JP4862085B2 - Originality verification apparatus and originality verification program - Google Patents

Description

  The present invention relates to a falsification verification apparatus and a falsification verification program that backs up original data stored in the original storage means to a predetermined medium and verifies the falsification of the original data. The present invention relates to a falsification verification apparatus and a falsification verification program that can suppress the influence on the data as much as possible.

  Conventionally, original data (electronic documents or important documents consisting of electronic data) has always been required to be assured of the originality, and the originality due to failure of the hardware in which the original data is stored and alteration of the original data Have been backed up in case of loss. As such a device, there is generally known a falsification verification device that backs up original data stored in an original storage means to a predetermined medium and verifies the falsification of the original data (for example, Patent Document 1). reference).

  This will be explained in detail. After preventing access to the original data (access due to work, etc.) in order to prevent alteration of the original data due to access to the original data being verified and backed up, By verifying tampering and backing up the verified original data to a backup medium, the originality of the original data (the originality has requirements such as integrity, confidentiality and readability. Was backed up while guaranteeing the integrity of the original).

Japanese Patent Laid-Open No. 2003-022009 (page 1-2, FIG. 1)

  However, the above-mentioned conventional technology, when backing up the original data, must prevent access to the original data during the falsification verification and the backup of the original data being backed up. Since the time for verifying the alteration of the original data is much longer than the time for backing up, there is a problem that the time for inhibiting access accompanying the work becomes longer and the work is adversely affected.

  Therefore, the present invention has been made to solve the above-described problems caused by the prior art, and when backing up original data, a falsification verification apparatus, a falsification verification method, and a falsification verification method capable of minimizing the influence on work An object is to provide a program for causing a computer to execute the method.

  In order to solve the above-described problems and achieve the object, the disclosed apparatus backs up original data that can be updated in business and changed in time series to a predetermined medium, and verifies the originality of the original data An originality verification device, wherein the original data is backed up without verifying the originality of the data changed from the previous backup, and the change backed up by the backup means among the original data And originality verification means for verifying whether or not the originality is guaranteed with respect to the minute data.

  Therefore, according to the present invention, backup is performed without verifying the alteration of the original data stored in the original storage means, and the original data is verified with reference to the original data stored in the original storage means. Therefore, it is possible to limit the access to the original data only when the original data is backed up from the original storage means, and when the original data is backed up, it is possible to suppress the influence on the business as much as possible.

  The disclosed apparatus further includes a table that stores a list of the changed data backed up by the backup unit, and the originality verification unit includes a list of the changed data stored by the table. Information that guarantees the originality is given to those whose originality has been verified.

  Therefore, according to the present invention, since a list of original data is stored and information that guarantees the originality is given to the list of original data that has been verified for alteration, It becomes possible to guarantee the integrity of the original data.

  In addition, the disclosed apparatus is a prior originality verification unit that verifies in advance whether or not the originality of the data corresponding to the access request is guaranteed each time an access request to the original data is notified. The originality verification means provides information that guarantees the originality of the changed data of the original data whose originality has been verified by the prior originality verification means. .

  Therefore, according to the present invention, every time a request for access to the original data is notified, falsification of the original data related to the access request is verified in advance, and information indicating that the original data is guaranteed is provided. Therefore, the original data related to the access request can be preferentially falsified and verified, and it is possible to prevent falsification of the original data that has not been falsified and verified after being backed up.

  In the disclosed apparatus, when the predetermined medium stores the original data for each generation and the originality verification unit verifies that the originality is guaranteed, the backup medium The apparatus further comprises a restoring means for restoring the original data based on the latest generation of the original data among the original data stored in the medium.

  Therefore, according to the present invention, when falsification is verified, the original data is restored based on the latest generation of original data stored in the backup medium. Is detected, it is possible to restore the original data to the latest state immediately before being tampered with.

  Further, the disclosed program is an originality verification program that backs up original data that can be updated in business and that is changed in time series to a predetermined medium, and that causes a computer to execute a method of verifying the originality of the original data. A backup procedure that backs up the data of the original data that has been changed since the previous backup without verifying the originality, and the data of the original data that has been backed up by the backup means. The originality verification procedure for verifying whether or not the originality is guaranteed is executed by the computer.

  Therefore, according to the present invention, backup is performed without verifying the alteration of the original data stored in the original storage means, and the original data is verified with reference to the original data stored in the original storage means. As a result, access to the original data can be suppressed only when the original data is backed up from the original storage means, and when the original data is backed up, the program can minimize the impact on business operations. .

  As described above, according to the present invention, access to the original data can be suppressed only when the original data is backed up from the original storage means. When the original data is backed up, the influence on the business is minimized. There is an effect that a tampering verification apparatus that can be suppressed is obtained.

  In addition, according to the present invention, there is an effect that a falsification verification device that can guarantee the integrity of the original for each backed up original data can be obtained.

  In addition, according to the present invention, a falsification verification apparatus that can preferentially tamper verify original data related to an access request and prevent falsification of original data that has not been verified yet after being backed up. The effect that is obtained.

  In addition, according to the present invention, it is possible to obtain a falsification verification apparatus that can restore original data to the latest state immediately before falsification when falsification is detected in the falsification verification process.

  In addition, according to the present invention, it is possible to limit the access to the original data only when the original data is backed up from the original storage means, and when the original data is backed up, it is possible to suppress the influence on business as much as possible. As a result, it is possible to obtain a falsification verification program that is possible.

FIG. 1 is a block diagram showing a configuration of a tampering verification apparatus according to the first embodiment. FIG. 2 is a diagram illustrating a configuration example of a backup original list table. FIG. 3 is a diagram illustrating a configuration example of a backup medium management table. FIG. 4 is a flowchart showing a processing procedure of the tampering verification apparatus according to the present embodiment. FIG. 5 is a conceptual diagram for explaining the restoration process. FIG. 6 is a flowchart showing the procedure of the monthly backup extraction process. FIG. 7 is a flowchart showing the procedure of the daily backup extraction process. FIG. 8 is a flowchart showing the procedure of the restoration process.

  Exemplary embodiments of a falsification verification apparatus and a falsification verification program according to the present invention will be described below in detail with reference to the accompanying drawings. In the following, after describing the outline and features of the tampering verification apparatus according to the present embodiment, the configuration and processing procedure of the tampering verification apparatus will be described, and finally, various modifications will be described as other embodiments. I will explain.

(Outline and features of tamper verification device)
First, the outline and features of the tampering verification apparatus according to the present embodiment will be described. FIG. 1 is a block diagram showing a configuration of a tampering verification apparatus according to the present embodiment. As shown in the figure, the falsification verification device 10 is generally a device configured to be readable and writable from the outside with respect to the original data stored in the original storage means. Data tampering verification is performed when doing so. In addition, the original data stored in the original storage means is backed up to a predetermined medium, and tampering verification of the backed up original data is performed.

  Here, the falsification verification device 10 backs up the original data stored in the original storage unit without verifying the falsification, and verifies the original data by referring to the original data stored in the original storage unit. The falsification verification process has a main feature, and the falsification verification process can minimize the influence on business when the original data is backed up.

  The main feature will be specifically described. The falsification verification apparatus 10 suppresses access only when backing up the original data from the original storage unit without performing the falsification verification process requiring a lot of time in advance. Then, the original data is backed up to the backup medium from the original storage means, and then the alteration of the original data stored in the original storage means is verified. If the original data is not falsified, the originality of the backed up original data is confirmed. Guarantee after the fact.

  Therefore, in the example of the prior art described above, when the original data is backed up, instead of sequentially performing falsification verification and backup by suppressing access by business etc., falsification verification processing that requires a lot of time is performed in advance. Since the access is suppressed only when the original data is backed up from the original storage means without performing it, it is possible to suppress the influence on the business as much as possible when the original data is backed up.

  Further, the tampering verification apparatus according to the present embodiment additionally has the following characteristics in relation to the main characteristics described above. That is, in this embodiment, for each original data, a plurality of original data is stored and managed every time backup is performed on the storage medium. In addition, after verifying the alteration of the original data stored in the original data storage unit corresponding to the original data backed up, information is provided to guarantee that no alteration has been made to the original data in which no alteration has been detected. Therefore, it is possible to guarantee the integrity of the original data for each original data that has been backed up.

  Further, in this embodiment, every time a request for access to the original data is notified, the alteration of the original data related to the access request is verified in advance, and information that guarantees the originality of the original data is given. Therefore, the original data related to the access request can be preferentially falsified and verified, and after the backup, the original data that has not yet been falsified and verified can be prevented from being falsified.

  In the present embodiment, when alteration is verified, the original data is restored based on the latest generation of original data stored in the backup medium. Is detected, it is possible to restore the original data to the latest state immediately before being tampered with.

(Configuration of tamper verification device)
Next, the configuration of the tampering verification apparatus according to the present embodiment will be described. As shown in FIG. 1, the falsification verification apparatus 10 includes an original access unit 11, an original storage unit 12, a backup medium 13, a backup original list table 14, a backup medium management table 15, and an original backup unit 16. The tamper verification unit 17 and the restoration unit 18 are configured.

  Among these, the original access unit 11 is a processing unit that accesses the original data stored in the original storage unit 12 by business or the like. Specifically, the original data (an electronic document or an important document made up of electronic data) stored in the original storage unit 12 is accessed, and the original data is updated according to the business situation. The original storage unit 12 is configured by a RAID (Redundant Array of Independent Disks) device. For such file devices, a logical disk configured to be accessible from connected devices is formed using multiple physical disk devices, and can be accessed using the logical address of the logical disk device. Thus, a plurality of original data is stored.

  Further, each time the access request for the original data is notified, the original access unit 11 verifies in advance the alteration of the original data related to the access request, and information that guarantees the originality of the verified original data Is granted. Specifically, every time an access request is notified, the original data related to the access request is verified for falsification. If no falsification is detected by the prior falsification verification, “OK” is written in the falsification verification status column of the backup medium management table 15 for the verified original data.

  The backup medium 13 is a storage means for storing original data backed up by the original backup unit 16. Specifically, the backup medium 13 is a magnetic tape, hard disk, flexible disk (FD), CD-R, MO, DVD. A computer-readable recording medium such as -R or DVD-RAM is used. The backup medium 13 is unmounted when the backup is completed, and access from the outside is blocked.

  Further, the backup medium 13 manages a daily backup that backs up only daily updates in the original data and a monthly backup that backs up all the environments in the original data in multiple generations (generations per month) ( (See FIGS. 2, 3 and 5). When alteration of the original data is detected, the original data is restored using the daily backup and the monthly backup (“restoration processing” for restoring the original data will be described later).

  The backup original list table 14 is a processing unit that stores a list of original data backed up by the original backup unit 16 and medium names in association with each other (see FIG. 2), and the backup medium management table 15 is falsified with medium names. It is a processing unit that stores the verification status in association with each other (see FIG. 3).

  The original backup unit 16 is a processing unit that performs backup without verifying alteration of original data stored in the original storage unit 12. Specifically, access to the original access unit 11 is suppressed, original data (for example, document A, document B, and document C as of February 3, 2003) is backed up to the backup medium 13, and the backup original list table 14 Is written in association with the list of originals backed up (document A, document B, and document C as of February 3, 2003) and the medium name (D20030303) of the backup medium 13, and in the backup medium management table 15, The medium name (D20030303) is written and “unfinished” is written in the column of the falsification verification status (see FIGS. 2 and 3).

  The falsification verification unit 17 verifies the falsification by referring to the original data stored in the original storage unit 12 based on the backup original list table 14, and the originality of the backup original list table 14 that has been subjected to the falsification verification. It is a processing unit that gives information to guarantee

  In other words, the falsification verification unit 17 performs processing on the file subject to the falsification verification process stored in the original storage unit 12 based on the path stored in the backup original list table 14 (document A, document as of February 3, 2003). B and document C) are falsified, and if no falsification is detected, “OK” is written in the falsification verification status column of the backup medium management table 15 (falsification verification status column of D20030303) (FIG. 2 and FIG. 2). (See FIG. 3). Note that when the business is in progress, the “tamper verification process” is performed in the background.

  Further, one original data is composed of a plurality of access units. This access unit is, for example, one logical block, and access to the original storage unit is performed in this logical block unit. Each time an access request for a logical block included in the principle data is notified, the access unit of the original data related to the access request is preferentially verified for falsification to ensure that there is no falsification. As a result, access to the access unit of the original data can be permitted without completing verification of alteration of all the original data, thereby enabling access to the area in the original storage unit for the original data that has been backed up.

  The backup processing of the present embodiment is performed by a RAID device that performs copy processing to an actual backup medium in the background after returning a notification of completion in response to a backup instruction from, for example, a higher-level device. The function is performed using, for example, the function described in JP-A-2002-297455. By using such a function, the time for prohibiting access to the original storage unit for backup can be shortened as much as possible. In addition, it is possible to easily manage the completion of backup and tampering verification of the logical blocks constituting the original data by using the bitmap described in the reference document.

  The restoration unit 18 is a processing unit that restores original data based on the latest generation original data among the original data stored in the backup medium when the falsification verification unit 17 verifies the falsification. Specifically, after the original data environment is restored by the monthly backup stored by the backup medium 13, the daily update of the original data is restored by the daily backup. For the monthly backup and the daily backup, the latest original data among the original data in which “OK” is written in the falsification verification status column of the backup medium management table 15 is used.

(Various processing procedures)
Next, procedures of various processes performed by the tampering verification apparatus 10 according to the present embodiment will be described. Here, after explaining the main feature (1) “tamper verification process”, the original data is restored when the above-mentioned “tamper verification process” detects the alteration as the process related to the main feature. (2) “Restoration process” will be described.

(1) Tampering Verification Process FIG. 4 is a flowchart showing a processing procedure of the tampering verification apparatus according to this embodiment. As shown in the figure, the original backup unit 16 suppresses access of the original access unit 11 (step S401), and original data (for example, document A, document B, and document as of February 3, 2003) are stored in the backup medium 13. C) is backed up, and the list of originals backed up (document A, document B, and document C on February 3, 2003) and the media name (D20030303) of the backup medium 13 are associated with each other in the backup original list table 14. Write (step S402).

  Subsequently, the medium name (D20030303) is written in the backup medium management table 15, and “unfinished” is written in the column of the falsification verification status (step 403), and the access restriction of the original access unit 11 is released (step S404). .

  Here, the falsification verification unit 17 is a file (document A as of February 3, 2003, which is a processing target of the falsification verification process stored in the original storage unit 12 based on the path stored in the backup original list table 14. Document B and Document C) are verified for falsification (step S405), and if no falsification is detected (Yes at step S406), the column of falsification verification status in the backup medium management table 15 (the column of falsification verification status in D20030303) “OK” is written in (step S407).

  When the falsification verification is completed for all the original data in the backup original list table 14 (Yes in step S410), the process ends. If the falsification verification has not been completed for all the original data in the backup original list table 14 (No in step S410), the processes in steps S405 to S409 are executed.

  If alteration of the original data is detected in the original data storage unit 12 (No at Step S406), “NG” is written in the falsification verification status column of the backup medium management table 15 (the falsification verification status column of D20030303). (Step S408), the system administrator is notified (Step S409). The “restoration process” for restoring the original data will be described later.

  As described above, access is suppressed only when the principle data is backed up from the original storage unit without performing a falsification verification process requiring a lot of time in advance, and the area of the original storage unit in which the original data is stored is controlled. Prioritize falsification verification, end falsification verification, and guarantee that no falsification has occurred, and access can be performed immediately.Therefore, without waiting for backup of original data and verification of falsification to complete, Access to the original storage unit can be received and processed. In addition, by performing backup processing in the background, it is possible to suppress access to the original storage unit during backup in a short time. If the access to the area included in the original data is written after the backup of the original storage unit has been completed, the falsification verification for that area is prioritized, and if there is no falsification In this area, the original access unit 11 verifies the alteration and writes the data that has not been altered. After that, the falsification verification is continued from the next data already completed in the original data. It can be concluded that there has been no falsification whether or not falsification verification has been performed on an area where falsification verification has been completed first. In addition, after the backup of the original storage unit is completed, if access to the area included in the original data that has been subjected to falsification verification is read, falsification verification is performed on that area preferentially and no falsification has occurred. Reads the original data area to the area via the original access unit 11. After that, the falsification verification is continued from the next data already completed in the original data. It can be concluded that there has been no falsification whether or not falsification verification has been performed on an area where falsification verification has been completed first. By doing so, it is possible to minimize the influence on business when the original data is backed up and falsified.

(2) Restoration Processing Next, “restoration processing” for restoring original data when tampering is detected in the “tamper verification processing” described above will be described. Here, (1) “Monthly backup extraction process” and (2) “Daily backup extraction process” performed prior to “Restore process” are described, and (3) “Restore process” is described. .

(1) Monthly backup extraction process FIG. 6 is a flowchart showing the procedure of the monthly backup extraction process. First, a record of “category = monthly” is searched from the backup management medium table 15, and No, generation, medium identification, serial number, and falsification verification status are extracted (step S601).

  Subsequently, a series of monthly backups are extracted from the search result (step S602). If all the falsification verification statuses are “OK” (Yes at step S603), the medium identification, serial number, and No (in the case of multiple backups) of the monthly backup are returned (step S604).

  If all the falsification verification statuses are not “OK” (No at Step S603), the process proceeds to the check of the next (one generation before) monthly backup (Step S605), and the processes of Steps S602 to 603 are executed. .

(2) Daily backup extraction processing FIG. 7 is a flowchart showing the procedure of daily backup extraction processing. First, a record of “classification = daily” and “No> base Tsukiji backup No” is searched from the backup medium management table 15 to extract the medium identification and serial number (step S701), and the extracted daily backup medium All identifications and serial numbers are returned (step S702).

(3) Restoration Process FIG. 8 is a flowchart showing the procedure of the restoration process. First, a monthly backup to be restored is extracted (step S801), and the extracted monthly backup is restored (step S802). Subsequently, a daily backup to be restored is extracted (step S803), and all the extracted daily backups are restored (step S804).

  As described above, the original data environment is restored by monthly backup, and the daily update of the original data is restored by daily backup, so if falsification is detected in the falsification verification process, The original data can be restored to the latest state.

(Other embodiments)
The embodiments of the present invention have been described so far, but the present invention is not limited to the above-described embodiments, and can be applied in various different embodiments within the scope of the technical idea described in the claims. It may be implemented.

  In addition, among the processes described in this embodiment, all or part of the processes described as being automatically performed can be manually performed, or the processes described as being manually performed All or a part of the above can be automatically performed by a known method. In addition, the processing procedure, control procedure, specific name, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.

  Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured.

  The falsification verification method (“falsification verification processing” and “restoration processing”) described in this embodiment can also be realized by executing a program prepared in advance. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

DESCRIPTION OF SYMBOLS 10 Tampering verification apparatus 11 Original access part 12 Original storage part 13 Backup medium 14 Backup original list table 15 Backup medium management table 16 Original backup part 17 Tampering verification part 18 Restoration part

Claims (4)

An originality verification apparatus that backs up original data that can be updated in business and is changed in time series to a predetermined medium, and verifies the originality of the original data,
Backup means for backing up data of the original data that has changed since the previous backup without verifying the originality;
A table for storing a list of the changed data backed up by the backup means;
Each time an access request for the original data is notified, a prior original that verifies in advance whether or not the originality of the changed data related to the access request is guaranteed. Sex verification means;
In the list of the data for the change stored by the table, information verifying the originality is verified and information indicating that the access is permitted and information indicating that the access is permitted are added. The originality verification means for providing the information that guarantees the originality and the information that permits access to the changed data of the original data whose originality has been verified by the originality verification means before the article. Originality verification device characterized by The predetermined medium stores the original data for each generation,
Restoration of restoring the original data based on the latest generation of the original data among the original data stored in the backup medium when it is verified that the originality is guaranteed by the originality verification means The originality verification apparatus according to claim 1, further comprising means. An originality verification program that backs up original data that can be updated in business and that is changed in time series to a predetermined medium, and that causes a computer to execute a method of verifying the originality of the original data,
The backup means that the computer has, a backup procedure that backs up the data of the original data that has changed since the previous backup without verifying the originality,
Each time the access request for the original data is notified , the prior originality verification means of the computer determines whether or not the originality of the changed data related to the access request is guaranteed. A prior originality verification procedure to verify data prior to verification;
The originality verification means of the computer has a guaranteed originality in the list of the changed data stored by the table storing the list of the changed data backed up by the backup means . For the data that has been verified, the information that guarantees the originality and the information that the access is permitted are given, and the original data for the change of the original data whose originality has been verified by the prior originality verification means An originality verification program that causes a computer to execute an originality verification procedure that provides information that guarantees authenticity and information that permits access. The predetermined medium stores the original data for each generation,
Restoring means for the computer has found if that originality is guaranteed is verified by the originality verification means, to the original data of the latest generation of the original data stored before Kinakadachi body The originality verification program according to claim 3, further causing a computer to execute a restoration procedure for restoring the original data based on the original data.

Images