JP4947487B2 - Information management host, information management apparatus, and information processing program - Google Patents

Description

  The present invention relates to an information management host, an information processing apparatus, an information management system, an information management apparatus, and an information processing program that transmit encrypted information via a network.

  Patent Document 1 describes an invention relating to an address book management device, in which address book data created by the address book management device is distributed to user terminals registered as members in the address book management device. Yes. This address book management device has a mail server function, and a destination held and used by the user terminal is registered in the address book management device by transmitting an e-mail including the address to the address book management device.

  Here, the route for registering destinations held and used by the managed user terminal in the address book management device and the route for registering the address book integrated / created by the address book management device in the managed user terminal are convenient. And maintainability are ensured.

Japanese Patent Application No. 2000-356102

  However, there is a problem in that the operation in which the destination table includes the password is not assumed, and the confidentiality cannot be secured if the operation is performed including the password. In other words, when outputting a destination table or the like to the outside, the password is not written or simply encoded and written. For this reason, there is a problem in convenience in the former, and a problem occurs in secrecy in the latter.

  The present invention has been made to solve such problems. That is, the present invention provides a common key generating means for generating a common key that is a common encryption key for information processing apparatuses connected to a network, and information processing for the common key generated by the common key generating means via the network. An information management host comprising: a common key registration unit that registers in the apparatus; and a common key deletion unit that deletes the common key after the common key is registered in the information processing apparatus by the common key registration unit.

  In addition, the information management host includes an information acquisition unit that acquires information from an information processing device connected to the network, and a network to the information processing device that is the acquisition destination or other information processing device that acquires information by the information acquisition unit. Information registration means for registering information via the information registration means, and when the information registration means registers information in the information processing apparatus of the acquisition destination or other information processing apparatus, an encrypted password included in the information Is registered without being decrypted.

  In addition, the information management host is provided with information acquisition means for acquiring information from an information processing apparatus connected to the network, and information update means for updating information acquired by the information acquisition means. If the information encrypted password is updated, it is replaced with the password that is to be updated, and if the information updated by the information updating means is sent to the information processing device, the encrypted password is decrypted. To send without.

  The information management host is provided with information creating means for creating information and information registration means for registering information including a plain text password created by the information creating means in the information processing apparatus via the network. .

  Further, the present invention uses information creation means for creating information including a password, a common key holding means for holding a common key sent from a management host connected to the network, and a common key held by the common key holding means The information processing apparatus includes a common key encryption unit that encrypts information created by the information creation unit, and an information output unit that outputs the information encrypted by the common key encryption unit to the outside.

  The information processing apparatus is provided with information input means for inputting information from the outside. If the password included in the information input by the information input means is encrypted by the common key encryption means, the information is input. If the password is plain text, the information is stored after the password is encrypted by the common key encryption means.

  In addition, the present invention includes an information management host connected to a network and an information processing apparatus connected to the network, and the information management host generates a common key that is a common encryption key to the information processing apparatus. This is an information management system that registers, erases the common key after registration, and the information processing apparatus encrypts information using the common key registered from the information management host.

  Further, in this information management system, when a plurality of information processing devices are connected to the network, the information management host registers the common key in the plurality of information processing devices, and one information processing device among the plurality of information processing devices is registered. The device encrypts information using a common key, and the other information processing device among the plurality of information processing devices decrypts the information encrypted by the one information processing device with the common key.

  In addition, the information management apparatus and the information processing apparatus in the information management system are each provided with a communication path encryption unit that encrypts a mutual communication path.

  The present invention also provides a common key generating means for generating a common key, which is a common encryption key for information processing apparatuses connected to the network, and information processing for the common key generated by the common key generating means via the network. An information management apparatus comprising: a common key registration unit that registers in the apparatus; and a common key deletion unit that deletes the common key after the common key is registered in the information processing apparatus by the common key registration unit.

  In addition, the information management apparatus includes an information acquisition unit that acquires information from an information processing apparatus connected to the network, and an information processing apparatus that acquires information by the information acquisition unit, or another information processing apparatus. Information registration means for registering information via the information registration means, when the information registration means registers information in the information processing apparatus of the acquisition destination or other information processing apparatus, the encrypted password included in this information is stored. It is registered without being decrypted but encrypted.

  In addition, the information management device includes an information acquisition unit that acquires information from an information processing device connected to the network, and an information update unit that updates information acquired by the information acquisition unit. If the information encrypted password is updated, it is replaced with the password that is to be updated, and if the information updated by the information updating means is sent to the information processing device, the encrypted password is decrypted. To send without.

  In addition, the information management device includes an information creation unit that creates information, and an information registration unit that registers information including a plaintext password created by the information creation unit in the information processing device via the network. Is.

  The present invention also provides an information creating means for creating information including a password, a common key holding means for holding a common key sent from an information management host connected to the network, and a common key held by the common key holding means. The information management apparatus includes a common key encryption unit that encrypts information generated by the information generation unit and an information output unit that outputs the information encrypted by the common key encryption unit to the outside.

  Further, the information management device is provided with information input means for inputting information from the outside, and the password included in the information input by the information input means is encrypted by the common key encryption means The information is held as it is, and when the password is plain text, the information is held after the password is encrypted by the common key encryption means.

  The present invention also includes a step of generating a common key that is a common encryption key for information processing devices connected to the network, a step of registering the generated common key in the information processing device via the network, An information processing program for executing, in an information processing apparatus, a step of deleting a common key after registering the key in the information processing apparatus.

  Also, in this information processing program, information is acquired from an information processing apparatus connected to the network, and information is registered via the network to the information processing apparatus from which the information is acquired or another information processing apparatus In the step of registering information in the information processing apparatus of the acquisition destination or another information processing apparatus, the encrypted password included in this information is registered without being decrypted. is there.

  In addition, the information processing program includes a step of acquiring information from an information processing apparatus connected to the network and a step of updating the acquired information, and the encrypted password is updated in the step of updating information. In this case, the password is replaced with the password to be updated, and when the updated information is transmitted to the information processing apparatus, the encrypted password of the information is transmitted without being decrypted.

  In addition, the information processing program includes a step of creating information and a step of registering information including the plain text password created in the step with the information processing apparatus via a network.

  The present invention also includes a step of creating information including a password, a step of holding a common key sent from an information management host connected to the network, and encrypting the information created using the held common key. An information processing program for executing a step and a step of outputting encrypted information to the outside by an information processing apparatus.

  In addition, the information processing program includes a step for inputting information from the outside. If the password included in the information input in the step is encrypted, the information is retained as it is. If the password is plaintext, Information is retained after the password is encrypted.

  According to the present invention, there are the following effects. In other words, by registering the common key generated by the information management host in the information processing device, even if the information handled by the information processing device includes a password, it is possible to write the password encrypted with the common key. Therefore, it is possible to ensure convenience and confidentiality. Further, by generating and registering the common key by the information management host without fixing the common key at the time of shipment of the apparatus, it is possible to further improve the confidentiality in the system.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the present embodiment, a destination table will be described as an example of information including a password. Here, the destination table is used when a transmission destination is designated in a service for transmitting image data read by the scanner as a file to the transmission destination. The destination table password is a password required for authentication of the file server when the transmission destination is the file server.

  FIG. 1 is a diagram illustrating a configuration of an information management system according to the present embodiment. That is, the information management system of this embodiment includes one or more information processing apparatuses 2 (information processing apparatuses A and B in the example shown in FIG. 1) connected to the network N, and an information management host 1 that manages the information processing apparatuses 2. Consists of

  In the information management system of the present embodiment, the information management host 1 generates a common key, which is a common encryption key, registers it in the information processing apparatus 2, and deletes the common key after registration. The method is characterized in that information is encrypted using a common key registered from the information management host 1. That is, when a plurality of information processing apparatuses A and B are connected to the network N, the same common key is registered in the plurality of information processing apparatuses A and B via the network N from the information management host 1, and after registration, The common key generated in the information management host 1 is deleted. In subsequent handling of information, only the information processing apparatuses A and B are performed by encryption and decryption using the common key.

  FIG. 2 is a block diagram showing the configuration of the management host. The user operation unit 101 is a user interface unit that receives an operation from a user and notifies / displays a user operation result. The common key generation unit 102 generates a common key that is an encryption key that is commonly used by information processing apparatuses in the system. The common key registration unit 103 transmits a request for registering the generated common key to the information processing apparatus via the network.

  The common key deleting unit 104 is a part for deleting the generated common key so that it cannot be used by the information management host 1. The destination table editing unit 105 performs processing for setting a destination item and creating a new destination table or updating an existing destination table. The destination table holding means 106 is a part that holds the destination table therein.

  The destination table acquisition unit 107 transmits a request for acquiring a destination table to the information processing apparatus via the network. The destination table registration unit 108 transmits a request for registering a destination table to the information processing apparatus via the network. The communication path encryption unit 109 encrypts the communication path with the information processing apparatus.

  FIG. 3 is a block diagram illustrating a configuration of the information processing apparatus. The user operation unit 201 is a user interface unit that receives an operation from the user and notifies / displays a user operation result. The common key holding unit 202 holds the common key transmitted to be registered by the management host.

  The common key encryption unit 203 encrypts the password of the destination table using the held common key according to an appropriate encryption algorithm. The destination table editing unit 204 sets a destination item and creates a new destination table or updates an existing destination table. The destination table holding unit 205 holds the destination table therein. The destination table input unit 206 takes in the destination table transmitted in response to the registration request from the management host, via the network, and holds it in the destination table holding unit 205.

  In response to the acquisition request from the management host, the destination table output unit 208 takes out the destination table held in the destination table holding unit 205 and transmits it via the network. The communication path encryption unit 208 encrypts the communication path with the management host.

  FIG. 4 is a sequence diagram showing a procedure of processing (information management program) for collectively setting common keys in the information management system. By the operation of the user 4 in step S401, the common key generation unit 102 of the information management host 1 generates a common key in step S402, and the common key registration unit 103 performs the processing from step S403 to step S408 to connect to the network N. The common key is registered in all the information processing apparatuses 2 (in this case, the information processing apparatuses A and B).

  After the registration of the common key is completed, the common key deleting unit 104 deletes the common key in the process of step S409, and notifies the user 4 of the end of the process in step S410. From step S401 to step S410, an environment using a unique common key can be constructed as an information management system.

  FIG. 5 shows a procedure of processing (information management program) for backing up and restoring the destination table created by the information processing apparatus A by the information management host 1 and processing for copying and setting the information processing apparatus B (information management program). It is a sequence diagram.

  First, in step S501, the user 4 sets a destination item including a password. Next, in step S502, the common key encryption unit 203 of the information processing apparatus A encrypts the password with the common key, and then newly registers a destination table in step S503. In step S504, the user 4 stores the destination table. Notify the end of the creation process.

  The next step S505 to step S508 is a procedure of processing in which the information management host 1 acquires the destination table created by the information processing apparatus A. At this time, the password of the acquired destination table cannot be decrypted by the information management host 1. This is because the information management host 1 deletes the issued common key.

  Next, when the user 4 tries to register the destination table acquired from the information processing apparatus A in the information processing apparatus A in steps S509 to S510, the information processing apparatus A has already received the password of the destination table transmitted in step S511. The encrypted address is detected, the already registered destination table is updated to the transmitted destination table in step S512, and the end of the process is notified to the user 4 in steps S513 to S514.

  By performing steps S505 to S508 and steps S509 to S514, backup / restoration of the destination table in the same information processing apparatus can be realized while ensuring confidentiality.

  Next, steps S515 to S520 are a procedure of processing for registering the destination table acquired from the information processing apparatus A in the information processing apparatus B. Through steps S505 to S508 and steps S515 to S520, a copy of the destination table between the different information processing apparatuses A and B can be realized while ensuring confidentiality. That is, it is possible to handle information encrypted using the common key registered only in the information processing apparatuses A and B.

  FIG. 6 is a sequence diagram showing a procedure of processing (information management program) in which the destination table created by the information processing apparatus A is acquired by the information management host, edited, and re-registered. Steps S <b> 601 to S <b> 604 are processing procedures for acquiring the destination table created by the information processing apparatus A using the management host 1. Here, the password of the acquired destination table cannot be decrypted by the information management host 1. This is because, as described above, the information management host 1 erases the common key from the information management host 1 after issuing the common key.

  Therefore, in step S605, the user 4 resets the destination item including the password. In step S606, the information processing apparatus A replaces the reset plain password with the previous encrypted password, and in step S607. The user 4 is notified of the end of the address book update process.

  Steps S608 to S613 are processing procedures for re-registering the updated destination table in the information processing apparatus A. That is, when the user 4 tries to register the destination table changed by the user 4 in the information processing apparatus A in steps S608 to S609, the information processing apparatus A detects that the password of the destination table transmitted in step S610 is equal. Then, encryption is performed using the common key in step S611, the already registered destination table is updated to the transmitted destination table in step S612, and the end of the process is notified to the user 4 through steps S613 to S614. Through steps S601 to S614, the destination table created by the information processing apparatus A can be updated by the information management host 1 while ensuring confidentiality.

  FIG. 7 is a sequence diagram illustrating a procedure of processing (information management program) for registering the destination table created by the information management host in the information processing apparatus A. That is, steps S701 to S702 are a procedure of processing in which the user 4 creates a destination table on the information management host 1.

  In step S703 to step S704, when the user 4 tries to register the destination table created by the information management host 1 in the information processing apparatus A, the information processing apparatus A uses the password of the destination table transmitted in step S705 as being equal. In step S706, the password is encrypted with the common key, the destination table is registered in step S707, and the end of processing is notified to the user 4 in steps S708 to S709.

  In the description of the above embodiment, the destination table is taken as an example of information including the password. However, other than the destination table, instructions, confidential box information, user information, and the like can be given. In any case, according to the present embodiment, it is possible to achieve both confidentiality of the password and convenience of information sharing when the password is included in the information.

It is a figure which shows the structure of the information management system which concerns on this embodiment. It is a block diagram which shows the structure of a management host. It is a block diagram which shows the structure of information processing apparatus. It is a sequence diagram which shows the procedure of the process which sets a common key collectively within an information management system. FIG. 11 is a sequence diagram illustrating a processing procedure when backing up and copying a destination table created by the information processing apparatus A. FIG. 12 is a sequence diagram illustrating a procedure of processing for acquiring, editing, and re-registering a destination table created by the information processing apparatus A with an information management host. FIG. 11 is a sequence diagram illustrating a processing procedure for registering a destination table created by an information management host in the information processing apparatus A.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Information management host, 2 ... Information processing apparatus, 4 ... User, 101 ... User operation means, 102 ... Common key generation means, 103 ... Common key registration means, 104 ... Common key deletion means, 105 ... Destination table editing means, 106 ... Destination table holding means, 107 ... Destination table acquisition means, 108 ... Destination table registration means, 109 ... Communication path encryption means, 201 ... User operation means, 202 ... Common key holding means, 203 ... Common key encryption means, 204 ... Destination table editing unit, 205 ... Destination table holding unit, 206 ... Destination table input unit, 207 ... Destination table output unit, 208 ... Communication path encryption unit, N ... Network

Claims (6)

A common key generating means for generating a common key that is a common encryption key for information processing apparatuses connected to the network;
Common key registration means for registering the common key generated by the common key generation means in the information processing apparatus via the network;
After the common key is registered in the information processing apparatus by the common key registration means, the common key erasing means for erasing the common key;
Information acquisition means for acquiring information from an information processing apparatus connected to the network;
Information registration means for registering the information via the network in an information processing apparatus or other information processing apparatus from which the information has been acquired by the information acquisition means;
When registering the information in the information processing apparatus of the acquisition destination or another information processing apparatus by the information registration unit, the encrypted password included in the information is registered without being decrypted. An information management host characterized by that. A common key generating means for generating a common key that is a common encryption key for information processing apparatuses connected to the network;
Common key registration means for registering the common key generated by the common key generation means in the information processing apparatus via the network;
After the common key is registered in the information processing apparatus by the common key registration means, the common key erasing means for erasing the common key;
Information acquisition means for acquiring information from an information processing apparatus connected to the network;
Information updating means for updating the information acquired by the information acquisition means,
When updating the encrypted password of the information by the information update means, replace with the password of the equivalent to be updated,
An information management host, wherein when the information updated by the information update means is transmitted to the information processing apparatus, the encrypted password of the information is transmitted without being decrypted. A common key generating means for generating a common key that is a common encryption key for information processing apparatuses connected to the network;
Common key registration means for registering the common key generated by the common key generation means in the information processing apparatus via the network;
After the common key is registered in the information processing apparatus by the common key registration means, the common key erasing means for erasing the common key;
Information acquisition means for acquiring information from an information processing apparatus connected to the network;
Information registration means for registering the information via the network in an information processing apparatus or other information processing apparatus from which the information has been acquired by the information acquisition means;
When registering the information in the information processing apparatus of the acquisition destination or another information processing apparatus by the information registration unit, the encrypted password included in the information is registered without being decrypted. An information management apparatus characterized by that. A common key generating means for generating a common key that is a common encryption key for information processing apparatuses connected to the network;
Common key registration means for registering the common key generated by the common key generation means in the information processing apparatus via the network;
After the common key is registered in the information processing apparatus by the common key registration means, the common key erasing means for erasing the common key;
Information acquisition means for acquiring information from an information processing apparatus connected to the network;
Information updating means for updating the information acquired by the information acquisition means,
When updating the encrypted password of the information by the information update means, replace with the password of the equivalent to be updated,
When transmitting the information updated by the information updating means to the information processing apparatus, the information management apparatus transmits the encrypted password of the information without decrypting it. Generating a common key that is a common encryption key for information processing devices connected to the network;
Registering the generated common key with the information processing apparatus via the network;
Erasing the common key after registering the common key in the information processing apparatus;
Obtaining information from an information processing device connected to the network;
Causing the computer to execute the step of registering the information via the network with the information processing apparatus from which the information is acquired or another information processing apparatus,
In the step of registering the information in the information processing apparatus of the acquisition destination or another information processing apparatus, an information processing program that registers the encrypted password included in the information as it is without being decrypted. Generating a common key that is a common encryption key for information processing devices connected to the network;
Registering the generated common key with the information processing apparatus via the network;
Erasing the common key after registering the common key in the information processing apparatus;
Obtaining information from an information processing device connected to the network;
Causing the computer to execute the step of updating the acquired information;
When updating the encrypted password in the step of updating the information, replace it with the password of the equivalent to be updated,
An information processing program that transmits the encrypted password of the information without decrypting the updated information when transmitting the updated information to the information processing apparatus.

Images