JP7214084B2 - Computer management method, management system, management server and management program - Google Patents

Description

The present invention relates to a computer management method, a management system, a management server, and a management program, and in particular, when a management server acquires disaster information, it can prevent a disaster by taking emergency measures such as locking pre-registered computers. It relates to technology to prevent information leakage at times.

2. Description of the Related Art Today, computers such as personal computers (hereinafter referred to as "PCs") are widely used by public offices, public institutions, private companies, and individuals, and leakage of information stored in the PCs has become a problem. This is because PCs often store various kinds of information that should be kept confidential, such as personal information and confidential information necessary for business. For this reason, various techniques have been provided for erasing information in a PC so that it cannot be restored, and are used when the PC is sold or discarded.

Further, as a document proposing a technique for preventing information leakage from a PC, there is the following patent document pertaining to the present inventor.

JP 2007-316789 A JP 2014-115724 A

By the way, in order to prevent information leakage, it cannot be said that it is enough to improve the integrity of the erasing technology itself, that is, to increase the difficulty of restoring erased data.

This is because the conventional erasing technology is, so to speak, a technology for normal times, and does not always function sufficiently in an emergency such as when a large-scale disaster occurs.

For example, it is difficult to predict the occurrence of disasters such as earthquakes, tsunamis, and fires in advance. In the case of being subjected to this, it is thought that ensuring personal safety is a priority, and that there is neither time nor mental leeway to operate a PC. In addition, since a disaster occurs suddenly, the PC is usually in a logon state during work, and there is a possibility that it will be left as it is in a situation where immediate evacuation is required.

Therefore, in order to prevent information leakage more reliably, it is necessary not only to improve the integrity of the erasing technology itself, but also to take measures to prevent information leakage without being affected by the actions of PC users even in emergencies such as disasters. is desirable.

On the other hand, the invention described in the above patent document aims at preventing information leakage from a lost notebook PC, and does not consider information leakage at the time of disaster.

SUMMARY OF THE INVENTION Accordingly, it is an object of the present invention to provide a new proposal capable of preventing information leakage even in the event of a disaster in which it is difficult to operate a computer.

In order to solve the above problems and achieve the object, a computer management method according to the present invention is a computer management method for taking emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster. The steps executed by the server are a disaster information acquisition step of acquiring disaster information that indicates that a disaster has occurred or is about to occur, and a step of taking emergency measures when the disaster information is acquired. a measure execution command delivery step of transmitting a measure execution command to the computer via a computer network, wherein the step executed by the computer is a measure execution command reception step of receiving the measure execution command from a management server; and a action execution step of executing the emergency action when receiving the action execution order.

In the present invention, when a disaster occurs (including cases where a disaster has not yet occurred but is expected to occur), the computer executes emergency measures in response to a notification or instruction from the management server to prevent information leakage from the computer. . Emergency measures may include, for example, locking the computer, erasing information stored within the computer, or encrypting information stored within the computer.

Here, "locking" a computer means making the computer unusable (data cannot be read or written) by a third party. For example, unless the computer is logged off (or signed out/similarly below) and a predetermined password is entered, the computer cannot be unlocked and logged on (or signed in/same below). It should be noted that when applying the lock, it does not matter whether the running application program is terminated or not. Alternatively, for example, a new password may be set, and the system may be shut down (powered off) after a state in which logon is disabled unless the password is entered. In this case, the password may be requested at the operating system (hereinafter referred to as "OS") level (when the OS is activated), or the password may be requested at the boot level (before the OS is activated). Also good.

"Erasing" information stored in a computer means erasing information stored in a storage device (auxiliary storage device such as a hard disk drive (HDD) or solid state drive (SSD)). To tell. Any specific method of erasing may be used. For example, the "erasure" can be performed by overwriting the entire storage area with meaningless constant data such as "0" or random data such as random numbers once or multiple times. is also possible. The range to be erased is typically the entire data area, but not only the data area but also the protected area can be erased. It may be a part (partition unit or the like) or the like.

It should be noted that when "delete" is executed as an emergency measure, the information to be deleted may be backed up. Specifically, before erasing, the information to be erased is transmitted to the management server via the computer network, and the management server stores the transmitted information.

Furthermore, the "encryption" of information stored in a computer is based on a method that encrypts the entire storage device (disk) (entire HDD area), including the OS area (system area and program files). However, it is also possible to use a method that encrypts only a specific folder (eg, My Documents) or a specific area (eg, data area).

Moreover, the "disaster" referred to in the present invention is not limited to natural disasters and includes man-made disasters. Specific examples include earthquakes, tsunamis, river overflows (floods), storm surges, landslides, debris flows, typhoons, heavy rains, volcanic eruptions, pyroclastic flows, fires, wildfires, terrorism, emergencies (military attacks), nuclear power plant accidents, etc. are included in the "disaster", but other than these are also acceptable.

The management server acquires disaster information, but this "disaster information" is information about disasters that have occurred or are expected to occur, and is typically provided by the national government, local governments, and these organizations (government offices, etc.). It is announced by a public institution such as A typical example is disaster information such as that included in J-Alert. More specifically, earthquake information provided by the Japan Meteorological Agency such as earthquake early warnings and Nankai Trough earthquake information, tsunami information such as large tsunami warnings and tsunami warnings, volcanic information such as eruption warnings, and record-breaking heavy rain information. and weather information such as designated river flood forecasts and landslide warning information, or emergency-related information such as ballistic missile information and large-scale terrorism information provided by the Cabinet Secretariat.

However, the above "disaster information" is not necessarily limited to information provided by public institutions. For example, information on the occurrence of a fire by a fire alarm in a building is also included in the "disaster information" referred to in the present invention. It is also possible to cause the computer to execute emergency measures by sending an emergency measure execution command.

Moreover, even if the type of disaster is the same, there may be several levels of disaster information with different warning levels. For example, as warnings, in order from highest to lowest level, "special warnings" (predicted phenomena are particularly abnormal and the risk of serious disasters occurring is extremely high), "warnings" ( known to be a serious disaster) and "advisory" (those that are said to have a disaster). As for evacuation, in order from high to low, "evacuation order" (need to secure personal safety in extremely dangerous state), "evacuation order" (very dangerous state and safe) need to evacuate to a place), and "prepare to evacuate" (notice to prepare for evacuation).

In the present invention, with regard to such disaster information with different warning levels, only information of the highest level (e.g., special warnings and evacuation orders) can be subject to emergency measures, or in addition to the highest level, one level or Information several levels lower (for example, warnings and evacuation advisories) can also be targeted for action execution. In this case, for example, in the case of a special warning, "Erase" is executed as an emergency measure, and in the case of an alarm, "Lock" is executed. You can do it. Similarly, emergency measures to be taken according to the type of disaster (disaster information), such as executing "delete" in the case of an earthquake early warning and executing "lock" in the case of record-breaking heavy rain information. It is also possible to change the type of

The transmission of the action execution command from the management server to the computer is preferably performed by push technology (active transmission by server push). Pseudo-push transmission such as polling is also possible, but this is because the measures according to the present invention are for emergencies and require promptness.

In one aspect of the present invention, a disaster (disaster information) for which emergency measures should be executed is registered (stored) in advance in a management server, and when the disaster information is acquired, a computer corresponding to the disaster information is stored. In response, the management server transmits a measure execution command.

Specifically, as a step executed by the management server before the action execution order distributing step, one or more types of disaster information among a plurality of types of disaster information are specified as disaster information for executing emergency measures by the computer. further includes a step of registering a disaster to be executed in association with the computer identification information to be executed, and when the disaster information registered by the step of registering a disaster to be executed is acquired by the step of acquiring disaster information, as a step of distributing the instruction to execute the measure, Send a measure execution order to a computer registered in association with disaster information.

Further, in the above aspect, the disaster information includes information specifying the target area, and as a step executed by the management server before the action execution order distributing step, the computer registers location information indicating the location of the computer in association with the computer identification information. Further including a location registration step, the disaster information registered in the action execution disaster registration step is acquired in the disaster information acquisition step, and the target area of the acquired disaster information corresponds to the location registered in the computer location registration step It is preferable that, as the action execution order distributing step, the action execution order is transmitted to the computer registered in association with the disaster information.

Some disaster information, such as emergency-related information in J-Alert, is distributed nationwide, but it is common for specific areas (administrative units such as prefectures and municipalities) to be targeted. and to execute emergency measures only for computers located in the area covered by the disaster information.

Note that two or more locations may be registered as the location. This is because, for example, a portable PC such as a notebook PC may be used in multiple locations such as the workplace and home. By allowing multiple locations to be registered, it is possible to prevent information leakage by executing emergency measures even in the event of a disaster while away from home, for example.

Specifically, in the computer location registration step, two or more locations can be registered as computer locations in association with the same computer identification information. A measure execution command is transmitted to a computer whose location registered in association with the information and registered in the computer location registration step corresponds to the target area of the disaster information.

Furthermore, in any of the above aspects, when the emergency measures include a plurality of different types of measures, and the disaster information registered in the action execution disaster registration step is used as the registered disaster information, the action execution disaster registration step registers a plurality of types of disasters. Two or more pieces of disaster information among the information are registered as registered disaster information, and one of a plurality of types of measures is associated with each piece of registered disaster information and registered, and a measure execution order is: In the action execution step, the computer may execute the action specified by the action execution order as an emergency action, including information indicating the action registered in association with the registered disaster information.

In each of the above aspects described as preferred aspects of the present invention, the conditions for executing emergency measures, that is, the type of disaster information, computer location information, etc., are registered in advance on the management server side (this aspect is referred to as the "first It is also possible to register such information in advance in the computer that executes emergency measures (this aspect is referred to as a "second aspect"). The second mode will be described below.

A computer management method according to a second aspect of the present invention is the computer management method according to the present invention, wherein the action execution command includes information specifying the type of disaster information, and the computer executes before the action execution command receiving step The disaster memorized in the action execution disaster registration step includes a step of registering one or more types of disaster information out of a plurality of types of disaster information in the computer as disaster information for executing emergency measures. If the information corresponds to the disaster information included in the action execution order received in the action execution order receiving step, the computer executes the action execution step.

Also in this second aspect, as in the first aspect, only computers located in the disaster information target area are allowed to execute emergency measures, two or more locations are registered as computer locations, and It is possible to execute different emergency measures depending on the type of disaster information.

Specifically, in the computer management method according to the second aspect, the action execution order further includes information specifying the target area, and the step executed by the computer prior to the step of receiving the action execution order includes specifying the location of the computer. further includes a computer location registration step of registering the indicated location information in the computer, and the disaster information specified by the measure execution order received in the measure execution order receiving step corresponds to the disaster information registered in the measure execution disaster registration step Moreover, the computer may execute the action execution step when the target area specified by the action execution instruction received in the action execution instruction receiving step corresponds to the location registered in the computer location registration step.

In the computer management method according to the second aspect, in the computer location registration step, it is possible to register two or more locations as computer locations in association with the same computer identification information, and to execute the action received in the action execution instruction receiving step. The disaster information specified by the command corresponds to the disaster information registered in the measure execution disaster registration step, and the target area specified by the measure execution command received in the measure execution command receiving step is computer location registration step If any one of the registered locations is applicable, the computer may execute the action execution step.

Further, in the computer management method according to the second aspect, when the emergency measures include a plurality of different types of measures, and the disaster information registered in the action execution disaster registration step is used as the registered disaster information, the action execution disaster registration step: Registering two or more types of disaster information out of a plurality of types of disaster information as registered disaster information, and registering each of the registered disaster information in association with any one of the plurality of types of measures, Accordingly, in the action execution step, the computer may execute the action registered in association with the disaster information in the action execution disaster registration step as an emergency action.

The present invention can take the form of a computer management system, a management server, and a management program, in addition to the management method described above.

That is, a computer management system according to the present invention is a computer management system that takes emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster, wherein the management server is designed to prevent information from leaking to computers when a disaster occurs or occurs. a disaster information acquisition unit that acquires disaster information that is information indicating that a disaster is likely to occur; a measure execution command distribution unit that transmits via a computer network, the computer includes an emergency measure management unit that receives a measure execution command from the management server; and an emergency measure execution unit for executing emergency measures.

In addition, the emergency measure execution unit can execute any one of locking the computer, erasing information stored in the computer, and encrypting information stored in the computer as an emergency measure.

Furthermore, when the emergency measure executed by the emergency measure execution unit is to erase information stored in the computer, before the emergency measure is executed, the emergency measure management unit Information may also be transmitted to the management server over a computer network, in which case the management server stores the transmitted information.

Also in the computer management system according to the present invention, as in the computer management method, a first mode in which conditions for executing emergency measures are registered on the management server side, and a second mode in which the conditions are registered on the computer side. It is possible to adopt.

That is, in the computer management system according to the first aspect, at least one disaster information among a plurality of types of disaster information is computer identification information for specifying the computer as disaster information for executing emergency measures by a computer. The management server further comprises a measure execution disaster storage unit that associates and registers, and when the disaster information acquisition unit acquires the disaster information, the measure execution order distribution unit associates the disaster information with the measure execution disaster storage unit and sends the information to the measure execution disaster storage unit. Sends action execution instructions to the stored computer.

Further, in the computer management system according to the first aspect, the disaster information includes information specifying the target area, and the action execution disaster storage unit stores the location information indicating the location of the computer in association with the computer identification information. , the measure execution order distribution unit, when the disaster information is acquired by the disaster information acquisition unit, the disaster information is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and the measure execution disaster storage unit A measure execution command may be sent to a computer whose location stored in the disaster information corresponds to the target area of the disaster information.

In addition, the measure execution disaster storage unit stores two or more computer locations in association with the same computer identification information, and the measure execution order distribution unit stores, when the disaster information acquisition unit acquires the disaster information, The disaster information is registered in the action execution disaster storage unit as disaster information for implementing emergency measures, and one of the two or more locations stored in the action execution disaster storage unit is the target of the disaster information. A measure execution order may be sent to the computer applicable to the region.

Further, when the emergency measure execution unit is capable of executing a plurality of types of emergency measures, and the disaster information stored in the measure execution disaster storage unit is used as the registered disaster information, the measure execution disaster storage unit can execute a plurality of types of disasters. Two or more pieces of disaster information among the information are stored as registered disaster information, and one of a plurality of types of emergency measures is associated with each of the registered disaster information and stored, and a measure execution order is registered disaster The information includes information indicating an emergency measure stored in association with the information, and the emergency measure execution unit may execute the emergency measure specified by the measure execution order.

Further, in the computer management system according to the first aspect, in the computer management system of the present invention, the action execution command includes information specifying a type of disaster information, and the computer executes one or more of a plurality of types of disaster information. as disaster information for executing the emergency measure, the emergency measure execution unit receives the disaster information stored in the measure execution disaster storage unit by the emergency measure management unit. emergency measures may be taken when

On the other hand, in the computer management system according to the second aspect, the measure execution order further includes information specifying the target area, the measure execution disaster storage unit further stores location information indicating the location of the computer, and the emergency measure management unit corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution order is stored in the measure implementation disaster storage unit. If it corresponds to the location specified by the location information provided, the emergency measure execution unit executes the emergency measure.

Further, in the computer management system according to the second aspect, the measure execution disaster storage unit can store two or more locations as the location of the computer, and the disaster specified by the measure execution order received by the emergency measure management unit The information corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution order is specified by the location information stored in the measure implementation disaster storage unit Emergency measures may be taken by the emergency measures execution department if applicable to the location.

Also in the computer management system according to the second aspect, the emergency measure execution unit can execute a plurality of types of emergency measures, and the measure execution disaster storage unit stores the type of disaster information and the type of emergency measures among the plurality of types of emergency measures. Any one of them is associated and stored, and the emergency measure execution unit may execute an emergency measure corresponding to the disaster information specified by the measure execution order received by the emergency measure management unit.

A management server according to the present invention is a management server that causes a computer to take emergency measures to prevent information leakage from a computer in the event of a disaster, and includes disaster information that indicates that a disaster has occurred or is about to occur. and a measure execution order distribution unit that sends a measure execution order instructing emergency measures to be taken to a computer via a computer network when disaster information is acquired by the disaster information acquisition unit. and Note that the emergency measure is, for example, locking, erasing, or encryption, as in the computer management system described above.

Further, in the above-described management server of the present invention, as a preferred mode, one or more types of disaster information among a plurality of types of disaster information are registered as disaster information for executing emergency measures by a computer in association with computer identification information for specifying the computer. When the disaster information acquisition unit acquires the disaster information, the measure execution disaster storage unit stores the information in the computer associated with the disaster information and stored in the measure execution disaster storage unit. You may make it transmit a measure execution command with respect to.

Further, in the management server according to the above aspect, the disaster information includes information specifying the target area, the action execution disaster storage unit stores the location information indicating the location of the computer in association with the computer identification information, and When the disaster information acquisition unit acquires the disaster information, the command delivery unit determines whether the disaster information is registered in the action execution disaster storage unit as disaster information for executing emergency measures and is stored in the action execution disaster storage unit. A measure execution command may be transmitted to a computer whose location corresponds to the target area of the disaster information.

Further, in the management server according to this aspect, the measure execution disaster storage unit stores two or more computer locations in association with the same computer identification information. When the disaster information is acquired, the disaster information is registered in the action execution disaster storage unit as disaster information for executing emergency measures, and which of the two or more locations stored in the action execution disaster storage unit It is also possible to send a measure execution command to a computer whose location corresponds to the target area of the disaster information.

Further, in the management server according to the above aspect, when the emergency measures include a plurality of different types of emergency measures, and the disaster information stored in the action execution disaster storage unit is registered disaster information, the action execution disaster storage unit: Two or more types of disaster information out of a plurality of types of disaster information are stored as registered disaster information, and each of the registered disaster information is associated with one of a plurality of types of emergency measures and stored. , the action execution order may include information indicating an emergency action stored in association with the registered disaster information. This is so that appropriate emergency measures (desired by computer users and owners) can be applied depending on the type of disaster information.

Further, the computer management program according to the present invention, when receiving from the management server via the computer network an action execution command to take emergency action to prevent information leakage from the computer in the event of a disaster, causes the computer to take the emergency action. which causes the computer to perform a measure execution command receiving step of receiving a measure execution command from a management server and a measure execution step of executing an emergency measure when receiving the measure execution command . Note that the emergency measure is, for example, locking, erasing, or encryption, as in the computer management system described above.

Further, in this computer management program, as a preferred aspect, the action execution order includes information specifying disaster information that is information indicating that a disaster has occurred or is likely to occur, and before executing the action execution order receiving step, causing the computer to perform a measure execution disaster registration step of storing in the computer one or more types of disaster information out of a plurality of types of disaster information as disaster information for executing emergency measures, and the disaster registered in the measure execution disaster registration step; When the action execution command including the information is received in the action execution order receiving step, the computer may be caused to perform the action execution step.

Further, in the computer management program according to the above aspect, the disaster information includes information specifying the target area, the action execution disaster registration step causes the computer to further store location information indicating the location of the computer, and the action execution instruction receiving step further stores location information indicating the location of the computer in the computer. If the target area of the disaster information specified by the received action execution order corresponds to the location stored in the action execution disaster registration step, the computer may be caused to execute the action execution step.

In the measure execution disaster registration step, two or more locations are stored as the location information, and the target area of the disaster information specified by the measure execution order received in the measure execution order receiving step is stored in the measure execution disaster registration step. The computer may be caused to perform the action execution step when the location corresponds to any of the specified locations.

Further, in the computer management program according to the above aspect, when the emergency measures include a plurality of different types of emergency measures and the disaster information stored in the action execution disaster storage unit is used as the registered disaster information, in the action execution disaster registration step , storing two or more types of disaster information out of a plurality of types of disaster information as registered disaster information, and storing each of the registered disaster information in association with any one of a plurality of types of emergency measures; In the action execution step, the emergency action stored in association with the registered disaster information may be executed. This is so that appropriate emergency measures (desired by computer users and owners) can be applied depending on the type of disaster information.

According to the present invention, it is possible to prevent information leakage even in the event of a disaster in which it is difficult to operate a computer.

Other objects, features and advantages of the present invention will become apparent from the following description of embodiments of the present invention based on the drawings. In addition, the same code|symbol shows the same or a corresponding part in each figure.

FIG. 1 is a block diagram showing a functional aspect of a computer management system according to the first embodiment of the present invention. FIG. 2 is a flow chart showing the processing procedure in the computer management system of the first embodiment. FIG. 3 is a diagram showing a user information storage table in the user information storage unit (measure execution disaster storage unit) in the first embodiment. FIG. 4 is a block diagram showing a functional aspect of a computer management system according to the second embodiment of the present invention. FIG. 5 is a flow chart showing the processing procedure in the computer management system of the second embodiment.

[First Embodiment]
As shown in FIGS. 1 to 3, the computer management system according to the first embodiment of the present invention, in the event of a disaster, sends an emergency measure execution command from the management server 21 to the pre-registered user PC 11 via the Internet (computer network) 3. is distributed to the user PC 11 to take emergency measures to prevent information leakage. In the following description, the computer management system is sometimes simply called "system", the management server is sometimes simply called "server", the user PC is simply called "PC", and emergency measures are sometimes simply called "measures".

The management server 21 includes a use request reception unit 22 that receives applications for use of the system according to the present embodiment, the type of disaster information to which emergency measures are applied, the details of the emergency measures to be executed, information specifying the user PC 11 (user ID and a user information storage unit 23 for storing authentication information consisting of a password), the location information of the user PC 11, etc.; A disaster radio reception unit 25 that receives disaster information via radio from a disaster information distribution organization 2 that announces disaster information by radio distribution, and a user information storage unit 23 that searches for emergency information when disaster information is acquired. An applicable PC search unit 27 for extracting the PC 11 on which the action should be executed, a measure execution command delivery unit 26 for transmitting a measure execution command to the PC 11 extracted by the applicable PC search unit 27, and communication via the Internet 3. and a communication control unit (network interface) 28 for controlling.

The disaster information from the disaster information distribution organization 2 that publishes the disaster information wirelessly is acquired by the disaster information acquisition section 24 via the disaster wireless reception section 25 . In addition, in the case of this embodiment, the disaster information distribution organizations 1 and 2 are public organizations such as government agencies and local government organizations (for example, the Fire and Disaster Management Agency).

On the other hand, the user PC 11 includes an emergency measure execution unit 14 that executes emergency measures, an emergency measure management unit 12 that generates usage requests, receives action execution orders, and instructs the emergency measure execution unit 14 to execute measures, An authentication information storage unit 13 for storing authentication information for establishing connection with the management server 21 and a communication control unit (network interface) 17 for controlling communication via the Internet 3 are provided. The emergency measure execution unit 14 also has a PC lock unit 14 a that locks the PC 11 , a data erase unit 14 b that erases data, and an encryption unit 14 c that encrypts the hard disk (HDD) 16 . These units in the PC 11 are implemented by a disaster PC management program installed in advance in the PC 11 that uses the system of this embodiment.

In addition to the configuration described above, the PC 11 includes an OS 15 and a configuration (not shown) generally provided in a PC, that is, an arithmetic processing unit (CPU), a main storage device, an input device (keyboard, mouse, etc.), and a display device (display, etc.). etc. (the same applies to the management server 21). Although the disaster PC management program and the OS 15 are stored in the HDD 16, the HDD 16 is not shown in FIG. is shown as one functional block. Further, although the HDD 16 is provided as an auxiliary storage device in this embodiment, other auxiliary storage devices such as an SSD (Solid State Drive) may be provided.

Furthermore, although only one user PC 11 is shown in FIG. 1, the management server 21 manages a plurality of (a large number of) PCs and distributes action execution instructions to these PCs in the event of a disaster. Also, only one server is shown for the management server 21, but the management server may be configured by a plurality of servers that cooperate with each other, and distributed processing may be performed by these servers.

The disaster PC management program is a resident program that is automatically started when the PC 11 is started. PC 11 (emergency measure management unit 12 via communication control unit 17) can receive a measure execution command distributed from 21 via Internet 3. FIG. In addition, when the emergency measure management unit 12 (disaster PC management program) accesses the management server 21, the user who is issued by the management server 21 and stored in the authentication information storage unit 13 in response to a use application (use request) described later A connection with the management server 21 is established by automatic authentication using an ID (Identification) and a password.

Processing by the system of the present embodiment will be described with reference to FIGS. 2 and 3 as well.

First, when the disaster PC management program is installed in the user PC 11 who wishes to use this system (step S101), the emergency measure management section 12 generates a request for use of this system (step S102) and manages it. An application for use of this system is made by transmitting it to the server 21 via the Internet 3 . The management server 21 that receives this request for use issues a user ID and a password to the PC 11 (emergency measure management unit 12) (step S103) and transmits them to the PC 11 concerned. In response to this, in the PC 11, the emergency measure management section 12 stores the user ID and password in the authentication information storage section 13 (step S104).

Next, the emergency measure management unit 12 requests the management server 21 for option data of registration items. The information to be stored in the user information storage unit 23 includes information for specifying disaster information for which emergency measures are to be taken, and information for specifying measures to be taken (PC lock, data deletion, data deletion with backup, and which encryption is to be executed) and information specifying the location of the PC 11 (prefecture and municipality).

In response to the request from the user PC 11, the management server 21 (usage request reception unit 22) reads option data related to each information of the registration items stored in the management server 21 (step S105), and the user PC 11 (emergency It is transmitted to the action management section 12). In response to this, in the user PC 11, the emergency measure management unit 12 causes the display device (not shown) to display the option data, and allows the user (user or owner of the PC 11) to select each information (step S106). The disaster information presented to the user as options (selectable disaster information) is disaster information that the disaster information acquisition unit 24 can acquire from the disaster information distribution organizations 1 and 2 .

The data selected by the user in step S106 is transmitted to the management server 21 by the emergency measure management unit 12. In the management server 21, the usage request reception unit 22 associates the data with the identification information (user ID and password) of the PC 11. The information is saved in the user information storage unit 23, and the usage registration is completed (step S107).

FIG. 3 shows an example of user information (registration items) stored in the user information storage unit 23. As shown in FIG. As shown in this figure, user "A" with registration number 100001 identified by user ID "15t9ah" and password "ak26b9" has four types of disaster information as disaster information (registered disaster information) for executing emergency measures: In other words, "earthquake early warnings", "major tsunami warnings", "tsunami warnings", and "recording short-term heavy rain information" are registered, and as an emergency measure to be executed, "data deletion" is performed in the case of an emergency earthquake warning, and a large tsunami In the case of warning, registration is performed so that "data deletion" is similarly executed, in the case of tsunami warning, "PC lock" is executed, and in the case of record-breaking heavy rain information, similarly "PC lock" is executed. In this manner, the system of this embodiment can execute different measures depending on the type of disaster information.

In addition, User A has registered two locations, "Shibuya Ward, Tokyo" and "Kohoku Ward, Yokohama City, Kanagawa Prefecture", as the location of the PC 11, and the above registered disaster information for one of these locations is the target area. When acquired by the disaster information acquisition unit 24 of the management server 21, the corresponding emergency measures (registered corresponding to the registered disaster information) will be executed.

In the system of this embodiment, two locations can be registered as the location of the PC 11. However, the system can be configured so that only one location can be registered, or a system that can register three or more locations. It is also possible to

Similarly, user "Otsu" with registration number 100002 identified by user ID "u2rbm3" and password "25fx63" has three types of disaster information: "evacuation instruction for eruption warning", "evacuation advisory for eruption warning" and "landslide warning "alarm" is registered as disaster information, and "data deletion with backup", "encryption", and "PC lock" are registered as measures to be executed in response to these. In particular, this user B has registered to execute "Erase data with backup" when "evacuation order for eruption warning" and to execute "PC lock" for "evacuation advisory for eruption warning" with a lower warning level. ing. In the system of this embodiment, it is possible to execute different measures depending on the difference in the warning level of the disaster information.

In addition, this User B has registered only one location, "Karuizawa Town, Nagano Prefecture", as the location of the PC, and when the registered disaster information for that location is acquired by the management server 21, the PC 11 of User B measures will be taken in

The registered items stored in the user information storage unit 23, that is, the registered disaster information, the measures to be taken, and the location of the PC can be changed by the user. Specifically, the disaster PC management program (emergency measure management unit 12) can generate a change request for registered items, and the authentication information (user ID and password) stored in the authentication information storage unit 13 and the relevant When the emergency measure management unit 12 transmits a change request to the management server 21, the usage request reception unit 22 performs authentication using the authentication information included in the change request, and the user information storage unit 23 stores the change request in association with the authentication information. information on the registered items is transmitted to the user PC 11.

In response to the change request, the use request receiving unit 22 can transmit option data of registration items to the user PC 11 in response to a request from the user PC 11 in the same manner as when applying for use. Select data desired to be registered from the options in the same manner as in , and change (including addition or deletion) the location of the PC registered in the user information storage unit 23, disaster information for executing emergency measures, and measures to be taken at any time. can do

Referring to FIG. 2 again, when the management server 21 receives (obtained by the disaster information acquisition unit 24) the disaster information published by the disaster information distribution organizations 1 and 2 (step S108), the measure execution command distribution unit 26 causes the applicable PC search unit 27 to search the information in the user information storage unit 23 and extract the PC 11 corresponding to the received disaster information (step S109).

Here, the disaster information distributed by the disaster information distribution organizations 1 and 2 includes information specifying the type of disaster (disaster information) and information specifying the target area. The unit 27 extracts PCs 11 that have registered the disaster information and whose registered PC location (one of the PC locations if multiple PC locations are registered) falls within the target area.

For example, in the example of FIG. 3, an earthquake early warning targeting "Kohoku Ward, Yokohama City, Kanagawa Prefecture" (the same applies if the target area is Kanagawa Prefecture or the entire Kanto region) is a disaster information distribution organization. 1 and 2, and when the disaster information acquisition unit 24 receives this, the PC ( User A) is extracted.

It should be noted that User Hei uses "Earthquake Early Warning" as the registered disaster information as well as A, but the target area of the Earthquake Early Warning acquired by the management server 21 is "Kohoku Ward, Yokohama City, Kanagawa Prefecture", and User Hei's PC location is is "Ichikawa City, Chiba Prefecture", the PC of Hei is not extracted by the applicable PC search unit 27 and is not subject to the execution of emergency measures. However, if the disaster information covers the entire Kanto region, "Chiba Prefecture" is also included in the Kanto region. data erasure is performed).

Then, when the corresponding PCs 11 are extracted by the applicable PC search unit 27 , the action execution command distribution unit 26 transmits the action execution command to these PCs 11 via the Internet 3 . This action execution command includes information specifying the type of action to be taken (PC lock, data deletion, data deletion with backup, or encryption). The emergency measure management unit 12 causes the emergency measure execution unit 14 to execute the emergency measure specified by (step S110).

When the action to be executed is data deletion with backup, the emergency measure execution unit 14 (data deletion unit 14b) transfers the backup data (delete object) to the management server 21 via the emergency measure management unit 12 before deleting the data. information) is transmitted, and then the data is erased. The management server 21 saves the backup data transmitted from the PC 11 (step S111).

In this embodiment, the conditions for executing emergency measures (registered disaster information, measures to be taken, and information on PC locations) are registered in advance on the management server 21 side, and when disaster information is acquired, measures are taken only for the corresponding PCs 11. Although the execution command is distributed, it is also possible to adopt a system configuration in which the conditions are registered in advance on the PC 11 side instead of the server 21 side, and the PC 11 side determines whether or not it is disaster information for which measures should be executed. Hereinafter, such a system will be described as a second embodiment with reference to FIGS. 4 and 5. FIG. In the description, the same reference numerals are assigned to the same configurations as those of the first embodiment, redundant description is omitted, and differences are mainly described.

[Second embodiment]
As shown in FIG. 4, in the computer management system according to the second embodiment of the present invention, the management server 41 has the same configuration, but the disaster information acquisition unit 24 receives disaster information from the disaster information distribution organizations 1 and 2. applied PC search unit 27 extracts all the user PCs 31 registered in the user information storage unit 23, and the action execution command distribution unit 26 executes the action for all the extracted user PCs 31. Send orders. This measure execution order includes information specifying the type of disaster information and information on the area targeted by the disaster information (target area information). The user information storage unit 23 stores identification information (authentication information consisting of a user ID and a password) of the user PC 31 issued by the use request receiving unit 22 when the use request is received. In contrast, PC locations, registered disaster information, and information on measures to be taken are not stored.

On the other hand, the user PC 31 (disaster PC management program) is provided with a measure execution disaster storage unit 18, and the measure execution disaster storage unit 18 stores the above-mentioned information stored in the user information storage unit 23 in the first embodiment. Conditions, that is, disaster information (registered disaster information) for executing emergency measures, measures to be taken, and information on the location of the PC are stored, and the above-mentioned measure execution command sent from the management server 41 is executed by itself (PC 31). to carry out registered emergency measures when measures should be carried out for

Processing by the system of this embodiment will be described based on FIG.

As shown in FIG. 5, the disaster PC management program is installed on the PC 31 (step S201), a request for use is generated (step S202) and transmitted to the server 41, a user ID and password are issued (step S203), and the program is sent to the PC 31. Transmission and storage of the user ID and password (step S204) are the same as in the first embodiment.

Next, in this embodiment, an emergency measure is registered (step S205). This registration consists of disaster information for implementing emergency measures (registered disaster information) and the type of measures to be implemented when the disaster information is announced (either PC lock, data deletion, data deletion with backup, or encryption). ), and information on the location of the PC is stored in the action execution disaster storage unit 18 .

In addition, for the registration, the user should be provided with a disaster PC management system so that the same registration as the use registration to the management server 41 in the first embodiment (providing options and allowing them to make selections and then registering) can be performed. The option data may be stored in a storage medium or provided by downloading from the server 41 together with the program.

When disaster information is acquired by the management server 41 (step S206) and a measure execution command is transmitted to the PC 31, the emergency measure management unit 12 stores the disaster information contained in the command in the measure execution disaster storage unit 18. It is determined whether the disaster information is registered disaster information (step S207). If the disaster information is not registered disaster information, the processing is terminated assuming that there is no need to execute measures. corresponds to the PC location stored in the action execution disaster storage unit 18 (step S208). If the target area does not correspond to the location of the PC, the processing is terminated assuming that there is no need to execute the measures. The emergency measure execution unit 14 is caused to execute the measures associated and stored in the measure execution disaster storage unit 18 (step S209).

When the action to be executed is to erase data with backup, the information to be erased is transmitted to the management server 41 before executing the action, as in the first embodiment, and then the action is executed. is saved (step S210).

Although the embodiments of the present invention have been described above, it is obvious to those skilled in the art that the present invention is not limited to these, and that various modifications can be made within the scope of the claims.

For example, in the above embodiment, it was possible to select the action to be taken, but a system with only a single action (for example, one of lock, encryption, and data erasure) may be used, or the Measures other than those described in this specification may be implemented as long as the measures are capable of preventing information leakage.

In the above embodiment, the location of the PC is registered in advance, but the user PC may be provided with a function of acquiring location information (current location information) by GPS, and this location information may be utilized. Specifically, in the system of the first embodiment, the measure execution command delivery unit 26 transmits a measure execution command including the target area information of the disaster information to the user PC 11, and the user PC 11 receiving this transmits the measure execution command using GPS. The emergency measure management unit 12 determines whether the current location of the PC 11 is included in the target area specified by the target area information, and if the current location is included in the target area, emergency measures may be executed. Also, if similar processing is performed in the system of the second embodiment, information leakage can be prevented by executing emergency measures in the event of a disaster.

1, 2 Disaster information distribution organization 3 Computer network (Internet)
11, 31 User PC
12 emergency measure management unit 13 authentication information storage unit 14 emergency measure execution unit 14a PC lock unit 14b data erasure unit 14c encryption unit 15 OS
16 Auxiliary storage device (HDD)
17, 28 communication control unit (network interface)
18 Action execution disaster storage unit 21, 41 Management server 22 Use request reception unit 23 User information storage unit 24 Disaster information acquisition unit 25 Disaster wireless reception unit 26 Action execution order distribution unit 27 Applicable PC search unit

Claims (21)

A computer management method for taking emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster,
As a step executed by the management server,
a measure execution disaster registration step of registering at least one disaster information among a plurality of types of disaster information as disaster information for executing the emergency measure by the computer in association with computer identification information specifying the computer;
a computer location registration step of registering location information indicating the location of the computer in association with the computer identification information;
a disaster information acquisition step of acquiring disaster information that is information indicating that a disaster has occurred or is about to occur;
When the disaster information is acquired after executing the action execution disaster registration step and the computer location registration step, an action execution command instructing the emergency action to be taken is sent to the computer via the computer network. and
The steps performed by the computer include:
a measure execution command receiving step of receiving the measure execution command from the management server;
and a measure execution step of executing said emergency measure upon receipt of said measure execution order ,
The disaster information includes information specifying a target area,
When the disaster information registered in the action execution disaster registration step is acquired in the disaster information acquisition step and the target area of the acquired disaster information corresponds to the location registered in the computer location registration step and transmitting the measure execution order to a computer registered in association with the disaster information as the measure execution order delivery step.
A computer management method characterized by: Said emergency measures are:
locking the computer; or
erasing information stored in the computer; or
2. The computer management method of claim 1, comprising: encrypting information stored within the computer. the emergency action is erasure of information stored in the computer;
2. The computer management method according to claim 1, wherein the information to be deleted is transmitted to the management server via the computer network before the deletion, and the management server stores the transmitted information. in the computer location registration step, two or more locations can be registered as locations of the computer in association with the same computer identification information;
In the action execution command distributing step, one of the locations registered in association with the disaster information acquired in the disaster information acquisition step and registered in the computer location registration step is registered in the computer corresponding to the target area of the disaster information. 2. The computer management method according to claim 1 , wherein the action execution command is transmitted to the computer. The emergency measures include multiple types of different measures,
When the disaster information registered in the action execution disaster registration step is registered disaster information,
In the action execution disaster registration step,
Registering two or more types of disaster information out of multiple types of disaster information as registered disaster information, and registering each of the registered disaster information in association with any one of the multiple types of measures,
The measure execution order includes information indicating measures registered in association with the registered disaster information,
5. The computer management method according to any one of claims 1 to 4 , wherein, in said action execution step, said computer executes the action specified by said action execution instruction as said emergency action. A computer management method for taking emergency measures to prevent information leakage from a management server to a computer via a computer network in the event of a disaster,
As a step executed by the management server,
a disaster information acquisition step of acquiring disaster information that is information indicating that a disaster has occurred or is about to occur;
a measure execution command delivery step of transmitting a measure execution command instructing the emergency measures to be taken to the computer via the computer network when the disaster information is acquired;
The measure execution order includes information specifying the type of disaster information and information specifying the target area,
The steps performed by the computer include:
a measure execution disaster registration step of registering one or more types of disaster information among a plurality of types of disaster information in the computer as disaster information for executing the emergency measures;
a computer location registration step of registering location information indicating the location of the computer in the computer;
a measure execution command receiving step of receiving the measure execution command from the management server after executing the measure execution disaster registration step and the computer location registration step ;
and a measure execution step of executing said emergency measure upon receipt of said measure execution order ,
in the computer location registration step, two or more locations can be registered as locations of the computer in association with the same computer identification information;
The disaster information specified by the action execution order received in the action execution order receiving step corresponds to the disaster information registered in the action execution disaster registration step, and the action execution order received in the action execution order receiving step If the target area specified by corresponds to any one location registered in the computer location registration step, the computer executes the action execution step
A computer management method characterized by: The emergency measures include multiple types of different measures,
When the disaster information registered in the action execution disaster registration step is registered disaster information,
In the action execution disaster registration step,
Registering two or more types of disaster information out of multiple types of disaster information as registered disaster information, and registering each of the registered disaster information in association with any one of the multiple types of measures,
7. The computer management method according to claim 6 , wherein, in said action execution step, said computer executes the action registered in association with disaster information in said action execution disaster registration step as said emergency action. A computer management system that takes emergency measures to prevent information leakage from a management server to computers via a computer network in the event of a disaster,
The management server is
a disaster information acquisition unit that acquires disaster information that indicates that a disaster has occurred or is about to occur;
a measure execution command delivery unit configured to transmit a measure execution command instructing the emergency measure to be taken to the computer via the computer network when the disaster information is acquired by the disaster information acquisition unit ;
a measure execution disaster storage unit for registering one or more types of disaster information among a plurality of types of disaster information as disaster information for executing the emergency measures by the computer in association with computer identification information for specifying the computer;
with
The computer is
an emergency measure management unit that receives the measure execution order from the management server;
an emergency measure execution unit that executes the emergency measure when the emergency measure management unit receives the order to execute the measure ;
The disaster information includes information specifying a target area,
the action execution disaster storage unit stores location information indicating the location of the computer in association with the computer identification information;
When the disaster information acquisition unit acquires the disaster information, the measure execution order distribution unit determines whether the disaster information is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and Sending the measure execution order to a computer whose location stored in the disaster storage unit corresponds to the target area of the disaster information
A computer management system characterized by: The emergency measure execution unit
locking the computer; or
erasing information stored in the computer; or
9. The computer management system of claim 8 , which performs encryption of information stored within the computer. the emergency measure executed by the emergency measure execution unit is erasure of information stored in the computer;
Before the emergency measure is executed, the emergency measure management unit transmits information stored inside the computer to the management server via the computer network,
10. The computer management system according to claim 9 , wherein said management server stores said transmitted information. The action execution disaster storage unit stores two or more locations as locations of the computers in association with the same computer identification information,
When the disaster information acquisition unit acquires the disaster information, the measure execution order distribution unit determines whether the disaster information is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and 9. The computer management system according to claim 8 , wherein said action execution command is transmitted to a computer whose location among said two or more locations stored in said disaster storage unit corresponds to the target area of said disaster information. . The emergency measure execution unit is capable of executing multiple types of emergency measures,
When the disaster information stored in the action execution disaster storage unit is registered disaster information,
The action execution disaster storage unit
Two or more types of disaster information out of a plurality of types of disaster information are stored as registered disaster information, and one of the plurality of types of emergency measures is associated with each of the registered disaster information and stored. cage,
the action execution order includes information indicating an emergency action stored in association with the registered disaster information;
12. The computer management system according to any one of claims 8 to 11 , wherein said emergency action execution unit executes an emergency action specified by said action execution instruction. A computer management system that takes emergency measures to prevent information leakage from a management server to computers via a computer network in the event of a disaster,
The management server is
a disaster information acquisition unit that acquires disaster information that indicates that a disaster has occurred or is about to occur;
a measure execution command distribution unit configured to transmit a measure execution command instructing the emergency measures to be taken to the computer via the computer network when the disaster information is acquired by the disaster information acquisition unit;
The computer is
an emergency measure management unit that receives the measure execution order from the management server;
an emergency measure execution unit that executes the emergency measure when the emergency measure management unit receives the measure execution order ;
a measure execution disaster storage unit for storing location information indicating the location of the computer, and for storing one or more types of disaster information among a plurality of types of disaster information as disaster information for executing the emergency measures;
with
The measure execution order includes information specifying the type of disaster information and information specifying the target area,
The action execution disaster storage unit is capable of storing two or more locations as locations of the computer,
The disaster information specified by the measure execution order received by the emergency measure management unit corresponds to the disaster information stored in the measure execution disaster storage unit, and the target area specified by the measure execution order is the measure The emergency measure execution unit executes the emergency measures if the location information stored in the execution disaster storage unit corresponds to any of the locations specified by the location information.
A computer management system characterized by: The emergency measure execution unit is capable of executing multiple types of emergency measures,
The action execution disaster storage unit associates and stores a type of disaster information with one of the plurality of types of emergency measures,
14. The computer management system according to claim 13 , wherein said emergency measure execution unit executes an emergency measure corresponding to disaster information specified by a measure execution order received by said emergency measure management unit. A management server that causes a computer to execute emergency measures to prevent information leakage from a computer in the event of a disaster,
a disaster information acquisition unit that acquires disaster information that indicates that a disaster has occurred or is about to occur;
a measure execution command delivery unit configured to transmit a measure execution command instructing the emergency measure to be taken to the computer via a computer network when the disaster information is acquired by the disaster information acquisition unit ;
a measure execution disaster storage unit that registers one or more types of disaster information among a plurality of types of disaster information as disaster information for executing the emergency measures by the computer in association with computer identification information that identifies the computer;
with
The disaster information includes information specifying a target area,
the action execution disaster storage unit stores location information indicating the location of the computer in association with the computer identification information;
When the disaster information acquisition unit acquires the disaster information, the measure execution order distribution unit determines whether the disaster information is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and Sending the measure execution order to a computer whose location stored in the disaster storage unit corresponds to the target area of the disaster information
A management server characterized by: Said emergency measures are:
locking the computer; or
erasing information stored in the computer; or
16. The management server of claim 15 , wherein: encryption of information stored within said computer. The action execution disaster storage unit stores two or more locations as locations of the computers in association with the same computer identification information,
When the disaster information acquisition unit acquires the disaster information, the measure execution order distribution unit determines whether the disaster information is registered in the measure execution disaster storage unit as disaster information for executing emergency measures, and 17. The management according to claim 15 or 16 , wherein the action execution command is transmitted to a computer whose location among the two or more locations stored in the disaster storage unit corresponds to the target area of the disaster information. server. The emergency measures include multiple types of different emergency measures,
When the disaster information stored in the action execution disaster storage unit is registered disaster information,
The action execution disaster storage unit
Two or more types of disaster information out of a plurality of types of disaster information are stored as registered disaster information, and one of the plurality of types of emergency measures is associated with each of the registered disaster information and stored. cage,
18. The management server according to any one of claims 15 to 17 , wherein the action execution command includes information indicating an emergency action stored in association with the registered disaster information. A computer management program for causing a computer to take an emergency measure to prevent information leakage from a computer in the event of a disaster when a measure execution order instructing the computer to take emergency measures is received from a management server via a computer network, said computer management program comprising:
The computer management program causes the computer to perform the following steps:
One or more types of disaster information out of a plurality of types of disaster information are stored in the computer as disaster information for executing the emergency measures, and location information indicating the location of the computer is stored in the computer. a registration step;
a measure execution command receiving step of receiving the measure execution command from the management server after the step of registering the measure execution disaster ;
and a measure execution step of executing said emergency measure upon receipt of said measure execution order ,
The measure execution order includes information specifying disaster information, which is information indicating that a disaster has occurred or is likely to occur,
The disaster information includes information specifying a target area,
The computer management program is
In the action execution disaster registration step, two or more locations are stored as the location information;
A measure execution command including the disaster information registered in the measure execution disaster registration step is received in the measure execution command receiving step, and the disaster information specified by the measure execution command received in the measure execution command receiving step. corresponds to any of the locations stored in the step of registering disasters for taking measures, causing the computer to carry out the steps for taking measures
A computer management program characterized by: Said emergency measures are:
locking the computer; or
erasing information stored in the computer; or
20. The computer management program of claim 19 , which is encryption of information stored within the computer. The emergency measures include multiple types of different emergency measures,
When the disaster information to be stored in the computer in the action execution disaster registration step is registered disaster information,
In the action execution disaster registration step,
storing two or more types of disaster information out of a plurality of types of disaster information as registered disaster information, and storing each of the registered disaster information in association with any one of the plurality of types of emergency measures;
21. The computer management program according to claim 19 or 20, wherein, in said action execution step, an emergency action stored in association with said registered disaster information is executed.

Images