Information management system, control method thereof, information management server and program for same

• US 20050193250A1
• Filed: 02/04/2004
• Published: 09/01/2005
• Est. Priority Date: 12/25/2003
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Morita, Akira, Takeuchi, Keisuke
• Granted Patent: US 7,200,616 B2
• Time in Patent Office: Days
• US Class Current: 714/15
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

An information management system to simplify the calculation of risk values and information asset risk management, based on both information on asset values and access to information. The information management system is composed of a storage device to store information containing asset values, a file access information report section for monitoring access to information stored in that storage device, a file attribute information management section to manage information on file attributes stored in that storage device, a risk value processor to calculate risk values of the applicable information based on attribute information managed by said file attribute information management section and based on monitoring results from the file access information report section, and a corrective action initiator to take measures to correct leaks of applicable information based on results calculated by the risk value processor.

Claims

1. An information management system comprising:

a storage device for storing information containing asset values;

a file access information report section for monitoring access to information stored in said storage device;

a file attribute information management section for managing information on file attributes stored in said storage device;

a risk value processor for calculating risk values of said information based on attribute information managed by said file attribute information management section and said monitoring results from said file access information report section; and

a corrective action initiator for taking measures to correct leaks of said information based on results calculated by said risk value processor.

2. An information management system according to claim 1, wherein said risk value processor calculates the risk value of the information based on results monitored by said file access information report section, and on fluctuations in said risk value, and fluctuations over the passage of time in the asset values that are attribute information monitored by said file attribute information management section;

and

wherein said corrective action initiator evaluates said risk by utilizing said calculated risk values.

3. An information management system, comprising:

a storage device for storing information containing asset values;

a packet capturing section for capturing packets input and output to said storage device;

a packet analysis section for analyzing packets captured by said packet capturing section;

a file information acquisition section for managing attribute information among information stored in said storage section;

a risk value processor for calculating risk value information based on attribute information managed by said file information acquisition section, and by results analyzed by said packet analysis section; and

a corrective action initiator for implementing corrective action to correct leakage of said information based on results calculated by said risk processor.

4. An information management server connected to a file server, which comprises a storage device for storing information containing asset values, a file access information report section for monitoring access to information stored in said storage device, and a file attribute information management section for managing information on file attributes stored in said storage device, said server further comprising:

a file access information acquisition section for collecting monitoring results collected by said file access information report section;

a risk value processor for calculating risk value information based on attribute information managed by said file attribute information management section, and based on monitoring results collected by said file information acquisition section; and

a corrective action initiator for taking measures to correct leaks of said information based on results calculated by said risk value processor.

7. An information management server according to claim 4, comprising:

a risk value history storage section for storing risk value information calculated by said risk value processor; and

a management information processor for calculating changes accompanying the passage of time in said risk value information by using past risk value information acquired from said risk value history storage section, and reporting said calculated changes to the administrator.

5. An information management server comprising:

a storage device for storing information containing asset values;

a file access information report section for monitoring access to information stored in said storage device;

a file attribute information management section for managing information on file attributes stored in said storage device;

a file access information acquisition section for collecting monitoring results collected by said file access information report section;

a risk value processor for calculating risk value information based on attribute information managed by said file attribute information management section, and based on monitoring results collected by said file access information report section; and

a corrective action initiator for taking measures to correct leaks of said information based on results calculated by said risk value processor.

6. An information management server connected to a file server, which comprises a storage device for storing information containing asset values, said server further comprising:

a packet capturing section for capturing packets input and output to said storage device;

a packet analysis section for analyzing packets captured by said packet capturing section;

a file information acquisition section for collecting attribute information among information stored in said storage section;

a risk value processor for calculating risk value information based on attribute information collected by said file information acquisition section, and results analyzed by said packet analysis section; and

a corrective action initiator for implementing corrective action to correct leakage of said information based on results calculated by said risk processor.

8. An information management system control method, said system having a storage device for storing information containing asset values, comprising:

monitoring access to information stored in said storage device;

managing attribute information among information stored in said storage device;

calculating the risk value of said information based on results from monitoring access to said information, and said managed attribute information; and

performing corrective action to correct leakage of said information based on results calculated by said risk value processor.

9. An information management system control method, said system having a storage device for storing information containing asset values, comprising:

analyzing the packet for input and output to said storage device;

managing attribute information among information stored in said storage device;

calculating the risk value of said information based on results from analyzing said packet, and said managed attribute information; and

performing corrective action to correct leakage of said information based on results calculated by said risk value processor.

10. A program for implementing functions of an information management system containing a storage device for storing information containing asset values, with said control method comprising:

a means to monitor access to information stored in said storage device;

a means for managing attribute information among information stored in said storage device;

a means for calculating the risk value of said information based on results from monitoring access to said information, and said managed attribute information; and

a means for performing corrective action to correct leaks of said information based on results calculated by said risk value processor.

11. A program for implementing functions of an information management system containing a storage device for storing information containing asset values, with said control method comprising:

a means to analyze the packet for input and output to said storage device, and a means for managing attribute information among information stored in said storage device;

a means for calculating the risk value of said information based on results from analyzing said packet, and said managed attribute information; and

a means for performing corrective action to correct leaks of said information based on results calculated by said risk value processor.