COMMUNICATION CONTROL DEVICE, DATA SECURITY SYSTEM, COMMUNICATION CONTROL METHOD, AND COMPUTER PRODUCT

• US 20160132689A1
• Filed: 12/29/2015
• Published: 05/12/2016
• Est. Priority Date: 07/24/2008
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: NIMURA, Kazuaki, NAKAMURA, Yousuke, YASAKI, Kouichi, HONDA, Fumio
• Granted Patent: US 11,651,094 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 1/3293 by switching to a less power-consuming processor, e.g. sub-CPU
• CPC Class Codes: G06F 1/3296 by lowering the supply or operating voltage
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A communication control device configured to access an information processing apparatus in which data is stored. The device and method acquires an operational condition of an information processing apparatus, and notifies the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data in an event that an operational condition is activated and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and notifies of a security command for causing the information processing apparatus to execute a security process on the data.

Claims

1. A communication control device configured to access an information processing apparatus in which data is stored, comprising:

a memory, and

a processor coupled to the memory and configured to;

acquire an operational mode of the information processing apparatus according to an instruction to perform a security process to the information processing apparatus, the security process including deletion of at least a portion of the data stored in the information processing apparatus;

determine that the acquired operational mode indicates that the information processing apparatus is in one of a standby mode, a hibernate mode, or a shutdown mode;

transmit an activation command to the information processing apparatus to activate the information processing apparatus when the acquired operational mode indicates that the information processing apparatus is in one of the standby mode, the hibernate mode, or the shutdown mode; and

transmit a security command to the information processing apparatus to cause the information processing apparatus to execute the security process on the data.

2. The communication control device according to claim 1, wherein

the security process implements the deletion of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

3. The communication control device according to claim 1, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the security process deletes the cipher key stored in the information processing apparatus.

4. The communication control device according to claim 1, wherein

the activation command activates one of a Basic Input/Output System (BIOS) or Extensible Firmware Interface (EFI) to execute the security process.

5. The communication control device according to claim 1, wherein the processor is further configured to:

store the security command and/or the activation command in the memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value; and

transmit the security command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

6. The communication control device according to claim 5, further comprising:

a power source circuit configured to supply power to the communication control device; and

a power source switch configured to supply power to the communication control device by switching to either a power supply received from the information processing apparatus, or a power supply received from the power source circuit;

wherein the processor is further configured to issue, in the event that the residual power acquired from the information processing apparatus is equal to or less than the given value, an instruction to the power source switch to switch to the power supply received from the power source circuit.

7. A communication control method for executing processing by a communication control device configured to access an information processing apparatus in which data is stored, comprising:

acquiring, by the communication control device, an operational mode of the information processing apparatus according to an instruction to perform a security process to the information processing apparatus, the security process including deletion of at least a portion of the data stored in the information processing apparatus;

determining, by the communication control device, that the acquired operational mode indicates that the information processing apparatus is in one of a standby mode, a hibernate mode, or a shutdown mode;

transmitting, by the communication control device, an activation command to the information processing apparatus to activate the information processing apparatus when the acquired operational mode indicates that the information processing apparatus is in one of the standby mode, the hibernate mode, or the shutdown mode; and

transmitting, by the communication control device, a security command to the information processing apparatus to cause the information processing apparatus to execute the security process on the data.

8. The method according to claim 7, wherein

the security process implements the deletion of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

9. The method according to claim 8, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the security process deletes the cipher key stored in the information processing apparatus.

10. The method according to claim 7, wherein

the activation command activates one of a Basic Input/Output System (BIOS) or Extensible Firmware Interface (FEI) to execute the security process.

11. The method according to claim 7, further comprising:

storing the security command and/or the activation command in the memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value; and

transmitting, by the communication control device, the security command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

12. The method according to claim 11, further comprising:

controlling, by the communication control device, a power source switch to switch a power supply provided for the communication control device from the information processing apparatus to a power source circuit which supplies power to the communication control device in a case that the residual power acquired from the information processing apparatus is equal to or less than the given value.

13. A non-transitory computer readable medium having stored therein a program that causes a communication control device to execute a process, the communication control device being configured to access an information processing apparatus in which data is stored, the process comprising:

acquiring an operational mode of the information processing apparatus according to an instruction to perform a security process to the information processing apparatus, the security process including deletion of at least a portion of the data stored in the information processing apparatus;

determining that the acquired operational mode indicates that the information processing apparatus is in one of a standby mode, a hibernate mode, or a shutdown mode;

transmitting an activation command to the information processing apparatus to activate the information processing apparatus when the acquired operational mode indicates that the information processing apparatus is in one of the standby mode, the hibernate mode, or the shutdown mode; and

transmitting a security command to the information processing apparatus to cause the information processing apparatus to execute the security process on the data.

14. The non-transitory computer readable medium according to claim 13, wherein the security process implements the deletion of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

15. The non-transitory computer readable medium according to claim 14, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the security process deletes the cipher key stored in the information processing apparatus.

16. The non-transitory computer readable medium according to claim 13, wherein

the activation command activates one of a Basic Input/Output System (BIOS) or Extensible Firmware Interface (FEI) to execute the security process.

17. The non-transitory computer readable medium according to claim 13, wherein the process further comprising:

storing the security command and/or the activation command in a memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value, and

transmitting the security command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

18. The non-transitory computer readable medium according to claim 17, wherein the process further comprising:

controlling a power source switch to switch a power supply provided for the communication control device from the information processing apparatus to a power source circuit which supplies power to the communication control device in a case that the residual power acquired from the information processing apparatus is equal to or less than the given value.