JP5540978B2 - File storage device having at least a printer function - Google Patents

Description

  The present invention relates to a technology for storing confidential files in a company by using a device such as a printer or a multifunction peripheral.

  Preventing leakage of confidential information is an issue for companies, and it is technically difficult to manage each confidential file that is distributed and stored in the client. Increasingly, files are stored on a server installed in the company network, and confidential files are managed collectively on this server.

  When storing a confidential file stored in a client on a server installed in the company network, security can be improved by encrypting the confidential file. Even if it is encrypted, it is assumed that confidential information will be leaked, so in order to increase security, it is considered to outsource the storage of confidential files.

  As an invention related to the outsourcing of confidential file storage, Patent Document 1 discloses a data storage system for safely storing data or for easily grasping the amount and location of stored data. .

  The invention disclosed in Patent Document 1 is an invention for preventing data stored in a computer or the like from being lost due to an accident or disaster, but it can also be used for the purpose of outsourcing the storage of confidential files. Is possible.

  However, the invention disclosed in Patent Document 1 is an invention that is useful when the amount of data for storing a business in a company is large so that the business can be promoted even in a large-scale disaster. There are difficulties in realizing it.

  When considering the outsourcing of confidential file storage at the corporate office level, it is desirable to use the equipment used in the corporate office because it is inexpensive. As devices used in many corporate offices, there are printers and multifunction devices in which functions of a plurality of office machines such as copying and faxing are contained in one device in addition to the printer.

  As an invention for securely storing a confidential file in a multifunction device, for example, there is an invention disclosed in Patent Document 2, which is an invention for protecting a confidential file stored in a spool in the multifunction device. This does not apply to storing confidential files.

JP 2002-055886 A JP 2005-191980 A

  Therefore, the present invention stores confidential files, which are confidential data files, with a simple operation so as to prevent leakage of confidential information by internal parties of the company, including internal network administrators, and outside the internal parties of the company. An object of the present invention is to provide a device having at least a printer function.

  The present invention for solving the above-described problems is a file storage device having at least a printer function, and includes a first storage unit connected to a network, and a second storage unit not connected to the network. The user specifies that the data communication control means for controlling communication so as to permit only file transmission from the first storage means to the second storage means, and that the data file handled by the function is a confidential file. When the confidential file designating means for executing the function and an instruction to execute one of the functions are received, if the confidential file designating means designates the confidential file, the data communication is performed after or before executing the function. Via the control means, the data file stored in the first storage means is transmitted to the second storage means, and the data Wherein the second stored storing file storage unit in the storage means is provided with a file.

  Also, in the present invention, the second storage unit is configured by a storage installed in the file storage device, and the file storage unit stores the data file stored in the first storage unit in the first storage unit. It can be stored in the storage of two storage means.

  Further, in the present invention, the second storage means comprises a storage installed in the file storage device and a plurality of servers arranged on a network different from the network, and the data communication control means, Communication control is performed so that only file transmission from the first storage means to the second storage means and the server is permitted, and the file storage means includes a plurality of data files based on a predetermined division method. Management data including at least information for identifying the server storing the divided file is stored in the second storage unit after the divided file is distributed and stored in each of the servers. It can also be a means for storing.

  In addition, it is desirable for security that the file storage unit deletes the data file stored in the second storage unit from the first storage unit, and the file storage unit further includes the file storage unit. In terms of security, it is desirable to encrypt the data to be stored using the second storage means by using the encryption key held by.

  In the present invention, the confidential file specifying means may be a means for the user to instruct execution of the function in addition to specifying that the data file is a confidential file.

  The file storage device of the present invention acquires user data from a user who operates the file storage device, authenticates the user data obtained from the user, and authenticates the user so that the users of the file storage device can be restricted. It is desirable to provide user management means for controlling to receive an instruction to execute the function of the file storage device only when the file storage is successful.

  Further, if the user management means has a reader / writer that reads user data from an IC card possessed by the user, the convenience of the user increases. Further, if the reader / writer also has a human body communication unit, and the communication between the IC card possessed by the user and the reader / writer of the file storage device is performed by a technique such as an electric field propagating through the human body, the user can further be used. Increase convenience.

  As described above, according to the present invention, a confidential file, which is a confidential data file, can be prevented so as to prevent leakage of confidential information including internal managers of the company and outside the internal parties of the company. It is possible to provide a file storage device that can be stored by a simple operation and has at least a printer function.

The figure explaining the system by which the file storage apparatus which concerns on this embodiment was installed. The block diagram of the file storage apparatus in this embodiment. The figure explaining the file storage apparatus which concerns on 1st Embodiment. The flowchart which showed operation | movement of the file storage apparatus which concerns on 1st Embodiment. The flowchart which showed the procedure when performing the printer of a file storage apparatus. The flowchart which showed the procedure when performing the scanner of a file storage apparatus. The figure explaining the system by which the file storage apparatus which concerns on 2nd Embodiment is arrange | positioned. The block diagram of the file storage apparatus which concerns on 2nd Embodiment. The flowchart which showed operation | movement of the file storage apparatus which concerns on 2nd Embodiment. The figure explaining the file storage apparatus which concerns on 3rd Embodiment.

  From this, the embodiments of the present invention will be described to the extent that those skilled in the art of the present invention can understand the contents of the present invention and implement the present invention.

  FIG. 1 is a diagram for explaining a system in which a file storage device 1 according to this embodiment is installed. The system illustrated in FIG. 1 includes a user 8 in addition to the file storage device 1 having a data storage function. An Active Directory server 6b (hereinafter referred to as an AD server) that has an authentication infrastructure using an IC card 7 that is used, and is used to construct a network of one organization in a company, and a client 6a that is operated by a user 8 are connected to an internal LAN 5 The reader / writer 3a corresponding to the data communication with the IC card 7 possessed by the user 8 is connected to the client 6a operated by the user 8.

  The file storage device 1 shown in FIG. 1 is provided with a first storage means 10 for storing data files handled by the functions of the office equipment of the file storage device 1, such as a printer function, a copy function, a scanner function, and a facsimile function. The first zone 1a and the second zone 1b provided with the second storage means 11 used for storing the data file designated as confidential data are provided, and the first zone 1a and the second zone 1b are provided. In the meantime, data communication control means 12 for controlling data communication between the zones is provided so as to permit only data transmission from the first storage means 10 to the second storage means 11, and the first zone 1a. The first storage means 10 provided in the inside is connected to the in-house LAN 5, but the second storage means 11 provided in the second zone 1 b is connected to the in-house LAN 5. No.

  In the present invention, the second storage means 11 for use in storing a data file designated as a confidential file is provided in the file storage device 1 because the company can lease the file storage device 1. Generally, since the file storage device 1 is not owned by the company, a person who is not an internal party of the company in which the file storage device 1 is installed, for example, the manufacturer of the file storage device 1 or another company (for example, lease) This is because it is possible to set an employee of the company as an administrator of the second zone 1b in which the second storage means 11 is provided.

  It is common to store confidential files on a file server or the like connected to the corporate LAN 5, but if confidential files are stored on the file server, the confidential files will be leaked if the administrator of the corporate LAN 5 performs an illegal act. However, if a person who is not an internal party of the company in which the file storage device 1 is installed can be set as an administrator of the second zone 1b, even the administrator of the in-house LAN 5 is arranged in the second zone 1b. Since the confidential file stored in the storage means 11 cannot be accessed, it is possible to prevent leakage of the confidential file by internal parties of the company.

  Even if a person who is not an internal party of the company in which the file storage device 1 is installed is set as an administrator of the second zone 1b of the file storage device 1, the file storage device 1 is used in a company that requires high security. Since it is common to manage entry / exit to the room where the file storage is installed, the administrator who is not an internal party of the company cannot enter or leave the room where the file storage device 1 is installed without permission. Thus, leakage of confidential files by an administrator who is not an internal party of the company who has entered the room where the file storage device 1 is installed can be prevented.

  From here, the file storage apparatus 1 in this embodiment is demonstrated. FIG. 2 is a block diagram of the file storage device 1 in the present embodiment. In the block diagram shown in FIG. 2, only functions necessary for explaining the present invention are shown, and functions of office equipment such as a printer function and a scanner function are not shown.

  As described above, the first zone 1a of the file storage device 1 according to the present embodiment is handled by the functions of the file storage device 1 in addition to means for executing functions of a plurality of office equipment such as a printer function and a scanner function. The user designates that the data file handled by the function of the first storage means 10 for storing the data file to be stored, the network interface 16 for network communication with the in-house LAN 5 and the file storage device 1 is a confidential file. When the confidential file designation means 13 and the execution instruction of one function are received, if the data file handled by the function is designated as the confidential file by the confidential file designation means 13, the function is executed or executed. Before the data is stored in the first storage means 10 using the data communication control means 12 Transmits the data file that is to the second storage means 11, the data file is the second storage means 11 stored in the storing file storage unit 14 is provided.

  Furthermore, in the second zone 1b, a second storage means 11 for storing a data file designated by the user as a confidential file is provided, and the first zone 1a and the second zone 1b are provided. In the meantime, data communication control means 12 is provided for performing communication control so that only file transmission from the first storage means 10 to the second storage means 101 is permitted.

  As shown in FIG. 2, since the first storage means 10 provided in the first zone 1a is connected to the in-house LAN 5, it can be accessed from the in-house LAN 5, but the second zone 1b Since the provided second storage means 11 is not connected to the in-house LAN 5 and data communication is controlled in one direction by the data communication control means 12, even the administrator of the first zone 1 a can use the LAN 5. The data file stored in the second storage means 11 cannot be browsed via the.

  The file storage unit 14 of the file storage device 1 is a unit realized by a computer and a computer program. After the data file stored in the first storage unit 10 is stored using the second storage unit 11, It is desirable for security to delete the data file stored in the second storage means 11 from the first storage means 10, and the file storage means is possessed by the file storage means 14 in order to further increase security. It is desirable in terms of security to encrypt the data file stored in the second storage means 11 using the encryption key that is being used.

  Further, the first storage means 10 and the second storage means 11 of the file storage device 1 are means realized by using one or a plurality of storages. The second storage unit 11 is configured by a plurality of servers arranged on a network different from the in-house LAN 5 in addition to one or a plurality of storages, and the file storage unit 14 of the file storage device 1 Data files can be stored separately on the server.

  Further, the confidential file designation means 13 of the file storage device 1 can be realized by a physical button or a software button on the touch panel, and the confidential file designation is designated as a button for the user to give an instruction to execute the function 1 of the file storage device. The function of the means 13 can be added.

  The file storage device 1 of the present invention acquires user data from a user who operates the file storage device 1 and authenticates the user data obtained from the user so that the users of the file storage device 1 can be restricted. It is desirable to provide user management means 15 that accepts an instruction to execute the function of the file storage device 1 only when the authentication is successful.

  Further, if the user management means 15 of the file storage device 1 of the present invention has a reader / writer that reads user data from an IC card possessed by the user in order to perform user authentication, convenience for the user increases. Further, if the reader / writer also has a human body communication unit and the communication between the IC card possessed by the user and the reader / writer of the file storage device is performed by a technique such as an electric field propagating through the human body, the convenience of the user is further increased. Increase.

(First embodiment)
From here, the 1st Embodiment of this invention is described. FIG. 3 is a diagram for explaining the file storage device 2 according to the first embodiment. In the first embodiment, the storage 200 used as the first storage unit 10 and the second storage unit 11 are used. In this embodiment, the storage 210 is separated.

  As shown in FIG. 3, the first zone 2a of the file storage device 2 of the first embodiment is provided with a first computer board 20 on which a CPU, a RAM, a ROM and the like are mounted. The computer board 20 stores a storage 201 in which a first operating system (OS) for operating the first computer board 20 is installed, and data files handled by the functions of the file storage device 2. A first storage 200, a touch panel 203 as a user interface, an R / W 204 (R / W: Reader / Writer) for data communication with an IC card 7 possessed by the user 8, and a LAN interface 207 for connection to the in-house LAN 5. As a device that is connected and implements the function of the file storage device 2, a printer 205 and A scanner 206 is illustrated.

  The touch panel 203 provided in the file storage device 2 has a plurality of operation screens, and each operation screen is provided with various buttons for the user 8 to operate the file storage device 2. The storage button 202 functioning as the confidential file specifying means 13 for the user 8 to specify that the data file is a confidential file is included.

  When the save button 202 is pressed, data indicating that the save button 202 has been pressed is written into the RAM of the first computer board 20, and a series of processes relating to the function of the file storage device 2 instructed by the user 8 is executed. Holds until finished.

  In the first embodiment, a button that functions as the confidential file specifying means 13 for the user 8 to specify that the data file handled by the function of the file storage device 2 is a confidential file is displayed on the touch panel 203. Although it is a software button, it can also be a physical button.

  The R / W 204 that performs data communication with the IC card 7 possessed by the user 8 corresponds to the communication method of the IC card 7 possessed by the user 8, and if the IC card 7 is a non-contact type, the R / W 204 is also a non-contact type. .

  In addition, the user 8 is allowed to have a card case 7a having a human body communication function and an R / W function, and the R / W 204 of the file storage device 2 is provided with a human body communication function, so that the human body by a method such as an electric field propagating through the human body If the communication can be performed between the R / W 204 of the file storage device 2 and the card case 7a by communication, user convenience can be improved.

  The first computer board 20 in the first zone 2a is mounted on the file storage device 2 in order to realize the functions of office equipment such as a printer function and a scanner function, and operates the first computer board 20 The first OS executes a function of the file storage device 2 that the user 8 has instructed to execute, such as a computer program for changing an operation screen displayed on the touch panel 203 according to an operation of the user 8, a printer 205, and a scanner 206. In addition to the computer program, a data file handled by the function of the file storage device 2 such as a print file sent via the in-house LAN 5 and output by the printer 205 or a scanner file read by the scanner 206 is stored in the first storage 200. Stored computer programs and file storage If the data file handled by the function of the device 2 is designated as a confidential file by the save button 103, the first storage 200 is used by using the data communication control device 22 after or before executing the function. From the IC card 7 possessed by the user 8 who operates the file storage device 2, a computer program for realizing a part of the function of the file storage means 14 for transmitting the data file stored in the second storage 210. / W204 stores a computer program that functions as user management means 15 that controls to authenticate user data read by / W204 and accepts an instruction to execute a function of file storage device 2 only when the authentication is successful.

  The second zone 2b of the file storage device 2 of the first embodiment is provided with a second computer board 21 on which a CPU, RAM, ROM, etc. are mounted. The second computer board 21 is operated, a storage 211 in which a second OS different from the first OS is installed, and a second storage 210 that stores a data file designated by the user 8 as a confidential file. In addition, an interface for connecting a keyboard 212, an IC card reader / writer 213, a display 214, and the like is provided so that a data file stored in the second storage 210 can be browsed.

  The second computer board 21 mounted on the file storage device 2 of the first embodiment is mounted on the file storage device 2 to store the confidential file, and the second OS that operates the second computer board 21. A computer program for realizing a part of the function of the file storage means 14 for storing the data file sent from the first computer board 20 in the second storage 210 is stored.

  Since the first zone 2a and the second zone 2b of the file storage device 2 are different from each other, the second zone 2b of the file storage device 2 is physically isolated from the first zone 2a. In order to physically isolate the first zone 2a and the second zone 2b, the second zone 2b is covered on all sides with a metal panel.

  One panel covering the second zone 2b serves as a door, and the panel serving as a door is provided with a physical key 215, and the physical key 215 is unlocked to function as a door. When the panel that fulfills the above is opened, the keyboard 212, the reader / writer 213 for the IC card, the display 214, and the like can be connected to the second computer board 21.

  The data communication control device 22 functioning as the data communication control means 12 that performs communication control so as to permit only file transmission from the first storage 200 to the second storage 210 is the first computer in the first embodiment. The first I / O controller 220 connected to the board 20 and the second I / O controller 221 connected to the second computer board 21 are at least configured. The data file transmitted by the computer board 20 is controlled to be output to the second I / O controller 221, and the second I / O controller 221 outputs the data output from the first I / O controller 220. The file is controlled to be input to the second computer board 21.

  From here, in order to explain the operation of the first computer board 20 arranged in the first zone 2a and the second computer board 21 arranged in the second zone 2b, the second storage 210 is kept secret. The operation of the file storage device 2 when storing a file will be described.

  FIG. 4 is a flowchart showing the operation of the file storage device 2 according to the first embodiment.

  When the user 8 uses one of a plurality of functions provided in the file storage device 2 such as a printer function, a copy function, a scanner function, and a facsimile function, the R / W 204 of the first zone 2a of the file storage device 2 is used. Periodically performs the operation of detecting the IC card 7, and when the user 8 using the file storage device 2 performs the operation of causing the R / W 204 to recognize the IC card 7, the R / W 204 in the first zone 2a An operation of detecting the card 7 and reading the user data stored in the detected IC card 7 is performed (S1).

  When the R / W 204 in the first zone 2a reads the user data stored in the IC card 7 possessed by the user 8, the first computer board 20 in the first zone 2a is transferred to the first computer board 20. The user data is authenticated by collating it with the stored reference data (S2). If this authentication fails, this procedure is terminated.

  The first computer board 20 in the first zone 2a permits the use of the function of the file storage device 2 when the user data stored in the IC card 7 possessed by the user 8 is successfully authenticated (S3). .

  When the user 8 uses the file storage device 2, the file storage device 2 receives an instruction to execute the function of the file storage device 2 used by the user 8 (S4). In the first embodiment, an instruction to execute the function of the file storage device 2 used by the user 8 is made by selecting on the operation screen displayed on the touch panel 203 of the file storage device 2.

  When the file storage device 2 receives an execution instruction for the function used by the user 8, the first computer board 20 in the first zone 2a executes the function of the file storage device 2 that has received the execution instruction (S5). When this function is executed, it is confirmed whether or not the user 8 has pressed the storage button 202 when the user 8 instructs the execution of the function of the file storage device 2 by checking the contents of the RAM of the first computer board 20. (S6) When it can be determined that the user 8 has not pressed the save button 202, this procedure ends.

  When the first computer board 20 in the first zone 2a can determine that the user 8 has pressed the save button 202 when instructing the execution of the function of the file storage device 2, the first computer board 20 Processing is performed to output the data file handled by the function to the first I / O controller 220 of the data communication control device 22 (S7). When the first computer board 20 of the file storage device 2 outputs the data file to the first I / O controller 220 of the data communication control device 22, the data file is deleted from the first storage 200. Processing is executed (S8).

  The second computer board 21 in the second zone 2b receives a data file from the second I / O controller 221 of the data communication control device 22 and receives a data file from the second I / O controller 221. The stored data file is stored in the second storage 210, and this procedure ends.

  Note that the second computer board 21 may encrypt the data file when storing the data file in the second storage 210 in order to improve security. It is desirable to use a public key cryptosystem for encrypting data files stored in the second storage 210. When using a public key cryptosystem for encrypting data files stored in the second storage 210, The secret key of the public key cryptosystem is stored in the IC card held by the administrator of zone 2b of No. 2, and the public key that is paired with the secret key is stored in the second computer board 21, and the role of the door is It is preferable that the ciphertext of the data file stored in the second storage 210 can be decrypted using an IC card held by the administrator of the second zone 2b when the panel to fulfill is opened.

  From here, as a specific example, a case where the printer 205 and the scanner 206 are executed as functions of the file storage device 2 will be described.

  FIG. 5 is a flowchart showing a procedure when the printer 205 of the file storage device 2 is executed. When the user 8 uses the printer 205 of the file storage device 2, the user 8 logs in to the in-house LAN 5 by operating the client 6a (S10).

  In order to log in to the in-house LAN 5, it is necessary to succeed in user authentication using the IC card 7 possessed by the user 8. When the user authentication executed by the AD server 6 b is successful, the user 8 passes through the in-house LAN 5. The file storage device 2 can be accessed from the operating client 6a.

  After performing user authentication using the IC card 7 and logging in to the in-house LAN 5, the user 8 operates the client 6a to store the data file stored in the client 6a and printed by the file storage device 2 to the file storage device 2. When transmitted (S11), the first computer board 20 provided in the first zone 2a of the file storage device 2 stores the data file in the first storage 200 (S12).

  When the user 8 uses the printer 205, which is one of the functions of the file storage device 2, the user 8 performs an operation for causing the R / W 105 to recognize the IC card 7 and performs user authentication on the file storage device 2. (S13) After the user 8 operates the touch panel 203 of the file storage device 2 and selects the data file to be output to the printing paper from the data files transmitted by the user 8 to the file storage device 2, The touch panel 203 is operated to instruct execution of the printer 205 (S14).

  The save button 202 functioning as the confidential file specifying means 13 for the user 8 to specify that the data file handled by the function of the file storage device 2 is a confidential file is displayed on the operation screen for selecting the data file to be output on the printing paper. Preferably, the user 8 performs an operation of selecting a data file to be output to the printing paper and an operation of pressing the save button 202 when the data file to be output to the printing paper is stored in the second storage 210. Become.

  When the first computer board 20 in the first zone 2a receives an execution instruction to print the data file selected by the user 8, the first computer board 20 operates the printer 205 to output the data file selected by the user 8 to the printing paper. After executing the printing process (S15), when the user 8 instructs the execution of the printer 205, it is confirmed whether or not the storage button 202 displayed on the operation screen of the touch panel 203 has been pressed (S16), and the user 8 presses the storage button 202. If it can be determined that the button has not been pressed, the procedure ends.

  In addition, the first computer board 20 of the file storage device 2 determines the first storage for the first I / O controller 220 of the data communication control device 22 when it can be determined that the user 8 has pressed the storage button 202. After the data file output to the printing paper is output from the data files stored in 200 (S17), the data file is deleted from the first storage 200 (S18).

  When a data file is input from the second I / O controller 221 of the data communication control device 22, the second computer board 21 in the second zone 2b receives the data input from the second I / O controller 221. The file is stored in the second storage 210 (S19), and this procedure ends.

  FIG. 6 is a flowchart showing a procedure when the scanner 206 of the file storage device 2 is executed. When the user 8 uses the scanner 206, which is one of the functions of the file storage device 2, the user 8 causes the file storage device 2 to perform user authentication (S20), and then the user 8 The paper to be scanned is loaded on the stacker, and the touch panel 203 is operated to instruct execution of the scanner 206 (S21).

  When the user 8 uses the scanner 206 of the file storage device 2, a storage button 202 that functions as the confidential file specifying means 13 for the user 8 to specify that the data file handled by the function of the file storage device 2 is a confidential file. Is preferably displayed on the operation screen for the scanner 206. When the user 8 stores the data file obtained by scanning the paper in the second storage 210, the storage button 202 is displayed before the execution instruction of the scanner 206 is issued. The operation will be performed.

  When the first computer board 20 of the file storage device 2 receives the execution instruction of the scanner 206, the first computer board 20 is obtained by feeding the sheets stacked on the stacker of the scanner 206 one by one and scanning the surface of the paper. The data file is stored in the first storage 200 (S22).

  When the first computer board 20 of the file storage device 2 executes the scanner 206, the user 8 confirms the storage button 202 when the user 8 instructs the execution of the scanner 206 (S23), and the storage button 202 is not pressed. This procedure ends.

  In addition, the first computer board 20 of the file storage device 2 determines the first storage for the first I / O controller 220 of the data communication control device 22 when it can be determined that the user 8 has pressed the storage button 202. After the data file obtained by the scanner 206 is output from the data files stored in 200 (S24), the data file is deleted from the first storage 200 (S25).

  When a data file is input from the second I / O controller 221 of the data communication control device 22, the second computer board 21 in the second zone 2b receives the data input from the second I / O controller 221. The file is stored in the second storage 210 (S26), and this procedure ends.

  In the above-described embodiment, the data file stored in the first storage 200 is transferred to the second storage 210 as one of functions that the user 8 can instruct the file storage device 2 to execute, such as the printer 205 and the scanner 206. It is also possible to provide a function only for storage. When executing the function of only storing the data file stored in the first storage 200 in the second storage 210, the first computer board 20 does not execute other functions such as a print function, The data file selected by the user 8 is stored in the second storage 210 via the communication control device 22.

  The present invention is not limited to the first embodiment described so far, and various modifications and changes can be made.

(Second Embodiment)
From here, the 1st Embodiment of this invention is described. FIG. 7 is a diagram for explaining a system in which the file storage device 3 according to the second embodiment is arranged. In the second embodiment, the second storage means 11 according to the present invention is connected to the second zone 3b. The second storage 310 provided in the network and the in-house LAN 5 are configured by a plurality of servers 35 arranged on the network 5a independent of each other. In FIG. 7, the same components as those in FIG.

  The system shown in FIG. 7 has an authentication infrastructure using an IC card 7 possessed by the user 8 in addition to the file storage device 3 having the function of distributing and storing data files, and is a network of one organization in the company. The client 6a to which the reader / writer 3a corresponding to the IC card 7 possessed by the user 8 is connected to the in-house LAN 5 and further connected to a plurality of servers 35 via the VPN device 33. However, it is connected to a network 5 a that is independent of the in-house LAN 5.

  The file storage device 3 illustrated in FIG. 7 is provided with a first storage 300 for storing data files handled by functions of the general-purpose file storage device 3 such as a printer function, a copy function, a scanner function, and a facsimile function. There are provided a first zone 3a and a second zone 3b provided with a second storage 310 used for storing a data file designated as confidential data. The first zone 3a and the second zone Between 3b, a data communication control device 32 for controlling data communication between the zones is provided so as to allow only data transmission from the first zone 3a to the second zone 3b.

  By constructing a secure communication path using encryption technology between the VPN device 34 and the VPN device 33 by the functions of the VPN device 34 of the file storage device 3 and the VPN device 33 on the network 5a, a plurality of servers 35 The installed zone can be treated as the second zone 3b. In FIG. 7, the main body of the data file designated as the confidential file is distributed and stored in a plurality of servers 35, and includes the addresses of the distributed storage destinations. Only the management data to be stored is stored in the second storage 310 of the second zone 21.

  The file storage device 3 distributes and stores the data files in the plurality of servers 35 because the second storage 310 is stored in the storage device capacity of the second storage 310 because it is incorporated in the file storage device 3. This is because there is a limit and it is difficult to store a huge data file in the second storage 310.

  In order to be able to store a huge amount of data files, the file storage device 3 according to the second embodiment distributes and stores the main body of the data file in a plurality of servers 35 on the network 5a, and manages the distributed storage destinations. By storing only data in the second storage 310 of the file storage device 3, the storage capacity of the data file is increased while maintaining the confidentiality of the data file designated as the confidential file.

  As described above, even if a data file designated as a confidential file is distributedly stored, the distributed storage destination (for example, server address) of the data file is not an internal party of the company in which the file storage device 3 is installed. If it is stored in the second storage 310 with a person as an administrator, the internal parties of the company cannot obtain the data file from the server 35, so that leakage of confidential files by internal parties of the company is prevented. it can.

  From here, the file storage apparatus 3 which concerns on 2nd Embodiment is demonstrated. FIG. 8 is a block diagram of the file storage device 3 according to the second embodiment. In the block diagram shown in FIG. 8, only functions necessary for explaining the present invention are shown.

  As described above, the file storage device 3 according to the present embodiment includes the first zone 20 provided with the first storage 300 for storing data files handled by the functions of the file storage device 3, and confidential data. A second zone 21 provided with a second storage 310 for storing management data when the specified data file is distributed and stored is provided, and the administrator of the first zone 20 The administrator of the second zone 21 who is an internal party of the company to be installed is a person other than the internal party of the company in which the file storage device 3 is installed (for example, the manufacturer of the file storage device 3).

  As shown in FIG. 8, the first zone 20 of the file storage device 3 of the present embodiment is provided with a first computer board 30 on which a CPU, RAM, ROM, and the like are mounted. 30 includes a storage 301 in which a first OS for operating the first computer board 30 is installed, the first storage 300 described above, a touch panel 303 as a user interface, and an IC possessed by the user 8. An R / W 304 for data communication with the card 7 and a LAN interface 307 for connecting to the in-house LAN 5 are connected.

  The touch panel 303 provided in the file storage device 3 has a plurality of operation screens, and each operation screen is provided with various buttons for the user 8 to operate the file storage device 3. Similarly to the first embodiment, a storage button 302 that functions as the confidential file specifying means 13 for the user 8 to specify that the data file is a confidential file is included.

  In the second embodiment, user authentication is required when using the function of the file storage device 3, but the contents of the user authentication are the same as those in the above-described embodiment. Omit the explanation.

  The first computer board 30 in the first zone 3a is mounted on the file storage device 3 in order to realize the functions of office equipment such as a printer function and a scanner function, and operates the first computer board 30. The first OS executes a function of the file storage device 3 instructed by the user 8 such as a computer program for changing an operation screen displayed on the touch panel 303 according to an operation of the user 8, a printer 305, and a scanner 306. In addition to the computer program, a data file handled by the function of the file storage device 3 such as a print file sent via the in-house LAN 5 and output by the printer 305 or a scanner file read by the scanner 306 is stored in the first storage 300. Computer program to store, save button 10 3 is designated as a confidential file, the main body of the data file stored in the first storage 300 is connected to a plurality of servers via the data communication control device after or before executing the function. A computer program that realizes a part of the function of the file storage unit 14 that stores and stores the management data in the second storage 310 is stored.

  Further, the second zone 3b of the file storage device 3 of the present embodiment is provided with a second computer board 31 on which a CPU, RAM, ROM and the like are mounted. The second storage 311 in which the second OS for operating the computer board 31 is installed is connected, and the data file can be restored using the management data stored in the second storage 310. In addition, an interface for connecting a keyboard 312, an IC card reader / writer 313, a display 314, and the like is provided.

  The second computer board 31 mounted on the file storage device 3 is mounted on the file storage device 3 in order to realize the confidential file storage function, and the second OS that operates the second computer board 31 includes: A computer program for realizing a part of the function of the file storage means 14 for storing the management data sent from the first computer board 30 in the second storage 310, and the management data stored in the second storage 310 are used. Thus, a computer program or the like for acquiring the divided file of the data file from the server 35 and restoring it to one data file is stored.

  The second storage 310 arranged in the second zone 3b of the file storage device 3 stores management data when data files that are confidential files are distributed and stored. In addition to the data communication control device 32, the second zone 3b is preferably physically isolated from the first zone 3a. In order to physically isolate the first zone 3a and the second zone 3b, The second zone 3b is covered on all sides with a metal panel.

  One panel covering the second zone 3b serves as a door, and the panel serving as the door is provided with a physical key 315. The physical key 315 is unlocked, and the role of the door When the panel that fulfills the above is opened, the keyboard 312, the R / W 313 for IC card, the display 314, and the like can be connected to the second computer board 31.

  The data communication control device 32 according to the second embodiment is connected to a plurality of servers 35 arranged on the network 5a via the VPN device 33, and the first storage 300 to the second storage 310 and each server. In the second embodiment, the data communication control device 32 can be realized by using a commercially available firewall device. The device functions as a means for controlling communication so that only file transmission to 35 is permitted. In a commercially available firewall device, the network administrator can change the communication control setting. However, when the network administrator of the first zone 3a changes the setting of the data communication control device 32 without permission. Since a problem occurs, it is desirable that the communication control setting of the data communication control device 32 can be performed only by the network administrator of the second zone 3b.

  From here, in order to explain the operation of the first computer board 30 arranged in the first zone 3a and the second computer board 31 arranged in the second zone 3b, data designated as a confidential file is used. The operation of the file storage device 3 when files are distributed and stored will be described.

  FIG. 9 is a flowchart showing the operation of the file storage device 3 according to the second embodiment.

  When the user 8 uses one of a plurality of functions provided in the file storage device 3 such as a printer function, a copy function, a scanner function, and a facsimile function, as in the above-described embodiment, the IC possessed by the user 8 After the user authentication using the card 7 is required and the user authentication is successful (S30), the file storage device 3 receives an instruction to execute the function of the file storage device 3 used by the user 8 who has succeeded in the user authentication. (S31).

  When the file storage device 3 receives an execution instruction for the function used by the user 8, the first computer board 30 in the first zone 20 executes the function of the file storage device 3 that has received the execution instruction (S32). When this function is executed, it is confirmed whether or not the user 8 has pressed the storage button 302 when the user 8 instructs execution of the function of the file storage device 3 by checking the contents of the RAM of the first computer board 30. (S33) If it can be determined that the user 8 has not pressed the save button 302, the procedure is terminated.

  In addition, when the first computer board 30 in the first zone 20 can determine that the user 8 has pressed the storage button 302 when instructing the execution of the function of the file storage device 3, the first computer board 30 After the data file is distributed and stored (S36 to S38), a process for deleting the data file from the first storage 300 is executed (S39), and this procedure ends.

  For the distributed storage of the main body of the data file, the invention disclosed in WO 01/046808 already filed by the present applicant can be used. When the first computer board 30 stores the data file in a distributed manner, first, the distributed storage is performed. The main body of the data file to be processed is divided into a plurality of divided files based on a predetermined dividing method (S36), and the divided files are sent to the plurality of servers 35 connected to the network 5a via the data communication control device 32. After transmitting and distributing the divided files to the plurality of servers 35 (S37), the management data including at least information for identifying the server 35 storing the divided files is sent via the data communication control device 32. The management data is stored in the second storage 310 (S38).

(Third embodiment)
From here, the 3rd Embodiment of this invention is described. In the third embodiment, the data communication control unit 12 according to the present invention is realized by using hardware. However, in the third embodiment, the data communication control unit 12 according to the present invention is realized by software. Even if the data communication control means 12 according to the present invention is realized by software, the basic operation is almost the same as that of the first embodiment, and thus detailed description thereof is omitted.

  FIG. 10 is a diagram illustrating the file storage device 4 according to the third embodiment. In FIG. 10, components other than the file storage device 4 are denoted by the same reference numerals as in FIG.

  As shown in FIG. 10, the file storage device 4 of the third embodiment is provided with a computer board 40 on which a CPU, a RAM, a ROM, and the like are mounted. The computer board 40 includes the office of the file storage device 4. A storage 401a in which a first OS that is operated when using the function of the device is installed, a storage 401b in which a second OS that is operated when browsing a data file designated as a confidential file, and a printer 405, data file handled by the function of the office equipment of the file storage device 4 such as the scanner 406, a storage 400 storing a data file designated as a confidential file, a touch panel 402 as a user interface, and an IC card possessed by the user 8 R / W for data communication with 7 404 and a LAN interface 407 for connecting to the in-house LAN 5 are connected.

  The file storage device 4 illustrated in FIG. 10 is divided into software, so that the first storage 400a that stores data files handled by the functions of the general-purpose file storage device 4 such as the printer 405 and the scanner 406 is provided. , A second storage 400b used to store a data file designated as confidential data is provided in the storage 400. In the second embodiment, a second OS is installed in the first zone 4a. A second zone 4b included at least from the storage 401b and the second storage 400a is provided.

  In the third embodiment, an operation screen displayed on the touch panel 402 in accordance with the operation of the user 8 is displayed on the first OS that operates when the functions of the office equipment of the file storage device 4 such as the printer 405 and the scanner 406 are used. In addition to the computer program to be changed and the computer program for executing the functions of the office equipment that the user 8 has instructed to execute, such as the printer 405 and the scanner 406, the print file sent via the in-house LAN 5 and output by the printer 405 When a data file handled by the function of the office device such as a scanner file read by the scanner 406 is designated as a confidential file by the storage button 403, a computer program stored in the first storage 400a, after executing the function Or the first before A computer program functioning as file archiving means 14 for transmitting a data file stored in the storage 400a to the second storage 400b and storing and storing the data file in the second storage 400b; A computer program that functions as data communication control means 12 for controlling communication so as to permit only file transmission to the storage 400b is stored.

  Also in the third embodiment, since the first storage 400a is connected to the in-house LAN 5, it can be accessed from the in-house LAN 5, but the second storage 400b is data provided in the first OS. Since the data communication is controlled in one direction by the function of the communication control means 12, even the administrator of the first zone 1a can browse the data file stored in the second storage 400b via the LAN 5. I can't.

  The second OS stores a computer program for displaying a data file stored in the second storage 400b on a display device such as the touch panel 402, and the second OS manages the second zone 4b. It should be possible to start it only when the user authentication of the user is successful.

1, 2, 3, 4 File storage device 1a, 2a, 3a, 4a First zone 1b, 2b, 3b, 4b Second zone 20, 30 First computer board 21, 31 Second computer board 10 First 1 storage means 11 second storage means 12 data communication control means 13 confidential file designation means 14 file storage means 15 user management means 16 network interface 200,300 first storage 210,310 second storage 202,302 save button 203,303 Touch panel 204,304 R / W
205 305 Printer 206, 306 Scanner 207.307 LAN interface 22, 32 Data communication control device 33, 34 VPN device 35 Server 5 In-house LAN
5a Network different from internal LAN 6a Client 6b AD server 7 IC card 8 User

Claims (8)

  A file storage device having at least a printer function, a first storage means connected to a network, a second storage means not connected to the network, and the first storage means to the first storage means. A data communication control means for controlling communication so as to allow only file transmission to the storage means, a confidential file specifying means for the user to specify that the data file handled by the function is a confidential file, In response to an instruction to execute one of the functions, if the confidential file designating unit designates a confidential file, the first communication function is performed via the data communication control unit after or before the function is performed. The data file stored in the storage means is transmitted to the second storage means, and the data file is stored in the second storage means. File storage apparatus comprising the to store the file storage unit.   The storage provided in the file storage apparatus constitutes the second storage means, and the file storage means stores the data file stored in the first storage means in the second storage means. The file storage device according to claim 1, wherein the file storage device is a storage unit.   The second storage means comprises a storage installed in the file storage device and a plurality of servers arranged on a network different from the network, and the data communication control means and the first storage means The second storage means and means for controlling communication so as to permit only file transmission to the server, and the file storage means divides the data file into a plurality of divided files based on a predetermined division method. The second storage unit stores management data including at least information for identifying the server storing the divided file after the divided files are distributed and stored in the servers. The file storage device according to claim 1, wherein:   4. The file according to claim 1, wherein the file storage unit deletes the data file stored in the second storage unit from the first storage unit. 5. Storage device.   The file storage unit encrypts data stored using the second storage unit by using an encryption key held by the file storage unit. 5. The file storage device according to any one of 4 above.   User data is acquired from the user operating the file storage device so that the users of the file storage device can be restricted, the user data obtained from the user is authenticated, and only when the authentication is successful, the file storage device 6. The file storage device according to claim 1, further comprising user management means for controlling to receive a function execution instruction.   7. The file storage device according to claim 6, wherein the user management means includes a reader / writer that reads user data from an IC card possessed by the user and authenticates the user data. 8. The reader / writer includes a human body communication unit, and communication between an IC card possessed by a user and the reader / writer of the file storage device is performed by a technique such as an electric field propagating through a human body. The file storage device described in 1.

Images