TWI622886B - Regional data sharing system and method - Google Patents

Abstract

A regional data sharing system, an electronic device processing module generates a data request for requesting an encrypted data and including user identification information of the electronic device, and transmits the data request to a server unit. When the processing unit of the server unit determines that the user identification information requested by the data is the same as the user identification information of a first authorization list, the processing unit transmits an encrypted data to the electronic device. When the processing unit of the server unit receives a key request from the electronic device, when the processing unit determines that the electronic device is located in the authorized area according to the key request and the identification data, the processing unit will receive a gold The key is transmitted to the electronic device, and the processing module of the electronic device decrypts the encrypted data.

Description

Regional data sharing system and method

The present invention relates to a data sharing system and method, and more particularly to a regional data sharing system and method.

In the existing data sharing system, the digital data is stored in a server for the authorized user to operate the electronic device to connect to the server, thereby accessing the digital data. If any user who has digital data distributes the digital data on the Internet, all users who do not have permission can also obtain the digital data, causing confusion for users and digital data providers.

The existing method for controlling digital data is to encrypt the digital data, and after authenticating the identity built into the electronic device, the data decrypted by the electronic device is provided, thereby controlling the digital data.

However, for digital information providers who wish to disclose the digital information only in a particular geographic field, the above methods do not meet their needs.

Therefore, one of the objects of the present invention is to provide a regional data sharing system capable of regulating an electronic device that can only be unlocked by a servo in an authorized area. Encrypted material provided by the unit.

Thus, a regional data sharing system of the present invention includes a server unit and at least one electronic device. The server unit includes a storage unit and a processing unit electrically connected to the storage unit, the storage unit stores encrypted data, a key for decrypting the encrypted data, a first authorization list, and related to an authorized list. The identification data of the area, the first authorization list includes a user identification information. The at least one electronic device includes a processing module. The processing module of the electronic device generates a data request for requesting the encrypted data, and transmits the data request to the server device, where the data request includes a user identification information. When the processing unit of the server device receives the data request, the processing unit determines whether the user identification information requested by the data is the same as the user identification information of the first authorization list, and when the processing unit determines the data request The user identification information is the same as the user identification information of the first authorization list, and the processing unit transmits the encrypted data to the electronic device. When the processing unit of the server device receives a key request from the electronic device for requesting the key, the processing unit determines, according to the key request and the identification data, whether the electronic device is located in the authorized area. And when the processing unit determines that the electronic device is located in the authorized area according to the key request and the identification data, the processing unit transmits the key to the electronic device. The processing module of the electronic device decrypts the encrypted data using the key.

In some implementations, the first authorization list includes a plurality of user identification information, and the regional data sharing system includes a plurality of electronic devices. When the servo The processing unit of the unit receives the data request from one of the electronic devices, and the processing unit determines whether the user identification information requested by the data is identical to one of the user identification information of the first authorization list, when the processing unit determines The user identification information requested by the data is the same as one of the user identification information of the first authorization list, and the processing unit transmits the encrypted data to the one of the electronic devices. The key request includes a user identification information, when the processing unit of the server unit receives a key request from one of the electronic devices, and the processing unit determines the one of the electronic devices according to the key request and the identification data. Located in the authorized area, and the user identification information requested by the key has not been added to an attendance list, the processing unit adds the user identification information requested by the key to the attendance list, and determines the presence list. Whether the number of user identification information reaches a predetermined attendance threshold, and when the processing unit determines that the number of user identification information in the presence list reaches the predetermined attendance threshold, the processing unit transmits the key to the user identification information in the attendance list. Corresponding electronic device, the electronic device corresponding to the user identification information in the attendance list uses the key to decrypt the encrypted data.

In some implementations, the storage unit further stores a second authorization list, the second authorization list includes user identification information different from the user identification information of the first authorization list, and the regional data sharing system Contains multiple electronic devices. When the processing unit of the server unit receives the data request from one of the electronic devices, the processing unit determines the user identification information requested by the data and the first grant Whether the user identification information of the rights list or the second authorization list is the same, and when the processing unit determines that the user identification information requested by the data is the same as the user identification information of the first authorization list or the second authorization list, the processing unit will The encrypted data is transmitted to one of the electronic devices. The key request includes a user identification information, when the processing unit of the server unit receives a key request from one of the electronic devices, and the processing unit determines the one of the electronic devices according to the key request and the identification data. Located in the authorized area, and the processing unit determines that the user identification information requested by the data is the same as the user identification information of the first authorization list, the processing unit transmits the key to the one electronic device for The one of the electronic devices decrypts the encrypted data using the key. The processing module of one of the electronic devices transmits the key to another electronic device corresponding to the user identification information of the second authorization list, and the another electronic device uses the key to decrypt the encrypted data.

In some implementations, the electronic device further includes a GPS module electrically connected to the processing module, the GPS module generates a GPS coordinate of a location of the electronic device, and the key request further includes the GPS coordinate. The identification data stored by the server unit includes a GPS coordinate range of the authorized area. When the processing unit determines that the GPS coordinate of the key request falls within the GPS coordinate range of the identification material, the processing unit determines that the electronic device is located in the authorized area.

In some implementations, an access point is located in the authorized area, and the electronic device is connected to a communication network via the access point, the electronic device Receiving, by the access point, at least one of a media access control address, a service setting identifier, and an IP address, and generating the media access control address, the service setting identifier, and the IP address At least the person's key request. The identification data stored by the server unit includes at least one of the media access control address, the service setting identifier, and the address. Determining, by the processing unit, the media access control address, the service setting identifier, and the IP address of the key request, at least the one of the media access control address and the service setting identifier of the identification material, the service setting identifier And at least the one of the IP addresses, the processing unit determines that the electronic device is located in the authorized area.

In some implementations, the method further includes a communication device located in the authorized area, the communication device transmitting an identification code using a short-range communication technology, and the electronic device uses the electronic device when the electronic device is located in the authorized area The short-range communication technology receives the identification code and generates the key request containing the identification code. The identification data stored by the server unit includes the identification code. When the processing unit determines that the identification code of the key request is the same as the identification code of the identification material, the processing unit determines that the electronic device is located in the authorized area.

In some embodiments, the electronic device further includes an image capturing module electrically connected to the processing module, the image capturing module is configured to capture an environment of the electronic device to generate an image, and the key request further includes the image capturing module image. The identification data stored by the server unit includes a reference image associated with the authorized area. When the processing unit uses an image comparison technique to determine the image requested by the key and the identification data The reference image is similar, and the processing unit determines that the electronic device is located in the authorized area.

Another object of the present invention is to provide a regional data sharing method for regulating an electronic device that can only unlock an encrypted data provided by a server unit in an authorized area.

Therefore, a regional data sharing method of the present invention is jointly performed by a server unit and at least one electronic device. The server unit includes a storage unit and a processing unit electrically connected to the storage unit, and the storage unit stores encrypted data. a key for decrypting the encrypted data, a first authorization list, and identification data related to an authorized area, the first authorization list includes a user identification information, and the electronic device includes a processing module. The method includes the following steps: (A) the processing module of the electronic device generates a data request for requesting the encrypted data, and transmits the data request to the server unit, where the data request includes a user identification information; B) when the processing unit of the server unit receives the data request, the processing unit determines whether the user identification information requested by the data is the same as the user identification information of the first authorization list, and when the processing unit determines the data request The user identification information is the same as the user identification information of the first authorization list, and the processing unit encrypts the information. Transferring to the electronic device; (C) when the processing unit of the server unit receives a key request from the electronic device for requesting the key, the processing unit determines according to the key request and the identification data Whether the electronic device is located in the authorized area when the processing unit Determining, according to the key request and the identification data, that the electronic device is located in the authorized area, the processing unit transmits the key to the electronic device; and (D) the processing module of the electronic device uses the key to Encrypted data decryption.

In some implementations, the method is performed by the server unit and the plurality of electronic devices, the first authorization list includes a plurality of user identification information, wherein, in the step (A), when the server unit is The processing unit receives the data request from one of the electronic devices, and the processing unit determines whether the user identification information requested by the data is identical to one of the user identification information of the first authorization list, and when the processing unit determines the data request The user identification information is the same as one of the user identification information of the first authorization list, the processing unit transmits the encrypted data to the one of the electronic devices; in the step (C), the key request includes a user identification Information, when the processing unit of the server unit receives a key request from one of the electronic devices, and the processing unit determines, according to the key request and the identification data, that one of the electronic devices is located in the authorized area, and If the user identification information requested by the key has not been added to an attendance list, the processing unit identifies the user of the key request. The message joins the attendance list and determines whether the number of user identification information in the presence list reaches a predetermined attendance threshold. When the processing unit determines that the number of user identification information in the presence list reaches the predetermined attendance threshold, the processing unit will The key is transmitted to the electronic device corresponding to the user identification information in the attendance list, and the electronic device corresponding to the user identification information in the attendance list uses the key to decrypt the encrypted data.

In some implementations, the method is performed by the server unit and the plurality of electronic devices, the storage unit further storing a second authorization list, where the second authorization list includes a user different from the first authorization list. The user identification information of the identification information, wherein, after the step (D), the method further comprises: (E) processing module of one of the electronic devices transmitting the key to another user identification corresponding to the second authorization list An electronic device for decrypting the encrypted data by the another electronic device using the key; wherein, in the step (A), when the processing unit of the server unit receives the data from one of the electronic devices Requesting, the processing unit determines whether the user identification information requested by the data is the same as the user identification information of the first authorization list or the second authorization list, and when the processing unit determines the user identification information requested by the data and the first The authorization list or the user identification information of the second authorization list is the same, the processing unit transmits the encrypted data to the one of the electronic devices; in the step (C), the The key request includes a user identification information, when the processing unit of the server unit receives a key request from one of the electronic devices, and the processing unit determines, according to the key request and the identification data, that one of the electronic devices is located Within the authorized area, and the processing unit determines that the user identification information requested by the data is the same as the user identification information of the first authorization list, the processing unit transmits the key to the one of the electronic devices for the One of the electronic devices decrypts the encrypted data using the key.

In some implementations, the electronic device of the method further includes a GPS module electrically connected to the processing module, wherein, before the step (C), the method further includes: (F) The GPS module generates a GPS coordinate of a location of the electronic device, the key request further includes the GPS coordinate, and the identification data stored by the server unit includes a GPS coordinate range of the authorized area; In step (C), when the processing unit determines that the GPS coordinate of the key request falls within the GPS coordinate range of the identification material, the processing unit determines that the electronic device is located in the authorized area.

In some implementations, the method is further performed by an access point located in the authorized area, and the identification data stored by the server unit includes the media access control address, the service setting identifier, and At least one of the addresses, wherein, before the step (C), the method further comprises: (G) when the electronic device is connected to a communication network via the access point, the electronic device receives a media access by the access point Controlling at least one of the address, a service setting identifier, and an IP address, and generating the key request including the media access control address, the service setting identifier, and at least the one of the IP addresses; In the step (C), when the processing unit determines the media access control address requested by the key, the service setting identifier, and the IP address, at least the one and the media of the identification material are stored. The control address, the service setting identifier, and the IP address are at least the same, and the processing unit determines that the electronic device is located in the authorized area.

In some implementations, the method is further performed by a communication device located in the authorized area, and the identification data stored by the server unit includes the identification code, wherein, before step (C), the method further includes :(H) The communication device uses a short distance Sending an identification code from the communication technology, when the electronic device is located in the authorized area, the electronic device receives the identification code by using the short-range communication technology, and generates the key request including the identification code; wherein, in the step In (C), when the processing unit determines that the identification code of the key request is the same as the identification code of the identification material, the processing unit determines that the electronic device is located in the authorized area.

In some implementations, the electronic device of the method further includes an image capturing module electrically connected to the processing module, and the identification data stored by the server unit includes a reference image related to the authorized area. Before the step (C), the method further includes: (I) the image capturing module capturing an environment of the electronic device to generate an image; wherein, in the step (C), the key request further includes the image and When the processing unit uses an image matching technique to determine that the image requested by the key is similar to the reference image of the identification material, the processing unit determines that the electronic device is located in the authorized area.

The present invention has at least the following effects: in the regional data sharing system and the regional data sharing method of the present invention, the processing unit of the server unit determines that the electronic device is identical to the user identification information of the first authorization list, and then encrypts the electronic device. Transmitting data to the electronic device belonging to the first authorization list, thereby ensuring that the encrypted data is previously transmitted to the electronic device in the first authorization list, and then the processing unit of the server unit judges in different manners The area where the electronic device is located is located in the authorized area, and the key is transmitted to the electronic device located in the authorized area. The encrypted data is decrypted by the processing module of the electronic device, thereby ensuring that the encrypted data is used only in the authorized area.

100‧‧‧Regional Data Sharing System

1‧‧‧Server unit

11‧‧‧ storage unit

12‧‧‧Communication unit

13‧‧‧Processing unit

2‧‧‧Electronic devices

21‧‧‧ storage module

22‧‧‧Communication Module

23‧‧‧Short-range communication module

24‧‧‧GPS module

25‧‧‧Processing module

26‧‧‧Image Capture Module

3‧‧‧ access point

31‧‧‧Communicator

32‧‧‧Short-range communicator

33‧‧‧ Controller

4‧‧‧Communication device

41‧‧‧Short communication unit

42‧‧‧Control unit

201‧‧‧Communication network

301‧‧‧ Authorized area

S21~S29‧‧‧Steps

S41~S49‧‧‧Steps

S61~S69‧‧‧Steps

S81~S89‧‧‧Steps

S101~S110‧‧‧Steps

S111~S120‧‧‧Steps

Other features and advantages of the present invention will be apparent from the embodiments of the present invention, wherein: Figure 1 is a block diagram of a first embodiment of the regional data sharing system of the present invention; A flowchart of a first embodiment of a regional data sharing method; FIG. 3 is a block diagram of a second embodiment of the regional data sharing system of the present invention; and FIG. 4 is a first embodiment of the regional data sharing method of the present invention. FIG. 5 is a block diagram of a third embodiment of the regional data sharing system of the present invention; FIG. 6 is a flowchart of a third embodiment of the regional data sharing method of the present invention; Figure 7 is a block diagram of a fourth embodiment of the regional data sharing system of the present invention; Figure 8 is a flow chart of a fourth embodiment of the regional data sharing method of the present invention; Figure 9 is a regional data of the present invention. A block diagram of a fifth embodiment of the sharing system; FIG. 10 is a flowchart of a fifth embodiment of the regional data sharing method of the present invention; and FIG. 11 is a sixth implementation of the regional data sharing method of the present invention. First class Cheng Tu.

Before the present invention is described in detail, it should be noted that in the following description In the middle, similar components are denoted by the same reference numerals.

Referring to FIG. 1, a first embodiment of a regional data sharing system 100 of the present invention includes a server unit 1 and an electronic device 2.

The server unit 1 includes a storage unit 11, a communication unit 12, and a processing unit 13 electrically connected to the storage unit 11 and the communication unit 12. The storage unit 11 stores encrypted data, a key for decrypting the encrypted data, a first authorization list, and identification data related to an authorized area 301. In this embodiment, the first authorization list includes at least one first user identification information, and the at least one first user identification information is, for example, an International Mobile Equipment Identity (International Mobile Equipment Identity) corresponding to the authorized electronic device. IMEI), but not limited to this, in other implementations, each first user identification information may also be, for example, an authorized user account.

In this embodiment, the authorized area 301 is, for example, a GPS coordinate range, or may be a specific place, such as a conference room or a classroom, but is not limited thereto.

The processing unit 13 of the server unit 1 is connected to a communication network 201 by wire or wirelessly using the communication unit 12.

The electronic device 2 includes a storage module 21, a communication module 22, a GPS module 24, and a processing module 25 electrically connected to the storage module 21, the communication module 22, and the GPS module 24. In this embodiment, the processing module 25 of the electronic device 2 can be connected to the communication network 201 via the communication module 22 via the server unit 1 The communication unit 12 performs wired or wireless communication with the processing unit 13. In this embodiment, the electronic device 2 can be a tablet computer, a smart phone or a notebook computer, and the like.

Referring to FIG. 1 and FIG. 2, the first embodiment of the regional data sharing system 100 is, for example, a first embodiment for performing the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S21, the processing module 25 of the electronic device 2 generates a data request for requesting the encrypted data, and transmits the data request to the processing unit 13 of the server unit 1. The data request includes user identification information of the electronic device 2. The user identification information is, for example, an International Mobile Equipment Identity (IMEI) of the electronic device 2, but not limited thereto. In other implementations, the user identification information may also be, for example, an operation. The user account of the user of the electronic device 2.

In step S22, when the processing unit 13 of the server unit 1 receives the data request from the electronic device 2, the processing unit 13 determines the user identification information requested by the data and the first user of the first authorization list. Whether the identification information is the same or not, if the result is YES, the process proceeds to step S23. In the present embodiment, if the result is no, the process proceeds to step S29, and the method is terminated, but not limited thereto.

In step S23, the processing unit 13 of the server unit 1 transmits the encrypted data to the electronic device 2.

It can be seen from the above that by performing steps S21 to S23 in the first embodiment of the regional data system 100, it can be ensured that the electronic device 2 having only the first user identification information identical to the first authorization list can obtain the encrypted data. In other words, the provider of the encrypted data can specify the authority of the user who can obtain the encrypted data by setting the first authorization list.

In step S24, the GPS module 24 of the electronic device 2 generates a GPS coordinate of the location of the electronic device 2.

In step S25, the processing module 25 of the electronic device 2 generates a key request for requesting the key, the key request includes the GPS coordinate of the electronic device 2, and the electronic device 2 and the key The request is transmitted to the server unit 1.

In step S26, when the processing unit 13 of the server unit 1 receives the key request from the electronic device 2, the processing unit 13 determines the GPS coordinate in the key request and the GPS coordinate range in the identification data. Whether the electronic device 2 is located in the authorized area 301, if the result is YES, the process proceeds to step S27.

In step S27, the processing unit 13 transmits the key to the electronic device 2.

In step S28, the electronic device 2 decrypts the encrypted material using the key.

It can be seen from the above that the first embodiment of the transmissive regional data system 100 performs steps S24 to S28 to ensure that only the electronic device 2 located within the GPS coordinate range can be ensured. The key can be obtained, thereby standardizing the use of the data by the user who obtained the encrypted data only within the GPS coordinate range, thereby satisfying the requirement that the encrypted data provider desires that the encrypted data is only disclosed in the GPS coordinate range.

It is to be noted that, in the step S26 of the embodiment, the server unit 1 only determines whether the electronic device 2 is located in the authorized area 301, but is not limited thereto. In other embodiments, the key request generated by the processing module 25 of the electronic device 2 in step S25 may further include user identification data (hereinafter referred to as key user identification information) of the electronic device 2, and in this step. The processing unit 13 of the server unit 1 in S26 further determines whether the key user identification data and the first user identification data of the first authorization list are the same. If the result is also yes, the process proceeds to step S27. In this way, it can be ensured that the electronic device 2 receiving the key request is located in the authorized area and belongs to the first authorization list. Furthermore, in the embodiment, an electronic device 2 is exemplified, but not limited thereto. In other embodiments, the embodiment may be implemented by using multiple electronic devices 2, as long as a plurality of electronic devices are established. A plurality of first user identification information of 2 may be in the first authorization list.

In addition, in steps S24-S26 of the embodiment, the processing unit 13 determines whether the electronic device 2 is located in the GPS coordinate range of the identification data or not. In the area 301, the manner of judgment is not limited thereto. In the second to fourth embodiments of the regional data sharing method of the present invention, the other three will be separately determined whether the electronic device 2 is located at the authorized The implementation in area 301.

Referring to FIG. 3, a second embodiment of the regional data sharing system 100 of the present invention includes a server unit 1, an electronic device 2, and an access point 3 located in the authorized area 31. In this embodiment, the server unit 1 is substantially the same as the first embodiment, except that the identification data of the embodiment is, for example, a media access control address including a access point 3, and a service setting identifier. And at least one of the IP addresses, but not limited to this. In this embodiment, the electronic device 2 is substantially the same as the first embodiment. The difference is that the electronic device 2 of the embodiment further includes a short-range communication module 23. In this embodiment, the short message communication module 23 supports at least one of a WiFi technology, a Bluetooth technology, and a NFC (Near Field Communication) technology.

The access point 3 has a communicator 31, a short-range communicator 32, and a controller 33 electrically connected to the communicator 31 and the short-range communicator 32. In this embodiment, the access point 3 has at least one of a media access control address, a service setting identifier, and an IP address. In the present embodiment, the controller 33 of the access point 3 is connected to the communication network 201 by the communication device 31 and performs wired or wireless communication with the processing unit 13 via the communication unit 12 of the server unit 1. In this embodiment, the short-range communicator 32 supports at least one of a WiFi technology, a Bluetooth technology, and a NFC (Near Field Communication) technology, and the controller 33 of the access point 3 utilizes the short distance. The communicator 32 communicates with the processing module via the short-range communication module 23 of the electronic device 2 Group 25 performs short-range wireless communication. In this way, the electronic device 2 can perform bidirectional transmission of data with the server unit 1 via the access point 3.

Referring to FIG. 3 and FIG. 4, a second embodiment of the regional data sharing system 100 is used to perform a second embodiment of the regional data sharing method of the present invention. In this embodiment, steps S41 to S43 and Steps S21 to S23 of an embodiment are the same, and steps S47 to S49 are the same as steps S27 to S29 of the first embodiment. The main difference is the steps S44 to S46 for determining whether the electronic device 2 is located in the authorized area 301, as explained below.

In step S44, the electronic device 2 receives at least one of a media access control address, a service setting identifier, and an IP address from the access point 3.

In step S45, the processing module 25 of the electronic device 2 generates a key request for requesting the key, the key request including the media access control address, the service setting identifier, and the IP address. At least the one of them transmits the key request to the server unit 1.

In step S46, the processing unit 13 of the server unit 1 is configured to determine the media access control address of the key request, the service setting identifier, and the IP address of the at least one of the media stored in the identification data. If the control address, the service setting identifier, and the IP address are the same, the processing unit 13 determines that the electronic device 2 is located in the authorized area 301, and proceeds to step S47. If the result is no, the process proceeds to step S49, and the embodiment is ended, but not limited thereto.

By performing steps S44-S48 in the second embodiment of the regional data system 100, it can be ensured that the electronic device 2 that uses the key to open the encrypted data is located within the effective communication range of the access point 3, thereby obtaining the encryption by the specification. The user of the data uses the encrypted data only within the effective communication range of the access point 3, thereby satisfying the requirement that the encrypted data provider desires that the encrypted data is only disclosed within the effective communication range of the access point 3. In this embodiment, the effective communication range of the access point 3 defines the authorized area 301. Therefore, by setting the access point 3 in a specific place such as a conference room or a classroom, the user can be regulated. This encrypted material is only available in certain locations.

Referring to FIG. 5, a third embodiment of the regional data sharing system 100 of the present invention includes a server unit 1, an electronic device 2, and a communication device 4 located in the authorized area 31. In the present embodiment, the server unit 1 and the electronic device 2 are substantially the same as the second embodiment of the system. The main difference is that the identification data includes the identification code of the communication device 4.

In this embodiment, the communication device 4 includes a short-range communication unit 41 and a control unit 42 electrically connected to the short-range communication unit 41. In this embodiment, the communication device 4 uses the short-range communication unit 42 to transmit an identification code to the short-range communication module 23 of the electronic device 2 by a short-distance communication technology. Specifically, the short-range communication technology includes, for example, the short-range communication technology. Support at least one of WiFi technology, Blue tooth technology and NFC (Near Field Communication) technology. In this embodiment, the communication device 4 is, for example, a beacon device, which is broadcast in one direction. (Unidirectional Broadcasr) sends out a Bluetooth signal containing the identification code, but not limited to this.

Referring to FIG. 5 and FIG. 6, a third embodiment of the regional data sharing system 100 is used to perform a third embodiment of the regional data sharing method of the present invention. In this embodiment, steps S61-S63 and Steps S21 to S23 of an embodiment are the same, and steps S67 to S69 are the same as steps S27 to S29 of the first embodiment. The main difference is in steps S64 to S66 for judging whether or not the electronic device 2 is located in the authorized area 301, as explained below.

In step S64, the electronic device 2 receives the identification code from the communication device 4.

In step S65, the processing module 25 of the electronic device 2 generates a key request for requesting the key, the key request includes the identification code, and transmits the key request to the server unit 1.

In step S66, the processing unit 13 of the server unit 1 determines whether the identification code of the key request and the identification code of the identification data are the same. If the result is yes, the processing unit 13 determines that the electronic device 2 is located in the Within the authorized area 301, the process proceeds to step S67. If the result is no, the process proceeds to step S69, and the embodiment is terminated, but not limited thereto.

The regional data system 100 ensures that the electronic device 2 capable of using the key to open the encrypted data is located by performing steps S64-S68 of the embodiment. Within the effective communication range of the communication device 4, the user who obtains the encrypted data is used to use the data only within the effective communication range of the communication device 4, thereby satisfying that the encrypted data provider desires the encrypted data only in the communication. The need for disclosure within the effective communication range of device 4. In this embodiment, the effective communication range of the communication device 4 defines the authorized area 301. Therefore, by setting the communication device 4 in a specific place such as a conference room or a classroom, the user can be regulated at the specific place. This encrypted material can be used.

Referring to FIG. 7, a fourth embodiment of the regional data sharing system 100 of the present invention includes a server unit 1 and an electronic device 2. In the present embodiment, the server unit 1 is substantially the same as the first embodiment, except that the discrimination material of the embodiment includes, for example, a reference image associated with the authorized area 301. In this embodiment, the electronic device 2 is substantially the same as the first embodiment. The difference is that the electronic device 2 of the embodiment further includes an image capturing module 26 electrically connected to the processing module. The image capturing module 26 It is used to capture the environment of the electronic device 2 to generate an image.

Referring to FIG. 7 and FIG. 8, a fourth embodiment of the regional data sharing system 100 is, for example, a fourth embodiment for performing the regional data sharing method of the present invention. In this embodiment, steps S81-S83 and Steps S21 to S23 of an embodiment are the same, and steps S87 to S89 are the same as steps S27 to S29 of the first embodiment. The main difference is in steps S84 to S86 for judging whether or not the electronic device 2 is located in the authorized area 301, as explained below.

In step S84, the image capturing module 26 of the electronic device 2 captures the environment of the electronic device 2 to generate an image.

In step S85, the processing module 25 of the electronic device 2 generates a key request for requesting the key, the key request includes the image, and transmits the key request to the server unit 1.

In step S86, the processing unit 13 of the server unit 1 uses an image comparison technique to determine that the image requested by the key is similar to the reference image of the identification data. If the result is yes, the processing unit 13 determines the electronic device. 2 is located in the authorized area 301, and proceeds to step S87. If the result is no, the process proceeds to step S89, and the embodiment is ended, but not limited thereto.

Referring to FIG. 9, a fifth embodiment of a regional data sharing system 100 of the present invention is substantially the same as the first embodiment. The difference is that the embodiment further includes a plurality of electronic devices 2, and in the embodiment, the server The structure and function of the unit 1 and each of the electronic devices 2 are substantially the same as those of the first embodiment, and details are not described herein again.

Referring to FIG. 9 and FIG. 10, a fifth embodiment of the regional data sharing system 100 is, for example, a fifth embodiment for performing the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S101, the processing module 25 of one of the electronic devices 2 generates a data request for requesting the encrypted data, and transmits the data request to the server unit 1. The data request includes the use of one of the electronic devices 2 User identification information.

In step S102, when the processing unit 13 of the server unit 1 receives the data request from the one of the electronic devices 2, the processing unit 13 determines the user identification information of the data request and the first authorization list. Whether the first user identification information is the same or not, if the result is YES, the process proceeds to step S103. If the result is no, the process proceeds to step S110, and the embodiment is terminated, but not limited thereto.

In step S103, the processing unit 13 transmits the encrypted data to the one of the electronic devices 2.

In step S104, the GPS module 24 of the one of the electronic devices 2 generates a GPS coordinate of the location of the one of the electronic devices 2.

In step S105, the one of the electronic devices 2 generates a key request for requesting the key, the key requesting user identification information including the one of the electronic devices 2 ( The key is referred to as the key user identification information and the GPS coordinates, and the one of the electronic devices 2 transmits the key request to the server unit 1.

In step S106, when the processing unit 13 of the server unit 1 receives a key request for the one of the electronic devices 2, the processing unit 13 determines the GPS coordinates and the identification data according to the key. The GPS coordinate range determines whether one of the electronic devices 2 is located in the authorized area 301 and judges Whether the key user identification information of the one of the electronic devices 2 has not been added to an attendance list, and if the result is yes, the process proceeds to step S107. If the result is no, the process proceeds to step S110, and the embodiment is terminated, but not limited thereto. It is to be noted that the manner of determining whether the one of the electronic devices 2 is located in the authorized area 301 is not limited thereto. In other implementation manners, the second to the second The method disclosed in the fourth embodiment is performed in conjunction with the corresponding system embodiment. In other words, the authorized area 301 can also be a specific place such as a conference room or a classroom.

In step S107, the processing unit 13 adds the key user identification information requested by the key to the attendance list, and determines whether the number of key user identification information in the presence list reaches a predetermined attendance threshold, when the processing is performed. The unit 13 judges that the number of key user identification information in the presence list reaches the predetermined attendance threshold, and proceeds to step S108. If the result is no, the process proceeds to step S110, and the embodiment is terminated, but not limited thereto. In this embodiment, the predetermined presence threshold refers to the number of preset electronic devices 2. Therefore, if each electronic device 2 is operated by a user, the predetermined presence threshold is located in the authorized area. The number of attendees of the user, and the number of attendees must reach the threshold before proceeding to step S108.

In step S108, the processing unit 13 transmits the key to the electronic device 2 corresponding to the key user identification information in the attendance list.

In step S109, the key user identification information pair in the attendance list The electronic device 2 should use the key to decrypt the encrypted data.

It can be seen from the above that by performing steps S106-S109 in the fifth embodiment of the regional data sharing system 100, it is ensured that only the GPS coordinate range (ie, the authorized area 301, or a conference room or classroom) is located. The electronic device 2 can use the key to open the encrypted data, and can also ensure that when the electronic device 2 uses the key to open the encrypted data, the number of electronic devices 2 located within the GPS coordinate range has reached a predetermined attendance threshold. . In other words, the provider of the encrypted data can control the number of users who are within the GPS coordinate range and are within the GPS coordinates by setting the predetermined attendance threshold. The quantity can get the key.

Referring to FIG. 9 , a fifth embodiment of a regional data sharing system 100 of the present invention is substantially the same. The main difference is that the storage unit 11 of the server unit 1 further stores a second authorization list, and the second The authorization list contains user identification information that is different from the user identification information of the first authorization list.

Referring to FIG. 9 and FIG. 11, a sixth embodiment of the regional data sharing system 100 is, for example, a sixth embodiment for performing the regional data sharing method of the present invention. The embodiment includes the following steps.

In step S111, the processing module 25 of one of the electronic devices 2 generates a data request for requesting the encrypted data, and transmits the data request to the server unit 1. The data request includes one of the electronic devices 2 User identification information.

In step S112, when the processing unit 13 of the server unit 1 receives a data request from one of the electronic devices 2, the processing unit 13 determines the user identification information of the data request and the first authorization list. Or the user identification information of the second authorization list is the same. When the processing unit 13 determines that the user identification information requested by the data is the same as the user identification information of the first authorization list or the second authorization list, the process proceeds to step S113. If the user identification information requested by the data is different from the first user identification information of the first authorization list or the second user identification information of the second authorization list, the process proceeds to step S120, and the embodiment is terminated. Limited.

In step S113, the processing unit 13 transmits the encrypted data to the one of the electronic devices 2.

In step S114, the GPS module 24 generates a GPS coordinate of a location of the one of the electronic devices 2.

In step S115, the one of the electronic devices 2 generates a key request for requesting the key, the key request including the user identification of the one of the electronic devices 2 Information and the GPS coordinates, and one of the electronic devices 2 transmits the key request to the server unit 1.

In step S116, when the processing unit 13 of the server unit 1 receives a key request from one of the electronic devices 2, the processing unit 13 according to the GPS coordinates of the key request and the identification data GPS coordinate range judgment Whether one of the electronic devices 2 is located in the GPS coordinate range (ie, the authorized area 301, or a conference room or a classroom) and the user identification information requested by the data and the user identification information of the first authorization list If they are the same, if the answer is yes, the process proceeds to step S117. If one of the results is no, the process proceeds to step S120, and the embodiment is terminated, but not limited thereto. It is to be noted that the manner of determining whether one of the electronic devices 2 is located in the authorized area 301 is not limited thereto. In other implementation manners, for example, the second to fourth implementations may also be implemented. The method disclosed in the example is performed in conjunction with the corresponding system embodiment. In other words, the authorized area 301 can also be a specific place such as a conference room or a classroom.

In step S117, the processing unit 13 transmits the key to one of the electronic devices 2.

In step S118, one of the electronic devices 2 decrypts the encrypted data using the key.

In step S119, the processing module 25 of one of the electronic devices 2 transmits the key to another electronic device 2 corresponding to the user identification information of the second authorization list for the other electronic device. The device 2 decrypts the encrypted data using the key.

It can be seen from the above that the holders of the electronic device 2 having the same user identification information as the first authorization list are executed through the steps S116 to S119 in the sixth embodiment of the regional data sharing system 100 (for example, The chairman of the meeting) Within the authorization area 31, other users (such as attendees) of the electronic device 2 holding the second user identification information corresponding to the second authorization list can obtain the key and use the encrypted data.

In summary, in the first to fourth embodiments of the regional data sharing system 100 and the regional data sharing method of the present invention, the processing unit 13 of the server unit 1 determines the electronic device 2 and the first authorization list. After the user identification information is the same, the encrypted data is transmitted to the electronic device 2 belonging to the first authorization list, thereby ensuring that the encrypted data is previously transmitted to the electronic device 2 in the first authorization list. In a different manner, it is determined that the area where the electronic device 2 is located is located in the authorized area 301, and the key is transmitted to the electronic device 2 located in the authorized area 301 for processing module of the electronic device 2. The encrypted data is decrypted 25, thereby ensuring that the encrypted material is used only in the authorized area 301. In the fifth embodiment, the processing unit 13 further needs to determine whether the number of user identification information in the presence list reaches a predetermined attendance threshold, and then transmits the key to the electronic device corresponding to the user identification information of the attendance list. In other words, the provider of the encrypted data can ensure that the number of attendees of the electronic device 2 located in the authorized area 31 reaches a predetermined number by setting the predetermined attendance threshold, so that each user uses the key to unlock the encryption. data. In the sixth embodiment, the processing unit 13 further needs to determine that the user identification information of the one of the electronic devices 2 is the same as the first user identification information of the first authorization list and is located in the authorized area 301. One of the electronic devices 2 Receiving the key and transmitting the key to another electronic device 2 corresponding to the user identification information of the second authorization list, in other words, holding the same user identification as the first authorization list The holder of the electronic device 2 of the information (such as the chairman of a conference) in the authorized area 31, other users of the electronic device 2 holding the second user identification information corresponding to the second authorization list (such as a participant) ) to get the key and use the encrypted data. Therefore, the object of the present invention can be achieved.

However, the above is only the embodiment of the present invention, and the scope of the invention is not limited thereto, and all the equivalent equivalent changes and modifications according to the scope of the patent application and the patent specification of the present invention are still The scope of the invention is covered.

Claims (14)

A regional data sharing system includes: a server unit, including a storage unit and a processing unit electrically connected to the storage unit, the storage unit storing encrypted data, a key for decrypting the encrypted data, and a first An authorization list, and the identification information related to an authorized area, the first authorization list includes at least one first user identification information; and at least one electronic device, including a processing module; the processing module of the electronic device generates a And a data request for requesting the encrypted data, and transmitting the data request to the server unit, the data request includes a user identification information; when the processing unit of the server unit receives the data request, the processing unit determines the Whether the user identification information requested by the data is the same as the first user identification information of the first authorization list, and the processing unit determines that the user identification information requested by the data is the same as the first user identification information of the first authorization list. And the processing unit transmits the encrypted data to the electronic device; when the processing unit of the server unit Receiving a key request from the electronic device for requesting the key, the processing unit determining, according to the key request and the identification data, whether the electronic device is located in the authorized area, when the processing unit is based on the gold The key request and the identification data determine that the electronic device is located in the authorized area, and the processing unit transmits the key to the electronic device; the processing module of the electronic device uses the key to solve the encrypted data dense. The regional data sharing system of claim 1, wherein the first authorization list comprises a plurality of first user identification information, and the regional data sharing system comprises a plurality of electronic devices; when the server unit processes Receiving, by the unit, the data request from one of the electronic devices, the processing unit determining whether the user identification information requested by the data is identical to one of the first user identification information of the first authorization list, when the The processing unit determines that the user identification information requested by the data is the same as the one of the first user identification information of the first authorization list, and the processing unit transmits the encrypted data to the one of the electronic devices The key request includes a key user identification information, when the processing unit of the server unit receives a key request from one of the electronic devices, and the processing unit determines according to the key request and the identification data. One of the electronic devices is located in the authorized area, and the key user identification information requested by the key has not been added. Upon attending the list, the processing unit adds the key user identification information requested by the key to the attendance list, and determines whether the number of key user identification information in the presence list reaches a predetermined attendance threshold, when the processing unit Determining that the number of the key user identification information in the attendance list reaches the predetermined attendance threshold, the processing unit transmitting the key to the electronic device corresponding to the key user identification information in the attendance list for the attendance The electronic device corresponding to the key user identification information in the list uses the key to decrypt the encrypted data. The regional data sharing system of claim 1, wherein the storage unit further stores a second authorization list, where the second authorization list includes one of the first user identification information different from the first authorization list. Two user identification information, the regional data sharing system includes a plurality of electronic devices; when the processing unit of the server unit receives the data request from one of the electronic devices, the processing unit determines the data request Whether the user identification information is the same as the first user identification information of the first authorization list or the second user identification information of the second authorization list, and the processing unit determines the first user identification information of the data request and the The first user identification information of the first authorization list or the second user identification information of the second authorization list is the same, and the processing unit transmits the encrypted data to the one of the electronic devices; the key request includes a key user identification information, when the processing unit of the server unit receives a key request from one of the electronic devices, and The processing unit determines that the one of the electronic devices is located in the authorized area according to the key request and the identification data, and the processing unit determines the user identification information requested by the data and the first authorization list If the first user identification information is the same, the processing unit transmits the key to the one of the electronic devices, and the one of the electronic devices decrypts the encrypted data using the key; The processing module of the one of the electronic devices transmits the key to another electronic device corresponding to the second user identification information of the second authorization list, for the another electronic device to use the key The encrypted data is decrypted. The regional data sharing system of any one of claims 1 to 3, wherein the electronic device further comprises a GPS module electrically connected to the processing module, the GPS module generating a location indicating the electronic device a GPS coordinate, the key request further comprising the GPS coordinate, the identification data stored by the server unit includes a GPS coordinate range of the authorized area; when the processing unit determines that the GPS coordinate of the key request falls Within the GPS coordinate range of the discrimination data, the processing unit determines that the electronic device is located in the authorized area. The regional data sharing system of any one of claims 1 to 3, further comprising an access point located in the authorized area, when the electronic device is connected to a communication network via the access point, the electronic device Receiving, by the access point, at least one of a media access control address, a service setting identifier, and an IP address, and generating the media access control address, the service setting identifier, and the IP address The at least one of the key request; the identification data stored by the server unit includes the media access control address, the service setting identifier, and the IP address; when the processing unit Determining the media access control address of the key request, the service setting identifier, and the one of the IP address and the media access control address of the identification material, the service setting identifier, and the IP One of the addresses is the same, and the processing unit determines that the electronic device is located within the authorized area. The regional data sharing system of any one of claims 1 to 3, further comprising a communication device located in the authorized area, the communication device transmitting an identification code using a short-range communication technology, when the electronic device Located in the quilt In the authorized area, the electronic device receives the identification code by using the short-range communication technology, and generates the key request including the identification code; the identification data stored by the server unit includes the identification code; when the processing unit determines The identification code of the key request is the same as the identification code of the identification material, and the processing unit determines that the electronic device is located in the authorized area. The area data sharing system of any one of claims 1 to 3, wherein the electronic device further comprises an image capturing module electrically connected to the processing module, wherein the image capturing module is configured to capture an environment of the electronic device To generate an image, the key request further includes the image; the identification data stored by the server unit includes a reference image related to the authorized area; and when the processing unit uses an image matching technology to determine the key The requested image is similar to the reference image of the identification material, and the processing unit determines that the electronic device is located in the authorized area. A regional data sharing method is jointly performed by a server unit and at least one electronic device. The server unit includes a storage unit and a processing unit electrically connected to the storage unit. The storage unit stores encrypted data for decryption. a key of the encrypted data, a first authorization list, and a identification data related to an authorized area, the first authorization list includes a first user identification information, and the electronic device includes a processing module, the method The method includes the following steps: (A) the processing module of the electronic device generates a data request for requesting the encrypted data, and transmits the data request to the server unit, where The data request includes a user identification information; (B) when the processing unit of the server unit receives the data request, the processing unit determines the user identification information requested by the data and the first user identification information of the first authorization list. Whether it is the same, when the processing unit determines that the user identification information requested by the data is the same as the first user identification information of the first authorization list, the processing unit transmits the encrypted data to the electronic device; (C) when Receiving, by the processing unit of the server unit, a key request from the electronic device for requesting the key, the processing unit determining, according to the key request and the identification data, whether the electronic device is located in the authorized area, when The processing unit determines, according to the key request and the identification data, that the electronic device is located in the authorized area, the processing unit transmits the key to the electronic device; and (D) the processing module of the electronic device uses the gold The key decrypts the encrypted data. The method for sharing a regional data according to claim 8 is performed by the server unit and a plurality of electronic devices, wherein the first authorization list includes a plurality of first user identification information, wherein, in the step (A), When the processing unit of the server unit receives the data request from one of the electronic devices, the processing unit determines one of the user identification information requested by the data and the user identification information of the first authorization list. Whether the same is the same, when the processing unit determines that the user identification information requested by the data is the same as one of the first user identification information of the first authorization list, the processing unit uses the encryption element Transferring to one of the electronic devices; in the step (C), the key request includes a key user identification information, and when the processing unit of the server unit receives one of the electronic devices The key request of the user, and the processing unit determines, according to the key request and the identification data, that the one of the electronic devices is located in the authorized area, and the key user identification information requested by the key has not been When the attendance list is added, the processing unit adds the key user identification information requested by the key to the attendance list, and determines whether the number of key user identification information in the attendance list reaches a predetermined attendance threshold, when the processing is performed. The unit determines that the number of key user identification information in the attendance list reaches the predetermined attendance threshold, and the processing unit transmits the key to the electronic device corresponding to the key user identification information in the attendance list for the attendance list The electronic device corresponding to the key user identification information in the key uses the key to decrypt the encrypted data. The method for sharing a regional data according to claim 8 is performed by the server unit and a plurality of electronic devices, wherein the storage unit further stores a second authorization list, where the second authorization list is different from the first authorization The second user identification information of the first user identification information of the list, wherein, after the step (D), the method further comprises: (E) processing module of the one of the electronic devices transmitting the key to another An electronic device corresponding to the second user identification information of the second authorization list, wherein the another electronic device decrypts the encrypted data by using the key; wherein, in the step (A), when the server Unit processing unit Receiving the data request from one of the electronic devices, the processing unit determining the user identification information requested by the data and the first user identification information of the first authorization list or the second of the second authorization list Whether the user identification information is the same, and the processing unit determines that the user identification information requested by the data is the same as the first user identification information of the first authorization list or the second user identification information of the second authorization list, the processing unit Transmitting the encrypted data to the one of the electronic devices; in the step (C), the key request includes a key user identification information, and when the processing unit of the server unit receives the electronic Determining a key request of one of the devices, and the processing unit determines, according to the key request and the identification data, that the one of the electronic devices is located in the authorized area, and the processing unit determines the user of the data request The identification information is the same as the first user identification information of the first authorization list, and the processing unit transmits the key to the electronic device. In one, the one of which for such an electronic device using this key to decrypt the encrypted data. The regional data sharing method according to any one of claims 8 to 10, further comprising: a GPS module electrically connected to the processing module, wherein, before the step (C), the method further comprises: (F) The GPS module generates a GPS coordinate indicating the location of the electronic device, the key request further includes the GPS coordinate, and the identification data stored by the server unit includes a GPS coordinate range of the authorized area; In the step (C), when the processing unit determines that the GPS coordinate of the key request falls within the GPS coordinate range of the identification material, the The processing unit determines that the electronic device is located within the authorized area. The regional data sharing method according to any one of claims 8 to 10, further executed by an access point located in the authorized area, the identification data stored by the server unit includes a media access control At least one of a address, a service setting identifier and an IP address, wherein, before the step (C), the method further comprises: (G) when the electronic device is connected to a communication network via the access point, the electronic device Receiving, by the access point, the media access control address, the service setting identifier, and the IP address, and generating the media access control address, the service setting identifier, and the IP bit The key request of the one of the addresses; wherein, in the step (C), the processing unit determines the media access control address, the service setting identifier, and the IP address of the key request One of the ones is the same as the media access control address, the service setting identifier, and the IP address of the identification material, and the processing unit determines that the electronic device is located in the authorized area. The method for sharing a regional data according to any one of claims 8 to 10, which is further executed by a communication device located in the authorized area, wherein the identification data stored by the server unit includes the identification code, wherein Before the step (C), the method further comprises: (H) the communication device transmitting an identification code by using a short-distance communication technology, and when the electronic device is located in the authorized area, the electronic device receives the identification by using the short-range communication technology a code and generate the key request containing the identification code; In the step (C), when the processing unit determines that the identification code of the key request is the same as the identification code of the identification material, the processing unit determines that the electronic device is located in the authorized area. The method of claim 4, wherein the electronic device further comprises an image capturing module electrically connected to the processing module, wherein the identifying data stored by the server unit comprises a correlation And the reference image of the authorized area, wherein, before the step (C), the method further comprises: (I) the image capturing module capturing an environment of the electronic device to generate an image; wherein, in the step (C), The key request further includes the image, and when the processing unit uses an image matching technique to determine that the image requested by the key is similar to the reference image of the identification material, the processing unit determines that the electronic device is located in the authorized area. .