INFORMATION PROCESSING SYSTEM AND CONTROL METHOD OF INFORMATION PROCESSING SYSTEM

• US 20150143114A1
• Filed: 10/24/2014
• Published: 05/21/2015
• Est. Priority Date: 11/15/2013
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Chujo, Yoshihisa, HASHIMOTO, Tsuyoshi
• Granted Patent: US 9,514,315 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30

Abstract

A first information processing device holds data and a key for encryption. A second information processing device does not have rights to share data not encrypted with the first information processing device and a client. The first information processing device transmits data and key to the client when receiving a request to use the data. The first information processing device generates first encrypted data encrypted with the key, and transmits it to the second information processing device. The client transmits information obtained by encrypting the result of processing on the data with the key to the second information processing device until the use of the data ends. The first information processing device acquires second encrypted data received by the second information processing device from the second information processing device, and decrypts and stores it when notified that the use of the data has ended.

Claims

1. An information processing system comprising:

a first information processing device that holds data and a key used to encrypt the data;

a client device that uses the data; and

a second information processing device that does not have the right to share data that is not encrypted with the first information processing device and the client, wherein

the first information processing device;

transmits the data and the key to a client device upon receipt of a request to use the data from the client device; and

generates first encrypted data, which is the data encrypted with the key, and transmits the first encrypted data to the second information processing device,

the client device transmits information obtained by encrypting the result of processing on the data with the key to the second information processing device until the use of the data ends, and

the first information processing device acquires second encrypted data, which is the most recent information that the second information processing device has received from the client device, from the second information processing device, and decrypts and stores the second encrypted data when notified by the client device that the use of the data has ended.

2. The information processing system according to claim 1, further comprising a third information processing device having the right to share data that is not encrypted with the first information processing device and the client device, wherein

upon receipt of a request to use the data from the client device, the first information processing device:

specifies one of the second information processing device and the third information processing device, whichever has a lighter load, as a communication target, which will be the information processing device that the client device communicates with until the use of the data ends; and

notifies the client device of identification information of the communication target, and

the client device;

in a case where the received identification information of the communication target is identification information of the second information processing device, transmits information obtained by encrypting the result of processing on the data with the key to the second information processing device until the use of the data ends; and

in a case where the received identification information of the communication target is identification information of the third information processing device, transmits data of the result of processing on the data to the third information processing device until the use of the data ends.

3. The information processing system according to claim 2, wherein

the client device has identification information of a device having the right to share data that is not encrypted, and

the client device determines that the third information processing device has been specified as the communication target in a case where the received identification information of the communication target is identification information of the device having the right to share data that is not encrypted.

4. A control method of an information processing system comprising:

a first information processing device that holds data and a key used to encrypt the data;

a client device that uses the data; and

a second information processing device not having the right to share data that is not encrypted with the first information processing device and the client device, wherein

the first information processing device;

transmits the data and the key to a client device upon receipt of a request to use the data from the client device; and

generates first encrypted data, which is the data encrypted with the key, and transmits the first encrypted data to the second information processing device,

the client device transmits information obtained by encrypting the result of processing on the data with the key to the second information processing device until the use of the data ends, and

the first information processing device acquires second encrypted data, which is the most recent information that the second information processing device has received from the client device, from the second information processing device, and decrypts and stores the second encrypted data when notified by the client device that the use of the data has ended.

5. The control method of an information processing system according to claim 4, wherein

the information processing system further comprises a third information processing device having the right to share data that is not encrypted with the first information processing device and the client device,

upon receipt of a request to use the data from the client device, the first information processing device:

specifies one of the second information processing device and the third information processing device, whichever has a lighter load, as a communication target, which will be the information processing device that the client device communicates with, until the use of the data ends; and

notifies the client device of identification information of the communication target, and

the client device;

in a case where the received identification information of the communication target is identification information of the second information processing device, transmits information obtained by encrypting the result of processing on the data with the key to the second information processing device until the use of the data ends; and

in a case where the received identification information of the communication target is identification information of the third information processing device, transmits the data of the result of processing on the data to the third information processing device until the use of the data ends.

6. The control method of an information processing system according to claim 5, wherein

the client device has identification information of a device having the right to share data that is not encrypted, and

the client device determines that the third information processing device has been specified as the communication target in a case where the received identification information of the communication target is identification information of the device having the right to share data that is not encrypted.

7. A computer-readable recording medium having stored therein a control program for causing an information processing device to perform a process comprising:

receiving a request to use data from a first device;

transmitting the data and a key used to encrypt the data to a client device;

generating first encrypted data, which is the data encrypted with the key;

transmitting the first encrypted data to a second device not having the right to share the data; and

acquiring second encrypted data, which is the most recent information of the information transmitted to the second device, as information that is the result of processing on the data encrypted with the key, and decrypt and store the second encrypted data until the first device ends the use of the data when notified by the client device that the use of the data has ended.