JP6923311B2 - Data erasure method - Google Patents

Description

The present invention relates to a method of erasing data on a recording medium, for example, a hard disk attached to a personal computer.

In recent years, the importance of compliance has been called for, and the importance of various types of information management is increasing, especially in government agencies and companies. For example, it is necessary to prevent data erasure due to malicious or erroneous operation regarding the disposal process of a personal computer (hereinafter referred to as a personal computer) and the method of erasing the data remaining on the personal computer when the person in charge of the business retires. It is also important to confirm that the data remaining on the hard disk has been erased.

Conventionally, when erasing data remaining on a recording medium such as a hard disk, for example, dedicated application software is used. Patent Document 1 proposes a data erasure method for appropriately erasing data from the hard disk of a personal computer. In the present invention, instruction information such as an erasure pattern supplied from an administrator is acquired, an erasure program according to the instruction information is specified, and the user PC stores the received erasure program in its own memory. Run the program and erase the data on your hard disk.

Japanese Patent Application Laid-Open No. 2003-256283

However, in the above-mentioned conventional example, even if the data on the hard disk is erased by using the software, the history is not recorded. For example, even if you check the hard disk after erasing, you cannot identify the application software. In addition, it is not possible to prevent the data on the hard disk from being erased maliciously or by erroneous operation.

Therefore, in view of the above problems, the present invention displays information such as an erasure log on a recording medium in which data has been erased, identifies the application software in which the data has been erased, and deletes data due to malicious intent or data due to erroneous operation. It provides a data erasure method that makes it possible to prevent erasure.

According to the first invention, the above object is a data erasing method of a data erasing device having a management server provided with an asset management ledger and a computer connected to the management server, and the computer has a recording medium. A data erasing program for erasing the data of the above is provided, and the management server obtains a one-time password including a unique number read from the asset management ledger based on a data erasing request of a recording medium in the computer from the computer. It is sent to the computer by e-mail, the computer erases the data on the recording medium using the unique number transmitted from the management server, and when the data erasure is completed, the encryption including the unique number and the erase log is completed. This can be achieved by creating the granted authorization number and providing a data erasing method for notifying the management server of the information of the authorization number.

Further, the transmission of the unique number from the management server is performed based on the data erasure request of the recording medium from the computer, and after the data erasure processing of the recording medium is completed, the display of the computer equipped with the recording medium is permitted. The feature is to display the information of the erasure log including the number, the date and time of data erasure, and the serial number.

Further, when the management server is notified of the permission number and the erasure log information from the computer, the management server records the permission number and the erasure log information in the corresponding area of the asset management ledger. In addition, the management server is equipped with a collation program, and the record of the above information analyzes the permission number notified from the computer, determines whether the unique number included in the permission number matches the previously transmitted unique number, and matches. It is characterized in that the permission number and the information of the erasure log are recorded in the above-mentioned asset management ledger only when the above is performed.

According to the present invention, it is possible to provide a data erasure method that prevents data erasure due to malicious intent or erroneous operation, ensures security management, and ensures compliance.

It is a system configuration diagram used for the data erasure method of this embodiment. It is a figure explaining the data erasure function of this embodiment. It is a flowchart explaining the data erasure method of this embodiment, and shows, for example, the processing on the personal computer side and the processing on the management server side. It is a flowchart explaining the data erasure process. It is a figure which shows the display example of the display of the personal computer.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a system configuration diagram used for the data erasure method of the present embodiment. This example describes, for example, a data erasure method for a hard disk (HDD) built in an information management system of a certain company. In the figure, the management server 1 and the personal computers 3-1 to 3 to n installed in the plurality of business units 2-1 to 2 to n are connected to each other via a communication line.

As shown in the figure, a database (DB) asset management ledger 4 is connected to the management server 1, and the asset management ledger 4 is connected to the purchase history of the personal computers 3-1 to 3 to n, which will be described later. Information such as data erasure information is recorded. Further, the above three personal computers 3-1 to 3-3 are installed in the office 2-1 for example, and the two personal computers 3-4 and 3-5 are installed in the office 2-2. Personal computers 3-6 to 3-n are also installed at the corresponding offices 2-3 to 2-n. This example describes data erasure of the hard disk attached to the personal computer 3-1 to 3-n.

FIG. 2 shows the connection relationship between the management server 1 and the personal computer 3 (for example, the personal computer 3-1) as a specific example for explaining the data erasure function of this example. As described above, the management server 1 has the asset management ledger 4 Is connected, and the personal computer 3-1 and the management server 1 are connected by a communication line, and mail and data can be exchanged.

The personal computer 3-1 is composed of a CPU 5, a ROM 6, a RAM 7, a hard disk 8, and the like, and the CPU 5 performs processing according to a system program registered in the ROM 6. Further, a data erasure program 9 for erasing data on the hard disk 8 is installed in the personal computer 3-1 and is supplied by, for example, USB 10 shown in FIG. The data erasure program 9 is not limited to the USB 10, and can be supplied by using various means such as the CD-ROM 11 shown in the figure and the network distribution 12.
Further, the data erasure program 9 may be written in the ROM 6 from the beginning as a part of the management system. In this case, it is not necessary to introduce the data erasure program 9 into the personal computer 3-1 later. After the data erasing process of the hard disk 8 is completed, the display 13 of the personal computer 3-1 displays the permission number and the erasing log information described later.

Next, the method of erasing the hard disk of the present invention will be described. FIG. 3 is a flowchart illustrating a data erasure method for the hard disk 8 of the present invention. The left side of the figure shows the processing on the personal computer 3-1 side, and the right side shows the processing on the management server 1 side.

First, the person in charge of the personal computer 3-1 who wishes to erase the data stored in the hard disk 8 requests the management server 1 for permission to erase the data (step (hereinafter, indicated by S) 1).
The management server 1 monitors various signals and notifications output from the personal computers 3-1 to 3-n (step (hereinafter referred to as ST) 1). For example, when the above request is received from the personal computer 3-1 (ST2). Yes), the management server 1 issues a data erasure permission email (ST3). This data erasure permission email contains information on the unique number (UN) of the asset management ledger 4. The information of this unique number (UN) is indispensable information when erasing the data of the hard disk 8 by the personal computer 3-1.

After requesting the above data erasure permission (S1), the personal computer 3-1 is waiting for the notification of the data erasure permission from the management server 1 (S2), and when the data erasure permission mail is received from the management server 1 (S1). S3 is YES), the above unique number (UN) of the asset management ledger 4 included in this mail is acquired, and the data of the hard disk 8 is erased using this unique number (UN) (S4).

FIG. 4 is a flowchart illustrating this data erasure process. First, the data erasure program 9 introduced from the above-mentioned USB10 or the like is started (S4-1). Next, it is confirmed whether the unique number (UN) included in the above data erasure permission email is a legitimate one (S4-2), and if it is a legitimate unique number (UN) (S4-2 is YES). The data recorded on the hard disk 8 is erased according to the data erasing program 9 (S4-3). Then, it is determined whether all the data in the hard disk 8 has been erased (S4-4), and if all the data has been erased (YES in S4-4), the erase log and the permission number are created (S4-). 5). If the received unique number (UN) is not a legitimate one (NO in S4-2), an error is displayed.

The erasure log includes, for example, the serial number of the hard disk 8, information on the date and time when the data erasure process was performed, and information on the person in charge of the process, and the permission number is the content of the erasure log. It is an encrypted unique number including.

Next, the information of the created permission number is displayed on the display 13 of the personal computer 3-1 (S4-6). From this display, the person in charge of the personal computer 3-1 confirms that the data erasure process of the hard disk 8 has been surely performed. Then, the information of the permission number including the erasure log is recorded in the storage unit (S4-7). For example, recording is performed in the storage unit of the USB 10 described above. Note that this information may be recorded on the hard disk 8.

Here, the display displayed on the display 13 of the personal computer 3-1 displays not only the encrypted unique number but also information such as the date and time of data erasure, the serial number, and the name of the person in charge. FIG. 5 shows an example of this display.

After that, the personal computer 3-1 determines that the data erasure of the hard disk 8 is completed (returning to FIG. 3, S4 → S5 is YES), and sends a data erasure result report mail to the management server 1 (S6). .. The management server 1 side is waiting for the deletion result report mail (ST4), and when this mail is received from the personal computer 3-1 (ST5 is YES), the permission number information included in the received deletion result report mail is displayed. It analyzes and determines whether the unique number (UN) included in this information matches the previously transmitted unique number (UN), and if they match, describes the permission number information in the asset management ledger 4 (ST6). ..

In the asset management ledger 4, an area for recording installation information, history information, and data erasure information of this example is set for each personal computer 3-1 to 3-n, and the installation information includes, for example, the installation date and time and the installation office. Information such as the name and serial number of the hard disk (HDD) is recorded, and the history of the person in charge and maintenance information are recorded as the history information. Further, as the data erasure information of this example, the erasure log information including the above-mentioned permission number and information such as the date and time of data erasure is recorded, and the above permission number and the erasure log information are recorded in this corresponding area. Will be done.

By processing in this way, the data erasure information of the personal computers 3-1 to 3-n installed for each business establishment to which the asset management ledger 4 belongs is recorded, and information management that ensures compliance can be performed. ..
For example, if an employee or a third party maliciously attempts to erase the information on the personal computers 3-1 to 3-n, an error will occur even if the data erasure software is used due to the above-mentioned unique number (UN), and the hard disk The data of 8 can be kept safe. Further, the unique number (UN) is transmitted from the management server 1 side at the request of the personal computer 3-1 to 3-n side, and the confirmation process of the unique number (UN) is performed as described above. It is also possible to prevent the information on the hard disk 8 from being erased due to an erroneous operation by another operator.

Further, data erasure information for each personal computer 3-1 to 3-n is recorded in the asset management ledger 4, and the management server 1 always refers to the asset management ledger 4 and sends it to the management server 1. You can check the information in the erasure result report. Therefore, for example, even if an employee or a third party maliciously sends an e-mail reporting the result of erasing false data in order to acquire information on the personal computers 3-1 to 3-n, it can be easily determined that the e-mail is a false e-mail. .. That is, it can be seen that the false erasure result report does not include the unique number (UN) of the above-mentioned asset management ledger 4, or the unique numbers (UN) do not match, and the mail is a false mail. Therefore, the information of the hard disk 8 can be safely managed, and the information can be managed with security.

The unique number (UN) used in the description of the above embodiment may be, for example, a unique number (UN) for a specified period or a one-time password. With this configuration, if the data erasure permission mail is issued from the management server 1 side and the data erasure is not performed for a predetermined period of time, the data erasure permission is substantially revoked, and the hard disk 8 can be more safely revoked. Information can be managed.

Further, the data erasure result to be notified to the management server 1 side after the data erasure described in the above embodiment may be reported verbally. By processing in this way, the person in charge of data erasure or the worker can confirm the completion of the data erasure process and can reliably convey the information to the management server 1 side, and further ensure the compliance of the information management. It can be realized.
Further, the report of the data erasure result notified to the management server 1 side after the data erasure is displayed on the display 13 of the personal computer 3-1 to 3-n as a bar code or a QR code (registered trademark) and read by a sensor. good.

Further, although the description of the present embodiment includes the asset management ledger 4, it is not always necessary to include the asset management ledger 4 in the present invention. In this case, the unique number (UN) is created by the management server.

Further, although the personal computer has been described as a computer in the description of the present embodiment, the present invention is not limited to the personal computer. Further, although the hard disk has been described, a recording medium other than the hard disk such as SSD (Solid State Drive) may be used.

1 ... Management server 2, 2-1-2-n ... Business office 3, 3-1 to 3-n ... Personal computer 4 ... Asset management ledger 5 ... CPU
6 ... ROM
7 ... RAM
8 ... Hard disk 9 ... Data erasure program 10 ... USB
11 ... CD-ROM
12 ... Network distribution 13 ... Display

Claims (5)

It is a data erasure method of a data erasure device having a management server provided with an asset management ledger and a computer connected to the management server.
The computer is equipped with a data erasure program that erases data on a recording medium.
Based on the data erasure request of the recording medium in the computer from the computer, the management server sends a one-time password including a unique number read from the asset management ledger to the computer by e-mail.
The computer erases the data on the recording medium using the unique number transmitted from the management server.
When the data erasure is completed, an encrypted permission number including the unique number and the erasure log is created.
A data erasure method comprising notifying the management server of the information of the permission number. The data erasure method according to claim 1, wherein the data erasure program is later introduced into the computer via a portable recording medium or a communication line. After the data erasure process of the recording medium is completed, the information of the erasure log including the permission number, the date and time of data erasure, and the serial number is displayed on the display of the computer equipped with the recording medium. The data erasure method according to claim 2. When the management server is notified of the permission number and the erasure log information from the computer, the management server records the permission number and the erasure log information in the corresponding area of the management server or the asset management ledger or the portable recording medium. The data erasing method according to claim 2 or 3, wherein the data is erased. 2. The management server includes a collation program, analyzes the permission number notified from the computer, and determines whether the unique number included in the permission number matches the previously transmitted unique number. The data erasing method according to 3, or 4.

Images