JP6406738B2 - Storage device, access prohibition method, and program - Google Patents

Description

[Description of related applications]
The present invention is based on a Japanese patent application: Japanese Patent Application No. 2015-101237 (filed on May 18, 2015), and the entire description of the application is incorporated herein by reference.
The present invention relates to a storage device, an access prohibition method, and a program, and more particularly to a storage device that can be attached to and detached from an IT (Information Technology) device, an access prohibition method for data held by the storage device, and a program.

  When a storage device (for example, a hard disk drive) mounted on an IT device (for example, a personal computer or the like, hereinafter also referred to as an information processing device) fails, the failed storage device is removed from the IT device, and the removed storage device is removed. There are cases where repairs are carried out by collecting the products from a customer at a repair center.

  Here, when collecting the storage device, a lock-dedicated device is usually required to prevent leakage of internal data held by the storage device. In addition, fixed information is normally used as a lock key (that is, a key for controlling permission / prohibition of access to data held by the storage device) when locking the storage device using a lock-dedicated device.

  Patent Document 1 describes an information device that is maintained in a locked state by a built-in lock device and prevents data theft and unauthorized access.

  Japanese Patent Application Laid-Open No. 2004-228561 describes that whether or not to permit writing processing and reading processing with respect to a storage device is controlled according to whether or not the input identification data matches the stored identification data. .

JP 2006-053740 A JP 2002-014870 A

  The entire disclosures of Patent Documents 1 and 2 are incorporated herein by reference. The following analysis was made by the present inventors.

  As described above, when collecting the storage device from the customer, a lock-dedicated device is required to prevent internal data leakage of the storage device. In other words, in order to apply a lock that prevents the data in the storage device from being taken out, a dedicated device that locks by writing fixed information into the storage device is required. Therefore, there is a problem that the storage device alone cannot lock the storage device.

  In addition, when a storage device is locked using a lock-dedicated device, fixed information is used as a lock key. That is, information written from the dedicated device to the storage device is fixed information. At this time, if one lock key leaks, there is a problem that locks applied to other storage devices can be released with the same lock key, and information security is invalidated.

  Therefore, it becomes a problem to be able to lock the storage device without using a dedicated device. An object of the present invention is to provide a storage device, an access prohibition method, and a program that contribute to solving such a problem.

A storage device according to a first aspect of the present invention is a storage device that can be attached to and detached from an information processing device, and includes a storage unit that holds data, a power supply unit that supplies power, and the storage device from the information processing device. When the storage device is removed from the information processing apparatus , and an input / output control unit that prohibits access to the storage unit using the power supplied from the power supply unit, the storage unit is connected to the storage unit. A lock key generation unit that generates a key for controlling access, a transmission unit that transmits the generated key to a predetermined device, an input key, and the generated key held by the predetermined device And an unlocking unit that cancels or maintains the prohibition of access according to whether or not matches .

According to a second aspect of the present invention, there is provided an access prohibiting method comprising: a storage device detachable from an information processing device; and a step of starting supply of power when the storage device is removed from the information processing device; Prohibiting access to the storage unit to be held using the supplied power supply, and generating a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus Transmitting the generated key to a predetermined device, and prohibiting the access depending on whether the input key matches the generated key held by the predetermined device. Releasing or maintaining .

The program according to the third aspect of the present invention starts supplying power to a computer provided in a storage device detachable from the information processing device when the storage device is removed from the information processing device. To control access to the storage unit when the storage device is removed from the information processing device , processing to prohibit access to the storage unit holding data using the supplied power supply, and Depending on whether the input key and the generated key held by the predetermined device match, the processing of generating the key of the device, the processing of transmitting the generated key to the predetermined device, and the input key And canceling or maintaining the access prohibition . The program can also be provided as a program product recorded on a non-transitory computer-readable storage medium.

  According to the storage device, the access prohibition method, and the program according to the present invention, the storage device can be locked without using a dedicated device.

It is a block diagram which illustrates the composition of the storage concerning one embodiment. 1 is a block diagram illustrating the configuration of a storage device according to a first embodiment. FIG. 3 is a flowchart illustrating an operation at the time of locking of the storage device according to the first embodiment. FIG. 3 is a flowchart illustrating an operation when unlocking the storage device according to the first embodiment. It is a block diagram which illustrates the composition of the storage concerning a 2nd embodiment. It is a block diagram which illustrates the composition of the storage concerning a 3rd embodiment.

  First, an outline of one embodiment will be described. Note that the reference numerals of the drawings attached to this summary are merely examples for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.

  FIG. 1 is a block diagram illustrating the configuration of a storage device 10 according to an embodiment. Referring to FIG. 1, a storage device 10 is a storage device that can be attached to and detached from an information processing device (or IT device), and includes a storage unit 22 that holds data, a power supply unit 11 that supplies power, and an information processing device ( And an input / output control unit 18 that prohibits access (for example, write access, read access) to the storage unit 22 using the power supplied from the power supply unit 11 when the storage device 10 is removed from the power supply unit 11. ing.

  According to the storage device 10, it is possible to lock the storage device 10 without using a dedicated device. This is because the storage device 10 has the power supply unit 11 and is removed from the information processing apparatus, and the input / output control unit 18 is not supplied with power from the outside. This is because the access control for the storage unit 22 can be executed using.

  That is, according to one embodiment, the storage device 10 includes a lock unit (for example, the input / output control unit 18) that prevents the data in the storage unit 22 from being taken out, and the storage device 10 is connected (or mounted) to the storage device. When it is removed from the IT (Information Technology) equipment (or information processing apparatus), the lock means for preventing the data from being taken out and / or written in the storage unit 22 of the storage device 10 operates. Thereby, for example, data leakage from the storage device 10 during transportation of the storage device 10 can be prevented.

  Further, the lock key for releasing the lock may be information that can be obtained only by the remover. As a result, it is possible to prevent a lock applied to another storage device from being released with the same lock key, and to prevent the security of information from being invalidated. That is, by using unique information as a lock key, it is possible to improve safety (security) against information leakage.

  In addition, the storage device according to the embodiment includes a lock unit that prevents the data in the storage device from being taken out of the storage device. When the storage device is removed from the IT device (server device, personal computer, etc.), A lock device that prevents the data in the storage device from being taken out from the storage device may be operated to prevent data leakage from the storage device during transportation of the storage device. On the other hand, on the side where the device is recovered and repaired, etc., a lock key is entered to unlock the lock device that prevents the data in the storage device from being taken out of the storage device. The data may be extracted.

  Here, the “locking means” may be anything as long as data stored in the storage device cannot be taken out from the storage device. As an example, the locking unit may not be able to supply power to a drive portion of the storage device or a storage device drive control unit. In addition, the lock means is such that the electrical signal output terminal and signal line from the storage device are physically disconnected (signal line is disconnected, etc.) or logically (the storage device driver or application is instructed from the outside. It may be cut off such as not to respond.

  Further, the lock key may be information for specifying a device to which the storage device is attached (that is, an IT device to which the storage device is attached). Further, the lock key may be information that is stored in the storage device and cannot be extracted unless the storage device is operated. Furthermore, the lock key is the date, time, and minute when the storage device is removed (the lock key may be a numeric string having a predetermined format indicating the date, time, and minute). May be. Further, the lock key may be a character string including a symbol or the like, or a character string including numbers, alphabetic characters, and symbols.

  In this way, by using information that can only be obtained by the remover as a lock key, if the storage device must be removed and transported for repair of the storage device, etc., it is stored in the storage device from the storage device being transported. It is possible to prevent leaked information.

  Furthermore, at the time of removal, data (or unique information) corresponding to the lock key is transmitted to the IT device installed on the side that accepts the storage device (for example, the place to be repaired) using communication, and the transmitted data The lock key itself may be difficult to leak by releasing the lock using (or unique information).

  Here, as the unique information, any one or two of information specifying the IT device from which the storage device is removed, information specifying the storage device to be removed, time information combining the removal date, hour, minute, second, etc. Combinations of the above can be used. The communication may be wireless, wired, or a combination of these, and may be communication using (or passing through) the Internet, an intranet, or a mobile phone communication network.

<Embodiment 1>
Next, the storage device according to the first embodiment will be described in detail with reference to the drawings.

[Constitution]
FIG. 2 is a block diagram illustrating the configuration of the storage device 10 according to this embodiment. The storage device 10 in FIG. 2 is a device having a medium for storing data. The storage device 10 may be any device having a medium for storing data, such as an HDD (Hard Disk Drive) unit, an SSD (Solid State Drive) unit, or a USB (Universal Serial Bus) memory. May be. Further, the IT device (or information processing device) to / from which the storage device 10 is attached / detached is not limited to a personal computer or a server device, but may be a smartphone, a tablet terminal, a music player, an AV (Audio Visual) device, a game device, or the like. Good.

  Referring to FIG. 2, the storage device 10 includes a power supply unit 11, a power supply control unit 12, an activation unit 13, a time measurement unit 14, a unique information storage unit 15, a lock key generation unit 16, a lock key storage unit 17, and input / output control. Unit 18, lock release unit 19, input unit 20, output unit 21, and storage unit 22.

  The power supply unit 11 supplies power to the activation unit 13, the lock key generation unit 16, the time measurement unit 14, the lock key storage unit 17, and the input / output control unit 18. As long as the power supply part 11 supplies electric power, such as a battery, what kind of thing may be sufficient as it. The power supply by the power supply unit 11 is controlled by the power supply control unit 12.

  The power control unit 12 controls the power output from the power supply unit 11 to the activation unit 13. Specifically, the power supply control unit 12 starts supplying power from the power supply unit 11 to the activation unit 13 when the storage device 10 is removed from the IT device (trigger). As long as the power supply control unit 12 is a function for controlling power supply, such as a switch for turning on and off the transmission circuit, or a switch that itself cuts off the power supply between the power supply unit 11 and the starter unit 13, It may be a thing.

  The activation unit 13 activates the lock key generation unit 16, the lock key storage unit 17, and the input / output control unit 18 in accordance with power input. In addition, the activation unit 13 stops the time measurement by the time measurement unit 14.

  The time measuring unit 14 measures time with the power source of the power source unit 11. Further, the time measuring unit 14 stops measuring time according to the instruction of the activation unit 13.

  The unique information storage unit 15 stores unique information such as a serial number and a device name of the device to which the storage device 10 is attached. Here, the unique information may be any information as long as it is unique information for specifying the device.

  The lock key generation unit 16 refers to the time when the time measurement unit 14 stopped. The lock key generation unit 16 refers to the unique information held by the unique information storage unit 15. The lock key generation unit 16 generates a lock key from the stop time and the unique information. Here, the lock key may be any character string as long as it is a character string made up of numbers, letters and symbols. Further, the lock key generation unit 16 stores the generated character string in the lock key storage unit 17.

  The lock key storage unit 17 stores the lock key generated by the lock key generation unit 16.

  The input / output control unit 18 blocks data input from the input unit 20 to the storage unit 22 at startup. Here, the blocking method may be physical blocking or logical blocking of the transmission path as long as data communication cannot be performed. Further, the input / output control unit 18 blocks data output from the storage unit 22 to the output unit 21 at the time of activation. The blocking method may be physical blocking or logical blocking of the transmission path as long as it is a means for stopping data communication. Further, the input / output control unit 18 receives a lock release command from the lock release unit 19 and enables data input from the input unit 20 to the storage unit 22. Here, the method for enabling data input may be a physical connection or a logical connection. In addition, the input / output control unit 18 receives a lock release command from the lock release unit 19 and enables data output from the storage unit 22 to the output unit 21. Here, the method of enabling data output may be physical connection, logical connection, or the like.

  The unlocking unit 19 issues a signal for requesting input of unlocking data to the output unit 21. Further, when there is data input from the input unit 20, the lock release unit 19 recognizes the input data. Further, the lock release unit 19 refers to the data stored in the lock key storage unit 17. The lock release unit 19 compares the input data with the data stored in the lock key storage unit 17. If the compared data are the same, the lock release unit 19 issues a lock release command to the input / output control unit 18. On the other hand, when the compared data are different, the lock release unit 19 issues a signal indicating that the lock cannot be released to the output unit 21.

  The input unit 20 has an interface function that allows data input from an external device. The input unit 20 may have the same shape as the output unit 21 and can be input and output through one interface. As an example, as the input unit 20, a USB terminal, SATA (Serial ATA, ATA (Serial Transfer), ATA (Advanced Technology Attachment, Advanced Technology Attachment, ATI), ANSI (American National Standards Institute, American Standards Institute) standardized Standards of interfaces for connecting hard disks and the like) interfaces and the like) can be used.

  The output unit 21 has an interface function capable of outputting data to the outside. The output unit 21 may be the same shape as the input unit 20 and can be input / output with one interface (USB terminal, SATA interface, etc.).

  The storage unit 22 is a medium that stores data. Here, the medium may be any medium that stores data such as an HDD, an SSD, or a memory.

[Operation]
Next, the operation of the storage device 10 of this embodiment will be described with reference to the flowcharts of FIGS.

"When locked"
First, the operation when the storage device 10 is locked will be described with reference to the drawings. FIG. 3 is a flowchart illustrating an operation when the storage device 10 is locked.

  Referring to FIG. 3, the power control unit 12 of the storage device 10 performs power control (step A1).

  Next, the power supply control unit 12 supplies power from the power supply unit 11 to the activation unit 13 (step A2).

  Next, the activation unit 13 activates the lock key generation unit 16, the time measurement unit 14, the lock key storage unit 17, and the input / output control unit 18 (step A3).

  Next, the starting part 13 stops the time count of the time measuring part 14 (step A4).

  Next, the lock key generation unit 16 refers to the time of the time measurement unit 14 and the information of the unique information storage unit 15 (step A5).

  Next, the lock key generation unit 16 generates a lock key (step A6).

  Next, the lock key generation unit 16 stores the generated lock key in the lock key storage unit 17 (step A7).

  Next, the input / output control unit 18 blocks data input from the input unit 20 to the storage unit 22 (step A8).

  Next, the input / output control unit 18 blocks data output from the storage unit 22 to the output unit 21 (step A9).

  With the above operation, data input / output between the storage unit 22, the input unit 20, and the output unit 21 is blocked.

"When unlocked"
Next, the operation at the time of unlocking the storage device 10 will be described with reference to the drawings. FIG. 4 is a flowchart illustrating an operation when the storage device 10 is unlocked.

  Referring to FIG. 4, the unlocking unit 19 issues a signal for requesting input of unlocking data to the output unit 21 (step B1).

  Next, the worker inputs unlock data to the input unit 20 (step B2).

  Next, the lock release unit 19 recognizes the input data (step B3).

  Next, the lock release unit 19 refers to the data stored in the lock key storage unit 17 (step B4).

  Next, the lock release unit 19 compares the input data with the data stored in the lock key storage unit 17 (step B5).

  If the input data is different from the data stored in the lock key storage unit 17 (No in step B5), the lock release unit 19 issues a signal indicating that the lock cannot be released to the output unit 21 (step B6). .

  Next, the process returns to the flow in which the operator inputs unlocking data to the input unit 20 (step B2).

  On the other hand, if the input data is the same as the data stored in the lock key storage unit 17 (Yes in step B5), the lock release unit 19 issues a lock release command to the input / output control unit 18 (step B7). .

  Next, the input / output control unit 18 enables data input from the input unit 20 to the storage unit 22 (step B8).

  Next, the input / output control unit 18 enables data output from the storage unit 22 to the output unit 21 (step B9).

  With the above operation, data input / output between the storage unit 22, the input unit 20, and the output unit 21 becomes possible.

[effect]
According to the storage device of this embodiment, after the storage device is removed, the lock device that prevents input / output of data in the storage device from the storage device operates by the control of the power supply control unit in the storage device, and the data is input. The output is cut off, and data reference by a third party can be prevented. This is because the input / output control unit shuts off the data input from the input unit to the storage unit when the input / output control unit supplies power from the power supply unit and is activated by the startup unit, and the input / output control unit stores the data. This is because the data output from the unit to the output unit is blocked.

  Further, according to the storage device of the present embodiment, when unlocking, the lock cannot be released unless data suitable for unlocking is input. This is because the lock release unit compares the input data with the lock key stored in the lock key storage unit, and outputs a lock release impossible signal to the output unit if they are different.

  Further, according to the storage device of the present embodiment, when data suitable for unlocking is input, the lock is released. This is because the lock release unit compares the input data with the lock key stored in the lock key storage unit and determines that they are the same, and the input / output control unit can input data from the input unit to the storage unit In addition, the input / output control unit enables data output from the storage unit to the output unit.

  In addition, according to the storage device of the present embodiment, it is possible to generate a lock key with a high security effect. This is because the lock key is not a fixed value, and the lock key generation unit generates a unique lock key that changes according to the time from the unique information stored in the unique information storage unit and the time when the time measurement unit removes the device. This is because it can be generated.

<Embodiment 2>
Next, a storage device according to a second embodiment will be described with reference to the drawings. In the first embodiment, the storage device holds the generated lock key in the storage device. In the present embodiment, the generated lock key is sent to an external device (for example, an IT device installed on a storage device receiving side (such as a repair site)).

[Constitution]
FIG. 5 is a block diagram illustrating the configuration of the storage device 10 according to this embodiment. Referring to FIG. 5, the storage device 10 of the present embodiment includes a lock key transmission unit 23 instead of the lock key storage unit 17 (see FIG. 2) of the storage device according to the first embodiment. Other configurations of the storage device 10 of the present embodiment are the same as the corresponding configurations of the storage device 10 of the first embodiment. Hereinafter, the difference between the present embodiment and the first embodiment will be mainly described.

  The power supply unit 11 supplies power to the activation unit 13, the lock key generation unit 16, the time measurement unit 14, the lock key transmission unit 23, and the input / output control unit 18.

  The activation unit 13 activates the lock key generation unit 16, the lock key transmission unit 23, and the input / output control unit 18 in response to power input.

  The lock key transmission unit 23 transmits the lock key generated by the lock key generation unit 16 to an external device (not shown). Here, the communication for connecting the lock key transmission unit 23 and the external device may be any of wireless, wired, and a combination thereof.

  Instead of referring to the lock key stored in the lock key storage unit 17 as in the first embodiment, the lock release unit 19 uses the lock key held by the external device that has received the lock key from the lock key transmission unit 23. Refer to The lock release unit 19 compares the lock key input from the user via the input unit 20 with the lock key held by the external device. If the compared data are the same, the lock release unit 19 issues a lock release command to the input / output control unit 18. On the other hand, when the compared data are different, the lock release unit 19 issues a signal indicating that the lock cannot be released to the output unit 21.

[Operation]
Next, the operation of the storage device 10 of this embodiment will be described with reference to the drawings.

"When locked"
First, the operation when the storage device 10 is locked will be described with reference to FIG.

  The operations in steps A1 and A2 are the same as in the first embodiment.

  In the present embodiment, in step A3, the activation unit 13 activates the lock key generation unit 16, the time measurement unit 14, the lock key transmission unit 23, and the input / output control unit 18.

  The operations in steps A4 to A6 are the same as those in the first embodiment.

  In the present embodiment, in Step A7, the lock key transmission unit 23 transmits the lock key generated by the lock key generation unit 16 to the external device.

  The operations in steps A8 and A9 are the same as those in the first embodiment.

"When unlocked"
Next, the operation at the time of unlocking the storage device 10 will be described with reference to FIG.

  The operations in steps B1 to B3 are the same as those in the first embodiment.

  In this embodiment, in step B4, the lock release unit 19 refers to the data stored in the external device (that is, the device to which the lock key is transmitted).

  In the present embodiment, in step B5, the lock release unit 19 compares the input data with the data stored in the external device.

  If the input data is different from the data stored outside (No in step B5), the lock release unit 19 issues a signal indicating that the lock cannot be released to the output unit 21 (step B6). Next, the process returns to the flow in which the operator inputs unlocking data to the input unit 20 (step B2).

On the other hand, when the input data and the data stored in the external device are the same (Yes in step B5), the lock release unit 19 issues a lock release command to the input / output control unit 18 (step B7).
Steps B8 and B9 are the same as in the first embodiment.

[effect]
According to the storage device of this embodiment, the same effect as that of the storage device of the first embodiment is brought about. According to the storage device of this embodiment, it becomes possible to further prevent the lock key from leaking. This is because the lock key generated by the lock key generation unit is sent to the external device, so that the storage device does not need to hold the lock key.

  According to the storage device according to the first and second embodiments, a lock dedicated machine is not required, the lock can be applied only by power control when removing the storage device, and a unique lock key is used. This makes it possible to protect secure (reliable) data. Further, such a storage device can be applied to any IT device having a removable storage device.

<Embodiment 3>
Next, a storage device according to a third embodiment will be described with reference to the drawings. In the first embodiment, the storage device holds the generated lock key in the storage device. In the second embodiment, the storage device sends the generated lock key to the external device. On the other hand, in the present embodiment, a mode in which a plurality of lock keys are generated and the generated lock keys are stored in a plurality of devices (for example, a storage device and an external device) will be described.

[Constitution]
FIG. 6 is a block diagram illustrating the configuration of the storage device 10 according to this embodiment. Referring to FIG. 6, the storage device 10 of the present embodiment includes the lock key storage unit 17 of the storage device 10 (FIG. 2) according to the first embodiment and the storage device 10 according to the second embodiment. (FIG. 5) A lock key transmission unit 23 is provided. Other configurations of the storage device 10 of the present embodiment are the same as the corresponding configurations of the storage device 10 of the above embodiment. Hereinafter, the difference between the present embodiment and the above embodiment will be mainly described.

  The activation unit 13 activates the lock key generation unit 16, the lock key storage unit 17, the lock key transmission unit 23, and the input / output control unit 18 in response to power input.

  The lock key generation unit 16 refers to the time when the time measurement unit 14 stopped. The lock key generation unit 16 refers to the unique information held by the unique information storage unit 15. The lock key generation unit 16 generates a first lock key and a second lock key from the stop time and the unique information. Here, the lock key may be any character string as long as it is a character string made up of numbers, letters and symbols. Also, the lock key generation unit 16 stores the generated first lock key in the lock key storage unit 17 and outputs the generated second lock key to the lock key transmission unit. Note that the lock key generation unit 16 may generate a lock key based on information specifying a model such as a model code number, information specifying maintenance contract information, and a lock time.

  The lock key transmission unit 23 transmits the second lock key output from the lock key generation unit 16 to an external device (not shown).

  The lock release unit 19 refers to the first lock key held by the lock key storage unit 17 and also refers to the second lock key held by the external device that has received the lock key from the lock key transmission unit 23. The lock release unit 19 compares the first lock key input from the user via the input unit 20 with the first lock key held by the lock key storage unit 17 and also receives the second lock input from the user. The key and the second lock key held by the external device are compared. If the compared lock keys match, the lock release unit 19 issues a lock release command to the input / output control unit 18. On the other hand, when at least one of the compared data is different, the lock release unit 19 issues a signal indicating that the lock release is impossible to the output unit 21.

[Operation]
Next, the operation of the storage device 10 of this embodiment will be described with reference to the drawings.

"When locked"
First, the operation when the storage device 10 is locked will be described with reference to FIG.

  The operations in steps A1 and A2 are the same as in the above embodiment.

  In this embodiment, in step A3, the activation unit 13 activates the lock key generation unit 16, the time measurement unit 14, the lock key storage unit 17, the lock key transmission unit 23, and the input / output control unit 18.

  The operations in steps A4 and A5 are the same as those in the first embodiment.

  In the present embodiment, in step A6, the lock key generation unit 16 generates a first lock key and a second lock key.

  In this embodiment, in Step A7, the lock key storage unit 17 holds the first lock key generated by the lock key generation unit 16, and the lock key transmission unit 23 is generated by the lock key generation unit 16. The second lock key is transmitted to the external device.

  The operations in steps A8 and A9 are the same as in the above embodiment.

"When unlocked"
Next, the operation at the time of unlocking the storage device 10 will be described with reference to FIG.

  The operation in step B1 is the same as that in the above embodiment.

  In the present embodiment, in step B2, the user (operator) inputs the first lock key and the second lock key as unlocking data to the input unit 20 (step B2).

  The operation in step B3 is the same as that in the above embodiment.

  In the present embodiment, in step B4, the lock release unit 19 refers to the first lock key held by the lock key storage unit 17 and an external device (that is, the second lock key transmission destination device). The second lock key stored in is referred to.

  In the present embodiment, in step B5, the lock release unit 19 compares the first lock key input from the user with the first lock key held by the lock key storage unit 17 and is input from the user. The second lock key is compared with the second lock key held by the external device.

  Here, when at least one of the compared lock keys is different (No in Step B5), the lock release unit 19 issues a signal indicating that the lock cannot be released to the output unit 21 (Step B6). Next, the process returns to the flow in which the user inputs unlocking data to the input unit 20 (step B2).

  On the other hand, if all of the compared lock keys match (Yes in step B5), the lock release unit 19 issues a lock release command to the input / output control unit 18 (step B7).

  Steps B8 and B9 are the same as in the above embodiment.

[effect]
According to the storage device of the present embodiment, a plurality of lock keys are generated and held in a plurality of devices (for example, a storage device and an external device), so that even if one lock key is leaked, the storage is performed. It is possible to protect the data held in the storage unit of the apparatus.

  In the present embodiment, one of the plurality of lock keys is held by the storage device and the other is sent to the external device. However, a plurality of lock keys may be sent to the plurality of external devices.

  Various modifications can be made to the storage device according to the embodiment.

<Modification 1>
As a first modification, the unlocking may be restricted for a predetermined period (time range). Specifically, the following function (1) or (2) may be added in preparation for theft or loss of the storage device.

(1) The lock release unit 19 of the storage device 10 according to the above embodiment may not release the lock even if a lock key is input within a certain period from a predetermined time such as during a lock operation. . On the other hand, when a lock key is input after a certain period of time has elapsed, the lock release unit 19 can release the lock according to the comparison result between the input lock key and the held lock key. Here, for example, the storage device movement time (that is, the time required to transport the storage device collected at the customer to the repair center) may be used as the fixed period.

  According to this modification, it is possible to prevent leakage of data held by the storage device 10 during the movement of the storage device 10 (for example, during transportation).

(2) On the other hand, the lock release unit 19 may not release the lock even if a correct lock key is input after a certain period of time has passed since a predetermined time such as a lock operation.

  According to this modification, when the storage device 10 is stolen or the storage device 10 is lost, the lock cannot be released if it cannot be found within a certain time. That is, in such a modification, unlocking within a predetermined time is required, and it is possible to reduce the risk of leakage of data held in the storage device 10 even in cases such as theft or loss.

  In the state where the condition (1) or (2) is satisfied and the lock cannot be released, a lot of information necessary for unlocking is requested in addition to the lock key described in the above embodiment. It is preferable to take time and labor. For example, a release procedure that is difficult to obtain and requires time and effort, such as a procedure that is strictly managed by a small number of predetermined administrators and requires many approvals, and requires multiple release key information A procedure or the like may be adopted.

<Modification 2>
As a second modification, the lock release unit 19 of the storage device 10 according to the embodiment may be configured such that the lock cannot be released when an incorrect lock key is input. In this case, before removing the storage device 10, the lock may be reset by reconnecting the storage device 10 to the information processing apparatus to which the storage device 10 is attached.

  According to such a modification, it is possible to further increase the safety of data held in the storage device 10 as compared with the above embodiment.

In the present invention, the following modes are possible.
[Form 1]
As in the storage device according to the first aspect.
[Form 2]
A lock key generation unit that generates a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus;
The key is generated using information unique to the information processing device and / or information indicating a timing at which the storage device is removed from the information processing device.
The storage device according to aspect 1.
[Form 3]
The information indicating the timing is at least one of a date, time, or a combination thereof, when the storage device is removed from the information processing device.
The storage device according to mode 2.
[Form 4]
The unique information is information that identifies the information processing apparatus.
The storage device according to mode 2 or 3.
[Form 5]
A lock release unit that cancels or maintains the prohibition of access according to whether or not the input key matches the generated key;
The storage device according to any one of Forms 2 to 4.
[Form 6]
A transmission unit for transmitting the generated key to a predetermined device;
The predetermined device holds the generated key received from the transmitter;
The storage device according to any one of forms 2 to 5.
[Form 7]
The unlocking unit cancels or maintains the prohibition of access according to whether the input key matches the generated key held by the predetermined device;
The storage device according to mode 6.
[Form 8]
The access prohibiting method according to the second aspect is as described above.
[Form 9]
Generating a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus;
The key is generated using information unique to the information processing device and / or information indicating a timing at which the storage device is removed from the information processing device.
The access prohibition method according to the eighth aspect.
[Mode 10]
The information indicating the timing is at least one of a date, time, or a combination thereof, when the storage device is removed from the information processing device.
The access prohibition method according to the ninth embodiment.
[Form 11]
The unique information is information that identifies the information processing apparatus.
The access prohibition method according to the ninth or tenth aspect.
[Form 12]
Removing or maintaining the prohibition of access according to whether or not the input key matches the generated key,
The access prohibition method according to any one of forms 9 to 11.
[Form 13]
Transmitting the generated key to a predetermined device;
The predetermined device holds the generated key received from the transmitter;
The access prohibition method according to any one of forms 9 to 12.
[Form 14]
Canceling or maintaining the prohibition of access according to whether the input key matches the generated key held by the predetermined device;
The access prohibition method according to mode 13.
[Form 15]
The program according to the third aspect is as described above.
[Form 16]
When the storage device is removed from the information processing device, the computer is caused to execute a process for generating a key for controlling access to the storage unit,
The key is generated using information unique to the information processing device and / or information indicating a timing at which the storage device is removed from the information processing device.
The program according to form 15.
[Form 17]
The information indicating the timing is at least one of a date, time, or a combination thereof, when the storage device is removed from the information processing device.
The program according to mode 16.
[Form 18]
The unique information is information that identifies the information processing apparatus.
The program according to Form 16 or 17.
[Form 19]
Causing the computer to execute a process of canceling or maintaining the prohibition of access according to whether the input key and the generated key match.
The program according to any one of forms 16 to 18.
[Form 20]
Causing the computer to execute a process of transmitting the generated key to a predetermined device;
The predetermined device holds the generated key received from the transmitter;
The program according to any one of forms 16 to 19.
[Form 21]
Causing the computer to execute a process of canceling or maintaining the prohibition of access according to whether the input key matches the generated key held by the predetermined device;
The program according to form 20.

  It should be noted that the entire disclosure of the above patent document is incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiment can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) are possible within the framework of the entire disclosure of the present invention. is there. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

DESCRIPTION OF SYMBOLS 10 Memory | storage device 11 Power supply part 12 Power supply control part 13 Starting part 14 Time measurement part 15 Specific information storage part 16 Lock key generation part 17 Lock key storage part 18 Input / output control part 19 Lock release part 20 Input part 21 Output part 22 Storage part 23 Lock key transmitter

Claims (11)

A storage device detachable from the information processing device,
A storage unit for holding data;
A power supply for supplying power;
An input / output control unit that prohibits access to the storage unit using the power supplied from the power supply unit when the storage device is removed from the information processing apparatus;
A lock key generation unit that generates a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus;
A transmission unit for transmitting the generated key to a predetermined device;
A lock release unit that cancels or maintains the prohibition of access according to whether the input key matches the generated key held by the predetermined device, or
A storage device. Before Symbol key, the information specific to the information processing apparatus, and / or, said storage device from said information processing apparatus is generated using the information indicating the timing detached,
The storage device according to claim 1. The information indicating the timing is at least one of a date, time, or a combination thereof, when the storage device is removed from the information processing device.
The storage device according to claim 2. The unique information is information that identifies the information processing apparatus.
The storage device according to claim 2 or 3. The lock key generation unit generates a first key and a second key for controlling access to the storage unit when the storage device is removed from the information processing apparatus,
The unlocking unit determines whether the input first key matches the generated first key, and whether the input second key matches the generated second key Cancel or maintain the prohibition of access according to whether or not,
The storage device according to claim 1 . A storage unit for holding the generated first key;
A transmission unit that transmits the generated second key to a predetermined device,
The storage device according to claim 5 . The unlocking unit maintains the access prohibition until a predetermined period elapses after access to the storage unit is prohibited, and the input key and the generated key coincide with each other when the predetermined period elapses. Cancel or maintain the prohibition of access according to whether or not
The storage device according to any one of claims 1 to 6 . The unlocking unit maintains the prohibition of access regardless of whether or not the input key matches the generated key when a predetermined period has elapsed since the access to the storage unit is prohibited.
The storage device according to claim 1 . A storage device detachable from the information processing device
Starting the supply of power when the storage device is removed from the information processing device;
Prohibiting access to a storage unit holding data using the supplied power supply;
Generating a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus;
Transmitting the generated key to a predetermined device;
Removing or maintaining the prohibition of access depending on whether the input key matches the generated key held by the predetermined device, or
An access prohibition method characterized by the above. Before Symbol key, the information specific to the information processing apparatus, and / or, said storage device from said information processing apparatus is generated using the information indicating the timing detached,
The access prohibition method according to claim 9 . For a computer provided in a storage device removable from the information processing device,
When the storage device is removed from the information processing device, a process of starting the supply of power;
A process of prohibiting access to the storage unit holding data using the supplied power supply;
A process for generating a key for controlling access to the storage unit when the storage device is removed from the information processing apparatus;
A process of transmitting the generated key to a predetermined device;
A process of canceling or maintaining the prohibition of access depending on whether or not the input key matches the generated key held by the predetermined device ;
A program characterized by that.

Images