JP4909722B2 - Data management device - Google Patents

Description

  The present invention relates to a data management apparatus comprising data holding means for holding data and output means for outputting the data to the outside of the data management apparatus.

  Some data management apparatuses are configured as computers and servers, while others are configured as copiers and fax machines.

  In such a data management apparatus, data that should be kept secret may be held by a third party including personal information.

  Here, a third party stealing data kept secret from such a data management device uses its own USB memory connected to the data management device or its own computer connected to the data management device via a network. The stealing data is output from the data management device to these computers.

  In order to prevent such data theft, the data management apparatus authenticates the user as a specific person (legitimate user), that is, performs user authentication, and allows data output only to the authenticated user's data acquisition apparatus.

  Here, in such user authentication in the data management apparatus, for example, in the case of a system administrator or the like, in addition to authentication by simply inputting an ID and password required for a general user, fingerprint authentication is also performed. The authentication certainty or reliability (security level) is multi-stage. As a result, the general user can output only a certain file such as his / her own file, and the system administrator authenticated at a high security level can also output another file group of the file.

In addition, in the conventional data management device, even if a third party outputs data to its own computer or the like, even if communication contents are peeped in the middle of the network when it is output by a legitimate user, data encryption, etc. This prevents theft of data that should be kept secret (see Patent Document 1).
Japanese Patent Laid-Open No. 6-120941

  However, in the prior art, even if data that is output only by a system administrator who has been authenticated with a high security level can be surely prevented from being stolen, data that the data management device allows to output without authenticating only with a low security level. With regard to, if authentication information for a low security level is input, even a relatively large amount of data can be easily stolen.

  The present invention has been made in view of this point, and secures the convenience of access to data according to the security level, and also steals a large amount of data that can be authenticated and output at a low security level. The purpose is to make it difficult to do.

  The data management device according to claim 1 is a data holding unit that holds data, a multi-level authentication unit that authenticates a user at a plurality of different security levels, and a security level authenticated by the multi-level authentication unit. The data management device includes an output unit that outputs the data held in the data holding unit to the outside of the data management device at a predetermined speed that is slower as the security level is lower.

With this configuration, authentication can be performed at different security levels from high security levels to low security levels, and data can be output individually, ensuring the convenience of accessing data according to the security level and at multiple levels. Since data is output at a slower speed as the security level at which the user is authenticated by the authentication means is lower, it is difficult to steal a large amount of data even if it can be output after being authenticated at a lower security level.

  The data management apparatus according to claim 2, further comprising authentication information input means for inputting each authentication information for authenticating the user from a plurality of users, wherein the multi-level authentication means has the security level. The data management apparatus according to claim 1, wherein the determination is based on authentication information input to the authentication information input means.

  According to this configuration, since the security level is determined based on the authentication information input to the authentication information input means, the security authenticated by the multi-level authentication means by properly using the authentication information input by the user The level can be different.

  The authentication information input means may include a key input means such as a numeric keypad for inputting a password, or a biometric information input means for inputting biometric information such as a fingerprint or an iris. Alternatively, both may be included.

  The authentication information may include at least a part of user specifying information for specifying a user of the data management apparatus, or may include at least a part of information for specifying a group or category to which the user belongs. .

  The multi-level authentication unit may determine a security level according to the type of authentication information input from among a plurality of types of authentication information input to the authentication information input unit.

  The multilevel authentication means associates user identification information for identifying a user among authentication information input to the authentication information input means and a security level for authenticating the user identified by the user identification information. A security level corresponding to the user specifying information input to the authentication information input means indicated by the stored content is specified as a security level for authenticating the user of the user specifying information. Also good.

  4. The data management apparatus according to claim 3, wherein different numbers of authentication information are input to the authentication information input means according to security levels, and the multi-level authentication means is input by the user to the authentication information input means. The data management apparatus according to claim 2, wherein the higher the authentication information is, the higher the security level is evaluated.

  According to this configuration, based on the number of pieces of authentication information input to the authentication information input unit, the security level is evaluated higher as the number of input authentication information increases, so that the information input to the authentication information input unit is input. By properly using the number of authentication information to be used, the security level authenticated by the multi-level authentication means can be varied.

  The plurality of “authentication information” input to the authentication information input means is a plurality of types of authentication information such as a password input by a keyboard and biometric information such as a fingerprint image input by a fingerprint reader. Alternatively, the same type of authentication information may be used as in the first half and the second half of the password input with a keyboard or the like.

  The data management apparatus according to claim 4 is an apparatus according to claim 2 or 3, further comprising an imaging unit that images a user who inputs authentication information to the authentication information input unit.

  With this configuration, it is possible to suppress theft of data by psychologically pressing the user by imaging the user.

  In addition, when a person who intends to steal data tries to authenticate at a relatively high security level, it is sufficient and sure during the long time that a large amount of authentication information is input to the authentication information input means. On the other hand, when a burglar tries to authenticate at a relatively low security level, it is sufficient and reliable while data is output over a long time at a slow speed. It is possible to suppress data theft with certainty by, for example, squeezing the thief, so that it is possible to reliably suppress data theft regardless of the security level that is authenticated when the thief attempts data theft. it can.

  The data management apparatus according to claim 5, further comprising a storage unit that stores a user image captured by the imaging unit, wherein the multilevel authentication unit has a high security level when the user is authenticated by the multilevel authentication unit. 5. The data management apparatus according to claim 4, wherein an image captured by the user by the imaging unit is stored in the storage unit for a predetermined period of time.

  With this configuration, the image of a person who has been authenticated at a relatively high security level, which can be output at a high speed and is easy to steal data, can be stored for a long time. It can be saved.

  According to the present invention, it is possible to make it difficult to steal a large amount of data even if it can be output after being authenticated at a low security level, while ensuring the convenience of accessing data according to the security level. it can.

  Hereinafter, an information device 1 according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram illustrating an overall configuration of the information device 1.

  The information device 1 is an example of a “data management device” described in the claims.

  The information apparatus 1 is, for example, a personal computer or a server (for example, a file server), an image forming apparatus such as a copying machine, a facsimile, or a printing apparatus, or a home appliance such as a telephone.

  The information device 1 is assumed to include a computer 100 and an operation panel 14. If the information device 1 is a personal computer, a keyboard or the like may be provided instead of the operation panel 14, and various input means may be provided instead of the operation panel 14. If the information device 1 is a telephone or the like, the computer 100 may be a control unit of the device.

  The computer 100 is an information processing apparatus configured by a CPU, a ROM, a RAM, and the like.

  The computer 100 executes software included in the ROM or the hard disk included in the computer 100, thereby executing each functional block shown in FIG. 1, the secret data storage unit 110, the secret data output unit 120, the output instruction acquisition unit 130, and a plurality of security level authentications. The functions of the unit 140 and the monitoring processing unit 150 are realized.

  Note that some or all of the functions of the computer 100 may be realized by dedicated hardware instead of being executed by executing software in this way.

  The secret data storage unit 110 stores secret data 1d to be kept secret for a third party. The information device 1 is a database that stores secret data 1 d in the secret data storage unit 110. The secret data storage unit 110 includes a function of managing the stored contents.

  The secret data storage unit 110 is an example of a “data holding unit” recited in the claims.

  The secret data output unit 120 outputs the above-described secret data in the secret data storage unit 110 to the data acquisition unit 9 connected to the information device 1.

  The data acquisition unit 9 is, for example, a USB memory 91 connected to the USB terminal of the information device 1 or an external computer 92 connected to the LAN terminal of the information device 1 via a network. Although not shown, the data acquisition unit 9 may include a storage device such as a hard disk, a mobile information terminal such as a mobile phone, and may be wired or connected to the information device 1. Various apparatuses, devices, devices, and the like having a function of acquiring the above-described secret data output from the secret data output unit 120 through the communication by wireless connection and communication are included.

  The output instruction acquisition unit 130 is input to the information device 1 by the user's operation on the operation panel 14, for example, a touch panel, and the secret data output unit 120 instructs the secret data output unit 120 to output the secret data to the data acquisition unit 9. Get output instructions.

  The secret data output unit 120 outputs the secret data to the data acquisition unit 9 when the output instruction acquisition unit 130 receives the output instruction. The secret data output unit 120 outputs the secret data to the data acquisition unit 9 specified in the output instruction input from the operation panel 14. The user can specify the data acquisition unit 9 to which the secret data is output in the secret data output instruction to the information device 1 through the operation panel 14.

  The external computer 92 may be a mail server, and the secret data output unit 120 may output the secret data to the computer 92 that is an external mail server and send the mail.

  Although not explicitly shown in FIG. 1, the data acquisition unit includes a facsimile machine, and the secret data output unit 120 outputs the secret data to the external facsimile machine, so that the data content is It may be printed out by a facsimile machine.

  The multiple security level authentication unit 140 authenticates the user. The multiple security level authentication unit 140 acquires information specifying the user input from the operation panel 14 and performs this authentication based on the acquired information.

  Here, authentication refers to determining that the operator of the operation panel 14 is not the data stealer or the like but the authentic user of the information device 1.

  The multiple security level authentication unit 140 is an example of a “multi-level authentication unit” recited in the claims.

  The operation panel 14 includes a numeric keypad 14a, a card reader 14b, and a fingerprint reader 14c.

  The operation panel 14 is an example of an “authentication information input unit” recited in the claims.

  The numeric keypad 14 a is operated by the user and inputs the user ID number and password to the multiple security level authentication unit 140.

  The card reader 14b holds the user's card over the user, obtains card information for identifying the user stored in the held card by magnetism or the like, and inputs the card information to the multiple security level authentication unit 140. This card may be a so-called IC card that is not a magnetic card, or may store card information in another manner.

  The fingerprint reader 14 c receives a finger of the user, acquires a fingerprint image of the applied finger, and inputs the fingerprint image to the multiple security level authentication unit 140.

  The above-described three information, ID number and password, card information, and fingerprint information are collectively referred to as authentication information hereinafter.

  The operation panel 14 inputs these three types of authentication information to the multiple security level authentication unit 140.

  The multiple security level authentication unit 140 authenticates the user based on the three types of authentication information input from the user through the operation panel 14. Whether the user is a general user, a supervisor who supervises a plurality of general users, or a system administrator of the information device 1 in this authentication. Identify which type of user you are.

  The multiple security level authenticating unit 140 can perform this specification based on, for example, an ID number included in the authentication information.

  When the user is a general user, the multiple security level authentication unit 140 authenticates the user by authentication based on an ID number and a password (hereinafter referred to as ID authentication).

  If the user is a group supervisor, the multiple security level authentication unit 140 further acquires the user's card information by the card reader 14b after performing such ID authentication, and in addition to the ID number and password, Based on the card information, authentication (hereinafter, card authentication) is performed based on a total of three pieces of information.

  When the user is a system administrator, the multiple security level authentication unit 140 performs ID authentication and card authentication as in the case of the group supervisor, and further causes the fingerprint reader 14c to read the user's fingerprint image. The user is authenticated using the read fingerprint image (hereinafter referred to as fingerprint authentication). At this time, the multiple security level authentication unit 140 performs authentication based on a total of four pieces of information based on the fingerprint image in addition to the ID number, password, and card information.

  Here, the reliability and the degree of reliability that the multiple security level authentication unit 140 cannot authenticate the user correctly will be referred to as a security level hereinafter. A high security level means that the certainty and reliability are high, and conversely, a low security level means that the certainty and reliability are low.

  The multiple security level authentication unit 140 increases the number of authentications to be performed among ID authentication, card authentication, and fingerprint authentication, so that if the user is a general user, the multiple security level authentication unit 140 can be a supervisor with a relatively low security level. For example, authentication is performed at an intermediate security level, and at a relatively high security level by a system administrator.

  The secret data output unit 120 includes a switching unit 121, a high-speed output unit 125, a medium-speed output unit 126, and a low-speed output unit 127.

  The high-speed output unit 125, the medium-speed output unit 126, and the low-speed output unit 127 respectively output secret data to the data acquisition unit 9 for secret data at different speeds. The high-speed output unit 125, the medium-speed output unit 126, and the low-speed output unit 127 output at a relatively high speed, an intermediate speed, and a relatively low speed.

  The switching unit 121 switches whether the secret data output unit 120 outputs the secret data to the data acquisition unit 9 by any one of the high speed output unit 125, the medium speed output unit 126, and the low speed output unit 127. The switching unit 121 determines which type of user (general user or supervisor) the user who has given the output instruction to output the data to the output instruction acquisition unit 130 by the multiple security level authentication unit 140. Or system administrator).

  The three types of security levels and the three types of output speeds described above will be described in more detail below with reference to FIG.

  FIG. 2 is a flowchart illustrating a process in which the information device 1 outputs the secret data 1d to the external data acquisition unit 9.

  In the information device 1, data that can be output only by the system administrator cannot be output to the external data acquisition unit 9 unless the security level authentication unit 140 receives high security level authentication. Protected from theft by theft. On the other hand, data that can be output by the system administrator and supervisor can be output to the data acquisition unit 9 only by receiving an intermediate security level, which may be stolen to some extent. Furthermore, with regard to data that allows the general user to access the output, the data can be output simply by receiving authentication at a low security level, and the risk of the data being stolen increases. It is difficult for this information device 1 to steal a large amount of data, with respect to data that can be output even if the security level authentication unit 140 receives authentication at an intermediate security level or a lower security level. it can.

  In step S1 and steps S2a to S2c, the multiple security level authentication unit 140 authenticates a user who operates the operation panel 14.

  In step S1, the multiple security level authentication unit 140 determines a security level to be authenticated. For example, when only two pieces of authentication information, that is, an ID number and a password, are input to the operation panel 14, the multiple security level authentication unit 140 identifies the user as a general user and performs authentication with a low security level If the card information is input in addition to the ID number and password, it is determined that the user is identified as a supervisor and authentication is performed at an intermediate security level. The ID number, password, and card information are In addition, if a fingerprint image is also input, the user is identified as a system administrator, and it is determined that authentication is performed with a high security level.

  Note that the authentication performed by the multiple security level authentication unit 140 may be authentication at the time of user login to the information device 1. Here, regardless of the security level to be authenticated, the user's ID number is input to the operation panel 14 at the time of authentication. In step S1, the multiple security level authentication unit 140 stores a correspondence relationship between the ID number and the authentication security level, and based on this correspondence relationship, authentication is performed at the security level corresponding to the input ID number. It is good also as determining to do.

  In steps S2a to S2c, whether the user who is authenticated by the multiple security level authentication unit 140 is a system administrator (step S1: system administrator, step S2a) or a supervisor (step S1: supervision). Authentication process at a high security level (step S2a) and authentication at an intermediate security level depending on whether the user is a normal user (step S2b) or a general user (step S1: general user, step S2c) The process (step S2a) and the authentication process (step S2a) at a low security level are shown.

  Note that when authentication is performed at an intermediate security level (step S2b), ID authentication and card authentication need not be performed at the same time, and may be performed at a certain timing. Similarly, when authentication at a high security level is performed (step S2c), it is not necessary to simultaneously perform ID authentication, card authentication, and fingerprint authentication. ID authentication, card authentication, and fingerprint authentication are performed at different timings. In steps S1 and S2a to S2c, as a result, only ID authentication is performed, or both ID authentication and card authentication are performed. By determining whether ID authentication, card authentication, and fingerprint authentication have all been performed, as a result, authentication at a low security level, authentication at an intermediate security level, or at a high security level It is good also as what judges whether it was authenticated.

  In step S3, after the multiple security level authentication unit 140 authenticates the user in steps S1 and steps S2a to S2c, when the user issues an instruction to output secret data from the operation panel 14, the output instruction acquisition unit 130 sets the secret data. The output unit 120 is activated.

  In steps S4 and S5a to S5c, the secret data output unit 120 activated by the output instruction acquisition unit 130 in the previous step S3 outputs secret data.

  The secret data output unit 120 is the user who issued the output instruction acquired in the output instruction acquisition unit 130 in step S3 (step S4: system management) when the user of the system administrator who is authenticated at the high security level in step S2a. If the user who gives the output instruction is the supervisor (step S4: supervisor), the output is made at an intermediate speed (step S5b). If (step S4: general user), output is performed at a low speed (step S5c).

  Here, assuming that the three types of speeds represent speeds by the time taken to output one piece of secret data, for example, as shown in steps S5a to S5c in FIG. Secret data) ”, the intermediate speed is“ 1 (second / secret data) ”, and the slow speed is“ 10 (second / secret data) ”.

  With such an information device 1, when authentication is performed at an intermediate or low security level, the output speed is 1/100 or 1/1000. For example, the authentication is legitimately authenticated at a high security level and output in 1 minute. It takes 1 minute x 100 times = 100 minutes = about 1 hour 40 minutes and 10 minutes x 1000 times = 1000 minutes = 16 hours 40 minutes. Even for data that can be read, theft of data can be made difficult.

  Hereinafter, other embodiments will be described.

  (A) FIG. 3 is a diagram showing that the number of data to be output by the secret data output unit 120 is different among general users, supervisors, and system administrators.

  The general user outputs the data of the secret data group 1dC of the secret data 1d owned by himself / herself among the secret data 1d stored in the secret data storage unit 120.

  The supervisor outputs the secret data 1d of the secret data group 1dC of all general users to be supervised.

  The system administrator outputs the secret data 1d of the secret data group 1dB of all supervisors who use the information device 1.

  As described above, the number of data to be output by the secret data output unit 120 by the general user, the supervisor, and the system administrator is as large as the latter.

  Here, it is assumed that the number of data that the general user, the supervisor, and the system administrator output by the secret data output unit 120 is 10, 100, and 10000, respectively. At this time, as described above in the description of FIG. 2, the slow speed, the intermediate speed, and the fast speed are “10 (second / secret data)”, “1 (second / secret data)”, “0.01”, respectively. In the case of “(second / secret data)”, the data output time is 100 seconds.

  In this way, if the number of data to be output by the secret data output unit 120 by the general user, the supervisor, and the system administrator is as large as the latter, the number of outputs is large, and the system administrator who desires high-speed output, A person who accepts a low-speed output while making a high-speed output (step S5a) can be a general user with a small number of output data and a low-speed output and can improve the convenience for the user.

  The high-speed output unit 125 may output at the highest output speed output by the information device 1.

  (B) As shown in FIG. 1, in addition to what has been described above, the computer 100 further includes a monitoring processing unit 150, and the information device 1 is connected to the monitoring processing unit 150. The monitoring camera 150c is provided.

  The monitoring camera 150c stands in front of the information device 1 and images a user who operates the operation panel 14 or the like. The monitoring camera 150c may be a camera that records a plurality of images continuously over time, that is, a so-called moving image, or that captures still images one by one at a certain distance. There may be.

  The monitoring camera 150c constitutes an example of an “imaging unit” recited in the claims.

  The monitoring processing unit 150 operates the monitoring camera 150c and causes the captured image storage unit 151 to store the user image captured by the monitoring camera 150c.

  The monitoring processing unit 150 operates the monitoring camera 150c from the time when the user authentication is started (step S1) until the user finishes the operation of the information device 1, and the image captured by the monitoring camera 150c is displayed. The captured image storage unit 151 stores the captured image.

  Then, the monitoring processing unit 150 changes the storage period depending on whether the user is identified as a system administrator, a supervisor, or a general user by the multiple security level authentication unit 140 (see step S1). The image of the identified user is stored for a relatively long period, the image of the user identified as the supervisor is stored for an intermediate period, and the user identified as the general user is stored for a relatively short period.

  Hereinafter, of the functions of the monitoring processing unit 150, the part related to the function of changing the image storage period according to the type of user as described above is referred to as a storage mode switching function. Even if the storage mode switching function of the monitoring processing unit 150 is made independent of the monitoring processing unit 150, the monitoring processing unit 150 is configured by only the portion other than the storage mode switching function in the monitoring processing unit 150. Good. At this time, the captured image storage unit 151 is included in the storage mode switching function.

  The captured image storage unit 151 constitutes an example of a “storage unit” described in the claims. Then, this storage mode switching function of the monitoring processing unit 150 or the monitoring processing unit 150 is configured so that “the security in which the user is authenticated by the multi-level authentication unit” of the “multi-level authentication unit” described in the claims. This is an example of a portion related to a function of “saving the image picked up by the user by the image pickup means only in a predetermined period longer as the level is higher”.

  Note that the monitoring processing unit 150 operates the monitoring camera 150c only during a period when user authentication is performed by the multiple security level authentication unit 140 (step S2a, S2b, or S2c), and performs imaging during other periods. It may be stopped.

  Further, the monitoring processing unit 150 may perform imaging only during a period during which the secret data output unit 120 outputs data (steps S5a, S5b, or S5c), and may stop imaging during other periods.

  The monitoring processing unit 150 may capture images in both of the two periods described in the above two paragraphs.

  The monitoring processing unit 150 (or the above-described storage mode switching function of the monitoring processing unit 150) communicates when the user is authenticated at a high security level by the multiple security level authentication unit 140 (step S1: system administrator). Until the operation of the device 1 is completed, the surveillance camera 150c may be made to capture an image with a higher image quality than that when the user is authenticated as a supervisor or a general user (step S1: supervisor, general user). Furthermore, similarly, when the user is authenticated at an intermediate security level by the multiple security level authentication unit 140 (step S1: system administrator), the monitoring processing unit 150 authenticates the user as a general user (step S1). S1: The monitoring camera 150c may be made to take an image with an image quality higher than that of a general user).

  The captured image storage unit 151 may be a RAM or hard disk provided in the computer 100, or may be a functional block including a management function of the RAM or hard disk.

  All or part of the monitoring processing unit 150 (or the saving mode switching of the monitoring processing unit 150) may be configured integrally with the multiple security level authentication unit 140.

  (C) The monitoring processing unit 150 (or saving mode switching of the monitoring processing unit 150) may cause the captured image storage unit 151 to store captured images of any user for the same period.

  (D) The monitoring processing unit 150 and the monitoring camera 150c may not be provided.

  (E) The output instruction acquisition unit 130 is not provided, the process of step S3 is omitted, the user cannot input the output instruction to the information device 1, and immediately after the user is authenticated by the multiple security level authentication unit 140. The data output (steps S5a to S5c) may be performed at an appropriate timing.

  (F) For example, the operation panel 14 is not provided with the card reader 14b and the fingerprint reader 14c, and the multiple security level authentication unit 140 may perform only ID authentication with the numeric keypad 14a. At the time of security level authentication, a relatively long password is obtained from the user using the numeric keypad 14a and authentication is performed using the password. At the time of intermediate security level authentication, an intermediate length password is obtained and authenticated. When performing security level authentication, a relatively short password may be obtained for authentication.

  (G) The multiple security level authentication unit 140 may use fingerprint authentication for authentication at a high security level, card authentication for authentication at an intermediate security level, and ID authentication for authentication at a low security level. That is, in other words, the security level may be switched between high and low or intermediate depending on which of the three types of authentication is performed. The multiple security level authentication unit 140 performs only ID authentication using the ID number and password when the user inputs an ID number and password to the operation panel 14 (low security level authentication). Card authentication may be performed based on information (intermediate security level authentication), and fingerprint authentication may be performed when a fingerprint image is input (high security level authentication).

  (H) The user may be a person who is not at the location of the information device 1 but is away from the information device 1 and operating the computer 92 connected to the information device 1 via the network. In this case, the multiple security level authentication unit 140 may authenticate the user based on information acquired from the computer 92 via the network, and the output instruction acquisition unit 130 may also acquire an output instruction from the computer 92. Good. At this time, the multiple security level authentication unit 140 may perform authentication in which the password length differs depending on the security level as described above.

It is a figure showing the whole information equipment composition concerning one embodiment of the present invention. It is a flowchart which shows the process in which an information device outputs the secret data 1 to an external data acquisition part. It is the figure which showed that the number of the data which a general user, a supervisor, and a system manager output by a secret data output part differs.

Explanation of symbols

1 Information equipment (data management device)
1 dA system administrator secret data 1 dB supervisor secret data 1 dC general user secret data 9 data acquisition unit 14 operation panel (authentication information input means)
14a Numeric keypad 14b Card reader 14c Fingerprint reader 91 USB memory 92 External computer 100 Computer 110 Secret data storage unit (data holding means)
120 Secret data output unit (output means)
121 switching unit 125 high-speed output unit 126 medium-speed output unit 127 low-speed output unit 130 output instruction acquisition unit 140 multiple security level authentication unit (multistage level authentication means)
150 Monitoring processing unit (multi-level authentication means)
150c surveillance camera (imaging means)
151 Captured image storage unit (storage means)

Claims (5)

Data holding means for holding data;
A multi-level authentication means for authenticating a user at a plurality of different security levels;
Output means for outputting the data held in the data holding means to the outside of the data management device at a predetermined speed that is slower as the security level is lower in accordance with the security level authenticated by the multilevel authentication means A data management device comprising: Further comprising authentication information input means for inputting respective authentication information for authenticating the user from a plurality of users;
The data management apparatus according to claim 1, wherein the multi-level authentication unit determines the security level based on authentication information input to the authentication information input unit. The authentication information input means receives a different number of authentication information according to the security level,
The data management apparatus according to claim 2, wherein the multilevel authentication unit evaluates the security level higher as the amount of authentication information input by the user to the authentication information input unit increases.   The data management apparatus according to claim 2, further comprising an imaging unit that images a user who inputs authentication information to the authentication information input unit. Comprising storage means for storing the image of the user imaged by the imaging means;
The multi-level authentication unit causes the storage unit to store an image captured by the imaging unit for a predetermined period as the security level at which the user is authenticated by the multi-level authentication unit is higher. Item 5. The data management device according to Item 4.

Images