Access control method, storage apparatus and information processing apparatus

• US 20030144959A1
• Filed: 07/16/2002
• Published: 07/31/2003
• Est. Priority Date: 01/31/2002
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Makita, Satoshi
• Application Number:
  US10/196,591
• Publication Number:
  US 20030144959A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00

Abstract

An access control method controls access from an information processing apparatus which is connectable to a device requiring a first password authentication to a storage medium which requires a second password authentication. The access control method automatically generates a password based on key information read from the device, when an authentication result of a password input to the information processing apparatus and a first password read from the device is correct, and enables access to the storage medium when an authentication result of the generated password and a second password read from the storage medium is correct.

Claims

1. An access control method for controlling access from an information processing apparatus which is connectable to a device requiring a first password authentication to a storage medium which requires a second password authentication, comprising:

a password generating step which automatically generates a password based on key information read from the device, when an authentication result of a password input to the information processing apparatus and a first password read from the device is correct; and

an access control step which enables access to the storage medium when an authentication result of the generated password and a second password read from the storage medium is correct.

2. The access control method as claimed in claim 1, wherein key information common to a group of users authorized to access the same storage medium is stored in the device which is accessible by each of the users belonging to the group.

3. The access control method as claimed in claim 1, wherein:

the storage medium is loaded into a storage apparatus which is connectable to the information processing apparatus;

said access control method further comprises;

an enciphering step which enciphers the generated password within the information processing apparatus based on an enciphering key read from the device, and transfers the enciphered password to the storage apparatus; and

said access control step deciphers the enciphered password based on an enciphering key read from the storage medium, and enables access to the storage medium when an authentication result of the deciphered password and the second password read from the storage medium is correct within the storage apparatus.

4. The access control method as claimed in claim 3, further comprising:

a first recording step which transfers the enciphering key from the information processing apparatus to the storage apparatus and records the enciphering key in the storage medium; and

a second recording step which deciphers the enciphered password transferred by said enciphering step into the second password within the storage apparatus, based on the enciphering key reproduced from the storage medium, and records the second password in the storage medium,

said first and second recording steps being carried out when setting the second password with respect to the storage medium.

5. A storage apparatus loadable with a storage medium which is accessible from an information processing apparatus which is connectable to a device requiring a first password authentication, said storage medium requiring a second password authentication, said storage apparatus comprising:

a receiving section which receives from the information processing apparatus a password which is generated when an authentication result of a password input to the information processing apparatus and the first password read from the device is correct, and is enciphered using an enciphering key which is generated based on key information from the device and read from the device; and

an access control section which enables access from the information processing apparatus to the storage medium when an authentication result of the enciphered password which is deciphered based on an enciphering key read from the storage medium and the second password read from the storage medium is correct.

6. The storage apparatus as claimed in claim 5, wherein key information common to a group of users authorized to access the same storage medium is stored in the device which is accessible by each of the users belonging to the group.

7. An information processing apparatus which is connectable to a device requiring a first password authentication and accesses a storage medium requiring a second password authentication, comprising:

a password generating section which automatically generates a password based on key information read from the device, when an authentication result of an input password and a first password read from the device is correct; and

an access control section which enables access to the storage medium when an authentication result of the generated password and a second password read from the storage medium is correct.

8. The information processing apparatus as claimed in claim 7, wherein key information common to a group of users authorized to access the same storage medium is stored in the device which is accessible by each of the users belonging to the group.

9. The information processing apparatus as claimed in claim 7, wherein:

the storage medium is loaded into a storage apparatus which is connectable to the information processing apparatus;

said information processing apparatus further comprises;

an enciphering section which enciphers the generated password based on an enciphering key read from the device, and transfers the enciphered password to the storage apparatus; and

said access control section deciphers the enciphered password based on an enciphering key read from the storage medium, and enables access to the storage medium when an authentication result of the deciphered password and the second password read from the storage medium is correct within the storage apparatus.

10. The information processing apparatus as claimed in claim 9, further comprising:

a first recording section which transfers the enciphering key from the information processing apparatus to the storage apparatus and records the enciphering key in the storage medium; and

a second recording section which deciphers the enciphered password transferred by said enciphering section into the second password within the storage apparatus, based on the enciphering key reproduced from the storage medium, and records the second password in the storage medium,

said first and second recording sections carrying recording operations when setting the second password with respect to the storage medium.