JP7486368B2 - Information processing device, control method for information processing device, information processing system, and program - Google Patents

Description

The present invention relates to an information processing device, a control method for an information processing device, an information processing system, and a program.

External storage devices such as CDs, DVDs, and USB storage devices (hereinafter referred to as "USB memory") are widely used as storage devices for information processing devices. It is easy for users to write digital data in an information processing device as a file to an external storage device or to copy the data. This can lead to an increase in information leakage via external storage devices. As such, as disclosed in Patent Document 1, an information processing device that controls the use of external recording devices such as CDs is known.

In recent years, USB memories (hereinafter referred to as "security USB memories") have been provided that incorporate security features such as antivirus software to prevent problems such as viruses and infections, and information leaks. A security USB memory includes, for example, a CD area in which an authentication application (for example, Startup.exe) is saved, and a storage area. When the security USB memory is connected to an information processing device, the CD drive is mounted, and the authentication application saved in the CD area is started, the authentication application prompts the user to input an access authentication key. If the access authentication key is successfully verified, the USB memory drive is mounted, and writing/reading to the storage area becomes possible.

JP 2014-153888 A

However, if the information processing device is set to "prohibit use" of CDs/DVDs (prohibit writing and reading) and "allow use" of USB memory (allow writing and reading), then CDs/DVDs cannot be used and therefore the security USB memory cannot be used. There are also security USB memories that write to the CD area when switching from the CD area to the storage area. If the settings are set to "allow reading only" of CDs/DVDs and "allow use" of USB memory, an error occurs as it is not possible to switch from the CD area to the storage area and the security USB memory cannot be used. Also, for security reasons, there are cases where you want to allow use of security USBs but prohibit use of CDs/DVDs.

The present invention aims to control access to an external storage device (e.g., a security USB) that has multiple areas while achieving both security and convenience.

In order to solve the above problems, the present invention has the following configuration.
An information processing device capable of connecting to an external storage device having a first area in which first information is stored and a second area which can be read and written,
an intercepting means for intercepting a request to the connected external storage device when the external storage device is connected;
a control means for controlling a request to the external storage device intercepted by the intercepting means when the availability of the external storage device is set such that writing to the first area is not permitted and use of the second area is permitted;
an acquisition means for acquiring process identification information for identifying a process included in the first information stored in the first area ,
When the process identified by the process identification information acquired by the acquisition means is a process that is permitted to use an external storage device, the control means temporarily changes the first area to one that is permitted to be used .

The present invention makes it possible to control access to an external storage device having multiple areas while achieving both security and user convenience.

A system configuration diagram showing an example of the configuration of an information processing system. A hardware configuration diagram of a client terminal device 110. A hardware configuration diagram of a server device 120. FIG. 13 is a diagram showing an example of setting information 121. FIG. 13 is a diagram showing an example of setting information 121. Flowchart showing the process of the client terminal device 110 Flowchart showing the process of step S604 A diagram showing an example of the configuration of an allowed process information list Flowchart showing the process of step S604 A diagram showing an example of the configuration of an allowed memory information list. Flowchart showing the process of step S604

The following describes a preferred embodiment of the present invention with reference to the drawings. Note that the embodiment described below is an example of a specific implementation of the present invention, and is one specific example of the configuration described in the claims.

[First embodiment]
<System configuration diagram>
First, the information processing system configuration according to this embodiment will be described with reference to the system configuration diagram of FIG. 1. As shown in FIG. 1, the information processing system according to this embodiment has information processing devices 110 and 120 and an external storage device 130, and each information processing device is connected to a network 140 such as a LAN or the Internet. Hereinafter, the information processing device 110 may be referred to as a client terminal device, and the information processing device 120 may be referred to as a server device. Note that there may be a plurality of client terminal devices 110 and server devices 120. Furthermore, the client terminal device 110 and the server device 120 may be any device, such as a PC or a mobile terminal device, that can execute each process described below as being performed by the information processing device. Furthermore, although the terminal device 110 is connected via the network 140, it may be a stand-alone device that does not use the network 140. Note that the information processing system may be configured using a thin client (for example, a terminal service). A thin client is a computer architecture in which an information processing device (client terminal device) remotely connects to a server computer and executes an application program on the server computer using a virtual desktop environment generated on the server computer.

Furthermore, an external storage device 130 can be connected to the client terminal device 110. The external storage device 130 includes a CD area 131 (first area) that stores application programs (first information) such as Startup.exe, and a storage area 132 (a readable and writable second area) that can store files and information.

For example, the external storage device 130 is connected to an information processing device, the CD/DVD drive is mounted, and an authentication application program stored in the CD area is started. The authentication application requests the user to input an access authentication key, and if the access authentication key is successfully verified, the USB memory drive is mounted, and writing/reading to the storage area becomes possible. Examples of the external storage device 130 include a USB memory, a mobile terminal, a card reader/writer, and an image reading device. Note that in the information processing system according to the present invention, the external storage device 130 does not necessarily have to be one of the components, and any information processing system that can use an external storage device will suffice.

<Client Terminal Device 110>
The hardware configuration of the client terminal device 110 according to this embodiment will be described with reference to Fig. 2. The client terminal device 110 and the server device 120 will be described as having the same hardware configuration. The hardware configuration will be described using the client terminal device 110 as an example. A CPU (Central Processing Unit) 11 executes various processes using computer programs and data stored in a RAM 12 and a ROM 13, thereby controlling the operation of the entire device and executing each process described below as being performed by the device.

RAM (Random Access Memory) 12 has an area for temporarily storing computer programs and data loaded from storage device 16, and an area for temporarily storing various data received from external devices via I/F (interface) 17. RAM 12 also has a work area used by CPU 11 when executing various processes. In this way, RAM 12 can provide various areas as needed. ROM (Read Only Memory) 13 stores the setting data and boot program of this device, etc.

The operation unit 14 is made up of a mouse, keyboard, etc., and can be operated by the operator of the device to input various instructions to the CPU 11. The display unit 15 is made up of a CRT, LCD screen, OLED, etc., and can display the results of processing by the CPU 11 using images, text, etc.

The storage device 16 is a large-capacity information storage device, such as a hard disk drive device. This storage device 16 stores an OS (operating system), as well as computer programs and data for causing the CPU 11 to execute each process performed by this device, which will be described later. These computer programs include security software 111. The security software 111 is a program for security management that ensures the safety of the data, programs, etc. of the client terminal device 110, and has a function for restricting the connection of a device according to a setting for whether or not the device can be connected. The computer programs and data stored in the storage device 16 are loaded into the RAM 12 as appropriate under the control of the CPU 11, and become the subject of processing by the CPU 11.

I/F 17 is composed of various interfaces. It includes a network interface for connecting to network 140 and a device interface for connecting to external storage device 130. All of the above components are connected to bus 18.

<Server device 120>
The hardware configuration of the server device is the same as that of the client terminal device 110 described above, as shown in Fig. 3. In Fig. 3, detailed description of the same members as those shown in Fig. 2 will be omitted. That is, the CPU 31 of the server device 120 uses computer programs and data stored in the storage device 36 of the server device 120 to perform data communication with external devices via the I/F 37 of the server device 120, and executes each process, which will be described later, as being performed by the server device. Also, setting information 121 is registered in the storage device 36 of the server device 120.

In this setting information 121, the contents of the control to be executed for the external storage device (USB memory, CD/DVD, etc.) are set. Figures 4 and 5 are diagrams showing an example of the setting information 121. Specifically, as shown in Figure 4, the target device name (USB memory, CD/DVD, etc.) that the client terminal device 110 can use and the control method (permit, read only permitted, write prohibited, prohibited, etc.) are registered. For example, in the setting information 121 in the client terminal device 110, the USB memory is registered as "permitted to use" and the CD/DVD is registered as "permitted to read only". The setting information 121 may also be identification information of the USB memory to be permitted (information indicating the USB memory to be permitted when access is permitted depending on the target USB memory). This information may be information that can individually identify the USB memory, such as a vendor ID, product ID, or serial number, as shown in Figure 5, or information that permits all USB memories. The setting information 121 may also be identification information of the USB memory to be prohibited (information indicating the USB memory to which access is to be prohibited when access is to be prohibited depending on the target USB memory).

In addition, instead of the setting information 121 in the client terminal devices 110 being collectively managed by the storage device 16 of the server device 120, each client terminal device 110 may store its own setting information 121. In such a case, the server device 120 is not required. Note that the setting information 121 in Figures 4 and 5 is an example, and a user name, terminal name, etc. may also be registered.

<Processing of Client Terminal Device>
Next, the security software 111 stored in the storage device 16 of the client terminal device 110 will be described with reference to the flowchart in Fig. 6. Here, the description will be given taking as an example an external storage device 130 (for example, a security USB memory) having a CD area 131 in which an application program (for example, Startup.exe) is stored, and a storage area 132. The description will be given assuming that the setting information 121 is registered as "permitted to use" for the USB memory and "permitted to read only" for the CD/DVD, as shown in Fig. 4.

The security software 111 is software for changing the control method for an external storage device connected to the device itself (here, the client terminal device 110) and controlling access to the external storage device. Note that the procedure in FIG. 6 will be described assuming that each client terminal device 110 holds its own setting information 121. Also, in this embodiment, for example, a Windows (registered trademark) operating system (OS) is executed on the client terminal 110, and programs are executed under its management. Note that the operating system is not limited to Windows, and may be MacOS, Linux (registered trademark), or another operating system.

The CPU 11 loads the security software 111 from the storage device 16 into the RAM 12 and starts the loaded security software 111. The security software 111 may be set to start automatically as a service program, or may be set to start arbitrarily in response to an operational instruction from the user. The CPU 11 loads a file system filter driver for the security software 111 in accordance with the security software 111, and monitors the file system of the client terminal device 110. The file system filter driver is a program located above the file system driver and at a layer below the system call API, and can monitor the processing of all file systems. At this time, the security software 111 transmits setting information 121 to the loaded file system filter driver.

When a USB memory is inserted, a file system is created, so in S601, the CPU 11 detects the created file system in accordance with the security software 111 and monitors the I/O Request Packet (hereinafter referred to as "IRP") of the file system. For example, a file system filter driver intercepts IRPs such as IRP_MJ_WRITE and IRP_MJ_SET_INFORMATION.

In S602, the CPU 11, in accordance with the security software 111, determines from the intercepted IRP whether the target device is a CD/DVD or not.

If it is determined that the target device is not a CD/DVD (NO in S602), in S603, the CPU 11 controls the target device (permit use, prohibit use (prohibit writing and reading), or permit reading only) based on the setting information 121 in accordance with the security software 111. For example, in the setting information 121 shown in FIG. 4, the USB memory is "permitted to use," so the file system filter driver returns STATUS_SUCCESS to the USB memory driver to enable it to be used. The determination may also be made based on the USB memory identification information (device name, vendor ID, product ID, serial number, etc.) passed in S601 and the setting information as shown in FIG. 5.

If it is determined that the target device is a CD/DVD (YES in S602), the CPU 11 proceeds to S604 in accordance with the security software 111.

Note that, although filter driver technology is used here as a filtering method, other methods such as API hooking may also be used. API hooking refers to monitoring API requests and replacing the API requests with different content. Control processing may also be performed using a device manager. For example, an API called RegisterDeviceNotification is used to monitor the device manager. The device manager is one of the utility programs included in the Windows OS, and can manage the hardware that makes up the computer. The management contents include a list of devices connected to the computer, confirmation of normal operation, and switching between enabling and disabling devices.

<Process 1 in step S604>
Details of the process in step S604 will be described with reference to Fig. 7, which shows a flowchart of the process. Here, it is assumed that an allowed process information list indicating processes that are allowed to be used is transmitted from the server device 120 to the client terminal device 110 as shown in Fig. 8, and is stored as the setting information 121. Note that the process name is an example, and other information may be a process ID, a hash value, whether or not the process has been digitally signed, the name of the manufacturer of the process, etc.

In S701, the CPU 11 obtains process information for identifying the started process according to the security software 111. Specifically, the name of the application program (process name) stored in the started CD area is obtained. Note that what is obtained is not limited to the process name, and may also be a process ID, a hash value, whether or not the process has a digital signature, the name of the manufacturer of the process, etc.

In S702, the CPU 11, in accordance with the security software 111, compares the process information acquired in S701 with the permitted process information list to determine whether or not the process is permitted to be used.

If it is determined that the process is permitted to be used (YES in S702), the CPU 11 changes the setting to permitted to be used (permits writing and reading) and controls it in accordance with the security software 111 (S703). That is, in the setting information 121 shown in FIG. 4, CDs/DVDs are "permitted to be read only", but if it is determined that the process is permitted to be used, "writing" to CDs/DVDs is also possible. Note that at this time, the setting information 121 may be temporarily changed from "permitted to be read only" to "permitted to be used" and then changed back after the process is completed.

If it is determined that the process is not permitted to be used (NO in S702), the process ends and proceeds to S603, where control is performed based on the setting information 121.

When using a USB memory with multiple areas (for example, CD area 131, storage area 132), when switching between areas (from CD area 131 to storage area 132), the client terminal device 110 may make a request to the CD area 131 similar to a write request. If the CD/DVD is "read-only permitted" as in the setting information 121 shown in FIG. 4, an error occurs as it is not possible to switch between areas, and the USB memory with multiple areas cannot be used. However, as described above, if it is determined to be a permitted process, writing to the USB memory with multiple areas becomes possible, and the USB memory with multiple areas can be used.

In addition, when starting an authentication application program stored in the CD area, prompting the user to input an access authentication key, and verifying the access authentication key, the client terminal device 110 may make a request to the CD area similar to a write request. If the CD/DVD is "read-only permitted" as in the setting information 121 shown in FIG. 4, an error occurs because the access authentication key cannot be verified, and the USB memory with multiple areas cannot be used. However, as described above, if it is determined to be a permitted process, writing to the USB memory with multiple areas becomes possible, and the USB memory with multiple areas can be used.

Also, a USB memory with multiple areas has different applications (processes) in the CD area for each memory. As described above, by changing the control method depending on the process, it is possible to perform different control for each USB memory with multiple areas.

<Processing 2 in step S604>
The details of the other process in step S604 will be described with reference to Fig. 9, which shows a flowchart of the process. Here, it is assumed that an authorized memory information list (name of authorized company, vendor ID, product ID, etc.) indicating memories to which access is permitted is transmitted from the server device 120 to the client terminal device 110 as shown in Fig. 10, and is stored as setting information 121. Note that the authorized memory information list is only an example, and is not limited to this as long as it is information for identifying an external storage device.

In S901, the CPU 11, in accordance with the security software 111, obtains memory information (manufacturing company name, vendor ID, product ID, etc.) that identifies the CD/DVD mounted by a USB memory with multiple areas inserted into the client terminal device 110.

In S902, the CPU 11, in accordance with the security software 111, compares the memory information acquired in S901 with the permitted memory information list to determine whether the memory is permitted for use.

If it is determined that the memory is permitted to be used (YES in S902), the CPU 11 changes the setting to permitted to be used (permits writing and reading) and controls it in accordance with the security software 111 (S903). That is, in the setting information 121 shown in FIG. 4, CDs/DVDs are "permitted to be read only", but if it is determined that the memory is permitted to be used, "writing" to the CD/DVD is also possible. Note that at this time, the setting information 121 may be temporarily changed from "permitted to be read only" to "permitted to be used", and then changed back to the original setting after the external storage device 130 is removed from the client terminal device 110.

If it is determined that the memory is not permitted for use (NO in S902), the process ends and proceeds to S603, where control is performed based on the setting information 121.

As shown in the setting information 121 in FIG. 4, if the CD/DVD is "read-only permitted," an error occurs because it is not possible to switch between areas, and the USB memory with multiple areas cannot be used. However, as described above, if it is determined that the memory is permitted for use, writing to the USB memory with multiple areas becomes possible, and the USB memory with multiple areas can be used.

Also, as in the setting information 121 shown in FIG. 4, if the CD/DVD is "read-only permitted," an error occurs because the access authentication key cannot be verified, and the USB memory with multiple areas cannot be used. However, as described above, if it is determined that the memory is permitted for use, writing to the USB memory with multiple areas becomes possible, and the USB memory with multiple areas can be used.

As described above, by changing the control method according to the permitted memory information (company name, vendor ID, product ID, etc.), control can be performed even when applications stored in a USB memory with multiple areas are updated.

<Process 3 in step S604>
The details of the other process in step S604 will be described with reference to FIG. 11 which shows a flowchart of the same process.

In S1101, the CPU 11 obtains information indicating the storage destination where the started program (the application program stored in the started CD area) is saved in accordance with the security software 111. In other words, the CPU 11 obtains information indicating the storage destination in the client terminal device 110.

In S1102, the CPU 11 determines, in accordance with the security software 111, whether the save destination indicated by the information acquired in S1101 is within a CD/DVD drive.

If the destination is a CD/DVD drive (YES in S1102), the CPU 11 changes the setting to permitted use (permits writing/reading) in accordance with the security software 111 and controls it (S1103). That is, in the setting information 121 shown in FIG. 4, CDs/DVDs are "permitted for reading only", but if it is determined that the destination is a CD/DVD drive, "writing" to the CD/DVD is also possible. Note that at this time, the setting information 121 may be temporarily changed from "permitted for reading only" to "permitted for use" and then changed back to the original setting after the process is completed.

If the program to be started is not stored in the CD/DVD drive (NO in S1102), the process ends and proceeds to S603, where control is performed based on the setting information 121. Alternatively, if the program to be started is stored outside the CD/DVD drive, there is a possibility of a virus, etc., so the program may be changed to a prohibited state (prohibits writing and reading).

As described above, by changing the control method depending on where the process is saved, general-purpose control can be performed without managing process names, vendor IDs, etc.

In this way, according to this embodiment, control is changed based on process information, memory information, or the storage destination of the process, making it possible to perform control that balances security and convenience.

The process of changing usage regardless of the setting information is not limited to the specific example given above. Control may be changed based on any one or a combination of process information, memory information, or process storage destination. For example, a combination such as "if it matches the permitted process name list and also matches the permitted memory information, change to permitted usage" may be used.

In addition, in this embodiment, a list of permitted objects (permitted process information list, permitted memory information list) has been described, but the list may also be a list of prohibited objects.

In addition, in this embodiment, the setting information 121 is described as being registered as "permitted to use" for USB memory and "permitted to read only" for CD/DVD. However, even if the USB memory is registered as "permitted to use" and the CD/DVD is registered as "prohibited to use" (prohibited to write and read), it is possible to control access to a USB memory with multiple areas.

In addition, in this embodiment, in S602 of FIG. 6, a process is performed to determine whether the target device is a CD/DVD from the intercepted IRP. However, the process of S602 may be omitted by filtering the IRP for the CD area and the IRP for the storage area. In that case, if the determination is "NO" in S702 of FIG. 7, S902 of FIG. 9, or S1102 of FIG. 11, control may be performed based on the setting information 121 shown in S603.

<Other embodiments>
The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

Claims (8)

An information processing device capable of connecting to an external storage device having a first area in which first information is stored and a second area which can be read and written,
an intercepting means for intercepting a request to the connected external storage device when the external storage device is connected;
a control means for controlling a request to the external storage device intercepted by the intercepting means when the availability of the external storage device is set such that writing to the first area is not permitted and use of the second area is permitted;
an acquisition means for acquiring process identification information for identifying a process included in the first information stored in the first area ,
An information processing device characterized in that, when the process identified by the process identification information acquired by the acquisition means is a process that is authorized to use an external storage device, the control means temporarily changes the first area to be authorized for use . 2. The information processing apparatus according to claim 1, wherein the process identification information is any one or a combination of a process name, a process ID, a hash value of the process, and a digital signature of the process. 3. The information processing apparatus according to claim 1, wherein the destination for saving the first information is a CD drive or a DVD drive. 4. The information processing apparatus according to claim 1, wherein the first area is mounted as a CD drive or a DVD drive, and the second area is mounted as a USB drive. The information processing device according to any one of claims 1 to 4, characterized in that the control means permits the process to write to the first area to enable the information processing device to access the second area by temporarily changing the permission to use the first area. A method for controlling an information processing device to which an external storage device can be connected, the external storage device having a first area in which first information is stored and a second area which can be read and written, comprising the steps of:
an intercepting step of intercepting a request to the connected external storage device when the external storage device is connected;
a control step of controlling a request to the external storage device intercepted in the intercepting step when the availability of the external storage device is set such that writing to the first area is not permitted and use of the second area is permitted;
an acquisition step of acquiring process identification information for identifying a process included in the first information stored in the first area ,
A method for controlling an information processing device, characterized in that, when the process identified by the process identification information acquired in the acquisition step is a process that is authorized to use an external storage device, the control step temporarily changes the first area to be authorized for use . An information processing device according to any one of claims 1 to 5 ;
a server device that transmits, via a network, to the information processing device, information that can identify a process that is permitted to be used by the information processing device ;
The control means of the information processing device determines, based on information capable of identifying a process that is permitted to be used by the information processing device and transmitted from the server device, and the process identification information acquired by the acquisition means, whether the process identified by the process identification information is a process that is permitted to use an external storage device. A program for causing a computer to function as each of the means of the information processing device according to any one of claims 1 to 5 .

Images