-combinations of these features can also be an invention.

  According to the present invention, it is possible to perform flexible control such as temporarily canceling the restriction on the use of a portable recording medium in the information processing apparatus according to the situation in consideration of user convenience. In addition, an administrator such as security in the company can grasp the usage status of a portable recording medium in the information processing apparatus.

  BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the drawings. However, the following embodiments do not limit the invention according to the claims, and are described in the embodiments. Not all combinations of features that are present are essential to the solution of the invention.

  The present invention can be implemented in many different modes and should not be construed as being limited to the description of the embodiment. It should be noted that not all the combinations of features described in the embodiments are essential for the solution of the invention. The same number is attached | subjected to the same element through the whole description of embodiment.

  In the following embodiments, an information processing apparatus or method will be mainly described. However, as will be apparent to those skilled in the art, a part of the present invention can be implemented as a computer-usable program. Therefore, the present invention can take an embodiment as hardware, an embodiment as software, or an embodiment of a combination of software and hardware. The program can be recorded on any computer-readable medium such as a hard disk, DVD-ROM, CD-ROM, optical storage device, or magnetic storage device.

  FIG. 1 is a diagram showing an example of a hardware configuration of an information processing apparatus suitable for realizing the user side information processing apparatus according to the present embodiment. In the information processing apparatus 10 shown in FIG. 1, a central processing unit (CPU) 100 executes various arithmetic processes by program control and controls the entire information processing apparatus 10. The host controller 102 is a chip having a function of connecting the CPU 100 and the main memory 104 and the like.

  The main memory 104 is a writable memory used as a storage area for a program executed by the CPU 100 or data processed by the program. The programs executed by the CPU 100 include an OS, various drivers for operating hardware of peripheral devices, application programs directed to specific tasks, and firmware such as BIOS stored in a flash ROM 142 described later.

  The graphic controller 106 processes a drawing command from the CPU 100 and writes the processed drawing information in the video memory. Further, the graphic controller 106 reads out drawing information from the video memory and outputs it to the display device 108 such as a liquid crystal display.

  The I / O controller 110 has a bridge function for mutually connecting a PCIe (PCI Express) bus 160, a PCI bus 162, and an LPC (Low Pin Count) bus 164. The I / O controller 110 includes a programmable interrupt controller (PIC) 116, a DMA controller 118, a USB (Universal Serial Bus) controller 120, a primary IDE (Integrated Device Electronics) controller 112, and a 2nd IDE controller 114.

  The PIC 116 executes a predetermined program (interrupt handler) in response to an interrupt request (IRQ) from a peripheral device. The DMA controller 118 executes data transfer between a peripheral device such as an FDD and the main memory 104 without intervention of the CPU 100. The primary IDE controller 112 connects and controls a built-in primary HDD 122 to the information processing apparatus 10 compliant with the ATA standard. In addition to the 2nd HDD 126, the CD-ROM drive 124 is connected to the 2nd IDE controller 114 by ATAPI (AT Attachment Packet Interface). Instead of the CD-ROM drive 124, another type of IDE device such as a DVD (Digital Versatile Disc) drive may be connected.

  The USB controller 120 connects and controls various USB-compatible devices 134 such as a mouse, a keyboard, and a printer via a USB connector provided on the wall surface of the information processing apparatus 10 main body, for example. Note that USB 2.0, which is an upgraded version of USB 1.1, supports high data transfer of up to 480 Mbps. Therefore, when the USB controller 120 is compatible with USB 2.0, a storage device such as an HDD, a CD-R, or a USB memory may be connected as the USB compatible device 134.

  Furthermore, an EEPROM 136 is connected to the I / O controller 110 via an SM bus. The EEPROM 136 is a memory for storing information such as a password registered by the user, an administrator password, and a product serial number, and is nonvolatile and can electrically rewrite the stored contents.

A PCIe device such as the communication interface 128 and the docking bridge 130 is connected to the PCIe (PCI Express) bus 160.
The communication interface 128 communicates with other devices via a network. When the computer system 10 is a notebook PC, the docking bridge 130 connects and controls a docking station (not shown) that is a function expansion device. A card bus controller 132 is connected to the PCI bus 162. The card bus controller 132 controls a PC card (not shown) via the card bus.

  A super I / O controller 138, a flash ROM 142, a CMOS 144, and a KMC / EC 146 are connected to the LPC bus 164. The Super I / O controller 138 controls parallel data input / output (PIO) via the parallel port, serial data input / output (SIO) via the serial port, and driving of the FD drive. In FIG. 1, the FD drive 140 is connected to the Super I / O controller 138.

  The flash ROM 142 is a ROM that can electrically erase data and write new data in batch or block units, and stores a BIOS (Basic Input / Output System). A CMOS (Complementary Metal-Oxide Semiconductor) 144 is a semiconductor memory that is always supplied with power by a dedicated battery, and stores detailed hardware setting information by the user. Of the KMC (Keyboard Mouse Controller) / EC (Embedded Controller) 146, the KMC is a controller that controls a keyboard and a mouse. EC is a one-chip microcomputer that monitors and controls various devices (peripheral devices, sensors, power supply circuits, etc.).

  The hardware configuration of the information processing apparatus 10 suitable for realizing the user-side information processing apparatus has been described above. However, these constituent elements are examples, and all the constituent elements are essential constituent elements of the present invention. It doesn't mean. Further, the hardware configuration of the information processing apparatus suitable for realizing the administrator-side information processing apparatus is basically the same as the above-described hardware configuration, and thus description thereof is omitted. As described above, an information processing apparatus suitable for realizing the user-side information processing apparatus and the administrator-side information processing apparatus can be realized by an information processing apparatus such as a mainframe, a workstation, or a normal personal computer. It will be easily understood.

  Hereinafter, with regard to the configuration of the present embodiment, (1) setting that is a premise in the user side information processing device, (2) administrator side information processing device (use permission creation), (3) user side information processing device (4) Details will be described in the order of the information processing apparatus on the administrator side (creation of a management report).

(1) Setting as a premise in the user side information processing apparatus As a premise, the user side information processing apparatus holds an administrator password necessary for system setting. In addition, as a system setting protected by the administrator password, the user-side information processing device may be a portable storage medium or a drive device for the storage medium (hereinafter collectively referred to simply as “storage medium” in this specification). It is assumed that it has a function to set whether to use or not. It is assumed that the administrator sets the information processing apparatus to be used by the user to disable the use of all storage media that can be connected to the information processing apparatus in advance using the administrator password.

(2) Administrator-side information processing device (creation of use permission)
As described above, a user of an information processing apparatus that has been disabled from using a storage medium stores data for installation of a new application, reading of files and data necessary for work, or hard disk backup work, for example. I would like to use the media. In such a case, in the embodiment of the present invention, the user who is an employee of the company requests the use of the storage medium from the company or an administrator such as a company entrusted with maintenance management of the computer in general from the company. . The request for use permission may be made using any means as long as the administrator can confirm the user, and examples thereof include means such as e-mail and telephone.

  FIG. 2 shows functional blocks of the administrator-side information processing device 20. 2 and FIG. 6 are the elements of the computer program stored in the primary HDD 122 or the flash ROM 142 in the main memory in the information processing apparatus 10 having the hardware configuration illustrated in FIG. This can be realized by causing hardware resources and software to cooperate with each other by loading them into the CPU 104 and reading them into the CPU 100. The administrator-side information processing device 20 includes a collation unit 200, a recording unit 202, a use permission creation unit 204, a collection unit 206, and a management report creation unit 208. The collection unit 206 and the management report creation unit 208 will be described in (4) Administrator-side information processing device (management report creation).

  The collation unit 200 confirms the user who requests the use permission by collating the user information obtained from the user with the user information stored in the hard disk 122 of the administrator-side information processing apparatus, and displays the result. 108 is displayed on the display screen. As an example, the user information may be an identification number such as an employee's name, affiliation, contact information, employee number, and the like, and is registered in the user information table 300 having the format shown in FIG. In the present embodiment, the user information table 300 and the request information table 400 described later are stored in the hard disk 122 of the administrator-side information processing apparatus 20, but the storage location is not limited to this, and is connected via a network, for example. Stored in an external database. As shown in FIG. 3, the user information is further stored in the asset identification number 325, serial number 330 of the user side information processing apparatus, and the administrator password 335 set in the user side information processing apparatus. They may be stored in the table in association with each other.

  Here, the asset identification number 325 is an identification number assigned to the information processing apparatus on the user side by the manager of the company. When the user uses a plurality of information processing apparatuses, the user desires to issue a use permission. The information processing apparatus can be used to identify a user and an administrator. The serial number 330 is a unique identification number assigned to the user-side information processing device by the manufacturer of the information processing device. The details will be described later, but use is permitted by the user-side information processing device that should be permitted to use. Can be used to authenticate that has been received. Further, the administrator password 335, which will be described in detail later, can be used for authenticating the use permission issued by the user in the user side information processing apparatus.

  The recording unit 202 stores, in the hard disk 122, the use permission request for the storage medium input by the administrator using the input device 148 such as a keyboard. When the collation unit 200 collates the user, the administrator gives the user the asset identification number of the information processing apparatus for which issuance of use permission, the type of storage medium desired to be used, the desired use time, and the purpose of use. ask. When the administrator determines from the use permission request content that the user can be permitted to use the storage medium, the administrator inputs the use permission request content to the administrator side information processing apparatus 20. The data input from the administrator is registered in the request information table 400 in the format shown in FIG. 4 as an example, and stored in the hard disk 122. It should be noted that the desired use time may take any form such as a period in which the use is desired, such as 3 hours, or the last date / time when use is permitted, such as 1 pm on May 1, 2005.

  The use permission creating unit 204 creates a use permission to be issued from the user information table 300 and the request information table 400. Specifically, an unprocessed use permission request is searched from the request information table 400, and the target recording medium 415, use time 420, and asset identification number 410 are extracted. Next, the user information table 300 is searched using the asset identification number 325 as a search key. From the user information having the same asset identification number 325 as the asset identification number 410, the contact address 320, serial number 330, and administrator password 335 are obtained. Take out. Then, the use permission creating unit 204 creates the use permission information 520 using the serial number 330, the target recording medium 415, and the use time 420. In addition, the use permission creation unit 204 calculates a CRC from data obtained by adding the administrator password 335 to the created use permission information 520. Then, by adding this to the use permission information 520 as the administrator CRC 525, the use permission 500 shown in FIG. 5 is created. The created use permission 500 is sent from the communication interface 128 to the user side information processing apparatus via the network based on the destination indicated by the contact 320. Further, the use permission creating unit 204 notifies the recording unit 202 of the creation of the use permission, and the recording unit 202 accesses the request information table 400 described above and registers the use permission creation date 430.

(3) User Side Information Processing Device FIG. 6 shows functional blocks of the user side information processing device 30. The user-side information processing device 30 includes a calling unit 612, a filtering unit 616, a forced termination unit 602, an authentication unit 632, a response unit 638, a monitoring unit 639, an interrupt generation unit 650, a confirmation unit 642, and a first setting unit. An initialization unit 644 and an initialization prohibition unit 646 that is a second setting unit are included. Here, the calling unit 612 is a function provided by a dedicated tool 610 that is an application program that runs on the OS. The filtering unit 616 is a function provided by a filter driver 614 that prohibits writing to a predetermined storage medium. Although the filter driver 614 is described as being incorporated in the OS 600 in this embodiment, it may be arranged in a layer between the OS 600 and the driver. The forced termination unit 602 is a function provided by the OS 600. The authentication unit 632, the response unit 638, and the monitoring unit 639 are functions provided by an SMI (System Management Interrupt) handler 630 that is a part of the BIOS 620. Authentication unit 632 further includes a generation unit 634 and a comparison unit 636. The interrupt generation unit 650, the confirmation unit 642, the initialization unit 644, and the initialization prohibition unit 646 are functions provided by the BIOS 620. The confirmation unit 642, the initialization unit 644, and the initialization prohibition unit 646 are executed as the BIOS expansion unit 640 during the activation process of the user information processing apparatus 30.

  When the dedicated tool 610 is activated in accordance with the operation of the input device 148 by the user, the calling unit 612 reads the usage permission 500 received by the communication interface 128, calls the SMI handler 630, and passes the usage permission 500. The authentication unit 632 of the SMI handler 630 mutually authenticates the use permission 500 including the use permission information 520 indicating the contents of the use permission 500 and the administrator CRC 525.

  Specifically, the generation unit 634 of the authentication unit 632 generates an authentication CRC by adding the administrator password stored in the EEPROM 136 to the use permission information 520 and calculating the CRC. The comparison unit 636 of the authentication unit 632 compares the authentication CRC generated by the generation unit 634 with the administrator CRC 525 included in the use permission. As a result, the user-side information processing apparatus 30 can confirm that the usage permission 500 has been issued by the administrator. Further, as described above, the use permission information 520 includes the serial number 505, the target storage medium 510, and the use time 515. The comparison unit 636 compares the serial number of the user information processing apparatus 30 stored in the EEPROM 136 with the serial number 505 included in the use permission information 520. Thereby, the administrator can ensure that the use permission 500 is used by the user side information processing apparatus that should be permitted to use. When the mutual authentication is successful, the comparison unit 636 stores the use permission information 520 in a predetermined storage area of the EEPROM 136 that is a storage area accessible only by the BIOS 620. Instead, the comparison unit 636 may store only the target storage medium 510 and the usage time 515 in the EEPROM 136.

  The confirmation unit 642 confirms whether or not the usage permission information 520 is stored in the EEPROM 136 when the BIOS expansion unit 640 is called during the BIOS 620 activation process. When the usage permission information 520 is stored, the confirmation unit 642 further compares the usage time 515 included in the usage permission information 520 with the current time, and determines that the current time is within the time indicated by the usage time 515. Check.

  In response to receiving the notification indicating the confirmation success and the target storage medium 510 from the confirmation unit 642, the initialization unit 644 initializes the storage medium indicated by the target storage medium 510 to thereby store the storage medium. Enable use. The initialization process is the same as the initialization process normally performed by the BIOS 620 when the computer is started, and will not be described because it is known to those skilled in the art.

  On the other hand, in response to receiving the notification indicating the failure of confirmation from the confirmation unit 642, the initialization prohibition unit 646 prohibits initialization of all storage media, thereby disabling the use of the storage medium. Specifically, using the example of the information processing apparatus 10 shown in FIG. 1, the 2nd IDE controller 114, the docking bridge 130, the card bus controller 132, and the USB controller 120 are objects to be initialized or prohibited from being initialized. Super I / O controller 138. In addition, the initialization prohibition unit 646 not only prohibits initialization, but also ensures that the storage medium cannot be used by stopping power supply to the controller.

  In place of the processing by the initialization prohibition unit 646, when the filter driver 614 that prohibits writing to a predetermined storage medium is installed in the user-side information processing apparatus 30 in advance, the filter driver 614 The use of the storage medium may be disabled. That is, the response unit 638 accesses the EEPROM 136 in response to the periodic inquiry from the filtering unit 616 and returns the use permission information 520 to the filtering unit 616. The filtering unit 616 prohibits writing to a predetermined storage medium based on the use permission 500 received from the response unit. The above-described setting that the storage unit cannot be used by the confirmation unit 642 is executed by the BIOS expansion unit 640 that is an expansion of the BIOS 620, which is preferable in terms of security. On the other hand, when the use of the storage medium is disabled by the filter driver 614, only the writing can be prohibited while the reading of the storage medium is permitted, so that the storage medium can be controlled more flexibly. In particular, when a filter driver that prohibits writing to a USB device is installed as a filter driver, the USB controller 120 can be initialized as usual, which is preferable because there is no problem in using a USB-compatible mouse or keyboard. The filter driver can be stored in the primary HDD 122 as an example.

  The interrupt generation unit 650 receives a notification from a timer set at a constant period (for example, every minute) and generates an SMI interrupt. In response to the interrupt from the generation unit 650, the monitoring unit 639 compares the current time with the usage time 515 stored in the EEPROM 136, and determines whether the current time is within the time when the use of the storage medium is permitted. Monitor whether. If it is not within the time, the monitoring unit 639 generates a signal indicating the passage of time permitted for use.

  The forcible end unit 602 forcibly terminates the use of the storage medium indicated by the target storage medium 510 in response to a signal indicating the passage of time permitted for use. Specifically, the forcible end unit 602 forcibly shuts down or restarts the user side information processing apparatus 30. Thus, the present invention functions effectively even for a user who keeps using the information processing apparatus without shutting down. Note that the monitoring unit 639 artificially generates a signal indicating that the system is in a high temperature state instead of a signal indicating the passage of time that the use is permitted, thereby forcing the OS forced shutdown function 602. Can be used as

(4) Administrator-side information processing device (creation of management reports)
The collection unit 206 collects the logging data for use permission creation by the use permission creation unit 204. In the present embodiment, the collection unit 206 accesses the request information table 400 recorded by the recording unit 202 and collects a set of registered data having the same asset identification number 410.

  The management report creation unit 208 creates a management report based on the collected logging data. In the present embodiment, the management report creation unit 208 accesses the user information table 300 and uses the asset identification number 325 as a search key and has the same asset identification number 325 as the asset identification number 410 indicated in the logging data. User information such as number 305 and name 310 is extracted. Then, the management report creation unit 208 creates a management report from the user information and the registered data set collected by the collection unit 206. The management report may be created every week or every month, and the management report that summarizes the use permission creation status may be created for each user who has issued a use permission or for each asset management number.

  Next, with respect to the above-described functional blocks, (1) setting that is a premise in the user side information processing apparatus, (2) administrator side information processing apparatus (creation of use permission), (3) user side information processing apparatus, (4) The operation will be described in the order of the administrator-side information processing device (management report creation). In the description, reference is made to the flowcharts of FIGS.

(1) Prerequisite settings in the information processing apparatus on the user side Referring to FIG. 7, the administrator connects the information processing apparatus to be used by the user to the information processing apparatus using the administrator password. The operation for setting the use of all the usable storage media to be disabled will be described.

  The process starts when the administrator powers on the information processing apparatus 30 on the user side. In step 10, the user side information processing apparatus 30 (BIOS) determines whether or not the BIOS setting button has been pressed by the administrator. When the button is not pressed (S10: NO), the user side information processing device 30 (BIOS) continues the activation process. On the other hand, when the button is pressed (S10: YES), the user side information processing device 30 (BIOS) accesses the EEPROM 136 to determine whether or not the administrator password is set in the user side information processing device 30. (S20). When the administrator password is set (S20: YES), the user side information processing device 30 (BIOS) displays a prompt on the display screen of the display device 108 and requests input of the administrator password (S30). .

  When the input administrator password matches the administrator password set in the user-side information processing device 30 (S40: YES), or NO in step 20, the user-side information processing device 30 (BIOS). Determines whether the administrator has selected the setting to prohibit the use of the storage medium (S50). When the use prohibition setting is selected (S50: YES), the setting is stored in the EEPROM 136 (S60). After step 60, or if NO in steps 40 and 50, the user side information processing device 30 (BIOS) performs a restart process.

(2) Administrator-side information processing device (creation of use permission)
With reference to FIG. 8, the operation of the information processing apparatus on the manager side regarding the creation of the use permission will be described. The process starts when user information obtained from a user who requests issuance of use permission for a storage medium is input to the administrator-side information processing apparatus 20 by an administrator using an input device 148 such as a keyboard.

  In step 100, the collation unit 200 accesses the user information table 300 stored in the hard disk 122 of the administrator side information processing apparatus 20 in order to collate the input user information. Then, the collation unit 200 displays the collation result on the display screen of the display device 108.

  If the verification is not successful (S110: NO), the process ends. On the other hand, if the collation is successful (S110: YES), the recording unit 202 registers the use permission request content input by the administrator using the input device 148 such as a keyboard in the request information table 400 and stores it in the hard disk 122. (S120).

  Next, in step 130, the use permission creating unit 204 accesses the request information table 400 and the user information table 300, and creates a use permission 500 including the use permission information 520 and the administrator CRC 525. Thereafter, the use permission creating unit 204 sends the created use permission 500 to the user side information processing apparatus 30 via the network (S140). At this time, the use permission creation unit 204 notifies the recording unit 202 of creation of the use permission.

  In step 150, the recording unit 202 accesses the request information table 400 in response to the notification from the use permission creation unit 204, registers the use permission creation date for the corresponding registration data, and records the use permission creation. Take. Then, the process ends.

(3) User-side Information Processing Device With reference to FIG. 9, the operation of the user-side information processing device 30 will be described regarding the setting of whether or not the storage medium can be used based on the use permission 500 issued by the administrator. .

  In step 200, the communication interface 128 of the user side information processing apparatus 30 receives the use permission 500 sent by the administrator via the network. Thereafter, the dedicated tool 610 is activated in accordance with the operation of the input device 148 by the user. The dedicated tool 610 reads the received use permission 500, calls the SMI handler 630, and passes the use permission 500 to the authentication unit 632.

  In step 210, the comparison unit 636 of the authentication unit 632 compares the serial number of the user side information processing apparatus 30 stored in the EEPROM 136 with the serial number 505 included in the use permission 500 and determines whether or not they match. (S210). If they match (S210: YES), in step 220, the generation unit 634 of the authentication unit 632 adds the administrator password stored in the EEPROM 136 to the use permission information 520 included in the use permission 500 and calculates the CRC. To generate an authentication CRC.

  The comparison unit 636 compares the authentication CRC generated by the generation unit 634 with the administrator CRC 525 included in the use permission 500, and determines whether they match (S230). If they match (S230: YES), the comparison unit 636 stores the use permission information 520 in a predetermined storage area of the EEPROM 136 (S240). Thereafter, the user-side information processing apparatus 30 is restarted by an operation of the administrator's input device or automatically (S250). On the other hand, if NO at step 210 or step 230, the process ends.

  The BIOS 620 then starts the activation process. In step 260, the confirmation unit 642 reads data from the EEPROM 136, and in step 270 confirms the presence / absence of the usage permission information 520. When the usage permission information 520 is present, the confirmation unit 642 further determines whether or not the current time is within the usage time 515 included in the usage permission information 520.

  If the confirmation is successful (S270: YES), in step 280, the initialization unit 644 responds to receiving a notification indicating the confirmation success from the confirmation unit 642 together with the target storage medium 510, in response to the target storage medium 510. The target storage medium 510 is set to be usable by initializing the storage medium indicated by.

  If the confirmation fails (S270: NO), in step 300, the initialization prohibition unit 646 prohibits initialization for all the storage media that can be connected to the user-side information processing apparatus 30 and / or used. Setting to disable the use of the storage medium by stopping the power supply.

  On the other hand, in step 290 after initialization, the unusable setting described with respect to step 300 is performed for the remaining storage media excluding the storage medium indicated by the target storage medium 510. After step 290 or step 300, the user information processing apparatus 30 is activated and the process ends.

  Referring to FIG. 10, in place of the process of setting the use of the storage medium to be disabled by the initialization prohibition unit 646, the use of the storage medium is disabled by the filter driver 614 that prohibits writing to a predetermined storage medium. Processing will be described. Note that the use of a certain storage medium may be disabled by the initialization prohibition unit 646, and the use of a certain storage medium may be disabled by the filter driver 614. Here, the processing will be described on the assumption that a filter driver that prohibits writing to the USB device is installed in the user-side information processing apparatus 30 in advance.

  The process of disabling the use of the storage medium by the filter driver 614 starts after the OS 600 has started up. In step 305, the filtering unit 616 makes a use permission inquiry to the response unit 638. The response unit 638 accesses the EEPROM 136 in response to the inquiry from the filtering unit 616 (S310). In step 315, the response unit 638 reads data from the EEPROM 136, and if there is use permission information 520, returns the use permission information 520 to the filtering unit 616. If not, a response indicating that there is no response is returned to the filtering unit 616.

  In step 320, the filtering unit 616 determines whether the target storage medium 510 included in the use permission information 520 from the response unit indicates a predetermined USB device. When indicating a predetermined USB device (S320: YES), the filtering unit 616 inhibits writing to the predetermined USB device by blocking all write requests to the predetermined USB device (S325). After step 325 or when the target storage medium 510 does not indicate a predetermined USB device or when the use permission information 520 is not received from the response unit 638 (S320: NO), the process returns to step 305. The series of steps from step 305 to step 320/325 described above is periodically repeated by the filter driver 614.

  With reference to FIG. 11, an operation of the user side information processing apparatus 30 when the storage medium is used after the time permitted for use by the administrator has elapsed will be described.

  In step 350, the interrupt generation unit 650 receives a notification from a timer set at a certain period and generates an SMI interrupt. In step 360, in response to the SMI interrupt, the monitoring unit 639 determines whether the current time of the user side information processing apparatus 30 is within the time indicated by the usage time 515 stored in the EEPROM 136. When the usage time has elapsed (S360: YES), the monitoring unit 639 generates a signal indicating the elapsed usage time (S370). If the usage time has not elapsed (S360: NO), the process returns to step 350.

  In step 380, the forcible end unit 602 forcibly ends the use of the storage medium indicated by the target storage medium 510 in response to the signal indicating that the usage time has elapsed. Specifically, the user side information processing apparatus 30 is forcibly shut down or restarted. Accordingly, when the user side information processing apparatus 30 is activated next time, the confirmation unit 642 determines that the current time is not within the use time 515 included in the use permission information 520, and therefore the initialization of the target storage medium 510 is performed. Is prohibited and cannot be used. Then, the post-processing of step 380 ends.

(4) Administrator-side information processing device (creation of management reports)
With reference to FIG. 12, the operation of the administrator-side information processing apparatus 20 regarding the creation of the management report will be described.

  In step 430, the collection unit 206 collects logging data for use permission creation by the use permission creation unit 204. Specifically, the request information table 400 managed by the recording unit 202 is accessed, and a set of registered data having the same asset identification number 410 is collected.

  Next, in step 440, the management report creation unit 208 creates a management report indicating the usage permission issuance status based on the logging data collected by the collection unit 206. Then, the process ends.

  As mentioned above, although demonstrated using embodiment of this invention, the technical scope of this invention is not limited to the range as described in the said embodiment. For example, the use permission authentication by the SMI handler in the embodiment of the present invention may be performed during the BIOS activation process. Further, instead of forcibly terminating the system by the forcible termination unit in the embodiment of the present invention, the administrator is automatically notified via the network that the storage medium has been used after the permitted time has elapsed. A configuration for reporting may be provided. Furthermore, the use permission is not necessarily issued via the network, and the use permission may be stored in a storage medium such as a flexible disk and passed to the user. However, in this case, it is assumed that the use of FDD is permitted in advance in the user side information processing apparatus. It will be apparent to those skilled in the art that various modifications and improvements can be made to the above embodiment. Accordingly, it is a matter of course that embodiments with such changes or improvements are also included in the technical scope of the present invention.

It is the figure which showed an example of the hardware constitutions of the computer suitable for implement | achieving the administrator side information processing apparatus or user side information processing apparatus by embodiment of this invention. It is a functional block diagram of the administrator side information processing apparatus by embodiment of this invention. It is an example of the user information table which stores the information regarding a user. It is an example of the request information table which stores the request content from a user. It is a figure which shows an example of the use permission which an administrator issues according to a user's request by embodiment of this invention. It is a functional block diagram of the user side information processing apparatus by embodiment of this invention. It is a flowchart which shows the flow of the prior storage medium use prohibition setting process in the user side information processing apparatus of embodiment of this invention. It is a flowchart which shows the flow of a use permission creation process in the manager side information processing apparatus of embodiment of this invention. It is a flowchart which shows the flow of the storage medium use permission / inhibition setting process based on use permission in the user side information processing apparatus of embodiment of this invention. It is a flowchart which shows the flow of the non-usable process of a storage medium by a filter driver in the user side information processing apparatus of embodiment of this invention. It is the flowchart which showed the flow of the use permission time monitoring process in the user side information processing apparatus of embodiment of this invention. It is the flowchart which showed the flow of the management report preparation process in the management side information processing apparatus of embodiment of this invention.

Claims (16)

An information processing device that has a plurality of controllers that control the connection of portable storage media and that has an administrator password.
Use permission information including use time information and information on the target storage medium from the administrator side information processing apparatus, and use permission including authentication data on the administrator side created using the use permission information and the administrator password, through a communication interface. Receiving, and
Comparing the authentication data on the user side with the authentication data on the user side created using the use permission information and the administrator password that is held;
Confirming that the use permission information exists in the information processing apparatus during a restart process on the condition that the authentication data on the administrator side and the authentication data on the user side match in the comparing step When,
Only the target storage medium for which it is confirmed that the current time of the information processing apparatus is within the use time during the restart process on the condition that the presence of the use permission information is confirmed can be used. A computer program that executes a process including a step of initializing a controller indicated by information on the target storage medium. The information processing apparatus has a built-in storage medium storing BIOS,
The computer program according to claim 1, wherein the BIOS causes the information processing apparatus to execute the comparing step, the checking step, and the initialization step. The administrator-side authentication data is an administrator CRC generated by performing CRC calculation by adding the administrator password to the use permission information,
The computer program according to claim 1, wherein the user-side authentication data is a user CRC generated by performing CRC calculation by adding the held administrator password to the use permission information. The use permission information includes an identifier of the information processing apparatus that should be permitted to use,
The step of comparing includes a step of comparing an identifier of the information processing apparatus held by the information processing apparatus with an identifier of the information processing apparatus to be permitted for use included in the use permission information. The computer program described.   The computer program according to claim 1, wherein the initializing step includes a step of performing processing for prohibiting use of a controller other than the controller indicated by the target storage medium.   The computer program according to claim 1, further comprising a step of performing a process of prohibiting use of all the controllers on the condition that the confirmation of the presence of the use permission information fails in the confirmation step. The information processing apparatus is preinstalled with a filter driver that prohibits writing to a predetermined storage medium,
The computer program according to claim 1, wherein the filter driver causes the information processing apparatus to execute a process for prohibiting writing to the predetermined storage medium based on the use permission.   The computer program according to claim 7, wherein the predetermined storage medium is a USB device capable of writing data. Monitoring whether the current time is within the usage time included in the usage authorization while the operating system is running;
The computer program product according to claim 1, further comprising a step of forcibly shutting down or restarting the information processing apparatus and terminating the use of the storage medium in response to the use time having elapsed. An information processing apparatus having an administrator password,
A plurality of controllers for controlling the connection of portable storage media;
Use permission information including use time information and information on the target storage medium from the administrator side information processing apparatus, and use permission including authentication data on the administrator side created using the use permission information and the administrator password, through a communication interface. A caller to receive,
A comparison unit for comparing the authentication data on the user side with the authentication data on the user side created using the use permission information and the administrator password that is held;
A confirmation unit for confirming during the restart process that the use permission information is stored when the authentication data on the administrator side matches the authentication data on the user side;
Only the target storage medium for which it is confirmed that the current time of the information processing device is within the usage time during the restart process on the condition that the storage of the usage permission information is confirmed can be used. And an initialization unit that initializes a controller indicated by information on the target storage medium. The administrator-side authentication data is an administrator CRC generated by performing CRC calculation by adding the administrator password to the use permission information,
The information processing apparatus according to claim 10, wherein the user-side authentication data is a user CRC generated by performing CRC calculation by adding the held administrator password to the use permission information. The use permission information includes an identifier of the information processing apparatus that should be permitted to use,
The information according to claim 10, wherein the comparison unit compares the identifier of the information processing device stored in the information processing device with the identifier of the information processing device that should be permitted to be used included in the use permission information. Processing equipment.   The information processing apparatus according to claim 10, further comprising an initialization prohibition unit that prohibits use of all controllers on condition that the confirmation unit fails to confirm the presence of the use permission information. The information processing apparatus has a built-in storage medium for storing a filter driver that prohibits writing to a predetermined storage medium,
The information processing apparatus according to claim 10, wherein the filter driver causes the information processing apparatus to execute a process of prohibiting writing to the predetermined storage medium based on the use permission. A monitoring unit that monitors whether the current time is within the usage time included in the use permission while the operating system is operating, and generates a signal indicating the passage of the usage time;
The information processing apparatus according to claim 10, further comprising: a forcible end unit that forcibly shuts down or restarts the information processing apparatus to end use of the storage medium in response to a signal indicating that the usage time has elapsed. An information processing apparatus comprising a plurality of controllers for controlling connection of a portable storage medium and having an administrator password for controlling the controller,
Use permission information including use time information and information on the target storage medium from the information processing apparatus on the administrator side, and use permission including authentication data on the administrator side created using the use permission information and the administrator password through the communication interface Receiving, and
A comparison unit comparing the authentication data on the user side and the authentication data on the administrator side created using the use permission information and the administrator password held by the administrator;
The confirmation unit confirms that the use permission information exists in the information processing apparatus during a restart process on the condition that the authentication data on the administrator side matches the authentication data on the user side in the comparing step. Steps to check,
The target is set so that only the target storage medium that can be confirmed that the current time of the information processing apparatus is within the use time during the restart process is provided on the condition that the use permission information exists. Initializing the controller indicated by the information about the storage medium.

Images