JP5453141B2 - Important information management system - Google Patents

Description

  The present invention relates to copy management of confidential information and the like, and more particularly to an important information management system that manages from copy management to storage, unauthorized take-out check, and disposal.

  For example, in office work in offices, the number of operations input on a PC increases, and information such as documents, tables and management data input by an operator on a PC is stored as electronic data in a database such as a PC or a server. In general, important confidential information including a customer list and personal information is stored and managed in a directory dedicated to confidential information. For such computerized data stored in a specific directory, many security management techniques such as access control such as passwords and encryption of data itself have been proposed. However, once data digitized from a directory is printed or stored in a storage medium such as a USB memory, a CD, or a DVD and copied, these copy media are things, so management techniques are required as things. . Conventionally, a management system using an electronic tag is known as a technique for managing such an object.

  For example, in Patent Document 1 and Patent Document 2, a gate device that attaches a non-contact tag to a storage medium such as a CD, DVD, MO, or USB memory or a notebook PC as a take-out management target and reads tag information from the non-contact tag Is installed at each gate, and when passing the gate based on the tag information read from the non-contact IC tag that is passed by the gate device, it is determined that the passage is possible or the passage is not permitted. It describes an asset management system that prohibits passage if any.

  Also, in Patent Document 3, the personal information input is registered in the personal information management DB at the window terminal, the information specifying the registered personal information and the customer email address are converted into a QR code, and the identification card is used. The personal information document with the read image and the QR code pasted is printed, and when the personal information document is discarded in the discarding device, the QR code is read from the personal information document and analyzed, and the analysis result is specified. Information that deletes personal information from the personal information management DB, discards the personal information document, and deletes the personal information from the personal information management DB, then notifies the customer using the customer email address in the QR code. A management system has been proposed.

  In Patent Document 4, an RFID (non-contact tag) is attached to a document, the document is registered with a unique identification number and the document name of the document, and the document name can be read from the document by character recognition. Based on the document name, the identification number read from the RFID attached to the document, and the registration result, the matching between the document and the RFID attached to the document is checked, and if not, a warning is given. A document having a configuration in which a document to which the RFID is attached is locked and stored, and the document is unlocked based on input user information and security information recorded in a plurality of RFIDs attached to the stored document. A management system is described.

JP 2008-52696 A JP 2008-52311 A JP 2008-140053 A JP 2006-183412 A

  Patent Document 1 and Patent Document 2 are intended to monitor the taking-out of assets that are not permitted by the asset manager and prevent unauthorized take-out. It is not a monitoring target. However, even in the office, if a document on which important information is printed is in a state where it is in public contact, leakage of confidential information becomes a problem, and even if the confidential information is stored in a USB memory or the like, If it is copied to, it will be easily duplicated and there is a risk of easily leaking outside. Patent Document 3 manages personal information so that the personal information is deleted from the personal information management DB when the personal information document is discarded. There is a danger of being read.

  In this regard, Patent Document 4 sets a document on which important information is printed in advance as a management target, attaches an RFID (non-contact tag), and uses an RFID in a storage rule according to the security level of the document in the office. Although it is restricted or taken out, the confidential information stored in the server or PC is monitored, and it is not monitored whether the confidential information is printed or copied to a storage medium. . However, in offices, a large amount of digitized data is often stored in a single server for centralized management, and digitized data stored in a directory dedicated to confidential information is passwords or encrypted. Although access is restricted by the above, it is more efficient to view information from a client PC operated by an employee in the office, print it on paper for meetings and meetings, or take it out as information stored in a USB memory. Management of important information copied in the office has become an important issue. In other words, when confidential information is copied from a directory where important information is stored to a client PC operated by an employee, it is copied even if it is not copied to a “thing” such as a printed document or a medium such as a USB memory. If the important information remains copied to the employee's client PC, there is a risk that the confidential information will spread indefinitely. Thus, the important information copied from the directory dedicated to the important information is strictly limited. It has a problem that it cannot be managed.

  The present invention has been made in view of the above problems, and always monitors whether or not important information is copied from a directory in which important information is stored. The purpose is to provide an important information management system capable of strictly managing the lifetime.

  The important information management system according to claim 1 is a directory for storing digitized important information, a client PC accessible to the directory, and a duplicate identification to be pasted on a duplicate of the digitized information stored in the directory. Electronic tag, personal identification electronic tag for identifying an accessor accessing the directory from the client PC, and each of the above-mentioned installed at the gate of at least the duplicate storage facility and the duplicate destruction facility Reading means for reading an electronic tag; a PC or server including the directory; a client PC; and a management server to which each electronic tag and the reading means are connected via a communication network. Collect access logs to and check whether the important information has been copied A log collection and analysis unit for defining, a rule setting unit that defines the lifetime of the copy according to the security level of the accessor as a part of the handling rule, and a database for storing update information of the copy, When it is determined that a duplicate has been generated by the log collection and analysis unit, an administrator having administrator authority is requested to attach an electronic tag to the duplicate, and the requested administrator, the accessor, and the duplicate are requested. The electronic tag information is associated and stored in the database as update information related to the copy and managed centrally, and an erase flag is recorded as update information when the important information is erased. The erasing flag is reset by.

  The important information management system according to claim 2, wherein the management server receives a copy application from the accessor's client PC, and extracts the lifetime of the copy according to the accessor's security level from the rule setting unit. Output to the accessor.

  The important information management system according to claim 3 is characterized in that the management server performs processing for outputting an alarm or / and an alarm for a duplicate whose term has expired in accordance with the existence management of the duplicate.

  The important information management system according to claim 4, wherein the duplicate is a printed document or a storage medium, a crushing means for mechanically crushing the printed document or the storage medium, and an erasing device for erasing data stored in the storage medium. It is characterized by providing.

  According to the important information management system of the present invention, the digitized information stored in the directory to be monitored as important information is always monitored by monitoring the access log for the digitized information, and the access log is analyzed and copied. If it is determined that the electronic tag is attached, a request for attaching the electronic tag to the duplicate is output to the administrator. Thereafter, the distribution of the duplicate can be managed by the electronic tag, and the replica of the duplicate and the electronic It is possible to specify a person who handles a copy by a tag and a manager of the copy, and manage the copy, a replicator and a manager who handle the copy, in association with each other using an electronic tag. Furthermore, the copied important information can strictly manage the lifetime of the copied important information according to the security level of the replicator.

It is a system configuration diagram in one example of the present invention. It is a flowchart which shows a prior preparation process same as the above. It is a flowchart which shows the process at the time of taking out important information same as the above. It is a flowchart which shows the process of the important information brought in from the outside same as the above. It is a flowchart which shows the process at the time of taking out important information same as the above. It is a flowchart which shows the process at the time of return of important information same as the above. It is a flowchart which shows the process which deletes important information same as the above. It is a flowchart which shows the process which discards important information same as the above.

  Embodiments as the best mode for carrying out the present invention will be described below with reference to FIGS. Of course, it goes without saying that the present invention can be easily applied to other than those described in the embodiments without departing from the spirit of the invention.

  Hereinafter, the configuration of the important information management system in the present embodiment will be described. In the present embodiment, a case where a USB memory and a CD-R are assumed as a print document and a storage medium on which important information is printed as a management object of a duplicate will be described, but the present invention is not limited to these. Applicable to various replicas.

  FIG. 1 is an overall configuration diagram of an important information management system according to the present embodiment. The important information management system stores a server 1 for storing digitized information and important information among the digitized information stored in the server 1. Are copied (taken out) by a directory 2 for management, a management client PC (personal computer) 3 operated by an administrator A having at least administrator authority, and applicants (accessors) B, C. A client PC (personal computer) 4 for applying for permission, a printed document 5 in which electronically important information stored in the directory 2 is copied as an object, and a USB memory 6 as a portable recording medium , CD-R7, these print documents 5, USB memory 6, electronic tag 8 to be attached to CD-R7, print document 5 with electronic tag 8, USB memo 6. Disposal processing chamber as a destruction facility in which an important information storage 9 equipped with an electronic lock as a storage facility for storing the CD-R 7 and a crusher 10 for mechanically destroying the printed document 5 and the CD-R 7 are installed. 11. Reading means 12 for reading the information stored in the electronic tag 8 and the identification information of the individual (employee) including the applicant and administrator who are the accessor, the important information storage 9 and the building such as the office The entrance / exit management device 13 installed in the entire gate, the management of electronic important information stored in the directory 2, the acceptance processing of the copy application sent from the application client PC 4, and the taking out and storage of the copy, The management server 20 includes a management server 20 that performs disposal management and the like. The management server 20 includes the server 1, the management client PC 3, the application client PC 4, and the reader. They are connected to each other via the 12 and internal communications network 15.

  The electronic tag 8 is composed of an RFID chip (mu chip) having a wireless function, stores an ID at the time of shipment from the factory, and is an ID information by the electronic tag 8 attached to a duplicate and a system user. In addition, important information is managed in association with identification information unique to each applicant. Here, identification information for specifying the administrator and the applicant is required, and in this embodiment, the electronic tag 8a is also used for the identification information for specifying the administrator and the applicant. For example, an electronic tag 8a is attached to a name badge (name plate or the like), and the electronic tag 8a and the electronic tag 8 attached to the print document 5, the USB memory 6, and the CD-R 7 are read out means 12 (muchip reader). , The printed document 5 or the USB memory 6 or the CD-R 7 on which the important information is copied, the applicants B and C who handle the document, and the administrator A are associated with each other, and the security level of the applicants B and C Management according to

  The management server 20 includes a log collection analysis unit 21, a management information input request unit 22, an information takeout management unit 23, and an information deletion unit 24. The log collection analysis unit 21 always includes an access log of the server 1 including the directory 2. The directory 2 (server 1) log is collected, the log is analyzed, and the important information stored in the directory 2 is copied to the application client PC 4 or printed from the application client PC 4 It is determined whether the document 5 is printed or stored in a portable recording medium such as the USB memory 6 or the CD-R 7. The management information input requesting unit 22 is a client for application so as to input predetermined information such as information required for application, for example, application target, purpose of take-out, important information copy (duplication) target, copy (duplication) destination, etc. Output to PC4. In addition, the information take-out management unit 23 applies the electronic tag 8 and the electronic tags of the applicants B and C attached to the duplicate for the requested duplicate (print document 5, USB memory 6, CD-R7). 8a and the electronic tag 8a of the administrator A are managed in association with each other.

  Further, the management server 20 includes an asset management DB (database) 25 for storing asset management information. In the asset management DB 25, rule settings for registering an asset management ledger 26 and rules for handling the assets are set. 27, a log storage unit 28 for storing logs, and a log analysis unit 29 for analyzing the logs of the log storage unit 28, and outputs a compliance report 30 based on the analysis result of the log analysis unit 29.

  The management client PC 3 and the application client PC 4 enter the user ID and password and access through personal authentication, and the application client PC 4 makes an application for copying or taking out important information to the management server 20 via the internal communication network 15. Do. The management server 20 receives an application from the application client PC 4 and manages important information according to the handling rules registered in the rule setting unit 27 of the asset management DB 25. Further, even when there is no copy or take-out application from the application client PC 4, the log collection analysis unit 21 can identify the application client PC 4 (applicants B and C) from the access log of the directory 2. .

  A series of operations of the management server 20 of the present embodiment configured as described above will be described with reference to the flowcharts of FIGS. In the operation of the important information management system, as shown in FIG. 2, as an advance preparation process (step S1), first, an electronic tag 8a is attached to the important information handlers (including employees and dispatchers) who are applicants B and C. The identification information of the electronic tag 8a and the important information handler (employee) are registered in association with each other (step S2), and the important information management directory is designated (step S3). Also, the attribute-specific rules corresponding to the security levels of applicants B and C (important information handlers) and detection methods for the important information management directory 2 are specified, and these are registered in the rule setting unit 27 as important information handling rules. (Step S4). In addition, although it does not specifically limit as a method of providing the electronic tag 8a to the information handler (including manager A) who is the applicants B and C, for example, it is pasted on a name badge (name plate) or the like.

  Next, the processing for extracting important information will be described with reference to FIG. The log collection / analysis unit 21 of the management server 20 monitors the access log of the important information management directory 2, and when the information retrieval log is detected (step S10), the PC that has accessed the important information management directory is identified from the access log. Then, an update request for the manager A is transmitted to the management client PC 3 by e-mail or the like so that the application client PC 4 as the PC records information in the management ledger 26 that the information in the important information management directory 2 has been extracted. To do. Further, the management information input request unit 22 of the management server 20 sends copy information, copy destination information, information extraction period (lifetime), etc. to the application client PC 4 (accessor) who has extracted the information of the important information management directory 2. Outputs a message prompting you to enter application information necessary for managing important information. The information take-out management unit 23 determines whether or not the application information input by the applicants (accessors) B and C matches the handling rules according to the security levels of the applicants B and C. In this case, the conditions permitted within the security levels of the applicants B and C, for example, the number of days in the lifetime are returned to the application client PC 4 (accessor PC) by e-mail or the like (step S12) and matched. If there is, the input copy information, copy destination information, and information extraction period (lifetime period) are recorded as update information in the management ledger 26 (step S13). Further, the log collection / analysis unit 21 analyzes the access log of the application client PC 4, specifies the copy destination of the important information extracted from the important information management directory, and determines whether or not the copy destination is the application client PC 4. If it is the application client PC 4 (accessor PC) (step S14) (Yes in step S14), the information extraction period (lifetime) is monitored. However, when the copy destination is a “thing” such as the USB memory 6, the CD-R 7, or the print document 5 printed from the application client PC 4 (No in step S 14), the electronic tag to the management target for the administrator A 8 is sent to the management client PC 3 by e-mail or the like (step S15). Accordingly, the printed document 5 printed from the important information management directory, the electronic tag 8 pasted on the USB memory 6 and the CD-R 7 on which important information is recorded, the applicants (accessors) B and C, and the administrator A The electronic tag 8a is associated with each other and managed according to the handling rules of the applicants B and C. In addition, the log collection / analysis unit 21 of the management server 20 monitors the read signal of the reading means 12 (muchip reader) provided at the gate of the important information storage 9 and prints the document 5 taken out as “thing”, USB memory 6. It is determined whether or not the CD-R 7 is stored in the important information storage 9 according to a predetermined handling rule. That is, when important information to be managed is extracted from the important information management directory 2 as the print document 5, the USB memory 6, and the CD-R 7, the information extraction flag is recorded as update information in the management ledger 26, and the applicants B and C Alternatively, the electronic tag 8a assigned to the administrator A and the electronic document 8 attached to the printed document 5, the USB memory 6, and the CD-R 7 are read by a reading means 12 (muchip reader) provided at the gate of the important information storage 9. At the time of reading, the information retrieval flag recorded in the management ledger 26 is reset. The period until this information retrieval flag is reset is set as a handling rule according to the security level of the applicants B and C, and if there is no reading signal of the reading means 12 (muchip reader) within the determined period, An alarm or warning message is output to the client PC 4 or the management client PC 3 or both. On the other hand, when a reading signal of the reading means 12 (muchip reader) is output within a predetermined period, the information extraction flag recorded in the management ledger 26 is reset, and the extracted important information is stored in the important information storage. An update request for the manager A is transmitted to the management client PC 3 by e-mail or the like so as to record the information indicating that the goods have been received in the management ledger 26 (step S16).

  Next, processing of important information brought in from outside will be described with reference to FIG. When important information is brought in from outside (step S20), the electronic tag 8 is pasted on the management object (step S21), and the administrator A, the applicant B, Record C information and flag for bringing in important information. The electronic tag 8a assigned to the manager A or the applicants B and C and the electronic tag 8 attached to the management object were read by the reading means 12 (mu chip reader) provided at the gate of the important information storage 9. The carry-in flag recorded in the management ledger 26 at that time is reset, and information for managing the brought-in management object and information that the management object has entered the important information storage are recorded in the management ledger 26. Then, an update request for the manager A is transmitted to the management client PC 3 by e-mail or the like (step S22).

  Next, processing when taking out important information will be described with reference to FIG. When taking out the printed document 5 printed from the important information management directory 2 or the USB memory 6 or the CD-R 7 on which important information is recorded (step S30), the takeout applicants B and C take out to the management server 20. Apply (important information take-out procedure). At the time of take-out application, the name of the take-out person, the type of the take-out (print document 5, USB memory 6, CD-R 7), take-out destination, and take-out period are input. At this time, if the copy is an existing copy stored in the important information storage 9, the management number of the corresponding copy is input and recorded (updated) in the management ledger 26 as a take-out flag. On the other hand, when the important information to be managed is newly printed from the important information management directory 2 on the print document 5 or stored in the USB memory 6 or CD-R 7 and taken outside, the same processing as step S15 in FIG. 3 is performed. That is, a request for attaching the electronic tag 8 to the management object to the manager A is transmitted to the management client PC 3 by e-mail or the like, and the electronic tag 8 attached to the print document 5, USB memory 6 or CD-R 7 The electronic tags 8a of the take-out applicants B and C are associated with each other and managed according to the handling rules of the take-out applicants B and C (step S31). Further, the information take-out management unit 23 of the management server 20 determines whether the take-out application information input by the take-out applicants B and C matches the handling rules according to the security levels of the take-out applicants B and C. If there is no match, the conditions allowed within the security level of the take-out applicants B and C, for example, the number of days of the take-out period are returned to the application client PC 4 by e-mail or the like. In the management ledger 26, the name of the take-out person, the carry-out (print document 5, USB memory 6, CD-R 7), take-out destination, and take-out period are recorded as update information, and the take-out flag is recorded. Further, a message to the effect that permission is given to the take-out applicants B and C is returned to the application client PC 4 by e-mail or the like (step S32). In addition, the log collection / analysis unit 21 monitors the gate passage log of the entrance / exit management device 13 installed at the gate such as an office and the read signal of the reading means 12 (muchip reader), and the gate passage log of the entrance / exit management device 13. If there is a read signal (read signal) from the reading means 12, the read signal matches the read signal of the electronic tag 8a of the applicants B and C, and the print document 5, USB memory 6, CD- It is determined whether the read signal of the electronic tag 8 of R7 is the permitted electronic tag 8 (step S34). If the read signal of the electronic tag 8a of the applicants B and C matches the read signal of the permitted electronic tag 8 (Yes in step S34), the print document 5 to be monitored, the USB memory 6 The fact that the CD-R 7 is being taken outside is recorded as update information in the management ledger 26 (step S35), and thereafter, the time limit management until the monitoring target is returned is continued. On the other hand, if the read electronic tag 8 to be monitored is an unauthorized electronic tag 8 (No in step S34), control is performed so as to block the passage from the entrance / exit management device 13, and to the guards. A notification, a warning light such as a so-called patrol lamp, and an alarm by an alarm buzzer are performed (step S36).

  Next, processing when returning important information will be described with reference to FIG. The management server 20 manages the return deadline of the important information in which the take-out flag is recorded (step S40), and within the return deadline, from the reading means 12 of the entry / exit management device 13 to the monitored print document 5, USB memory 6, CD -It is monitored whether there is a read signal of the electronic tag 8 of R7 (step S41), and when there is a read signal of the print document 5, USB memory 6, and electronic tag 8 of the CD-R7 within the return deadline. An update request for the manager A is transmitted to the management client PC 3 by e-mail or the like so as to record that the take-out flag is reset and the management object is returned to the management ledger 26 (step S42). On the other hand, if there is no read signal of the print document 5 to be monitored, the USB memory 6 or the electronic tag 8 of the CD-R 7 before the return deadline, an alarm or warning is output to the application client PC 4 or the management client PC 3.

  Processing for deleting important information registered as a management target will be described with reference to FIG. When the important information (digitized information) itself registered as important information in the important information directory 2 is discarded (step S50), an access log for the important information is searched (step S51), and the important information is copied The current status of the duplicate is confirmed, and it is determined whether or not the duplicate has been erased (step S52). If the result of this determination is that it has not been erased (No in step S52), an erase flag is recorded in the management ledger 26 (step S52), and the applicant B who has copied the important information to be deleted to the application client PC4 , C is sent a mail requesting the destruction (deletion) of the duplicate. In response to this request, the applicants B and C mechanically destroy the copy or erase the memory, reset the deletion flag and update the management ledger 26 (step S54).

  Next, with reference to FIG. 8, a process of mechanical destruction or storage erasure for a copy of important information will be described. When the important information registered as the management target is copied to the application client PC 4, the retention period is set as a handling rule according to the security level of the applicant in step S 12, and the deadline management of the important information is performed according to the lifetime. . In particular, the important information in which the erasure flag is recorded in step S52 is obliged to discard the duplicate. When the important information is discarded (step S60), the administrator A who has administrator authority is always present or the administrator A himself destroys the target copy. Further, when discarding, the electronic tags 8a of the applicants B and C for destruction, the tag 8a of the administrator A, and the electronic tag 8 attached to the duplicate to be discarded are read by the reading means 12 provided in the disposal processing chamber 11 and discarded. It is checked whether it is a target (step S61). In addition, it is checked whether or not the object to be discarded can be rewritten (step S62). On the other hand, if it is the USB memory 6 (Yes in step S621), the information erasing unit 24 performs a process of softly erasing the storage in the USB memory 6 (step S64). After confirming the mechanical destruction of the printed document 5 and the CD-R 7 or the software erasure of the storage in the USB memory 6, the administrator A destroyed the administrator's electronic tag 8 a and the crusher 10 as a destruction completion procedure. The printed document 5 and the CD-R 7 are taken out and the electronic tag 8a is read by the reading means 12 (step S65). When this read signal is detected by the log collection analysis unit 21, the erasure flag is reset and the management ledger 26 is stored. Update (step S66).

  As described above, in the important information management system of the present invention, it is determined that the digitized information monitored as important information is always monitored by monitoring the access log for the electronic data and analyzing the access log. Then, the electronic tag 8 is immediately attached to the duplicate, and thereafter, the circulation of the duplicate can be managed by the electronic tag 8. This enables strict security management even when the information is copied without knowing it as important information, and the electronic tag 8 of the duplicate and the duplicators (applicants) B, C, Since the electronic tag 8a of the manager A is managed in association with each other, the duplicated persons B and C and the manager A of the important information can be easily identified. , C can be strictly managed according to the security level. In addition, it is easy to manage the time limit of the duplicate, and the theft and loss of the duplicate can be detected at an early stage. In addition, when not in use, duplicates are immediately stored in the important information storage 9 to reduce the risk of leakage of important information from the duplicates, and are strictly managed, and only authorized copies are taken outside. Therefore, it is possible to prevent the loss of illegal important information and to improve security. Further, at the time of copying from the directory 2 to the application client PC 4, the duration of the important information copied is set according to the security level of the applicants B and C, and an erasure flag based on the duration is recorded. If this erasure flag is not reset, an alarm is output to the applicants B and C and / or the manager A, so that important information is of course copied as an object in the printed document 5, USB memory 6 and CD-R7. Even if the important information is copied to the client PC 4 for application, the lifetime can be strictly managed. Thereby, leakage of confidential information can be effectively prevented by diffusion of important information.

  As mentioned above, although one Example of this invention was explained in full detail, this invention is not limited to the said Example, A various deformation | transformation implementation is possible within the range of the summary of this invention. For example, in the above-described embodiment, an example in which important information is stored in a directory of the server has been shown. However, a directory 2 for storing important information may be provided in the PC, and the directory 2 for storing the important information may be a customer site. It may be outside the company. In addition, although an example in which an application for duplication is made to the management server 20 has been shown, the applicant makes an application for duplication of important information to the administrator's PC, and the result approved by the administrator is sent to the management server 20 You may comprise so that replication management may be performed.

1 Server 2 Directory 3 Management client PC
4 Client PC for application
5 Printed document (copy)
6 USB memory (replica)
7 CD-R (replica)
8,8a Electronic tag 9 Important information storage room (storage facility)
10 Crusher (destructive means)
11 Disposal room (destruction equipment)
DESCRIPTION OF SYMBOLS 12 Reading means 13 Entrance / exit management apparatus 15 Internal communication network 20 Management server 21 Log collection analysis part 22 Management information input request part 23 Information taking-out management part 24 Information erasing part 25 Asset management DB
26 Management Ledger 27 Rule Setting Unit 28 Log Storage Unit 29 Log Analysis Unit 30 Compliance Report

Claims (4)

  A directory for storing electronically important information, a client PC that can access the directory, a duplicate identification electronic tag to be attached to a duplicate of the digitized information stored in the directory, and the client PC An electronic tag for personal identification for identifying an accessor who accesses the directory; a reading means for reading each electronic tag installed at least in the gate of the storage facility for the copy and the destruction facility for the copy; and the directory Including a management server in which each of the electronic tag and the reading unit is connected via a communication network, and the management server collects an access log to the directory and stores the important log Log collection and analysis unit to determine whether information has been copied and access A rule setting unit that defines the lifetime of the duplicate according to the security level as a part of the handling rule, and a database that accumulates update information of the duplicate, and the log collection and analysis unit generates a duplicate. When it is determined that the electronic tag is attached to the replica, the administrator having administrator authority is associated with the electronic tag information of the administrator, the accessor, and the replica in the database. It is accumulated and managed as update information related to a duplicate, and an erase flag is recorded as update information when the important information is erased, and the erase flag is reset by a read log of the reading means of the destruction facility, Important information management system.   The management server accepts a copy application from the accessor's client PC, extracts the lifetime of the copy according to the accessor's security level from the rule setting unit, and outputs the copy to the accessor. The important information management system according to claim 1.   3. The important information management system according to claim 2, wherein the management server performs a process of outputting an alarm or / and an alarm for a duplicate whose term has expired in accordance with the existence management of the duplicate.   The copy is a printed document or a storage medium, and includes a crushing unit that mechanically crushes the printed document or the storage medium, and an erasing device that erases data stored in the storage medium. 4. The important information management system according to any one of items 3.

Images