JP7099174B2 - Information processing equipment and information processing method, and distributed processing system - Google Patents

Description

The present invention relates to an information processing apparatus, an information processing method, and a distributed processing system.

A load balancing technique using an edge computer has been proposed as a technique for preventing a load from being applied to the cloud server due to the concentration of access to the data stored in the cloud server. This technology realizes load balancing by placing a cache of data stored in the cloud on the edge computer and letting terminals near the edge computer use the cache of the edge computer. be.

In this case, since the edge computer exists as a housing and may be placed in a room or the like where anyone can enter and exit, there is a risk that the hardware such as the housing and the HDD will be stolen. Should it be stolen, the cache stored in the edge computer will be leaked.

As a technique for preventing such leakage, a technique for decentralizing an electronic document in which an electronic document is divided into a plurality of divided data and each of the divided data is stored in a different server is known (for example, Patent Document 1). See ~ 3 mag).

International Publication No. 2013/065133 Japanese Unexamined Patent Publication No. 2008-152593 Japanese Unexamined Patent Publication No. 2008-198016

However, if a plurality of divided data are stored in different servers, processing delays and processing loads occur, which may reduce user convenience.

In one aspect, it is an object of the present invention to provide an information processing apparatus and an information processing method capable of taking measures against data leakage while suppressing a decrease in convenience, and a distributed processing system.

In one embodiment, the information processing device is an information processing device having a storage unit for storing data, and whether or not a predetermined terminal or person exists within a predetermined range from the information processing device. A detection unit to be detected and a plurality of tally are generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in another device. The data is stored in the second storage device, and the data is continuously stored in the storage unit while the detection unit can detect the terminal or the person within the predetermined range, and the detection unit stores the terminal or the person. It is an information processing apparatus including a processing unit that erases the data from the storage unit when the data cannot be detected within the predetermined range .

It is possible to take measures against data leakage while suppressing the deterioration of convenience.

It is a figure which shows roughly the structure of the distributed processing system which concerns on 1st Embodiment. It is a figure which shows the hardware configuration of an edge computer. It is a functional block diagram of the edge computer which concerns on 1st Embodiment. It is a figure which shows the table which the edge computer uses for processing in 1st Embodiment. It is a flowchart which shows the original data acquisition / storage process which concerns on 1st Embodiment. It is a flowchart which shows the data automatic deletion processing of the data cache part which concerns on 1st Embodiment. It is a flowchart which shows the tally conversion process of FIG. It is a flowchart which shows the data transmission process which concerns on 1st Embodiment. It is a flowchart which shows the decoding process of FIG. 10 (a) and 10 (b) are diagrams for explaining the outline of the first embodiment. It is a flowchart which shows the generation process of the operation verification report which concerns on 1st Embodiment. It is a figure which shows the example of the operation verification report. In the second embodiment, it is a flowchart which shows the process which is executed when the original data (cache) is transmitted from the cloud server to the edge computer. It is a flowchart which shows the data automatic erasing process of the data cache part which concerns on 2nd Embodiment. It is a figure which shows the table which the edge computer uses for processing in 2nd Embodiment. 16 (a) and 16 (b) are diagrams for explaining the outline of the second embodiment. It is a functional block diagram of the edge computer which concerns on 3rd Embodiment. It is a flowchart which shows the encryption process (S26) in 3rd Embodiment. It is a flowchart which shows the decoding process (S62) in 3rd Embodiment. 20 (a) and 20 (b) are diagrams for explaining the outline of the third embodiment. In the fourth embodiment, it is a flowchart which shows the process which is executed when the original data (cache) is transmitted from the cloud server to the edge computer. 22 (a) and 22 (b) are diagrams for explaining the outline of the fourth embodiment.

<< First Embodiment >>
Hereinafter, the first embodiment of the distributed processing system will be described in detail with reference to FIGS. 1 to 12.

FIG. 1 schematically shows the configuration of the distributed processing system 100 according to the first embodiment. As shown in FIG. 1, the distributed processing system 100 includes a cloud server 10 connected to a network 80 such as the Internet, and an edge computer 20 as an information processing device. The cloud server 10 is an information processing device installed in a data center or the like, and manages data used by users in the company. The edge computer 20 is, for example, an information processing device installed in each room (meeting room, etc.) in the company. The terminal 70 authenticated by the edge computer 20 can communicate with the edge computer 20 via the access point 68. As a result, the authenticated terminal 70 can use the data possessed by the edge computer 20. It is assumed that the terminal 70 is a portable information processing device such as a notebook PC (Personal Computer).

In the first embodiment, when a conference is held in a company, data (documents and other materials) managed by a user (administrator or the like) on the cloud server 10 is installed in the conference room as an edge computer. It is transmitted (copied) to 20. In this case, since the data cache (called the original data) is held in the edge computer 20, the user who participates in the conference accesses the edge computer 20 from the authenticated terminal 70 and uses the original data. By doing so, it is possible to prevent the concentration of access to the cloud server 10 during the conference and distribute the load of the cloud server 10 to the edge computer 20.

Here, since the edge computer 20 is installed in a conference room or the like, the edge computer 20 itself (housing) or a storage device (HDD (Hard Disk Drive) or the like) may be stolen by a malicious third party. be. If the data is stolen, the original data stored in the edge computer 20 may be leaked, so that data management in the edge computer 20 is important.

Hereinafter, the configuration of the edge computer 20 of the first embodiment and the processing executed by the edge computer 20 will be described in detail.

FIG. 2 shows the hardware configuration of the edge computer 20. As shown in FIG. 2, the edge computer 20 includes a CPU (Central Processing Unit) 90, a ROM (Read Only Memory) 92, a RAM (Random Access Memory) 94, and a storage unit (here, HDD (Hard Disk Drive) 96). It includes a network interface 97, a sensor 93, a portable storage medium drive 99, and the like. Each component of the edge computer 20 is connected to the bus 98. In the edge computer 20, the CPU 90 executes a program stored in the ROM 92 or the HDD 96, or a program read from the portable storage medium 91 by the portable storage medium drive 99, so that the functions of each part shown in FIG. 3 can be obtained. It will be realized. The functions of each part in FIG. 3 may be realized by, for example, an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

FIG. 3 is a functional block diagram showing a function realized by the CPU 90 of the edge computer 20 executing a program. As shown in FIG. 3, the edge computer 20 includes a data input / output unit 21, a status monitoring unit 22, a tally control unit 24, a data erasure control unit 26, an encoding unit 30, a tally transmission / reception unit 34, and a decoding unit as data providing units. 36, function as a report generation unit 40. Further, the RAM 94 (volatile storage device) shown in FIG. 2 realizes the functions as the data cache unit 28 and the tally temporary holding unit 32 as the storage unit, and the HDD 96 (nonvolatile storage device) realizes the function as the first storage device. The function of the tally storage unit 38 is realized. The volatile storage device is a storage device whose contents are erased when electric power is not supplied. That is, the volatile storage device is a storage device that erases the data stored when the edge computer 20 is stolen (when power is no longer supplied). On the other hand, the non-volatile storage device is a storage device that continues to store data even when power is no longer supplied.

When the user performs an operation of transmitting (copying) the cache (original data) of the data stored in one cloud server 10 (referred to as the cloud server 10a) to the edge computer 20 by the data input / output unit 21. The original data is stored in the data cache unit 28. Further, when the data input / output unit 21 receives the transmission request of the original data managed in the edge computer 20 from the terminal 70, the data input / output unit 21 transmits the original data corresponding to the request to the terminal 70.

The situation monitoring unit 22 monitors the situation within a predetermined range from the edge computer 20 based on the information obtained from the sensor 93 (see FIG. 2). More specifically, the sensor 93 is a sensor that detects whether or not a reliable terminal or user exists within a predetermined range (for example, in a conference room), for example, a BLE (Bluetooth® Low Energy) beacon. , RFID (Radio Frequency IDentifier), room entry management device, GPS system, face authentication system, etc. The status monitoring unit 22 notifies the tally control unit 24 and the data erasure control unit 26 of information on whether or not a reliable terminal or user exists within a predetermined range. In the first embodiment, as an example, it is assumed that the terminal used by the user who participates in the conference is registered in advance, and in the status monitoring unit 22, the terminal (referred to as an authenticated terminal) 70 is in the conference room. It is assumed that the presence or absence of the presence in the sensor 93 is detected by using the sensor 93. In the first embodiment, the sensor 93 and the status monitoring unit 22 are included to realize the function as a detection unit.

The tally control unit 24 controls the operations of the encode unit 30, the decoding unit 36, and the tally transmission / reception unit 34 based on the notification from the status monitoring unit 22 and the like.

The data erasure control unit 26 erases the original data stored in the data cache unit 28 or erases the tally stored in the tally temporary holding unit 32 based on the notification from the status monitoring unit 22 or the like. do.

The encoding unit 30 converts the original data stored in the data cache unit 28 into tally under the instruction of the tally control unit 24. In the present embodiment, it is divided into a tally (large) and a tally (small) by tallying. The encoding unit 30 stores the tally (large) and the tally (small) in the tally temporary holding unit 32. When tally conversion is performed, the original data is deleted from the data cache unit 28.

Under the instruction of the tally control unit 24, the tally transmission / reception unit 34 transmits one of the tally (large) and the tally (small) (for example, the tally (small)) to another device (for example, a cloud server 10b). .. The cloud server 10b stores a tally (small) in a tally storage unit 12 as a second storage device realized by an HDD or the like. In this case, the data erasure control unit 26 erases the tally (small) stored in the tally temporary holding unit 32. Further, the tally control unit 24 stores the other tally (large) and the tally (small) (for example, the tally (large)) in the tally storage unit 38 with respect to the tally temporary holding unit 32, and temporarily holds the stored tally. Erase from unit 32. Further, the tally transmission / reception unit 34 receives a cloud server 10b under the instruction of the tally control unit 24 when the original data transmission request is issued from the authenticated terminal 70 but the original data does not exist in the data cache unit 28. The tally (small) is received from the tally storage unit 12. Then, the tally transmission / reception unit 34 stores the received tally (small) in the tally temporary holding unit 32.

The decoding unit 36 decodes (using a tally) under the instruction of the tally control unit 24 when a request for transmission of the original data is issued from the authenticated terminal 70 but the original data does not exist in the data cache unit 28. Generate the original data). Specifically, the decoding unit 36 generates original data using the tally (small) stored in the tally temporary holding unit 32 and the tally (large) read from the tally storage unit 38, and the data cache unit 28. Store in. The original data stored in the data cache unit 28 is transmitted by the data input / output unit 21 to the authenticated terminal 70.

Here, the tally control unit 24 and the data erasure control unit 26 manage data in a table as shown in FIG. Specifically, the table of FIG. 4 has each item of "data ID", "file name (file path)", "tally storage unit", and "encode flag". The item "data ID" means the identification information given to the data. The item "file name (file path)" means the name and extension of the data. The item "tally storage unit" means information on the storage destination of the tally (such as another computer). Here, when the item "encode flag" is "true", the original data is stored in the data cache unit 28, and the original data is the target of the tally processing (step S26 in FIG. 6) described later. It means that it is new data. On the other hand, when the item "encode flag" is "false", it means that the original data is tallyed and the data does not need to be tallyed. From the table of FIG. 4, either the item "data ID" or the item "file name (file path)" may be omitted.

The report generation unit 40 acquires the log output from the tally control unit 24 and the data erasure control unit 26, and generates an operation verification report.

Next, the processing of the edge computer 20 will be described in detail with reference to other drawings according to the flowcharts of FIGS. 5 to 9.

(Original data acquisition / storage processing)
FIG. 5 shows a flowchart of the original data acquisition / storage process. The process of FIG. 5 is a process executed every time the original data is sent from the cloud server 10a according to the operation of the user. In the process of FIG. 5, first, in step S10, the data input / output unit 21 acquires the original data.

Next, in step S12, the tally control unit 24 extracts the data ID from the original data, adds it to the table (FIG. 4), and adds the tally storage unit outside the edge computer (for example, the tally storage unit 12 of the cloud server 10b). Link with the information (storage destination information) of. In addition, the administrator or the like shall set the storage destination information of each data in advance according to the data type and the like.

Next, in step S14, the encode flag of the data ID added by the tally control unit 24 is set to "true". Although the details will be described later, the tally control unit 24 outputs the cache data creation log to the report generation unit 40 at the stage where the process of step S14 is performed.

Next, in step S16, the tally control unit 24 stores the original data to which the data ID is assigned in the data cache unit 28.

As a result, the process of FIG. 5 is completed.

(Data automatic deletion processing of the data cache unit 28)
FIG. 6 shows a flowchart of the data automatic erasing process of the data cache unit 28. The process of FIG. 6 is executed in parallel with the above-mentioned original data acquisition / storage process and the later-described data transmission process and decoding process.

In the process of FIG. 6, first, in step S20, the tally control unit 24 determines whether or not the authenticated terminal 70 exists within a predetermined range from the edge computer 20 based on the output of the status monitoring unit 22. do. If the determination in step S20 is affirmed, that is, if a reliable terminal exists in the conference room, the tally control unit 24 proceeds to step S22.

When the process proceeds to step S22, the tally control unit 24 waits until a certain period of time elapses. Then, after a certain period of time has elapsed, the tally control unit 24 returns to step S20. That is, the tally control unit 24 repeats step S20 (affirmation) and step S22 until the authenticated terminal 70 does not exist within the predetermined range, and when the determination of step S20 is denied, the process proceeds to step S24.

When the process proceeds to step S24, the tally control unit 24 determines whether or not there is a data ID whose encoding flag is “true” in the table. That is, the tally control unit 24 determines whether or not the new original data to be tallyed is stored in the data cache unit 28. If the determination in step S24 is denied, the process proceeds to step S28. The process of step S28 will be described later.

On the other hand, when the determination in step S24 is affirmed, that is, when the original data (cache) exists in the data cache unit 28, the tally control unit 24 shifts to step S26.

When the process proceeds to step S26, the subroutine of the tally processing is executed. As the tallying process, the process according to the flowchart of FIG. 7 is executed.

In the process of FIG. 7, first, in step S30, under the instruction of the tally control unit 24, the encoding unit 30 tally converts the original data in the data cache unit 28 for each data ID whose encoding flag is “true”. Further, the encoding unit 30 assigns the data ID of the original data to the generated tally and holds it in the tally temporary holding unit 32. Here, it is assumed that the original data is divided into tally (large) and tally (small) by tally conversion, and both tally (large) and tally (small) are held in the tally temporary holding unit 32. ..

Next, in step S32, under the instruction of the tally control unit 24, the tally transmission / reception unit 34 transmits the generated tally (small) to the tally storage unit 12 of the cloud server 10b.

Next, in step S34, the data erasure control unit 26 erases the tally (small) held in the tally temporary holding unit 32.

Next, in step S36, the tally control unit 24 stores the tally (large) in the tally storage unit 38 in the edge computer 20.

Next, in step S38, the data erasure control unit 26 erases the tally (large) held in the tally temporary holding unit 32.

Next, in step S40, the tally control unit 24 sets the encode flag corresponding to the tally-ized original data in the table (FIG. 4) as “false”. After the processing of FIG. 7 is performed as described above, the process proceeds to step S28 of FIG. At the stage when the process of FIG. 7 is completed, there is no encode flag "true" in the table.

Next, in step S28, the data erasure control unit 26 erases all the data in the data cache unit 28. In this way, when the authenticated terminal 70 does not exist around the edge computer 20, the original data is deleted from the edge computer 20. As a result, even if the housing of the edge computer 20 or the storage device in the edge computer 20 is stolen by a malicious third party, it is possible to prevent data leakage. After the process of step S28, all the processes of FIG. 6 are completed. When the process of FIG. 6 is completed, the process of FIG. 6 is executed again from step S20, and the process of FIG. 6 is repeatedly executed.

Although the details will be described later, the tally control unit 24 outputs the cache data deletion log to the report generation unit 40 at the stage where the process of step S28 is performed.

(Data transmission process)
FIG. 8 is a flowchart showing a data transmission process executed when a data transmission request is issued from the authenticated terminal 70.

In the process of FIG. 8, first, in step S50, the data input / output unit 21 receives the data transmission request. Next, in step S52, the status monitoring unit 22 determines whether or not the authenticated terminal 70 exists within a predetermined range. If the determination in step S52 is denied, the conference is not held in the conference room and it is not necessary to transmit data to the terminal 70. Therefore, the process proceeds to step S64 and the data input / output unit 21 Notifies the terminal that requested the data that the data does not exist. After that, all the processing of FIG. 8 is completed.

On the other hand, if the determination in step S52 is affirmed, the process proceeds to step S54, and the data input / output unit 21 extracts the data ID of the data for which the transmission request has been made. Next, in step S56, the data input / output unit 21 determines whether or not the data ID of the data for which the transmission request has been made exists in the table. If the determination in step S56 is denied, that is, if the data for which transmission is requested cannot be provided from the edge computer 20, the process proceeds to step S64. When the process proceeds to step S64, the data input / output unit 21 notifies the terminal of the data request source that the data does not exist. After that, all the processing of FIG. 8 is completed.

On the other hand, if the determination in step S56 is affirmed, the process proceeds to step S58, and the data input / output unit 21 determines whether or not the data to which the data ID of the transmission request data is assigned exists in the data cache unit 28. to decide.

If the determination in step S58 is affirmed, that is, if the transmission request data is stored in the data cache unit 28, the process proceeds to step S60. In step S60, the data input / output unit 21 reads the transmission request data stored in the data cache unit 28 and transmits the transmission request data to the transmission request source terminal 70.

On the other hand, if the determination in step S58 is denied, that is, if the original data is not in the data cache unit 28, the process proceeds to step S62. In step S62, the decoding processing subroutine is executed. The decoding process in step S62 is executed according to the flowchart of FIG. Although details will be described later, as shown in FIG. 8, the tally control unit 24 outputs the decoding start log to the report generation unit 40 in the stage before the processing of step S62.

In the process of FIG. 9, first, in step S70, the tally control unit 24 refers to the table (FIG. 4) and is associated with the data ID of the transmission request data, and the tally storage unit (for example, the tally storage unit 12 of the cloud server 10b). ). Then, the tally control unit 24 requests the specified tally storage unit for the tally (small) to which the data ID of the transmission request data is assigned via the tally transmission / reception unit 34.

Next, in step S72, under the instruction of the tally control unit 24, the tally transmission / reception unit 34 receives the requested tally (small) from the tally storage unit (tally storage unit 12 of the cloud server 10b), and the tally temporary holding unit 32. Hold on.

Next, in step S74, the tally control unit 24 acquires the tally (large) from the tally storage unit 38 in the edge computer 20 and holds it in the tally temporary holding unit 32.

Next, in step S76, under the instruction of the tally control unit 24, the decoding unit 36 generates (decodes) the original data using the tally (small) and the tally (large).

Next, in step S78, the data erasure control unit 26 erases the tally (small) held in the tally temporary holding unit 32. Further, in the next step S80, the data erasure control unit 26 erases the tally (large) held in the tally temporary holding unit 32.

Next, in step S82, under the instruction of the tally control unit 24, the decoding unit 36 stores the original data to which the data ID is given (the original data generated in step S76) in the data cache unit 28. Although details will be described later, when the process of step S82 is performed, the tally control unit 24 outputs the cache data creation log to the report generation unit 40. When the process of FIG. 9 is completed as described above, the process returns to step S58 of FIG. Even at the stage where the process of step S82 of FIG. 9 is executed, the process of FIG. 6 is started as in the stage where the process of step S16 of FIG. 5 is executed.

When the process returns to step S58 and the determination in step S58 is affirmed, the data input / output unit 21 proceeds to step S60. When the process proceeds to step S60, the data input / output unit 21 reads out the transmission request data (data stored in the data cache unit 28 in the process of FIG. 9 described above) stored in the data cache unit 28, and is the transmission request source. Send to the terminal 70.

After that, all the processing of FIG. 8 is completed. By executing the process of FIG. 8, if the transmission request data is stored in the data cache unit 28, the transmission request data can be transmitted to the terminal 70 as it is. On the other hand, if the transmission request data is not stored in the data cache unit 28, the transmission request data is transmitted by decoding the transmission request data from the tally (large) and tally (small) generated by tally conversion. Can be done.

In the first embodiment, when the authenticated terminal 70 is present in the conference room, the original data is stored in the data cache unit 28 as schematically shown in FIG. 10 (a). That is, when the user who holds the conference exists in the conference room and the possibility of theft of the edge computer 20 is low, the original data is stored in the edge computer 20 as it is, so that the user when using the data can use the data. Convenience can be increased.

On the other hand, when the authenticated terminal 70 does not exist in the conference room, the original data is tallyed and the tally (large) is the tally storage unit 38 of the edge computer 20, as schematically shown in FIG. 10B. The tally (small) is stored in the tally storage unit 12 of the cloud server 10b. Further, the original data is deleted from the data cache unit 28. In this way, when the user who holds the conference does not exist in the conference room and there is a possibility that the edge computer 20 is stolen, the tally (small) is stored in a device other than the edge computer 20 to be stolen. It is possible to prevent data leakage at times.

(Operation verification report generation process)
Next, the operation verification report generation process executed by the report generation unit 40 will be described in detail with reference to other drawings as appropriate along the flowchart of FIG.

The report generation unit 40 has the "cache data creation log" (see FIGS. 5 and 9), the "cache data clear log" (see FIG. 6), and the "decoding start log" (see FIG. 8) at the timing as described above. To receive. The report generation unit 40 executes the process according to the flowchart of FIG. 11 every time the log is transmitted.

In the process of FIG. 11, first, in step S100, the report generation unit 40 is created and receives the log. Next, in step S102, the report generation unit 40 extracts the data ID of the log. Next, in step S104, the report generation unit 40 determines whether or not the row corresponding to the extracted data ID exists in the operation verification report (see FIG. 12).

Here, in the operation verification report of FIG. 12, each item of "file name", "log time", "a1 to a7", "b1 to b3", and "state" is provided. The file name of the original data is stored in the item "file name", and the latest log reception time is stored in the item "log time". In addition, the items "a1 to a7" and "b1 to b3" show the progress of the operation based on the log, and the item "state" shows "safety", "caution", and "danger" in ascending order of risk. Is stored.

If the determination in step S104 of FIG. 11 is denied, the report generation unit 40 proceeds to step S106, generates a line of the report corresponding to the extracted data ID, and sets the state to "undefined". After that, the process proceeds to step S108. On the other hand, if the determination in step S104 is affirmed, that is, if the row corresponding to the extracted data ID exists in the operation verification report, the process proceeds to step S108 without going through step S106.

When the process proceeds to step S108, the report generation unit 40 determines whether or not the received log is the decoding start log. If the determination in step S108 is affirmed, the process proceeds to step S110, and the report generation unit 40 sets the item "state" in the row of the extracted data ID to "caution". After that, all the processing of FIG. 11 is completed.

On the other hand, if the determination in step S108 is denied, the process proceeds to step S112, and the report generation unit 40 determines whether or not the received log is a cache data creation log. If the determination in step S112 is affirmed, the process proceeds to step S114, and the report generation unit 40 sets the item "state" in the row of the extracted data ID to "danger". After that, all the processing of FIG. 11 is completed.

On the other hand, if the determination in step S112 is denied, that is, if the received log is a cache data clearing log, the report generation unit 40 proceeds to step S116. When the process proceeds to step S116, the report generation unit 40 sets the item "state" in the row of the extracted data ID to "safe". After that, all the processing of FIG. 11 is completed.

When the item "state" of the operation verification report is "safe", the original data as shown in FIG. 10B is not stored in the data cache unit 28, and the edge computer 20 is stolen. However, it means that there is no risk of data leakage. When the item "state" is "dangerous", it means that the original data as shown in FIG. 10A is stored in the data cache unit 28. When the item "state" is "caution", it means that the original data is being generated from the tally (large) and the tally (small).

The report generation unit 40 provides an operation verification report when there is a request from an administrator or the like. The report generation unit 40 does not have to be in the edge computer 20. That is, the report generation unit 40 may be located outside the edge computer 20 (for example, the cloud server 10).

The tally control unit 24 and the data erasure control unit 26 that output the log to the report generation unit 40 proceed to the next process until the notification (reception notification) indicating that the log has been received from the report generation unit 40 is received. You may not have it. By doing so, it is possible to suppress the occurrence of a state in which the content of the operation verification report and the state of the edge computer 20 do not match.

As is clear from the above description, in the first embodiment, the tally control unit 24 and the data erasure control unit 26 are used to tally the original data and delete the original data from the data cache unit 28. The function as a processing unit that executes the above is realized.

As described in detail above, according to the first embodiment, the status monitoring unit 22 monitors whether or not the authenticated terminal 70 exists within a predetermined range from the edge computer 20 by using the sensor 93. do. Then, while the authenticated terminal 70 exists within a predetermined range (S20: affirmative), the tally control unit 24 does not generate a tally and continues to store the original data in the data cache unit 28. Further, when the authenticated terminal 70 does not exist within a predetermined range (S20: negative), the tally control unit 24 generates a plurality of tally from the original data (cache) stored in the data cache unit 28 (S20: negative). S30). Then, the tally (large) is stored in the tally storage unit 38 of the edge computer 20 (S36, S38), and the tally (small) is stored in the tally storage unit 12 of the cloud server 10b (S32, S34). Further, the data erasure control unit 26 erases the original data from the data cache unit 28 (S28). As a result, in the first embodiment, when the edge computer 20 may be stolen, the tally is converted and the tally (large) and the tally (small) are stored in the tally storage unit of different devices. Since the original data is erased from the data cache unit 28, it is possible to prevent data leakage when the data is stolen. If the edge computer 20 is unlikely to be stolen and the original data (cache) stored in the edge computer 20 is likely to be used by the user, the original data is stored in the data cache unit 28. I will continue to do it. As a result, the user can use the original data of the data cache unit 28, so that the load on the edge computer 20 and the communication network (infrastructure) is reduced as compared with the case where the tally needs to be decoded, which is convenient for the user. The sex can be improved. As described above, in the first embodiment, it is possible to take measures against data leakage while suppressing a decrease in convenience.

Further, in the first embodiment, the original data is stored in the data cache unit 28, which is a volatile storage device. As a result, even if the edge computer 20 is stolen while the original data is stored in the data cache unit 28, the power is not supplied to the data cache unit 28 at the time of the theft, so that the original data is not supplied from the data cache unit 28. Can be erased. In the first embodiment, since the above processing is performed, the possibility of data leakage is low even if the data cache unit 28 is a non-volatile storage device.

Further, in the first embodiment, when the data input / output unit 21 receives the data transmission request from the terminal 70, if the original data is stored in the data cache unit 28, the data input / output unit 21 transmits the original data to the terminal 70. .. Further, if the original data is not stored in the data cache unit 28, the data input / output unit 21 transmits the data obtained by decoding the tally corresponding to the original data to the terminal 70. As a result, it is possible to provide the user with the data requested by the user while preventing data leakage.

Further, in the first embodiment, the tally (tally (small)) stored in the tally storage unit 12 of the cloud server 10b is more than the tally (tally (large)) stored in the tally storage unit 38 of the edge computer 20. The amount of data is smaller. As a result, the amount of communication with the cloud server 10b can be reduced. However, the present invention is not limited to this, and the tally (large) may be stored in the tally storage unit 12 of the cloud server 10b.

<< Second Embodiment >>
Next, the second embodiment will be described with reference to FIGS. 13 to 16. The configuration of the distributed processing system 100 according to the second embodiment is the same as that of the first embodiment, but a part of the processing of the edge computer 20 is different from the first embodiment. Hereinafter, the processing of the edge computer 20 will be mainly described as being different from the first embodiment.

FIG. 13 shows a process (corresponding to FIG. 5 of the first embodiment) executed when data is transmitted from the cloud server 10a to the edge computer 20. In the second embodiment, the first embodiment is to execute tally conversion of the original data at the timing when the edge computer 20 acquires the cache (original data) of the data, regardless of the surrounding situation of the edge computer 20. It is different from the form.

In the process of FIG. 13, first, in step S200, the data input / output unit 21 acquires the original data.

Next, in step S202, the tally control unit 24 extracts the data ID from the original data, adds it to the table (FIG. 15), and adds it to the tally storage unit outside the edge computer 20 (for example, the tally storage unit 12 of the cloud server 10b). Link with the information (storage destination information) of. In addition, the administrator or the like shall set the storage destination information of each data in advance according to the data type and the like. The table of FIG. 15 is obtained by omitting the item "encode flag" from the table of the first embodiment (FIG. 4).

Next, in step S204, under the instruction of the tally control unit 24, the encoding unit 30 converts the original data into tally, assigns the data ID of the original data to the generated tally, and holds it in the tally temporary holding unit 32. Here, it is assumed that the original data is divided into tally (large) and tally (small) by tally conversion, and both tally (large) and tally (small) are held in the tally temporary holding unit 32. ..

Next, in step S206, under the instruction of the tally control unit 24, the tally transmission / reception unit 34 transmits the generated tally (small) to the tally storage unit 12 of the cloud server 10b.

Next, in step S208, the data erasure control unit 26 erases the tally (small) held in the tally temporary holding unit 32.

Next, in step S210, the tally control unit 24 stores the tally (large) in the tally storage unit 38 in the edge computer 20.

Next, in step S212, the data erasure control unit 26 erases the tally (large) held in the tally temporary holding unit 32.

Next, in step S214, the tally control unit 24 stores the original data to which the data ID is assigned in the data cache unit 28. When the process of step S214 is completed, all the processes of FIG. 13 are completed.

As described above, in the second embodiment, when the original data is transmitted to the edge computer 20, tally conversion is performed. Then, the tally (small) is stored in the tally storage unit 12 of the cloud server 10b, and the tally (large) is stored in the tally storage unit 38 in the edge computer 20. Further, the original data is stored in the data cache unit 28.

Next, the process of FIG. 14 will be described. The process of FIG. 14 is the process corresponding to FIG. 6 of the first embodiment. Note that the process of FIG. 14 is executed in parallel with the original data acquisition / storage process, the data transmission process, and the decoding process, similarly to the process of FIG.

In the process of FIG. 14, first, in step S220, the tally control unit 24 determines whether or not the authenticated terminal 70 exists within a predetermined range from the edge computer 20. If the determination in step S220 is affirmed, that is, if the authenticated terminal 70 exists in the conference room, the tally control unit 24 proceeds to step S222.

When the process proceeds to step S222, the tally control unit 24 waits until a certain period of time elapses. Then, after a certain period of time has elapsed, the tally control unit 24 returns to step S220. That is, the tally control unit 24 repeats step S220 (affirmation) and step S222 until the authenticated terminal 70 does not exist within the predetermined range, and when the determination of step S220 is denied, the process proceeds to step S224.

When the determination in step S220 is denied and the process proceeds to step S224, the data erasure control unit 26 erases all the data in the data cache unit 28. When the process of step S224 is completed, all the processes of FIG. 14 are completed. When the process of FIG. 14 is completed, the process of FIG. 14 is executed again from step S220, and the process of FIG. 14 is repeatedly executed.

The data transmission process of the second embodiment is the same as the data transmission process of the first embodiment (FIGS. 8 and 9).

In the second embodiment, as in the first embodiment, when the authenticated terminal 70 exists in the conference room, the original data is stored in the data cache unit 28 as shown in FIG. 16A. Has been done. That is, when the user who holds the conference exists in the conference room and the possibility of theft of the edge computer 20 is low, the original data is stored in the edge computer 20 as it is, so that the user when using the data can use the data. The convenience is to be improved.

On the other hand, when the authenticated terminal 70 does not exist in the conference room, the original data is deleted from the data cache unit 28 as shown in FIG. 16B. Further, the tally (large) is stored in the tally storage unit 38 of the edge computer 20, and the tally (small) is stored in the tally storage unit 12 of the cloud server 10b. That is, when the user who holds the conference does not exist in the conference room and the edge computer 20 may be stolen, the tally (large) and the tally (small) exist in different devices. Therefore, even if the edge computer 20 is stolen, data leakage can be prevented.

Further, in the second embodiment, as shown in FIGS. 16A and 16B, since the original data is tallyed in advance when the original data is received, the authenticated terminal 70 is used for the conference. There is no need to tally at the timing when it no longer exists in the room. As a result, even if the edge computer 20 is stolen at the timing immediately after the authenticated terminal 70 disappears in the conference room (before tallying or during tallying), data leakage will occur. Can be prevented.

Further, in the second embodiment, the original data is stored in the data cache unit 28, which is a volatile storage device. As a result, even if the edge computer 20 is stolen while the original data is stored in the data cache unit 28, the power is not supplied to the data cache unit 28 at the time of the theft, so that the original data is not supplied from the data cache unit 28. Can be erased. In the second embodiment, since the above processing is performed, the possibility of data leakage is low even if the data cache unit 28 is a non-volatile storage device.

In the second embodiment, the cache data creation log is output between steps S212 and S214 of FIG. 13, and the cache data deletion log is output after step S224 of FIG. Therefore, in the second embodiment as well, the operation verification report generation process can be executed as in the first embodiment.

<< Third Embodiment >>
Next, the third embodiment will be described in detail with reference to FIGS. 17 to 19. In the first embodiment described above, the case where the original data is tallyed has been described, but in the third embodiment, the original data is encrypted.

FIG. 17 is a functional block diagram of the edge computer 20 according to the third embodiment. The parts changed from the first embodiment (FIG. 3) are shown by a thick line frame and with an "A" at the end of the reference numerals. Specifically, the tally control unit 24, the tally transmission / reception unit 34, the tally temporary holding unit 32, and the tally storage unit 38 of the first embodiment are used, and in the third embodiment, the encryption control unit 24A and the encryption key transmission / reception unit are used. It is 34A, an encryption key / encrypted data holding unit 32A, and an encrypted data storage unit 38A. Further, the tally storage unit 12 of the cloud server 10b is the encryption key storage unit 12A. Further, in the third embodiment, as a function of the edge computer 20, an encryption key generation unit 42 is added as shown by a thick broken line in FIG.

The table used for processing is the same as in FIG. 4, but the item "tally storage unit" is an "encryption key storage unit".

(Original data acquisition / storage processing)
In the third embodiment, the original data acquisition / storage process is the same as that in the first embodiment (FIG. 5). However, in step S12, the information associated with the data ID is an encryption key storage unit outside the edge computer (for example, the encryption key storage unit 12A of the cloud server 10b), which is different from the first embodiment.

(Automatic data deletion process in the data cache section)
In the third embodiment, the data automatic erasing process of the data cache unit 28 is the same as that of the first embodiment (FIG. 6). However, in step S26, the encryption process is executed instead of the tally conversion process.

The encryption process in step S26 is executed according to the flowchart shown in FIG. In the process of FIG. 18, first, in step S329, the encryption key generation unit 42 generates an individual encryption key for each data ID of the encoding flag “true”, assigns the data ID to the encryption key, and assigns the encryption key. It is held in the encrypted data holding unit 32A.

After that, the steps S330, S332, S334, S336, S338, and S340 of FIG. 18 are executed in the same manner as the steps S30, S32, S34, S36, S38, and S40 of FIG. In this case, as shown underlined in FIG. 18, "tallying", "tally (small)", "tally holding part", "tally (large)", and "(in the edge computer)" are shown in FIG. ) Tally store "," Tally storage (outside the edge computer) "," encryption "," encryption key "," encryption key / encrypted data holder "," encrypted data "," (edge computer) Each process shall be executed as "encryption key storage unit (inside)" and "encryption data storage unit (inside the edge computer)". In the encryption of the original data in step S330, the encryption key generated in step S329 is used.

(Data transmission process)
The data transmission process of the third embodiment is the process according to the flowchart of FIG. 8 as in the first embodiment. However, in step S62 (decoding process) of FIG. 8, the process according to the flowchart of FIG. 19 is performed.

Steps S370, S372, S374, S376, S378, S380, and S382 executed in the process of FIG. 19 are basically the same as steps S70, S72, S74, S76, S78, S80, and S82 of FIG. ing. However, in the processing of FIG. 19, as shown by underlining, the “tally (small)”, “tally temporary holding part”, “tally (large)”, and “tally storage (in the edge computer)” of FIG. 9 are shown. "Part", "tally storage part (outside the edge computer)", "encryption key", "encryption key / encrypted data holding part", "encrypted data", "encryption key storage part (inside the edge computer)" , It is assumed that each process is executed as "encrypted data storage unit (in the edge computer)".

In the third embodiment, when the authenticated terminal 70 is present in the conference room, the original data is stored in the data cache unit 28 as schematically shown in FIG. 20 (a). That is, when the user who holds the conference exists in the conference room and the possibility of theft of the edge computer 20 is low, the original data is stored in the edge computer 20 as it is, so that the user when using the data can use the data. Convenience can be increased.

On the other hand, when the authenticated terminal 70 does not exist in the conference room, the original data is encrypted as schematically shown in FIG. 20 (b). Further, the encrypted data is stored in the encrypted data storage unit 38A in the edge computer 20, and the encryption key is stored in the encryption key storage unit 12A of the cloud server 10b. Further, the original data is deleted from the data cache unit 28. In this way, when the user who holds the conference does not exist in the conference room and there is a possibility that the edge computer 20 is stolen, the encryption key is stored in a device other than the edge computer 20 at the time of the theft. It is possible to prevent data leakage.

Also in the third embodiment, the operation verification report generation process can be executed in the same manner as in the first embodiment.

In the third embodiment, the encryption control unit 24A and the data erasure control unit 26 have a function as a processing unit that encrypts the original data and executes a process of erasing the original data from the data cache unit 28. It has been realized. Further, the encryption key storage unit 12A realizes a function as a second storage device for storing the encryption key.

As described above, according to the third embodiment, the status monitoring unit 22 monitors whether or not the authenticated terminal 70 exists within a predetermined range from the edge computer 20 by using the sensor 93. Then, when the authenticated terminal 70 exists within a predetermined range (S20: affirmative in FIG. 6), the encryption control unit 24A does not perform encryption and stores the original data in the data cache unit 28. continue. Further, when the authenticated terminal 70 does not exist within the predetermined range (S20: Negative in FIG. 6), the encryption control unit 24A starts with the encryption key and the encryption data from the original data stored in the data cache unit 28. Is generated (S329, S330). Then, the encryption control unit 24A stores the encrypted data in the encrypted data storage unit 38A of the edge computer 20, and stores the encryption key in the encryption key storage unit 12A of the cloud server 10b. Further, the data erasure control unit 26 erases the original data from the data cache unit 28 (S28 in FIG. 6). As a result, in the third embodiment, when the edge computer 20 may be stolen, encryption is performed and the encrypted data and the encryption key are stored in different devices. Therefore, the data in the case of theft. Can be prevented from leaking. If the edge computer 20 is unlikely to be stolen and the original data stored in the edge computer 20 is likely to be used by the user, the original data is stored in the data cache unit without encryption. It will continue to be stored in 28. As a result, when the user uses the data, the original data of the data cache unit 28 may be used, so that the user can use the edge computer 20 or the communication network (infrastructure) as compared with the case where the encrypted data needs to be decrypted. The load can be reduced and the convenience of the user can be improved. As described above, in the third embodiment, it is possible to take measures against data leakage while suppressing a decrease in convenience.

Further, in the third embodiment, the original data is stored in the data cache unit 28, which is a volatile storage device. As a result, even if the edge computer 20 is stolen while the original data is stored in the data cache unit 28, the power is not supplied to the data cache unit 28 at the time of the theft, so that the original data is not supplied from the data cache unit 28. Can be erased. In the third embodiment, since the above processing is performed, the possibility of data leakage is low even if the data cache unit 28 is a non-volatile storage device.

Further, in the third embodiment, when the data input / output unit 21 receives the data transmission request from the terminal 70, if the original data is stored in the data cache unit 28, the data input / output unit 21 transmits the original data to the terminal 70. .. Further, if the original data is not stored in the data cache unit 28, the data input / output unit 21 transmits the data obtained by decoding the encrypted data corresponding to the original data with the encryption key to the terminal 70. Send. As a result, it is possible to provide the user with the data requested by the user while preventing data leakage.

Further, in the third embodiment, the encrypted data is stored in the edge computer 20, and the encryption key whose data amount is smaller than that of the encrypted data is stored in the cloud server 10b. As a result, the amount of communication with the cloud server 10b can be reduced. However, the present invention is not limited to this, and the encrypted data may be stored in the cloud server 10b.

<< Fourth Embodiment >>
Next, the fourth embodiment will be described in detail with reference to FIG. The third embodiment described above is an embodiment in which the tally encryption of the first embodiment is changed to encryption, but in the fourth embodiment, the tally encryption of the second embodiment is encrypted. It is a modified embodiment.

The functional block diagram of the edge computer 20 of the fourth embodiment is the same as that of the third embodiment (see FIG. 17).

In the fourth embodiment, the process of FIG. 21 is executed instead of the process of FIG. 13 of the second embodiment. In FIG. 21, steps S400, S402, S404, S406, S408, S410, S412, and S414 are basically the same as steps S200, S202, S204, S206, S208, S210, S212, and S214 of FIG. It has become. However, in the processing of FIG. 21, as shown by underlining, the “tally (small)”, “tally temporary holding part”, “tally (large)”, and “tally storage (in the edge computer)” of FIG. 13 are shown. "Part", "tally storage part (outside the edge computer)", "encryption key", "encryption key / encrypted data holding part", "encrypted data", "encryption key storage part (inside the edge computer)" , It is assumed that each process is executed as "encrypted data storage unit (in the edge computer)".

Further, between steps S402 and S404, the encryption key generation unit 42 executes the process of step S403 as shown by the thick line frame. In this step S403, the encryption key generation unit 42 generates an encryption key, assigns a data ID to the encryption key, and holds the encryption key in the encryption key / encryption data holding unit 32A. In the encryption of the original data in step S404, the encryption key generated in step S403 is used.

Other processes are the same as those in the third embodiment described above.

In the fourth embodiment, as in the third embodiment, when the authenticated terminal 70 exists in the conference room, the original data is stored in the data cache unit 28 as shown in FIG. 22 (a). Has been done. That is, when the user who holds the conference exists in the conference room and the possibility of theft of the edge computer 20 is low, the original data is stored in the edge computer 20 as it is, so that the user when using the data can use the data. The convenience is to be improved.

On the other hand, when the authenticated terminal 70 does not exist in the conference room, the original data is deleted from the data cache unit 28 as shown in FIG. 22 (b). Further, the encrypted data is stored in the encrypted data storage unit 38A in the edge computer 20, and the encryption key is stored in the encryption key storage unit 12A of the cloud server 10b. That is, if the user who holds the conference does not exist in the conference room and there is a possibility that the edge computer 20 is stolen, the encryption key and the encrypted data exist in separate devices. Therefore, even if the edge computer 20 is stolen, data leakage can be prevented.

Further, in the fourth embodiment, as shown in FIGS. 22 (a) and 22 (b), in order to encrypt the original data when the original data is received, the authenticated terminal 70 is in the conference room. There is no need to perform encryption when it no longer exists in. As a result, even if the edge computer 20 is stolen immediately after the authenticated terminal 70 disappears in the conference room (before encryption or while the encryption is being executed), data leakage will occur. Can be prevented.

In each of the above embodiments, the case where the original data is deleted from the data cache unit 28 when the authenticated terminal 70 does not exist within a predetermined range from the edge computer 20 has been described, but the present invention is not limited to this. .. Since the data cache unit 28 is a volatile storage device, it is considered that when the edge computer 20 is stolen, the data cache unit 28 is automatically erased by the power supply being stopped. Therefore, in each of the above embodiments, even if the authenticated terminal 70 does not exist within a predetermined range from the edge computer 20, the original data may not be deleted from the data cache unit 28.

In each of the above embodiments, the case where the distributed processing system 100 is used in the company has been described, but the present invention is not limited to this, and the distributed processing system 100 can also be used, for example, in a school or the like. In this case, while the teacher is in the classroom, such as during class hours, the same processing as when the authenticated terminal 70 exists in the above-mentioned conference room is performed, and while the teacher is not in the classroom, the above-mentioned conference room is performed. The same process as when the authenticated terminal 70 does not exist may be performed.

The above processing function can be realized by a computer. In that case, a program that describes the processing content of the function that the processing device should have is provided. By executing the program on a computer, the above processing function is realized on the computer. The program describing the processing content can be recorded on a computer-readable storage medium (however, the carrier wave is excluded).

When a program is distributed, it is sold in the form of a portable storage medium such as a DVD (Digital Versatile Disc) or a CD-ROM (Compact Disc Read Only Memory) on which the program is recorded. It is also possible to store the program in the storage device of the server computer and transfer the program from the server computer to another computer via the network.

The computer that executes the program stores, for example, the program recorded on the portable storage medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes the processing according to the program. The computer can also read the program directly from the portable storage medium and execute the processing according to the program. Further, the computer can sequentially execute the processing according to the received program each time the program is transferred from the server computer.

The embodiments described above are examples of preferred embodiments of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the gist of the present invention.

Regarding the above description of the first to fourth embodiments, the following additional notes will be further disclosed.
(Appendix 1) An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
While the detection unit can detect the terminal or the person within the predetermined range, the data is continuously stored in the storage unit, and when the detection unit cannot detect the terminal or the person within the predetermined range, A plurality of tally is generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in the second storage device of another device. A processing unit that stores the data in the storage unit and erases the data from the storage unit,
Information processing device equipped with.
(Appendix 2) An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
A plurality of tally is generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in the second storage device of another device. The data is continuously stored in the storage unit while the detection unit can detect the terminal or the person within the predetermined range, and the detection unit detects the terminal or the person within the predetermined range. When it becomes impossible, the processing unit that erases the data from the storage unit and the processing unit
Information processing device equipped with.
(Appendix 3) When the data read instruction is received from the terminal, if the data is stored in the storage unit, the data is read from the storage unit and transmitted to the terminal, and the data is stored in the storage unit. If not stored in the unit, the appendix 1 or further includes a data providing unit that generates the data from a plurality of tally corresponding to the data, stores the data in the storage unit, and transmits the generated data to the terminal. The information processing apparatus according to 2.
(Supplementary note 4) The appendix is characterized in that the amount of data in the other part of the plurality of tally stored in the second storage device is smaller than that of a part of the plurality of tally stored in the first storage device. The information processing apparatus according to any one of 1 to 3.
(Supplementary Note 5) The information processing device according to any one of Supplementary note 1 to 4, wherein the storage unit is a volatile storage device.
(Appendix 6) An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
While the detection unit can detect the terminal or person within the predetermined range, the data is continuously stored in the storage unit, and when the detection unit cannot detect the terminal or person within the predetermined range, Encrypted data is generated from the data using the encryption key, and one of the encryption key and the encrypted data is stored in the first storage device of the information processing apparatus, and the encryption key and the encrypted data are stored. A processing unit that stores the other in a second storage device of another device and erases the data from the storage unit, and a processing unit.
Information processing device equipped with.
(Appendix 7) An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
Encrypted data is generated from the data using the encryption key, one of the encryption key and the encrypted data is stored in the first storage device of the information processing apparatus, and the encryption key and the encrypted data are stored. The other is stored in a second storage device of another device, and while the detection unit can detect the terminal or a person within the predetermined range, the data is continuously stored in the storage unit, and the detection unit continues to store the data. When the terminal or the person cannot be detected within the predetermined range, the processing unit for erasing the data from the storage unit and the processing unit.
Information processing device equipped with.
(Appendix 8) The computer of the information processing device having a storage unit for storing data is
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
While the terminal or person can be detected within the predetermined range, the data is continuously stored in the storage unit, and when the terminal or person cannot be detected within the predetermined range, a plurality of tally is generated from the data. Then, a part of the plurality of tally is stored in the first storage device of the information processing device, and the other part of the plurality of tally is stored in the second storage device of the other device, and the data is stored in the first storage device. Erase from the storage
An information processing method characterized by executing processing.
(Appendix 9) The computer of the information processing device having a storage unit for storing data is
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
A plurality of tally is generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in the second storage device of another device. The data is continuously stored in the storage unit while the terminal or person can be detected within the predetermined range, and when the terminal or person cannot be detected within the predetermined range, the data is stored in the storage unit. Erase from the storage
An information processing method characterized by executing processing.
(Appendix 10) When the data read instruction is received from the terminal, if the data is stored in the storage unit, the data is read from the storage unit and transmitted to the terminal, and the data is stored in the storage unit. If not stored in the unit, the computer further executes a process of generating the data from a plurality of tally corresponding to the data, storing the data in the storage unit, and transmitting the generated data to the terminal. The information processing method according to 8 or 9.
(Supplementary note 11) The appendix is characterized in that the amount of data in the other part of the plurality of tally stored in the second storage device is smaller than that of a part of the plurality of tally stored in the first storage device. The information processing method according to any one of 8 to 10.
(Supplementary Note 12) The information processing device according to any one of Supplementary note 8 to 11, wherein the storage unit is a volatile storage device.
(Appendix 13) A computer of an information processing device having a storage unit for storing data is
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
While the terminal or person can be detected within the predetermined range, the data is continuously stored in the storage unit, and when the terminal or person cannot be detected within the predetermined range, the data is used with an encryption key. A second device that generates encrypted data, stores the encryption key and one of the encrypted data in the first storage device of the information processing device, and has the other of the encryption key and the encrypted data in the other device. 2 Stores in a storage device and erases the data from the storage unit.
An information processing method characterized by executing processing.
(Appendix 14) A computer of an information processing device having a storage unit for storing data is
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
Encrypted data is generated from the data using the encryption key, one of the encryption key and the encrypted data is stored in the first storage device of the information processing apparatus, and the encryption key and the encrypted data are stored. The other is stored in a second storage device of another device, the data is continuously stored in the storage unit while the terminal or person can be detected within the predetermined range, and the terminal or person is stored in the predetermined range. When it becomes undetectable, the data is deleted from the storage unit.
An information processing method characterized by executing processing.
(Appendix 15) A management device that manages data and
Distributed including the information processing apparatus according to any one of Supplementary note 1 to 7, which has a storage unit for storing duplicated data of data managed by the management apparatus and provides the duplicated data in response to a request from a terminal. Processing system.

28 Data cache unit (storage unit)
20 Edge computer (information processing device)
70 Terminal 22 Status monitoring unit (part of detection unit)
93 Sensor (part of detection unit)
38 Tally storage unit (first storage device)
10b Cloud server (other equipment)
12 Tally storage unit (second storage device)
24 Tally control unit (part of processing unit)
26 Data erasure control unit (part of processing unit)
21 Data input / output unit (data provision unit)
38A Encrypted data storage unit (first storage device)
12A encryption key storage unit (second storage device)
24A Encryption control unit (part of processing unit)

Claims (8)

An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
A plurality of tally is generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in the second storage device of another device. The data is continuously stored in the storage unit while the detection unit can detect the terminal or the person within the predetermined range, and the detection unit detects the terminal or the person within the predetermined range. When it becomes impossible, the processing unit that erases the data from the storage unit and the processing unit
Information processing device equipped with. When the data read instruction is received from the terminal, if the data is stored in the storage unit, the data is read from the storage unit and transmitted to the terminal, and the data is stored in the storage unit. The information according to claim 1 , further comprising a data providing unit, which generates the data from a plurality of tally corresponding to the data, stores the data in the storage unit, and transmits the generated data to the terminal. Processing equipment. Claim 1 or 2 characterized in that the amount of data in the other part of the plurality of tally stored in the second storage device is smaller than that of a part of the plurality of tally stored in the first storage device. The information processing device described in. The information processing device according to any one of claims 1 to 3 , wherein the storage unit is a volatile storage device. An information processing device having a storage unit for storing data.
A detection unit that detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device.
Encrypted data is generated from the data using the encryption key, one of the encryption key and the encrypted data is stored in the first storage device of the information processing apparatus, and the encryption key and the encrypted data are stored. The other is stored in a second storage device of another device, and while the detection unit can detect the terminal or a person within the predetermined range, the data is continuously stored in the storage unit, and the detection unit continues to store the data. When the terminal or the person cannot be detected within the predetermined range, the processing unit for erasing the data from the storage unit and the processing unit.
Information processing device equipped with. The computer of the information processing device that has a storage unit for storing data
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
A plurality of tally is generated from the data, a part of the plurality of tally is stored in the first storage device of the information processing apparatus, and the other part of the plurality of tally is stored in the second storage device of another device. The data is continuously stored in the storage unit while the terminal or person can be detected within the predetermined range, and when the terminal or person cannot be detected within the predetermined range, the data is stored in the storage unit. Erase from the storage
An information processing method characterized by executing processing. The computer of the information processing device that has a storage unit for storing data
Detects whether or not a predetermined terminal or person exists within a predetermined range from the information processing device, and detects whether or not the predetermined terminal or person exists within a predetermined range.
Encrypted data is generated from the data using the encryption key, one of the encryption key and the encrypted data is stored in the first storage device of the information processing apparatus, and the encryption key and the encrypted data are stored. The other is stored in a second storage device of another device, the data is continuously stored in the storage unit while the terminal or person can be detected within the predetermined range, and the terminal or person is stored in the predetermined range. When it becomes undetectable, the data is deleted from the storage unit.
An information processing method characterized by executing processing. A management device that manages data and
The information processing device according to any one of claims 1 to 5 , which has a storage unit for storing duplicated data of data managed by the management device and provides the duplicated data in response to a request from a terminal. Distributed processing system with.

Images