JP7723693B2 - Storage media integrated management system and storage media management device - Google Patents

Description

The present invention relates to a storage media integrated management system and a storage media management device.

There are various standards for USB (Universal Serial Bus) depending on the type of data transmission. Furthermore, USB is backward compatible, so it is possible to connect devices with different standards. For this reason, storage devices equipped with USB connectors (called "USB devices") are in use. Such storage devices can be attached to a variety of devices with USB ports. As the USB standard supports high-speed transmission, it has become possible to store large amounts of data on storage devices.

However, large-capacity storage poses significant risks to various servers and computers. These risks include, for example, information leakage due to the extraction of information, or conversely, virus infection due to the introduction of viruses. As a result, technology has been proposed to protect information on USB devices.

Patent document 1 states that "information on usage rights registered in the USB usage permission information database corresponding to the combination of terminal identification information, user personal authentication information, and USB device information received from the USB control unit is transmitted to the USB control unit."

International Publication No. 2018/173528

However, the USB management device described in Patent Document 1 had the problem of not being able to manage who sent information to which device from a USB device. For this reason, there was a need for a way to manage the usage status of USB devices.

The present invention was developed in light of these circumstances, and aims to enable management of the usage status of data stored on storage media.

A storage medium integrated management system according to the present invention includes a storage medium management device that manages storage media on which data is stored, and an integrated management device that manages the storage media and the storage medium management device.
The integrated management device has an authentication data creation unit that creates authentication data used to authenticate the storage medium based on information required for using the storage medium, such as storage medium management device information that uniquely represents the storage medium management device, user information of the user who will use the data , and storage medium information specific to the storage medium, and stores the authentication data in the storage medium.
The storage medium management device has an authentication data analysis unit that, when a storage medium is connected to the storage medium management device and the storage medium management device is connected to a user terminal, acquires information and authentication data required to use the storage medium from the storage medium, analyzes the authentication data, and authenticates the storage medium based on the analysis result of the analysis of the authentication data acquired from the storage medium and the information required to use the storage medium acquired from the storage medium, and a data transfer unit that, if the authentication result by the authentication data analysis unit is normal, makes the data stored in the storage medium available to the user terminal and transfers the data stored in the storage medium to the user terminal.

According to the present invention, it is possible to manage the usage status of data stored in a storage medium.
Problems, configurations, and effects other than those described above will become apparent from the following description of the embodiments.

1 is a diagram illustrating a usage pattern of a USB integrated management system according to an embodiment of the present invention; 1 is a schematic diagram illustrating an example of the internal configuration of a USB integrated management system according to an embodiment of the present invention; 1 is a block diagram showing an example of the internal configuration of an integrated management system according to an embodiment of the present invention; 10 is a flowchart illustrating an example of processing by an integrated management system according to an embodiment of the present invention. 1 is a block diagram illustrating an example of the internal configuration of a USB management device according to an embodiment of the present invention. 10 is a flowchart illustrating an example of processing of a USB management device according to an embodiment of the present invention. FIG. 2 is a block diagram illustrating an example of the hardware configuration of a computer according to an embodiment of the present invention.

The following describes embodiments of the present invention with reference to the accompanying drawings. In this specification and drawings, components having substantially the same function or configuration are designated by the same reference numerals, and redundant description will be omitted.

[One embodiment]
First, a usage pattern of the USB integrated management system 1 according to an embodiment of the present invention will be described.
FIG. 1 is a diagram showing how the USB integrated management system 1 is used.

The USB integrated management system 1 (an example of a storage media integrated management system) is composed of an integrated management system 2 and a USB management device 12.

The USB client 8 (an example of a storage medium) is a storage device among USB devices that has the function of saving data. Examples of USB clients 8 include USB memory, external hard disk drives (HDDs) that can be connected via a USB cable, external solid state drives (SSDs), and mobile devices. The USB client 8 has a connector 8a that complies with the USB standard and is inserted into the socket 12b of the USB management device 12.

The USB management device 12 (an example of a storage media management device) is a device that manages the usage status of the USB client 8 in which data is stored, and is assumed to be a USB hub, for example. The USB management device 12 is connected between the USB client 8 and the USB user terminal 19. For this reason, the USB management device 12 has a receptacle 12b that complies with the USB standard into which the connector 8a of the USB client 8 is inserted. The USB management device 12 also has a connector 12a that complies with the USB standard for insertion into the receptacle 19a of the USB user terminal 19.

The integrated management system 2 (an example of an integrated management device) manages the USB client 8 and the USB management device 12. For this reason, the integrated management system 2 is connected to the USB management device 12 and has the function of providing the necessary information to the USB management device 12.

The USB user terminal 19 (an example of a user terminal) is a terminal on which the user 18 uses the USB client 8, and is, for example, a PC (Personal Computer). The USB user terminal 19 has a socket 19a that complies with the USB standard, and the connector 12a of the USB management device 12 is inserted into the socket 19a. The USB user terminal 19 may also be a server or the like that has a socket 19a that complies with the USB standard. If the USB user terminal 19 is used in a factory, a machine installed in the factory (such as a 3D printer) may also be used as the USB user terminal 19. As described below, when the user 18 enters user information, the user 18 may use a separate terminal connected to the USB management device 12.

Here, an outline of the flow when using the USB client 8 will be described.
When the user 18 uses the USB client 8, he or she inserts the connector 8a of the USB client 8 into the socket 12b of the USB management device 12. Furthermore, the user inserts the connector 12a of the USB management device 12 into the socket 19a of the USB user terminal 19. The user 18 then inputs user information such as the user ID and password assigned to the user into the authentication screen displayed on the USB user terminal 19. When the USB management device 12 determines that the various pieces of information, including the user information, are correct, the USB user terminal 19 can use the data in the USB client 8.

<Configuration example of USB integrated management system>
Next, an example of the internal configuration of the USB integrated management system 1 will be described.
FIG. 2 is a schematic diagram showing an example of the internal configuration of the USB integrated management system 1. As shown in FIG.

The USB integrated management system 1 includes an integrated management system 2 and a USB management device 12. For ease of explanation, the USB integrated management system 1 is illustrated with a dashed line surrounding the USB client 8.

(Integrated management system)
The integrated management system 2 includes a user information database 3, an authentication data creation unit 4, a USB information database 5, a USB management device information database 6, and data 7 used by USB terminals.

User information database 3 stores user information in advance. User information is information that allows a user 18 to be uniquely identified, such as an ID and password set by the user, or biometric authentication information. User information may be registered by the user 18 themselves, or may be registered collectively by an administrator who manages users.

The USB information database 5 stores USB information for each USB client 8. The USB information is information specific to the USB client 8, such as a serial ID or class code specific to the USB client 8. The USB information database 5 stores multiple pieces of USB information 10 registered for each of multiple USB clients 8.

The USB management device information database 6 stores USB management device information. USB management device information is uniquely identifiable information, such as a serial ID assigned to the USB management device 12. The USB management device 12 is managed using the USB management device information.

Data 7 used by the USB terminal is data sent from the integrated management system 2 to the USB client 8. Data 7 used by the USB terminal includes multiple pieces of data, and the data available to user 18 differs depending on the user's access authority. For this reason, not all of data 7 used by the USB terminal is sent to the USB client 8; instead, a selected portion of data 7 used by the USB terminal is sent to the USB client 8 as data 11 used by the USB terminal.

The authentication data creation unit 4 creates authentication data 9 and stores the authentication data 9 in the USB client 8. The authentication data 9 is data used to authenticate the USB client 8 when the user 18 uses the USB client 8, based on information required to use the USB client 8. For example, the authentication data creation unit 4 creates the authentication data 9 based on the data information created by the data information creation unit 24 used (shown in Figure 3), user information, USB management device information, and USB information.

Authentication data 9 is created using user information read from user information database 3, USB information read from USB information database 5, USB management device information read from USB management device information database 6, and data (hash values, etc.) created from data 7 used by the USB terminal. The authentication data created by authentication data creation unit 4 is sent to USB client 8.

(USB client)
The USB client 8 stores authentication data 9, USB information 10, and data 11 used by the USB terminal.

Authentication data 9 is data received from the authentication data creation unit 4. Authentication data 9 is information created using USB management device information 16, USB information 10, user information registered in the user information database 3, and data information to be used created by the data information to be used creation unit 24 (see Figure 3 described below), and is assumed to be, for example, an electronic certificate.

USB information 10 is data that is stored in advance in the USB client 8. The USB information 10 is registered in the USB information database 5 of the integrated management system 2 before the USB client 8 is used.

Data 11 used by the USB terminal is a portion of data selected from data 7 used by the USB terminal of the integrated management system 2, and is sent from the integrated management system 2 and stored in the USB client 8.

(USB management device)
The USB management device 12 includes an authentication data analysis unit 13, a user information input unit 14, a USB information acquisition unit 15, a USB management device information unit 16, and a data transfer unit 17. The USB management device 12 is connected to a USB terminal 19.

The user information input unit 14 is activated when the USB management device 12 is connected to the USB user terminal 19. The user information input unit 14 then accepts user information entered by the user 18. For this purpose, the user 18 enters the user information via a user information input screen displayed on a display device (not shown) of the USB user terminal 19 by the USB management device 12, for example. The user information accepted by the user information input unit 14 is sent to the authentication data analysis unit 13. Note that the information entered by the user information input unit 14 is not stored in the user information database 3 of the integrated management system 2.

The USB information acquisition unit 15 (an example of a storage medium information acquisition unit) acquires USB information 10 from the USB client 8 connected to the USB management device 12. The USB information acquisition unit 15 then outputs the acquired USB information 10 to the authentication data analysis unit 13.

USB management device information 16 (an example of storage media management device information) is information that uniquely identifies the USB management device 12, such as a serial ID. The USB management device information 16 is read by the authentication data analysis unit 13.

The authentication data analysis unit 13 has the function of authenticating the USB client 8 based on the analysis results of the authentication data 9 obtained from the USB client 8 and the information required to use the USB client 8 obtained from the USB client 8. Therefore, when the USB client 8 is connected to the USB management device 12 and the USB management device 12 is connected to the USB user terminal 19, the authentication data analysis unit 13 obtains the information required to use the USB client 8 and the authentication data 9 from the USB client 8 and analyzes the authentication data 9.

At this time, the authentication data analysis unit 13 compares the user information received from the user information input unit 14, the USB information 10 received from the USB information acquisition unit 15, and the USB management device information 16 with the analysis results of the authentication data 9 acquired from the USB client 8. For example, the authentication data analysis unit 13 compares the user information registered in the user information database 3 in the integrated management system 2 with the user information input from the user information input unit 14.

If the authentication result is normal, the authentication data analysis unit 13 permits the data transfer unit 17 to transfer data 11 used by the user terminal in the USB client 8 so that it can be used by the USB user terminal 19. On the other hand, if the authentication result is abnormal, the authentication data analysis unit 13 does not permit the data transfer unit 17 to transfer data so that the data used by the user terminal in the USB client 8 cannot be used by the USB user terminal 19.

If the authentication result by the authentication data analysis unit 13 is normal, the data transfer unit 17 makes the data stored in the USB client 8 available for use by the USB user terminal 19 and transfers the data stored in the USB client 8 to the USB user terminal 19. As described above, when data transfer is permitted by the authentication data analysis unit 13, the data transfer unit 17 transfers the data 11 to be used by the USB user terminal that is stored in the USB client 8 to the USB user terminal 19. As a result, the USB user terminal 19 can import and use the data 11 to be used by the USB user terminal.

Furthermore, if the authentication result by the authentication data analysis unit 13 is normal, the USB user terminal 19 can acquire the authentication data 9 via the data transfer unit 17. Similarly, if the authentication result by the authentication data analysis unit 13 is normal, the USB user terminal 19 can acquire the USB information 10 via the data transfer unit 17. Therefore, the USB user terminal 19 can also check the authentication data 9 and the USB information 10.
In this way, the USB management device 12 can manage the use of data in the USB terminal 19 .

<Example of the internal configuration of the integrated management system>
Next, a detailed example of the internal configuration of the functional unit involved in creating authentication data in the integrated management system 2 will be described.
FIG. 3 is a block diagram showing an example of the internal configuration of the integrated management system 2.

In addition to the databases and authentication data creation unit 4 shown in Figure 2, the integrated management system 2 also includes input units 20-23 for inputting data from each database to the authentication data creation unit 4, and a data information creation unit 24 for use. The operation by the user 18 to input the necessary data into the input units 20-23 is shown as the user 18 entering data into a rectangular frame that surrounds the input units 20-23 with a dashed line. This user 18 may be the system administrator of the integrated management system 2.

The USB management device information input unit 20 is used to allow the user 18 to input USB management device information in the USB management device information database 6. Here, the USB management device information that the user 18 can input corresponds to the USB management device information 16 held by the USB management device 12 connected to the USB user terminal 19.

The USB information input unit 21 is used to allow the user 18 to input USB information in the USB information database 5. Here, the USB information that the user 18 can input corresponds to the USB information 10 of the USB client 8.

The user information input unit 22 is used to allow the user 18 to input user information stored in the user information database 3. Here, the user information that the user 18 can input is the same as the user information that the user 18 inputs through the user information input unit 14 when using the USB client 8.

The data to be used input unit 23 is used to enable the user 18 to input data that can be used by the user 18. Here, the data that can be used by the user 18 is a portion of data selected from the data 7 used by the USB terminal. The data selected from the data 7 used by the USB terminal is then sent to the data to be used information creation unit 24.

The used data information creation unit 24 (an example of a first data information creation unit) creates used data information based on data used by the USB user terminal 19. For example, the used data information creation unit 24 creates used data information from data selected from the data used by the USB user terminal 7 received from the used data input unit 23. The used data information is information that is uniquely determined based on the data selected from the data used by the USB user terminal 7, such as a hash value that is the result of a hash function calculation. Therefore, even if the amount of data 7 used by the USB user terminal is large, the used data 7 can be converted into a character string of a predetermined length, thereby reducing the amount of data information used.

The authentication data creation unit 4 creates authentication data 9 based on USB management device information, user information, USB information, and data information to be used, which are information required to use the USB client 8. The authentication data creation unit 4 acquires USB management device information, USB information, and user information from input units 20-22, and acquires data information to be used from the data information to be used creation unit 24. The authentication data creation unit 4 then creates authentication data using the USB management device information, USB information, user information, and data information to be used. The authentication data created by the authentication data creation unit 4 is stored as authentication data 9 in the USB client 8.

<Example of processing by the integrated management system>
FIG. 4 is a flowchart showing an example of processing by the integrated management system 2.

First, input units 20-23 shown in FIG. 3 input USB management device information, USB information, user information, and data used by the USB-using terminal (S1). At this time, USB management device information input unit 20 inputs USB management device information obtained from USB management device information database 6 to authentication data creation unit 4. USB information input unit 21 inputs USB information obtained from USB information database 5 to authentication data creation unit 4. User information input unit 22 inputs user information obtained from user information database 3 to authentication data creation unit 4. Utilized data input unit 23 inputs data obtained from data used by the USB-using terminal 7 to utilized data information creation unit 24.

Next, the data information creation unit 24 creates data information to be used based on the data acquired from the data 7 used by the USB terminal (S2).

Next, the authentication data creation unit 4 creates authentication data 9 based on the USB management device information, USB information, and user information input from the input units 20-22, and the data information to be used created by the data information to be used creation unit 24 (S3).

Then, the data input unit 23 to be used sends the data acquired from the data used by the USB terminal 7 to the USB client 8 (S4). This data is saved in the USB client 8 as data used by the USB terminal 11. The authentication data creation unit 4 also sends the created authentication data 9 to the USB client 8 (S4). This authentication data 9 is saved in the USB client 8. After that, this process ends.

In this way, the integrated management system 2 can send data used by the USB terminal and authentication data 9 to the USB client 8.

<Example of internal configuration of USB management device>
Next, a detailed example of the internal configuration of the functional unit of the USB management device 12 related to authentication data verification will be described.
FIG. 5 is a block diagram showing an example of the internal configuration of the USB management device 12. As shown in FIG.

The USB management device 12 has a used data information creation unit 25, a USB information acquisition unit 15, an authentication data acquisition unit 29, USB management device information 16, an authentication data analysis unit 13, a user information input unit 14, and a data transfer unit 17.

The utilized data information creation unit 25 (an example of a second data information creation unit) creates utilized data information based on the data 11 used by the USB terminal, which is stored in the USB client 8. At this time, similar to the utilized data information creation unit 24 described with reference to FIG. 3, the utilized data information creation unit 25 calculates a hash value of the data 11 used by the USB terminal, and uses this hash value as the utilized data information. The utilized data information created by the utilized data information creation unit 25 is output to the authentication data analysis unit 13.

The USB information acquisition unit 15 acquires USB information 10 from the USB client 8. The USB information 10 acquired by the USB information acquisition unit 15 is output to the authentication data analysis unit 13.

The authentication data acquisition unit 29 acquires the authentication data 9 from the USB client 8. The authentication data 9 acquired by the authentication data acquisition unit 29 is output to the authentication data analysis unit 13.

User information is input by the user 18 into the user information input unit 14. The user information input into the user information input unit 14 is output to the authentication data analysis unit 13.

The authentication data analysis unit 13 reads the USB management device information 16 stored in advance in the USB management device 12. Then, the authentication data analysis unit 13 analyzes the authentication data 9 input from the authentication data acquisition unit 29 based on the data information to be used, the user information, the USB management device information, and the USB information created by the data information to be used creation unit 25. At this time, the authentication data analysis unit 13 determines that the authentication result of the USB client 8 is normal if the USB management device information used by the authentication data analysis unit 13 to analyze the authentication data 9 is the same as the USB management device information read from the USB management device information 16, the USB information used by the authentication data analysis unit 13 to analyze the authentication data 9 is the same as the USB information read from the USB client 8, and the user information used by the authentication data analysis unit 13 to analyze the authentication data 9 is the same as the user information input from the user information input unit 14.

Furthermore, if the data information to be used created by the data information to be used creation unit 25 is the same as the data information to be used obtained by the authentication data analysis unit 13 analyzing the authentication data 9, the authentication data analysis unit 13 determines that the authentication result of the USB client 8 is normal. Then, if the verified authentication data 9 is normal, the authentication data analysis unit 13 permits the data transfer unit 17 to transfer data.

When data transfer is permitted by the authentication data analysis unit 13, the data transfer unit 17 transfers the data 11 used by the USB terminal of the USB client 8 to the USB terminal 19. This allows the USB terminal 19 to use the data 11 used by the USB terminal. All data stored in the USB client 8 is sent to the data transfer unit 17. Therefore, the data transfer unit 17 that has been permitted to transfer data can be treated the same as a USB connector (extension cable) with no restrictions on the data it transfers.

In this way, the USB management device 12 can manage the usage status of data stored in the USB client 8 on the USB user terminal 19 by using the authentication data 9, data information to be used, USB information 10, user information, and USB management device information 16.

<Example of processing by the USB management device>
6 is a flowchart showing an example of processing by the USB management device 12. When the USB client 8 is connected to the USB management device 12, the USB management device 12 starts processing.

First, the authentication data acquisition unit 29 acquires the authentication data 9 from the USB client 8 (S11). Next, the authentication data analysis unit 13 analyzes the authentication data 9 acquired by the authentication data acquisition unit 29 (S12). The authentication data analysis unit 13 acquires the USB management device information 16 in order to analyze the authentication data 9.

Next, based on the results of analyzing the authentication data 9, the authentication data analysis unit 13 determines whether the USB management device information 16 registered in the integrated management system 2 is identical to the USB management device information 16 held by the USB management device 12. This process is performed by the authentication data analysis unit 13 determining whether the USB management device information resulting from the analysis of the authentication data 9 is identical to the acquired USB management device information 16 (S13). If the USB management device information resulting from the analysis of the authentication data 9 is different from the USB management device information 16 (NO in S13), this process ends.

On the other hand, if the USB management device information resulting from the analysis of the authentication data 9 is equal to the USB management device information 16 (YES in S13), the authentication data analysis unit 13 instructs the user information input unit 14 to acquire user information. Therefore, the user information input unit 14 displays a screen on the display unit of the USB user terminal 19 for the user 18 to input user information, and requests the user 18 to input user information (user ID, password, etc.) (S14). The user information input unit 14 then causes the user 18 to input the user information (S15). Thereafter, the user information input unit 14 outputs the user information input by the user 18 to the authentication data analysis unit 13.

Next, based on the results of analyzing the authentication data 9, the authentication data analysis unit 13 determines whether the user information registered in the integrated management system 2 is identical to the user information input from the user information input unit 14. This process is performed by the authentication data analysis unit 13 determining whether the user information resulting from the analysis of the authentication data 9 is identical to the user information input from the user information input unit 14 (S16). If the user information resulting from the analysis of the authentication data 9 is different from the user information input from the user information input unit 14 (NO in S16), this process is terminated.

On the other hand, if the user information resulting from the analysis of the authentication data 9 is equal to the user information input from the user information input unit 14 (YES in S16), the authentication data analysis unit 13 instructs the USB information acquisition unit 15 to acquire the USB information 10. Therefore, the USB information acquisition unit 15 acquires the USB information 10 from the USB client 8 (S17).

Next, based on the results of analyzing the authentication data 9, the authentication data analysis unit 13 determines whether the USB information registered in the integrated management system 2 is equal to the USB information 10 acquired by the USB information acquisition unit 15. This process is performed by the authentication data analysis unit 13 determining whether the USB information resulting from the analysis of the authentication data 9 is equal to the USB information 10 acquired from the USB information acquisition unit 15 (S18). If the USB information resulting from the analysis of the authentication data 9 is different from the USB information 10 acquired from the USB information acquisition unit 15 (NO in S18), this process ends.

On the other hand, if the USB information resulting from the analysis of the authentication data 9 is equal to the USB information 10 acquired from the USB information acquisition unit 15 (YES in S18), the authentication data analysis unit 13 instructs the utilized data information creation unit 25 to create utilized data information. Therefore, the utilized data information creation unit 25 creates utilized data information based on the data 11 used by the USB terminal of the USB client 8 (S19).

Next, based on the results of analyzing the authentication data 9, the authentication data analysis unit 13 determines whether the data information to be used created by the integrated management system 2 is equal to the data information to be used created by the data information to be used creation unit 25. This process is performed by the authentication data analysis unit 13 determining whether the data information to be used, which is the analysis result of the authentication data 9, is equal to the data information to be used obtained from the data information to be used creation unit 25 (S20). If the data information to be used, which is the analysis result of the authentication data 9, is different from the data information to be used obtained from the data information to be used creation unit 25 (NO in S20), this process is terminated.

On the other hand, if the data information to be used, which is the analysis result of the authentication data 9, is equal to the data information to be used obtained from the data information to be used creation unit 25 (YES in S20), the data 7 to be used by the USB user terminal in the USB client 8 is made available on the user terminal. Therefore, the authentication data analysis unit 13 allows the data transfer unit 17 to transfer the data.

Then, the data transfer unit 17 transfers the data 11 to be used by the USB terminal stored in the USB client 8 to the USB terminal 19 (S21), and this process ends.

Through the above process, usage at the USB client 8's user terminal can be managed using the USB management device information 16, user information, USB information 10, and data information used.

<Example of computer hardware configuration>
Next, the hardware configuration of the computer 30 that constitutes each device of the USB integrated management system 1 will be described.
7 is a block diagram showing an example of the hardware configuration of the computer 30. The computer 30 is an example of hardware used as a computer that can operate as the integrated management system 2 and the USB management device 12 according to this embodiment. The integrated management system 2 according to this embodiment realizes an authentication method in which the functional blocks shown in FIG. 6 cooperate with each other by causing the computer 30 to execute a program.

The computer 30 includes a CPU (Central Processing Unit) 31, a ROM (Read Only Memory) 32, and a RAM (Random Access Memory) 33, each connected to a bus 34. Furthermore, the computer 30 includes non-volatile storage 35 and a network interface 36.

The CPU 31 reads from the ROM 32 the program code of the software that realizes each function of this embodiment, loads it into the RAM 33, and executes it. Variables and parameters generated during the calculation processing of the CPU 31 are temporarily written to the RAM 33, and these variables and parameters are read by the CPU 31 as appropriate. However, an MPU (Micro Processing Unit) may be used instead of the CPU 31. The CPU 31 realizes each functional section of the integrated management system 2 and the USB management device 12.

The non-volatile storage 35 may be, for example, a hard disk drive (HDD), solid state drive (SSD), flexible disk, optical disk, magneto-optical disk, CD-ROM, CD-R, magnetic tape, or non-volatile memory. This non-volatile storage 35 stores the operating system (OS), various parameters, and programs for running the computer 30. The ROM 32 and non-volatile storage 35 store programs and data necessary for the CPU 31 to operate, and are used as examples of computer-readable, non-transitory storage media that store programs executed by the computer 30. The non-volatile storage 35 configures each database of the integrated management system 2 and stores USB management device information 16 for the USB management device 12.

The network interface 36 may be, for example, a network interface card (NIC), and various data can be sent and received between devices via a local area network (LAN) or dedicated line connected to the NIC terminal. The integrated management system 2 and USB management device 12 are connected via the network interface 36.

In the USB integrated management system 1 according to the embodiment described above, processing begins with the USB client 8 connected to the USB management device 12, which is further connected to the USB user terminal 19. The authentication data analysis unit 13 of the USB management device 12 then analyzes the authentication data 9 stored in the USB client 8 by the integrated management system 2. The authentication data analysis unit 13 then authenticates the USB client 8 based on the analysis results of the authentication data 9 and the information required to use the USB client 8, and makes the data 11 used by the USB user terminal in the USB client 8 available for use. This allows the USB management device 12 to manage the usage status of the data stored in the USB client 8.

The authentication data 9 created by the integrated management system 2 is analyzed by the USB management device 12. At this time, whether the USB client 8 is a legitimate device is determined based on whether the user information, USB management device information, USB information, and data to be used obtained by analyzing the authentication data 9 match the data obtained by the USB management device 12 from the USB client 8. Furthermore, if the user information does not match, the USB user terminal 19 cannot use the data 11 stored in the USB client 8 that is usable by the USB user terminal. Therefore, the USB management device 12 can manage the users who can use the data stored in the USB client 8. For example, it manages which users can use which USB user terminals 19 with which data stored in the USB client 8.

Furthermore, if the USB client 8 is a device not authorized by the system administrator, the data in the authentication data 9 will not match. This makes it possible to prevent an unauthorized USB client 8 from being connected to the USB user terminal 19 and data from being imported into the USB user terminal 19.

The integrated management system 2 can also manage data available to users 18 separately, depending on the user's 18 authority. For example, the data used by the USB terminal 19 differs depending on the user's authority or the type of data. This means that data that cannot be handled with the user's 18 authority does not need to be transferred from the USB client 8 to the USB terminal 19.

[Modification]
The integrated management system 2 may transfer the data 11 to be used by the USB terminal 19 and the authentication data 9 to the USB client 8 in advance before the USB terminal 19 uses the USB client 8. Therefore, the integrated management system 2 can be separated from the USB management device 12 after providing the necessary information to the USB management device 12. In this case, when the USB client 8 is used by the USB terminal 19, the USB integrated management system 1 can be configured as just the USB management device 12, excluding the integrated management system 2. Even in an offline environment where the USB management device 12 cannot be connected to the integrated management system 2, if the authentication data analysis unit 13 determines that the analysis result of the authentication data 9 is normal, the data 11 to be used by the USB terminal 19 is transferred to the USB terminal 19, and the USB terminal 19 can use the data.

Alternatively, data information may not be used to create the authentication data 9. In this case, the authentication data creation unit 4 creates the authentication data 9 based on information required for use of the USB client 8, such as USB management device information that uniquely identifies the USB management device 12, user information for the user who will use the data, and USB information. The authentication data analysis unit 13 can also analyze the authentication data 9 based on the USB management device information, user information, and USB information.

In addition, in the above-described embodiment, an example of a USB client 8 having a connector that conforms mainly to the USB standard has been described. Alternatively, storage, memory cards, etc. that can be connected to a communication cable that conforms to a transmission standard other than USB may also be used as large-capacity storage. Even in this case, by providing a management device equivalent to the USB management device 12 described above in the portion corresponding to the respective storage and memory card slots, the USB management device 12 can manage the usage status of data used by users of large-capacity storage.

Furthermore, the present invention is not limited to the above-described embodiment, and it goes without saying that various other applications and modifications are possible without departing from the gist of the present invention as set forth in the claims.
For example, the above-described embodiment has described the system configuration in detail and specifically to clearly explain the present invention, and is not necessarily limited to a system including all of the described configurations. Furthermore, it is also possible to add, delete, or replace part of the configuration of this embodiment with other configurations.
In addition, the control lines and information lines shown are those that are considered necessary for the explanation, and do not necessarily show all the control lines and information lines in the product. In reality, it can be assumed that almost all components are interconnected.

1...USB integrated management system, 2...integrated management system, 3...user information database, 4...authentication data creation unit, 5...USB information database, 6...USB management device information database, 7...data used by USB-using terminal, 8...USB client, 9...authentication data, 10...USB information, 11...data used by USB-using terminal, 12...USB management device, 13...authentication data analysis unit, 14...user information input unit, 15...USB information acquisition unit, 16...USB management device information, 17...data transfer unit, 18...user, 19...USB-using terminal

Claims (6)

a storage medium management device that manages a storage medium in which data is stored, and an integrated management device that manages the storage medium and the storage medium management device;
The integrated management device
an authentication data creation unit that creates authentication data used to authenticate the storage medium based on storage medium management device information that uniquely represents the storage medium management device, user information of a user who uses the data, and storage medium information specific to the storage medium as information required for using the storage medium, and stores the authentication data in the storage medium;
the storage medium management device,
an authentication data analysis unit that, when the storage medium is connected to the storage medium management device and the storage medium management device is connected to a user terminal, acquires information required for use of the storage medium and the authentication data from the storage medium, analyzes the authentication data, and authenticates the storage medium based on the analysis result of the authentication data acquired from the storage medium and the information required for use of the storage medium acquired from the storage medium;
a data transfer unit that, when the authentication result by the authentication data analysis unit is normal, makes the data stored in the storage medium available to the user terminal and transfers the data stored in the storage medium to the user terminal. the storage medium management device,
a storage medium information acquisition unit that acquires the storage medium information from the storage medium;
Storage medium management device information stored in advance;
The storage medium integrated management system according to claim 1 , further comprising: a user information input unit into which the user information that uniquely represents the user is input. 3. The storage medium integrated management system of claim 2, wherein the authentication data analysis unit determines that the authentication result of the storage medium is normal if the storage medium management device information obtained by analyzing the authentication data by the authentication data analysis unit is the same as the storage medium management device information read from the storage medium, the storage medium information obtained by analyzing the authentication data by the authentication data analysis unit is the same as the storage medium information read from the storage medium, and the user information obtained by analyzing the authentication data by the authentication data analysis unit is the same as the user information input from the user information input unit. the integrated management device has a first data information creation unit that creates data information based on data used in the user terminal,
the authentication data creation unit creates the authentication data based on the storage medium management device information, the user information, the storage medium information, and the data information created by the first data information creation unit as information required for using the storage medium;
the storage medium management device,
a second data information creation unit that creates data information based on data used by the user terminal and stored in the storage medium;
The storage medium integrated management system of claim 3, wherein the authentication data analysis unit analyzes the authentication data based on the data information created by the second data information creation unit, the user information, the storage medium management device information, and the storage medium information. The storage medium integrated management system according to claim 4 , wherein the data used by the user terminal differs depending on the authority of the user or the type of the data. A storage medium management device for managing a storage medium on which data is stored,
an authentication data analysis unit that acquires authentication data used to authenticate the storage medium from the storage medium , the authentication data being created based on storage medium management device information uniquely representing the storage medium management device, user information of the user who uses the data, and storage medium information specific to the storage medium as information required for use of the storage medium , by connecting the storage medium to the storage medium management device and connecting the storage medium management device to a user terminal, acquires the information required for use of the storage medium and the authentication data from the storage medium, analyzes the authentication data, and authenticates the storage medium based on the analysis result and the information required for use of the storage medium acquired from the storage medium;
a data transfer unit that, when the authentication result by the authentication data analysis unit is normal, makes the data stored in the storage medium available to the user terminal and transfers the data stored in the storage medium to the user terminal.