JPWO2007142072A1 - Terminal apparatus and data management system provided with the same - Google Patents

Abstract

The present invention relates to a terminal device that can encrypt and decrypt data without bothering a user. The terminal device 6 monitors the processing in the editing processing unit 24, the editing processing unit 24 that performs reading processing for reading data, editing processing for editing the read data, writing processing for writing the edited data, and editing processing unit 24 When 24 executes the writing process, instead of the editing processing unit 24, the edited data is encrypted and stored in the recording media 22, 31, 32, while the editing processing unit 24 executes the reading process. Includes a data management unit 27 that reads encrypted data to be read from the recording media 22, 31, and 32, decrypts the read data, and provides the read data to the editing processing unit 24 instead of the editing processing unit 24.

Description

  According to the present invention, a recording medium that stores data is connected, a terminal device that encrypts and stores data in the recording medium, a plurality of the terminal devices, and a management server that manages the terminal devices are in electrical communication. The present invention relates to a data management system connected via a line.

  In recent years, there has been a frequent problem that data stored in a computer leaks to the outside and secret information leaks to the outside. For example, JP-A-9-204330 discloses this problem. Such encryption / decryption devices have been proposed.

  This encryption / decryption device is configured to be able to encrypt or decrypt a specific file (data) selected by the user among the files (data) stored in the device. By encrypting a file having a problem when known to a third party, even if the encrypted file leaks to the outside, the information related to the encrypted file does not leak.

JP-A-9-204330

  However, in the above conventional encryption / decryption device, it is necessary for the user to perform an operation of encrypting or decrypting the file, for example, checking or editing the content of the encrypted file. When performing such operations, there is a problem that it is very troublesome because the file must be decrypted before the operation and the file must be encrypted after the operation.

  In addition, due to such a problem, a file including data related to secret information is often not encrypted by the user, and when such a file flows out, the secret information leaks out.

  As described above, the conventional encryption / decryption apparatus takes time and effort to prevent information leakage, and information leakage cannot be completely prevented.

  The present invention has been made in view of the above circumstances, and can perform data encryption and decryption without bothering the user and can more reliably prevent information leakage. An object of the present invention is to provide an apparatus and a data management system including the apparatus.

To achieve the above object, the present invention provides:
A terminal device to which a recording medium for storing data is connected, wherein a reading process for reading data stored in the recording medium, an editing process for editing the read data, and a writing for writing the edited data to the recording medium In a terminal device provided with an editing processing unit for processing,
When monitoring the processing in the editing processing unit, when the editing processing unit executes the writing process, instead of the editing processing unit, the edited data is encrypted and stored in the recording medium, When the editing processing unit executes the reading process, the encrypted data to be read is read from the recording medium instead of the editing processing unit, and the read data is decrypted and provided to the editing processing unit. The present invention relates to a terminal device further comprising a data management unit that performs a decryption process.

  According to this terminal device, after the recording medium is connected to the terminal device, the user performs an editing operation on the data stored in the recording medium as appropriate. Alternatively, editing work of data stored in a recording medium connected in advance to the terminal device is appropriately performed. The recording medium stores, for example, data (encrypted data) that is encrypted in advance, which is data related to documents, sounds, images, computer programs, and the like.

  At this time, if the data management unit that monitors the processing in the editing processing unit confirms that the reading processing is executed by the editing processing unit, the encrypted data to be read is stored on the recording medium instead of the editing processing unit. The read data is decrypted and provided to the editing processing unit. On the other hand, when it is confirmed that the writing process is executed by the editing processing unit, the data management unit encrypts the edited data and stores it in the recording medium instead of the editing processing unit.

  In this way, the data read by the editing processing unit is decrypted by the encryption / decryption processing of the data management unit, and the data written by the editing processing unit is encrypted. As a result, the user can perform encryption and decryption of data without performing any special operation.

  Thus, according to the terminal device of the present invention, the encrypted data is automatically decrypted by the data management unit when the editing processing unit reads data from the recording medium or writes the data to the recording medium. In addition, since the edited data is automatically encrypted, the data can be easily decrypted and encrypted without a troublesome operation. In addition, since the data in the recording medium is encrypted, even if the data leaks to the outside or the recording medium reaches the third party, the third party cannot recognize the contents of the data. It is not possible to leak information related to the data to the outside.

  The terminal device further includes a terminal-side medium identification information storage unit that stores medium identification information based on unique information of the connected recording medium, and the data management unit reads the data from the recording medium. Alternatively, when storing in the recording medium, if it is determined that the medium identification information of the target recording medium is stored in the terminal-side medium identification information storage unit, Data may be encrypted and stored, or the data may be read and decrypted.

  In this way, only when the medium identification information of the target recording medium is stored in the terminal-side medium identification information storage unit, the data management unit encrypts the data and stores it in the recording medium. The data is read from the recording medium and decoded. Therefore, data is read or written by storing (registering) the medium identification information of the recording medium connected to the terminal device (used by the terminal device) in the terminal-side medium identification information storage unit in advance. Recording media can be managed and restricted, and security can be improved by preventing important information from being taken outside and unnecessary data from being brought in.

  The recording medium stores encrypted data in a first folder and decrypted data in a second folder, and the data management unit receives the first data from the outside. When a signal for decrypting specific encrypted data in the folder is received, the encrypted data corresponding to the received signal is decrypted to generate new data, and the generated decrypted data is stored in the second folder. It may be configured to further perform the process of generating the decrypted data stored in.

  In this way, when a signal for decrypting specific encrypted data in the first folder input from the outside is received by the data management unit, the encrypted data corresponding to the received signal is decrypted. New data is generated, and the generated decoded data (decoded data) is stored in the second folder. Then, the user performs editing work on the terminal device other than the terminal device by using the decrypted data in the second folder, or other users using the terminal device other than the terminal device have the same data as the encrypted data. Can be provided.

  Therefore, it is convenient when the user takes out the encrypted data to the outside. Further, since the generated decrypted data is stored in the second folder, it is possible to easily determine whether the data is encrypted or decrypted. In addition, since the decrypted data is not generated unless the user performs a specific operation, the terminal device or the recording medium is in the hands of a third party, or the data in the recording medium flows out to the outside. Even if this happens, information leakage can be minimized.

  The data management unit may be configured to encrypt and decrypt the data using terminal identification information based on unique information (for example, a CPU number and a hard disk number) of the terminal device as a key. good. In this way, since the terminal identification information differs for each terminal device, data editing (data encryption and decryption) cannot be performed except for the terminal device, and the data stored in the recording medium cannot be edited. Protection can be tightened.

The present invention also provides:
A data management system in which a plurality of the terminal devices and a management server that manages each terminal device are connected via an electric communication line,
The management server
Terminal identification information that is set for each user and is terminal identification information based on user identification information for identifying the user and unique information of the terminal apparatus, and is related to at least one terminal apparatus used by the user A user information storage unit for storing
When receiving the user identification information and the terminal identification information transmitted from the terminal device, it is confirmed whether or not the received user identification information and the terminal identification information are stored in the user information storage unit. And an authentication processing unit that transmits an execution permission signal to the terminal device when
The data management unit of the terminal device
A process for confirming whether or not to execute the encryption / decryption process, accepting the user identification information input from the outside, generating the terminal identification information of the terminal device, and accepting the user A confirmation process for transmitting the identification information and the generated terminal identification information to the management server and receiving the execution permission signal transmitted from the management server is performed periodically or irregularly. In the confirmation process, the execution permission signal The data management system is configured to execute the encryption / decryption process until the next confirmation process is received.

  According to this data management system, user identification information that is set for each user and identifies the user is associated with terminal identification information of at least one terminal device used by the user in the user information storage unit. And stored (registered) in advance.

  In the terminal device, the data management unit executes the confirmation process periodically or irregularly (for example, when the terminal device is activated or when a predetermined time comes). Specifically, the data management unit first receives user identification information input from the outside, generates terminal identification information of the terminal device, and manages the received user identification information and the generated terminal identification information. Send to.

  The user identification information and the terminal identification information transmitted from the terminal device are received by the authentication processing unit, and the authentication processing unit that has received the information identifies whether or not the received user identification information and the terminal identification information are stored in the user information storage unit. If it is determined that it is stored, an execution permission signal is transmitted to the terminal device.

  The execution permission signal transmitted from the management server is received by the data management unit, and the data management unit that has received the signal executes encryption / decryption processing until the next confirmation processing is performed.

  Thus, according to the data management system of the present invention, the data management unit performs confirmation processing periodically or irregularly, thereby confirming whether or not the user using the terminal device satisfies the usage conditions. Therefore, access to the data stored in the recording medium can be managed by the management server to prevent information leakage more reliably. In addition, since authentication is performed based on not only user identification information but also terminal identification information that differs for each terminal device, unauthorized use of the terminal device can be prevented more reliably, and data stored in a recording medium Safety can be further enhanced.

  The management server further includes a server-side medium identification information storage unit that stores medium identification information of a recording medium connected to each terminal device, and the authentication processing unit sends the execution permission signal to the terminal device. Upon transmission, the medium identification information stored in the server side medium identification information storage unit is configured to be transmitted together with the execution permission signal, and the data management unit receives the execution permission signal and medium identification information from the management server. The received medium identification information may be stored in the terminal-side medium identification information storage unit.

  According to this configuration, the medium identification information of the recording medium connected to each terminal device or connected in advance to each terminal device is stored (registered) in the server-side medium identification information storage unit in advance, and the server-side medium identification is performed. The medium identification information stored in the information storage unit is transmitted to the terminal device together with the execution permission signal by the authentication processing unit. Then, the transmitted medium identification information is received by the data management unit and stored in the terminal-side medium identification information storage unit. Accordingly, the management server can manage and limit the recording medium from which data is read or written, thereby enhancing the security of the data management system.

  The data management unit may be configured to erase the decrypted data in the second folder when the confirmation process is executed. In this way, the data in the second folder can be automatically (forcedly) deleted to prevent information leakage more reliably.

  In the user information storage unit, permission information regarding whether to permit execution of processing (encryption / decryption processing and decrypted data generation processing) other than the confirmation processing in the terminal device is the user identification information. The authentication processing unit receives the user identification information and the terminal identification information from the terminal device, and stores them in the user information storage unit based on the received user identification information and terminal identification information. And confirming whether or not the user identification information and terminal identification information are stored, and permission information associated with the received user identification information permits execution of processing other than the confirmation processing. Whether the user identification information and the terminal identification information are stored, and it is determined that execution of processes other than the confirmation process is permitted. The management server is configured to transmit the execution permission signal to the terminal device, and the management server changes or updates the permission information associated with user identification information relating to a specific user, which is input from the outside. A user information update unit that receives the update information and updates the permission information stored in the user information storage unit based on the received update information.

  In this way, the authentication processing unit confirms whether or not the user identification information and the terminal identification information received from the terminal device are stored in the user information storage unit, and is associated with the user identification information. Only if the permission information confirms whether or not the processing other than the confirmation processing is permitted, the user identification information and the terminal identification information are stored, and the execution of the processing other than the confirmation processing is permitted. The execution permission signal is transmitted to the terminal device.

  In addition, when update information for changing and updating permission information associated with user identification information relating to a specific user input from the outside is received by the user information update unit, based on the received update information, The permission information stored in the user information storage unit is updated, and the permission information is changed from one that permits the execution of processes other than the confirmation process to one that is not permitted, or the execution of processes other than the confirmation process is not permitted. Will be changed to allow.

  Therefore, for example, a user of a terminal device or a creator of data stored in a recording medium operates an appropriate terminal device such as another terminal device or a mobile phone terminal capable of data communication to transmit update information to the management server. The operator of the management server that receives the notification from the user or the creator inputs the update information to the management server, and updates the update information for the specific user by the user information update unit, thereby The user can be permitted or not allowed to execute processes other than the confirmation process in the terminal device, and the data in the recording medium can be managed more flexibly. Specifically, for example, if the permission information is changed to prohibit the execution of processes other than the confirmation process when the terminal device or the recording medium is in the hands of a third party, the data in the recording medium is changed. It is possible to effectively prevent browsing, falsification, and copying by a third party.

  Further, the authentication processing unit is configured to transmit a key used in the encryption / decryption processing together with the execution permission signal when transmitting the execution permission signal to the terminal device, and the data management unit includes: When the execution permission signal and the key are received from the management server, the data may be encrypted and decrypted using the received key.

  In this way, since the data management unit encrypts and decrypts data using the key transmitted from the management server, it is not managed by the management server (not connected to the management server). ) The terminal device cannot encrypt and decrypt data, and can effectively prevent leakage of information related to data stored in the recording medium. In addition, the terminal device managed by the management server can share the key so that the data in the recording medium can be accessed from any terminal device.

  The data management unit may be configured to encrypt and decrypt the data using the key received from the management server and the unique data identification information set for each data as a key. good. In this way, the same effect as described above can be obtained, and the data stored in the recording medium can be more securely protected.

  The authentication processing unit is configured to transmit the user identification information and the terminal identification information stored in the user information storage unit together with the execution permission signal when transmitting the execution permission signal to the terminal device, The terminal device further includes a key information storage unit that stores user identification information and terminal identification information transmitted from the management server, and the data management unit receives the execution permission signal, user identification information, and terminal from the management server. When the identification information is received, the received user identification information and terminal identification information are associated with each other and stored in the key information storage unit, and when the data is encrypted and stored, the terminal identification information of the terminal device is encrypted. It is encrypted as a key, and the encrypted data is stored including the user identification information of the user who uses the terminal device. When the stored data is read and decoded, the terminal identification information stored in the key information storage unit associated with the user identification information is recognized based on the user identification information included in the data. The data may be decrypted using the recognized terminal identification information as a decryption key.

  According to this configuration, when the execution permission signal is transmitted to the terminal device by the authentication processing unit, the user identification information and the terminal identification information stored in the user information storage unit are transmitted together, and the transmitted user identification information is transmitted. And the terminal identification information are received by the data management unit, and then stored in the key information storage unit in association with each other.

  In the encryption / decryption process, when data is encrypted and stored, the data management unit encrypts the terminal identification information of the terminal device as an encryption key, and uses the terminal device for the encrypted data. The user identification information of the user is included and stored. On the other hand, when the data stored in the recording medium is read and decrypted, the terminal identification information stored in the key information storage unit is associated with the user identification information based on the user identification information included in the data. Recognize and decrypt the data using the recognized terminal identification information as a decryption key.

  In this way, the data is encrypted using the terminal identification information of the terminal device used by the user, and the encrypted data is decrypted using the user identification information and the terminal identification information (key information) transmitted from the management server. As described above, the terminal device that is not managed by the management server (not connected to the management server) is prevented from being encrypted or decrypted, and stored in the recording medium. Information leakage related to data can be more effectively prevented. Similarly to the above, it is possible to share the key between the terminal devices managed by the management server so that the data in the recording medium can be accessed from any terminal device.

  The management server includes a server-side log information generation unit that generates log information about processing in the authentication processing unit, and a log information storage unit that stores log information generated by the server-side log information generation unit. The terminal device further includes a terminal-side log information generation unit that generates log information about processing in the data management unit, and transmits the generated log information to the management server. A log information storage unit that stores the log information; and a log information reception unit that receives the log information transmitted from the terminal-side log information generation unit and stores the received log information in the log information storage unit You may have.

  In this way, by analyzing the log information stored in the log information storage unit of the management server, for example, when the terminal device performed the confirmation process, when the decrypted data generation process, It can be used to understand whether the data has been decrypted or what information may have been leaked.

  Examples of the recording medium include a non-portable built-in hard disk, a portable USB memory, a memory card, FD, MO, CD, DVD, and an external hard disk. However, it is not limited to these. The built-in hard disk includes not only those provided in the terminal device itself but also those provided in the file server.

  As described above, according to the terminal device according to the present invention, the encrypted data is automatically decrypted, and the edited data is automatically encrypted. It can be performed easily and without annoying operations. Further, since the data in the recording medium is encrypted, it is possible to prevent information relating to the data from leaking. In addition, according to the data management system of the present invention, the user who uses the terminal device appropriately checks whether or not the usage condition is satisfied, so the access to the data stored in the recording medium is managed. Information leakage can be prevented more reliably. In addition, since authentication is performed based on user identification information and terminal identification information, unauthorized use of the terminal device can be prevented more reliably, and the safety of data stored in the recording medium can be further improved. .

1 is a block diagram showing a schematic configuration of a data management system according to an embodiment of the present invention. It is the block diagram which showed schematic structure of the management server of this embodiment. It is the block diagram which showed schematic structure of the terminal device of this embodiment. It is a data table which showed the data stored in the user information storage part of this embodiment. It is explanatory drawing for demonstrating the data stored in the recording medium of this embodiment. It is the flowchart which showed a series of processes in the encryption / decryption process of this embodiment. It is a flowchart for demonstrating the confirmation process etc. in this embodiment. It is a flowchart for demonstrating the confirmation process etc. in this embodiment. It is the block diagram which showed schematic structure of the terminal device which concerns on other embodiment of this invention. It is the flowchart which showed a series of processes in the encryption / decryption process which concerns on other embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Data management system 5 Internet 6 Terminal device 7 Management server 8 File server 11 User information storage part 12 User information registration part 13 User information update part 14 Medium information storage part 15 Medium information registration part 16 Authentication processing part 17 Log information generation part 18 Log information reception unit 19 Log information storage unit 21 Data storage unit 24 Editing processing unit 25 Medium information storage unit 26 Data input / output unit 27 Data management unit 28 Log information generation unit 23, 33 Drive device 8a, 22, 31, 32 Recording medium

  Hereinafter, specific embodiments of the present invention will be described with reference to the accompanying drawings. FIG. 1 is a block diagram showing a schematic configuration of a data management system according to an embodiment of the present invention. FIG. 2 is a block diagram showing a schematic configuration of a management server according to the embodiment. FIG. 3 is a block diagram illustrating a schematic configuration of the terminal device according to the present embodiment.

  As shown in FIGS. 1 to 3, the data management system 1 of this example includes a plurality of terminal devices 6, a management server 7 that manages each terminal device 6, and a file server 8 that stores data. They are connected to each other via the Internet 5.

  As shown in FIG. 2, the management server 7 includes a user information storage unit 11, a user information registration unit 12, a user information update unit 13, a medium information storage unit 14, a medium information registration unit 15, an authentication processing unit 16, and log information. A generation unit 17, a log information reception unit 18, a log information storage unit 19, a communication interface 20, and the like are provided, and are connected to the Internet 5 through the communication interface 20.

  In the user information storage unit 11, a user ID and password (user identification information) that are set for each user and identify the user, and unique information (for example, a CPU number and a hard disk number) of the terminal device 6 are stored. Terminal ID (terminal identification information) based on the terminal ID related to at least one terminal device 6 used by the user, and the execution of encryption / decryption processing and decrypted data generation processing in the terminal device 6 The permission information regarding whether or not to permit is stored in association with each other (see FIG. 4).

  The user information registration unit 12 stores (registers) the user ID, password, terminal ID, and permission information in the user information storage unit 11. Specifically, for example, it communicates with each terminal device 6 connected to the management server 7, receives the user ID, password and terminal ID from each terminal device 6, and receives the received user ID, password and terminal ID. And the permission information are stored in the user information storage unit 11.

  The permission information is initially set to execute permission. In addition, the user information registration unit 12 transmits a community ID preset for the management server 7 to each terminal device 6 when communicating with each terminal device 6. When registering a user ID or the like, the operator of the management server 7 may input the registration information to the user information storage unit 11 via the user information registration unit 12.

  The user information update unit 13 receives update information for changing or updating the permission information associated with a user ID related to a specific user, which is input from the outside, and based on the received update information, The permission information stored in the information storage unit 11 is updated.

  In the medium information storage unit 14, the recording medium 22 connected to each terminal device 6, the recording media 31 and 32 connected to each terminal device 6, and the recording medium 8a provided in the file server 8, that is, The medium ID (medium identification information) based on the unique information of all the recording media 8a, 22, 31, 32 used by each terminal device 6 is stored.

  The medium information registration unit 15 stores (registers) the medium ID in the medium information storage unit 14. Specifically, for example, it communicates with each terminal device 6 or a specific terminal device 6, receives the medium ID of the recording medium 8a, 22, 31, 32 from the terminal device 6, and uses the received medium ID as the medium. The information is stored in the information storage unit 14. In registering the medium ID, the operator of the management server 7 may input the medium ID into the medium information storage unit 14 via the medium information registration unit 15. The recording medium 8 a of the file server 8 is registered by receiving the medium ID from the specific terminal device 6 and registering it by communicating between the management server 7 and the file server 8. Also good.

  The authentication processing unit 16 receives the user ID, password, community ID, and terminal ID transmitted from the terminal device 6, and whether or not the received user ID, password, and terminal ID are stored in the user information storage unit 11. A process for confirming whether the received community ID matches a community ID set in advance for the management server 7, and the permission information associated with the received user ID is encrypted. The process of confirming whether or not the execution of the decryption process and the decrypted data generation process is permitted, and the received user ID, password, and terminal ID are stored, and the received community ID matches and is encrypted. When it is determined that the execution of the decryption process and the decrypted data generation process is permitted, the execution permission signal and the medium information The medium ID stored in the storage unit 14 and a process of transmitting to the terminal device 6.

  The log information generation unit 17 generates log information related to the processing in the authentication processing unit 16, stores the generated log information in the log information storage unit 19, and the log information reception unit 18 includes the terminal device 6 The log information transmitted from is received, and the received log information is stored in the log information storage unit 19.

  As shown in FIG. 1, the file server 8 includes a recording medium 8a such as a magnetic disk, and is configured to store data in the recording medium 8a. The recording medium 8a includes, for example, data relating to documents, sounds, images, computer programs, etc., and the community ID and, for example, a unique data ID set by the operating system of the terminal device 6 at the time of data generation Data encrypted using (data identification information) as an encryption key is stored.

  As shown in FIG. 3, the terminal device 6 includes a data storage unit 21, an edit processing unit 24, a medium information storage unit 25, a data input / output unit 26, a data management unit 27, a log information generation unit 28, a communication interface 29, and An input / output interface 30 and the like are provided, and connected to the Internet 5 via the communication interface 29.

  The data storage unit 21 includes, for example, a recording medium 22 such as a magnetic disk and a drive device 23 that reads / writes data from / to the recording medium 22. The recording medium 22 has an area for storing encrypted data (encrypted data) and an area for storing decrypted data (decrypted data), as shown in FIG. As described above, the encrypted data is stored in the encrypted data folder (first folder) and the decrypted data is stored in the decrypted data folder (second folder). In the encrypted data folder 21a, as with the recording medium 8a, for example, data related to documents, sounds, images, computer programs, etc., and is encrypted using the community ID and data ID as an encryption key. Stored data.

  Note that data is stored in the encrypted data folder 21a as follows, for example. That is, when a program for causing the terminal device 6 to function as the data storage unit 21 or the data management unit 27 is installed, the encrypted data folder 21a and the decrypted data folder 21b are generated and stored in the recording medium 22. The stored data (unencrypted data) is encrypted, the unencrypted data is replaced with the encrypted data, and the replaced data (encrypted data) is the encrypted data folder It is stored in 21a. In addition, when data is encrypted, only data designated as appropriate may be encrypted.

  The input / output interface 30 can be connected to recording media 31 and 32 such as a USB memory, a memory card, an FD, an MO, a CD, a DVD, and an external hard disk. The recording medium 31 is directly connected to the input / output interface 30, and the recording medium 32 is connected to the recording medium 32 via an appropriate drive device 33 for reading and writing data. The recording media 31 and 32 are similar to the recording media 8a and 22, for example, data relating to documents, sounds, images, computer programs, etc., and are encrypted using the community ID and data ID as an encryption key. Stored data is stored.

  The editing processing unit 24 stores the recording medium 22 connected to the terminal device 6, the recording media 31 and 32 connected to the terminal device 6, and the recording medium 8 a provided in the file server 8 according to various application programs. Edit stored data. Specifically, a read process for reading data from the recording media 8a, 22, 31, and 32 via an read command of the operating system, an edit process for editing the read data, and the edited data are written to the operating system. And write processing to be written to the recording media 8a, 22, 31, and 32 via the embedded command. For the recording media 22 and 32, data is read and written by the drive devices 23 and 33.

  The medium information storage unit 25 stores a medium ID transmitted from the management server 7.

  The data input / output unit 26 receives data input from the outside and stores it in the recording media 8a, 22, 31, 32, or outputs the data stored in the recording media 8a, 22, 31, 32 to the outside. Processing (for example, transmission to another terminal device 6 via the Internet 5 or copying to a recording medium as appropriate) is performed.

  The data management unit 27 executes three processes described below, that is, an encryption / decryption process, a decrypted data generation process, and a confirmation process.

  In the encryption / decryption processing, the processing in the editing processing unit 24 is monitored, and when the editing processing unit 24 executes the reading processing, the encrypted data to be read is read instead of the editing processing unit 24. While reading from the recording media 8a, 22, 31, and 32, the read data is decrypted and provided to the editing processing unit 24, while the editing processing unit 24 executes the writing process, the editing processing unit Instead of 24, the edited data is encrypted and stored in the recording media 8a, 22, 31, 32. It should be noted that when the encrypted data is read or the data after editing is encrypted and stored, it is determined whether or not the medium ID of the target recording medium 8a, 22, 31, 32 is stored in the medium information storage unit 25. If it is confirmed that it is stored, the encrypted data is read or the edited data is encrypted and stored.

  Specifically, as shown in FIG. 6, first, by monitoring the processing in the editing processing unit 24, it is confirmed whether or not the editing processing unit 24 executes the reading process or the writing process (step S1). . This can be determined, for example, by whether or not an operating system read or write instruction has been hooked.

  If the editing processing unit 24 determines in step S1 that the reading process or the writing process is to be executed, it recognizes the medium ID of the recording medium 8a, 22, 31, 32 to be read or written. (Step S2), it is confirmed whether or not the recognized medium ID is stored in the medium information storage unit 25 (Step S3).

  If it is determined in step S3 that the data is stored, the editing processing unit 24 checks whether the reading process or the writing process is executed (step S4). For example, it is possible to grasp which process is executed by checking which one of the read instruction and the write instruction of the operating system is hooked in step S1.

  If it is determined in step S4 that the reading process is to be executed, the community ID and the data ID of the encrypted data to be read are recognized as key information (step S5), and then the encrypted data to be read is stored in the recording medium 8a, The read encrypted data is read out from 22, 31, 32, and written into the temporary file while being decrypted using the recognized community ID and data ID as a decryption key (step S6). The editing processing unit 24 enables the editing process with reference to the data written in the temporary file.

  On the other hand, if it is determined in step S4 that the writing process is to be executed, the community ID and the data ID of the edited data to be written are recognized as key information (step S7), and the recognized community ID and data are recognized. The edited data is encrypted using the ID as an encryption key and stored in the recording media 8a, 22, 31, 32.

  If it is determined in step S3 that it is not stored, an error message is displayed on the display of the terminal device 6 (step S9).

  In the decrypted data generation process, an externally input signal for decrypting specific encrypted data in the encrypted data folder 21a is received, and the encrypted data corresponding to the received signal is decrypted and newly generated. Data is generated, and the generated decrypted data is stored in the decrypted data folder 21b.

  In the confirmation process, a user ID, a password, a community ID, and a terminal ID are managed to confirm whether the encryption / decryption process is executed and whether the decrypted data generation process is executable. The server 7 receives the execution permission signal and the medium ID transmitted from the management server 7, and stores the received medium ID in the medium information storage unit 25.

  Further, the data management unit 27 is configured to perform the confirmation processing periodically or irregularly (for example, when the terminal device 6 is activated or when a predetermined time comes), and the execution permission signal and the medium When the ID is received from the management server 7, the encryption / decryption process is executed and the decrypted data generation process is made executable.

  The log information generation unit 28 generates log information related to processing in the data management unit 27 (for example, decrypted data generation processing and confirmation processing) and processing in the data input / output unit 26, and the generated log information is managed by the management server The process to transmit to 7 is performed.

  According to the data management system 1 of the present example configured as described above, in each terminal device 6, the recording media 8 a, 22, 31, and 32 (the encrypted data folder for the recording medium 22 are recorded by the users who use the terminal devices 6). The editing work of the data stored in 21a) is appropriately performed. At this time, when the data management unit 27 that monitors the processing in the editing processing unit 24 recognizes that the reading processing is executed by the editing processing unit 24, first, the recording media 8a, 22, 31, and 32 to be read are recorded. It is confirmed whether or not the medium ID is stored in the medium information storage unit 25. If it is determined that the medium ID is stored, the encrypted data to be read out is stored in the recording media 8a and 22 instead of the editing processing unit 24. , 31 and 32, and the read data is decrypted and provided to the editing processing unit 24. On the other hand, when the data management unit 27 recognizes that the writing processing is executed by the editing processing unit 24, first, the medium ID of the recording medium 8a, 22, 31, 32 to be written is determined as the medium information storage unit. If the data is stored in the recording medium 8 and is determined to be stored, the edited data is encrypted and stored in the recording media 8 a, 22, 31, 32 instead of the editing processing unit 24. To do. Data decryption and encryption are performed using the community ID and data ID as keys.

  In this manner, the data read by the editing processing unit 24 is decrypted by the encryption / decryption processing of the data management unit 27, and the data written by the editing processing unit 24 is encrypted. As a result, the user can perform encryption and decryption of data without performing any special operation.

  For example, when the user takes in new data from the outside and stores it in the recording media 8 a, 22, 31, 32, new data input from the outside to the terminal device 6 is sent by the data input / output unit 26. It is received and stored in recording media 8a, 22, 31, 32 (encrypted data folder 21a for recording media 22).

  For example, when the user transmits data stored in the encrypted data folder 21a of the recording medium 22 to a terminal device (not shown) other than the terminal device 6 connected to the management server 7, A signal for decrypting specific encrypted data in the encrypted data folder 21a input to the terminal device 6 is received by the data management unit 27, and the encrypted data corresponding to the received signal is decrypted. New data is generated, and the generated decrypted data is stored in the decrypted data folder 21b. Then, the data decoded in this way is transmitted to the terminal device (not shown) by the data input / output unit 26. Since the receiver of the data has received the decrypted data, the information related to the data can be recognized without any inconvenience. In addition, the user can copy the data stored in the recording media 8a, 22, 31, 32 to other recording media 8a, 22, 31, 32 under the control of the data input / output unit 26, or other terminals. It can be transmitted to the device 6.

  In addition, the data management unit 27 periodically or irregularly executes the confirmation process, and manages the execution of the encryption / decryption process. Specifically, a series of processes as shown in FIGS. 7 and 8 are executed.

  That is, first, a user ID and password input screen is displayed on the display of the terminal device 6 (step S11). Thereafter, the user ID and password input to the terminal device 6 by the user are accepted, the community ID set in advance for the management server 7 to which the terminal device 6 is connected is recognized, and the terminal ID of the terminal device 6 is The generated user ID and password, the recognized community ID, and the generated terminal ID are transmitted to the management server 7 (step S12).

  The transmitted user ID, password, community ID, and terminal ID are received by the authentication processing unit 16 of the management server 7 (step S13), and the received user ID, password, and terminal ID are stored in the user information storage unit 11. It is confirmed whether or not the received community ID matches the community ID set in advance for the management server 7 (step S14).

  If it is determined in step S14 that the user ID, password, and terminal ID are stored and the community IDs match, then the permission stored in the user information storage unit 11 in association with the user ID is stored. It is confirmed whether or not the information (permission information about the user relating to the user ID) permits the execution of the encryption / decryption process and the decrypted data generation process (step S15).

  If it is determined in step S15 that the execution of the encryption / decryption process and the decrypted data generation process is permitted, the execution permission signal and the medium ID stored in the medium information storage unit 14 are 6 (step S16).

  On the other hand, if it is determined in step S14 that the user ID, password, and terminal ID are not stored, or if it is determined that the community IDs do not match, and in step S15, the encryption / decryption processing and decryption are performed. If it is determined that the execution of the digitized data generation process is not permitted, an error signal is generated and transmitted to the terminal device 6 (step S17).

  The execution permission signal and medium ID transmitted in step S16 or the error signal transmitted in step S17 are received by the data management unit 27 of the terminal device 6 (step S18), and either of the execution permission signal and the medium ID or error signal is received. It is confirmed whether it has been received (step S19).

  If it is determined in step S19 that the execution permission signal and the medium ID have been received, the received medium ID is stored in the medium information storage unit 25 (step S20), and then the data in the decrypted data folder 21b is erased. After that, the encryption / decryption process is executed and the decrypted data generation process can be executed (step S22), and the series of processes ends.

  On the other hand, if it is determined in step S19 that an error signal has been received, the data in the decrypted data folder 21b is erased (step S23), and the series of processing ends. In this case, since the encryption / decryption processing is not executed, the encrypted data is decrypted when the editing processing unit 24 reads the encrypted data stored in the recording media 8a, 22, 31, 32. Therefore, the user cannot edit data.

  At the time of communication between the terminal device 6 and the management server 7, information transmitted from the terminal device 6 to the management server 7 or information transmitted from the management server 7 to the terminal device 6 is the terminal of the terminal device 6. Encrypted and decrypted by ID.

  In addition, the log information generation unit 28 of the terminal device 6 generates log information related to the decrypted data generation process and the confirmation process in the data management unit 27 and the process in the data input / output unit 26, and the generated log information is managed. The log information transmitted to the server 7 is received by the log information receiving unit 18 of the management server 7 and stored in the log information storage unit 19. Further, the log information generation unit 17 of the management server 7 generates log information related to the processing in the authentication processing unit 16, and the generated log information is stored in the log information storage unit 19.

  Thus, according to the data management system 1 of this example, when the editing processing unit 24 reads data from the recording media 8a, 22, 31, 32, and writes data to the recording media 8a, 22, 31, 32, data Since the encrypted data is automatically decrypted or the edited data is automatically encrypted by the management unit 27, the decryption and encryption of the data can be easily and without troublesome operations. It can be carried out. Further, since the data in the recording media 8a, 22, 31, and 32 is encrypted, the data leaks to the outside, or the recording media 8a, 22, 31, and 32 reach the hands of a third party. However, the contents of the data cannot be recognized by a third party, and information related to the data is not leaked to the outside.

  In addition, since the data management unit 27 performs the confirmation process regularly or irregularly, it is possible to confirm whether or not the user using the terminal device 6 satisfies the use condition. , 31 and 32 can be managed by the management server 7 to prevent data leakage more reliably. In addition, since authentication is performed based on not only the user ID and password but also a different terminal ID for each terminal device 6, unauthorized use of the terminal device 6 can be more reliably prevented, and the recording media 8a, 22, The safety of the data stored in 31 and 32 can be further increased.

  Further, only when the medium ID of the target recording medium 8 a, 22, 31, 32 is stored in the medium identification information storage unit 25, the data is recorded by the data management unit 27 on the recording medium 8 a, 22, 31, 32. Is stored in the recording media 8a, 22, 31, and 32, so that the recording media 8a, 22, 31, and 32 can be managed and restricted, and important information can be transferred to the outside. Security can be improved by preventing being taken out and unnecessary data being brought in.

  In addition, since the permission information stored in the user information storage unit 11 can be updated by the user information update unit 13, for example, it is stored in the user of the terminal device 6 or the recording media 8 a, 22, 31, 32. The creator of the data operates the terminal device as appropriate, such as another terminal device 6 or a mobile phone terminal capable of data communication, and sends update information to the management server 7 or is contacted by the user or the creator. When the operator of the management server 7 inputs the update information to the management server 7, the user information update unit 13 updates the update information for the specific user, and processes other than the confirmation process in the terminal device 6 for the specific user Can be permitted or not permitted, and data in the recording media 8a, 22, 31, and 32 can be managed more flexibly. Therefore, for example, if the terminal device 6 or the recording media 8a, 22, 31, 32 is in the hands of a third party, the permission information is changed to prohibit the execution of processes other than the confirmation process. It is possible to effectively prevent the data in the media 8a, 22, 31, and 32 from being browsed, altered, or copied by a third party.

  Further, since the data management unit 27 performs encryption and decryption using the community ID transmitted from the management server 7 and the data ID of the data to be read or written as a key, the management server 7 manages the data. The terminal device 6 that is not connected (not connected to the management server 7) cannot encrypt or decrypt data, and further leaks information stored in the recording media 8a, 22, 31, and 32. It can be effectively prevented. Further, a key (community ID) is shared between the terminal devices 6 managed by the management server 7, and data in the recording media 8a, 22, 31, and 32 can be accessed from any terminal device 6.

  Further, since the decrypted data can be generated by the decrypted data generation process of the data management unit 27, it is convenient when the user takes out the encrypted data to the outside. Further, since the encrypted data is stored in the encrypted data folder 21a and the decrypted data is stored in the decrypted data folder 21b, it is possible to easily determine whether the data is encrypted or decrypted. it can. Further, since the decrypted data is not generated unless the user performs a specific operation, the terminal device 6 and the recording media 8a, 22, 31, and 32 are transferred to a third party, or the recording media 8a, 22, Even if the data in 31 and 32 is leaked to the outside, the leakage of information can be minimized.

  In addition, since the data management unit 27 automatically (forcibly) erases the decrypted data in the decrypted data folder 21b at the time of executing the confirmation process, this also prevents the outflow of information more reliably. be able to.

  In addition, since the log information related to the processing in the authentication processing unit 16, the data management unit 27, and the data input / output unit 26 is configured to be stored in the log information storage unit 19, the log stored in the log information storage unit 19 By analyzing the information, for example, when the terminal device 6 performs the confirmation process, when the decrypted data generation process is performed, what data is decrypted, and what information may be leaked. It can be used to understand such things.

  As mentioned above, although one Embodiment of this invention was described, the specific aspect which this invention can take is not limited to this at all.

  In the above example, the community ID and the data ID are used as keys for encryption and decryption. However, the present invention is not limited to this, and the community ID and the terminal ID may be used as keys.

  In this case, as shown in FIG. 9, the terminal device 6 further includes a key information storage unit 34. The key information storage unit 34 includes key information transmitted from the management server 7, and includes a user ID and The terminal ID is stored in association with the terminal ID.

  The authentication processing unit 16 is configured to transmit the user ID and terminal ID stored in the user information storage unit 11 to the terminal device 6 as key information in step S16, and the data management unit 27 includes In step S20, the user ID and the terminal ID received from the management server 7 are associated with each other and stored in the key information storage unit 34.

  Then, the data management unit 27 performs a series of processes as shown in FIG. 10 to execute the encryption / decryption process. That is, first, by monitoring the processing in the editing processing unit 24, it is confirmed whether or not the editing processing unit 24 executes the reading process or the writing process (step S31). Recognize the medium ID of the recording medium 8a, 22, 31, 32 to be written or written (step S32), and check whether the recognized medium ID is stored in the medium information storage unit 25 (step S32). S33).

  If it is determined that the data is stored in step S33, the editing processing unit 24 confirms whether the reading process or the writing process is executed (step S34), and if it is determined that the reading process is executed, After the encrypted data to be read is read from the recording media 8a, 22, 31, and 32 (step S35), the user ID incorporated in the head portion of the read data is recognized, and based on the recognized user ID, The terminal ID associated with the user ID and stored in the key information storage unit 34 is recognized, the community ID is further recognized (step S36), and the read data is set using the recognized terminal ID and community ID as a decryption key. Write to the temporary file while decrypting (step S37). The editing processing unit 24 enables the editing process with reference to the data written in the temporary file.

  On the other hand, if it is determined in step S34 that the writing process is to be executed, the terminal ID and community ID of the terminal device 6 are recognized, and the user ID of the user who uses the terminal device 6 is recognized (step S38). ) The edited data is encrypted using the recognized terminal ID and community ID as an encryption key, and the recognized user ID is incorporated into the header portion of the data and stored in the recording media 8a, 22, 31, 32. (Step S39).

  If it is determined in step S33 that the message is not stored, an error message is displayed on the display of the terminal device 6 (step S40).

  Even in this case, similarly to the above, the terminal device 6 that is not managed by the management server 7 is prevented from being encrypted or decrypted, and stored in the recording media 8a, 22, 31, and 32. It is possible to more effectively prevent leakage of information related to the data. Similarly to the above, the terminal device 6 managed by the management server 7 can share the key so that the data in the recording media 8 a, 22, 31, 32 can be accessed from any terminal device 6.

  In the above example, the data management unit 27 recognizes the medium ID of the recording medium 8a, 22, 31, 32 to be read or written in step S2 or step S32, and in step S3 or step S33, Although it is confirmed whether or not the recognized medium ID is stored in the medium information storage unit 25, the present invention is not limited to this, and these processes may be omitted.

  In the above example, community ID and data ID, community ID and terminal ID are used as keys for encryption and decryption. However, only community ID or only terminal ID is used. May be.

  In order to enable the editing processing unit 24 to read unencrypted data stored in the recording media 31 and 32, the management server 7 and the terminal device 6 may be configured as follows. That is, when the authentication processing unit 16 of the management server 7 transmits the medium ID and the key information together with the execution permission signal in the above step 16, the recording medium 31 in which the unencrypted data registered in advance is stored appropriately. , 32 and a read-only key used when reading the data stored in the recording media 31, 32 are transmitted to the terminal device 6. On the other hand, the data management unit 27 of the terminal device 6 stores the medium ID and the key information in the above step S20 in the recording media 31 and 32 in which the unencrypted data received from the management server 7 is stored. The medium ID and the read-only key used when reading the data stored in the recording media 31 and 32 are appropriately stored in the storage unit. Further, when the data management unit 27 determines that the editing processing unit 24 executes the reading process or the writing process and recognizes the medium ID of the recording medium 31 or 32 to be read or written, the data ID However, if it is determined that the unencrypted data matches the medium ID of the recording medium 31, 32, the data to be read is read from the recording medium 31, 32, and then the read data is read-only. Write to temporary file while converting by key. The read-only key is a key for converting unencrypted data without being encrypted.

  Further, when the data management unit 27 receives a specific signal input from the outside during the confirmation process, the data management unit 27 does not perform communication (authentication) with the management server 7 and corresponds to the input signal. The encryption / decryption process may be executed for a period of time and the decrypted data generation process may be executed. This is convenient when the terminal device 6 is used offline.

  In the confirmation process, the time when the data in the decrypted data folder 21b is deleted is not executed after the medium ID is stored or the error signal is received as in the above example, but immediately after the confirmation process is started. You may make it do.

  In order to make it possible to more clearly distinguish between encrypted data and decrypted data, the icon display may be made different between the encrypted data and the decrypted data.

  Further, the terminal device 6 is not necessarily managed by the management server 7 and may be provided offline with the management server 7. However, in this case, the user needs to update the data stored in the medium identification information storage unit 25 and the key information storage unit 34 as appropriate.

As described above in detail, the present invention can perform data encryption and decryption without bothering the user, and can more reliably prevent information leakage, and It is suitable as a data management system provided.

Claims (16)

A terminal device to which a recording medium for storing data is connected, wherein a reading process for reading data stored in the recording medium, an editing process for editing the read data, and a writing for writing the edited data to the recording medium In a terminal device provided with an editing processing unit for processing,
When monitoring the processing in the editing processing unit, when the editing processing unit executes the writing process, instead of the editing processing unit, the edited data is encrypted and stored in the recording medium, When the editing processing unit executes the reading process, the encrypted data to be read is read from the recording medium instead of the editing processing unit, and the read data is decrypted and provided to the editing processing unit. A terminal device further comprising a data management unit for performing a decryption process. A terminal-side medium identification information storage unit that stores medium identification information based on unique information of the connected recording medium;
When the data management unit reads the data from the recording medium or stores the data in the recording medium, the data management unit checks whether the medium identification information of the target recording medium is stored in the terminal-side medium identification information storage unit. The terminal device according to claim 1, wherein the terminal device is configured to encrypt and store the data or to read and decrypt the data when it is determined that the data is stored. In the recording medium, the encrypted data is classified and stored in the first folder, and the decrypted data is classified and stored in the second folder.
When the data management unit receives a signal for decrypting specific encrypted data in the first folder input from the outside, the data management unit decrypts the encrypted data corresponding to the received signal and creates new data The terminal device according to claim 1, wherein the terminal device is further configured to perform a decrypted data generation process for generating the decrypted data and storing the generated decrypted data in the second folder.   The terminal device according to claim 1, wherein the data management unit is configured to encrypt and decrypt the data using terminal identification information based on unique information of the terminal device as a key. A data management system in which a plurality of terminal devices according to claim 1 and a management server that manages each terminal device are connected via a telecommunication line,
The management server
Terminal identification information that is set for each user and is terminal identification information based on user identification information for identifying the user and unique information of the terminal apparatus, and is related to at least one terminal apparatus used by the user A user information storage unit for storing
When receiving the user identification information and the terminal identification information transmitted from the terminal device, it is confirmed whether or not the received user identification information and the terminal identification information are stored in the user information storage unit. And an authentication processing unit that transmits an execution permission signal to the terminal device when
The data management unit of the terminal device
A process for confirming whether or not to execute the encryption / decryption process, accepting the user identification information input from the outside, generating the terminal identification information of the terminal device, and accepting the user A confirmation process for transmitting the identification information and the generated terminal identification information to the management server and receiving the execution permission signal transmitted from the management server is performed periodically or irregularly. In the confirmation process, the execution permission signal The data management system is configured to execute the encryption / decryption processing until the next confirmation processing is performed when the data is received. A data management system in which a plurality of terminal devices according to claim 2 and a management server that manages each terminal device are connected via an electric communication line,
The management server
Terminal identification information that is set for each user and is terminal identification information based on user identification information for identifying the user and unique information of the terminal apparatus, and is related to at least one terminal apparatus used by the user A user information storage unit for storing
When receiving the user identification information and the terminal identification information transmitted from the terminal device, it is confirmed whether or not the received user identification information and the terminal identification information are stored in the user information storage unit. And an authentication processing unit that transmits an execution permission signal to the terminal device when
The data management unit of the terminal device
A process for confirming whether or not to execute the encryption / decryption process, accepting the user identification information input from the outside, generating the terminal identification information of the terminal device, and accepting the user A confirmation process for transmitting the identification information and the generated terminal identification information to the management server and receiving the execution permission signal transmitted from the management server is performed periodically or irregularly. In the confirmation process, the execution permission signal The data management system is configured to execute the encryption / decryption processing until the next confirmation processing is performed when the data is received. The management server further includes a server-side medium identification information storage unit that stores medium identification information of a recording medium connected to each terminal device,
The authentication processing unit is configured to transmit the medium identification information stored in the server-side medium identification information storage unit together with the execution permission signal when transmitting the execution permission signal to the terminal device,
The data management unit is configured to store the received medium identification information in the terminal-side medium identification information storage unit when receiving the execution permission signal and the medium identification information from the management server. The data management system according to claim 6. A data management system in which a plurality of terminal devices according to claim 3 and a management server that manages each terminal device are connected via a telecommunication line,
The management server
Terminal identification information that is set for each user and is terminal identification information based on user identification information for identifying the user and unique information of the terminal apparatus, and is related to at least one terminal apparatus used by the user A user information storage unit for storing
When receiving the user identification information and the terminal identification information transmitted from the terminal device, it is confirmed whether or not the received user identification information and the terminal identification information are stored in the user information storage unit. And an authentication processing unit that transmits an execution permission signal to the terminal device when
The data management unit of the terminal device
A process for confirming whether or not to execute the encryption / decryption process and the decrypted data generation process, and accepts the user identification information input from the outside and generates the terminal identification information of the terminal device Then, the received user identification information and the generated terminal identification information are transmitted to the management server, and the confirmation process for receiving the execution permission signal transmitted from the management server is performed periodically or irregularly, and the confirmation is performed. When the execution permission signal is received in processing, the encryption / decryption processing and decrypted data generation processing are executed until the next confirmation processing is performed. Data management system.   9. The data management system according to claim 8, wherein the data management unit is configured to delete the decrypted data in the second folder when the confirmation process is executed. In the user information storage unit, permission information related to whether or not to permit execution of processing other than the confirmation processing in the terminal device is further stored in association with the user identification information,
Upon receiving the user identification information and terminal identification information from the terminal device, the authentication processing unit refers to data stored in the user information storage unit based on the received user identification information and terminal identification information, and Confirms whether user identification information and terminal identification information are stored, and confirms whether the permission information associated with the received user identification information permits execution of processes other than the confirmation process. And when the user identification information and the terminal identification information are stored and it is determined that execution of a process other than the confirmation process is permitted, the execution permission signal is transmitted to the terminal device,
The management server receives update information for changing or updating the permission information associated with user identification information related to a specific user, which is input from the outside, and stores the user information based on the received update information The data management system according to claim 5, further comprising a user information update unit that updates permission information stored in the unit. The authentication processing unit is configured to transmit a key used in the encryption / decryption processing together with the execution permission signal when transmitting the execution permission signal to the terminal device,
6. The data management unit is configured to encrypt and decrypt the data using the received key when the execution permission signal and the key are received from the management server. The data management system according to any one of Items 9 to 9.   The data management unit is configured to encrypt and decrypt the data using a key received from the management server and unique data identification information set for each data as a key. The data management system according to claim 11. The authentication processing unit is configured to transmit the user identification information and the terminal identification information stored in the user information storage unit together with the execution permission signal when transmitting the execution permission signal to the terminal device,
The terminal device further includes a key information storage unit that stores user identification information and terminal identification information transmitted from the management server,
When the data management unit receives the execution permission signal, user identification information, and terminal identification information from the management server, the data management unit associates the received user identification information and terminal identification information with each other and stores them in the key information storage unit. When data is encrypted and stored, the terminal identification information of the terminal device is encrypted as an encryption key, and the encrypted data is stored including the user identification information of the user who uses the terminal device, When the data stored in the recording medium is read and decrypted, the terminal identification stored in the key information storage unit is associated with the user identification information based on the user identification information included in the data. 10. The apparatus according to claim 5, wherein the data is recognized and the data is decrypted using the recognized terminal identification information as a decryption key. Over data management systems. The management server includes a server-side log information generation unit that generates log information about processing in the authentication processing unit;
The data management system according to claim 5, further comprising a log information storage unit that stores log information generated by the server-side log information generation unit. The terminal device further includes a terminal-side log information generation unit that generates log information about processing in the data management unit and transmits the generated log information to the management server,
The management server includes a log information storage unit that stores the log information;
6. A log information receiving unit that receives the log information transmitted from the terminal-side log information generation unit and stores the received log information in the log information storage unit. 9. The data management system according to any one of items 9. The terminal device further includes a terminal-side log information generation unit that generates log information about processing in the data management unit and transmits the generated log information to the management server,
The management server further includes a log information reception unit that receives the log information transmitted from the terminal-side log information generation unit and stores the received log information in the log information storage unit. The data management system according to claim 14.

Images