JP7147899B2 - Acquisition control program, acquisition control method, and acquisition control device - Google Patents

Description

The present invention relates to a storage control program, an acquisition control program, a storage control method, an acquisition control method, a storage control device, and an acquisition control device.

2. Description of the Related Art In recent years, due to changes in work styles, etc., it is often the case that PCs (Personal Computers) are taken out of the office for work. However, since various types of business data are stored in PCs, there have been cases of information leakage due to the loss of PCs. For this reason, for example, a storage device in a PC is encrypted, business data is handled by a server in a data center, and a user remotely accesses the server.

JP 2017-068384 A

However, encryption of storage devices and remote access may impair operability due to reasons such as large processing overhead. On the other hand, for example, it is conceivable to reduce the overhead by encrypting only the business data or storing it in the server. However, if operations for encryption and remote access are complicated, there are cases where the user stores business data in the PC without storing it in the server by encryption or remote access. Therefore, it is difficult for the PC or the administrator of the PC to control the write destination of the user's business data.

One aspect is to provide a storage control program, an acquisition control program, a storage control method, an acquisition control method, a storage control device, and an acquisition control device that can easily control a write destination.

In one aspect, the acquisition control program causes the computer to execute a process of receiving specific instruction data and identification information of the device from the device. The acquisition control program refers to a storage unit that stores the location of data in association with the identification information of the device, and causes the computer to execute processing for specifying the location of data associated with the received identification information. The acquisition control program causes the computer to execute a process of outputting an acquisition request for data stored at the specified location.

The write destination can be easily controlled.

FIG. 1 is a block diagram showing an example of the configuration of the storage control system of the embodiment. FIG. 2 is a diagram showing an example of an in-house operation image. FIG. 3 is a diagram showing an example of an outside work image. FIG. 4 is a diagram illustrating an example of an execution authority storage unit; FIG. 5 is a diagram illustrating an example of a distribution destination storage unit; FIG. 6 is a diagram illustrating an example of a filter driver; FIG. 7 is a diagram showing an example of storage control. FIG. 8 is a flowchart showing an example of storage control processing according to the embodiment. FIG. 9 is a flowchart illustrating an example of acquisition control processing according to the embodiment. FIG. 10 is a diagram showing an example of a computer that executes a storage control program and an acquisition control program.

Hereinafter, embodiments of the storage control program, the acquisition control program, the storage control method, the acquisition control method, the storage control device, and the acquisition control device disclosed in the present application will be described in detail based on the drawings. Note that the disclosed technology is not limited by the present embodiment. In addition, the following examples may be combined as appropriate within a non-contradictory range.

FIG. 1 is a block diagram showing an example of the configuration of the storage control system of the embodiment. The storage control system 1 shown in FIG. 1 has a mobile terminal 10 , a wearable terminal 20 , an information processing device 100 and a cloud 200 . The number of mobile terminals 10, wearable terminals 20, and information processing apparatuses 100 is not limited, and any number of mobile terminals 10, wearable terminals 20, and information processing apparatuses 100 may be provided. The portable terminal 10 and the information processing apparatus 100 and the wearable terminal 20 and the information processing apparatus 100 are mutually connected by wireless communication such as Bluetooth (registered trademark) (hereinafter referred to as BT). communicatively connected to the Further, the information processing device 100 and the cloud 200 are connected via a network N so as to be able to communicate with each other. Any type of communication network, such as the Internet, LAN (Local Area Network), VPN (Virtual Private Network), etc., can be adopted as the network N, regardless of whether it is wired or wireless.

The storage control system 1 is an example of a system that prevents information leakage from the information processing device 100 by controlling the storage area of business data processed by the information processing device 100 . A user of the information processing apparatus 100 possesses, for example, one portable terminal 10 and one wearable terminal 20 . The mobile terminal 10 is, for example, a mobile communication terminal such as a smart phone, and is a terminal used for user authentication and seat absence detection. For example, the mobile terminal 10 is paired with the information processing device 100 using BT, and the mobile terminal ID (Identifier) of the mobile terminal 10 is registered in the information processing device 100 . The mobile terminal 10 performs user authentication by means of fingerprint authentication, iris authentication, face authentication, etc., using, for example, a fingerprint sensor or camera (not shown). When the user authentication is completed and the data connection instruction is input in the unlocking application, the mobile terminal 10 transmits the unlocking data instructing the data connection to the information processing apparatus 100 together with the mobile terminal ID which is the identification information of the mobile terminal 10 . Send.

The wearable terminal 20 is, for example, a wearable device such as a smart watch worn on the user's arm. The wearable terminal 20 receives and stores the first data, which is a part of the data obtained by dividing the business data processed by the information processing device 100 . Further, when the wearable terminal 20 receives an acquisition request for the first data from the information processing device 100 , the wearable terminal 20 transmits the first data corresponding to the acquisition request to the information processing device 100 . The wearable terminal 20 is, for example, paired with the information processing device 100 using BT, and the wearable terminal ID of the wearable terminal 20 is registered in the information processing device 100, similarly to the mobile terminal 10. and

The information processing apparatus 100 is, for example, an information processing apparatus that a user works inside or outside the company, and can use a portable personal computer, a tablet terminal, or the like. The information processing apparatus 100 is a portable computer and executes storage control. That is, the information processing apparatus 100 receives a data write request and the identification information of the data write source. The information processing apparatus 100 identifies the execution authority associated with the received identification information of the write source by referring to the storage unit that stores the execution authority of the data write source in association with the identification information of the write source. do. The information processing apparatus 100 stores the data in the first storage unit when the identified execution authority corresponds to the specific execution authority. When the identified execution authority does not correspond to the specific execution authority, the information processing device 100 stores the data in the second storage unit (cloud 200) provided outside the computer (information processing device 100). Thereby, the information processing apparatus 100 can easily control the write destination.

The information processing apparatus 100 also receives specific instruction data and identification information of the device from the device (portable terminal 10). The information processing apparatus 100 identifies the location (wearable terminal 20) of the data associated with the received identification information by referring to the storage unit that stores the location of the data in association with the identification information of the device. The information processing apparatus 100 outputs an acquisition request for data stored at the specified location. Thereby, the information processing apparatus 100 can reduce the risk of information leakage.

Here, a usage image for in-house operation and outside work will be described with reference to FIGS. 2 and 3. FIG. FIG. 2 is a diagram showing an example of an in-house operation image. In the example of FIG. 2, the user is performing various tasks using the information processing apparatus 100 in the company. The storage unit of the information processing device 100 has a general area 122a and a secret sharing area 122b. The information processing apparatus 100 monitors file opening and writing operations to the general area 122a at the driver level, and directly performs the operation on the general area 122a, or monitors an external storage unit, for example, the storage unit 210 of the cloud 200. to sort out what to do. At this time, the information processing apparatus 100 distributes the storage destination based on the execution authority of the application (hereinafter also referred to as application).

For example, it is assumed that an OS (Operating System) running on the information processing apparatus 100 is an application whose execution authority is that of an administrator, and business data including personal information and the like is not left in the information processing apparatus 100 . For this reason, the file opening (reading) and writing operations to the general area 122a of the application with administrator authority are directly performed on the general area 122a. On the other hand, a file opening or writing operation to the general area 122a of an application with general user authority is performed on the storage unit 210 of the cloud 200 by hooking the processing of the operation. In the example of FIG. 2, a write operation to data 30 is hooked, redirected to cloud 200, and stored in storage 210 of cloud 200 as data 30a.

On the other hand, the secret sharing area 122b is, for example, a folder for taking out data, and the data written in the secret sharing area 122b is secret-shared and stored. For example, when an operation to write data 31 to the secret sharing area 122b is performed, the information processing apparatus 100 encrypts the data 31 and divides the encrypted data 31 into two data 31a and 31b. The information processing device 100 transmits the data 31a to the wearable terminal 20 to store it, and stores the data 31b in the secret sharing area 122b.

FIG. 3 is a diagram showing an example of an outside work image. FIG. 3 shows an example of a case where a user performs various tasks using the information processing apparatus 100 outside the company. The user unlocks the information processing device 100 using, for example, a user ID and password. Next, the user unlocks the mobile terminal 10 using biometric authentication such as fingerprint, iris, and face authentication. The user uses the unlocking application of the mobile terminal 10 to instruct the combination of the secret-shared data. When instructed to combine data, the information processing apparatus 100 transmits an acquisition request for the data 31 a to the wearable terminal 20 and acquires the data 31a from the wearable terminal 20 . Also, the information processing apparatus 100 acquires the data 31b stored in the secret sharing area 122b and combines them in the RAM area 124 to restore the data 31. FIG. When the restored data 31 is changed and stored again, the information processing apparatus 100 encrypts and divides the data 31 again in the same manner as writing to the secret sharing area 122b shown in FIG. Further, when the OS writes data to a system file during work outside the company, the information processing apparatus 100 writes data to the general area 122a because the data operation is performed with administrator authority.

Next, the configuration of the information processing device 100 will be described. As shown in FIG. 1 , information processing apparatus 100 includes first communication section 110 , second communication section 111 , display section 112 , operation section 113 , storage section 120 and control section 130 . The information processing apparatus 100 may have various functional units of known computers, such as various input devices and audio output devices, in addition to the functional units shown in FIG.

The first communication unit 110 is realized by, for example, a communication module such as BT. The first communication unit 110 is, for example, a communication interface that is wirelessly connected to the mobile terminal 10 and the wearable terminal 20 via BT and controls information communication between the mobile terminal 10 and the wearable terminal 20 . When the first data acquisition request is input from the control unit 130 , the first communication unit 110 transmits the first data acquisition request to the wearable terminal 20 . The first communication unit 110 also receives unlock data from the mobile terminal 10 and receives first data from the wearable terminal 20 . First communication unit 110 outputs the received unlocking data and the first data to control unit 130 .

The second communication unit 111 is realized by, for example, a communication module such as a wireless LAN, a NIC (Network Interface Card), or the like. The second communication unit 111 is a communication interface that is wired or wirelessly connected to the cloud 200 via the network N and controls information communication with the cloud 200 . The second communication unit 111 transmits data input from the control unit 130 to the cloud 200 . Second communication unit 111 also outputs data received from cloud 200 to control unit 130 .

The display unit 112 is a display device for displaying various information. The display unit 112 is implemented by, for example, a liquid crystal display as a display device. The display unit 112 displays various screens such as a display screen input from the control unit 130 .

The operation unit 113 is an input device that receives various operations from the user of the information processing apparatus 100 . The operation unit 113 is realized by, for example, a keyboard, mouse, etc. as an input device. The operation unit 113 outputs the operation input by the user to the control unit 130 as operation information. Note that the operation unit 113 may be realized by a touch panel or the like as an input device, and the display device of the display unit 112 and the input device of the operation unit 113 may be integrated.

The storage unit 120 is implemented by, for example, a semiconductor memory device such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk. Storage unit 120 has execution authority storage unit 121 , data storage unit 122 , distribution destination storage unit 123 , and RAM area 124 . The data storage unit 122 also has a general area 122a and a secret sharing area 122b. Further, storage unit 120 stores information used for processing in control unit 130 .

The execution authority storage unit 121 stores the execution authority of the data reading or writing source in association with the identification information of the reading or writing source. FIG. 4 is a diagram illustrating an example of an execution authority storage unit; As shown in FIG. 4, the execution authority storage unit 121 has items such as "process name" and "execution authority". The execution authority storage unit 121 stores, for example, one record for each process name.

"Process name" is identification information that identifies a process that reads or writes data. “Execution authority” is information indicating the execution authority of the corresponding process. The “execution authority” includes, for example, administrator authority that allows a superuser to execute privileged functions, and general user authority that allows general users to perform normal operations. For example, if the OS is Windows (registered trademark), administrator authority includes administrator and system for executing various service programs. For general user authority, for example, if the OS is Windows, user can be cited.

Returning to the description of FIG. 1, the data storage unit 122 stores the OS and user data. The data storage unit 122 has a general area 122a and a secret sharing area 122b. The general area 122a is an example of the first area, and corresponds to the C drive in Windows, for example, and stores the OS and various programs, as well as data created by the user using various programs. The secret sharing area 122b is an example of a second area, and is, for example, a folder for secret sharing. That is, the data stored in the secret sharing area 122b is subject to secret sharing. The secret sharing area 122b may be, for example, a specific folder in the C drive of Windows, or a partition different from the C drive. Also, the secret sharing area 122b may mount a partition different from the C drive to a folder in the C drive using a symbolic link or the like.

The distribution destination storage unit 123 stores the distribution destination (location) of the first data, which is the divided piece of the data stored in the secret sharing area 122b, in association with the mobile terminal ID of the mobile terminal 10 owned by the user. . FIG. 5 is a diagram illustrating an example of a distribution destination storage unit; As shown in FIG. 5, the distribution destination storage unit 123 has items such as "portable terminal ID" and "wearable terminal ID". The distribution destination storage unit 123 stores, for example, one record for each mobile terminal ID.

“Mobile terminal ID” is identification information for identifying the mobile terminal 10 owned by the user. The “wearable terminal ID” is identification information for identifying the wearable terminal 20 worn by the user. The distribution destination storage unit 123 stores, for example, the wearable terminal ID of the wearable terminal 20 that stores the first data among the data divided into the first data and the second data by secret sharing. It is stored in association with the mobile terminal ID of the mobile terminal 10 to be used.

The RAM area 124 is a storage area for storing the combined data when the secret-sharing data is combined. In addition, the RAM area 124 temporarily stores target data for secret sharing when data is secret shared. The RAM area 124 is secured in, for example, the main memory, and the stored contents are erased when the power of the information processing apparatus 100 is turned off.

Returning to the description of FIG. 1, the control unit 130 executes a program stored in an internal storage device using, for example, a CPU (Central Processing Unit) or an MPU (Micro Processing Unit) as a work area. It is realized by Also, the control unit 130 may be implemented by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The control unit 130 includes a reception unit 131, a first identification unit 132, a storage control unit 133, a second identification unit 134, and an acquisition unit 135, and implements the information processing functions and actions described below. or run. Note that the internal configuration of the control unit 130 is not limited to the configuration shown in FIG. 1, and may be another configuration as long as it performs information processing described later. In the following description, the OS operates in the control unit 130, and the reception unit 131, the first identification unit 132, the storage control unit 133, the second identification unit 134, and the acquisition unit 135 operate as filter drivers in the OS. It is described as being incorporated.

Here, the filter driver will be described with reference to FIG. FIG. 6 is a diagram illustrating an example of a filter driver; As shown in FIG. 6, a block diagram 40 represents each function of Windows. Windows has a kernel mode 41 in which an OS kernel, kernel mode drivers, etc. operate, and a user mode 42 in which applications and user mode drivers operate. The kernel mode 41 includes driver routines and a hardware abstraction layer (HAL), through which the kernel and drivers can access hardware. An application operating in user mode 42 accesses each driver in kernel mode 41 using Windows API 43 . In file access, commands, data, etc. are exchanged between the Windows API 43 and the file system driver 44 . In this embodiment, a filter driver 45 is provided between Windows API 43 and file system driver 44 . The filter driver 45 hooks an I/O (Input/Output) request (I/O Request Packet, IRP) from an application to control the file system driver 44 . That is, the filter driver 45 is loaded above the file system driver 44 and hooks commands, data, and the like to the file system driver 44 .

Returning to the description of FIG. 1 , the reception unit 131 hooks access requests to the file system driver 44 . The receiving unit 131 determines whether the hooked access request is a data write request. If the receiving unit 131 determines that the hooked access is not a data write request, the receiving unit 131 receives a data read request and the process name as identification information of the data read source. If the receiving unit 131 determines that the hooked access is a data write request, the receiving unit 131 receives the data write request and the process name, which is the identification information of the data write source. The receiving unit 131 outputs the received data read request and process name or the received data write request and process name to the first specifying unit 132 .

Further, when acquiring the first data stored in the wearable terminal 20, the reception unit 131 first receives an unlocking of the information processing device 100 from the OS. When the information processing device 100 is unlocked, the reception unit 131 starts monitoring unlocking data transmitted from the mobile terminal 10 . The reception unit 131 determines whether or not the unlocking data has been received. If the receiving unit 131 determines that the unlocking data has not been received, the receiving unit 131 continues monitoring the unlocking data. When determining that the unlocking data has been received, the accepting unit 131 accepts the unlocking data and the mobile terminal ID of the mobile terminal 10 . That is, the receiving unit 131 receives specific instruction data and identification information of the device from the device (portable terminal 10). Accepting unit 131 outputs the accepted unlocking data and mobile terminal ID to second identifying unit 134 .

Note that the reception unit 131 uses the first communication unit 110 to poll the presence of the mobile terminal 10 at intervals of, for example, one second, and determines whether or not the mobile terminal 10 is in the vicinity of the information processing apparatus 100. Also detect. When the mobile terminal 10 stops responding to polling, the reception unit 131 detects that the user has left the vicinity of the information processing device 100 , that is, has left the seat, and instructs the OS to lock the information processing device 100 . Instead of the mobile terminal 10, the wearable terminal 20 or an ID card compatible with NFC (Near Field Communication) may be used for seat absence detection.

When a data read request and a process name or a write request and a process name are input from the reception unit 131, the first identification unit 132 refers to the execution authority storage unit 121 and determines the process from which the data is read or written. Identify the execute permissions for the . That is, the first identifying unit 132 refers to the storage unit that stores the execution authority of the data write source in association with the identification information of the write source, and determines the execution authority associated with the received identification information of the write source. Identify permissions. The first identification unit 132 outputs the data read request or write request, the process name, and the execution authority of the identified process to the storage control unit 133 .

The data read request or write request, the process name, and the process execution authority are input from the first specifying unit 132 to the storage control unit 133 . The storage control unit 133 determines whether the target of the read request or write request is the general area 122a. When the storage control unit 133 determines that the target of the read request or write request is the general area 122a, it determines whether or not the process execution authority is administrator authority. When the storage control unit 133 determines that the process execution authority is the administrator's authority, the storage control unit 133 outputs the data read request or write request as it is to the file system driver 44 to read the data from the general area 122a, or , memorize.

When the storage control unit 133 determines that the process execution authority is not the administrator's authority, the storage control unit 133 modifies the data read request or write request so that it is redirected to an external storage unit, for example, the storage unit 210 of the cloud 200. . The storage control unit 133 outputs a request to read or write the corrected data to the file system driver 44 . That is, the storage control unit 133 causes the data to be read from or stored in an external storage unit, for example, the storage unit 210 of the cloud 200 via the second communication unit 111 and the network N. Note that when the information processing apparatus 100 is not connected to the network N and cannot access the storage unit 210 of the cloud 200 , the storage control unit 133 redirects the data read request or write request to the RAM area 124 . can be modified to Further, access of system files to the general area 122a will be described later with reference to FIG.

On the other hand, when the memory control unit 133 determines that the target of the read request or write request is not the general area 122a, it modifies the data read request or write request so as to redirect it to the RAM area 124, for example. In the case of a write request, the storage control unit 133 outputs a write request for the corrected data to the file system driver 44 and temporarily stores the data in the RAM area 124 . In the case of a write request, the storage control unit 133 performs secret sharing by encrypting the data stored in the RAM area 124 and dividing it into first data and second data. For encryption, for example, AES (Advanced Encryption Standard) or 3DES (Triple Data Encryption Standard) can be used. Further, data division in secret sharing can be performed, for example, so as to reduce the size of the first data to be stored in the wearable terminal 20 . For example, the division ratio between the first data and the second data can be about 1:1000.

The storage control unit 133 transmits the divided first data to the wearable terminal 20 via the first communication unit 110 for storage. The storage control unit 133 also stores the divided second data in the secret distribution area 122b. Further, the storage control unit 133 associates the wearable terminal ID of the wearable terminal 20 that transmitted the first data with the mobile terminal ID of the mobile terminal 10 and stores them in the distribution destination storage unit 123 .

In the case of a read request for the secret sharing area 122b, the storage control unit 133 outputs a read request for the corrected data to the file system driver 44, and sends the first data to the wearable terminal 20 via the first communication unit 110. Submit a retrieval request. Here, it is assumed that the wearable terminal 20 and the information processing device 100 are already associated with each other. The storage control unit 133 acquires the first data in response to the acquisition request from the wearable terminal 20 via the first communication unit 110 . After acquiring the first data, the storage control unit 133 acquires the second data corresponding to the acquired first data from the secret sharing area 122b. The storage control unit 133 combines and decodes the first data and the second data, and restores the data before division to the RAM area 124 . The storage control unit 133 causes the read source process to read the restored data.

In other words, the storage control unit 133 stores the data in the first storage unit when the identified execution authority corresponds to the specific execution authority. Further, when the specified execution authority does not correspond to the specific execution authority, the storage control unit 133 stores the data in the second storage unit (storage unit 210) provided outside the computer (information processing device 100). . Also, the first storage unit has a first area and a second area. If the data write request is for the first area and the identified execution authority corresponds to the specific execution authority, the storage control unit 133 causes the data to be stored in the first area and applies the identified execution authority. does not correspond to a particular execution right, store the data in the second storage. Further, when the data write request is for the second area, the storage control unit 133 divides the data, stores one of the divided data in the second area, and stores the other divided data in the computer. stored in a device (wearable terminal 20) provided outside.

Here, read/write access control for the general area 122a, that is, storage control will be described with reference to FIG. FIG. 7 is a diagram showing an example of storage control. In the example of FIG. 7, when an application accesses data in the general area 122 a , for example, the C drive, an access request via the Windows API 43 is hooked by the filter driver 45 . The filter driver 45 outputs the access request to the file system driver 44 as it is when the process that issued the hooked access request has administrator authority. In this case, the application reads and writes data to the general area 122a.

On the other hand, the filter driver 45 refers to the owner of the data to be accessed when the hooked access request issuance source process does not have administrator authority. The filter driver 45 directly outputs the access request to the file system driver 44 when the owner of the data is the data whose owner is the administrator authority, for example, the system file 32, and reads and writes the data in the general area 122a. Let This is because when an application with general user authority wants to access the system file 32, if the hooked access request is issued by a process that does not have administrator authority, all the applications are redirected to the storage unit 210 of the cloud 200 normally. This is because it does not work. Since the system file 32 and the like are not business data including personal information, information leakage does not occur even if they are written to the general area 122a.

On the other hand, the filter driver 45 is modified to redirect the access request to the storage unit 210 of the cloud 200 when the owner of the data is the data with general user authority, for example, the data 30 such as spreadsheet software. do. The filter driver 45 outputs the modified access request to the file system driver 44 and causes the storage unit 210 of the cloud 200 to read and write the data 30a. At this time, it appears to the application that the data 30 is on the C drive, but it is actually stored in the storage unit 210 of the cloud 200 as the data 30a.

Returning to the description of FIG. 1, when the unlocking data and the mobile terminal ID are input from the reception unit 131, the second specifying unit 134 refers to the distribution destination storage unit 123 and selects the wearable device corresponding to the mobile terminal ID. Identify the terminal ID. That is, the second identifying unit 134 identifies the wearable terminal 20 in which the first data is stored. In other words, the second identifying unit 134 identifies the location of the data associated with the received identification information by referring to the storage unit that stores the location of the data in association with the identification information of the device. The second identifying unit 134 outputs the identified wearable terminal ID to the acquiring unit 135 together with the unlocking data.

When the specified wearable terminal ID and the unlocking data are input from the second specifying unit 134 , the acquiring unit 135 acquires the wearable terminal 20 corresponding to the specified wearable terminal ID via the first communication unit 110 . A request for obtaining the first data is sent to . That is, the acquisition unit 135 outputs an acquisition request for data stored at the specified location. The acquisition unit 135 acquires the first data in response to the acquisition request from the identified wearable terminal 20 via the first communication unit 110 .

After obtaining the first data, the obtaining unit 135 obtains the second data corresponding to the obtained first data from the secret sharing area 122b. Acquisition unit 135 combines and decodes the first data and the second data based on the unlocking data, and restores the data before division to RAM area 124 .

In other words, the data stored in the location (wearable terminal 20) is the first data, which is one of the divided data, and the second data, which is the other of the divided data, is stored in the storage unit of the computer. This is data stored in (secret sharing area 122b). The acquisition unit 135 acquires the first data corresponding to the acquisition request from the specified location, and combines the acquired first data and the second data to restore the data before division. The location (wearable terminal 20) is a device different from the device (portable terminal 10) and is a wearable device worn by the user of the computer (information processing apparatus 100).

Next, the operation of the information processing apparatus 100 according to the embodiment will be described. First, the storage control processing related to the data write request will be described. FIG. 8 is a flowchart showing an example of storage control processing according to the embodiment.

The reception unit 131 of the information processing device 100 hooks access to the file system driver 44 . If the receiving unit 131 determines that the hooked access is a data write request, the receiving unit 131 receives the data write request and the process name, which is the identification information of the data write source (step S1). The accepting unit 131 outputs the accepted data write request and the process name to the first specifying unit 132 .

When a data write request and a process name (identification information) are input from the reception unit 131, the first identification unit 132 refers to the execution authority storage unit 121 and writes data based on the received identification information. Identify the execution authority of the original process (step S2). The first identification unit 132 outputs the data write request, the process name, and the execution authority of the identified process to the storage control unit 133 .

When the data write request, process name, and process execution authority are input from the first specifying unit 132, the storage control unit 133 determines whether or not the target of the write request is the general area 122a ( step S3). When the storage control unit 133 determines that the target of the write request is the general area 122a (step S3: affirmative), it determines whether or not the process execution authority is administrator authority (step S4). When the storage control unit 133 determines that the process execution authority is the administrator's authority (step S4: affirmative), the storage control unit 133 outputs the data write request as it is to the file system driver 44, and stores the data in the general area 122a. (step S5).

When the storage control unit 133 determines that the process execution authority is not the administrator's authority (step S4: No), the storage control unit 133 modifies the data write request so as to redirect it to the external storage unit. The storage control unit 133 outputs a write request for the corrected data to the file system driver 44, and stores the data in the external storage unit (step S6).

On the other hand, when the storage control unit 133 determines that the target of the write request is not the general area 122a (step S3: No), it modifies the data write request so as to redirect it to the RAM area 124, for example. The storage control unit 133 outputs a write request for the corrected data to the file system driver 44 and temporarily stores the data in the RAM area 124 . The storage control unit 133 encrypts the data stored in the RAM area 124 and divides it into first data and second data (step S7).

The storage control unit 133 transmits the divided first data to the wearable terminal 20 for storage (step S8). The storage control unit 133 also stores the divided second data in the secret sharing area 122b (step S9). Further, the storage control unit 133 stores the wearable terminal ID and the portable terminal ID in association with each other in the distribution destination storage unit 123 (step S10). Thereby, the information processing apparatus 100 can easily control the write destination.

In the case of a data read request when the wearable terminal 20 and the information processing apparatus 100 are already associated, the processing of steps S1 to S6 is the same as in the case of a write request. In the case of the read request, instead of the processing of steps S7 to S10, the first data is acquired from the wearable terminal 20, combined with the second data stored in the secret sharing area 122b, and stored in the RAM. Restore data to area 124 . After that, the storage control unit 133 causes the read source process to read the restored data. Accordingly, the information processing apparatus 100 can easily control the read destination.

Acquisition control processing for performing user authentication and combining divided data will now be described. FIG. 9 is a flowchart illustrating an example of acquisition control processing according to the embodiment.

The reception unit 131 of the information processing device 100 receives unlocking of the information processing device 100 (step S21). When the information processing device 100 is unlocked, the reception unit 131 starts monitoring the unlock data transmitted from the mobile terminal 10 (step S22). The reception unit 131 determines whether or not the unlocking data has been received (step S23). When the receiving unit 131 determines that the unlocking data has not been received (step S23: No), the process returns to the determination of step S23. When it is determined that the unlocking data has been received (step S23: affirmative), the accepting unit 131 accepts the unlocking data and the mobile terminal ID of the mobile terminal 10 (step S24). Accepting unit 131 outputs the accepted unlocking data and mobile terminal ID to second identifying unit 134 .

When the unlocking data and the mobile terminal ID are input from the reception unit 131, the second specifying unit 134 refers to the distribution destination storage unit 123 to specify the wearable terminal ID corresponding to the mobile terminal ID (step S25). ). The second identifying unit 134 outputs the identified wearable terminal ID to the acquiring unit 135 together with the unlocking data.

When the specified wearable terminal ID and the unlocking data are input from the second specifying unit 134, the acquiring unit 135 requests the wearable terminal 20 corresponding to the specified wearable terminal ID to acquire the first data. Send (step S26). The acquisition unit 135 acquires the first data in response to the acquisition request from the specified wearable terminal 20 (step S27).

After obtaining the first data, the obtaining unit 135 obtains the second data corresponding to the obtained first data from the secret sharing area 122b (step S28). The obtaining unit 135 combines and decrypts the first data and the second data based on the unlocking data, and restores the data before division to the RAM area 124 (step S29). Thereby, the information processing apparatus 100 can reduce the risk of information leakage. That is, the storage control system 1 can access the data stored in the secret sharing area 122b only when the user who brought out the information processing device 100, the portable terminal 10, and the wearable terminal 20 are present. In addition, since the user wears the wearable terminal 20 in the storage control system 1, the risk of losing the wearable terminal 20 and the information processing apparatus 100 at the same time can be reduced. In addition, the storage control system 1 can prevent information leakage even if the information processing device 100 is lost. In addition, the storage control system 1 can realize robust security through biometric authentication in the portable terminal 10 and convenience through use of short-range wireless communication.

Although BT is used for communication between the mobile terminal 10, the wearable terminal 20, and the information processing apparatus 100 in the above embodiment, the present invention is not limited to this. For example, a wireless LAN such as Wi-Fi Direct (registered trademark) or other short-range wireless communication standards may be used.

Further, in the above embodiment, the data stored in the secret sharing area 122b is secret shared without user's operation, but the present invention is not limited to this. For example, the file operation screen may be provided with a button for taking out, and when the button is pressed by the user, secret sharing may be performed for the data stored in the secret sharing area 122b.

In this way, the information processing apparatus 100 is a portable computer and executes storage control. That is, the information processing apparatus 100 receives a data write request and the identification information of the data write source. In addition, the information processing apparatus 100 refers to the execution authority storage unit 121 that stores the execution authority of the data write source in association with the identification information of the write source, and the execution authority associated with the received identification information of the write source. identify the execution permissions Further, when the identified execution authority corresponds to the specific execution authority, the information processing apparatus 100 stores the data in the data storage section 122 which is the first storage section. Further, when the identified execution authority does not correspond to the specific execution authority, the information processing apparatus 100 stores the data in the storage section 210, which is a second storage section provided outside the computer. As a result, the information processing apparatus 100 can easily control the write destination.

The data storage unit 122, which is the first storage unit of the information processing apparatus 100, has a general area 122a as a first area and a secret sharing area 122b as a second area. Further, when the data write request is for the general area 122a, which is the first area, and the specified execution authority corresponds to the specific execution authority, the information processing apparatus 100 writes the data in the first area. It is stored in a certain general area 122a. Further, when the identified execution authority does not correspond to the specific execution authority, the information processing apparatus 100 stores the data in the storage section 210 which is the second storage section. Further, the information processing apparatus 100 divides the data when the data write request is for the secret sharing area 122b, which is the second area. In addition, the information processing apparatus 100 stores one of the divided data in the secret sharing area 122b, which is the second area, and stores the other of the divided data in a device (mounted device) provided outside the computer (information processing apparatus 100). stored in the type terminal 20). As a result, the information processing apparatus 100 can easily control the write destination of the data to be taken out.

Also, the device (wearable terminal 20) is a wearable device worn by the user of the computer (information processing apparatus 100). As a result, the risk of losing the wearable terminal 20 and the information processing device 100 at the same time can be reduced.

The information processing apparatus 100 also receives specific instruction data and identification information of the device from the device (portable terminal 10). Further, the information processing apparatus 100 refers to the distribution destination storage unit 123 that stores the location of the data (wearable terminal 20) in association with the identification information of the device (portable terminal 10), and associates the data location (wearable terminal 20) with the received identification information. to identify the location of the data obtained. The information processing apparatus 100 also outputs a request for acquiring data stored at the identified location. As a result, the user can access the data stored in the secret sharing area 122b only when the mobile terminal 10, the wearable terminal 20 and the information processing device 100 are all present.

The data stored in the location (wearable terminal 20) is the first data, which is one of the divided data, and the second data, which is the other of the divided data, is stored in the computer storage unit ( This is data stored in the secret sharing area 122b). Further, the information processing apparatus 100 acquires the first data corresponding to the acquisition request from the specified location, and combines the acquired first data and the second data to restore the data before division. As a result, even if the user loses the information processing apparatus 100, information leakage can be suppressed.

The location (wearable terminal 20) is a device different from the device (portable terminal 10) and is a wearable device worn by the user of the computer (information processing apparatus 100). As a result, the risk of losing the wearable terminal 20 and the information processing device 100 at the same time can be reduced.

Also, each constituent element of each part illustrated does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution and integration of each part is not limited to the one shown in the figure, and all or part of it can be functionally or physically distributed and integrated in arbitrary units according to various loads and usage conditions. can be configured as For example, the second identification unit 134 and the acquisition unit 135 may be integrated. Moreover, the illustrated processes are not limited to the order described above, and may be performed simultaneously or in a different order as long as the contents of the processes are not inconsistent.

Furthermore, the various processing functions performed by each device may be executed in whole or in part on a CPU (or a microcomputer such as an MPU or MCU (Micro Controller Unit)). Also, various processing functions may be executed in whole or in part on a program analyzed and executed by a CPU (or a microcomputer such as an MPU or MCU) or on hardware based on wired logic. It goes without saying that it is good.

By the way, the various processes described in the above embodiments can be realized by executing a prepared program on a computer. Therefore, an example of a computer that executes a program having functions similar to those of the above embodiments will be described below. FIG. 10 is a diagram showing an example of a computer that executes a storage control program and an acquisition control program.

As shown in FIG. 10, a computer 300 has a CPU 301 that executes various arithmetic processes, an input device 302 that receives data input, and a monitor 303 . The computer 300 also includes a medium reading device 304 for reading a program or the like from a storage medium, an interface device 305 for connecting to various devices, and a communication device 306 for connecting to other information processing devices by wire or wirelessly. have The computer 300 also has a RAM 307 that temporarily stores various information, and a hard disk device 308 . Each device 301 - 308 is also connected to a bus 309 .

The hard disk device 308 stores a storage control program having functions similar to those of the reception unit 131, the first identification unit 132, the storage control unit 133, the second identification unit 134, and the acquisition unit 135 shown in FIG. A control program is stored. The hard disk device 308 also stores an execution authority storage unit 121, a data storage unit 122, a distribution destination storage unit 123, a RAM area 124, and various data for implementing the storage control program and the acquisition control program. The input device 302 receives input of various information such as operation information from the user of the computer 300, for example. The monitor 303 displays various screens such as an output screen to the user of the computer 300, for example. The medium reading device 304 reads user authentication information from, for example, an NFC-compatible ID card. The interface device 305 is connected with, for example, a printing device. The communication device 306 , for example, is connected to the mobile terminal 10 and the wearable terminal 20 and exchanges various information with the mobile terminal 10 and the wearable terminal 20 . Also, the communication device 306 is connected to the network N, for example, and exchanges various information with the cloud 200 and other information processing devices.

The CPU 301 reads each program stored in the hard disk device 308, develops it in the RAM 307, and executes it, thereby performing various processes. Further, these programs can cause the computer 300 to function as the reception unit 131, the first identification unit 132, the storage control unit 133, the second identification unit 134, and the acquisition unit 135 shown in FIG.

Note that the storage control program and acquisition control program described above do not necessarily have to be stored in the hard disk device 308 . For example, the computer 300 may read and execute a program stored in a storage medium readable by the computer 300 . Examples of storage media readable by the computer 300 include portable recording media such as CD-ROMs, DVD discs, and USB memories, semiconductor memories such as flash memories, hard disk drives, and the like. Alternatively, the storage control program and the acquisition control program may be stored in a device connected to a public line, the Internet, a LAN, etc., and the computer 300 may read out and execute the storage control program and the acquisition control program. good.

1 Storage Control System 10 Mobile Terminal 20 Wearable Terminal 100 Information Processing Device 110 First Communication Unit 111 Second Communication Unit 112 Display Unit 113 Operation Unit 120 Storage Unit 121 Execution Authority Storage Unit 122 Data Storage Unit 122a General Area 122b Secret Sharing Area 123 Distribution Destination Storage Unit 124 RAM Area 130 Control Unit 131 Reception Unit 132 First Identification Unit 133 Storage Control Unit 134 Second Identification Unit 135 Acquisition Unit 200 Cloud 210 Storage Unit N Network

Claims (4)

Receiving specific instruction data and identification information of the device from the device by short- range wireless communication ,
The user of the computer wears a device different from the device associated with the received identification information by referring to the storage unit that stores the wearable terminal, which is the location of the data, in association with the identification information of the device. identifying the wearable terminal to
outputting an acquisition request for data stored in the identified wearable terminal to the wearable terminal via the short-range wireless communication ;
An acquisition control program characterized by causing a computer to execute processing. The data stored in the wearable terminal is the first data that is one of the divided data, and the second data that is the other of the divided data is the data stored in the storage unit of the computer. and
Further, acquiring the first data corresponding to the acquisition request from the identified wearable terminal through the short- range wireless communication , and combining the acquired first data and the second data restore the data before splitting,
2. The acquisition control program according to claim 1, causing a computer to execute the processing . Receiving specific instruction data and identification information of the device from the device by short- range wireless communication ,
The user of the computer wears a device different from the device associated with the received identification information by referring to the storage unit that stores the wearable terminal, which is the location of the data, in association with the identification information of the device. identifying the wearable terminal to
outputting an acquisition request for data stored in the identified wearable terminal to the wearable terminal via the short-range wireless communication ;
An acquisition control method characterized in that the processing is executed by a computer. a reception unit that receives specific instruction data and identification information of the device from a device by short- range wireless communication ;
The user of the computer wears a device different from the device associated with the received identification information by referring to the storage unit that stores the wearable terminal, which is the location of the data, in association with the identification information of the device. an identification unit that identifies the wearable terminal that
an acquisition unit that outputs an acquisition request for data stored in the identified wearable terminal to the wearable terminal through the short-range wireless communication ;
An acquisition control device comprising:

Images