JP5015043B2 - Information processing system, information terminal, and program - Google Patents

Description

  The present invention relates to an information processing system that suppresses unauthorized use of data stored in an information terminal that has been lost or stolen by browsing or copying by a third party.

Or misplaced information terminal, when or stolen, or being viewed illegally stored in the information terminal data, resulting in or copied.

Therefore, in order to prevent such unauthorized use, access to store data to the information terminal, access to the information terminal (e.g., ID and password to log in to the terminal) only is a person Limiting is generally done.

JP 2007-336441 A JP 2008-3706 A JP 2000-308126 A

  However, if a third party logs in to the information terminal illegally by some means, there is still a problem that data stored in the information terminal is still browsed or copied.

  Therefore, even if the information terminal is lost or stolen, the present invention is stored in the information terminal as long as the original owner who has access rights to the information terminal is aware of the loss or theft. An object of the present invention is to provide an information processing system capable of remotely deleting stored data.

First information terminal of the present invention, stored in the server, the status of the terminal, to confirm via the network, the status, if they represent a lost or stolen, the predetermined area of the terminal A dummy OS that cannot access the data in the predetermined area, which is different from the main OS that can access the data, is activated, and the data in the predetermined area is forcibly deleted.

A first information processing system according to the present invention includes an information terminal and a server connectable to the information terminal via a network, and the information terminal stores the status of the terminal stored in the server via the network. If the status indicates loss or theft, a dummy OS that cannot access the data in the predetermined area is started, which is different from the main OS that can access the data in the predetermined area of the terminal itself. the forcibly remove data of a predetermined area, wherein the server, based on the operation by the authorized user, characterized by storing said status.

Second information terminal of the present invention, stored in the server, a confirmation means for confirming via the network status of the own terminal, when the status indicates a lost or stolen, given its own terminal Separately from a main OS that can access the data in the area, a dummy OS booting unit that boots a dummy OS that cannot access the data in the predetermined area, and a deletion unit that forcibly deletes the data in the predetermined area It is characterized by that.

The second information processing system of the present invention has an information terminal and a server connectable to the information terminal via a network, and the information terminal stores the status of the terminal stored in the server via the network. A confirmation means for confirming and a dummy OS that cannot access the data in the predetermined area different from the main OS that can access the data in the predetermined area of the own terminal when the status indicates loss or theft. A dummy OS booting unit that boots; and a deletion unit that forcibly deletes data in the predetermined area; and the server includes a storage unit that stores the status based on an operation by a valid user. Features.

In the program of the present invention, the confirmation means stored in the server in the computer confirms the status of the terminal via the network, and the deletion means indicates that the status indicates lost or stolen. Includes a dummy OS start step for starting a dummy OS that cannot access data in the predetermined area, which is different from the main OS that can access the data in the predetermined area of the terminal itself, and forcibly deleting the data in the predetermined area And a deletion step to be performed.

According to the present invention, even if an information terminal is lost or stolen, the third party will be aware if the original owner who has access rights to the information terminal is aware of the loss or theft. It is possible to provide an information processing system that can easily delete data stored in an information terminal from a remote location.

  The best mode for carrying out the present invention will be described below with reference to the drawings. First, the outline of the present embodiment will be briefly described. The information terminal according to the present embodiment refers to whether the theft / lost flag is set on the server after the power is turned on and before the OS is started. If the theft / loss flag is set, the data in the information terminal is deleted. Details will be described below.

  FIG. 1 is a block diagram of an information processing system according to an embodiment of this invention. Referring to FIG. 1, the information processing system according to the embodiment of the present invention includes an information terminal 10, a server 20, and a server access terminal 30 that may be lost or stolen.

  The information terminal 10 includes a user authentication unit 11, a status information processing unit 12, a file transmission unit 13, a secret information storage unit 14, a file deletion unit 15, an OS user authentication unit 16, a dummy OS activation unit 17, and an end unit 18. Have.

  The server 20 includes a user authentication unit 21, a state information registration unit 22, a state information storage unit 23, an information transmission unit 24, an owner information storage unit 25, and a save file storage unit 26.

  Next, the operation of the information processing system of this embodiment will be described. FIG. 2 is a flowchart for explaining the operation of the present embodiment.

  Referring to FIG. 2, when an operator (user or third party) turns on the information processing terminal 10 (PC) (step S1), the user authentication unit 11 indicates that the information terminal 10 is connected to the Internet. It is confirmed whether it is present (step S2). If the information terminal 10 is not connected to the Internet, the information terminal 10 cannot proceed to the subsequent processing.

  In step 2, if the information terminal 10 is not connected to the Internet, the user authentication unit 11 prompts the operator to connect to the Internet using a screen (step S3). On the other hand, if it is determined in step S2 that the information terminal 10 is connected to the Internet, the user authentication unit 11 automatically transmits authentication data to the server 20 (step S4). Here, the authentication data to be transmitted is, for example, an ID unique to the information terminal 10 and may be anything as long as the information terminal 10 can be specified. The information terminal 10 has an access destination such as a URL of the server 20 in advance.

  In step S4, the authentication data sent from the user authentication unit 11 is received by the user authentication unit 21 of the server 20 (step S5).

  Next, based on the received authentication data, the user authentication unit 21 determines whether or not the information terminal 10 is operated by a valid user (step S6). Hereinafter, operations and the like related to the process of step S6 will be described in detail.

  Referring to FIG. 1, when there is a suspicion of loss or theft, an authorized user of the information terminal 10 logs in to the server 20 using the server access terminal 30 (any terminal that can access the server). Whether or not this login is possible is made by authentication by the user authentication unit 21. Note that it is not necessary to have the same ID or password as the login to the information terminal 10 described later. Next, a legitimate user registers a lost / stolen flag in the server 20 indicating that the information terminal 10 has been lost / stolen from the server access terminal 30. This registration is performed by the state information registration unit 23, and the lost / stolen flag is set in the state information storage unit 24 in association with the ID of the information terminal 10. The owner information storage unit 25 stores information for the user to log in to the server 20, the ID of the information terminal of the user, and notification destination information (described later) for the user in association with each other.

  Here, returning to the description of the processing after step S6 in FIG. 2, the information transmitting unit 24 of the server 20 determines whether or not the aforementioned lost / stolen flag is set for the information terminal 10. 23, the information is transmitted to the information terminal 10. At the same time, if the lost / stolen flag is set in the state information storage unit 23, the information is notified to a predetermined contact address of a legitimate user (step S6). A legitimate user knows that a third party is operating the information terminal 10 by receiving this notification.

  Next, the state information processing unit 12 of the information terminal 10 confirms the information received from the information transmission unit 24 of the server 20 (step S7), and if the lost / stolen flag is not set, the screen of the information terminal 10 The operator is prompted to log in (for example, with an ID or password) (step S8).

  The OS user authentication unit 16 determines whether or not the login information input in step S8 is correct (step S9). If the login information is not correct, the OS user authentication unit 16 notifies the operator, for example, by displaying that fact ( Step S10) If the login information is correct, the main OS is normally activated (Step S11). It should be noted that when reaching the step S11 (normal activation), the lost / stolen flag is not set and the information terminal 10 is logged in normally, that is, it is very likely that the operation is performed by a legitimate owner. high.

  Next, in step S7, if the state information processing unit 12 shows that the information received from the information transmission unit 24 of the server 20 indicates that the lost / stolen flag is set, the dummy OS activation unit 17 Activates the dummy OS, and displays the screen as if the OS was normally started (step S12). Note that the file system is restricted so that the secret information storage unit 14 cannot be accessed when the dummy OS is activated.

  In step S7, when the state information processing unit 12 indicates that the information received from the information transmission unit 24 of the server 20 indicates that the lost / stolen flag is set, the file transmission unit 13 In conjunction with the above-described activation of the dummy OS, the rescue designation folder (may be a drive or a file) stored in the secret information storage unit 14 is referred to in the background of the dummy OS (step S13), and the rescue designation folder is displayed. It is determined whether there is a file (step S14). The rescue designation folder stored in the secret information storage unit 14 can be designated in advance by the user.

  If it is determined in step S14 that there is a file in the rescue designated folder, the file transmission unit 13 sequentially transmits the file to the server 20 (copy and deletion after copying) (step S15).

  Next, in step S15, the file transmitted from the file transmission unit 13 is stored in the saved file storage unit 26 of the server 20 in association with the ID of the information terminal 10 (step S16). When the transmission of all files to the server is completed (step S16), the file transmission unit 14 notifies the server 20 of movement completion information (step S17), and the server 20 that has received this information (step S18) This is notified to the user's predetermined contact information. The file received from the information terminal 10 is stored in the save file storage unit 26 and can be taken out from the server access terminal 30.

  Next, the state information registration unit 22 of the server 20 sets a flag indicating that the movement is completed in the state information storage unit 23 (step S19). In this case, the information transmitted from the server 20 to the information terminal 10 in step S6 described above is information indicating the completion of movement, and the information terminal 10 that has received the information does not perform processing subsequent to step S7.

  Further, the file deletion unit 15 of the information terminal completely erases the data by overwriting meaningless data in the data area of the secret information storage unit 14 (step S20, not shown). Next, the end unit 18 of the information terminal 10 turns off the information terminal 10.

  As described above, according to the present embodiment, since data is moved to the server in the background while the dummy OS is activated, it is difficult for a third party to notice and the file of the information terminal 10 can be moved to the server. Have In addition, since the area where the transferred file is stored can be completely erased, for example, by being overwritten with meaningless data, data browsing and theft by a third party can be suppressed.

  In the embodiment described above, the file has been moved to the server 20, but it is not necessary to retrieve it. However, if it is desired to delete the data anyway, the server 20 has a lost / stolen flag in step S7 described above. If it is determined that it is set, step S20, that is, complete deletion of data can be executed immediately. In this case, a legitimate user may register the status in which the information terminal 10 operates as described above from the server access terminal 30 in the server 20. With such a configuration, even if the information terminal 10 is disconnected from the Internet during the movement of data to the server 20, the deletion is performed, which is significant.

  In step S15, copying of data to the server and deletion after copying are sequentially performed. However, only copying (not deleting) can be performed, and complete deletion in subsequent step S20 can be omitted. Of course, a legitimate user may register the status in which the information terminal 10 operates in this manner from the server access terminal 30 in the server 20.

  In this way, it is possible to save the trouble of returning data when returning to hand. In such an embodiment, when there are a plurality of legitimate users, that is, when the information terminal 10 is shared and used, it is determined that there is a possibility that one of them may be lost or stolen. It is meaningful if

  It should be noted that in the embodiment described above, the above-described statuses (deletion only, copy only, both copy and deletion) can be changed sequentially.

1 is a block diagram of an information processing system according to an embodiment of this invention. It is a flowchart for demonstrating operation | movement of this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Information terminal 11 User authentication part 12 State information processing part 13 File transmission part 14 Secret information preservation | save part 15 File deletion part 16 OS user authentication part 17 Dummy OS starting part 18 Termination part 20 Server 21 User authentication part 22 State information registration part 23 Status information storage unit 24 Information transmission unit 25 Owner information storage unit 26 Saved file storage unit 30 Server access terminal

Claims (5)

The status of the terminal stored in the server is confirmed via the network. If the status indicates loss or theft, it is different from the main OS that can access the data in the predetermined area of the terminal. An information terminal that starts a dummy OS that cannot access data in the predetermined area and forcibly deletes the data in the predetermined area. An information terminal and a server connectable to the information terminal via a network;
The information terminal checks the status of the terminal stored in the server via the network, and can access data in a predetermined area of the terminal if the status indicates loss or theft. Start a dummy OS that cannot access the data in the predetermined area, separate from the main OS, and forcibly delete the data in the predetermined area.
The information processing system, wherein the server stores the status based on an operation by a legitimate user. Confirmation means for confirming the status of the terminal stored in the server via the network,
When the status indicates loss or theft, a dummy OS activation means for activating a dummy OS that cannot access the data in the predetermined area, different from the main OS that can access the data in the predetermined area of the terminal itself And an information terminal for forcibly deleting the data in the predetermined area. An information terminal and a server connectable to the information terminal via a network;
The information terminal stores the confirmation means stored in the server for confirming the status of the terminal through the network, and accesses data in a predetermined area of the terminal when the status indicates loss or theft. A dummy OS booting unit that boots a dummy OS that is inaccessible to the data in the predetermined area, and a deletion unit that forcibly deletes the data in the predetermined area;
The information processing system according to claim 1, wherein the server includes a storage unit that stores the status based on an operation by a legitimate user. On the computer,
A confirmation step of confirming the status of the terminal stored in the server via the network;
When the status indicates loss or theft, the deletion unit activates a dummy OS that cannot access the data in the predetermined area, different from the main OS that can access the data in the predetermined area of the terminal itself. A program characterized by causing a dummy OS activation step and a deletion step to forcibly delete data in the predetermined area.

Images