WO2007142072A1

WO2007142072A1 - Terminal device and data managing system using the same

Info

Publication number: WO2007142072A1
Application number: PCT/JP2007/060855
Authority: WO
Inventors: Yukitoshi Maeda
Original assignee: Heartland Co., Ltd.
Priority date: 2006-06-09
Filing date: 2007-05-29
Publication date: 2007-12-13
Also published as: JPWO2007142072A1

Abstract

Provided is a terminal device capable of encrypting and decrypting data without troubling a user. The terminal device (6) includes an edition processing unit (24) and a data managing unit (27). The edition processing unit (24) performs a read process for reading out data, an edition process for editing the read out data, and a write process for writing the edited data. The data managing unit (27) monitors a process in the edition processing unit (24). When the edition processing unit (24) executes the write process, the data managing unit (27) encrypts the data after edited and stores the encrypted data in recording media (22, 31, 32) instead of the edition processing unit (24). When the edition processing unit (24) executes the read process, instead of the edition processing unit (24), the data managing unit (27) reads out the encrypted data to be read from the recording media (22, 31, 32), decrypts the read out data, and supplies it to the edition processing unit (24).

Description

Specification

Terminal apparatus and data management system provided with the same

Technical field

The present invention relates to a terminal device that is connected to a recording medium for storing data, encrypts and stores the data in the recording medium, a plurality of the terminal devices, and a management server that manages these terminal devices. TECHNICAL FIELD OF THE INVENTION relating to a data management system connected via a telecommunication line

In recent years, there has been a frequent problem that data stored in a computer has leaked to the outside and secret information has been leaked to the outside. For example, JP-A-9-204330 An encryption / decryption device as disclosed in the publication has been proposed.

[0003] This encryption / decryption device can encrypt or decrypt a specific file (data) selected by the user from among the files (data) stored therein. It is configured so that the user can encrypt the problematic file if known to a third party, so that even if the encrypted file leaks outside, the encrypted file Information about the file will not be leaked.

[0004] Patent Document 1: Japanese Patent Laid-Open No. 9 204330

Disclosure of the invention

Problems to be solved by the invention

[0005] However, in the conventional encryption / decryption device, the user needs to perform an operation of encrypting or decrypting the file, or, for example, in the encrypted file. Every time you check or edit the contents, you must decrypt the file before the work and encrypt the file after the work, which is very troublesome. It was.

[0006] In addition, due to a strong problem, a file containing data related to secret information is often not encrypted by the user. If such a file leaks to the outside, the secret information leaks to the outside. It will be. [0007] As described above, the conventional encryption / decryption device takes time and effort to prevent the leakage of information, and the strength of the conventional encryption / decryption device cannot prevent the leakage of information completely.

[0008] The present invention has been made in view of the above circumstances, and can perform data encryption and decryption without bothering the user, and more reliably leak information. It is an object of the present invention to provide a terminal device that can be prevented, and a data management system including the same.

Means for solving the problem

In order to achieve the above object, the present invention provides:

A terminal device to which a recording medium for storing data is connected, a reading process for reading data stored in the recording medium, an editing process for editing the read data, and a document for writing the edited data to the recording medium In a terminal device equipped with an editing processing unit that performs embedding processing,

When the processing in the editing processing unit is monitored and the editing processing unit executes the writing process, the edited data is encrypted and stored in the recording medium instead of the editing processing unit. When the editing processing unit executes the reading processing, instead of the editing processing unit, the encrypted data to be read is read from the recording medium, and the read data is decrypted and provided to the editing processing unit. The present invention relates to a terminal device characterized by further comprising a data management unit that performs encryption and decryption processing.

[0010] According to this terminal device, after a recording medium is connected to the terminal device, the user performs an editing operation on the data stored in the recording medium as appropriate. Alternatively, editing work of data stored in a recording medium connected in advance to the terminal device is appropriately performed. The recording medium stores, for example, data relating to documents, sounds, images, computer programs, and the like, which has been previously encrypted (encrypted data).

[0011] At this time, if the data management unit that monitors the processing in the editing processing unit confirms that the reading processing is executed by the editing processing unit, the encryption key to be read instead of the editing processing unit. Data is read from the recording medium, and the read data is decrypted and provided to the editing processing section. On the other hand, when the data management unit confirms that the writing process is executed by the editing processing unit, the data management unit replaces the editing processing unit with the edited data. The data is encrypted and stored in a recording medium.

In this manner, the data read by the editing processing unit is decrypted by the encryption / decryption processing of the data management unit, and the data written by the editing processing unit is encrypted. As a result, the user can perform data encryption or decryption without any special operation.

[0013] Thus, according to the terminal device of the present invention, when the editing processing unit reads data from the recording medium or writes data to the recording medium, the data management unit automatically encrypts the data. Since the data is decrypted and the edited data is automatically encrypted, the data can be easily decrypted and encrypted without any troublesome operation. In addition, since the data in the recording medium is encrypted, the third party recognizes the contents of the data even if the data leaks to the outside or the recording medium reaches the third party. This information cannot be leaked to the outside.

[0014] The terminal device further includes a terminal-side medium identification information storage unit that stores medium identification information based on unique information of the connected recording medium, and the data management unit stores the data described above. When reading from the recording medium or storing it in the recording medium, the medium identification information of the target recording medium is stored by checking whether it is stored in the terminal-side medium identification information storage unit. If it is determined that the data is encrypted, the data is encrypted and stored, or the data is read and decrypted.

According to this configuration, the data management unit encrypts the data and the recording medium only when the medium identification information of the target recording medium is stored in the terminal-side medium identification information storage unit. In addition, data is read from the recording medium and decoded. Therefore, data is read by storing (registering) the medium identification information of the recording medium connected to the terminal device (used by the terminal device) in advance in the terminal-side medium identification information storage unit. It is possible to manage and restrict the recording media to be read or written, and to prevent important information from being taken out to the outside or unnecessary data from being brought in, thereby improving security.

[0016] Further, the recording medium stores encrypted data in the first folder, and decrypted data is stored in the second folder. The data management unit is externally input. Is When a signal for decrypting the specific encrypted data in the first folder is received, the encrypted data corresponding to the received signal is decrypted to generate new data, and the generated decryption is performed. It may be configured to further perform a decryption data generation process for storing digital data in the second folder.

[0017] With this configuration, when a signal for decrypting specific encrypted data in the first folder, which is input by an external force, is received by the data management unit, it corresponds to the received signal. The encrypted data is decrypted to generate new data, and the generated decrypted data (decrypted data) is stored in the second folder. Then, the user performs editing work on the terminal device other than the terminal device by using the decryption key data in the second folder, or the same as the encrypted data to other users who use the terminal device other than the terminal device. Content data can be provided.

[0018] Therefore, it is convenient when the user takes out the encrypted data to the outside. In addition, since the generated decrypted data is stored in the second folder, it is possible to easily determine whether the data is encrypted or not. In addition, since the decrypted data is not generated unless the user performs a specific operation, the terminal device or the recording medium is transferred to a third party, or the data in the recording medium flows out to the outside. Even if there is nothing wrong, information leakage can be minimized.

Further, the data management unit encrypts and decrypts the data using terminal identification information based on unique information (for example, a CPU number, a hard disk number, etc.) of the terminal device as a key. It may be configured to perform. In this way, since the terminal identification information differs for each terminal device, data editing (data encryption and decryption) cannot be performed except for the terminal device, and the data stored in the recording medium cannot be edited. Protection can be tightened.

[0020] The present invention also provides:

A data management system in which a plurality of the terminal devices and a management server that manages each terminal device are connected via an electric communication line,

The management server

User identification information set for each user to identify the user, and the terminal device Terminal identification information based on device specific information, and stored in association with terminal identification information related to at least one terminal device used by the user

When the user identification information and the terminal identification information transmitted from the terminal device are received, the received user identification information and the terminal identification information are stored in the user information storage unit.

An authentication processing unit that confirms whether or not the V is valid and transmits an execution permission signal to the terminal device when it is determined that the device is stored.

The data management unit of the terminal device

A process for confirming whether or not the encryption / decryption process is executed, accepting the user identification information input from the outside, and generating the terminal identification information of the terminal device; The received user identification information and the generated terminal identification information are transmitted to the management server, and the confirmation process for receiving the execution permission signal transmitted from the management sano is performed periodically or irregularly. The present invention relates to a data management system configured to execute the encryption / decryption process until the next confirmation process is performed when an execution permission signal is received.

[0021] According to this data management system, user identification information set for each user in the user information storage unit for identifying the user, and at least used by the user

It is stored (registered) in advance in association with the terminal identification information of one terminal device.

[0022] Then, in the terminal device, the confirmation process is executed by the data management unit periodically or irregularly (for example, when the terminal device is activated or when a predetermined time comes). Specifically, the data management unit first receives user identification information input from an external force, generates terminal identification information of the terminal device, and manages the received user identification information and the generated terminal identification information. Send to server.

[0023] The user identification information and the terminal identification information transmitted from the terminal device are received by the authentication processing unit, and the authentication processing unit that receives them receives the received user identification information and the terminal identification information from the user information storage unit. If it is determined that it is stored, the execution permission signal is transmitted to the terminal device.

The execution permission signal transmitted from the management server is received by the data management unit, The data management unit that has received the encryption / decryption process until the next confirmation process is performed.

[0025] Thus, according to the data management system of the present invention, the data management unit performs the confirmation process periodically or irregularly, so that the user who uses the terminal device satisfies the use conditions. Therefore, it is possible to more reliably prevent information leakage by managing access to data stored in the recording medium by the management server. In addition, since authentication is performed based on different terminal identification information for each terminal device including only user identification information, unauthorized use of the terminal device can be prevented more reliably, and the data stored in the recording medium can be prevented. Safety can be further enhanced.

[0026] The management server further includes a server-side medium identification information storage unit that stores medium identification information of a recording medium connected to each terminal device, and the authentication processing unit receives the execution permission signal. In transmitting to the terminal device, the medium identification information stored in the server-side medium identification information storage unit is configured to be transmitted together with the execution permission signal, and the data management unit is configured to transmit the execution permission signal from the management server. When the medium identification information is received, the received medium identification information may be stored in the terminal-side medium identification information storage unit.

[0027] With this configuration, the medium identification information of the recording medium connected to each terminal device or connected in advance to each terminal device is stored (registered) in the server-side medium identification information storage unit in advance. The medium identification information stored in the server-side medium identification information storage unit is transmitted to the terminal device together with the execution permission signal by the authentication processing unit. Then, the transmitted medium identification information is received by the data management unit and stored in the terminal-side medium identification information storage unit. Therefore, the management server can manage and restrict the recording medium from which data is read or written, thereby increasing the security of the data management system.

[0028] Further, the data management unit may be configured to erase the decrypted data in the second folder when the confirmation process is executed. In this way, the data in the second folder can be automatically (forcedly) deleted to prevent information leakage more reliably.

[0029] Further, in the user information storage unit, other than the confirmation processing in the terminal device Permission information regarding whether to permit execution of the process (encryption 'decryption process or decryption data generation process) is further stored in association with the user identification information, and the authentication processing unit When the user identification information and the terminal identification information are received from the device, the user identification information and the terminal identification information are obtained by referring to the data stored in the user information storage unit based on the received user identification information and the terminal identification information. And confirming whether or not the permission information associated with the received user identification information permits the execution of processes other than the confirmation process. Identification information and terminal identification information are stored, and execution of processes other than the confirmation process is permitted! The management server is configured to transmit the execution permission signal to the terminal device when it is determined that the device is to be called, and the management server is configured to transmit the permission information associated with user identification information relating to a specific user, which is input from an external force. It may further comprise a user information update unit that receives update information for changing or updating the information and updates the permission information stored in the user information storage unit based on the received update information.

[0030] According to this configuration, the authentication processing unit confirms whether the user identification information received from the terminal device and the terminal identification information are stored in the user information storage unit, and the user It is confirmed whether or not the permission information associated with the identification information permits execution of processes other than the confirmation process, the user identification information and the terminal identification information are stored, and the execution of processes other than the confirmation process is permitted. The execution permission signal is transmitted to the terminal device only when it is received.

[0031] Further, when update information for changing or updating permission information associated with user identification information related to a specific user, which is input from the outside, is received by the user information update unit, the received update information is displayed. Based on this, the permission information stored in the user information storage unit is updated, and the permission information is changed from one that permits the execution of processes other than the confirmation process to one that is not permitted. The power that does not allow execution is changed to something that allows it.

Accordingly, for example, the user of the terminal device or the creator of the data stored in the recording medium. The update information is managed by operating the terminal device as appropriate, such as another terminal device or a mobile phone terminal capable of data communication. Tubes that have been sent to or contacted by the user or creator The operator of the management server inputs update information to the management server and updates the update information for the specific user by the user information update unit, thereby executing processing other than the confirmation processing in the terminal device for the specific user. Can be permitted or not permitted, and the data in the recording medium can be managed more flexibly. Specifically, for example, if the permission information is changed to prohibit the execution of processes other than the confirmation process when the terminal device or recording medium is in the hands of a third party, Data can be effectively prevented from being viewed, altered or copied by a third party.

[0033] In addition, the authentication processing unit is configured to transmit a key used in the encryption / decryption processing together with the execution permission signal when transmitting the execution permission signal to the terminal device, When the data management unit receives the execution permission signal and key from the management server, the data management unit may be configured to perform encryption and decryption of the data using the received key.

[0034] According to this configuration, since the data management unit performs data encryption / decryption using the key transmitted from the management server, it is not managed by the management server (the management server). The terminal device cannot be encrypted or decrypted because it is connected to the server, and the leakage of information related to the data stored in the recording medium can be more effectively prevented. In addition, the terminal devices managed by the management server can share the key and access data in the recording medium with any terminal device power.

[0035] Further, the data management unit is configured to encrypt and decrypt the data using the key received from the management server and the unique data identification information set for each data as a key. May be. In this way, the same effects as described above can be obtained, and the data stored in the recording medium can be more securely protected.

[0036] Further, when transmitting the execution permission signal to the terminal device, the authentication processing unit transmits the user identification information and the terminal identification information stored in the user information storage unit together with the execution permission signal. The terminal device further includes a key information storage unit that stores user identification information and terminal identification information transmitted from the management server, and the data management unit receives the execution permission signal, the user from the management server, Identification information When the terminal identification information is received, the received user identification information and terminal identification information are associated and stored in the key information storage unit, and when the data is encrypted and stored, the terminal of the terminal device is stored. The identification information is encrypted as an encryption key, and the encrypted data is stored including the user identification information of the user who uses the terminal device, while the data stored in the recording medium is read and decrypted. Recognizes the terminal identification information associated with the user identification information and stored in the key information storage unit based on the user identification information included in the data, and uses the recognized terminal identification information as a decryption key. It may be configured to decrypt.

According to this configuration, when the execution permission signal is transmitted to the terminal device by the authentication processing unit, the user identification information and the terminal identification information stored in the user information storage unit are also transmitted and transmitted. The user identification information and the terminal identification information received by the data management unit are stored in the key information storage unit in association with each other.

In the encryption / decryption process, when data is encrypted and stored, the data management unit encrypts the terminal identification information of the terminal device as an encryption key and stores the encrypted data in the encrypted data. The user identification information of the user who uses the terminal device is included and stored. On the other hand, when the data stored in the recording medium is read and decrypted, the terminal identification information stored in the key information storage unit is associated with the user identification information based on the user identification information included in the data. And decrypt the data using the recognized terminal identification information as the decryption key.

[0039] In this way, data is encrypted using the terminal identification information of the terminal device used by the user, and encrypted using the user identification information and terminal identification information (key information) transmitted from the management server. By decrypting the data, as described above, the data managed by the management server (connected to the management server! It is possible to prevent the leakage of information related to the data stored in the recording medium. Similarly to the above, it is possible to share the key between the terminal devices managed by the management server so that the data in the recording medium can be accessed by any terminal device.

[0040] Further, the management server generates log information for the processing in the authentication processing unit. A server-side log information generation unit, and a log information storage unit that stores the log information generated by the server-side log information generation unit, or the terminal device performs processing in the data management unit. And a terminal-side log information generating unit that generates the log information and transmits the generated log information to the management server, wherein the management server stores the log information; A log information receiving unit that receives the log information transmitted from the terminal-side log information generation unit and stores the received log information in the log information storage unit may be further provided.

[0041] By doing this, by analyzing the log information stored in the log information storage unit of the management server, for example, when the terminal device performed the confirmation processing, when the decrypted data generation processing was performed This can be used to understand what data was decrypted and what information might be leaked.

[0042] Examples of the recording medium include a non-portable built-in hard disk, a portable USB memory, a memory card, FD, MO, CD, DVD, and an external hard disk. The force that can be used is not limited to these. In addition, the built-in hard disk includes those provided in the file server in addition to those provided in the terminal device itself.

The invention's effect

[0043] As described above, according to the terminal device of the present invention, the encrypted data is automatically decrypted, and the edited data is automatically encrypted. And encryption can be performed easily and without complicated operations. Further, since the data in the recording medium is encrypted, it is possible to prevent information related to the data from leaking. In addition, according to the data management system of the present invention, the user who uses the terminal device appropriately checks whether or not the usage conditions are satisfied, and therefore, the access to the data stored in the recording medium is possible. Information leakage can be prevented more reliably. In addition, since authentication is performed based on user identification information and terminal identification information! /, Unauthorized use of the terminal device can be prevented more reliably, and the safety of the data stored in the recording medium can be further improved. be able to.

Brief Description of Drawings FIG. 1 is a block diagram showing a schematic configuration of a data management system according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a schematic configuration of a management server of the present embodiment.

FIG. 3 is a block diagram showing a schematic configuration of a terminal device according to the present embodiment.

FIG. 4 is a data table showing data stored in the user information storage unit of the present embodiment.

FIG. 5 is an explanatory diagram for explaining data stored in the recording medium of the present embodiment.

FIG. 6 is a flowchart showing a series of processes in the encryption / decryption process of the present embodiment.

FIG. 7 is a flowchart for explaining confirmation processing and the like in the present embodiment.

FIG. 8 is a flowchart for explaining confirmation processing and the like in the present embodiment.

FIG. 9 is a block diagram showing a schematic configuration of a terminal apparatus according to another embodiment of the present invention.

FIG. 10 is a flowchart showing a series of processing in encryption / decryption processing according to another embodiment of the present invention.

Explanation of symbols

1 Data management system

5 Internet

6 Terminal equipment

7 Management server

8 File server

11 User information storage

12 User information registration department

13 User information update section

14 Media information storage

15 Media Information Registration Department

16 Authentication processing part

17 Log information generator

18 Log information reception 19 Log information storage

21 Data storage

24 Editing processing section

25 Media information storage

26 Data input / output section

27 Data Management Department

28 Log information generator

23, 33 Drive device

8a, 22, 31, 32 Recording media

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, specific embodiments of the present invention will be described with reference to the accompanying drawings. FIG. 1 is a block diagram showing a schematic configuration of a data management system according to an embodiment of the present invention. FIG. 2 is a block diagram showing a schematic configuration of a management server according to the embodiment. FIG. 3 is a block diagram showing a schematic configuration of the terminal device according to the present embodiment.

As shown in FIGS. 1 to 3, the data management system 1 of this example includes a plurality of terminal devices 6, a management server 7 that manages each terminal device 6, and a file server 8 that stores data. And are connected to each other via the Internet 5.

As shown in FIG. 2, the management server 7 includes a user information storage unit 11, a user information registration unit 12, a user information update unit 13, a medium information storage unit 14, a medium information registration unit 15, an authentication processing unit 16. , A log information generation unit 17, a log information reception unit 18, a log information storage unit 19, a communication interface 20, and the like, and is connected to the Internet 5 through the communication interface 20.

[0049] In the user information storage unit 11, a user ID and password (user identification information) that are set for each user and identify the user, and unique information of the terminal device 6 (for example, the CPU number and the number) Terminal ID (terminal identification information) based on at least one terminal device 6 used by the user, and encryption / decryption processing and decryption in the terminal device 6 It is stored in association with permission information regarding whether or not it is permitted to execute the key data generation process (see FIG. 4). [0050] The user information registration unit 12 stores (registers) the user ID, password, terminal ID, and permission information in the user information storage unit 11. Specifically, for example, it communicates with each terminal device 6 connected to the management server 7, receives the user ID, password and terminal ID from each terminal device 6, and receives the received user ID, password and terminal. The ID and the permission information are stored in the user information storage unit 11.

Note that the permission information is initially set to execute permission. Further, the user information registration unit 12 transmits a community ID set in advance for the management server 7 to each terminal device 6 when communicating with each terminal device 6. When registering a user ID or the like, the operator of the management server 7 may input the registration information to the user information storage unit 11 via the user information registration unit 12.

[0052] The user information update unit 13 receives update information for changing or updating the permission information associated with a user ID related to a specific user, which is input from the outside, and based on the received update information. In addition, the permission information stored in the user information storage unit 11 is updated.

[0053] The medium information storage unit 14 includes a recording medium 22 connected to each terminal device 6, recording media 31, 32 connected to each terminal device 6, and a recording medium provided in the file server 8. 8a, that is, a medium ID (medium identification information) based on the unique information of all the recording media 8a, 22, 31, 32 used by each terminal device 6 is stored.

The medium information registration unit 15 performs a process of storing (registering) the medium ID in the medium information storage unit 14. Specifically, for example, it communicates with each terminal device 6 or a specific terminal device 6, receives the medium ID of the recording medium 8a, 22, 31, 32 from the terminal device 6, and uses the received medium ID as the medium. Store in the information storage unit 14. When registering the medium ID, the operator of the management server 7 may input the medium ID into the medium information storage unit 14 via the medium information registration unit 15. In addition, the recording medium 8a of the file server 8 is registered by receiving the medium ID from the specific terminal device 6 and communicating between the management server 7 and the file server 8. You may do it.

[0055] The authentication processing unit 16 receives the user ID, password, community ID, and terminal ID transmitted from the terminal device 6, and the received user ID, password, and terminal ID are the user. The process of confirming whether or not it is stored in the information storage unit 11 and whether or not the received community ID matches the community ID set in advance for the management server 7 is confirmed. A process for confirming whether the permission information associated with the received user ID is permitted to execute the encryption / decryption process and the decryption data generation process, and the received user ID, If it is determined that the received community ID matches and the execution of the encryption / decryption process and the decrypted data generation process is permitted, the execution permission signal and the medium information are stored. Processing to transmit the medium ID stored in the storage unit 14 to the terminal device 6 is performed.

[0056] The log information generation unit 17 generates log information related to the processing in the authentication processing unit 16, stores the generated log information in the log information storage unit 19, and the log information reception unit 18 The log information transmitted from the terminal device 6 is received, and the received log information is stored in the log information storage unit 19.

As shown in FIG. 1, the file server 8 includes a recording medium 8a such as a magnetic disk, for example, and is configured to store data in the recording medium 8a. This recording medium 8a is, for example, data relating to a document, sound, image, computer program, etc., and is unique to the community ID and set by the operating system of the terminal device 6 at the time of data generation, for example. Data encrypted using the data ID (data identification information) as an encryption key is stored.

As shown in FIG. 3, the terminal device 6 includes a data storage unit 21, an edit processing unit 24, a medium information storage unit 25, a data input / output unit 26, a data management unit 27, a log information generation unit 28, A communication interface 29 and an input / output interface 30 are provided, and the communication interface 29 is connected to the Internet 5.

The data storage unit 21 includes, for example, a recording medium 22 such as a magnetic disk, and a drive device 23 that reads / writes data from / to the recording medium 22. The recording medium 22 has an area for storing encrypted data (encrypted data) and an area for storing decrypted data (decrypted data). As shown, the encryption key data is classified and stored in the encryption key data folder (first folder), and the decrypted data is classified in the decryption data folder (second folder). The encrypted data folder 2 In la, as with the recording medium 8a, for example, data relating to documents, sounds, images, computer programs, etc., and data encrypted using the community ID and data ID as an encryption key are stored. Is done.

Note that data is stored in the encrypted data folder 21a as follows, for example. That is, when a program for causing the terminal device 6 to function as the data storage unit 21 and the data management unit 27 is installed, the encrypted data folder 21a and the decrypted data folder 21b are generated and the recording medium 22 The data (encrypted, unencrypted) stored in is encrypted and encrypted, and the data is replaced with the encrypted data, and the replaced data (encrypted Data) is stored in the encryption key data folder 21a. In addition, when encrypting data, it is possible to encrypt only the designated data.

[0061] The input / output interface 30 is configured to be connectable with recording media 31, 32 such as a USB memory, a memory card, FD, MO, CD, DVD, and an external hard disk. The recording medium 31 is directly connected to the input / output interface 30, and the recording medium 32 is connected to this via an appropriate drive device 33 for reading and writing data. The recording media 31 and 32 are similar to the recording media 8a and 22, for example, data relating to documents, sounds, images, computer programs, etc., and the community ID and data ID are stored in the recording media 31 and 32, respectively. The encrypted data is stored as the encryption key.

[0062] The edit processing unit 24 is provided in the recording medium 22 connected to the terminal device 6, the recording media 31, 32 connected to the terminal device 6, and the file server 8 according to various application programs. Thus, the data stored in the recording medium 8a is edited. Specifically, a read process for reading data from the recording media 8a, 22, 31, and 32 through an read command of the operating system, an edit process for editing the read data, and the edited data are written to the operating system. And write processing to write to the recording media 8a, 22, 31, 3 2 through the embedded command. For the recording media 22 and 32, data is read and written by the drive devices 23 and 33.

[0063] The medium information storage unit 25 stores a medium ID transmitted from the management server 7.

[0064] The data input / output unit 26 receives data input from the outside and receives the recording medium 8a, 22, 31, 32 [Inside the storage thread or recording media 8a, 22, 31, 32 [Outside output of the data stored in this storage thread (for example, to other terminal devices 6 via the Internet 5) Send or copy to a recording medium as appropriate).

The data management unit 27 executes three processes described below, that is, an encryption / decryption process, a decrypted data generation process, and a confirmation process.

[0066] In the encryption 'decryption process, the process in the editing processing unit 24 is monitored, and when the editing processing unit 24 executes the reading process, it reads out instead of the editing processing unit 24. Data to be read from the recording media 8a, 22, 31, 32, and the read data is decrypted and provided to the editing processing unit 24, while the editing processing unit 24 executes the writing process. Instead of the editing processing unit 24, the edited data is encrypted and stored in the recording media 8a, 22, 31, 32. In addition, when the encrypted data is read or the data after editing is encrypted and stored, the medium ID of the target recording medium 8a, 22, 31, 32 is stored in the medium information storage unit 25. If it is determined whether or not it is stored, the encrypted data is read or the edited data is encrypted and stored.

Specifically, as shown in FIG. 6, first, by monitoring the processing in the editing processing unit 24, it is confirmed whether or not the editing processing unit 24 executes the reading process or the writing process ( Step Sl). This can be determined, for example, by the force that hooks the read or write command of the operating system.

[0068] When the editing processing unit 24 determines in step S1 to execute the reading process or the writing process, the medium ID of the recording medium 8a, 22, 31, 32 to be read or written is set. Recognize (step S2) and confirm whether or not the recognized medium ID is stored in the medium information storage unit 25 (step S3).

[0069] When it is determined that the data is stored in step S3, it is confirmed whether the editing processing unit 24 executes the reading process or the writing process (step S4). For example, it is possible to grasp which process is executed by confirming which one of the read instruction and the write instruction of the operating system is hooked in step S1.

[0070] If it is determined in step S4 that read processing is to be executed, the community ID and the read After recognizing the data ID of the encrypted data to be extracted as key information (step S5), the encrypted data to be read is read from the recording media 8a, 22, 31, 32, and the read encrypted data is The recognized community ID and data ID are written into the temporary file while being decrypted as a decryption key (step S6). The edit processing unit 24 refers to the data written in the temporary file and enables the edit processing.

[0071] On the other hand, if it is determined in step S4 that the writing process is to be executed, the community ID and the data ID of the edited data to be written are recognized as key information (step S7) and then recognized. The edited data is encrypted using the community ID and data ID as encryption keys and stored in recording media 8a, 22, 31, 32.

[0072] If it is determined that it is stored in step S3, an error message is displayed on the display of the terminal device 6 (step S9).

[0073] In the decrypted data generation process, an externally input signal for decrypting specific encrypted data in the encrypted data folder 21a is received, and an encryption corresponding to the received signal is received. The decrypted data is decrypted to generate new data, and the generated decrypted data is stored in the decrypted data folder 2 lb.

[0074] In the confirmation process, it is necessary to confirm whether or not the encryption 'decryption process is executed and whether or not it is possible to execute the decryption data generation process. The ID and terminal ID are transmitted to the management server 7, the execution permission signal and the medium ID transmitted from the management server 7 are received, and the received medium ID is stored in the medium information storage unit 25.

[0075] Further, the data management unit 27 is configured to perform the confirmation processing periodically or irregularly (for example, when the terminal device 6 is activated or when a predetermined time comes), and the execution is performed. When the permission signal and the medium ID are received from the management server 7, the encryption / decryption process is executed and the decryption data generation process is made executable.

[0076] The log information generation unit 28 generates and generates log information related to processing in the data management unit 27 (for example, decrypted data generation processing and confirmation processing) and processing in the data input / output unit 26. Processing to send log information to the management server 7 is performed.

[0077] According to the data management system 1 of the present example configured as described above, each terminal device 6 Then, the user who uses each of them appropriately edits the data stored in the recording media 8a, 22, 31, 32 (for the recording media 22, the encrypted data folder 21a). At this time, when the data management unit 27 that monitors the processing in the editing processing unit 24 recognizes that the reading processing is executed by the editing processing unit 24, first, the recording medium 8a, 22, 31, to be read is read. If it is determined whether or not 32 medium IDs are stored in the medium information storage unit 25 and it is determined that they are stored, the encrypted data to be read is stored in the recording medium instead of the editing processing unit 24. 8a, 22, 31 and 32 are read, and the read data is decrypted and provided to the editing processing unit 24. On the other hand, when the data management unit 27 recognizes that the writing processing is executed by the editing processing unit 24, first, the medium ID of the recording medium 8a, 22, 31, 32 to be written is stored in the medium information storage unit. If it is determined whether the data is stored in the storage medium 25 and if it is determined that the data is stored, the edited data is encrypted instead of the editing processing unit 24 and the recording medium 8a, 22, 31, 32 To store. Data decryption and encryption are performed using the community ID and data ID as keys.

In this manner, the data read by the editing processing unit 24 is decrypted by the encryption / decryption processing of the data management unit 27, and the data written by the editing processing unit 24 is encrypted. The As a result, the user can perform data encryption and decryption without any special operation.

[0079] Further, when a user takes in new data from the outside and stores it in the recording media 8a, 22, 31, 32, for example, new data input to the external power terminal device 6 is input / output. The data is received by the unit 26 and stored in the recording media 8a, 22, 31, 32 (for the recording medium 22, the encrypted data folder 21a).

[0080] Further, for example, the user transmits data stored in the encrypted data folder 21a of the recording medium 22 to a terminal device (not shown) other than the terminal device 6 connected to the management server 7. In this case, a signal for decrypting specific encrypted data in the encrypted data folder 21a input to the external terminal device 6 is received by the data management unit 27, and the received signal is received. The encrypted data corresponding to is decrypted to generate new data, and the generated decrypted data is stored in the decrypted data folder 2 lb. Then, the data decoded in this way is transmitted by the data input / output unit 26 to the terminal device (FIG. (Not shown). Since the receiver of the data has received the decrypted data, the information related to the data can be recognized without any inconvenience. In addition, the user can copy the data stored in the recording media 8a, 22, 31, 32 to the other recording media 8a, 22, 31, 32 or other terminals under the control of the data input / output unit 26. Can be sent to device 6.

[0081] Further, the data management unit 27 executes the confirmation process regularly or irregularly, and manages the execution of the encryption and decryption processes. Specifically, a series of processes as shown in FIGS. 7 and 8 are executed.

That is, first, a user ID and password input screen is displayed on the display of the terminal device 6 (step Sl 1). Thereafter, the user ID and password input to the terminal device 6 by the user are accepted, the community ID set in advance for the management server 7 to which the terminal device 6 is connected is recognized, and the terminal ID of the terminal device 6 is recognized. Is generated, and the received user ID and password, recognized community ID, and generated terminal ID are transmitted to the management server 7 (step S12).

[0083] The transmitted user ID, password, community ID, and terminal ID are received by the authentication processing unit 16 of the management server 7 (step S13), and the received user ID, password, and terminal ID are stored in the user information storage unit 11 And whether the received community ID matches the community ID set in advance for the management server 7 or not is checked (step S 14).

[0084] If it is determined in step S14 that the user ID, password, and terminal ID are stored and the community ID is correct, then the user information storage unit 11 is associated with the user ID. Confirm whether or not the permission information (permission information for the user associated with the user ID) stored in the field permits the execution of encryption / decryption data processing and decryption data generation processing (Step S15).

If it is determined in step S 15 that execution of the encryption / decryption process and the decrypted data generation process is permitted, the execution permission signal and the medium stored in the medium information storage unit 14 The ID is transmitted to the terminal device 6 (step S16).

[0086] On the other hand, in step S14, it is determined that the user ID, password, and terminal ID are stored. Or if it is determined that the community ID is not correct, and it is determined in step S15 that the execution of the encryption / decryption process and the decrypted data generation process is permitted. In this case, an error signal is generated and transmitted to the terminal device 6 (step S17).

[0087] The execution permission signal and medium ID transmitted in step S16 or the error signal transmitted in step S17 is received by the data management unit 27 of the terminal device 6 (step S18), and the execution permission signal and medium ID are received. Alternatively, it is confirmed which of the error signals has been received (step S19).

[0088] If it is determined in step S19 that the execution permission signal and the medium ID have been received, the received medium ID is stored in the medium information storage unit 25 (step S20), and then the decryption data folder The data in 21b is erased (step S21) .After that, the encryption / decryption process is executed, and the decrypted data generation process is enabled (step S22). The process ends.

On the other hand, if it is determined in step S19 that an error signal has been received, the data in the decryption data folder 21b is erased (step S23), and the series of processing ends. In this case, since the encryption / decryption process has not been executed, when the edit processing unit 24 reads the encrypted data stored in the recording media 8a, 22, 31, 32, the encrypted data Is not decrypted and the user cannot edit the data.

[0090] It should be noted that at the time of communication between the terminal device 6 and the management server 7, information transmitted from the terminal device 6 to the management server 7 and information transmitted from the management server 7 to the terminal device 6 are Encrypted and decrypted by the terminal ID of the terminal device 6.

In addition, the log information generation unit 28 of the terminal device 6 generates and generates log information related to the decryption data generation processing and confirmation processing in the data management unit 27 and the processing in the data input / output unit 26 The log information is transmitted to the management server 7, and the transmitted log information is received by the log information receiving unit 18 of the management server 7 and stored in the log information storage unit 19. Further, the log information generation unit 17 of the management server 7 generates log information related to the processing in the authentication processing unit 16, and the generated log information is stored in the log information storage unit 19. Thus, according to the data management system 1 of the present example, the editing processing unit 24 reads data from the recording media 8a, 2 2, 31, 32, and writes data to the recording media 8a, 22, 31, 32. At this time, since the encrypted data is automatically decrypted by the data management unit 27 and the edited data is automatically encrypted, it is easy and troublesome to decrypt and encrypt the data. This can be done without any troublesome operations. In addition, since the data in the recording media 8a, 22, 31, 32 is encrypted, the data leaks to the outside or the recording media 8a, 22, 31, 31, 32 are in the hands of third parties. Even if it is passed, the contents of the data cannot be recognized by a third party, and the information related to the data will not leak to the outside.

[0093] In addition, since the data management unit 27 performs the confirmation process regularly or irregularly, it is possible to confirm whether or not the user using the terminal device 6 satisfies the usage conditions. Access to the data stored in the recording media 8a, 22, 31, 32 can be managed by the management server 7 to prevent information leakage more reliably. In addition, since authentication is performed based on a different terminal ID for each terminal device 6 that includes only the user ID and password, unauthorized use of the terminal device 6 can be prevented more reliably, and the recording media 8a, 22, The safety of the data stored in 31 and 32 can be further increased.

[0094] In addition, only when the medium IDs of the target recording media 8a, 22, 31, 32 are stored in the medium identification information storage unit 25, the data management unit 27 stores the data in the recording media 8a, 22, 31 and 32, and stored in recording media 8a, 22, 31, and 32. Therefore, it is possible to manage and restrict the recording media 8a, 22, 31, and 32 for reading and writing data. Security can be improved by preventing information from being taken outside and unnecessary data from being brought in.

In addition, since the permission information stored in the user information storage unit 11 can be updated by the user information update unit 13, for example, the user of the terminal device 6 and the recording media 8a, 22, 3 1, The creator of the data stored in 32 sends the update information to the management server 7 by operating the terminal device as appropriate, such as another terminal device 6 or a mobile phone terminal capable of data communication. When the operator of the management server 7 that received the notification inputs the update information to the management server 7, the user information update unit 13 updates the update information for the specific user, and the terminal device for the specific user Other than the confirmation process in 6 The execution of this process can be permitted or not permitted, and the data in the recording media 8a, 22, 31, 32 can be managed more flexibly. Therefore, for example, if the terminal device 6 or the recording media 8a, 22, 31, 32 is in the hands of a third party, the permission information is changed to prohibit the execution of processes other than the confirmation process. It is possible to effectively prevent the data in the recording media 8a, 22, 31, 32 from being viewed, altered or copied by a third party.

[0096] Further, since the data management unit 27 performs encryption and decryption using the community ID transmitted from the management server 7 and the data ID of the data to be read or written as keys, The terminal device 6 that is not managed by the management server 7 (when connected to the management server 7) cannot perform data encryption / decryption, and the recording media 8a, 22, 31 , 32 can be more effectively prevented from leaking information stored in it. In addition, the terminal device 6 managed by the management server 7 can share the key (community ID) and access the data in the recording media 8a, 22, 31, 32 from any terminal device 6. .

Further, since the decrypted data can be generated by the decrypted data generation process of the data management unit 27, it is convenient when the user takes out the encrypted data to the outside. Also, since the encryption key data is stored in the encryption key data folder 21a and the decryption key data is stored in the decryption key data folder 21b, the encrypted data power and the decrypted data are stored. Can be easily determined. Further, since the decrypted data is not generated unless the user performs a specific operation, the terminal device 6 and the recording media 8a, 22, 31, 32 are transferred to a third party, or the recording media 8a, 22, Even if the data in 31 and 32 is leaked to the outside, the leakage of information can be minimized.

[0098] In addition, since the data management unit 27 automatically (forcibly) erases the decrypted data in the decrypted data folder 21b when the confirmation process is executed, this also causes the information to be stored. Outflow can be prevented more reliably.

[0099] Further, since the log information related to the processing in the authentication processing unit 16, the data management unit 27, and the data input / output unit 26 is configured to be stored in the log information storage unit 19, it is stored in the log information storage unit 19. By analyzing the recorded log information, for example, when the terminal device 6 This can be used to understand when the decryption data generation process was performed, what data was decrypted, what information might have been leaked, and so on.

[0100] Although one embodiment of the present invention has been described above, specific embodiments that the present invention can take are not limited to this.

[0101] In the above example, the community ID and the data ID are used as keys for encryption and decryption. good.

[0102] In this case, as shown in FIG. 9, the terminal device 6 further includes a key information storage unit 34. The key information storage unit 34 stores key information transmitted from the management server 7. The user ID and the terminal ID are stored in association with each other.

[0103] Further, in step S16, the authentication processing unit 16 is configured to transmit the user ID and terminal ID stored in the user information storage unit 11 to the terminal device 6 as key information, and the data management The unit 27 is configured to store the user ID and the terminal ID received from the management server 7 in the key information storage unit 34 in association with each other in step S20.

Then, the data management unit 27 performs a series of processes as shown in FIG. 10 to execute an encryption / decryption process. That is, first, by monitoring the process in the edit processing unit 24, it is confirmed whether or not the edit processing unit 24 executes the reading process or the writing process (step S31). The medium ID of the recording medium 8a, 22, 31, 32 to be read or written is recognized (step S32), and whether or not the recognized medium ID is stored in the medium information storage unit 25 is checked. Confirm (step S33).

[0105] If it is determined that the data is stored in step S33, the editing processing unit 24 checks whether the reading process or the writing process is executed (step S34), and determines that the reading process is executed. In this case, after the encrypted data to be read is read from the recording media 8a, 22, 31, 32 (step S35), the user ID incorporated in the head portion of the read data is recognized and recognized. Based on the user ID, the terminal ID associated with the user ID and stored in the key information storage unit 34 is recognized, and further the community ID is recognized ( In step S36), the read data is decrypted and written to a temporary file using the recognized terminal ID and community ID as a decryption key (step S37). The editing processing unit 24 refers to the data written in the temporary file and enables the editing process.

On the other hand, if it is determined in step S34 that the writing process is to be executed, the terminal ID and community ID of the terminal device 6 are recognized, and the user ID of the user who uses the terminal device 6 is recognized. (Step S38), the edited data is encrypted using the recognized terminal ID and community ID as an encryption key, and the recognized user ID is incorporated into the header portion of the data to record media 8a, 22 , 31, 32 (Step S39

) o

[0107] If it is determined that it is stored in step S33, an error message is displayed on the display of the terminal device 6 (step S40).

[0108] Even in this way, similarly to the above, it is possible to prevent the terminal device 6 that is not managed by the management server 7 from performing encryption or decryption of the data, and the recording media 8a, 22, It is possible to more effectively prevent the leakage of information related to the data stored in 31 and 32. Similarly to the above, the terminal device 6 managed by the management server 7 can share the key so that the data in the recording media 8a, 22, 31, 32 can be accessed from any terminal device 6. it can.

[0109] In the above example, the data management unit 27 recognizes the medium ID of the recording medium 8a, 22, 31, 32 to be read or written in step S2 or step S32, and performs step S3 or step S32. In S33, the power to confirm whether or not the recognized medium ID is stored in the medium information storage unit 25 is not limited to this, and these processes may be omitted.

[0110] Also, in the above example, only the community ID and data ID, or the power community ID using the community ID and terminal ID may be used as the keys for encryption and decryption. Only the terminal ID may be used.

[0111] Further, in order to enable the edit processing unit 24 to read the unencrypted data stored in the recording media 31 and 32, the management server 7 and the terminal device 6 may be configured as follows. . That is, when the authentication processing unit 16 of the management server 7 transmits the medium ID and the key information together with the execution permission signal in the above step 16, the recording medium that stores unencrypted data that is registered in advance as appropriate is stored. 31 and 32 medium IDs and a read-only key used when reading data stored in the recording media 31 and 32 are transmitted to the terminal device 6. On the other hand, the data management unit 27 of the terminal device 6 stores the recording medium 3 1, 32 storing the unencrypted data received from the management server 7 when storing the medium ID and key information in step S20. The read-only key used when reading the data stored in the recording medium 31 and 32 and the data stored in the recording media 31 and 32 is appropriately stored in the storage unit. In addition, when the data management unit 27 determines that the editing processing unit 24 executes the reading process or the writing process and recognizes the medium ID of the recording medium 31 or 32 to be read or written, the data ID However, if it is determined that it matches the medium ID of the recording media 31 and 32 in which the unencrypted data is stored, after the data to be read is read from the recording media 31 and 32, the read data is Write to temporary file while converting with read-only key. The read-only key is a key for converting data that has not been encrypted without being encrypted.

[0112] In addition, when the data management unit 27 receives a specific signal input from the outside during the confirmation process, the data management unit 27 does not perform communication (authentication) with the management server 7, and the input signal The encryption / decryption process may be executed and the decrypted data generation process may be executed for a time corresponding to This is convenient when the terminal device 6 is used offline.

[0113] In the confirmation process, the time when the data in the decryption key data folder 21b is deleted is not executed after the medium ID is stored or the error signal is received as in the above example. You can do it right after the start.

[0114] Further, in order to make it possible to more clearly distinguish the encryption key data and the decryption key data, the icons may be displayed differently for the encryption key data and the decryption key data.

[0115] Further, the terminal device 6 may be provided offline with the management server 7 that does not necessarily need to be managed by the management server 7. However, in this case, the user needs to update the data stored in the medium identification information storage unit 25 and the key information storage unit 34 as appropriate.

Industrial applicability As described above in detail, the present invention is capable of performing data encryption and decryption without bothering the user, and a terminal device that can more reliably prevent information leakage, and It is suitable as a data management system provided.

Claims

The scope of the claims

[1] A terminal device to which a recording medium for storing data is connected, the reading process for reading data stored in the recording medium, the editing process for editing the read data, and the edited data for the recording medium In a terminal device provided with an editing processing unit for performing a writing process to write to

When the processing in the editing processing unit is monitored and the editing processing unit executes the writing process, the edited data is encrypted and stored in the recording medium instead of the editing processing unit. When the editing processing unit executes the reading processing, instead of the editing processing unit, the encrypted data to be read is read from the recording medium, and the read data is decrypted and provided to the editing processing unit. Encryption 'Terminal device further comprising a data management unit for performing decryption processing.

[2] a terminal-side medium identification information storage unit that stores medium identification information based on the unique information of the connected recording medium;

When the data management unit reads the data from the recording medium or stores the data in the recording medium, whether the medium identification information of the target recording medium is stored in the terminal-side medium identification information storage unit. 2. The apparatus according to claim 1, wherein the data is encrypted and stored or the data is read and decrypted when it is determined that the data has been stored. Terminal equipment.

[3] In the recording medium, the encrypted data is stored in the first folder, and the decrypted data is stored in the second folder.

When the data management unit receives a signal for decrypting the specific encryption key data in the first folder, which is input from an external force, the data management unit decrypts the encryption key data corresponding to the received signal. 2. The terminal device according to claim 1, wherein the terminal device is configured to further perform a decoded data generation process of generating new data and storing the generated decoded key data in the second folder.

4. The data management unit is configured to perform encryption and decryption of the data using terminal identification information based on unique information of the terminal device as a key. The terminal device described.

[5] A data management system in which the plurality of terminal devices according to claim 1 and a management server that manages each terminal device are connected via an electric communication line,

The management server

User identification information set for each user and identifying the user, and terminal identification information based on the unique information of the terminal device, which relates to at least one terminal device used by the user User information stored in association with terminal identification information When user identification information and terminal identification information transmitted from the terminal device are received, the received user identification information and terminal identification information are stored in the user information storage unit.

The data management unit of the terminal device

A process for confirming whether or not the encryption / decryption process is executed, accepting the user identification information input from the outside, and generating the terminal identification information of the terminal device; The received user identification information and the generated terminal identification information are transmitted to the management server, and the confirmation process for receiving the execution permission signal transmitted from the management sano is performed periodically or irregularly. A data management system configured to execute the encryption / decryption process until the next confirmation process is performed when an execution permission signal is received.

[6] A data management system in which the plurality of terminal devices according to claim 2 and a management server that manages each terminal device are connected via an electric communication line,

The management server

User identification information set for each user and identifying the user, and terminal identification information based on the unique information of the terminal device, which relates to at least one terminal device used by the user User information stored in association with terminal identification information When user identification information and terminal identification information transmitted from the terminal device are received, the received user identification information and terminal identification information are stored in the user information storage unit. An authentication processing unit that confirms whether or not the message is stored, and transmits an execution permission signal to the terminal device when it is determined that it is stored.

The data management unit of the terminal device

[7] The management server further includes a server-side medium identification information storage unit that stores medium identification information of a recording medium connected to each terminal device,

The authentication processing unit is configured to transmit the medium identification information stored in the server-side medium identification information storage unit together with the execution permission signal when transmitting the execution permission signal to the terminal device. ,

The data management unit is configured to store the received medium identification information in the terminal-side medium identification information storage unit when receiving the execution permission signal and the medium identification information from the management server. The data management system according to claim 6.

[8] A data management system in which the plurality of terminal devices according to claim 3 and a management server that manages each terminal device are connected via an electric communication line,

The management server

User identification information set for each user and identifying the user, and terminal identification information based on the unique information of the terminal device, which relates to at least one terminal device used by the user User information stored in association with terminal identification information

The terminal device confirms whether or not V is valid and if it is determined that it is stored, an execution permission signal is sent to the terminal device. And an authentication processing unit to transmit to

The data management unit of the terminal device

A process for confirming whether or not to execute the encryption / decryption process and the decrypted data generation process, accepting the user identification information input from the outside, and determining the terminal identification information of the terminal device Generate and accept the received user identification information and the generated terminal identification information to the management server, and perform a confirmation process periodically or irregularly to receive the execution permission signal transmitted from the management server. When the execution permission signal is received in the confirmation process, the encryption / decryption process and the decoded data generation process are performed until the next confirmation process is performed. A data management system characterized by this.

9. The data management system according to claim 8, wherein the data management unit is configured to delete the decrypted data in the second folder when the confirmation process is executed.

[10] In the user information storage unit, permission information related to whether or not to allow execution of processing other than the confirmation processing in the terminal device is further stored in association with the user identification information,

When the authentication processing unit receives the user identification information and terminal identification information from the terminal device, the authentication processing unit refers to data stored in the user information storage unit based on the received user identification information and terminal identification information, Confirm whether the user identification information and the terminal identification information are stored, and whether the permission information associated with the received user identification information permits execution of processes other than the confirmation process. If the user identification information and the terminal identification information are stored and it is determined that execution of processing other than the confirmation processing is permitted, the execution permission signal is transmitted to the terminal device. Configured,

The management server receives update information for changing or updating the permission information associated with user identification information related to a specific user, which is input from the outside, and based on the received update information, the user information 10. The user information update unit for updating the permission information stored in the storage unit, further comprising: Data management system.

[11] The authentication processing unit is configured to transmit a key used in the encryption / decryption process together with the execution permission signal when transmitting the execution permission signal to the terminal device,

When the data management unit receives the execution permission signal and the key from the management server, the data management unit is configured to perform encryption and decryption of the data using the received key. The data management system according to any one of claims 5 to 9.

[12] The data management unit is configured to perform encryption and decryption of the data using a key received from the management server and unique data identification information set for each data as a key. The data management system according to claim 11, wherein

[13] When transmitting the execution permission signal to the terminal device, the authentication processing unit transmits the user identification information and the terminal identification information stored in the user information storage unit together with the execution permission signal. Configured,

The terminal device further includes a key information storage unit that stores user identification information and terminal identification information transmitted from the management server,

When the data management unit receives the execution permission signal, user identification information, and terminal identification information from the management server, the data management unit associates the received user identification information and terminal identification information with each other and stores them in the key information storage unit. When the data is encrypted and stored, the terminal identification information of the terminal device is encrypted as an encryption key, and the encrypted data is stored including the user identification information of the user who uses the terminal device. On the other hand, when the data stored in the recording medium is read and decrypted, it is stored in the key information storage unit in association with the user identification information based on the user identification information included in the data. 10. The terminal according to claim 5, wherein the terminal identification information is recognized, and the data is decrypted using the recognized terminal identification information as a decryption key. Kano data management systems.

[14] The management server generates a log information about processing in the authentication processing unit, a server-side log information generation unit,

Log information storage for storing log information generated by the server-side log information generation unit The data management system according to claim 5, further comprising a storage unit.

[15] The terminal device further includes a terminal-side log information generation unit that generates log information about processing in the data management unit, and transmits the generated log information to the management server. The management server includes the log server A log information storage unit for storing information;

6. A log information receiving unit that receives log information transmitted from the terminal-side log information generating unit and stores the received log information in the log information storage unit. The data management system according to any one of Items 9 to 9.

[16] The terminal device further includes a terminal-side log information generation unit that generates log information about processing in the data management unit, and transmits the generated log information to the management server, and the management server includes the terminal 15. The data management according to claim 14, further comprising a log information receiving unit that receives the log information transmitted from the side log information generation unit and stores the received log information in the log information storage unit. system.