JP6242019B2 - File management system - Google Patents

Description

  The present invention relates to a file management system for preventing an information leakage accident (information leakage accident) of a confidential file in which personal information and confidential information are recorded.

Recently, a large number of computers are interconnected via a network in a company and the like, and a confidential file containing personal information and confidential information can be easily copied to a large number of computers, which causes an accident such as information leakage.
In addition, taking-out by copying to a portable storage medium that is easy to handle, such as a USB memory or an SD card, is an information leakage accident caused by improper handling such as loss or theft of the portable storage medium. It is also a factor.

  And in order to prevent such information leakage accidents, in many systems so far, access to computers in the network and access to files are restricted by authority, etc., external storage devices attached to computer systems and portable Measures have been taken by limiting the use of storage media and the like only to those permitted (Patent Documents 1 and 2, etc.).

JP 2006-004189 A JP 2006-215922 A

However, the conventional measures have the following problems.
(1) It is difficult to reliably restrict access to a file containing personal information or confidential information from a large number of files, and even if it can be done reliably, the right holders of the file are conscious / unconscious. Therefore, leakage due to inappropriate handling cannot be prevented.
(2) In the past information leakage accidents, confidential files were properly managed in the management area, but this management was performed when the confidential file was taken out to the network outside the management area for work reasons. In some cases, the network outside the area was infected with a computer virus and leaked outside.
(3) It is difficult to quickly know which file was leaked when the possibility or fact of leakage was discovered, and even when an accident such as theft or loss of a portable storage medium occurs, the portable storage medium It is also difficult to know what kind of confidential files are stored.

And from this problem, the present inventor has derived the following problems.
(1) Restricting rights holders from taking out confidential files outside the management area (indicating any of folders / devices / computers / networks, etc.) may impair business operations and reduce convenience. Even if it is leaked without restriction, confidential files need to be protected.
(2) When a right holder takes a file (copy / move file, etc.), it is necessary to automatically (mechanically) determine whether the file is classified as a confidential file and to protect the confidential file appropriately. .
(3) In the unlikely event that a leak of a confidential file is detected, it is necessary that the leaked confidential file cannot be opened by a third party and that the confidential file itself can be deleted.
(4) To that end, it is necessary to be able to quickly understand what kind of confidential file is stored in a portable storage medium that can be used to determine what the leaked confidential file is or if it is stolen or lost.

  Therefore, the inventor of the present application does not impair the convenience of computers between computers and portable storage media, and automatically applies appropriate protection measures without being aware of confidential files. However, the present invention has been completed with the object of providing a file management system capable of handling a certain amount.

In order to achieve the above object, the present invention provides a file management that enables automation of appropriate protection measures for confidential files and certain measures after leakage without impairing the convenience of computers, network systems and portable storage media. The gist of the system is that it is composed of the following components (A) to (F).
(A) Capture file operations on a computer system.
(B) Detect whether the file corresponds to a confidential file.
(C) File operations within the designated management area and file protection measures as necessary.
(D) In the case of a confidential file, further advanced file protection measures are taken.
(E) Track and confirm the storage status of confidential files, etc. on portable storage media.
(F) Remotely control confidential files obtained outside the management area or by a third party.

  According to the present invention, appropriate protection measures are automatically applied without losing the convenience of computers and portable storage media over a network, and without being aware of confidential files. We were able to provide a file management system that could handle a certain level of response.

Explanatory drawing explaining the whole structure of this invention. Explanatory drawing explaining the file operation acquisition part of this invention. Explanatory drawing explaining the confidential file detection part and file encryption part of this invention. Explanatory drawing explaining the remote file control part of this invention.

  First, an embodiment of the present invention will be described.

The file management system according to the present invention (hereinafter “the present file management system”) has a file operation acquisition unit for acquiring a file operation performed on a computer terminal, and on the network as well as the file operation on the computer terminal. A file operation from another computer terminal to the computer terminal can also be captured and acquired as a log.
In addition, file operations on an external recording device or a portable storage medium attached to the computer terminal can be captured and acquired as a log.

  The file management system includes a confidential file detection unit that scans a character string in a file without using a target program that designates the file and browses or operates the file.

  In the scan of the confidential file detection unit, a plurality of types of detection dictionaries containing information to be detected and a plurality of types of exclusion dictionaries containing information to be excluded from detection are used, and the file is based on the detection results. It can be determined whether the file contains personal information or confidential information.

  It is possible to scan and detect which file on the computer terminal corresponds to the confidential file using this confidential file detection unit in advance, but when the file operation is performed in cooperation with the file operation acquisition unit It is possible to detect in real time whether the file in operation is a confidential file.

Confidential files that are typically handled within a company are typically on file servers that are accessible only by certain authorized persons or within a specific network (for example, a human resources network that is isolated from the corporate network). It often exists and is managed.
In this file management system, the management range of such computers and networks is distinguished as the management area.

When files are taken out from this management area, for example, (1) Copy or move confidential files from the shared folder on the accounting department dedicated server computer to another computer terminal via the network, (2) Personnel salary It is assumed that a confidential file may be copied or moved to an external storage device attached to the computer terminal or a connected portable storage medium on the computer terminal storing the data. Regarding file operations outside the area When the file operation acquisition unit described above captures file operations and determines whether the file being operated is a confidential file in cooperation with the confidential file detection unit Can take safeguards against the sensitive file Even if the file is taken out of the management area, it is possible to take protective measures even for the file taken out.

As an example, there are file management systems that do not allow file operations outside such a management area and inhibit file operations. In such cases, such as a computer, a network system, or a portable storage medium This is not always useful because it may impair convenience.
Even if it is prohibited, if a file operation is performed by an authorized person who is temporarily permitted due to business needs, a confidential file will be left outside the management area, and information leakage will occur. The dangers of can't be ignored.

  This file management system has a file encryption unit that encrypts a file as a protection measure for the file, and can encrypt the specified file.

The file encryption unit has, for example, the following types of encryption functions. These functions can be performed in combination.
(1) Encryption that requires an account and password for decryption (2) Encryption that requires only a password for decryption (3) Encryption requires specification of information required for the account and password each time Manual encryption (4) Automatic encryption that automatically encrypts everything according to preset content (5) Decryption period, number of decryption times of encrypted files, and file deletion when exceeded (6) Encryption Control over printing and saving when opened files are opened

This file management system uses this file encryption unit to encrypt the files in the management area in advance, or the file operation acquisition unit and the file encryption unit cooperate, or the file operation Encryption can be performed in cooperation with the acquisition unit, the confidential file detection unit, and the file encryption unit.
The file encryption unit can perform a high file protection measure only for the confidential file by combining the functions and performing high-strength encryption for the confidential file.

Up to this point, the file management system performs file management with the file operation acquisition unit, confidential file detection unit, and file encryption unit. The following is an example, but it is safe against such information leakage cases. Can provide file management.
(1) Leaks due to recognition failure of confidential files, etc., or leaks due to incorrect file operations, etc., since confidential files are stored outside the management area. Leakage due to loss, theft or improper operation of portable storage media by the right holder to handle (4) Leakage due to computer virus or external intrusion

  Next, in the unlikely event that a confidential file is leaked outside the management area or to a third party, the file management system will ensure that certain conditions are met so that the leaked confidential file can be obtained from the third party. There is a remote file controller to delete.

  The file encrypted by the confidential file encryption unit is encrypted together with the control program when it is encrypted, and when the encrypted file is opened, the control program prompts for information such as a password. If the input password or the like is communicated with a confidential file encryption control server on the Internet to obtain authentication permission, control information, and the like, and decryption is performed, the file is not decrypted.

If a confidential file is leaked, the operation manager of the file management system instructs the confidential file encryption control server on the Internet to remotely delete the confidential file.
As a result, when a third party who obtains a confidential file tries to open the confidential file, the control program in the encrypted file receives a remote deletion instruction through communication with the confidential file encryption control server on the Internet. Delete sensitive files including yourself.

There are various reasons why a leakage accident is detected, and the following cases can be considered.
(1) Detection of leaks from intrusion traces on internal audits and management logs, etc. (2) Detection of leaks from theft or loss of portable storage media, etc. (3) Detection of leaks from well-known third parties

  In this file management system, confidential files are normally encrypted, and even if they are leaked from encryption, they are automatically encrypted when moving files outside the management area. Even if it is not possible to open normally, the file is leaked, but the information is not leaked.

  When trying to open an encrypted confidential file, the control program in the encrypted file communicates with the confidential file encryption control server on the Internet. There is a decryption authentication log part that records whether or not it was opened.

  When a third party tries to open a leaked confidential file, it communicates with the confidential file encryption control server on the Internet to perform decryption, and therefore leaks such as consecutive password failures and authentication requests from outside the management area. Because it is possible to grasp the operation that attempted to open an inappropriate confidential file with the possibility of leakage, it was possible to quickly find out about the leakage, and in that case, the remote file control unit was used to instruct the deletion of the confidential file , Leaked confidential files can be deleted.

  In the case of theft or loss of portable storage media, etc., it is possible to grasp the lost confidential files stored in the portable storage media by log records captured by the file operation acquisition unit. The remote file control unit is used to instruct deletion of the confidential file, and the leaked confidential file can be deleted.

  As mentioned above, the details of the file management system have been described. This has made it possible to automate appropriate protective measures for confidential files and to take certain measures after leakage without compromising the convenience of computers, network systems and portable storage media. A file management system can be realized.

  Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is an explanatory diagram showing the overall structure of the present invention.
As shown in FIG. 1A, the present invention scans the inside of a file when copying or moving the file from a management area via a network, and automatically encrypts the file if it is a confidential file. To do.
As shown in FIG. 1B, the present invention scans a file in a management area automatically or periodically, and automatically encrypts a confidential file if it is a confidential file.
As shown in FIGS. 1C and 1D, the present invention is used when copying or moving a file into or out of a management area and when copying or moving a file to a portable storage medium or the like. If a file is scanned, it is automatically encrypted if it is a confidential file, and if it is an operation on a portable storage medium, stronger protection measures are taken.

  As shown in FIG. 1E, if a confidential file is leaked due to theft, loss, improper handling or internal crime of a portable storage medium containing the confidential file, or FIG. As shown in FIG. 1G, when a confidential file is leaked due to the influence of a computer virus or the like in or out of the management area, the present invention shows that the administrator When the decryption command of the file is instructed to delete the confidential file at the next decryption request, and a third party or the like who obtained the confidential file attempts to open the confidential file, as shown in FIG. It communicates with the confidential file encryption control server, receives the confidential file deletion command, and deletes itself.

FIG. 2 is an explanatory diagram illustrating the file operation acquisition unit of the present invention.
As shown in FIG. 2A, in the file operation acquisition unit, the file operation detection device detects an operation such as copying or moving a file on the same computer.
As illustrated in FIG. 2B, the file operation acquisition unit detects an operation such as copying or moving a file with a portable storage medium or the like connected to the computer.
As shown in FIG. 2C, the file operation acquisition unit performs operations such as copying or moving a file by file sharing via a network with a computer (PC-02) other than itself (PC-01). The operation detection device detects it.

FIG. 3 is an explanatory diagram illustrating the confidential file detection unit and the file encryption unit according to the present invention.
As illustrated in FIG. 3A, when the file operation acquisition device detects a file operation such as copying or moving in the file operation acquisition unit, as illustrated in FIG. The detected file information is notified to the confidential file detection device of the confidential file detection unit.
Then, as shown in FIGS. 3C and 3D, the confidential file detection unit reads the file notified by the confidential file detection device without using the program for the file, and the detection dictionary and It is determined whether the file corresponds to a confidential file using an exclusion dictionary.
As shown in FIG. 3E, when the confidential file detection device determines that the file corresponds to the confidential file, it notifies the file encryption device of the file encryption unit of the encryption of the file.
As shown in FIG. 3F, in the file encryption unit, the file encryption apparatus reads the encryption setting and performs the encryption behavior.
As illustrated in FIG. 3G, the file encryption apparatus notifies the confidential file encryption control server of the encryption information including the file information in accordance with the encryption setting.
As shown in FIG. 3H, the file encryption apparatus performs the file encryption according to the encryption setting, and arranges it in a copy or a transfer destination.

FIG. 4 is an explanatory diagram for explaining the remote file control unit of the present invention.
As shown in FIG. 4A, in the case of a self-decryption type encrypted file, the included control program device operates and confirms the decryption information and the like to the remote file control device of the confidential file encryption control server. However, in the case of a non-self-decryption type encrypted file, the decryption information and the like are confirmed with the remote file control device of the confidential file encryption control server using a separately prepared control program device.
As shown in FIG. 4B, in the remote file control unit, the remote file control device notifies the control information in response to the confirmation from the control program device. The control information may be information necessary for decoding or a command for remote deletion.
As shown in FIG. 4C, the control program device decrypts the file when the decryption is authenticated by a command from the remote file control device.
As shown in FIG. 4D, when it is necessary to remotely delete the encrypted confidential file, the administrator instructs the remote file control device of the confidential file encryption control server to delete the confidential file. do.
As shown in FIG. 4E, the control program device deletes the confidential file in response to an instruction from the remote file control device in response to the deletion of the confidential file.

  The present invention can be widely used not only for organizations that handle a lot of personal information and confidential information such as companies and government offices, but also for organizations and individuals that handle important information even if the number is not large.

Claims (5)

A file operation acquisition unit for acquiring file operations performed on a computer terminal;
Confidential file detection that specifies a file, scans the character string in the file without using the target program to view or operate the file, and determines whether the file contains confidential information or personal information And
When the file operation acquisition unit captures a file operation for a file operation outside the management area, and it is determined that the file being operated is a confidential file in cooperation with the confidential file detection unit. Includes a file encryption unit that takes protective measures against the confidential file,
A remote file control unit that deletes the leaked confidential file from the third party who has obtained the leaked confidential file when the confidential file is leaked outside the management area or to a third party ;
When there is a leakage of a confidential file, the remote file control unit instructs the confidential file encryption control server on the Internet to remotely delete the confidential file, and the third party who obtained the confidential file downloads the confidential file. A file management system wherein a control program in an encrypted file receives a remote deletion instruction by communication with a confidential file encryption control server on the Internet when an attempt is made to open, and deletes the confidential file .   2. The file management system according to claim 1, wherein the file operation acquisition unit captures and acquires a file operation to an external recording device or a portable storage medium attached to the computer terminal as a log.   The confidential file detection unit can scan and detect which file on the computer terminal corresponds to the confidential file in advance, but in cooperation with the file operation acquisition unit, the operation is performed when the file operation is performed. 3. The file management system according to claim 1, wherein it is possible to detect in real time whether the file in the file is a confidential file.   Even if the file encryption unit is not a confidential file, if the file is taken out of the management area, the file encryption unit will take protective measures even for the file to be taken out. 4. The file management system according to claim 1, wherein only a high file protection measure is performed. The file encryption unit is encrypted together with the control program when encrypting the file, and when performing the operation of opening the encrypted file, this control program requests only the password or the account and password information input, Communicates with the entered password only or account and password with the confidential file encryption control server on the Internet, obtains authorization permission and control information, decrypts and opens the file if permitted, but decrypts if not permitted 5. The file management system according to claim 1, wherein the file management system is not.

Images