JP4933822B2 - Data erasing system, management server, data erasing method and program - Google Patents

Description

  The present invention relates to a data erasing system, a management server, a data erasing method, and a program.

  When a PC (personal computer) on which data such as personal information and company information is recorded is discarded and recycled, it is necessary to erase the data recorded on the hard disk in order to prevent information leakage.

  However, even if data is erased by using a function of the OS (Operating System) of the PC, the erased file may remain on the hard disk. Therefore, it may be possible to easily restore the erased data later using dedicated software or the like.

  For this reason, software and systems are used to erase data so that data recorded on the hard disk cannot be restored later.

For example, there is a data erasing system disclosed in Patent Document 1. In the system, first, the PC to be erased is activated by a dedicated activation disk. Then, when the PC executes the erasing program transmitted from the management server, the data recorded on the hard disk is appropriately erased so that it cannot be restored later.
JP 2003-256283 A

  However, in the case of erasing data of a plurality of PCs such as companies with the data erasing system as described above, it is necessary to insert a dedicated boot disk into all the PCs and manually turn on the PC to start up. It was troublesome.

  In addition, there are PCs from which an FDD (flexible disk drive) or CD-ROM drive is physically removed, and PCs from which input / output with an external storage device is blocked for reasons such as security management. In the case of such a PC, since it is impossible to insert the dedicated boot disk itself, the data erasing system described above cannot erase data.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a data erasing system, a management server, a data erasing method, and a program capable of erasing PC data by an efficient method.

In order to achieve the above object, a data erasing system according to the first aspect of the present invention provides:
A data erasing system in which a user terminal that stores arbitrary data in a rewritable storage device and a management server that manages the user terminal are connected via a network,
The management server
Identifying means for identifying the user terminal from which data is erased;
A boot program transmitting means for transmitting a boot program for starting the user terminal to the user terminal specified by the specifying means;
An activation determining means for determining that the user terminal is activated by the boot program transmitted by the boot program transmitting means;
Erasure program transmitting means for transmitting to the user terminal an erasure program for erasing data from the storage device of the user terminal whose activation has been confirmed by the activation determining means,
The user terminal is
Boot program receiving means for receiving the boot program transmitted by the boot program transmitting means;
An activation unit that executes the boot program received by the boot program reception unit and activates the user terminal;
An erasure program receiving means for receiving an erasure program sent from the management server by the erasure program sending means after being activated by the activating means;
An erasing program executing means for executing the erasing program received by the erasing program receiving means and erasing data stored in its own storage device ;
When the erasure program execution means executes the erasure program, it acquires dump information of the own storage device, and stores the dump information in its own memory before dump information recording means;
After the erasing program execution means finishes executing the erasing program, obtains dump information of the own storage device, and stores the dump information in the own memory after dumping information recording means,
After the erasure dump information recording means stores the dump information in its own memory, the dump information before execution of the erasure program stored in the own memory by the pre-erase dump information recording means, and the erasure Dump information transmitting means for transmitting to the management server dump information after execution of the erasure program stored in the self memory by the post dump information recording means ,
The management server
Dump information storage means for storing dump information before execution of the erasure program sent from the user terminal by the dump information transmission means and dump information after execution of the erasure program in a predetermined location;
It is characterized by that.

For example, in the data erasing system,
The management server further includes power input means for inputting power of the user terminal specified by the specifying means,
The boot program transmitting means transmits the boot program to the user terminal specified by the specifying means and to which power is input by the power input means,
The boot program receiving unit may receive the boot program transmitted by the boot program transmitting unit after power is input by the power input unit .

In order to achieve the above object, the management server according to the second aspect of the present invention provides:
A management server connected via a network to a user terminal that stores arbitrary data in a rewritable storage device,
Boot program storage means for storing a boot program for starting the user terminal;
Erasing program storage means for storing an erasing program for erasing data from the storage device of the user terminal;
Identifying means for identifying the user terminal from which data is erased;
The prior SL user terminal identified by the identifying means, and the boot program transmitting means for transmitting the boot program boot program stored in the storage means,
An activation determining means for determining that the user terminal is activated by the boot program transmitted by the boot program transmitting means;
An erasure program transmitting means for transmitting an erasure program stored in the erasure program storage means to the user terminal whose activation has been confirmed by the activation determining means;
An erasure determination means for determining that the erasure program transmitted by the erasure program transmission means is executed in the user terminal and the data stored in the storage device of the user terminal is erased;
The dump information of the storage device of the user terminal before execution of the erase program and the dump information of the storage device of the user terminal after execution of the erase program are received from the user terminal that has executed the erase program. Dump information receiving means for
Dump information storage means for storing the dump information before execution of the erasure program received by the dump information reception means and dump information after execution of the erasure program at a predetermined location;
It is characterized by providing.

In order to achieve the above object, a data erasing method according to the third aspect of the present invention includes:
A data erasing method in a system in which a user terminal that stores arbitrary data in a rewritable storage device and a management server that manages the user terminal are connected via a network,
A specifying step of specifying the user terminal from which data is to be deleted in the management server;
Before SL user terminal identified by the identifying step, and the boot program transmitting step of transmitting a boot program for starting the user terminal from the management server,
A boot program receiving step of receiving at the user terminal the boot program sent from the management server by the boot program sending step;
Executing the boot program received by the boot program receiving step to start the user terminal ; and
An activation determination step of determining at the management server that the user terminal has been activated by the activation step;
An erasure program transmitting step for transmitting an erasure program for erasing data from the storage device of the user terminal confirmed to be activated by the activation determination step from the management server to the user terminal;
An erasing program receiving step of receiving at the user terminal an erasing program sent from the management server in the erasing program sending step;
An erasure program executing step of executing the erasure program received by the erasure program receiving step and erasing data stored in a storage device of the user terminal ;
When executing the erasing program by the erasing program execution step, the dump information before erasure recording step of acquiring dump information of the storage device of the user terminal and storing the dump information in the memory of the user terminal; ,
After the execution of the erasure program by the erasure program execution step, the dump information after erasure recording step of acquiring dump information of the storage device of the user terminal and storing the dump information in the memory of the user terminal When,
The dump before executing the erasure program stored in the memory of the user terminal after the dump information is stored in the memory of the user terminal by the dump information recording step after the erasure, and stored in the memory of the user terminal by the dump information recording step before the erasure Dump information sending step for sending information and dump information after execution of the erase program stored in the memory of the user terminal by the dump information recording step after erase to the management server;
Dump information storage that receives the dump information before execution of the erasure program and the dump information after execution of the erasure program sent from the user terminal in the dump information transmission step and stores them in a predetermined location. Comprising steps ,
It is characterized by that .

In order to achieve the above object, a program according to the fourth aspect of the present invention provides:
To a computer connected via a network with a user terminal that stores arbitrary data in a rewritable storage device,
A specific step of identifying the user terminal from which data is erased;
Before SL user terminal identified by the identifying step, and the boot program transmitting step of transmitting a boot program for starting the user terminal,
An activation determination step of determining that the user terminal has been activated by the boot program transmitted by the boot program transmission step;
An erasure program transmitting step for transmitting to the user terminal an erasure program for erasing data from the storage device of the user terminal whose activation has been confirmed by the activation determination step;
An erasure determination step for determining that the erasure program transmitted in the program transmission step is executed in the user terminal and the data stored in the storage device of the user terminal is erased;
The dump information of the storage device of the user terminal before execution of the erase program and the dump information of the storage device of the user terminal after execution of the erase program are received from the user terminal that has executed the erase program. Dump information receiving step to perform,
Dump information storage step for storing the dump information before execution of the erase program and the dump information after execution of the erase program received in the dump information reception step before deletion, in a predetermined location;
Is executed.

  A data erasing system according to an embodiment of the present invention will be described below with reference to the drawings.

  As shown in FIG. 1, the data erasing system according to the embodiment of the present invention includes a management PC 1 and user PCs 3 (user PCs 3a to 3d). The management PC 1 and each user PC 3 are connected to a LAN (Local Area Network) 2.

  The management PC 1 functions as a management server and controls the entire data erasing system. The management PC 1 is arranged in a management headquarters or the like of a company and is operated by a specific administrator or the like. As shown in FIG. 2, the management PC 1 includes a control unit 11, a hard disk 12, a memory 13, an input unit 14, a display unit 15, and a communication unit 16.

  The control unit 11 includes a CPU (Central Processing Unit), a peripheral LSI (Large Scale Integration), and the like, and controls the entire management PC 1 by executing a program such as a data erasing process described later.

  The hard disk 12 stores a program that defines data erasure processing, which will be described later, and stores a boot image for starting up the user PC 3 and an erasure target PC management table 121 shown in FIG.

  The erasure target PC management table 121 shown in FIG. 3 is a table for managing the user PC 3 as a data erasure target. As shown in FIG. 3, the erasure target PC management table 121 includes information such as computer name, serial number, MAC address (Media Access Control Address), erasure classification, erasure date / time, dump file before erasure, and dump file after erasure. It is.

  The computer name is a name given to each user PC 3 and is unique information for identifying each user PC 3 in the LAN 2. The serial number indicates a number uniquely assigned to each user PC 3. The MAC address is unique information set in a NIC (Network Interface Card) or the like of each user PC 3. The computer name, serial number, and MAC address are used for authentication of the user PC 3 that is the object of data erasure in the data erasure process described later.

  The erasure classification represents a state relating to erasure of data of each user PC 3 relating to data erasure. Here, for the user PC 3 registered as a data erasure target in the erasure target PC management table 121 by the erasure PC registration process described later, the value of the erasure classification is set to 1 (erase reservation). When data erasure is executed by a data erasure process described later, the value of the erasure classification is updated to 9 (erased). The erasure date / time represents the date / time when data is erased, and a data erasure process (to be described later) is executed on the erasure date / time.

  The dump file before erasure and the dump file after erasure store information indicating the result (dump file) of dumping the contents of the hard disk 12 of the user PC 3 before and after the data erasure process described later is executed.

  Returning to FIG. 2, the memory 13 includes a RAM (Random Access Memory) or the like, and serves as a work area for processing performed by the control unit 11.

  The input unit 14 includes a mouse, a keyboard, and the like, and transmits input information from the user to the control unit 11.

  The display unit 15 includes a display device and the like, and displays various information regarding the data erasing system under the control of the control unit 11.

  The communication unit 16 includes a modem, a router, and the like, and exchanges information with the user PC 3 via the LAN 2. For example, the communication unit 16 transmits an activation notice and an erasure program to the user PC 3, and the identification information (computer name, serial number, MAC address) of the user PC 3 sent from the user PC 3 that is the target of data erasure. And delete date information.

  Returning to FIG. 1, the user PC 3 is a general-purpose electronic computer or the like having a communication function. For example, the user PC 3 is arranged in a company and operated by a general employee or the like. The user PC 3 is basically the same as the configuration of the management PC 1 shown in FIG. 2 described above, although there are some differences depending on the model and the like. That is, the user PC 3 also includes a control unit, a hard disk, a memory, an input unit, a display unit, and a communication unit. Further, the user PC is not provided with a device for inserting an external medium such as an FDD or a CD-ROM drive. Since the user PC 3 is used for business in a company, various information is stored in its hard disk.

  Next, the operation of the data erasing system according to the embodiment of the present invention will be described. The data erasure system according to the embodiment of the present invention is actually based on information registered in the erasure PC registration process and a process of registering the user PC 3 that performs data erasure in the management PC 1 (erase PC registration process). It consists of two processing systems for erasing data recorded on the PC (data erasing process). Hereinafter, operations of the erase PC registration process and the data erase process will be described.

(Erase PC registration process)
The operation of the erase PC registration process will be described.
When an instruction to display the deletion PC registration screen is transmitted to the control unit (not shown) of the user PC 3 by a user operation or the like in the user PC 3, the data deletion PC shown in the flowchart of FIG. Registration processing is performed.

  First, the user PC 3 acquires identification information (computer name, serial number, MAC address) of the user PC 3 (step S201). Then, the user PC 3 displays a data erasure PC registration screen as shown in FIG. 6 on the display unit (not shown) of the user PC 3 (step S202). Note that the identification information (computer name, serial number, MAC address) acquired in step S201 is displayed on this screen.

  Next, when the user inputs a scheduled deletion date and time on this screen and presses the enter button, the user PC 3 transmits a data deletion registration notification to the management PC 1 (FIG. 4, step S203). For example, the user PC 3 includes, in the information indicating that the user PC 3 is a data erasure target, the identification information (computer name, serial number, MAC address) of the user PC acquired in step S201, and the user A data erasure registration notification added with the erasure scheduled date / time information input by the above is transmitted to the management PC 1 via the LAN 2 or the like. Thus, the erasure PC registration process at the user PC 3 is completed.

  The management PC 1 that has received the data erasure registration notification transmitted from the user PC 3 uses the identification information (computer name, serial number, MAC address) and scheduled erasure date / time information included in the data erasure registration notification as the erasure target PC. The management table 121 is recorded in association with the computer name, serial number, MAC address, and deletion date. At this time, 1 (scheduled to be erased) is recorded as the value of the erase category (step S101). Then, the registration process in the management PC 1 ends.

(Data deletion process)
Next, the operation of the data erasing process will be described.
First, the management PC 1 waits for subsequent processing until the erase date and time set in the erase target PC management table 121 matches the current date and time (step S301; No). If the current date and time match the erase date and time set in the erase schedule (step S301; Yes), the administrator PC transmits a packet including an activation command to the user PC 3 with the erase date and time set. (Step S302).

  When the user PC 3 receives the packet including the activation command transmitted from the management PC 1, the user PC 3 is turned on (step S 401), and information indicating that a boot image is requested is transmitted to the management PC 1 (step S 401). S402).

  When receiving information requesting a boot image from the user PC 3, the management PC 1 transmits the boot image stored in the hard disk 12 to the user PC 3 (step S303).

  When receiving the boot image transmitted from the management PC 1, the user PC 3 activates the user PC 3 using the boot image (step S403). Then, the user PC 3 transmits information indicating that the activation of the user PC 3 is completed and identification information (computer name, serial number, MAC address) of the user PC 3 to the management PC 1 (step S404).

  When the management PC 1 receives information indicating that the activation of the user PC 3 is completed from the user PC 3, the management PC 1 authenticates the user PC 3 (step S304). That is, the management PC 1 uses the identification information (computer name, serial number, MAC address) transmitted from the user PC 3 together with information indicating that the activation of the user PC 3 is completed as the user who transmitted the activation command in step S302. It is determined whether or not the identification information of the PC 3 (obtained by referring to the erasure target PC management table 121) matches, and the user PC 3 is authenticated.

  Next, when the management PC 1 authenticates the user PC 3, the management PC 1 transmits an erasing program to the user PC 3 (step S305). If the user PC 3 is not authenticated in the authentication of the user PC 3 in step S305, the management PC 1 ends the data erasing process as it is.

  When the user PC3 receives the erasing program transmitted from the management PC1, the user PC3 stores the received program in its own memory (step S405). Then, the user PC 3 dumps the contents of its own hard disk and saves the dump file in its own memory (step S406). Thereafter, the user PC 3 executes the erasure program stored in its own memory in step S405, and erases the data on its own hard disk (step S407). This data is erased by a known method such as overwriting the entire hard disk several times with new data to make the original data and its location indistinguishable.

  When the erasure of data is completed, the user PC 3 dumps the contents of its own hard disk and stores the dump file in its own memory (step S408). Then, the user PC 3 generates an erasure completion notification and transmits it to the management PC 1 (step S409). For example, the user PC 3 includes the identification information (computer name, serial number, MAC address) of the user PC 3 as information indicating that the data erasure is completed, and the user PC 3 before and after the data erasure acquired in steps S406 and S408, respectively. An erasure completion notification with the hard disk dump file added is transmitted to the management PC 1. Above, the process in user PC3 is complete | finished.

  The management PC 1 updates the erasure target PC management table 121 and the like according to the received erasure completion notification (step S306). That is, the management PC 1 updates the erasure classification corresponding to the identification information (computer name, serial number, MAC address) included in the erasure completion notification in the erasure target PC management table 121. That is, the corresponding erasure category is 9 (erased). Further, the management PC 1 stores the dump files before and after the deletion included in the deletion completion notification, and stores information indicating the location of the dump file in the deletion target PC management table 121. Thus, the process in the management PC 1 ends.

  As described above, in the data erasure system according to the embodiment of the present invention, when erasing data, the user PC 3 is turned on and activated remotely from the management PC 1 to execute the data erasure process of the user PC 3. The user PC 3 does not need to perform any special operation, and can perform the erasure process by centrally managing from the management PC 1. Further, when erasing data, it is not necessary to start up the user PC 3 using an external medium such as a dedicated boot disk. Therefore, data erasure processing is also performed for the user PC 3 into which the external medium cannot be inserted. Can be done.

  Further, in the data erasure system according to the embodiment of the present invention, the user PC 3 to be erased registers in the management PC 1 in advance, and the identification information is stored in the management PC 1. Since the user PC 3 is authenticated based on the identification information, it is possible to prevent the data of the user PC 3 that is not a deletion target from being deleted by mistake.

  In addition, the data erasure system according to the embodiment of the present invention transmits the hard disk dump file before and after data erasure to the management server and stores the data after the data erasure processing is completed. By operating and checking the contents of the dump file, it is possible to refer to the results before and after erasing the data.

The present invention is not limited to the one shown in the above embodiment, and various modifications and applications are possible.
For example, in the above embodiment, based on the data erasure date / time information transmitted from the user PC, the management server performs the data erasure processing of the user PC at that date / time. The date / time information may be set, and based on the date / time information, the data erasure process of the user PC may be performed at the date / time.

  Further, for example, in the above-described embodiment, during the data erasing process, the user PC is remotely input from the management PC, and then the user PC is activated using the boot image transmitted from the management server. The user may input the power supply of the user PC, and then the user PC may be activated using the boot image transmitted from the management server.

1 is a schematic diagram illustrating an example of a data erasing system according to an embodiment of the present invention. It is a block diagram which shows an example of a structure of management PC. It is a schematic diagram which shows an example of the deletion object PC management table memorize | stored in the hard disk of management PC. It is a flowchart for demonstrating the deletion PC registration process performed with the data deletion system which concerns on embodiment of this invention. It is a flowchart for demonstrating the data erasure | elimination process performed with the data erasure | elimination system which concerns on embodiment of this invention. It is a schematic diagram which shows an example of the data deletion PC registration screen displayed on the display part of user PC.

Explanation of symbols

1 management PC
2 LAN
3 User PC
DESCRIPTION OF SYMBOLS 11 Control part 12 Hard disk 13 Memory 14 Input part 15 Display part 16 Communication part

Claims (5)

A data erasing system in which a user terminal that stores arbitrary data in a rewritable storage device and a management server that manages the user terminal are connected via a network,
The management server
Identifying means for identifying the user terminal from which data is erased;
A boot program transmitting means for transmitting a boot program for starting the user terminal to the user terminal specified by the specifying means;
An activation determining means for determining that the user terminal is activated by the boot program transmitted by the boot program transmitting means;
Erasure program transmitting means for transmitting to the user terminal an erasure program for erasing data from the storage device of the user terminal whose activation has been confirmed by the activation determining means,
The user terminal is
Boot program receiving means for receiving the boot program transmitted by the boot program transmitting means;
An activation unit that executes the boot program received by the boot program reception unit and activates the user terminal;
An erasure program receiving means for receiving an erasure program sent from the management server by the erasure program sending means after being activated by the activating means;
An erasing program executing means for executing the erasing program received by the erasing program receiving means and erasing data stored in its own storage device ;
When the erasure program execution means executes the erasure program, it acquires dump information of the own storage device, and stores the dump information in its own memory before dump information recording means;
After the erasing program execution means finishes executing the erasing program, obtains dump information of the own storage device, and stores the dump information in the own memory after dumping information recording means,
After the erasure dump information recording means stores the dump information in its own memory, the dump information before execution of the erasure program stored in the own memory by the pre-erase dump information recording means Dump information transmitting means for transmitting to the management server dump information after execution of the erasure program stored in the self memory by the post dump information recording means ,
The management server
Dump information storage means for storing dump information before execution of the erasure program sent from the user terminal by the dump information transmission means and dump information after execution of the erasure program in a predetermined location;
A data erasing system characterized by that.   The management server further includes power input means for inputting power of the user terminal specified by the specifying means,
  The boot program transmitting means transmits the boot program to the user terminal specified by the specifying means and to which power is input by the power input means,
  The boot program receiving means receives a boot program transmitted by the boot program transmitting means after power is input by the power input means;
  The data erasing system according to claim 1. A management server connected via a network to a user terminal that stores arbitrary data in a rewritable storage device,
Boot program storage means for storing a boot program for starting the user terminal;
Erasing program storage means for storing an erasing program for erasing data from the storage device of the user terminal;
Identifying means for identifying the user terminal from which data is erased;
The prior SL user terminal identified by the identifying means, and the boot program transmitting means for transmitting the boot program boot program stored in the storage means,
An activation determining means for determining that the user terminal is activated by the boot program transmitted by the boot program transmitting means;
An erasure program transmitting means for transmitting an erasure program stored in the erasure program storage means to the user terminal whose activation has been confirmed by the activation determining means;
An erasure determination means for determining that the erasure program transmitted by the erasure program transmission means is executed in the user terminal and the data stored in the storage device of the user terminal is erased;
The dump information of the storage device of the user terminal before execution of the erase program and the dump information of the storage device of the user terminal after execution of the erase program are received from the user terminal that has executed the erase program. Dump information receiving means for
Dump information storage means for storing the dump information before execution of the erasure program received by the dump information reception means and dump information after execution of the erasure program at a predetermined location;
A management server comprising: A data erasing method in a system in which a user terminal that stores arbitrary data in a rewritable storage device and a management server that manages the user terminal are connected via a network,
A specifying step of specifying the user terminal from which data is to be deleted in the management server;
Before SL user terminal identified by the identifying step, and the boot program transmitting step of transmitting a boot program for starting the user terminal from the management server,
A boot program receiving step of receiving at the user terminal the boot program sent from the management server by the boot program sending step;
Executing the boot program received by the boot program receiving step to start the user terminal ; and
An activation determination step of determining at the management server that the user terminal has been activated by the activation step;
An erasure program transmitting step for transmitting an erasure program for erasing data from the storage device of the user terminal confirmed to be activated by the activation determination step from the management server to the user terminal;
An erasing program receiving step of receiving at the user terminal an erasing program sent from the management server in the erasing program sending step;
An erasure program executing step of executing the erasure program received by the erasure program receiving step and erasing data stored in a storage device of the user terminal ;
When executing the erasing program by the erasing program execution step, the dump information before erasure recording step of acquiring dump information of the storage device of the user terminal and storing the dump information in the memory of the user terminal; ,
After the execution of the erasure program by the erasure program execution step, the dump information after erasure recording step of acquiring dump information of the storage device of the user terminal and storing the dump information in the memory of the user terminal When,
The dump before executing the erasure program stored in the memory of the user terminal after the dump information is stored in the memory of the user terminal by the dump information recording step after the erasure, and stored in the memory of the user terminal by the dump information recording step before the erasure Dump information sending step for sending information and dump information after execution of the erase program stored in the memory of the user terminal by the dump information recording step after erase to the management server;
Dump information storage that receives the dump information before execution of the erasure program and the dump information after execution of the erasure program sent from the user terminal in the dump information transmission step and stores them in a predetermined location. Comprising steps ,
A data erasing method characterized by the above. To a computer connected via a network with a user terminal that stores arbitrary data in a rewritable storage device,
A specific step of identifying the user terminal from which data is erased;
Before SL user terminal identified by the identifying step, and the boot program transmitting step of transmitting a boot program for starting the user terminal,
An activation determination step of determining that the user terminal has been activated by the boot program transmitted by the boot program transmission step;
An erasure program transmitting step for transmitting to the user terminal an erasure program for erasing data from the storage device of the user terminal whose activation has been confirmed by the activation determination step;
An erasure determination step for determining that the erasure program transmitted in the program transmission step is executed in the user terminal and the data stored in the storage device of the user terminal is erased;
The dump information of the storage device of the user terminal before execution of the erase program and the dump information of the storage device of the user terminal after execution of the erase program are received from the user terminal that has executed the erase program. Dump information receiving step to perform,
Dump information storage step for storing the dump information before execution of the erase program and the dump information after execution of the erase program received in the dump information reception step before deletion, in a predetermined location;
A program for running

Images