Electronic security information management method and recording medium using an IC card

• US 20030005320A1
• Filed: 03/29/2002
• Published: 01/02/2003
• Est. Priority Date: 06/27/2001
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Matsune, Shinji, Nitta, Hiroshi, Fukuya, Shouzou
• Application Number:
  US10/108,389
• Publication Number:
  US 20030005320A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

An electronic security information management method and recording medium using an IC card to prevent data leaks by a dishonest third party who is carrying, a secret data recorded on an information processing apparatus, such as a computer, integrated circuit card, floppy disk, or other recording medium to the outside of an organization. The electronic security information management method and recording medium can deter the use of the data copied to a recording medium by the dishonest third party and will also record and allow for later inspection the processes used for copying the data to the recording medium. The information management method includes accessing a authorization medium, when copying a data recorded in a first recording medium in an information processing apparatus to a second recording medium and executing the copying when an authorization permitting the copying from the first recording medium can be read from the authorization medium or refusing the copying when the authorization cannot be read.

Claims

1. An information management method, comprising:

accessing an authorization medium, when copying a data recorded in a first recording medium in an information processing apparatus to a second recording medium; and

executing the copying when an authorization permitting the copying from the first recording medium can be read from the authorization medium or refusing the copying when the authorization cannot be read.

2. An information management method according to claim 1, further comprising:

recording, to the authorization medium, a copy destination class information that designates what the second recording medium of the copying is, such that the copying is executed when the copy destination class information matches a medium class information and the copying is refused when the copy destination class information does not match with the medium class information.

3. An information management method according to claim 1, further comprising:

encrypting the data creating an encrypted data and recording the encrypted data to the second recording medium.

4. An information management method according to claim 1, further comprising:

recording, in the authorization medium, a record of processes executed whenever executing the copying and/or refusing the copying.

5. An information management method according to claim 1, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

6. An information management method according to claim 1, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

7. An information management method according to claim 1, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

8. An information management method according to claim 1, further comprising:

authenticating the authorization using at least one of a password and the authorization medium, wherein the copying is refused if the authorization is not properly authenticated.

9. An information management method according to claim 1, further comprising:

comparing the authorization to an expected authorization using at least one of a password and the authorization medium, wherein the copying is refused if the authorization is not the expected authorization.

26. An information management method according to claim 1, further comprising:

comparing the information to an expected information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not the expected information.

10. An information management method, comprising:

accessing, in a authorization medium, an information permitting the use of a data recorded in a first recording medium, when reading and using a data recorded in the first recording medium; and

permitting the use of the data when a first processing apparatus can read the information from the authorization medium and refusing the use of data when the first processing apparatus cannot read the information.

11. An information management method according to claim 10, further comprising:

encrypting the data recorded in the first recording medium, when the data is copied to a authorization medium creating an encrypted data;

decoding the encrypted data, when using the encrypted data recorded in the authorization medium, creating a processed data; and

re-encrypting, for a write-back process, the processed data when writing back the processed data to the authorization medium.

12. An information management method according to claim 11, further comprising:

encrypting the data, recorded in the first recording medium, when the data is copied to a authorization medium creating encrypted data;

decoding the encrypted data, when using the encrypted data recorded in the authorization medium, creating a processed data; and

re-encrypting, for a write-back process, the processed data when writing back the processed data to the authorization medium.

13. An information management method according to claim 10, further comprising:

identifying a software using the data and/or an ID information on the authorization medium; and

reading the ID information and permitting the use of the data when the ID information and/or the software is determined to be capable of using the data and refusing the use of the data when the ID information and/or the software are determined to be incapable of using the data.

14. An information management method according to claim 11, further comprising:

recording a data application number information in the first recording medium and a data application maximum number in the authorization medium;

reading, when using the data of the first recording medium, the data application number information and data application maximum number information;

comparing the data application number information and data application maximum number information; and

permitting the use of the data and incrementing the data application number information by one when the data application number does not exceed the data application maximum number and refusing the use of the data when the data application number exceeds the data application maximum number.

15. An information management method according to claim 11, further comprising:

recording a data application validity term information in the authorization medium;

determining, when using the data recorded in the first recording medium, whether a current time is within a data application validity term by comparing the data application validity term information with a current date/time information; and

permitting the use of the data when the current date/time information is within the validity term and refusing the use of the data when the current date/time information exceeds the validity term.

16. An information management method according to claim 10, further comprising:

recording, in the authorization medium, a right information indicating a right of an object operator to whom a particular process for the data is permitted;

authenticating, when executing the particular process, an operator based on the right information; and

executing the particular process when the authentication is executed or refusing the particular process when the authentication fails.

17. An information management method according to claim 16, wherein the particular process is a process to print the data.

18. An information management method according to claim 10, further comprising:

recording, in the authorization medium, a copy destination range information that designates a destination of a copy;

determining whether a authorization medium matches with the copy destination range information recorded; and

permitting copying when matching is attained or authenticating the right of an operator when the matching is not attained and permits, only when the authentication is executed, the copying to the destination of copying which does not match with the copy destination range information.

19. An information management method according to claim 11, further comprising:

recording, in the authorization medium, a copy destination range information that designates a destination of a copy;

determining whether a authorization medium matches with the copy destination range information recorded; and

permitting copying when matching is attained or authenticating the right of an operator when the matching is not attained and permits, only when the authentication is executed, the copying to the destination of copying which does not match with the copy destination range information.

20. An information management method according to claim 10, wherein the information processing apparatus records a record of processes executed when the apparatus has executed the process to use the data and/or refused the process to use the data.

21. An information management method according to claim 10, wherein the first information processing apparatus sets, to the authorization medium, the information permitting the copy of the data stored in the first recording medium provided in the second information processing apparatus to the authorization medium when such information is read with the second information processing apparatus.

22. An information management method according to claim 10, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

23. An information management method according to claim 10, wherein the authorization medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

24. An information management method according to claim 10, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

25. An information management method according to claim 10, further comprising:

authenticating the information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not properly authenticated.

28. An information management method according to claim 27, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

29. An information management method according to claim 27, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

30. An information management method according to claim 27, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

31. An information management method according to claim 27, wherein the first information processing apparatus records, when the information is set to the authorization medium, a record of the setting processes to a fourth recording medium provided in the first processing apparatus.

32. An information management method according to claim 31, wherein the fourth recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

33. An information management method according to claim 27, wherein a record of the processes executed with the second information processing apparatus is recorded in the authorization medium and the first information processing apparatus reads the record of processes recorded in the authorization medium and records this record in a fourth recording medium provided in the first processing apparatus.

34. An information management method according to claim 33, wherein the fourth recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

35. An information management method according to claim 27, further comprising:

authenticating the information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not properly authenticated.

36. An information management method according to claim 27, further comprising:

comparing the information to an expected information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not the expected information.

38. An information management method according to claim 37, wherein the first information processing apparatus sets, to the second recording medium, a number of times of permission by the second information processing apparatus for the use of the data recorded in the first recording medium.

39. An information management method according to claim 37, wherein the first information processing apparatus sets, to the second recording medium, a validity term information for permitting, by the second information processing apparatus, the use of data recorded in the first recording medium.

40. An information management method according to claim 37, wherein the first information processing apparatus records, when an information is set to the second recording medium, a record of the setting processes to the authorization medium provided in the first information processing apparatus.

41. An information management method according to claim 37, wherein a record of the processes executed with the second information processing apparatus is recorded to the second recording medium and the first information processing apparatus reads the record of the processes recorded in the second recording medium and then records this record to the authorization medium provided in the first information processing apparatus.

42. An information management method according to claim 37, wherein the second recording medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

43. An information management method according to claim 37, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

44. An information management method according to claim 37, further comprising:

authenticating the information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not properly authenticated.

45. An information management method according to claim 37, further comprising:

comparing the information to an expected information using at least one of a password and the authorization medium, wherein the copying is refused if the information is not the expected information.

47. An information management method according to claim 46, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, an optical recording card and an impression transfer card.

48. An information management method according to claim 46, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

49. An information management method according to claim 46, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

50. An information management method according to claim 46, further comprising:

authenticating the copy permitting information using at least one of a password and the authorization medium, wherein the copying is refused if the copy permitting information is not properly authenticated.

51. An information management method according to claim 46, further comprising:

comparing the copy permitting information to an expected copy permitting information using at least one of a password and the authorization medium, wherein the copying is refused if the copy permitting information is not the expected copy permitting information.

27. An information management method, comprising:

setting, to a authorization medium, by a first information processing apparatus, an information permitting a copy of a data stored in a first recording medium provided in a second information processing apparatus to a second recording medium; and

copying, with the second information processing apparatus, the data stored on the first recording medium, to the second recording medium, when the information permitting a copy can be read from the authorization medium.

37. An information management method, comprising:

having a first information processing apparatus set to a second recording medium an information permitting the use of a data recorded in a first recording medium with a second information apparatus when the data is read with the second information processing apparatus.

46. An information management method, comprising:

setting, using a first information processing apparatus, to an authorization medium, a copy permitting information of a data recorded in a first recording medium provided in a second information processing apparatus to a second recording medium and an information permitting a use of the data copied to the second recording medium by a third information processing apparatus;

copying, using the second information processing apparatus, the data to the second recording medium from the first recording medium when the second information processing apparatus can read the copy permitting information from the authorization medium; and

enabling the third information processing apparatus to use the data recorded in the second recording medium when the third information processing apparatus can read the data application permitting information from the authorization medium.

52. An information management method, comprising:

copying a data recorded in a first recording medium provided in a first information processing apparatus to a second recording medium;

writing back, using a second information processing apparatus, to the second recording medium, an updated data updated by processing the data recorded in the second recording medium;

reading, using the first information processing apparatus, when executing the process to write back the data written back by the second recording medium to the first recording medium, an identification information of an original information processing apparatus in which the data existed from a authorization medium; and

permitting the write-back process of the data when the first information processing apparatus is identified and refusing the write-back process of data when a first information processing apparatus cannot be identified and/or the identification information cannot be read.

53. An information management method according to claim 52, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

54. An information management method according to claim 52, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

55. An information management method according to claim 52, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

56. An information management method according to claim 52, further comprising:

authenticating the identification information using at least one of a password and the authorization medium, wherein the copying is refused if the identification information is not properly authenticated.

57. An information management method according to claim 52, further comprising:

comparing the identification information to an expected identification information using at least one of a password and the authorization medium, wherein the copying is refused if the identification information is not the expected identification information.

59. An electronic storage medium according to claim 58, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

60. An electronic storage medium according to claim 58, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

61. An electronic storage medium according to claim 58, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

62. An information management method according to claim 58, further comprising:

authenticating the copy permitting information using at least one of a password and the authorization medium, wherein the copying is refused if the copy permitting information is not properly authenticated.

63. An information management method according to claim 58, further comprising:

comparing the copy permitting information to an expected copy permitting information using at least one of a password and the authorization medium, wherein the copying is refused if the copy permitting information is not the expected copy permitting information.

58. An electronic storage medium containing a program embodying an information management method, comprising:

accessing a authorization medium when an instruction to copy a data recorded in a first recording medium provided in the information processing apparatus to a second recording medium is inputted; and

executing the instruction to copy when the apparatus can read a copy permitting information permitting the copy from the first recording medium or the authorization medium and refusing the instruction to copy when the apparatus cannot read the copy permitting information.

64. An electronic storage medium containing a program embodying an information management method, comprising:

accessing a authorization medium before reading and using a data recorded in a first recording medium; and

permitting the use of the data when the apparatus can read, from the authorization medium, an information permitting the use of data in the first recording medium or refusing the use of the data when the information processing apparatus cannot read the information permitting the use of data.

65. An electronic storage medium according to claim 64, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, an optical recording card and an impression transfer card.

66. An electronic storage medium according to claim 64, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

67. An information management method according to claim 64, further comprising:

authenticating the information permitting the use of data using at least one of a password and the authorization medium, wherein the copying is refused if the information permitting the use of data is not properly authenticated.

68. An information management method according to claim 64, further comprising:

comparing the information permitting the use of data to an expected information permitting the use of data using at least one of a password and the authorization medium, wherein the copying is refused if the information permitting the use of data is not the expected information permitting the use of data.

70. An electronic storage medium according to claim 69, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

71. An electronic storage medium according to claim 69, wherein the second recording medium is at least one of a floppy disk, a compact disk, a digital video disk, a removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

72. An electronic storage medium according to claim 69, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.

69. An electronic storage medium containing a program embodying an information management method, comprising:

recording at least one process to a authorization medium, including a security information about permitting a copy of a data stored on a first recording medium inserted in a second information processing apparatus to a second recording medium when the information is read with the second information processing apparatus.

73. An electronic storage medium containing a program embodying an information management method, comprising:

recording at least one process to a authorization medium, including a security information for permitting a use of a data recorded on a first recording medium by a second information processing apparatus when the security information is read with the second information processing apparatus.

74. An electronic storage medium according to claim 73, wherein the authorization medium is at least one of an integrated circuit card, a proximity card, a data card, a optical recording card and an impression transfer card.

75. An electronic storage medium according to claim 73, wherein the first recording medium is at least one of a hard drive, a network drive, a floppy disk, a compact disk, a digital video disk, a non-removable hard drive, a zip disk, an optical recording disk and an electronic memory device.