JP5586187B2 - Information processing apparatus, information processing system, and apparatus program - Google Patents

Description

  The present invention relates to an information processing apparatus, an information processing system, and an apparatus program used by being connected to a server having a confidential information management function.

In recent years, countermeasures against leakage of confidential information have become a major issue for computers used in companies.
In order to prevent leakage of confidential information, for example, in a thin client system in which the client device does not have a storage unit, all data is stored on the server device side to prevent leakage of confidential data from the client device. I am doing so.

  In addition, in an information processing system in which a client device having a storage unit accesses a server device, all data is stored in the server device to prevent leakage of confidential data from the client device. ing.

  In addition, as a technology previously filed by the applicant, in a system in which the client device includes a storage unit, whether the file read destination or the write destination is the server device side according to the type of application or the file attribute. There is a client device side or a switch (for example, see Patent Document 1).

JP 2008-234140 A

  However, in the general system described above, data that is not clearly related to the confidential information cannot be stored in the client device, and the work efficiency may be reduced.

Further, in the above-described Patent Document 1, for example, even when an application for creating a document is activated, a file to be created includes confidential information and a case in which confidential information is obviously not included. possible.
If such a file that clearly does not contain confidential information is not permitted to store data in the client device, the user may not be able to use the client device offline, which may reduce work efficiency.

  The present invention has been made in view of such a situation, and it is possible to reflect whether or not it is considered that no confidential information is apparently included in the determination of whether or not data storage in the apparatus is permitted. An object is to provide an information processing apparatus, an information processing system, and a program for the apparatus.

In order to achieve such an object, an information processing apparatus according to the present invention is an information processing apparatus used by being connected to a server apparatus, and communication means for communicating with other apparatuses, and an access destination by the communication means is Using an access destination determination unit that determines whether or not an access destination is registered in advance as an access destination from which predetermined information can be acquired , a nonvolatile storage unit, and a determination result by the access destination determination unit And sorting means for sorting whether to permit data storage in the storage means, the sorting means after the OS (Operating System) of the information processing apparatus is activated, the access destination If the determination means has never determined that the access destination by the communication means is an access destination registered in advance as an access destination from which the predetermined information can be acquired. In this case, once it is determined that the access destination is pre-registered as an access destination that allows the storage of the data in the storage means and the predetermined information can be acquired, the above-described operation is performed until that time. The storage of data in the storage means is not permitted .

The information processing apparatus according to the present invention is an information processing apparatus used by being connected to a server apparatus, and communication means for communicating with other apparatuses, and an access destination by the communication means can acquire predetermined information. An access destination determination unit that determines whether or not the access destination has been registered in advance as a non-access destination, a nonvolatile storage unit, and a determination result by the access destination determination unit, Sorting means for sorting whether to permit data storage, the sorting means by the access destination judging means after the OS (Operating System) of the information processing apparatus is activated, the communication means when the access destination by is determined that only pre-registered access destination as not possible access destination acquires the predetermined information, data retention to said memory means Once it is determined that the access destination is not an access destination that is pre-registered as not being an access destination from which the predetermined information can be acquired, data storage in the storage means is not permitted until the shutdown is performed after that point. This may be a feature.

  The information processing system according to the present invention is characterized in that the above-described information processing apparatus according to the present invention is connected to a server device via a network.

Further, the program of the information processing apparatus according to the present invention is a program of the information processing apparatus that is used by being connected to the server device and includes a communication unit that communicates with another device and a nonvolatile storage unit. The access destination determination procedure for determining whether the access destination by the communication means is an access destination registered in advance as an access destination from which predetermined information can be acquired, and the determination result by the access destination determination procedure And a sorting procedure for sorting whether or not to permit data storage in the storage means is executed by the information processing apparatus, and in the sorting procedure, an OS (Operating System) of the information processing apparatus is activated. After that, the access destination registered in advance as the access destination from which the communication means can acquire the predetermined information by the access destination determination procedure. If it is determined that the access destination is an access destination that has been registered in advance as an access destination that allows the storage of the data and obtains the predetermined information. The data storage in the storage means is not permitted until the shutdown is performed after that time .

Further, the program of the information processing apparatus according to the present invention is a program of the information processing apparatus that is used by being connected to the server device and includes a communication unit that communicates with another device and a nonvolatile storage unit. , Using an access destination determination procedure for determining whether an access destination by the communication means is an access destination registered in advance as not being an access destination capable of acquiring predetermined information, and a determination result by the access destination determination procedure The information processing apparatus executes a sorting procedure for sorting whether data storage in the storage unit is permitted, and in the sorting procedure, an OS (Operating System) of the information processing apparatus is activated. later, by the access destination determination procedure, previously registered access destination as is not capable of obtaining access destination the predetermined information accessed by the communication unit When it is determined that the access destination is not an access destination other than the access destination registered in advance as not allowing access to the predetermined information, the data storage in the storage means is permitted. The data storage in the storage means may be disallowed until the shutdown is performed after that time .

  As described above, according to the present invention, whether or not data storage in the apparatus is permitted can be reflected on whether or not it is clearly considered that confidential information is not included.

It is a block diagram which shows the structural example around the information processing system as the 1st Embodiment of this invention. It is a flowchart which shows the operation example of the client apparatus by 1st Embodiment. It is a block diagram which shows the structural example around the information processing system as the 2nd Embodiment of this invention. It is a flowchart which shows the operation example of the client apparatus by 2nd Embodiment.

  Next, an information processing apparatus, an information processing system, and an embodiment to which a program of the apparatus according to the present invention is applied will be described in detail with reference to the drawings.

[First Embodiment]
First, a first embodiment of the present invention will be described.
In the information processing system as the first embodiment, as shown in FIG. 1, a client device (information processing device) 1 is connected to a file server (server device) 2 via a network such as a LAN (Local Area Network) 3. Configured. The client device 1 can also access a Web server 4 and the like that have nothing to do with confidential information via a network such as the Internet.

  The file server 2 stores a file including confidential information in the storage unit 22. For this reason, in the present embodiment, after the OS (Operating System) of the client device 1 is started, if the client device 1 accesses the designated access destination such as the file server 2 even once, the user who can handle the confidential information is the client. Since it is considered that the device 1 is being operated, the file sorting unit 12 does not permit data storage in the HDD (Hard Disk Drive) 15 of the client device 1. For this reason, when a file is stored in the client device 1, it is stored in the storage unit 22 of the file server 2.

  Further, in this embodiment, after the OS of the client device 1 is started, if the client device 1 has never accessed a confidentially designated access destination such as the file server 2, for example, a user who has no possibility of handling confidential information. Operating the client apparatus 1, the file sorting unit 12 permits data storage in the HDD 15 of the client apparatus 1.

Next, the configuration of the client device 1 will be described with reference to FIG.
Whether the client device 1 stores the file created and edited by the application 11 such as document creation software as the HDD 15 or the temporary storage unit 13 using a volatile memory such as a RAM (Random Access Memory) disk. Is provided with a file sorting unit 12 for sorting the files as described above.

  When the client device 1 communicates with other devices via the LAN 3, the LAN driver 17 connects to the LAN 3 via a NIC (Network Interface Card) 18 to perform communication. As described above, the LAN driver 17 and the NIC 18 function as communication means for the client device 1 to communicate with other devices.

  When the client device 1 stores data in the device, the HDD driver 14 writes data to the HDD 15. As described above, the HDD driver 14 and the HDD 15 function as a nonvolatile storage unit in the client device 1.

The HDD 15 stores a confidential designation list 16.
The confidential designation list 16 stores access destination IP addresses registered in advance as confidential designation. The user registers the IP address of each device storing confidential information such as the IP address of the file server 2 in FIG. 1 in advance in the confidential designation list 16 by inputting from an input means (not shown). .

When the file sorting unit 12 sorts the file storage destination, if the access destination IP address matches the IP address stored in the confidential designation list 16, it is determined that the confidential designation access destination has been accessed. Unless the OS is shut down, subsequent data writing to the HDD 15 is not permitted.
Note that when the application 11 accesses the confidential designation list 16 existing as a file on the HDD 15, overwriting is prohibited by the file sorting means 12 in order to prevent rewriting of the file, Tampering may be prevented.

  The file sorting unit 12 is connected to the interface to the application 11 in the LAN driver 17, transmits information received from the interface to the application 11, and transmits information from the application 11 to the interface. As a result, the IP address information of the access destination in communication is acquired from the interface of the LAN driver 17.

  The file sorting unit 12 is connected to the interface to the application 11 in the HDD driver 14, transmits information received from the interface to the application 11, and transmits information from the application 11 to the interface. As a result, the file data requested to be saved by the application 11 is sorted into the temporary storage unit 13 or the HDD 15.

  As described above, the file sorting unit 12 according to the present embodiment includes an access destination determination unit that determines whether an access destination in communication is an access destination that is registered in advance in the confidential designation list 16, and a data storage destination sorting unit. Function as.

  The HDD 15 stores a program (not shown), and the application 11 and the OS of the client device are realized by the program being executed by a CPU (not shown).

  Next, the operation according to the present embodiment will be described with reference to the flowchart of FIG.

  The file sorting unit 12 monitors whether the access destination IP address via the network matches the IP address registered in the confidential designation list 16 after the OS of the client device 1 is started (step S1).

  When the IP address of the access destination has never coincided with the IP address registered in the confidential designation list 16 (step S1; No), the file sorting unit 12 permits the storage destination of the file data by the application 11 as the HDD 15 (Step S2).

  When the IP address of the access destination matches the IP address registered in the confidential designation list 16 (step S1; Yes), the file sorting unit 12 disallows data storage in the HDD 15 by the application 11 after that time. Then, the file data is stored in the temporary storage unit 13 (step S3).

  The file sorting unit 12 transfers the file data thus stored in the temporary storage unit 13 to the file server 2 at a predetermined timing, for example, at the completion of storage in the temporary storage unit 13 or after a predetermined time from the completion of storage. (Step S4). The file server 2 that has received the transferred file data stores the received file data in the storage unit 22 under the control of the control unit 21.

  When the OS of the client device 1 is shut down, the sorting of permission or non-permission of data storage in the HDD 15 by the file sorting unit 12 is reset, and the file sorting unit 12 again performs the above-described step S1 from the next OS startup. To monitor the IP address of the access destination.

  When the OS of the client device 1 is stopped for operations other than shutdown, such as sleep, standby, and hibernation, and then the OS is returned to the operating state, the file sorting unit 12 allows or disallows data storage in the HDD 15. Continue without changing the permission sort.

As described above, in the above-described first embodiment, after the OS of the client device 1 is started, when the client device 1 accesses the IP address of the access destination registered in the confidential designation list 16 in advance, after that point The file sorting unit 12 disallows data storage in the HDD 15 by the application 11.
From this point onward, there is a possibility that confidential data may be copied, pasted and stored until the OS of the client device is shut down and the power is turned off. The state that prohibits saving is continued. Thereafter, when the application 11 instructs to save data in the HDD 15, the instruction is stored in the temporary storage unit 13, then transferred to the file server 2, and replaced with an instruction to save data on the server side.

  In the present embodiment, after the OS of the client apparatus 1 is activated, if the client apparatus 1 has never accessed the IP address of the access destination registered in the confidential designation list 16 in advance, the file sorting unit 12 uses the application 11 The data storage to the HDD 15 is permitted.

  Therefore, according to the first embodiment described above, there is a possibility that confidential data may be copied and pasted and saved when the access destination including the confidential information is not accessed while the confidentiality is ensured. Therefore, data storage in the HDD 15 of the client device 1 can be permitted.

  For this reason, when the user is operating the client device 1 in a work that has nothing to do with confidential information, various data such as file update data can be stored in the HDD 15 of the client device 1. For this reason, for example, the user can perform subsequent work on the client device 1 while the client device 1 is offline.

  For this reason, even in a place where the network environment is insufficient, such as a place where the user is out, the client apparatus can be operated stand-alone for work using files that are not clearly related to confidential information. In addition, it is possible to browse a Web content unrelated to confidential information by connecting a client device to the Internet.

  As described above, according to the present embodiment, the overall work efficiency including the work not related to the confidential information is ensured while ensuring the confidentiality without excessively restricting the confidentiality. Can be improved.

  In addition, since the data can be stored in the HDD 15 of the client device 1 when it is not clearly related to the confidential information, it is possible to easily update the OS and the virus definition file of the antivirus software. For this reason, the security as a system can also be improved.

  Further, according to the present embodiment, the access destination designated as confidential can be easily switched by registration in the confidential designation list 16, and therefore, for example, even when a plurality of file servers are used, any one of them is used. Can be easily classified as confidential or temporarily unclassified. For this reason, the freedom degree of system operation based on confidentiality can be improved.

Further, according to the present embodiment, the file sorting unit 12 can store data in the HDD 15 or monitor the temporary storage unit 13 and the file server 2 by monitoring the IP address of the access destination regardless of the file name and the type of application. In order to classify whether data is to be stored, the above-described sorting process can be performed with a simple process.
For this reason, each effect mentioned above by this embodiment can be acquired, hardly affecting other processes in an apparatus.

[Modification of First Embodiment]
As a modified example of the first embodiment, the IP address of the access destination may be monitored for each application, and the file classification unit 12 may classify whether the data is stored in the HDD 15 or the temporary storage unit 13 for each application. .
In this case, an application that accesses the IP address of each device that stores confidential information registered in the confidential designation list 16 is registered in a confidential information access application list (not shown).

  In this modification, data exchange between applications is also monitored. For example, an application that accesses data existing in an IP address registered in the confidential designation list 16 is added to the confidential information access application list. Thereafter, when an application not registered in the confidential information access application list receives some data from the application registered in the confidential information access application list, a process of adding the unregistered application to the confidential information access application list is performed.

  Through the above processing, when data is stored by an application on the confidential information access application list, the data is stored in the temporary storage unit 13. On the other hand, when data is stored by an application not included in the confidential information access application list, the data is still stored in the HDD 15.

  According to this modified example, even after confidential data is accessed from an application (this operation causes the application to be additionally registered in the confidential information access application list), an application that is not registered in the confidential information access application list Can be stored in the HDD 15. That is, when the file sorting unit 12 sorts the data storage destination, it is possible to reflect the type of application, and thus it is possible to more accurately determine confidential data.

[Second Embodiment]
Next, a second embodiment of the present invention will be described.
In the second embodiment, the type of communication protocol is added to the contents registered in the confidential designation list 16 in the first embodiment described above. As a result, the file sorting unit 12 monitors the type of communication protocol in addition to the IP address of the access destination, and sorts whether or not data storage in the HDD 15 is permitted.
Description of the same components as those in the first embodiment described above will be omitted.

  As shown in FIG. 3, the information processing system according to the second embodiment is configured by connecting a client device 1 to a mail server (server device) 5 via a network such as a LAN 3.

The mail server 5 corresponds to a protocol such as POP3 (post office protocol version 3) or IMAP4 (Internet message access protocol 4).
A protocol used for communication is generally associated with a port number. In the example of FIG. 3, the communication is performed using the POP3 protocol when the access destination port number from the client device 1 is port A, and the communication is performed using the IMAP4 protocol when the access destination port number is port B. As shown.

  The confidential designation list 16 stored in the HDD 15 of the client apparatus 1 stores the IP address and port number of the access destination registered in advance as confidential designation in association with each other. The user inputs from the input means (not shown) the IP address of each device specified by handling confidential information, such as the IP address of the mail server 5 in FIG. 3, and the port number corresponding to the communication protocol designated as confidential. Or the like is previously registered in the confidential designation list 16.

  When the file sorting unit 12 sorts the data storage destination, if the access destination IP address and port number match the combination of the IP address and port number stored in the confidential designation list 16, the confidential designation access destination Unless it is determined that the access has been made with the designated communication protocol and the OS is not shut down, subsequent data writing to the HDD 15 is not permitted.

  As described above, the file sorting unit 12 in this embodiment is an access destination determination unit that determines whether or not an access destination in communication is an access destination registered in advance in the confidential designation list 16, and is registered in the confidential designation list 16 in advance. It functions as a protocol determination unit that determines whether or not communication is performed using the communication protocol and a data storage destination sorting unit.

  Next, the operation according to the present embodiment will be described with reference to the flowchart of FIG.

  The file sorting unit 12 determines whether the IP address and port number of the access destination via the network match the combination of the IP address and port number registered in the confidential designation list 16 after the OS of the client device 1 is started. Is monitored (step S11).

  When the IP address and port number of the access destination have never coincided with the IP address and port number registered in the confidential designation list 16 (step S11; No), the file sorting unit 12 uses the application 11 such as mail software. The data storage destination is permitted as the HDD 15 (step S12).

  When the IP address and port number of the access destination match the combination of the IP address and port number registered in the confidential designation list 16 (step S11; Yes), the file sorting unit 12 starts the HDD 15 by the application 11 after that time. Data storage is not permitted, and the mail data is stored in the temporary storage unit 13 (step S13).

  The file sorting unit 12 transfers the mail data thus stored in the temporary storage unit 13 to the mail server 5 at a predetermined timing, for example, at the time of completion of storage in the temporary storage unit 13 or after a predetermined time from the completion of storage. (Step S14). The mail server 5 that has received the transferred mail data stores the received mail data in the storage unit 52 under the control of the control unit 51.

  When the OS of the client device 1 is shut down, the sorting of permission or non-permission of data storage in the HDD 15 by the file sorting unit 12 is reset, and the file sorting unit 12 again performs the above-described step S11 from the next OS startup. The access destination IP address and port number are monitored by.

  When the OS of the client device 1 is stopped for operations other than shutdown, such as sleep, standby, and hibernation, and then the OS is returned to the operating state, the file sorting unit 12 allows or disallows data storage in the HDD 15. Continue without changing the permission sort.

As described above, in the above-described second embodiment, when the client device 1 accesses the IP address and port number of the access destination registered in advance in the confidential designation list 16 after the OS of the client device 1 is started, After that time, the file sorting unit 12 disallows data storage in the HDD 15 by the application 11.
From that point onwards, there is a possibility that confidential data such as mail data including confidential information may be copied, pasted, and saved until the client device OS is shut down and the power is turned off. The unit 12 continues the state of disallowing data storage in the HDD 15. When data is stored, the data is stored in the temporary storage unit 13 and then transferred to the mail server 5 for data storage on the server side.

  In addition, since the OS of the client device 1 is started, the combination of the IP address and port number of the access destination is once included in the combination of the IP address and port number registered in the confidential designation list 16 in advance. Only when there is nothing, the file sorting unit 12 permits the application 11 to store data in the HDD 15.

  For this reason, according to the second embodiment described above, confidential data such as e-mail data including confidential information is copied when the access destination including the confidential information is not accessed while securely maintaining the confidentiality. Since it is considered that there is no possibility that the data is pasted and stored, data storage in the HDD 15 of the client device 1 can be permitted.

  For this reason, for example, when the user is operating the client device 1 in an operation that has nothing to do with confidential information, such as editing a signature used for mail transmission, the signature of the edited mail is stored in the HDD 15 of the client device 1. Various data such as data can be stored. For this reason, the user can perform the subsequent work such as the work of creating the outgoing mail even when the client device 1 is offline.

  Thus, according to the second embodiment, for example, even if the type of communication protocol in e-mail software or the like is added to the registration contents for specifying the confidentiality, the same as in the first embodiment described above. Various effects can be obtained.

  Furthermore, in the present embodiment, the type of communication protocol can be specified in addition to the IP address of the access destination as a target to be classified. Therefore, according to the present embodiment, even for one mail server 5, for example, an email address communicated with POP3 is registered as confidential designation in the confidential designation list 16, and an email address communicated with IMAP4 is designated as confidential. It is possible to easily use different types of confidential designation using the type of communication protocol such as not registering as. For this reason, while realizing system operation based on confidentiality, it is possible to easily specify confidentiality according to the application, and to improve user convenience.

  In addition, according to the present embodiment, the access destination and the type of communication protocol designated as confidential can be easily switched by registration in the confidential designation list 16, and therefore, for example, a plurality of mail servers and mail addresses are used. Even in such a case, it is possible to easily make any one of them confidential and temporarily remove the confidential treatment. For this reason, the freedom degree of system operation based on confidentiality can be improved.

[About each embodiment]
Each of the above-described embodiments is a preferred embodiment of the present invention, and the present invention is not limited to this, and various modifications can be made based on the technical idea of the present invention.

  For example, in the first embodiment described above, it is described that the secret designation target is registered by the IP address of the access destination. However, the address information is not limited to this as long as the address information can specify the access destination, and any address can be specified. It may be information.

In the second embodiment described above, the secret designation target is registered by the IP address and port number of the access destination. However, if the type of communication protocol can be specified, it is registered as the port number. The present invention is not limited thereto, and the present invention can be similarly realized even in a configuration in which, for example, the type of communication protocol is registered.
In this case, for example, in the case of mail transmission, the file sorting unit 12 confirms the protocol information stored in the header part of the mail data to be transmitted / received, so that communication is performed using the communication protocol registered in the confidential designation list 16. It can be determined whether or not.

Further, by recording the processing procedure for realizing the client device 1 as each of the above-described embodiments on a recording medium as a program, the above-described functions according to the respective embodiments of the present invention are supplied from the recording medium. The program can be realized by causing a CPU of a computer constituting the system to perform processing.
In this case, the present invention can be applied even when an information group including a program is supplied to the output device from the above recording medium or from an external recording medium via a network.
That is, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code and the signal read from the recording medium constitute the present invention. It will be.
As this recording medium, for example, flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD + RW, magnetic tape, non-volatile Sex memory cards, ROM, etc. may be used.

  According to the program according to the present invention, each function in each of the above-described embodiments can be realized by a computer controlled by the program.

  The client device in each of the above-described embodiments may be various information processing devices as long as it can be used by connecting to a server device via a network, such as a PC (personal computer), a PDA (personal digital assistant), etc. It can also be used in the embodiment.

1 Client device (an example of information processing device)
11 Application 12 File sorting unit (an example of access destination judging means, protocol judging means, and sorting means)
13 Temporary storage unit 14 HDD driver 15 HDD
16 Confidential designation list 17 LAN driver 18 NIC
2 File server 21 Control unit 22 Storage unit 3 LAN
4 Web server 5 Mail server 51 Control unit 52 Storage unit

Claims (17)

An information processing device used by being connected to a server device,
Communication means for communicating with other devices;
An access destination determination means for determining whether the access destination by the communication means is an access destination registered in advance as an access destination from which predetermined information can be acquired ;
Non-volatile storage means;
Using a determination result by the access destination determination unit, and a sorting unit for sorting whether to permit data storage in the storage unit,
The sorting unit preliminarily determines that the access destination by the communication unit is an access destination from which the predetermined information can be acquired by the access destination determination unit after the OS (Operating System) of the information processing apparatus is activated. if even once If it is registered access destination is not determined, to allow saving data to the storage means is the previously registered access destination the predetermined information as a possible access destination acquisition Once the determination is made, the information processing apparatus is characterized by disallowing data storage in the storage means until shutting down after that point . An information processing device used by being connected to a server device,
Communication means for communicating with other devices;
An access destination determination unit that determines whether the access destination by the communication unit is an access destination registered in advance as not an access destination from which predetermined information can be acquired ;
Non-volatile storage means;
Using a determination result by the access destination determination unit, and a sorting unit for sorting whether to permit data storage in the storage unit,
Said sorting means is previously registered as after the OS of the information processing apparatus (Operating System) is activated, by the access destination determining means, not an access target can be obtained is the predetermined information accessed by the communication unit When it is determined that the access destination is only the access destination that has been registered, it is temporarily determined that the data storage in the storage means is permitted and the access destination is not an access destination that has been registered in advance as not being an access destination from which the predetermined information can be acquired. And an information processing apparatus that prohibits data storage in the storage means until shutting down after that time . Protocol determining means for determining whether or not communication is performed according to a predetermined protocol,
2. The classification unit according to claim 1, wherein the classification unit determines whether to permit data storage in the storage unit, using the determination result by the access destination determination unit and the determination result by the protocol determination unit. Or the information processing apparatus of 2. The access destination determination Priority determination means, information processing apparatus according to any one of claims 1 to 3, characterized in that determining whether said is an application that accesses the pre-registered access. The access destination determination Priority determination means, information processing apparatus according to claim 4, characterized in that determining whether an application which has received the data from the application accesses the previously registered access. The sorting means is
After the OS of the information processing apparatus is activated, the access destination determination unit determines that the access is to the pre- registered access destination, and the protocol determination unit communicates with the predetermined protocol. If it is determined that the data is stored in the storage means after the determination,
After the OS of the information processing apparatus is activated, the access destination determination unit determines access to the previously registered access destination, and the protocol determination unit performs communication using the predetermined protocol. 4. The information processing apparatus according to claim 3, wherein when the determination is not made at the same time, data storage in the storage unit is permitted.   The information processing apparatus according to any one of claims 1 to 6, wherein the sorting unit transfers the stored data to the server device when the storage of the data to the storage unit is not permitted. .   8. The method according to claim 1, wherein the sorting unit resets the sorting of permission or non-permission of data storage in the storage unit by shutting down an OS of the information processing apparatus. 9. Information processing device.   9. An information processing system comprising: the information processing apparatus according to claim 1 connected to a server apparatus via a network. A program for an information processing apparatus that is used by being connected to a server device and includes a communication unit that communicates with another device, and a nonvolatile storage unit,
An access destination determination procedure for determining whether the access destination by the communication means is an access destination registered in advance as an access destination from which predetermined information can be acquired ;
Using the determination result of the access destination determination procedure, causing the information processing apparatus to execute a sorting procedure for sorting whether to permit data storage in the storage unit;
In the sorting procedure, after the OS (Operating System) of the information processing apparatus is started, the access destination by the communication means is determined to be an access destination from which the predetermined information can be acquired by the access destination determination procedure. if even once If it is registered access destination is not determined, to allow saving data to the storage means is the previously registered access destination the predetermined information as a possible access destination acquisition Once the determination is made, a program for an information processing apparatus that disallows data storage in the storage means until shutting down thereafter . A program for an information processing apparatus that is used by being connected to a server device and includes a communication unit that communicates with another device, and a nonvolatile storage unit,
An access destination determination procedure for determining whether the access destination by the communication means is an access destination registered in advance as not being an access destination capable of acquiring predetermined information ;
Using the determination result of the access destination determination procedure, causing the information processing apparatus to execute a sorting procedure for sorting whether to permit data storage in the storage unit;
In the sorting procedure, after the OS (Operating System) of the information processing apparatus is started, the access destination by the communication unit is registered in advance as an access destination from which the predetermined information can be acquired by the access destination determination procedure. When it is determined that the access destination is only the access destination that has been registered, it is temporarily determined that the data storage in the storage means is permitted and the access destination is not an access destination that has been registered in advance as not being an access destination from which the predetermined information can be acquired. And a program for the information processing apparatus, wherein data storage in the storage means is not permitted until shutting down after that point . Causing the information processing apparatus to execute a protocol determination procedure for determining whether or not communication is performed according to a predetermined protocol;
11. The sorting procedure according to claim 10, wherein whether or not data storage in the storage unit is permitted is sorted using a determination result obtained by the access destination determination procedure and a determination result obtained by the protocol determination procedure. Or the program of the information processing apparatus of 11. In the access destination determination Priority determination procedure, the information processing apparatus according to any one of claims 10 to 12, characterized in that determining whether said is an application that accesses the pre-registered access destination program. The access destination-size at a constant procedure, the information processing apparatus program according to claim 13, characterized in that determining whether an application which has received the data from the application accesses the previously registered access destination . In the sorting procedure,
After the OS of the information processing apparatus is activated, it is determined by the access destination determination procedure that the access is to the previously registered access destination, and communication is performed by the protocol determined by the protocol determination procedure. If it is determined that the data is stored in the storage means after the determination,
After the OS of the information processing apparatus is activated, access determination to the previously registered access destination by the access destination determination procedure and communication using the predetermined protocol by the protocol determination procedure are performed. 13. The information processing apparatus program according to claim 12, wherein if the determination is not made at the same time, data storage in the storage unit is permitted.   16. The information processing apparatus according to claim 10, wherein when the data storage in the storage unit is not permitted in the sorting procedure, the information processing apparatus is caused to execute a transfer procedure for transferring the stored data to the server apparatus. A program of the information processing apparatus according to claim 1.   The sorting of permission or non-permission of data storage in the storage unit according to the sorting procedure is reset by shutting down the OS of the information processing apparatus. Information processing apparatus program.

Images