JPS626290A - Data storage system - Google Patents

Abstract

(57) [Summary] This bulletin contains application data before electronic filing, so abstract data is not recorded.

Description

DETAILED DESCRIPTION OF THE INVENTION [Summary] A data storage method that improves confidentiality by updating an encryption code given when storing data in a data storage unit according to given conditions.

[Industrial application field]

The present invention relates to a data storage system, and particularly to a data storage system in which an encryption code is attached to data to be stored in order to maintain confidentiality.

[Conventional technology]

Information stored in a database can be quickly obtained using a search system, but there is a risk that information that should be kept confidential may be obtained by a third party using such a search system. need to be prevented.

For this reason, in the past, information that should be kept secret was encrypted to make it difficult for anyone other than a specific person to search for this information.

FIG. 5 is a diagram explaining a conventional data storage method,
From the keyboard Q, data (1
, 58123456) with an occupational code, the encrypting unit N assigns an encrypted code AA corresponding to this identification code and stores it in the data storage unit.

When the P-chi data (2,5973162) is inputted with the identification code Z attached, the encryption section N adds an encryption code BB corresponding to - to this data and stores it in the data storage section.

Therefore, a third party can access the information stored in this data storage unit (1,58123456) :AA, (2,59
73162) - Even if one knows or obtains BB, it becomes difficult to decipher what N enters and BB means, and the purpose of keeping the information confidential is achieved for the time being.

[Problem that the invention seeks to solve]

However, with this data storage method, once a third party learns the meaning of the code used for encryption, all the information stored in the data storage unit that should be kept secret cannot be read. There is a concern that this may occur.

The present invention has been made in view of this point, and an object of the present invention is to provide a data storage method that can more reliably maintain confidentiality.

[Means for solving problems]

FIG. 1 shows a block diagram of the principle of the data storage system of the present invention.

4 is a phase pattern table, T is each phase 1, 2° 3.・
A conversion phase device having a memory provided with flag bits corresponding to . . . H is date 2 time.

A basic phase control device that sets one fixed bit of the flag bit to rlJ according to a pre-given update Φ new condition such as the number of database accesses, A is a database update encryption device, and M is a data input/output encryption device. , P
is a data input/output section, and D is a data storage section in which data input from the data input/output section P is stored.

[Effect]

Under the control of the basic phase control device H, the phase data of the conversion phase device T is updated according to predetermined conditions such as the number of accesses to the data storage unit 2 days and 2 hours.

At "ta", the flag bit of the conversion phase shifter T is set from "0°" to "1".

The encryption code attached to the data in the data storage section is also updated to a new encryption code corresponding to the updated phase data. The update of the encryption code given to this data is expressed by the database update encryption device A.

The database update encryption device [A adds an encryption code in the phase pattern table corresponding to the valid phase to the data stored in the data storage unit.

The data input/output encryption device M converts the identification code input from the data input/output unit P into an encryption code by referring to the flag bit of the conversion phase device T and the phase pattern table r, and conversely stores data. The encryption code attached to the data in the part is converted into an identification code corresponding to the valid bits in the conversion phase shifter T, and this identification code is given to the data retrieved from the data storage part.

〔Example〕

Embodiments of the present invention will be described in detail below with reference to the drawings.

Figure 2 is a configuration diagram of an embodiment of the present invention, in which parts equivalent to those in Figure 1 are given the same reference numerals. Q is a keyboard, and R is a memory that stores the phase pattern table I. G is a display section. Data to be stored in the data storage section is input from the keyboard Q.

This data is, for example, as shown in FIG. 3(a), and has an identification code of 3. 4. Kl...... is each data (1t 58123456) * (2,59
73162')v(2,57486102)...
Indicates the order of importance of... When this identification code is input from the keyboard Q, the data input/output encryption device M
is converted into an encrypted code as follows.

By referring to the flag bit of the conversion phase shifter MT, it is found that the phase pattern is valid. Next, referring to the phase pattern table I (FIG. 4) in the storage section R, this table I
Encrypted codes A, &B, AC, in the phase °1° column of
AD is assigned according to the identification code of input data.

For example, if the identification code attached to the input data (1,58123456) is 3,000, the encryption code AC is attached to the input data of Jin and stored in the data storage unit.

FIG. 3 (bl is a schematic representation of the data stored in this way).

When performing an information search, an identification code such as 1 is input using the keyboard.

The data input/output encryption device M knows the phase in which the flag bit of the conversion phase device T is “1”, and based on this phase, encodes the encryption code corresponding to the identification code in the phase pattern tape A/I. seek.

In the conversion phase device T, when the flag pit corresponding to the phase °1”K is 11°, the encryption code corresponding to 1 in the identification code is AA, so the data input/output encryption device 1
M reads out all the data to which the encryption code N has been added in the data storage section, then adds 1 to the identification code corresponding to the encryption code AA to these successively generated data, and displays it on the display section G. Output.

In this way, the search for data whose identification code is numbered 1 is completed.

The basic phase control 1ifH updates the phase data of the conversion phase device T according to predetermined update conditions (date and time, number of accesses to the data storage unit, etc.).

Therefore, a new conversion phase + 7 lag bit count 1 in H1T is added.
The phase set to ° is valid. The update of this phase data may be performed by adding "11" to the old phase.Then, from the basic phase control device 111j) (to the database update encryption device A, the new and old phase data before and after the update are sent to the database update encryption device A. When the new and old phase data are input, the database update encryption device refers to the phase pattern table I and encrypts the data corresponding to the old phase °1'' attached to the data in the data storage section. In the code λ, AB and AC are encoded codes BA and BB corresponding to the new phase "2', respectively.

Change to BC. At this time, since the number of data to which 4 is attached to the identification code is considerably larger than the number of data to which other identification codes are attached, the encryption code is not changed in conjunction with the change in the phase data.

Therefore, the task of changing the encryption code when updating the phase data by the basic phase control device H appears to be relatively simple. As a result,
Data with an identification code of 4 still has an encryption code added to it when stored in the data storage unit.

When searching for data with 4 added to the identification code, when 4 is entered as the identification code from the keyboard Q, the data input/output encryption device ff1M converts the conversion phase device T at the time of the search.
Not only the encryption codes corresponding to the phase in which 7 lug bits are 01'', but also all the encryption codes AD and BD corresponding to the identification code 4.

Search for data marked with CD.

When searching, the data input/output encryption device fM does not use each encryption code individually as a search key.
Kl, 2. All encryption codes other than the encryption code corresponding to 3 are used as search keys.

For example, if the effective phase is 2'', when searching for the identification code 4, the search key is AA+BB+BC (however, "+°" is the sum logic, and the par symbol is]
, ) (NOT) represents equal. ).

By using such a logical conditional expression as a search key, a faster search is possible than using each encryption code one by one as a search key.

〔Effect of the invention〕

In this way, in the data storage method according to the present invention, the encryption code used for confidentiality is updated, so there is no chance that the data with the encryption code stored in the data storage unit will be accidentally revealed to a third party. Even if the data is obtained, the third party will recognize it as different data after the encryption code is updated, so it will be difficult to decipher the obtained data. be.

[Brief explanation of drawings]

Fig. 1 is a diagram explaining the principle of the present invention, Fig. 2 is a diagram showing the configuration of an embodiment of the invention, Figs. 3 (a) and (b) are diagrams showing the data format, and Fig. 4 is a diagram showing the phase pattern table. , @5 is a diagram showing a conventional data storage method. ■=Phase pattern table, T: Conversion phase device, H: Basic phase control device, A: Database! -New control device, M
:Data input/output encryption device, D:D/″″M-:1
．． 1, Honfa Tsuki n, Tan FF Blind Love Sun Moon Go 1r!
3 years old, 1,000 Uel a smoking method 2 example no harsh command km storage 20

Claims (1)

[Claims] an input unit for inputting data with an identification code added thereto; an input unit for converting the identification code of the input data into an encryption code; and an input unit for converting the identification code of the input data into an encryption code, and converting the encryption code added to the data read from the data storage unit into an identification code. a data input/output encryption device to be converted; a phase pattern table obtained by assigning phases to each of a plurality of encryption codes determined corresponding to the identification code; It has a conversion phase device that makes the phase valid, and a basic phase control device that updates the phase that is made valid according to a given condition, and that corresponds to the phase that has been updated and made valid according to the given condition. Data storage characterized in that a new encryption code is obtained from the phase pattern table, and the new encryption code is added to the data in place of the encryption code added to the data in the data storage section. method.