COMMUNICATION CONTROL DEVICE, DATA SECURITY SYSTEM, COMMUNICATION CONTROL METHOD, AND COMPUTER PRODUCT

• US 20100024040A1
• Filed: 07/09/2009
• Published: 01/28/2010
• Est. Priority Date: 07/24/2008
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yasaki, Kouichi, NIMURA, Kazuaki, Nakamura, Yousuke, Honda, Fumio
• Granted Patent: US 9,262,650 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 1/3293 by switching to a less power-consuming processor, e.g. sub-CPU
• CPC Class Codes: G06F 1/3296 by lowering the supply or operating voltage
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A communication control device configured to access an information processing apparatus in which data is stored. The device and method acquires an operational condition of an information processing apparatus, and notifies the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data in an event that an operational condition is activated and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and notifies of a security command for causing the information processing apparatus to execute a security process on the data.

Claims

1. A communication control device configured to access an information processing apparatus in which data is stored, comprising:

an operational condition acquisition section which acquires an operational condition of the information processing apparatus; and

a command notification section which, in an event that the operational condition is an activated condition, notifies the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and of the security command for causing the information processing apparatus to execute the security process on the data.

9. The communication control device according to claim 1, further comprising:

a determination section which, in an event that a residual power acquired from the information processing apparatus is of a given value or less, records the security command and/or the activation command in a recording section, and in an event that the residual power exceeds the given value, outputs the security command and/or the activation command to the command notification section.

10. The communication control device according to claim 9, further comprising:

a power source section capable of supplying power to the communication control device; and

a power source switching section which supplies power to the communication control device by switching to either a power supply received from the information processing apparatus, or a power supply received from the power source section,

wherein the determination section, in the event that the residual power acquired from the information processing apparatus is of the given value or less, issues an instruction to the power source switching section to switch to the power supply received from the power source section.

2. A data security system having an information processing apparatus in which data is stored, and a communication control device configured to access the information processing apparatus, comprising:

wherein the communication control device includes;

an operational condition acquisition section which acquires an operational condition of the information processing apparatus; and

a command notification section which, in an event that the operational condition is an activated condition, notifies the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and of a security command for causing the information processing apparatus to execute a security process on the data, and

wherein the information processing apparatus, in an event of receiving the security command notified of by the command notification section, executes the security process on the data, and in the event of receiving the activation command and the security command notified of by the command notification section, activates the information processing apparatus, and executes the security process on the data.

3. The data security system according to claim 2, wherein the information processing apparatus includes a first ID recording section in which first ID is recorded, the communication control device includes a second ID recording section in which second ID is recorded, and

the information processing apparatus includes a legitimacy confirmation section which determines, by comparing the first ID recorded in the first ID recording section and the second ID recorded in the second ID recording section, whether or not the ID match each other and, in an event of determining that the ID do not match each other, discards the command notified of by the command notification section.

4. The data security system according to claim 2, wherein the security process is a process which deletes the data stored in the information processing apparatus,

the communication control device includes a deletion range recording section which correlates and records the operational condition of the information processing apparatus and a deletion range of the data, and

the information processing apparatus, in the event of receiving the security command notified of by the command notification section, deletes data within the deletion range correlated to the operational condition of the information processing apparatus acquired by the operational condition acquisition section, by referring to the deletion range recording section.

5. The data security system according to claim 4, wherein the information processing apparatus includes an encoding execution section which, by using a cipher key, encodes the data stored in the information processing apparatus,

the encoding execution section records the cipher key used in the encoding of the data in a cipher key recording section included in the communication control device, and

the communication control device includes a cipher key deletion section which, by referring to the deletion range recording section, deletes the cipher key recorded in the cipher key recording section in the event that the data deletion range correlated to the operational condition of the information processing apparatus acquired by the operational condition acquisition section indicates the cipher key recorded in the cipher key recording section.

11. The data security system according to claim 2,

wherein the information processing apparatus includes:

a power source section capable of supplying power to the information processing apparatus; and

a residual power acquisition section which acquires a residual power from the power source section, and

wherein the communication control device includes;

a determination section which, in an event that a residual power acquired from the residual power acquisition section of the information processing apparatus is of a given value or less, records the security command and/or the activation command in a recording section, and in the event that the residual power exceeds the given value, outputs the security command and/or the activation command to the command notification section.

12. The data security system according to claim 11,

wherein the information processing apparatus includes:

a power supply section which carries out a supply of power to the communication control device, and

the communication control device includes;

a power source section capable of supplying power to the communication control device; and

a power source switching section which supplies power to the communication control device by switching to either a power supply received from the information processing apparatus, or a power supply received from the power source section, and

wherein the determination section, in the event that the residual power acquired from the residual power acquisition section of the information processing apparatus is of the given value or less, issues an instruction to the power source switching section to switch to the power supply received from the power source section.

6. A communication control method for executing processing by a communication control device configured to access an information processing apparatus in which data is stored, comprising:

acquiring an operational condition of the information processing apparatus by the communication control device; and

notifying, in an event that the operational condition is an activated condition, the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data and, in the event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and of the security command for causing the information processing apparatus to execute the security process on the data.

7. A computer readable storage medium having a program causing a communication control device configured to access an information processing apparatus in which data is stored to execute processing, the program causing the information processing apparatus to execute a processing comprising:

acquiring an operational condition of the information processing apparatus;

notifying, in an event that the operational condition is an activated condition, the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data; and

notifying, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, the information processing apparatus of an activation command for activating the information processing apparatus, and of the security command for causing the information processing apparatus to execute the security process on the data.

13. A computer readable storage medium according to claim 7, wherein the program causes the information processing apparatus to execute the processing of:

recording, in an event that a residual power acquired from the information processing apparatus is of a given value or less, the security command and/or the activation command in a recording section, and

notifying, in an event that the residual power exceeds the given value, the information processing apparatus of the security command and/or the activation command.

8. An information processing apparatus configured to communicate with a communication control device, comprising:

an operational condition acquisition section which, on receiving a given signal from the communication control device, acquires an operational condition of the information processing apparatus; and

a command control section which, in an event that the operational condition is an activated condition, causes the information processing apparatus to execute a security process on data and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, causes the information processing apparatus to execute an activation command for activating the information processing apparatus, and to execute the security process on the data.