JP3866519B2 - File management system - Google Patents

Description

  The present invention relates to a storage medium formatter and a storage medium file management system.

  Today, with the progress of the information society, it is increasingly important to be able to exchange information with each other. For mutual exchange of such information, data transfer through a network using a LAN or the like is frequently used nowadays. However, in some cases, there is a problem that it takes too much time to transmit a large amount of data via a network, and information exchange in the form of being recorded and transported on a floppy disk or the like is also actively used. In addition, when selling software products such as programs, it is often the case that a method of storing the product on a CD-ROM or the like and allowing the user to install it on his / her personal computer is employed. Recently, various software such as images, sounds, music, and movies have been distributed not only by programs that run on computers but also by MD, music CD, and DVD. Portable media, such as floppy disks and recently-focused magneto-optical disks such as MO, have the feature of facilitating file exchange among multiple computers, while keeping confidential information, etc., hidden. There is a problem that the desired information is easily accessed on other computers.

  Conventionally, a method of encrypting a file stored in a portable medium has been adopted as a method for enhancing the confidentiality when exchanging information using a portable medium. This is a common method at present, but there is a problem that the file management information such as the directory is not encrypted, so that the existence of the file is known, and the file is intentionally overwritten or deleted. For details of the conventional method for encrypting and storing a file to enhance confidentiality, refer to “Windows NT Server” 1998 published by Microsoft Corporation.

  Further, in the conventional technique, when confidentiality is not so required, there is a problem that it is inconvenient in actual use because the processing load is too heavy to encrypt each file.

  Therefore, in the present invention, based on the medium ID unique to the medium, the drive device ID unique to the drive device, the computer ID unique to the computer, etc., the storage destination (block number on the medium) of the file management information of the file ) And encryption of management information based on these IDs provides a method in which the file can be accessed only on a specific medium, a specific drive device, or a specific computer.

  Therefore, an object of the present invention is to provide a data storage method having confidentiality that can access necessary data only by using a specific medium or a specific device.

The apparatus of the present invention is an apparatus that formats a recording medium or accesses a file recorded on the recording medium, reads the identifier of the recording medium or the apparatus, and based on the identifier, When the recording medium is concealed, or the secrecy imparting / releasing means for releasing the secrecy of the recording medium and the secrecy are imparted to the recording medium, or the secrecy of the recording medium is And a recording medium access means for accessing the recording medium when the recording medium is released.
The method of the present invention is a method of formatting a recording medium or accessing a file recorded on the recording medium, comprising: (a) reading the identifier of the recording medium or the device, and And (b) providing the recording medium with confidentiality, or (b) providing the recording medium with confidentiality, or concealing the recording medium. And a step of accessing the recording medium when the is released.

  According to the present invention, the recording medium from which data is to be read or the identifier unique to the apparatus can be used to provide confidentiality to the recording medium, so when reading data from a specific recording medium, Alternatively, the data cannot be accessed except by reading the data using a specific device. In particular, as a method for imparting confidentiality to a recording medium, for example, management information such as a file may be moved according to a calculation based on the identifier, or may be encrypted using the identifier. In this case, it is preferable that the identifier is not rewritable by a normal method, and further, it cannot be read by a normal method. Thus, even if the contents of the recording medium are illegally copied, the identifier can be prevented from being copied, so that illegal use of data can be prevented. In addition, since the processing necessary for providing confidentiality is simple, confidentiality can be imparted to the recording medium faster and lighter than the conventional method.

FIG. 1 is a diagram showing a typical layout of files on a medium and file management information.
The section management information manages the head BN (Block Number: section start position) of a section that is a continuous area and its length (section length). The volume management information manages from which partition the volume, which is an area that can be used by the user, is configured (a list of used partitions), and has a link to root directory management information in the volume. In this example, a volume is composed of one partition.

    The root directory management information has a list of block numbers of root directories that are fragmented on the medium (a list of used blocks). In this example, the root directory is fragmented into three. In the root directory, there are a file name and a link to the file management information of the file, and a subdirectory name and a link to the subdirectory management information when having a subdirectory. The file management information has a list of block numbers of files that are fragmented on the medium. In this example, the file is fragmented into three. Similar to the root directory management information, the subdirectory management information has a list of used blocks used by the subdirectory, and the subdirectory includes the name of the file placed in the subdirectory and the file management information. Have a link to Of course, when the subdirectory includes a lower subdirectory, the name of the lower subdirectory and a link to the management information are stored.

  Normally, the management information outside the partition is placed at a fixed position. In this example, the partition management information is placed at BN = i, and the volume management information is placed at BN = j. Therefore, when accessing a file on a medium having a data format as shown in the figure, the partition management information and volume management information existing at a predetermined fixed position are read, and the block number where the file exists is read. (Block number) is specified.

  Therefore, in this embodiment, the storage location of the partition management information and volume management information, which are management information outside the partition, is a medium ID (medium identifier), a device ID (device identifier), and a computer ID (computer identifier). ), Or by encrypting the management information using these IDs as keys, the files on the medium cannot be easily accessed.

FIG. 2 is a block diagram of an apparatus according to the first embodiment of the present invention.
On the medium 1, there are a non-rewritable medium ID 2 and a readable / writable area 3. The drive device 4 includes a medium ID reading unit 5 that reads the medium ID 2, a medium ID transfer unit 6 that transfers the medium ID 2 read by the medium ID reading unit 5 to the computer 11, and a readable / writable area access unit 12. is there. The formatter 10 operating on the computer 11 stores the management information based on the medium ID 2 read by the medium ID reading unit 7 and the medium ID reading unit 7 that receives the medium ID 2 transferred from the medium ID transfer unit 6. There is a storage destination determination unit 8 that determines a block number (block number), and a readable / writable area access unit 9 that stores management information in a block having a block number determined by the storage destination determination unit 8.

  The non-rewritable medium ID 2 is an area different from the normal readable / writable area 3 on the medium 1 and is recorded at a position on the medium 1 that can be read only by a special method. This is because if the medium ID 2 is written in the same part as the normal readable / writable area 3, for example, even if write protection is performed, it is rewritten by some method, and only the rewritten person accesses the file. It will be possible to do so. Therefore, when the medium ID2 of a file that should originally be accessible only by the owner of the medium 1 is rewritten, the owner cannot access the file, and only the person who rewritten the medium ID2 can access. Will be able to access the file. Therefore, a malicious user can change the medium ID 2 so that the owner's medium 1 is illegally accessed and only the user can access the file. Further, if the medium ID2 is stored in a readable area by a normal access method, the medium ID2 is easily stolen, and confidentiality cannot be maintained.

  Therefore, the drive device 4 is specially provided with a medium ID reading unit 5 for reading the medium ID2. The medium ID 2 read by the medium ID reading unit 5 is sent to the medium ID transfer unit 6 and sent to the computer 11 to which the drive device 4 is connected. In the computer 11, the medium ID reading unit 7 of the formatter 10 operating on the computer 11 receives the medium ID 2 and sends it to the storage destination determining unit 8.

  The storage destination determination unit 8 determines the number of the block in which the partition management information and the volume management information are to be stored using the sent medium ID2 or a number corresponding to the medium ID2 on a one-to-one basis. The read / write area access unit 9 is instructed to write partition management information and volume management information. The instruction from the readable / writable area access unit 9 of the formatter 10 is passed to the readable / writable area access unit 12 of the drive device 4, and the indicated block number of the readable / writable area 3 on the medium 1 by the readable / writable area access unit 12. Partition management information and volume management information are written in the block having

FIG. 3 is a flowchart showing a processing flow of the formatter 10 of FIG.
When the formatter 10 starts processing, it reads the medium ID 2 (step S1; for example, in the case of the figure, the medium ID is “12345”). Next, the BN (block number) of the block in which the partition management information is to be stored is determined based on the medium ID 2 (step S2). In this example, BN is set to a value obtained by adding modulo 64 of the medium ID 2 to BN = 512 as a base (which is an offset block number). Here, the notation “ID% 64” indicates a remainder obtained by dividing the medium ID 2 by 64. However, the method of determining the block number (BN) of the partition management information storage destination is not limited to the above method, and should be appropriately determined by those skilled in the art in order to further improve confidentiality. Then, the partition management information is written in the determined block number (step S3). Next, similarly to the partition management information, the block number of the storage destination of the volume management information is determined (step S4), and this is written in the block (step S5). In the figure, the storage block number of the volume management information is determined by adding 513 to the remainder obtained by dividing the medium ID 2 by 64. However, as described in the case of the partition management information, the method for determining the storage block number is not limited to this method.

FIG. 4 is a block diagram of an apparatus according to the second embodiment of the present invention.
In the figure, the same components as those in FIG. 2 are denoted by the same reference numerals.
On the medium 1, there are a non-rewritable medium ID 2 and a readable / writable area 3. The drive device 4 includes a medium ID reading unit 5, a medium ID transfer unit 6 that transfers the read medium ID 2 to the computer 11, and a readable / writable area access unit 12. The file system 15 on the computer 11 includes a medium ID reading unit 7, a storage / read destination determining unit 8 that determines a block number for storing management information based on the read medium ID 2, and a block with the determined block number. There is a readable / writable area access unit 9 ′ to access. The file system 15 performs processing in response to a medium use request from the application 16.

  As the application 16, word processing software, a file management tool, and various other applications can be considered. That is, all applications having a function of accessing the medium 1 are applicable. In the figure, a medium ID reading unit 5, a medium ID transfer unit 6, a medium ID reading unit 7, and a readable / writable area access unit 12 have the same functions as in FIG. The storage / read-out destination determining unit 8 ′ does not specify a block number for storing the partition management information and the volume management information as in the formatter 10 of FIG. The block number storing the partition management information and volume management information of the accessed file is calculated from the medium ID 2 and the read / write area access unit 9 ′ is notified of the access request. is there. The readable / writable area access unit 9 ′ writes or reads a file on the medium 1 in accordance with a medium use request from the application 16. In this case, the application 16 is a formatter 10 as shown in FIG. 2 or an application having a function thereof, which performs a logical format together with a physical format, and stores partition management information and volume management information via the file system 15. Also included is a task of writing on the medium 1.

FIG. 5 is a flowchart showing a processing flow of the file system 15 of FIG.
The file system 15 starts mount processing (preparing to set the medium 1 in the drive device 4 and read the data of the medium 1) in response to a medium use request from the application 16. Next, the medium ID2 is read (step S10, ID = 12345 in the figure). Next, the BN (block number) in which the partition management information is stored is determined based on the medium ID 2 (step S11). In the example of the figure, the modulo 64 of the medium ID is set to a value added to Base1 (BN 512 if it is the same as the case of FIG. 3). Note that, as described above, Base1 is appropriately determined by those skilled in the art using this embodiment, and the processing mode of adding the remainder obtained by dividing the medium ID by 64 to Base1 should be changed as appropriate. It is. Next, the partition management information is read from the determined block number (step S12). Then, similarly to the partition management information, the storage location of the volume management information is determined (step S13), and this is read (step S14). In the figure, the storage location of the volume management information is calculated by adding the value obtained by dividing the medium ID by 64 to Base2 (513 in FIG. 3). These should be changed as appropriate by those skilled in the art using this embodiment.

FIG. 6 is a diagram showing a layout of a storage medium that has been logically formatted by the formatter according to the first embodiment.
If the medium ID is “12345” according to the calculation formula of FIG. 3, the partition management information is arranged in the block of block number 569 and the volume management information is arranged in the block of block number 570. As described with reference to FIG. 1, the partition management information records the start position and partition length of the partition, and the volume management information records a list of used partitions and a link to the root directory management information. The root directory stores a file name and a link to file management information, and a subdirectory name and a link to subdirectory management information.

  When the method according to the first and second embodiments is used, the recording position of the partition management information and the volume management information moves when the medium ID 2 changes. If the medium ID2 is not copied even if it is copied to the other medium, it is impossible to read data from the other medium, and the confidentiality of the information can be obtained. Preferably, even if the method for calculating the recording position of either the partition management information or the volume management information is known by changing the method for determining the recording position of the partition management information and the volume management information, the calculation method for the other recording position is Do not understand. However, in this case, it is necessary that the recording positions of the partition management information and the volume management information do not overlap.

FIG. 7 is a block diagram of an apparatus according to the third embodiment of the present invention.
In the present embodiment, the drive device ID on the drive device 4 ′ is used without using the medium ID on the medium 1 ′. The ID of the drive device 4 ′ is stored in the device ID storage unit 17. Actually, for example, a device ID is written in a part of firmware written in a ROM (not shown) of the drive device 4 ′ so that it can be read out as necessary. The device ID stored in the device ID storage unit 17 is read by the device ID transfer unit 6 and passed to the device ID reading unit 7 of the formatter 10A operating on the computer 11. Then, the device ID is transferred from the device ID reading unit 7 to the storage destination determination unit 8, and the storage destination determination unit 8 determines the location for storing the partition management information and the volume management information as in the first embodiment described above. To the readable / writable area access unit 9. The readable / writable area access unit 9 issues an instruction to the readable / writable area access unit 12 of the drive device 4 ′, and stores partition management information and volume management information in the readable / writable area 3 ′ of the medium 1 ′.

  In the present embodiment, it is not necessary for the medium 1 'to record the medium ID. However, as in the embodiment described later, the medium ID is recorded on the medium 1' as in the first embodiment. If necessary, the device ID and the medium ID may be combined or the medium ID and the device ID may be used when calculating the recording position of the partition management information and the recording position of the volume management information. good.

FIG. 8 is a flowchart showing the flow of processing in the third embodiment.
Note that, in the steps shown in the figure, the same steps as those in FIG.

  In step S1 ', the device ID is read. In the example of FIG. Next, the partition management information storage destination is determined (step S2). In this figure, the storage destination BN (partition management information storage destination BN) is obtained by adding the remainder obtained by dividing the device ID by 64 to Base1. The partition management information is stored in the storage location obtained in step S2 (step S3). Next, in step S4, a volume management information storage destination is determined. Here, the storage destination BN is obtained by adding the remainder obtained by dividing the device ID by 64 to Base2. Then, the volume management information is stored in the storage location thus obtained (step S5), and the formatting process is terminated.

As described above, Base1 and Base2 are values that should be set arbitrarily, and the method for obtaining the storage destination BN is not limited to this embodiment.
FIG. 9 is a block diagram of an apparatus according to the fourth embodiment of the present invention.

In the figure, the same components as those in the second and third embodiments are denoted by the same reference numerals.
The configuration shown in the figure shows a case where the computer 11 accesses the medium 1 ′ using the application 16 and the file system 15 in the third embodiment. Various applications 16 are conceivable. For example, a word processor, spreadsheet software, drawing software, and the like are available. However, the present invention is not limited to these, and as described above, anything may be used as long as data is written to the medium 1 ′ or data is read from the medium 1 ′. The medium use request from the application 16 is sent to the readable / writable area access unit 9 ′ of the file system 15A.

  On the other hand, the device ID of the drive device 4 ′ is read from the device ID storage unit 17, and transferred by the device ID transfer unit 6 to the device ID reading unit 7 of the file system 15 </ b> A operating on the computer 11. The device ID acquired by the device ID reading unit 7 is sent to the storage / read destination determining unit 8 ′, and the storage / read destination determining unit 8 ′ stores the BN of the block where the partition management information or the volume management information is stored or read. Is determined. The BN determined by the storage / read destination determination unit 8 ′ is sent to the readable / writable area access unit 9 ′, and an instruction to access the medium 1 ′ is output from the readable / writable area access unit 9 ′ to the drive device 4 ′. . The readable / writable area access unit 12 of the drive device 4 ′ that has received the instruction to access the medium 1 ′ accesses the readable / writable area 3 ′ of the medium 1 ′ based on the acquired BN.

FIG. 10 is a flowchart showing the flow of processing in the fourth embodiment.
In the figure, the same steps as those in FIG.
First, in step S10 ′, the device ID is read. In the figure, ID = 12345. Next, the partition management information storage destination is determined (step S11). The method of calculating the storage destination BN is the same as in FIG. When the storage destination BN is determined, the location where the partition management information is stored is known, so the partition management information is read in step S12. In step S13, the BN of the volume management information storage destination is determined. In step S14, the volume management information is read from the BN of the volume management information storage destination.

FIG. 11 is a block diagram of an apparatus according to the fifth embodiment of the present invention.
In the figure, the same components as those in FIG.
In the present embodiment, the computer ID on the computer 11 ′ is used without using the medium ID on the medium 1 ′. The computer ID may be any ID that can uniquely identify the computer 11 ′, such as a CPU-ID or an ID given to dedicated hardware inserted into an expansion slot.

  When the formatter 10B installed on the computer 11 ′ formats the medium 1 ′, first, after physically formatting the medium 1 ′, the computer ID reading unit 19 obtains the computer ID from the computer ID storage unit 18. read out. The read computer ID is input to the storage destination determination unit 8 and used to determine the storage destination BN of the partition management information and the volume management information. The storage destination BN determined by the storage destination determination unit 8 is input to the readable / writable area access unit 9 and sent to the readable / writable area access unit 12 of the drive device 4 ″ together with an access instruction to the medium 1 ′. The readable / writable area access unit 12 of the drive device 4 ″ that has received an access instruction to the medium 1 ′ refers to the received storage destination BN and partitions the block indicated by the storage destination BN of the readable / writable area 3 ′. Write management information and volume management information, and finish the logical format.

FIG. 12 is a flowchart showing the flow of processing in the fifth embodiment.
In the figure, the same steps as those in FIG.
First, in step S1 ″, the computer ID is read out. Next, the partition management information storage BN is determined in step S2, and the partition management information is stored in step S3. As shown in the figure, the method for determining the partition management information storage destination BN may be obtained by adding a remainder obtained by dividing the computer ID by 64 to Base1, which is a predetermined value, or another method may be used. Next, in step S4, the storage destination BN of the volume management information is determined. In the figure, the BN is obtained by adding the remainder obtained by dividing the computer ID by 64 to Base2 which is a predetermined value, but other methods may be used. Then, the volume management information is stored in the block having the determined storage destination BN on the medium 1 ′ (step S5), and the logical format is terminated.

FIG. 13 is a configuration diagram of an apparatus according to the sixth embodiment of the present invention.
In the figure, the same components as those in FIGS. 9 and 11 are denoted by the same reference numerals.

  In the present embodiment, the case where the medium 1 ′ formatted according to the fifth embodiment is accessed via the file system 15 </ b> B and the application 16 is shown. The computer ID may be anything such as a CPU-ID or an ID assigned to dedicated hardware inserted in an expansion slot.

  When a medium use request is output from the application 16, the request is received by the read / write area access unit 9 'of the file system 15B. On the other hand, the computer ID reading unit 19 reads the computer ID from the computer ID storage unit 18 and outputs it to the storage / read destination determination unit 8 ′. The storage / read-out destination determination unit 8 ′ uses the computer ID to specify the storage location of the partition management information and the volume management information on the medium 1 ′ by a predetermined method, and gives it to the readable / writable area access unit 9 ′. The readable / writable area access unit 9 ′ receives the input of the storage location and the input of the medium use request from the application 16, and sends the readable / writable area 3 of the medium 1 ′ to the readable / writable area access unit 12 of the drive device 4 ″. Instruct access to '. The readable / writable area access unit 12 can acquire the storage positions of the partition management information and the volume management information specified by the storage / read destination determination unit 8 ′, so where to read in the readable / writable area 3 ′. You can see if it's good and you can read the data or file normally. The same applies when writing a file or data to the medium 1 '.

FIG. 14 is a flowchart showing the flow of processing in the sixth embodiment.
In the figure, the same steps as those in FIG.
First, in step S10 ″, the computer ID is read out. Here, the ID is 12345. Next, in step S11, the storage destination BN of the partition management information is determined. Here, the remainder of dividing the computer ID by 64 is added to Base1, which is a predetermined value, to obtain the storage destination BN, but this is not necessarily limited thereto. When the storage destination BN is determined, it can be seen that the partition management information is written at the position indicated by the storage destination BN, and therefore the partition management information is read in step S12. Next, in step S13, the BN of the volume management information storage destination is determined. Here, it is obtained by adding the remainder obtained by dividing the computer ID by 64 to the predetermined value Base2, but it is not necessarily limited to this. When the BN of the volume management information storage destination is specified, the volume management information is read from this storage destination on the medium 1 ′ (step S14). As a result, the data necessary for reading the data on the medium 1 ′ is prepared, so that data such as a file can be read or written as in the case of a normal medium.

The data format of the medium 1 ′ in the third to sixth embodiments is the same as that given in FIG.
FIG. 15 is a block diagram of an apparatus according to the seventh embodiment of the present invention.

In the figure, the same components as those in FIG. 11 are denoted by the same reference numerals.
In the present embodiment, the external ID is used without using the medium ID on the medium 1 ′ or any other ID attached to the device to be used. The external ID may be any ID that can be input to the computer 11 ′, such as an ID given by an application, an ID given by a user, or an ID in a PC card inserted into a PC card slot.

  When formatting the medium 1 ′, the formatter 10 </ b> C first acquires an external ID. This is read by the external ID reading unit 20. The read external ID is used for calculation in the storage location determination unit 8. The storage destination determination unit 8 determines in which position in the readable / writable area 3 'on the medium 1' the partition management information and volume management information are to be written using an external ID by a predetermined method. The determined storage location is input to the readable / writable area access unit 9 and is passed to the readable / writable area access unit 12 of the drive device 4 ″ as a part of the access instruction. The readable / writable area access unit 12 of the drive device 4 ″ accesses the medium 1 ′ based on the access instruction from the readable / writable area access unit 9 of the formatter 10C, and sets the determined storage position in the readable / writable area 3 ′. Write partition management information and volume management information, and finish the logical format.

Since the flow of processing based on this embodiment is clear from the description of the above-described embodiment, description thereof will be omitted.
FIG. 16 is a block diagram of an apparatus according to the eighth embodiment of the present invention.

In the figure, the same components as those in FIGS. 13 and 15 are denoted by the same reference numerals.
This figure shows a case where the medium 1 ′ is accessed via the application 16 and the file system 15C in the seventh embodiment. The medium use request of the application 16 is input to the read / write area access unit 9 ′ of the file system 15C. In addition, the external ID is read by the external ID reading unit 20 as an output of another application or as a manual input by the user. The external ID is passed to the storage / read destination determination unit 8 ′, and the BN of the readable / writable area 3 ′ in which the partition management information and the volume management information are stored is calculated. The calculated BN is input to the readable / writable area access unit 9 ′.

  The readable / writable area access unit 9 ′ of the file system 15 sends the readable / writable area access unit 12 of the drive device 4 ″ to the readable / writable area access unit 12 of the drive device 4 ″ according to the medium use request from the application 16 and the BN input from the storage / read destination determination unit 8 ′. An instruction to access the medium 1 ′ is output. Based on the instruction, the readable / writable area access unit 12 reads the partition management information and the volume management information stored in the readable / writable area 3 ′ on the medium 1 ′, and reads and writes the file.

Note that the processing flow of this embodiment is the same as that of the above-described embodiment, and thus the description thereof is omitted. In the present embodiment, the ID reading step is the external ID reading step.
FIG. 17 is a block diagram showing an apparatus according to the ninth embodiment of the present invention.

The same components as those in FIGS. 2 and 15 are denoted by the same reference numerals.
In this embodiment, the medium ID or the external ID is not used as it is to calculate the storage position of the partition management information or the volume management information, but is used to determine the storage position using both. Is.

  First, when the formatter 10 </ b> D of the computer 11 ″ is activated, the external ID is read by the external ID reading unit 20. Then, the read external ID is input to the ID conversion unit 21. On the other hand, the medium ID reading unit 5 of the drive device 4 reads the medium ID 2 from the medium 1 and sends it to the medium ID reading unit 7 of the formatter 10 ′ via the medium ID transfer unit 6. The medium ID reading unit 7 outputs the received medium ID2 to the ID conversion unit 21. The ID conversion unit 21 generates a new code by combining the external ID and the medium ID2. For example, a new code having the external ID in the upper part of the code and the medium ID 2 in the lower part is generated. This new code is sent to the storage destination determination unit 8, and the storage destination determination unit 8 determines the storage destination of the partition management information and the volume management information. When the respective storage destinations are determined, these storage destinations are input to the read / write area access unit 9 of the formatter 10D. The readable / writable area access unit 9 outputs an access instruction including the storage location information to the medium 1 to the readable / writable area access unit 12 of the drive device 4. In response to this instruction, the readable / writable area access unit 12 of the drive device 4 accesses the readable / writable area 3 of the medium 1 and stores the partition management information and the volume management information in the storage destination determined by the storage destination determination unit 8. Store. Then, the formatting of other sections is performed, and the logical formatting is completed.

FIG. 18 is a block diagram showing an apparatus according to the tenth embodiment of the present invention.
In the figure, the same components as those in FIGS. 16 and 17 are denoted by the same reference numerals.

In the present embodiment, the medium 1 is accessed via the application 16 and the file system 15C instead of the formatter in the embodiment of FIG.
When a medium use request is generated from the application 16 operating on the computer 11C, this is input to the read / write area access unit 9 of the file system 15C also operating on the computer 11C. The readable / writable area access unit 9 waits for input of the storage location of the partition management information and the volume management information from the storage / read destination determination unit 8 ′. The medium ID reading unit 5 of the drive device 4 reads the medium ID 2 of the medium 1 and transmits the medium ID 2 to the medium ID reading unit 7 of the file system 15C via the medium ID transfer unit 6. Upon receiving the medium ID, the medium ID reading unit 7 outputs this to the ID conversion unit 21. On the other hand, the external ID reading unit 20 receives the external ID and inputs it to the ID conversion unit 21 as well. The ID conversion unit 21 performs the same process as the process performed by the formatter 10D in the ninth embodiment on the medium ID2 and the external ID to generate a new code. For example, a new code having an external ID in the upper part of the code and a medium ID 2 in the lower part is generated. This new code should be the same as that used at the time of formatting. This is because the medium 1 cannot be accessed if the same code cannot be obtained.

  The new code generated by the ID conversion unit 21 is input to the storage / read destination determination unit 8 ', and the storage destination of the partition management information and the volume management information is determined. In the storage / read-out destination determination unit 8 ', the storage destination is obtained by the same method as that used at the time of formatting. If the storage destination is obtained using a different method, the storage destination obtained at the time of formatting is not reproduced and the medium 1 cannot be accessed. The same applies to the above-described embodiment.

  The storage destination determined by the storage / read destination determination unit 8 ′ is input to the read / write area access unit 9 of the file system 15 </ b> C and transmitted to the read / write area access unit 12 of the drive device 4 together with the medium access instruction. The readable / writable area access unit 12 of the drive device 4 accesses the readable / writable area 3 of the medium 1 based on the received storage destination, and reads the partition management information and the volume management information to thereby read / write the area 3 of the medium 1. Write file to or read file.

Note that the flow of processing in the present embodiment is clear from the above-described embodiment, and thus description thereof is omitted.
FIG. 19 is a flowchart showing a process flow according to the eleventh embodiment of the present invention.

  In the eleventh embodiment, only a selection unit for selecting which of a plurality of IDs is used is provided, and the other configurations are basically the same as those in the first to eighth embodiments. Since it is realizable with a structure, illustration and description of an apparatus structure are abbreviate | omitted.

  The flow of formatter processing in this embodiment will be described. First, in step S20, information indicating the type of ID to be used is acquired from the application. Next, in step S21, it is determined which ID is used based on the acquired information. When the medium ID is used, the process proceeds to step S22, and the medium ID is read out. When the ID of the drive device is used, the process proceeds to step S23, and the device ID is read out. When using the computer ID, it is determined whether to use, for example, the ID of the processor or the ID of the dedicated board inserted into the expansion slot, which is held in the computer, for example, step S24 or step S25. Then, any one of the above IDs is read.

  In step S26, based on the read ID, the BN of the storage location of the partition management information is determined. In step S27, the partition management information is stored in the storage location on the medium. Next, in step S28, based on the read ID, the storage destination BN of the volume management information is determined. In step S29, the volume management information is stored in the storage destination on the medium, and the logical format is terminated. Here, the storage BN of the partition management information is obtained by adding 512 to the remainder of dividing the read ID by 64, and the storage destination of the volume management information is 513 and the read ID is 64. It is obtained by adding the remainder divided by.

FIG. 20 is a flowchart showing a process flow according to the twelfth embodiment of the present invention.
In the figure, the same steps as those in FIG. 19 are denoted by the same step symbols.

  The process shown in the figure is performed by the file system. First, in step S20, information indicating which ID is used is acquired from the application, and in step S21, which ID is used is determined. When the medium ID is used, the process proceeds to step S22, and the ID is read from the medium. If the ID of the drive device is used, the device ID is read in step S23. When any one of a plurality of IDs set in the computer is used, the selected ID is read in step S24 or step S25.

  Subsequently, based on the selected ID, the BN (position) of the storage location of the partition management information is determined (step S26), and the partition management information is read from the storage location on the medium in step S30. Next, in step S28, based on the selected ID, the storage destination BN of the volume management information is determined. In step S31, volume management information is read from the storage location on the medium. Here, in the determination of the storage destination in steps S26 and S28, the storage destination BN is determined by the same method as that used at the time of formatting.

FIG. 21 is a flowchart showing a process flow according to the thirteenth embodiment of the present invention.
In the figure, the same steps as those in FIG.

  This embodiment is a diagram for explaining the operation of a tool for defragmenting a medium formatted by the formatter of the above embodiment. The process for defragmenting is known as “defragmentation” included as a tool in, for example, Windows 95, which is a product of Microsoft Corporation, and will not be described in detail.

  First, in step S10, ID reading is performed. Here, the ID may be any of a medium ID stored in a medium, a device ID of a drive device, a computer ID given to a computer, or an external ID input from an application or a user. Further, as in the ninth and tenth embodiments, an arbitrary plurality of IDs may be selected and read. In step S11, the storage BN of the partition management information is determined from the read ID. Here, 512 is obtained by adding 512 to the remainder obtained by dividing the read ID by 64. Alternatively, immediately before step S11, a plurality of read IDs may be combined to create a new code, and based on this, the storage location of the partition management information may be determined.

  Then, with reference to the storage destination BN determined in step S11, the partition management information is read from the storage destination in step S12. Next, based on the ID read in step S35, the BN of the volume management information storage destination is determined. Here, the ID is obtained by adding 513 to the remainder of dividing the ID by 64. However, a new code is generated by combining a plurality of IDs, and the storage destination BN of the volume management information is determined based on the new code. Also good. In this way, with reference to the determined storage location BN of the volume management information, the volume management information is read from the storage location in step S14. As described above, the medium can be accessed. Next, in step S36, after reaching the target file management information via the root directory from the partition management information and volume management information, a known defragmentation process is executed based on the management information.

FIG. 22 is a diagram showing the configuration of the device according to the fourteenth embodiment of the present invention.
In the figure, the same components as those in FIG. 2 are denoted by the same reference numerals.
On the medium 1, there are a non-rewritable medium ID 2 and a readable / writable area 3. The drive device 4 includes a medium ID reading unit 5, a medium ID transfer unit 6, and a readable / writable area access unit 12. The formatter 10E operating on the computer 11 includes a medium ID reading unit 7, a management information encryption unit 30 that encrypts management information using the medium ID read by the medium ID reading unit 7 as a key, and the encrypted management. There is a readable / writable area access unit 9 for storing information.

The medium ID reading unit 5 of the drive device 4 reads the medium ID 2 of the medium 1 and outputs it to the medium ID transfer unit 6. The medium ID transfer unit 6 transmits the read medium ID to the medium ID reading unit 7 of the formatter 10 </ b> E of the computer 11. The medium ID reading unit 7 outputs the received medium ID to the management information encryption / storage destination determining unit 30. The medium ID management information encryption / storage destination determination unit 30 encrypts management information such as partition management information and volume management information using the input medium ID as a key, and calculates the storage destination BN of the management information. These are output to the readable / writable area access unit 9. As the encryption method, a conventionally known DES (Data Encryption Standard) or the like may be used. The encryption method is not particularly limited, and encryption is performed using a code corresponding to the medium ID on a one-to-one basis. In other words, the medium ID itself may not be used as the encryption key.
Further, the ID to be used is not limited to the medium ID, and it is possible to use a computer ID, a device ID of a drive device, or a combination thereof.

  In this embodiment, the management information storage location can be moved by the medium ID in addition to the management information encryption. However, the management information storage location may be fixed. Furthermore, in this embodiment, only the management information is encrypted, but the root directory and the management information included therein, and the file and the management information may be encrypted together. The encryption of the root directory and the file may or may not use the medium ID. In particular, the file is encrypted using a known encryption method, and the medium ID is known to a third party. Even when the medium 1 becomes accessible, the confidentiality of the file may be maintained.

  When the management information storage location and the encrypted management information are received, the readable / writable area access unit 9 transmits these to the readable / writable area access unit 12 of the drive device 4 and sends them to the readable / writable area 3 of the medium 1. Let me record. In this way, the logical format of the medium 1 with higher confidentiality can be performed.

FIG. 23 is a flowchart showing the flow of processing in the fourteenth embodiment of the present invention.
When the formatter 10E in FIG. 22 starts processing, it reads the medium ID 2 from the medium 1 (step S40). Next, the partition management information is encrypted using the medium ID2 as a key (step S41). Next, the storage location of the partition management information is acquired (step S42), and the encrypted partition management information is written in the storage location (step S43). Further, similarly to the partition management information, the volume management information is encrypted (step S44), the storage destination of the volume management information is acquired (step S45), and the encrypted management information is written to the storage destination (step S45). S46).

FIG. 24 is a configuration diagram showing a device configuration according to the fifteenth embodiment of the present invention.
The same components as those in FIGS. 4 and 22 are denoted by the same reference numerals.
In this embodiment, the medium formatted in the fourteenth embodiment is accessed, and a file is written or read.

  The medium 1 has a non-rewritable medium ID 2 and a readable / writable area 3. The drive device 4 includes a medium ID reading unit 5, a medium ID transfer unit 6 that transfers the medium ID 2 read by the medium ID reading unit 5 to the computer, and a readable / writable area access unit 12. The file system 15D on the computer 11 includes a medium ID reading unit 7, a readable / writable area access unit 9, and a management information decryption / storage destination determination unit 30 that decrypts the read management information using the medium ID2 as a key. The file system 15D performs processing in response to a medium use request input from the application 16.

  A medium use request from the application 16 is input to the readable / writable area access unit 9. Further, the medium ID 2 is read from the medium ID reading unit 5 of the drive device 4 and sent to the medium ID reading unit 7 included in the file system 15 D of the computer 11 by the medium ID transfer unit 6. The medium ID reading unit 7 outputs the received medium ID 2 to the management information decoding / storage destination determining unit 30. The management information decryption / storage destination determining unit 30 determines the storage destination of the management information from the received medium ID 2 and gives the information to the readable / writable area access unit 9. The readable / writable area access unit 9 issues a read command to the readable / writable area access unit 12 of the drive device 4 based on the received storage destination. The encrypted management information read from the readable / writable area 3 of the medium 1 by the readable / writable area access unit 12 is sent to the management information decryption / storage destination determining unit via the readable / writable area access unit 9 of the file system 15D. 30 and decrypted by the management information decryption / storage destination determination unit 30. Based on the decrypted management information, access to the medium 1 is performed.

  As can be easily understood, the decoding process in the management information decoding / storage destination determining unit 30 needs to correspond to the encoding process performed at the time of formatting in the fourteenth embodiment.

FIG. 25 is a flowchart showing the flow of processing in the fifteenth embodiment.
In the figure, steps similar to those in FIG. 23 are denoted by the same step symbols.

  The file system 15D in FIG. 24 starts the mount process in response to a medium use request from the application 16. That is, first, the medium ID2 is read (step S40). Next, the storage location of the partition management information is acquired from the medium ID2 (step S42), the partition management information is read from the storage location (step S50), and is decrypted using the medium ID2 as a key (step S51). Next, the storage location of the volume management information is acquired in the same manner as the partition management information (step S45), the volume management information is read from the storage location (step S52), and is decrypted using the medium ID2 as a key (step S53). .

  In the fourteenth and fifteenth embodiments, a case has been described in which the storage location of management information is determined by reading the medium ID2, and encryption and decryption are performed. In addition, the device ID or computer ID of the drive device can be used. Further, these read IDs may not be used as encryption keys as they are, but a plurality of IDs may be combined to generate a new code, which may be used for encryption and decryption. Alternatively, codes corresponding to one or a plurality of IDs may be prepared in advance and used for encryption or decryption, or may be used for determining a storage destination.

FIG. 26 is a diagram illustrating an example of the encryption / decryption circuit in the fourteenth and fifteenth embodiments.
This figure shows an encryption / decryption circuit using a DES CBC (Cipher Block Chaining) mode. Data is written to and read from the medium 2 in units of 512 bits, but encryption and decryption in the DES shown in the figure are performed in units of 64 bits. Thus, the data is divided into 64 bits and input to the encryption / decryption circuit 52. First, the data M1 is input to the DES processing unit 50-1. The data encrypted by the DES processing unit 50-1 is output as encrypted data E1. Next, data M2 is input. This is added to the encrypted data M1 (= E1) in the exclusive OR circuit 51-1, input to the DES processing unit 50-2, encrypted by the DES processing unit 50-2, and encrypted. Is output as converted data E2. Thereafter, in the same procedure, the encryption is advanced in such a way that the previous block affects the data of the next block, and when the last encrypted data En (n = 8) is output, writing to the medium 2 is performed. Since 512-bit data as a unit is completed, encrypted data composed of E1 to En is written to the medium 2. The encryption key used for the encryption is input to each DES processing unit 50-1 to 50-n. The encryption key is, for example, a medium ID.

  In the case of decryption, the encrypted data is input to the shaded portion of the figure and divided into 64 bits. Then, it is input to the DES processing units 50-1 to 50-n together with the encryption key. In this case, the decoding process is performed from the data E1 toward the data En. The decrypted data M1 output from the DES processing unit 50-1 is subtracted from the decrypted data E2 output from the DES processing unit 50-2 in the exclusive OR circuit 51-1, thereby obtaining decoded data M2. Thereafter, similarly, when all 512 bits of the input encrypted data have been processed, one decryption process is completed.

FIG. 27 is a diagram showing a layout on the medium 1 logically formatted by the formatter 10E of the fourteenth embodiment.
In the figure, the hatched portion is encrypted with the medium ID 2 for each management information unit. In the fourteenth embodiment, encryption is performed in units of management information. However, a specific area may be defined as a management information dedicated area and the entire area may be encrypted. This can be used when the management information storage destination is fixed.

  In addition, as described in the description of the fourteenth embodiment, data in a partition in which a root directory or the like is stored may be encrypted in the same manner as the management information. In particular, files are conventionally employed. By performing such encryption, it is possible to improve confidentiality by performing encryption different from the encryption of the management information, the root directory, and the management information.

FIG. 28 is a diagram showing the configuration of the drive device according to the sixteenth embodiment of the present invention.
In the figure, the same components as those in FIG. 2 are denoted by the same reference numerals.
Here, the computer 61 does not have to be a computer for personal use or office use such as a so-called “personal computer” or “workstation”, and is mounted on a home appliance or the like having a flash memory for storing a microprocessor and firmware. It may be a “built-in computer”. Furthermore, it is possible to adopt a hardware-connected configuration. Further, the drive device 60 includes a player dedicated to a DVD or a music CD.

  When formatting the medium 1, the medium ID reading unit 5 reads the medium ID 2 from the medium 1. Then, the medium ID transfer unit 6 transfers this to the medium ID reading unit 7 of the formatter 62 operating on the computer 61 inside the drive device 60. The medium ID reading unit 7 sends the received medium ID 2 to the storage destination determining unit 8. The storage destination determination unit 8 determines the storage destination of the management information using the received medium ID 2 and transmits it to the readable / writable area access unit 9. The readable / writable area access unit 9 issues an instruction to access the medium 1 to the readable / writable area access unit 12 of the drive device 60 based on the received storage location information. Upon receiving the access instruction, the readable / writable area access unit 12 accesses the read / write area 3 of the medium 1 and stores the management information in the storage location determined by the storage destination determination unit 8. The storage destination determination method in the storage destination determination unit 8 is, for example, the method shown in the first embodiment.

  The ID to be used is not limited to the medium ID, and the device ID of the drive device 60 may be used, or the computer 61 built in the drive device 60 is assigned an ID different from that of the drive device 60. In some cases, a computer ID may be used.

  Furthermore, as described in the fourteenth and fifteenth embodiments, management information and the like may be encrypted and stored. In the case of encryption, the storage location of management information can be a fixed position that does not depend on the read ID.

FIG. 29 is a block diagram of an apparatus according to the seventeenth embodiment of the present invention.
In the figure, the same components as those in FIG. 4 are denoted by the same reference numerals.
The present embodiment corresponds to the sixteenth embodiment, and the meanings of the computer 61 and the drive device 60A are as described above.

  When the computer 61 is a PC card having a microprocessor and a memory, all or part of the functions of the drive device 60 can be executed on the PC card side. The same applies to the sixteenth embodiment.

  The medium ID reading unit 5 of the drive device 60 </ b> A reads the medium ID 2 of the medium 1 and transmits it to the medium ID transfer unit 6. The medium ID transfer unit 6 inputs the received medium ID to the storage / read destination determination unit 8 ′ via the medium ID reading unit 7 included in the file system 63 of the computer 63. The storage / readout destination determination unit 8 ′ determines the storage destination of the management information from the received medium ID 2 and outputs it to the readable / writable area access unit 9 ′ of the file system 63. When the management information storage destination and the medium use request from the application 16 are received, the readable / writable area access unit 9 ′ issues an access instruction to the medium 1 to the readable / writable area access unit 12 of the drive device 60 </ b> A. When receiving the instruction, the readable / writable area access unit 12 accesses the readable / writable area 3 of the medium 1, reads management information from the medium 1, and enables file access to the medium 1.

  As described in the description of the sixteenth embodiment, the ID to be used is not limited to the medium ID, and the device ID of the drive device 60A, the computer ID of the computer 61, and the like can be used. Further, encryption may be performed together as in the fourteenth and fifteenth embodiments.

  In the description of each of the embodiments described above, the medium ID, the device ID, and the computer ID are used as the ID. However, it is also possible to use an ID given to the application. Accordingly, only the user who accesses the medium using a specific application can operate the contents of the medium.

FIG. 30 is a diagram illustrating a hardware configuration required when the above-described embodiments of the present invention are realized by a program.
The CPU 71 exchanges data with other components via the bus 70 and executes a program for realizing each embodiment of the present invention. The program is recorded in a ROM 73, an external recording device 77 such as a hard disk, or a portable recording medium 79. The program stored in the portable recording medium 79 is read into the RAM 72 via the drive device 78 in which the portable recording medium 79 is mounted. The program recorded in the ROM 73 or the external recording device 77 is directly read into the RAM 72. The CPU 71 executes a program expanded in an executable state in the RAM 72. An ID input from a user and output of processing results are performed by the input / output device 80. The input / output device 80 includes a keyboard, a mouse, a display, and the like. The communication interface 74 accesses the information provider 76 via the network 75, downloads a program for realizing the embodiment of the present invention from the information provider 76 to the external recording device 77 and the like, and the CPU 71 is on a local computer. It is a network connection device that can be executed on the network. Alternatively, the program is executed on the information provider 76 side, and the communication interface 74 receives only the execution processing result or the like from the information provider 76 via the network 75, whereby the embodiment of the present invention can be performed by remote access. It can also be realized.

  By making it possible to move the storage location of management information on a medium based on information unique to the medium and the device used, even if all data on the medium is illegally copied to another medium, the illegal copy destination The management information storage location cannot be obtained from information unique to the medium or apparatus, and unauthorized access to the file can be prevented. The same effect can be obtained by encrypting the management information using these unique information as keys.

  As described above, the range in which the file can be correctly accessed can be limited according to the confidential level of the file stored on the medium.

It is a figure which shows the typical layout of the file on a medium, and file management information. It is a block diagram of the apparatus according to the first embodiment of the present invention. 3 is a flowchart showing a flow of processing of the formatter of FIG. It is a block diagram of the apparatus according to the 2nd Embodiment of this invention. 5 is a flowchart showing a process flow of the file system in FIG. 4. It is a figure which shows the layout of the storage medium which performed the logical format with the formatter according to 1st Embodiment. It is a block diagram of the apparatus according to the 3rd Embodiment of this invention. It is a flowchart which shows the flow of the process in 3rd Embodiment. It is a block diagram of the apparatus of the 4th Embodiment of this invention. It is a flowchart which shows the flow of the process in 4th Embodiment. It is a block diagram of the apparatus of the 5th Embodiment of this invention. It is a flowchart which shows the flow of the process in 5th Embodiment. It is a block diagram of the apparatus of the 6th Embodiment of this invention. It is a flowchart which shows the flow of the process in 6th Embodiment. It is a block diagram of the apparatus according to the 7th Embodiment of this invention. It is a block diagram of the apparatus of the 8th Embodiment of this invention. It is a block diagram which shows the apparatus of the 9th Embodiment of this invention. It is a block diagram which shows the apparatus of the 10th Embodiment of this invention. It is a flowchart which shows the flow of the process according to the 11th Embodiment of this invention. It is a flowchart which shows the flow of the process according to the 12th Embodiment of this invention. It is a flowchart which shows the flow of the process according to the 13th Embodiment of this invention. It is a figure which shows the block diagram of the apparatus of the 14th Embodiment of this invention. It is a flowchart which shows the flow of the process in the 14th Embodiment of this invention. It is a block diagram which shows the apparatus structure of the 15th Embodiment of this invention. It is a flowchart which shows the flow of the process in 15th Embodiment. It is a figure which shows an example of the encryption / decryption circuit in 14th and 15th Embodiment. It is a figure which shows the layout on the medium logically formatted by the formatter of 14th Embodiment. It is a figure which shows the block diagram of the apparatus of the 16th Embodiment of this invention. It is a block diagram of the apparatus according to the 17th Embodiment of this invention. It is a figure which shows the hardware constitutions required when implement | achieving embodiment of this invention with a program.

Claims (33)

An apparatus for formatting a recording medium or accessing a file recorded on the recording medium,
By reading the identifier of the recording medium or the device and storing management information relating to the file stored in the recording medium in a storage location determined based on the identifier, the recording medium has confidentiality. A secrecy assigning / releasing means for deciphering the secrecy of the recording medium by specifying the storage location of the management information by reading the identifier ;
A recording medium access means for accessing the recording medium when the confidentiality is imparted to the recording medium or when the confidentiality of the recording medium is released;
A device comprising: The apparatus according to claim 1 , wherein the secrecy assigning / releasing means is included in a computer, and the recording medium access means is included in a drive device of the recording medium. The apparatus according to claim 2 , wherein the storage destination is determined by using position information on the recording medium obtained by calculation based on an identifier uniquely given to the recording medium. 3. The apparatus according to claim 2 , wherein the storage destination is determined using position information on the recording medium obtained by calculation based on an identifier uniquely given to the drive device. 3. The apparatus according to claim 2 , wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the computer. The storage location is obtained by calculation based on the identifier inputted from the outside to the computer, according to claim 2, characterized in that it is determined using the position information on the recording medium apparatus. The storage destination is determined using position information on the recording medium obtained by an operation based on a code generated by combining identifiers uniquely given to the recording medium, the drive device, and the computer. The apparatus according to claim 2 , wherein: 3. The apparatus according to claim 2 , wherein the release of the confidentiality is performed by specifying a position where the management information is stored and reading the management information normally from the specified position. . The apparatus according to claim 1 , wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the recording medium. 2. The apparatus according to claim 1 , wherein the storage destination is determined by using position information on the recording medium obtained by an operation based on an identifier uniquely given to the apparatus. The storage destination is determined using position information on the recording medium obtained by calculation based on a code generated by combining identifiers uniquely given to the recording medium and the device. The apparatus according to claim 1 . 2. The apparatus according to claim 1 , wherein the release of the confidentiality is performed by specifying a position where the management information is stored, and reading the management information normally from the specified position. . The apparatus according to claim 1 , wherein the secrecy assigning / releasing means is included in a formatter that formats the recording medium. The apparatus according to claim 1 , wherein the secrecy assigning / releasing unit is included in a file system that accesses the recording medium. The apparatus according to claim 1 , wherein the secrecy assigning / releasing unit is included in a system that performs defragmentation processing of the recording medium. A recording medium used in a system having at least a drive device for reading from or writing to the recording medium,
Management information relating to a file to be recorded on the recording medium is recorded at a position on the recording medium calculated based on an identifier uniquely given to the drive device or an identifier uniquely given to the recording medium A recording medium characterized by the above. The system further includes a computer,
The management information is an identifier uniquely given to the said computer or, according to claim 16, characterized in that characterized in that it is recorded in the storage destination that is calculated based on the identifiers inputted from the outside Recording media. A method in which the information processing apparatus formats a recording medium readable / writable by the information processing apparatus or accesses a file recorded in the recording medium,
(A) An identifier is read from the recording medium or the device, and management information relating to a file stored in the recording medium is stored in a storage location determined based on the identifier, thereby concealing the recording medium. Removing the secrecy of the recording medium by specifying the storage location of the management information by reading the identifier ,
(B) accessing the recording medium when the confidentiality is imparted to the recording medium, or when the confidentiality of the recording medium is released;
A method comprising the steps of: 19. The method according to claim 18 , wherein the step (a) is executed by a computer, and the step (b) is executed by a drive device of the recording medium. The method according to claim 19 , wherein the storage destination is determined by using position information on the recording medium obtained by calculation based on an identifier uniquely given to the recording medium. The method according to claim 19 , wherein the storage destination is determined by using position information on the recording medium obtained by an operation based on an identifier uniquely given to the drive device. The method according to claim 19 , wherein the storage destination is determined by using position information on the recording medium obtained by an operation based on an identifier uniquely given to the computer. The storage destination, according to claim 19, wherein the obtained by a calculation based on the identifier inputted from the outside to calculate machine is determined using the position information on the recording medium the method of. The storage destination is determined using position information on the recording medium obtained by calculation based on a code generated by combining identifiers given to the recording medium, the drive device, and the computer, respectively. The method according to claim 19 . The method according to claim 19 , wherein the release of the confidentiality is performed by specifying a position where the management information is stored and reading the management information normally from the specified position. . 19. The method according to claim 18 , wherein the storage destination is determined by using position information on the recording medium obtained by calculation based on an identifier uniquely given to the recording medium. 19. The method according to claim 18 , wherein the storage destination is determined by using position information on the recording medium obtained by an operation based on an identifier uniquely given to the device. The storage destination is determined using position information on the recording medium obtained by calculation based on a code generated by combining identifiers uniquely given to the recording medium and the device. The method according to claim 18 . The method according to claim 18 , wherein the release of the confidentiality is performed by specifying a position where the management information is stored, and reading the management information normally from the specified position. . The method of claim 18 , wherein step (a) is performed by a formatter that formats the recording medium. The method according to claim 18 , wherein the step (a) is executed in a file system that accesses the recording medium. The method according to claim 18 , wherein the step (a) is executed by a system that performs a defragmentation process of the recording medium. A storage medium storing a program for causing a computer to format a recording medium or execute a process of accessing a file recorded on the recording medium,
The process is
(A) by reading the identifier of the recording medium or a device that accesses the recording medium, and storing management information relating to the file stored in the recording medium in a storage location determined based on the identifier , Releasing the secrecy of the recording medium by providing the secrecy to the recording medium, identifying the storage location of the management information by reading the identifier ,
(B) accessing the recording medium when the confidentiality is imparted to the recording medium, or when the confidentiality of the recording medium is released;
A storage medium comprising:

Images